last executing test programs: 17.795875557s ago: executing program 0 (id=2726): r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async, rerun: 64) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r2, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x24048850}, 0x8010) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004500090000000000000000000300000008000200", @ANYRES8=r0], 0x1c}}, 0x0) 17.776778809s ago: executing program 4 (id=2727): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x9, 0x4ca31, r0, 0x68d39000) 17.581508039s ago: executing program 4 (id=2729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) close(r0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffb0900030073797a32000000000900010073797a300000000008000a400000000420000000080a01080000000000000000010000000900010073797a30"], 0x9c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000ffff28b2700000dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a030029960500240012800b00010067656e65766500001400028008000200ac1414aa08000200e0"], 0x44}, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100000000372500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x2, &(0x7f00000002c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x1d, &(0x7f0000000100)=""/29, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x7}, 0x8, 0x10, 0x0, 0x0, 0x112ea, r3, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x2, &(0x7f00000002c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x1d, &(0x7f0000000100)=""/29, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x7}, 0x8, 0x10, 0x0, 0x0, 0x112ea, r3, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c00098008000140000000010800084000000001140000001100010000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 17.581167875s ago: executing program 0 (id=2730): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}}, 0xf0}}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000000800074000000003"], 0x104}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) r4 = socket$l2tp(0x2, 0x2, 0x73) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0xffffffffffffff6e) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14dd0e00", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf2512000000"], 0x14}}, 0x4040800) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601fcff00000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) 17.523045084s ago: executing program 2 (id=2732): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'pim6reg0\x00', {}, {}, 0x6, 0x1, 0x9}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'ipvlan0\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x6, 0x4, 0x3, 0x2], 0x2, 0x1}, {0xffffffffffffffff, [0x5, 0x6, 0x6, 0x6, 0x4, 0x1], 0x2, 0x3}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa7482fd, 0x8, 0x25dfdc00, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xc8, 0x9, 0xa00}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}}]}, 0x3c}}, 0x20004090) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000002200)=0xc0100100) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYRESOCT=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 17.449489028s ago: executing program 4 (id=2733): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}}, 0xf0}}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000000800074000000003"], 0x104}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) r4 = socket$l2tp(0x2, 0x2, 0x73) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0xffffffffffffff6e) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14dd0e00", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf2512000000"], 0x14}}, 0x4040800) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601fcff00000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) 17.424485336s ago: executing program 2 (id=2735): r0 = socket$caif_seqpacket(0x25, 0x5, 0x5) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00', 0xfffffe00}}, 0x7, 0x62e1, 0xff, 0x3, 0x22, 0xffffff80}, &(0x7f0000000200)=0x9c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={r2, 0x80000001}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000002c0)={r2, 0xbad5, 0x20, 0x0, 0x12c0000000000000}, &(0x7f0000000300)=0x18) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000340), &(0x7f0000000380)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:klogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000003ac0)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000003bc0)=0xe8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003c00)=0x0) r8 = getgid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000003c40)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000003c80)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000003d80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003dc0)={0x0, 0x0, 0x0}, &(0x7f0000003e00)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003e40)={0x0}, &(0x7f0000003e80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, &(0x7f0000003f00)=0xc) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000004580)=0x0) r15 = openat$cgroup_freezer_state(r1, &(0x7f00000045c0), 0x2, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000004600)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000004640)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private1}}, &(0x7f0000004740)=0xe8) sendmmsg$unix(r1, &(0x7f0000004800)=[{{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000000600)="d87e911014fd71579ac87b649e76f7aa8d1c4f1d6741a9d5a00e82a7b2b4eabc4ee2ee906a7fb9ff2383de3d18084f9be2e1070f0832669d80151be2b4bc0f0f083b5f6c58914694ee9424bd8abb181d301b0e62c92d9ca4e080a424000384f55ba69dc81ff43e3fd01da97b66a6bffc40fb0a9fceccf163de391324e99ea902148f17d42c437218348c1446badfebc10d43b2d60582c86f0a", 0x99}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="b598e826aa199a38579009c36e85ece940d068b15361cb01910b2d1d2833f735e2a2bbfb4fce9a97e753f045ff2edf5486d7d0d66fb8e3bbc216655744ce86c1ef08260ebc6453d5fd3df928e34bd48317564f663a8f258edb57bfd25c821d077fda5ee4f6dc46817a5c1ac16d377ecd69b5f4d011d70e8ccae917793bcfa53da35a571ef9ac6a01cd8038fe00f85a1e5972d6d6c82a464f644caf1a32883f80aa04a3d64d206d821f449197985a279cde0c871b6a40387eacb49363a457181963732144334f94cfd5faee4b8af6c380519ec9c122080bf5055ed6e75317ff26cc1d1b", 0xe3}, {&(0x7f00000017c0)="edcc39117cb539cd1534990a6213371eb24eb0d8a280d624a6eccbfd5d390b4f50ffcc24de553021b13c1620283fa30b4e5de860b387c4e4", 0x38}, {&(0x7f0000001800)="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", 0x1000}], 0x5, 0x0, 0x0, 0x24048091}}, {{&(0x7f0000002880)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003a80)=[{&(0x7f0000002900)="8365a5e2b1d98f2861d96d20eb04fee1c6e7969de80b5959262654f859198d953a259a5fbf4af109431c1ec9b80180321990908f9d529189952f5e62dc0de729c6599f3dd2069df46586fb819ec0d8a3be08ff8983794916b8d5a72835083da62b8bd930f21fc1", 0x67}, {&(0x7f0000002980)="f18fdf46b2ea14a90d93c7bef0a4d195e9a24eb176916a16700277c1413dd7f23ad61c2e4646e1a549e3e565c3db7d32540d50efca6cf2fb3dfb507056f85dea492d96ca52f15f6a98dd346bcabe9f955046cd862d312fd333caf53974149de69703612d8e12067761ca72cce626d19baaa728b2b1a9dcb925c2a2f0b87e3da8143c5413f05005bc4d49ba61ffee981a42d2973b87822b9d2e54291e40ce56f452a6c686f7ca6930e453518fe072c184a3b0fba4aa64e3f8202045cba2480bf7db5322fc5860d53e93894b0d0948c9118d3c", 0xd2}, {&(0x7f0000002a80)="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", 0x1000}], 0x3, &(0x7f0000003f40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, r13}}}], 0x80, 0x4004010}}, {{&(0x7f0000003fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004500)=[{&(0x7f0000004040)="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", 0xfb}, {&(0x7f0000004140)="07e2084e75994bbd1304a48f80d9ed268198c2276e93383cfdca2a83392e8e6b81ea2d40810605d72ed96e1918b4baf0554ab090f04b7a4f97d5d43717002ce4db46e5b1dacfe76c5dabf45e33f40cfedd3d4899cf911af5dd028ed85fb2b3930f9f860afa0a0e15141ee2acbc9ab974ac336f71820809458f7a71d3fa908bf0de745890409f80be681341af85b204d26e8a13e4aed20957b76bbf57f9b59f61c0ddd04e2d0887b8c2ca14d398f4046d48d95239ca58f05c125a746ae95ecc6c23ac688be872b7c3181b7ac123c52f", 0xcf}, {&(0x7f0000004240)="d78811e14e7df8763830af43d9b49f37f08c375782584d0e65bb21315113ebfb2667f01b59c9097e174b6a5966f2f0a839e2390f47ee0a8f22f5d605868fe9e339e7121665afcb6a450fdaf0418db73a8daede09e8059dbcc2ae02da3382dde7712ac7d3d74fbfc76fd6050ac268211d90463de623bc6299", 0x78}, {&(0x7f00000042c0)="08b514874f95a110baef7901a857a2a215b21bfa53aef6490eadc378a26ef750ee", 0x21}, {&(0x7f0000004300)="10e203d80acdc18c168f5223e0ea78925287f44fd41b58515b11c47877644f020e2dbc35ebd04c258b243916d5799815b069680b09ac82f47e1155179c25666c49196293428aea1627eb1f4e3acddb0f491cdcb937e2e3829e8a4555cf27c06a31f3c67f51a881a61efb24d0a0b8e82de1440392b1da43f9ca9a7ff29bd06657b4f13d4ef92f81e1609392efd0bbbfd6d394ceae543f2ebb7998331610598a1a1b0f7362d9a87e73dfb88989e7b7b1d816659542895b223af277ac4bbb96dd76c7b7b27c8361fe61c440c5d18f5fbf857663499e17029ffef4c6206eaef2234995", 0xe1}, {&(0x7f0000004400)}, {&(0x7f0000004440)="3a7f1f16dc4fd8bcf68f9e0b3b5c77027da638d87b903b33b3bc7b1d89814aaa8ea326a725df5a14200f50640adee2fb9bfb30a807ded040c343e37740ca24b32e259229c4a55c4095e7c0088c1d582ef819e9572d23d457d55e4939fa25fe898582577108cb2f3505f354146da2579f09f8d3a7ba08af790f7ebb9ee5c27d715ef47285d5e1bf0534c3c2346600101194e8ce81d6d572277341c5f2d69b0891aeb822933591", 0xa6}], 0x7, &(0x7f0000004780)=[@cred={{0x1c, 0x1, 0x2, {0x0, r14}}}, @rights={{0x24, 0x1, 0x1, [r5, r0, r15, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, 0xee01}}}], 0x68, 0x48014}}], 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000048c0)={'pim6reg\x00', 0x3}) recvmsg$can_raw(r1, &(0x7f0000004fc0)={&(0x7f0000004900)=@ax25={{}, [@rose, @bcast, @bcast, @null, @default, @netrom, @bcast, @bcast]}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004980)=""/152, 0x98}, {&(0x7f0000004a40)=""/135, 0x87}, {&(0x7f0000004b00)=""/66, 0x42}, {&(0x7f0000004b80)=""/115, 0x73}, {&(0x7f0000004c00)}, {&(0x7f0000004c40)=""/204, 0xcc}, {&(0x7f0000004d40)=""/234, 0xea}], 0x7, &(0x7f0000004ec0)=""/194, 0xc2}, 0x40000000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000005000)={r1}) ioctl$sock_inet_udp_SIOCINQ(r18, 0x541b, &(0x7f0000005040)) r19 = syz_genetlink_get_family_id$nfc(&(0x7f00000050c0), r3) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f00000052c0)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005280)={&(0x7f0000005200)={0x5c, r19, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}}, 0x20004000) 17.281597975s ago: executing program 2 (id=2737): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/96) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}, "060086dd04ffffff"}}}}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) sendmmsg(r4, &(0x7f00000000c0), 0x400000000000012, 0x20810) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$packet(r1, &(0x7f0000000240)="44c394f305916c4516999da20800529a1431619a3e807a7dbfbadc43dcb2ebac7e9a", 0x22, 0x0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x7f, 0x6, @multicast}, 0x14) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000180)=@hci={0x1f, 0x1, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)="024468f75872dcc35c4a865167ce141180f86d6d2d2b667592a3c33936463143e7bb6e42171be6f3bb2c71676866c351e658a3e643566881df0577a462feffaafa974e3e86995e3ae7dbd8b6bc88af335ebe083ced9a2b1f3b847103b7af298aabf2f341cf7c9d27d81972b94be151e7a3c9487c087f8a25000000000000", 0x7e}, {&(0x7f0000000bc0)="da653e6368ca3086947a7cd9f675fec207fa0522eb427678a26306d4d58e3174157055bad9d94baf2b8a476ed0798d84173e4d6a8c03e3ad87f36f69e2d254f2fc17dc5260b177829e93e8de0efe7be1837255949efb5d662b4b", 0x5a}], 0x2}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000380)) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [0xa10, 0x6, 0x101, 0x100000001, 0xf, 0x80000001]}, &(0x7f0000000180)=0x7b) socket$nl_route(0x10, 0x3, 0x0) 17.13290854s ago: executing program 1 (id=2742): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32) r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd23, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x3, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xfff3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async, rerun: 64) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet6(0xa, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="ad56b6c5820fae9d6dc232003044ad36b1a4421844acc3bfa12eaad605c804266a5e00000000000000", 0x29) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r11) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r12, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x0) r13 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r13, 0x89f0, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x20, 0x7800, 0x5, 0x6, {{0x5, 0x4, 0x3, 0x3e, 0x14, 0x64, 0x0, 0x80, 0x4, 0x0, @private=0xa010100, @broadcast}}}}) (async) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r15 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r14, 0x84, 0xa, &(0x7f0000000840)={0x24e, 0x8, 0x1, 0x5, 0x1, 0x4, 0xc, 0x7, r16}, 0x20) 17.112126358s ago: executing program 2 (id=2743): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="020904020200000029bd70005edbdf25"], 0x10}}, 0x20000c04) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f00000001c0)="586755cd2e5cd1c232a093f186c817630907d53b883e1b11e824e242f1d6151fd5c82e2988967ee4825df7384cd0c2d283b1bb1ccc49678ded539b0f2f76f84e225b20b8064ccb93001a564ab7594dbb625accc56c9c03000d914950e5335f0a386dde83ba77326ed2875173d170b298ea79") ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000400)=@ethtool_rxfh={0x51, 0x7}}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffc, 0x0, 0x300, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000100)={0xa, 0x800006, 0xfffffffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xf25) listen(r2, 0x20) shutdown(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1830000009000000a4dc49b4c96800000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90) 17.111859484s ago: executing program 3 (id=2744): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.self_freezing\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@loopback, 0x2000, 0x3c}, 0x2, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x53}, 0x2, 0x33}, 0x0, @in=@remote, 0x0, 0x1, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0xab7bb000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x2, 0x2, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0xa, 0x3, 0x8, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, 0x2a}, 0x94) 17.014809161s ago: executing program 3 (id=2745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fff, 0x35}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000040) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xfffe}, ','}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000002c0)={0x9f55, 0x5, 0x3, 0xfe7}, 0x8) sendmmsg$inet_sctp(r7, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000084000000000000001fc7"], 0x18, 0x48060}], 0x1, 0x200000d0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="060b8f0012baffd6c4e0efc7f1719c5c2c90f119feb89f5db87dffde4174c444ec168d80dc15bc3f6448e32921d0d2a95aa5dc5296127900"/69, @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000000000000941000000060018000007327564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x464, 0x400, 0x70bd2c, 0x25dfdbfd, "8c3ee2ba8bcf86", ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x200080c0}, 0x0) r9 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r9, &(0x7f0000001740)={&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001680)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000000580)=""/51, 0x33}, {&(0x7f00000005c0)=""/181, 0xb5}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x4, &(0x7f00000016c0)=""/65, 0x41}, 0x1003) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000017c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001780)={&(0x7f0000000440)={0x1c, r6, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84815}, 0x20000000) 16.945710779s ago: executing program 1 (id=2746): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000000000000fd07000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x2043fba) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 16.823625982s ago: executing program 1 (id=2747): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 16.790619306s ago: executing program 3 (id=2748): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1, 0x18}], 0x1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {&(0x7f00000004c0)="b70000000180", 0x6}, {&(0x7f00000003c0)="06000000750d08c4daf10a7742e39e31ceefb1fcd2e5bc3fc84150da0d1787cc10d211447da94cb715e462e27318612235a604082c42", 0x36}], 0x3) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000300)="390000001306000000010000004500000025000000190004000400ad000200000000000006040000000000f9313263b4ca1056143edce02ff363c429bde5c54c18ab734b18ddbc68599da9c85b79f9a0e925789025f38b26e173882ee044f8f17a6be8e706016cd0e708afddf26fdca983c6be16d0bdc4e292f6434a58e092d1d94f996526bef86d7cf8c5e277950a0e053730ac6badea8f49081b6cea814ae8f1b90b1b8a1341c900"/179, 0xb3}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x43, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000500), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)={r6}, 0x4) 16.713539462s ago: executing program 1 (id=2749): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0xf, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000500)="a9be9b2ff3a19d5a1204e5243d37d1fd2894c1ae880dc2316aaad5ad08944c7135eb837eff000000015863c051eb7b9b17be0e4fdd6560f3f2c2c00200000000000000d6037f91e8f4f08e90d5313fb91fbdc5acd212f782e3d66cedd6d8c8", 0x5f}], 0x6}}], 0x1, 0x24040074) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fedbdf254400000008000300", @ANYRES32=r9, @ANYBLOB="24002380060001006900000005001f000000050005000000"], 0x40}, 0x1, 0x0, 0x0, 0x8808}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 16.693927151s ago: executing program 0 (id=2750): r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8}, {0xe, 0x81}, {0x5}, {0x3, 0x2}]}]}}, &(0x7f0000000f40)=""/4079, 0x46, 0xfef, 0x6, 0x4}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="6000000001010300000000000000000002000003440001802c00018014"], 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0x90}, 0x1, 0x7}, 0x0) 16.583027159s ago: executing program 4 (id=2751): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, 0x1}, 0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01800000000000000000030202000900010053"], 0x20}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0x18, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r4, 0x2, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x18810) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="140804000000000008001b000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) r6 = socket(0x2, 0x80805, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) getsockopt$bt_hci(r6, 0x84, 0x70, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000016c0)='H', 0x1}], 0x1) 16.493710826s ago: executing program 0 (id=2752): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x6d23, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028"], 0x120}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000007914c0000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2a}, 0x94) 16.491164739s ago: executing program 1 (id=2753): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/96) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}, "060086dd04ffffff"}}}}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) sendmmsg(r4, &(0x7f00000000c0), 0x400000000000012, 0x20810) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$packet(r1, &(0x7f0000000240)="44c394f305916c4516999da20800529a1431619a3e807a7dbfbadc43dcb2ebac7e9a", 0x22, 0x0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x7f, 0x6, @multicast}, 0x14) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000180)=@hci={0x1f, 0x1, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)="024468f75872dcc35c4a865167ce141180f86d6d2d2b667592a3c33936463143e7bb6e42171be6f3bb2c71676866c351e658a3e643566881df0577a462feffaafa974e3e86995e3ae7dbd8b6bc88af335ebe083ced9a2b1f3b847103b7af298aabf2f341cf7c9d27d81972b94be151e7a3c9487c087f8a25000000000000", 0x7e}, {&(0x7f0000000bc0)="da653e6368ca3086947a7cd9f675fec207fa0522eb427678a26306d4d58e3174157055bad9d94baf2b8a476ed0798d84173e4d6a8c03e3ad87f36f69e2d254f2fc17dc5260b177829e93e8de0efe7be1837255949efb5d662b4b", 0x5a}], 0x2}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000380)) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [0xa10, 0x6, 0x101, 0x100000001, 0xf, 0x80000001]}, &(0x7f0000000180)=0x7b) socket$nl_route(0x10, 0x3, 0x0) 16.478587308s ago: executing program 3 (id=2754): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000500)=0x81, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48fe8000000000000000000000000000aafc0100000000000000000000000000014001071c4e2300080200000033000000000000000000000cb30bc9ca3ccc4b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x844) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48fe8000000000000000000000000000aafc0100000000000000000000000000014001071c4e2300080200000033000000000000000000000cb30bc9ca3ccc4b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x844) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000000640)=""/70, 0x46}, {&(0x7f00000006c0)=""/179, 0xb3}], 0x6, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000000640)=""/70, 0x46}, {&(0x7f00000006c0)=""/179, 0xb3}], 0x6, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x8000}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x8000}, 0x1c) listen(r0, 0xb) close(0x3) (async) close(0x3) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x2, 0x7, 0x84) (async) r4 = socket$kcm(0x2, 0x7, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000800)) close(0x3) r6 = socket(0x2, 0x80805, 0x0) close(0x3) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)}, &(0x7f0000000640)=0x10) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="20000000e77410f000000000000000000a0000000cca00800800220efce7b5388e521beb47ac1a95cfba200f9a619e33d2307a89414ce64a2442530cb79d7fdbd2d04d271b1e74cf3a68f797288117499901e8d9c3f05dc1c5c00d76", @ANYRESHEX], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x40004) socket$kcm(0x10, 0x2, 0x4) (async) r8 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={0x1, &(0x7f0000000280)="0dba96d43166141a79bcf28c555c57005e634804cc5ba16d2fe901fe265296338e7df7c4b7975856338c1bfb1017d930f39997268c6e13d32ff5970633ece6b76e7dbb3d25fdffa23d4ed1b1dbd3a1a22be64c2d1c65d04e4f9cc1e95512740308b2977e95f435ac8eaa2c6585d03a1ddb3f76cec6f583bad7424f89115bc688204bffc9d3b098140200dfe7012e36e579bd899249352fe0659646b56bcd02126ea39b031b5e07fe9de5633390bc7268409f9fe04832be15ba60abe403da54e6b1ff117010d52c3dff94bbc73b3921891954dba432d7597f44111e14cb", &(0x7f0000000380)=@buf="ecdee9d761461510fb2261ede008df65719f8368fe492f2feb653b719a6efb096563c5", 0x1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={0x1, &(0x7f0000000280)="0dba96d43166141a79bcf28c555c57005e634804cc5ba16d2fe901fe265296338e7df7c4b7975856338c1bfb1017d930f39997268c6e13d32ff5970633ece6b76e7dbb3d25fdffa23d4ed1b1dbd3a1a22be64c2d1c65d04e4f9cc1e95512740308b2977e95f435ac8eaa2c6585d03a1ddb3f76cec6f583bad7424f89115bc688204bffc9d3b098140200dfe7012e36e579bd899249352fe0659646b56bcd02126ea39b031b5e07fe9de5633390bc7268409f9fe04832be15ba60abe403da54e6b1ff117010d52c3dff94bbc73b3921891954dba432d7597f44111e14cb", &(0x7f0000000380)=@buf="ecdee9d761461510fb2261ede008df65719f8368fe492f2feb653b719a6efb096563c5", 0x1}, 0x20) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24060bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f00000000c0)="d557fc16674b56c0a96a733c232d6790c66e3da58f3c45685507d7f586ed7307525107c082de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067000000000000b17f2772d6dc49199c0a7c82f8d75e323a5e14f4737bef9574311f54167ebaafab89af388ff1a2ac18b448b1fe0f0381e091ea3a062d5d0c9a742f68", 0xeb}, {&(0x7f0000000600)="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", 0x1e3}, {&(0x7f00000008c0)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc4e7821bfe674456cbb090000000000000011e57750055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fcd833d521b95c3b04378ca1c60c63b51350009045628c7f71965", 0xac}, {&(0x7f0000001880)="1439ea", 0x3}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0) 16.429326025s ago: executing program 0 (id=2755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x220, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0xec, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x6980feeb4406e345}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b9f085f155a331c99afeb3dea49c6c1"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f07e65a409e701b9b7f66dad6bde3d61"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0xd8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "43e440e3e27eeeb802fad0d6350722e0"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xff85}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x68, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3e99dfac01251376}, @NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x220}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040080) (async) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x0) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r8}, 0x4) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r9, 0x1, 0x1, &(0x7f0000000440)={0x5}, 0x4) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 16.356547097s ago: executing program 0 (id=2756): r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:pam_console_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:pam_console_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x39de}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @map_idx_val={0x18, 0x5d15e154a53e5f50, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x85, &(0x7f0000000300)=""/133, 0x40f00, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0xb, 0x4, 0x555}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x8000}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x39de}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @map_idx_val={0x18, 0x5d15e154a53e5f50, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x85, &(0x7f0000000300)=""/133, 0x40f00, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0xb, 0x4, 0x555}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000500)=r5, 0x4) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0xc, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40014) (async) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0xc, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40014) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r2) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x23}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'NLBL_UNLBL\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x68}, 0x1, 0x0, 0x0, 0xc041}, 0x814) preadv(r1, &(0x7f0000001e40)=[{&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/202, 0xca}, {&(0x7f0000000940)=""/213, 0xd5}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/163, 0xa3}, {&(0x7f0000001b00)=""/120, 0x78}, {&(0x7f0000001b80)=""/249, 0xf9}, {&(0x7f0000001c80)=""/238, 0xee}, {&(0x7f0000001d80)=""/143, 0x8f}], 0x9, 0xffff, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001f00)={'batadv_slave_1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000021c0)={&(0x7f0000001f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x139, 0x139, 0x6, [@datasec={0x7, 0x4, 0x0, 0xf, 0x1, [{0x4, 0x0, 0x4}, {0x1, 0x725f, 0x8}, {0x1, 0x2, 0x40}, {0x2, 0x9, 0x1}], 'M'}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x5}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x4}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x3, 0x3}, {0x5, 0x5}, {0x9, 0x2}, {0x8, 0x1}, {0xf}, {0x3, 0x4}, {0xf, 0x2}, {0xc, 0x2}, {0xc, 0x3}, {0xe, 0x5}]}, @union={0x3, 0x7, 0x0, 0x5, 0x1, 0xfffffff7, [{0xc, 0x1, 0x7}, {0xe, 0x3, 0x5ca}, {0x5, 0x1, 0x5}, {0xd, 0x2, 0x44}, {0x4, 0x1, 0x8}, {0x6, 0x2, 0x7f}, {0x2, 0x5, 0xe0}]}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x5d}}]}, {0x0, [0x5f, 0x2e, 0x0, 0x2e]}}, &(0x7f00000020c0)=""/218, 0x15a, 0xda, 0x1, 0x40, 0x10000}, 0x28) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000021c0)={&(0x7f0000001f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x139, 0x139, 0x6, [@datasec={0x7, 0x4, 0x0, 0xf, 0x1, [{0x4, 0x0, 0x4}, {0x1, 0x725f, 0x8}, {0x1, 0x2, 0x40}, {0x2, 0x9, 0x1}], 'M'}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x5}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x4}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x3, 0x3}, {0x5, 0x5}, {0x9, 0x2}, {0x8, 0x1}, {0xf}, {0x3, 0x4}, {0xf, 0x2}, {0xc, 0x2}, {0xc, 0x3}, {0xe, 0x5}]}, @union={0x3, 0x7, 0x0, 0x5, 0x1, 0xfffffff7, [{0xc, 0x1, 0x7}, {0xe, 0x3, 0x5ca}, {0x5, 0x1, 0x5}, {0xd, 0x2, 0x44}, {0x4, 0x1, 0x8}, {0x6, 0x2, 0x7f}, {0x2, 0x5, 0xe0}]}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x5d}}]}, {0x0, [0x5f, 0x2e, 0x0, 0x2e]}}, &(0x7f00000020c0)=""/218, 0x15a, 0xda, 0x1, 0x40, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r7, r8, 0x2, 0x2, 0x1}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r7, r8, 0x2, 0x2, 0x1}, 0x50) syz_genetlink_get_family_id$ieee802154(&(0x7f00000022c0), r2) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000022c0), r2) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x60, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}, @IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x804) connect$netlink(r4, &(0x7f0000002400)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000002440), &(0x7f0000002480)=0x4) (async) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000002440), &(0x7f0000002480)=0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000024c0)={'wpan0\x00'}) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002680), r10) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x20, r11, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000002780)=0xc, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000002780)=0xc, 0x4) r12 = socket$inet6_udp(0xa, 0x2, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r1) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x24, r13, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040804) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000002900)={'ip6_vti0\x00'}) sendmsg$nl_route(r1, &(0x7f0000002980)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) sendmsg$nl_route(r1, &(0x7f0000002980)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x40}, 0x80) 16.356242553s ago: executing program 3 (id=2757): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r0, 0x2) accept4(r0, 0x0, 0x0, 0x80000) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') unshare(0x22020600) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000001c0)={0x2c, @broadcast, 0x4e24, 0x3, 'nq\x00', 0x30, 0x1, 0xf}, 0x2c) unshare(0x6a040000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x6020400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2}) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r2, &(0x7f0000000240)="d3", 0x1, 0x81, &(0x7f0000000280)={0xa, 0x4e24, 0x8, @remote, 0x7}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) readv(r4, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}, {0x0}, {&(0x7f00000016c0)=""/4, 0x4}, {&(0x7f0000001700)=""/228, 0xe4}], 0x1000000000000277) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000040)=""/60, 0x3c, 0x10000, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) 16.355973422s ago: executing program 1 (id=2758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$isdn_base(0x22, 0x3, 0x0) close(r3) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x4, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000011}, 0x4800) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x70, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x7}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x2f, &(0x7f00000001c0)={&(0x7f0000000380)={0xa4, r4, 0x1, 0x170bd2e, 0x3}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94) 16.209608095s ago: executing program 2 (id=2759): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x6, 0x12, &(0x7f0000000d00)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc848}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4a, &(0x7f0000000000), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r6, &(0x7f0000001b80)=[{&(0x7f00000002c0)=""/5, 0x5}], 0x1) r7 = socket(0x22, 0x80000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80}, 0x1f) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x1) recvmsg$can_raw(r6, &(0x7f0000002bc0)={&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000700)=""/161, 0xa1}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f00000008c0)=""/120, 0x78}, {&(0x7f0000000940)=""/78, 0x4e}, {&(0x7f00000009c0)=""/153, 0x99}, {&(0x7f0000000a80)=""/210, 0xd2}, {&(0x7f0000000b80)=""/230, 0xe6}], 0x7, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x1) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r8, 0xab7bb000) setsockopt$MRT_TABLE(r8, 0x0, 0xcf, &(0x7f0000000200)=0xffffffff, 0x4) recvfrom(r0, &(0x7f0000000340)=""/231, 0xe7, 0x10041, &(0x7f0000000440)=@can, 0x80) 15.708747871s ago: executing program 4 (id=2760): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000)=0x56c378b5, 0x4) 15.577545907s ago: executing program 4 (id=2761): bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x200000000000011, 0x2, 0x3c644) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) (async) sendto$packet(r4, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r4, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r3, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) (async) sendto$packet(r4, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r3, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x100, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x100, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) r10 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r10, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xff00) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r11, &(0x7f0000000380)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r8, &(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) (async) r12 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f00000001c0)=ANY=[], 0x0) (async) write$cgroup_subtree(r12, &(0x7f00000001c0)=ANY=[], 0x0) 15.479614126s ago: executing program 3 (id=2762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8020000180140003800000000020000100010000000000000004000200040001"], 0x40}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e4, r1, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x401, 0x5c}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x31, 0x5b, "1de4a236f212890047c7baaac9577b5e2a4a84d1692d122c55f0139a8d11fcb06a6267c5a77f573c27e5a150e4"}, @NL80211_ATTR_FRAME_MATCH={0x87, 0x5b, "c30e72cff350d2a8917601eed54ff80e9b9fc9a16032441361cc405596f1e02cf760cfba5314713d729b5318e957d8d90309d68c5b1a607e990e9f0f4170d95bd43efbed3b712fc3d6c6435a7dd96b1a084d1208b07b6738e8122795cba0c97ac3451943f2c7abce6052c8919467681d73873a112302eb7188dcfa2aaeca931493d8ff"}, @NL80211_ATTR_FRAME_MATCH={0xfb, 0x5b, "b5758bfb25020b3d60059ce930d411d4fad2d09d8e88070d953e1093ae97e762e49231623862ce1dd4c37ddb851ce8d03714f6541353a3e678fd913cc7b4ba9134978e8e9ccffbd2e862bea9f6af007c2cc7c7f025a071869c258c0d6baa61daf379235da1cc781ba416a82618c8f5ae1e513631b86b4741946176a4641d90b07e4a9cc10a170897c94b0976d64edd0327088a2b4fa871f6bed249f82e91e027fce8978096a4a180ed0bfff0689eafd9c72a0dcd9c34a3b1c0f76d3ca4d37ece1a582fa417c2f76492e5f014dbddae9a4bac6aebdb37e6024bb6416bcfbee82ba34c653006f3e664fb580c3a227de9982cedd50133c55e"}, @NL80211_ATTR_FRAME_MATCH={0xfc, 0x5b, "60b7bf1abb92071014a1ebee7c2eb5a0a0535e22b4305e2b6256dbcd8a209b308ba85dd108f4aa1d4caf8679e079fd51e1d624504bc2d853fa328c6602f2dbaad9f2c6730b83ddf4de1536fd79b65ada5e08258652351bd6e6c99fd8445b64ed8f781e36c3aaf5479640b4cb827222e06b877b5d06b2f12e1fd5f1f28f46ce61caa352537f3e3cc81f981af4183652ab848db2964e9ee184fa98c0394ca5b8e332c4431d0f36a70ff2de640947d391c0e93caa7e7846c1cb1a750baeff3855e07c383debc3db782f04fa4b3017349521452462f9ef213d209b8506d762d941e6836e259c3981bae4e9d386cbed1774afe21fb46bf9e35710"}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r6, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 15.349454268s ago: executing program 2 (id=2763): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff07000000ae000000b7080000300000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="cd86a8e58245ba6aaecd8fe257f2c2ffbf13d2630d10891cf0c8217c513384b8536012741f439818fa067448222aaea07d32f28b9996b4eecdd89a758e65e16199eff18b7b8732f6a1275b645df31f0e794aa8d0106dd3cf61ae3c1b470de91fa052ff09498a392a89fdd28053cf1f5b807e57ad37568fbdca440c8b3765a299736605cd0f5849d78926973e1f69028c65c2d268", 0x94}], 0x1}], 0x1, 0x0) recvmmsg(r2, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/147, 0x93}], 0x1}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x50, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfa8}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) 1.182378755s ago: executing program 32 (id=2756): r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:pam_console_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:pam_console_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x39de}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @map_idx_val={0x18, 0x5d15e154a53e5f50, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x85, &(0x7f0000000300)=""/133, 0x40f00, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0xb, 0x4, 0x555}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x8000}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x39de}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @map_idx_val={0x18, 0x5d15e154a53e5f50, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x85, &(0x7f0000000300)=""/133, 0x40f00, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0xb, 0x4, 0x555}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000500)=r5, 0x4) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0xc, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40014) (async) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0xc, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40014) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r2) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x23}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'NLBL_UNLBL\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x68}, 0x1, 0x0, 0x0, 0xc041}, 0x814) preadv(r1, &(0x7f0000001e40)=[{&(0x7f0000000800)=""/48, 0x30}, {&(0x7f0000000840)=""/202, 0xca}, {&(0x7f0000000940)=""/213, 0xd5}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/163, 0xa3}, {&(0x7f0000001b00)=""/120, 0x78}, {&(0x7f0000001b80)=""/249, 0xf9}, {&(0x7f0000001c80)=""/238, 0xee}, {&(0x7f0000001d80)=""/143, 0x8f}], 0x9, 0xffff, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001f00)={'batadv_slave_1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000021c0)={&(0x7f0000001f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x139, 0x139, 0x6, [@datasec={0x7, 0x4, 0x0, 0xf, 0x1, [{0x4, 0x0, 0x4}, {0x1, 0x725f, 0x8}, {0x1, 0x2, 0x40}, {0x2, 0x9, 0x1}], 'M'}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x5}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x4}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x3, 0x3}, {0x5, 0x5}, {0x9, 0x2}, {0x8, 0x1}, {0xf}, {0x3, 0x4}, {0xf, 0x2}, {0xc, 0x2}, {0xc, 0x3}, {0xe, 0x5}]}, @union={0x3, 0x7, 0x0, 0x5, 0x1, 0xfffffff7, [{0xc, 0x1, 0x7}, {0xe, 0x3, 0x5ca}, {0x5, 0x1, 0x5}, {0xd, 0x2, 0x44}, {0x4, 0x1, 0x8}, {0x6, 0x2, 0x7f}, {0x2, 0x5, 0xe0}]}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x5d}}]}, {0x0, [0x5f, 0x2e, 0x0, 0x2e]}}, &(0x7f00000020c0)=""/218, 0x15a, 0xda, 0x1, 0x40, 0x10000}, 0x28) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000021c0)={&(0x7f0000001f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x139, 0x139, 0x6, [@datasec={0x7, 0x4, 0x0, 0xf, 0x1, [{0x4, 0x0, 0x4}, {0x1, 0x725f, 0x8}, {0x1, 0x2, 0x40}, {0x2, 0x9, 0x1}], 'M'}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x5}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x4}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x3, 0x3}, {0x5, 0x5}, {0x9, 0x2}, {0x8, 0x1}, {0xf}, {0x3, 0x4}, {0xf, 0x2}, {0xc, 0x2}, {0xc, 0x3}, {0xe, 0x5}]}, @union={0x3, 0x7, 0x0, 0x5, 0x1, 0xfffffff7, [{0xc, 0x1, 0x7}, {0xe, 0x3, 0x5ca}, {0x5, 0x1, 0x5}, {0xd, 0x2, 0x44}, {0x4, 0x1, 0x8}, {0x6, 0x2, 0x7f}, {0x2, 0x5, 0xe0}]}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x5d}}]}, {0x0, [0x5f, 0x2e, 0x0, 0x2e]}}, &(0x7f00000020c0)=""/218, 0x15a, 0xda, 0x1, 0x40, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r7, r8, 0x2, 0x2, 0x1}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r7, r8, 0x2, 0x2, 0x1}, 0x50) syz_genetlink_get_family_id$ieee802154(&(0x7f00000022c0), r2) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000022c0), r2) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x60, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}, @IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x804) connect$netlink(r4, &(0x7f0000002400)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000002440), &(0x7f0000002480)=0x4) (async) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000002440), &(0x7f0000002480)=0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000024c0)={'wpan0\x00'}) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002680), r10) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x20, r11, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000002780)=0xc, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000002780)=0xc, 0x4) r12 = socket$inet6_udp(0xa, 0x2, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r1) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x24, r13, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040804) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000002900)={'ip6_vti0\x00'}) sendmsg$nl_route(r1, &(0x7f0000002980)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) sendmsg$nl_route(r1, &(0x7f0000002980)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x40}, 0x80) 1.137469128s ago: executing program 33 (id=2758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$isdn_base(0x22, 0x3, 0x0) close(r3) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x4, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000011}, 0x4800) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x70, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x7}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x2f, &(0x7f00000001c0)={&(0x7f0000000380)={0xa4, r4, 0x1, 0x170bd2e, 0x3}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94) 117.512143ms ago: executing program 34 (id=2763): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff07000000ae000000b7080000300000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="cd86a8e58245ba6aaecd8fe257f2c2ffbf13d2630d10891cf0c8217c513384b8536012741f439818fa067448222aaea07d32f28b9996b4eecdd89a758e65e16199eff18b7b8732f6a1275b645df31f0e794aa8d0106dd3cf61ae3c1b470de91fa052ff09498a392a89fdd28053cf1f5b807e57ad37568fbdca440c8b3765a299736605cd0f5849d78926973e1f69028c65c2d268", 0x94}], 0x1}], 0x1, 0x0) recvmmsg(r2, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/147, 0x93}], 0x1}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x50, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfa8}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) 69.694123ms ago: executing program 35 (id=2762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8020000180140003800000000020000100010000000000000004000200040001"], 0x40}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e4, r1, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x401, 0x5c}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x31, 0x5b, "1de4a236f212890047c7baaac9577b5e2a4a84d1692d122c55f0139a8d11fcb06a6267c5a77f573c27e5a150e4"}, @NL80211_ATTR_FRAME_MATCH={0x87, 0x5b, "c30e72cff350d2a8917601eed54ff80e9b9fc9a16032441361cc405596f1e02cf760cfba5314713d729b5318e957d8d90309d68c5b1a607e990e9f0f4170d95bd43efbed3b712fc3d6c6435a7dd96b1a084d1208b07b6738e8122795cba0c97ac3451943f2c7abce6052c8919467681d73873a112302eb7188dcfa2aaeca931493d8ff"}, @NL80211_ATTR_FRAME_MATCH={0xfb, 0x5b, "b5758bfb25020b3d60059ce930d411d4fad2d09d8e88070d953e1093ae97e762e49231623862ce1dd4c37ddb851ce8d03714f6541353a3e678fd913cc7b4ba9134978e8e9ccffbd2e862bea9f6af007c2cc7c7f025a071869c258c0d6baa61daf379235da1cc781ba416a82618c8f5ae1e513631b86b4741946176a4641d90b07e4a9cc10a170897c94b0976d64edd0327088a2b4fa871f6bed249f82e91e027fce8978096a4a180ed0bfff0689eafd9c72a0dcd9c34a3b1c0f76d3ca4d37ece1a582fa417c2f76492e5f014dbddae9a4bac6aebdb37e6024bb6416bcfbee82ba34c653006f3e664fb580c3a227de9982cedd50133c55e"}, @NL80211_ATTR_FRAME_MATCH={0xfc, 0x5b, "60b7bf1abb92071014a1ebee7c2eb5a0a0535e22b4305e2b6256dbcd8a209b308ba85dd108f4aa1d4caf8679e079fd51e1d624504bc2d853fa328c6602f2dbaad9f2c6730b83ddf4de1536fd79b65ada5e08258652351bd6e6c99fd8445b64ed8f781e36c3aaf5479640b4cb827222e06b877b5d06b2f12e1fd5f1f28f46ce61caa352537f3e3cc81f981af4183652ab848db2964e9ee184fa98c0394ca5b8e332c4431d0f36a70ff2de640947d391c0e93caa7e7846c1cb1a750baeff3855e07c383debc3db782f04fa4b3017349521452462f9ef213d209b8506d762d941e6836e259c3981bae4e9d386cbed1774afe21fb46bf9e35710"}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r6, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 0s ago: executing program 36 (id=2761): bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x200000000000011, 0x2, 0x3c644) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) (async) sendto$packet(r4, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r4, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r3, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) (async) sendto$packet(r4, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r3, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x100, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x100, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) r10 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r10, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xff00) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r11, &(0x7f0000000380)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r8, &(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) (async) r12 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f00000001c0)=ANY=[], 0x0) (async) write$cgroup_subtree(r12, &(0x7f00000001c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): 58582][T15003] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 334.935843][T15005] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 335.137367][T15017] tipc: Enabled bearer , priority 0 [ 335.151721][T15017] syzkaller0: entered promiscuous mode [ 335.171410][T15017] syzkaller0: entered allmulticast mode [ 335.265856][T15017] tipc: Resetting bearer [ 335.313546][T15016] tipc: Resetting bearer [ 335.400720][T15016] tipc: Disabling bearer [ 335.451068][T15033] netlink: 'syz.1.2262': attribute type 3 has an invalid length. [ 335.551486][T15043] netlink: 'syz.4.2264': attribute type 10 has an invalid length. [ 335.622671][T15043] dummy0: entered allmulticast mode [ 335.649603][T15043] team0: Port device dummy0 added [ 335.652991][T15050] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 335.668049][T15047] macvtap0: entered promiscuous mode [ 335.682484][T15047] netlink: 'syz.1.2266': attribute type 1 has an invalid length. [ 335.690929][T15047] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2266'. [ 335.731105][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2266'. [ 335.855723][T15064] netlink: 'syz.4.2269': attribute type 1 has an invalid length. [ 335.873776][T15064] netlink: 'syz.4.2269': attribute type 3 has an invalid length. [ 335.959961][T15064] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2269'. [ 335.960863][T15047] macvtap0 (unregistering): left promiscuous mode [ 336.021843][T15070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2270'. [ 336.104671][T15077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2272'. [ 336.276213][T15084] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 336.277336][T15077] bond12: entered promiscuous mode [ 336.283691][T15084] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 336.283825][T15084] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 336.283934][T15084] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 336.284074][T15084] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 336.284189][T15084] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 336.284300][T15084] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 336.284423][T15084] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 336.284541][T15084] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 336.284662][T15084] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 336.361002][T15077] 8021q: adding VLAN 0 to HW filter on device bond12 [ 336.403286][T15089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2273'. [ 336.559059][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2273'. [ 337.085040][T15085] 8021q: adding VLAN 0 to HW filter on device bond12 [ 337.096628][T15085] bond12: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 337.142521][T15085] bond12: (slave ip6gre3): Error -95 calling set_mac_address [ 337.709322][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.968234][T15134] FAULT_INJECTION: forcing a failure. [ 337.968234][T15134] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 338.029668][T15134] CPU: 0 UID: 0 PID: 15134 Comm: syz.0.2283 Not tainted syzkaller #0 PREEMPT(full) [ 338.029696][T15134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 338.029707][T15134] Call Trace: [ 338.029715][T15134] [ 338.029724][T15134] dump_stack_lvl+0xe8/0x150 [ 338.029754][T15134] should_fail_ex+0x412/0x560 [ 338.029784][T15134] prepare_alloc_pages+0x22a/0x650 [ 338.029813][T15134] __alloc_frozen_pages_noprof+0x12f/0x380 [ 338.029839][T15134] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 338.029865][T15134] ? __pfx_policy_nodemask+0x10/0x10 [ 338.029897][T15134] alloc_pages_mpol+0x232/0x4a0 [ 338.029923][T15134] vma_alloc_folio_noprof+0xea/0x210 [ 338.029950][T15134] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 338.029982][T15134] do_wp_page+0x1204/0x5a00 [ 338.030022][T15134] ? __pfx_do_wp_page+0x10/0x10 [ 338.030040][T15134] ? do_raw_spin_lock+0x12b/0x2f0 [ 338.030058][T15134] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.030080][T15134] handle_mm_fault+0x1520/0x3310 [ 338.030104][T15134] ? handle_mm_fault+0xee/0x3310 [ 338.030124][T15134] ? __pfx_handle_mm_fault+0x10/0x10 [ 338.030138][T15134] ? follow_page_pte+0xd7f/0x1450 [ 338.030159][T15134] ? __pfx_follow_page_pte+0x10/0x10 [ 338.030181][T15134] __get_user_pages+0x165b/0x29d0 [ 338.030223][T15134] __gup_longterm_locked+0xdcf/0x1630 [ 338.030254][T15134] ? sanity_check_pinned_pages+0x1219/0x12d0 [ 338.030300][T15134] gup_fast_fallback+0x1d82/0x22e0 [ 338.030342][T15134] ? __pfx_gup_fast_fallback+0x10/0x10 [ 338.030362][T15134] ? ____sys_recvmsg+0x1e6/0x4a0 [ 338.030384][T15134] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 338.030404][T15134] ? do_syscall_64+0x14d/0xf80 [ 338.030419][T15134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.030437][T15134] ? pin_user_pages_fast+0x4d/0xb0 [ 338.030460][T15134] iov_iter_extract_pages+0x37b/0x5f0 [ 338.030484][T15134] extract_iter_to_sg+0xe62/0x2520 [ 338.030509][T15134] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 338.030521][T15134] ? rcu_is_watching+0x15/0xb0 [ 338.030542][T15134] ? trace_kmalloc+0x2a/0x110 [ 338.030559][T15134] ? __kmalloc_noprof+0x37d/0x760 [ 338.030575][T15134] ? sock_kmalloc+0xd6/0x160 [ 338.030592][T15134] ? __asan_memset+0x22/0x50 [ 338.030614][T15134] af_alg_get_rsgl+0x436/0x810 [ 338.030642][T15134] skcipher_recvmsg+0x3a3/0x1140 [ 338.030672][T15134] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 338.030688][T15134] ? aa_sock_msg_perm+0xf1/0x1b0 [ 338.030704][T15134] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 338.030721][T15134] ? security_socket_recvmsg+0x7e/0x2c0 [ 338.030738][T15134] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 338.030754][T15134] sock_recvmsg+0x172/0x1b0 [ 338.030773][T15134] ____sys_recvmsg+0x1e6/0x4a0 [ 338.030801][T15134] ? __pfx_____sys_recvmsg+0x10/0x10 [ 338.030832][T15134] ? import_iovec+0x73/0xa0 [ 338.030851][T15134] ___sys_recvmsg+0x215/0x590 [ 338.030871][T15134] ? get_pid_task+0x20/0x1f0 [ 338.030888][T15134] ? __pfx____sys_recvmsg+0x10/0x10 [ 338.030926][T15134] ? __fget_files+0x3a0/0x420 [ 338.030948][T15134] __x64_sys_recvmsg+0x1ba/0x2a0 [ 338.030971][T15134] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 338.030999][T15134] ? __pfx_ksys_write+0x10/0x10 [ 338.031023][T15134] do_syscall_64+0x14d/0xf80 [ 338.031039][T15134] ? trace_irq_disable+0x3b/0x150 [ 338.031051][T15134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.031065][T15134] ? clear_bhb_loop+0x40/0x90 [ 338.031083][T15134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.031097][T15134] RIP: 0033:0x7febd2b9c819 [ 338.031111][T15134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.031123][T15134] RSP: 002b:00007febd3ade028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 338.031140][T15134] RAX: ffffffffffffffda RBX: 00007febd2e15fa0 RCX: 00007febd2b9c819 [ 338.031151][T15134] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 338.031161][T15134] RBP: 00007febd3ade090 R08: 0000000000000000 R09: 0000000000000000 [ 338.031170][T15134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 338.031180][T15134] R13: 00007febd2e16038 R14: 00007febd2e15fa0 R15: 00007ffdb24080a8 [ 338.031206][T15134] [ 338.523262][T15132] tipc: Enabled bearer , priority 0 [ 338.643870][T15132] syzkaller0: entered promiscuous mode [ 338.660151][T15132] syzkaller0: entered allmulticast mode [ 338.771606][T15143] netlink: 'syz.4.2282': attribute type 1 has an invalid length. [ 338.791592][T15143] netlink: 'syz.4.2282': attribute type 2 has an invalid length. [ 338.819257][T15143] netlink: 'syz.4.2282': attribute type 2 has an invalid length. [ 338.829794][T15143] netlink: 'syz.4.2282': attribute type 2 has an invalid length. [ 338.879446][T15143] netlink: 'syz.4.2282': attribute type 1 has an invalid length. [ 338.887373][T15143] netlink: 'syz.4.2282': attribute type 2 has an invalid length. [ 339.100997][T15131] tipc: Resetting bearer [ 339.170637][T15131] tipc: Disabling bearer [ 339.468604][T15175] netlink: 'syz.4.2292': attribute type 21 has an invalid length. [ 339.525768][T15178] __nla_validate_parse: 4 callbacks suppressed [ 339.525791][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2292'. [ 341.517612][T15175] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2292'. [ 341.624668][T15192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2295'. [ 341.733601][T15194] €Â: renamed from dummy0 [ 341.847594][T15200] net_ratelimit: 1654 callbacks suppressed [ 341.847616][T15200] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 341.960624][T15202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2297'. [ 342.028869][T15204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2299'. [ 342.051856][T15204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2299'. [ 342.085304][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2299'. [ 342.804530][T15227] sctp: [Deprecated]: syz.4.2305 (pid 15227) Use of int in max_burst socket option. [ 342.804530][T15227] Use struct sctp_assoc_value instead [ 342.875151][T15229] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2304'. [ 343.398282][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2309'. [ 343.747047][ T6518] lec:lec_start_xmit: lec0:No lecd attached [ 346.021161][T15287] netlink: 'syz.3.2316': attribute type 1 has an invalid length. [ 346.039744][T15288] netlink: 'syz.3.2316': attribute type 1 has an invalid length. [ 346.054778][T15287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2316'. [ 346.107721][T15233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.427904][T15305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2322'. [ 346.671112][T15313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.228893][T15314] lec:lec_atm_close: lec0: Shut down! [ 347.458918][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'. [ 347.860094][T15350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.095351][T15366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2338'. [ 348.322664][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2342'. [ 348.358489][T15375] lo: Caught tx_queue_len zero misconfig [ 348.559831][T15387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2344'. [ 348.589859][ T2036] block nbd0: Possible stuck request ffff888026d40000: control (read@0,1024B). Runtime 90 seconds [ 348.602924][ T2036] block nbd0: Possible stuck request ffff888026d40200: control (read@1024,1024B). Runtime 90 seconds [ 348.622500][ T2036] block nbd0: Possible stuck request ffff888026d40400: control (read@2048,1024B). Runtime 90 seconds [ 348.636189][ T2036] block nbd0: Possible stuck request ffff888026d40600: control (read@3072,1024B). Runtime 90 seconds [ 348.667796][T15386] bridge_slave_0 (unregistering): left allmulticast mode [ 348.675400][T15386] bridge_slave_0 (unregistering): left promiscuous mode [ 348.683601][T15386] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.006812][T15403] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20002 [ 349.485661][T15428] netlink: 'syz.0.2357': attribute type 13 has an invalid length. [ 349.647582][T15431] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 349.840053][T15446] netlink: 'syz.2.2363': attribute type 11 has an invalid length. [ 349.868800][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2363'. [ 349.930084][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2363'. [ 349.943102][T15441] netlink: 724 bytes leftover after parsing attributes in process `syz.4.2360'. [ 349.960998][T15441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2360'. [ 350.086814][T15453] IPv6: NLM_F_CREATE should be specified when creating new route [ 350.843083][T15484] syzkaller1: tun_chr_ioctl cmd 35108 [ 351.021225][T15491] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.051265][T15493] netlink: 'syz.1.2376': attribute type 1 has an invalid length. [ 351.068993][T15493] __nla_validate_parse: 5 callbacks suppressed [ 351.069013][T15493] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2376'. [ 351.203025][T15491] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.286065][T15499] netlink: 'syz.1.2376': attribute type 1 has an invalid length. [ 351.294434][T15499] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2376'. [ 351.305382][T15491] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.413966][T15491] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.616847][T12441] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.703808][T12441] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.762782][T12451] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.772719][T12451] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.300378][T15530] xt_hashlimit: size too large, truncated to 1048576 [ 352.517763][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2385'. [ 352.544113][T15531] bond0: entered promiscuous mode [ 352.582821][T15531] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 352.622595][T15531] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 352.670007][T15531] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 352.699283][T15531] bond0: left promiscuous mode [ 352.900780][T15544] netlink: 'syz.3.2387': attribute type 1 has an invalid length. [ 352.909374][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5690 ms [ 352.916044][T15546] netlink: 'syz.4.2388': attribute type 61 has an invalid length. [ 352.917666][ C1] lec:lec_tx_timeout: lec0 [ 352.929470][T15546] netlink: 'syz.4.2388': attribute type 62 has an invalid length. [ 352.942702][T15543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2386'. [ 352.953161][T15544] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 353.182146][T15560] tipc: New replicast peer: 255.255.255.255 [ 353.224879][T15560] tipc: Enabled bearer , priority 10 [ 353.759652][T15582] macsec2: entered promiscuous mode [ 353.771026][T15582] erspan0: entered promiscuous mode [ 353.777755][T15582] erspan0: left promiscuous mode [ 354.210668][T15599] ip6gre4: entered promiscuous mode [ 354.227594][T15599] ip6gre4: entered allmulticast mode [ 354.231216][T15606] netlink: 'syz.1.2405': attribute type 32 has an invalid length. [ 354.239893][T12441] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 354.265226][T12441] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 354.274785][T12818] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 354.344046][T12818] tipc: Node number set to 1477061066 [ 354.514569][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2408'. [ 354.766061][T15634] ip6tnl0: Caught tx_queue_len zero misconfig [ 354.782214][T15629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2411'. [ 354.824354][T15636] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2413'. [ 354.899376][T12818] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 355.023984][T15644] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2414'. [ 355.069488][T12818] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 355.112129][T15644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.134887][T15644] bond_slave_0: left promiscuous mode [ 355.146027][T15653] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2419'. [ 355.166788][T15644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.199627][T15644] bond_slave_1: left promiscuous mode [ 355.207767][T15644] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 355.229641][T15644] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 355.239873][T15644] bond0 (unregistering): Released all slaves [ 355.412641][T15653] bond20: entered promiscuous mode [ 355.430255][T15653] 8021q: adding VLAN 0 to HW filter on device bond20 [ 355.530385][T15659] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2420'. [ 355.576010][T15661] netlink: 'syz.0.2422': attribute type 10 has an invalid length. [ 355.603267][T15661] .70·: left allmulticast mode [ 355.618839][T15661] .70·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 355.732912][T15674] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 355.987958][T15693] nbd: nbd1 already in use [ 356.020300][T15693] nbd: nbd1 already in use [ 356.451488][T15706] bond21 (unregistering): Released all slaves [ 356.496689][T15715] __nla_validate_parse: 4 callbacks suppressed [ 356.496708][T15715] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2432'. [ 356.701948][T15717] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 356.862747][T15717] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 356.967201][T15732] tipc: Enabled bearer , priority 0 [ 356.983742][T15732] syzkaller0: entered promiscuous mode [ 356.997612][T15732] syzkaller0: entered allmulticast mode [ 357.066962][T15732] tipc: Resetting bearer [ 357.130709][T15717] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 357.213294][T15731] tipc: Resetting bearer [ 357.236640][T15746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.398182][T15731] tipc: Disabling bearer [ 357.521795][T15717] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 357.597284][T15766] netlink: 'syz.1.2444': attribute type 2 has an invalid length. [ 357.667352][T15766] hmac(sha224: entered promiscuous mode [ 357.726302][T15771] syzkaller0: entered allmulticast mode [ 357.839283][ T7249] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 357.847821][ T7249] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 357.891134][T15771] syzkaller0: left allmulticast mode [ 357.911018][ T7249] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 358.000433][ T7249] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 358.049861][T15792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2449'. [ 358.118320][T15796] netlink: 'syz.0.2451': attribute type 7 has an invalid length. [ 358.429787][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 358.594146][T15824] netlink: 'syz.1.2456': attribute type 2 has an invalid length. [ 358.679509][T15824] netlink: 'syz.1.2456': attribute type 8 has an invalid length. [ 358.716375][T15831] sctp: [Deprecated]: syz.0.2457 (pid 15831) Use of int in maxseg socket option. [ 358.716375][T15831] Use struct sctp_assoc_value instead [ 358.759223][T15824] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2456'. [ 358.827326][T15834] netlink: 'syz.1.2456': attribute type 2 has an invalid length. [ 358.866669][T15834] netlink: 'syz.1.2456': attribute type 8 has an invalid length. [ 358.905185][T15834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2456'. [ 358.966581][T15824] netlink: 'syz.1.2456': attribute type 2 has an invalid length. [ 359.006739][T15824] netlink: 'syz.1.2456': attribute type 8 has an invalid length. [ 359.041193][T15824] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2456'. [ 359.199028][T15852] netlink: 'syz.1.2463': attribute type 2 has an invalid length. [ 359.217103][T15852] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2463'. [ 359.275653][T15852] netlink: 'syz.1.2463': attribute type 1 has an invalid length. [ 359.292112][T15849] xt_CT: No such helper "snmp_trap" [ 359.863122][T15883] : renamed from veth0_to_bond [ 359.949451][T15890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2472'. [ 360.015870][T15889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.290619][T15908] FAULT_INJECTION: forcing a failure. [ 360.290619][T15908] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 360.345625][T15908] CPU: 0 UID: 0 PID: 15908 Comm: syz.4.2474 Not tainted syzkaller #0 PREEMPT(full) [ 360.345670][T15908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 360.345682][T15908] Call Trace: [ 360.345689][T15908] [ 360.345698][T15908] dump_stack_lvl+0xe8/0x150 [ 360.345731][T15908] should_fail_ex+0x412/0x560 [ 360.345764][T15908] prepare_alloc_pages+0x22a/0x650 [ 360.345796][T15908] __alloc_frozen_pages_noprof+0x12f/0x380 [ 360.345824][T15908] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 360.345853][T15908] ? __pfx_policy_nodemask+0x10/0x10 [ 360.345888][T15908] alloc_pages_mpol+0x232/0x4a0 [ 360.345917][T15908] vma_alloc_folio_noprof+0xea/0x210 [ 360.345944][T15908] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 360.345978][T15908] do_wp_page+0x1204/0x5a00 [ 360.346026][T15908] ? __pfx_do_wp_page+0x10/0x10 [ 360.346049][T15908] ? do_raw_spin_lock+0x12b/0x2f0 [ 360.346072][T15908] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 360.346100][T15908] handle_mm_fault+0x1520/0x3310 [ 360.346132][T15908] ? handle_mm_fault+0xee/0x3310 [ 360.346158][T15908] ? __pfx_handle_mm_fault+0x10/0x10 [ 360.346177][T15908] ? follow_page_pte+0xd7f/0x1450 [ 360.346204][T15908] ? __pfx_follow_page_pte+0x10/0x10 [ 360.346234][T15908] __get_user_pages+0x165b/0x29d0 [ 360.346290][T15908] __gup_longterm_locked+0xdcf/0x1630 [ 360.346329][T15908] ? sanity_check_pinned_pages+0x1219/0x12d0 [ 360.346360][T15908] gup_fast_fallback+0x1d82/0x22e0 [ 360.346416][T15908] ? __pfx_gup_fast_fallback+0x10/0x10 [ 360.346441][T15908] ? ____sys_recvmsg+0x1e6/0x4a0 [ 360.346467][T15908] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 360.346491][T15908] ? do_syscall_64+0x14d/0xf80 [ 360.346511][T15908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.346533][T15908] ? pin_user_pages_fast+0x4d/0xb0 [ 360.346561][T15908] iov_iter_extract_pages+0x37b/0x5f0 [ 360.346592][T15908] extract_iter_to_sg+0xe62/0x2520 [ 360.346626][T15908] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 360.346643][T15908] ? rcu_is_watching+0x15/0xb0 [ 360.346675][T15908] ? trace_kmalloc+0x2a/0x110 [ 360.346696][T15908] ? __kmalloc_noprof+0x37d/0x760 [ 360.346717][T15908] ? sock_kmalloc+0xd6/0x160 [ 360.346740][T15908] ? __asan_memset+0x22/0x50 [ 360.346762][T15908] af_alg_get_rsgl+0x436/0x810 [ 360.346799][T15908] skcipher_recvmsg+0x3a3/0x1140 [ 360.346838][T15908] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 360.346859][T15908] ? aa_sock_msg_perm+0xf1/0x1b0 [ 360.346879][T15908] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 360.346901][T15908] ? security_socket_recvmsg+0x7e/0x2c0 [ 360.346923][T15908] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 360.346944][T15908] sock_recvmsg+0x172/0x1b0 [ 360.346969][T15908] ____sys_recvmsg+0x1e6/0x4a0 [ 360.347004][T15908] ? __pfx_____sys_recvmsg+0x10/0x10 [ 360.347045][T15908] ? import_iovec+0x73/0xa0 [ 360.347069][T15908] ___sys_recvmsg+0x215/0x590 [ 360.347093][T15908] ? get_pid_task+0x20/0x1f0 [ 360.347115][T15908] ? __pfx____sys_recvmsg+0x10/0x10 [ 360.347166][T15908] ? __fget_files+0x3a0/0x420 [ 360.347195][T15908] __x64_sys_recvmsg+0x1ba/0x2a0 [ 360.347224][T15908] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 360.347259][T15908] ? __pfx_ksys_write+0x10/0x10 [ 360.347291][T15908] do_syscall_64+0x14d/0xf80 [ 360.347311][T15908] ? trace_irq_disable+0x3b/0x150 [ 360.347327][T15908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.347345][T15908] ? clear_bhb_loop+0x40/0x90 [ 360.347368][T15908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.347386][T15908] RIP: 0033:0x7f64afb9c819 [ 360.347405][T15908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.347422][T15908] RSP: 002b:00007f64b0b2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 360.347444][T15908] RAX: ffffffffffffffda RBX: 00007f64afe15fa0 RCX: 00007f64afb9c819 [ 360.347456][T15908] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 360.347468][T15908] RBP: 00007f64b0b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 360.347480][T15908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.347491][T15908] R13: 00007f64afe16038 R14: 00007f64afe15fa0 R15: 00007ffc54008478 [ 360.347522][T15908] [ 360.349689][T15909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2476'. [ 361.263236][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2482'. [ 361.271169][T15933] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2483'. [ 361.528773][T15960] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2487'. [ 361.581008][T15959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2488'. [ 361.745082][T15979] openvswitch: netlink: Message has 592 unknown bytes. [ 361.767562][T15979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.064771][T16006] team0: No ports can be present during mode change [ 362.160780][T16015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2505'. [ 362.185865][T16015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2505'. [ 362.245504][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2506'. [ 362.590942][T16043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2511'. [ 362.601142][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2512'. [ 362.612252][T16046] tipc: Enabling of bearer rejected, failed to enable media [ 362.671433][ T2036] block nbd1: Possible stuck request ffff888026dd0000: control (read@0,1024B). Runtime 90 seconds [ 362.682715][ T2036] block nbd1: Possible stuck request ffff888026dd0200: control (read@1024,1024B). Runtime 90 seconds [ 362.695660][ T2036] block nbd1: Possible stuck request ffff888026dd0400: control (read@2048,1024B). Runtime 90 seconds [ 362.707116][ T2036] block nbd1: Possible stuck request ffff888026dd0600: control (read@3072,1024B). Runtime 90 seconds [ 362.835404][T16058] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2516'. [ 362.870479][T16058] rdma_rxe: rxe_newlink: failed to add lo [ 363.022218][T16070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2518'. [ 363.097049][T16073] FAULT_INJECTION: forcing a failure. [ 363.097049][T16073] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 363.153420][T16075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2520'. [ 363.159369][T16073] CPU: 0 UID: 0 PID: 16073 Comm: syz.2.2519 Not tainted syzkaller #0 PREEMPT(full) [ 363.159397][T16073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 363.159412][T16073] Call Trace: [ 363.159420][T16073] [ 363.159427][T16073] dump_stack_lvl+0xe8/0x150 [ 363.159457][T16073] should_fail_ex+0x412/0x560 [ 363.159489][T16073] prepare_alloc_pages+0x22a/0x650 [ 363.159520][T16073] __alloc_frozen_pages_noprof+0x12f/0x380 [ 363.159546][T16073] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 363.159572][T16073] ? __pfx_policy_nodemask+0x10/0x10 [ 363.159606][T16073] alloc_pages_mpol+0x232/0x4a0 [ 363.159634][T16073] vma_alloc_folio_noprof+0xea/0x210 [ 363.159660][T16073] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 363.159692][T16073] do_wp_page+0x1204/0x5a00 [ 363.159737][T16073] ? __pfx_do_wp_page+0x10/0x10 [ 363.159759][T16073] ? do_raw_spin_lock+0x12b/0x2f0 [ 363.159781][T16073] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 363.159809][T16073] handle_mm_fault+0x1520/0x3310 [ 363.159840][T16073] ? handle_mm_fault+0xee/0x3310 [ 363.159863][T16073] ? __pfx_handle_mm_fault+0x10/0x10 [ 363.159881][T16073] ? follow_page_pte+0xd7f/0x1450 [ 363.159906][T16073] ? __pfx_follow_page_pte+0x10/0x10 [ 363.159935][T16073] __get_user_pages+0x165b/0x29d0 [ 363.159988][T16073] __gup_longterm_locked+0xdcf/0x1630 [ 363.160025][T16073] ? sanity_check_pinned_pages+0x1219/0x12d0 [ 363.160057][T16073] gup_fast_fallback+0x1d82/0x22e0 [ 363.160110][T16073] ? __pfx_gup_fast_fallback+0x10/0x10 [ 363.160133][T16073] ? ____sys_recvmsg+0x1e6/0x4a0 [ 363.160158][T16073] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 363.160181][T16073] ? do_syscall_64+0x14d/0xf80 [ 363.160199][T16073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.160229][T16073] ? pin_user_pages_fast+0x4d/0xb0 [ 363.160256][T16073] iov_iter_extract_pages+0x37b/0x5f0 [ 363.160285][T16073] extract_iter_to_sg+0xe62/0x2520 [ 363.160317][T16073] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 363.160332][T16073] ? rcu_is_watching+0x15/0xb0 [ 363.160357][T16073] ? trace_kmalloc+0x2a/0x110 [ 363.160379][T16073] ? __kmalloc_noprof+0x37d/0x760 [ 363.160399][T16073] ? sock_kmalloc+0xd6/0x160 [ 363.160420][T16073] ? __asan_memset+0x22/0x50 [ 363.160441][T16073] af_alg_get_rsgl+0x436/0x810 [ 363.160477][T16073] skcipher_recvmsg+0x3a3/0x1140 [ 363.160514][T16073] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 363.160533][T16073] ? aa_sock_msg_perm+0xf1/0x1b0 [ 363.160553][T16073] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 363.160572][T16073] ? security_socket_recvmsg+0x7e/0x2c0 [ 363.160593][T16073] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 363.160613][T16073] sock_recvmsg+0x172/0x1b0 [ 363.160637][T16073] ____sys_recvmsg+0x1e6/0x4a0 [ 363.160667][T16073] ? __pfx_____sys_recvmsg+0x10/0x10 [ 363.160703][T16073] ? import_iovec+0x73/0xa0 [ 363.160726][T16073] ___sys_recvmsg+0x215/0x590 [ 363.160750][T16073] ? get_pid_task+0x20/0x1f0 [ 363.160772][T16073] ? __pfx____sys_recvmsg+0x10/0x10 [ 363.160820][T16073] ? __fget_files+0x3a0/0x420 [ 363.160847][T16073] __x64_sys_recvmsg+0x1ba/0x2a0 [ 363.160875][T16073] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 363.160909][T16073] ? __pfx_ksys_write+0x10/0x10 [ 363.160939][T16073] do_syscall_64+0x14d/0xf80 [ 363.160958][T16073] ? trace_irq_disable+0x3b/0x150 [ 363.160974][T16073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.160992][T16073] ? clear_bhb_loop+0x40/0x90 [ 363.161014][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.161037][T16073] RIP: 0033:0x7f5765f9c819 [ 363.161056][T16073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.161071][T16073] RSP: 002b:00007f5766ea4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 363.161091][T16073] RAX: ffffffffffffffda RBX: 00007f5766215fa0 RCX: 00007f5765f9c819 [ 363.161104][T16073] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 363.161116][T16073] RBP: 00007f5766ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 363.161128][T16073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.161138][T16073] R13: 00007f5766216038 R14: 00007f5766215fa0 R15: 00007ffeb07f0d88 [ 363.161167][T16073] [ 363.705333][T16075] macvtap0: entered promiscuous mode [ 363.719241][T16075] erspan0: entered promiscuous mode [ 363.726740][T16075] macvtap0: entered allmulticast mode [ 363.733641][T16075] erspan0: entered allmulticast mode [ 363.942571][T16104] validate_nla: 3 callbacks suppressed [ 363.942592][T16104] netlink: 'syz.3.2524': attribute type 1 has an invalid length. [ 363.994228][T16104] 8021q: adding VLAN 0 to HW filter on device bond10 [ 364.094232][T16104] bond10: (slave veth7): Enslaving as an active interface with a down link [ 364.133421][T16109] gre0: left promiscuous mode [ 364.172032][T16109] gre0: left allmulticast mode [ 364.218358][T16109] 0ªî{X¹¦: left allmulticast mode [ 364.239302][T16109] 0ªX¹¦À: left allmulticast mode [ 364.277501][T16109] bridge1: left allmulticast mode [ 364.299427][T16109] bridge2: left allmulticast mode [ 364.309914][T16109] ip6erspan0: left allmulticast mode [ 364.414791][T16109] bond2: left promiscuous mode [ 364.420309][T16109] bond2: left allmulticast mode [ 364.440605][T16109] bond4: left promiscuous mode [ 364.446346][T16109] wireguard0: left promiscuous mode [ 364.465375][T16109] ip6gre1: left promiscuous mode [ 364.492361][T16109] ip6gre1: left allmulticast mode [ 364.554057][T16109] xfrm1: left promiscuous mode [ 364.569910][T16109] xfrm1: left allmulticast mode [ 364.581971][T16109] bond8: left promiscuous mode [ 364.586829][T16109] vti0: left promiscuous mode [ 364.622992][T16109] ip6gre2: left promiscuous mode [ 364.640293][T16109] gtp0: left promiscuous mode [ 364.649194][T16109] gtp0: left allmulticast mode [ 364.657301][T16139] FAULT_INJECTION: forcing a failure. [ 364.657301][T16139] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 364.671991][T16109] ip6gre4: left promiscuous mode [ 364.673216][T16139] CPU: 1 UID: 0 PID: 16139 Comm: syz.0.2532 Not tainted syzkaller #0 PREEMPT(full) [ 364.673240][T16139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 364.673251][T16139] Call Trace: [ 364.673260][T16139] [ 364.673268][T16139] dump_stack_lvl+0xe8/0x150 [ 364.673298][T16139] should_fail_ex+0x412/0x560 [ 364.673329][T16139] prepare_alloc_pages+0x22a/0x650 [ 364.673367][T16139] __alloc_frozen_pages_noprof+0x12f/0x380 [ 364.673394][T16139] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 364.673420][T16139] ? __pfx_policy_nodemask+0x10/0x10 [ 364.673453][T16139] alloc_pages_mpol+0x232/0x4a0 [ 364.673481][T16139] vma_alloc_folio_noprof+0xea/0x210 [ 364.673507][T16139] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 364.673540][T16139] do_wp_page+0x1204/0x5a00 [ 364.673585][T16139] ? __pfx_do_wp_page+0x10/0x10 [ 364.673608][T16139] ? do_raw_spin_lock+0x12b/0x2f0 [ 364.673631][T16139] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 364.673659][T16139] handle_mm_fault+0x1520/0x3310 [ 364.673689][T16139] ? handle_mm_fault+0xee/0x3310 [ 364.673714][T16139] ? __pfx_handle_mm_fault+0x10/0x10 [ 364.673733][T16139] ? follow_page_pte+0xd7f/0x1450 [ 364.673763][T16139] ? __pfx_follow_page_pte+0x10/0x10 [ 364.673792][T16139] __get_user_pages+0x165b/0x29d0 [ 364.673845][T16139] __gup_longterm_locked+0xdcf/0x1630 [ 364.673883][T16139] ? sanity_check_pinned_pages+0x1219/0x12d0 [ 364.673915][T16139] gup_fast_fallback+0x1d82/0x22e0 [ 364.673969][T16139] ? __pfx_gup_fast_fallback+0x10/0x10 [ 364.673992][T16139] ? ____sys_recvmsg+0x1e6/0x4a0 [ 364.674017][T16139] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 364.674041][T16139] ? do_syscall_64+0x14d/0xf80 [ 364.674060][T16139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.674082][T16139] ? pin_user_pages_fast+0x4d/0xb0 [ 364.674110][T16139] iov_iter_extract_pages+0x37b/0x5f0 [ 364.674140][T16139] extract_iter_to_sg+0xe62/0x2520 [ 364.674176][T16139] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 364.674192][T16139] ? rcu_is_watching+0x15/0xb0 [ 364.674217][T16139] ? trace_kmalloc+0x2a/0x110 [ 364.674241][T16139] ? __kmalloc_noprof+0x37d/0x760 [ 364.674261][T16139] ? sock_kmalloc+0xd6/0x160 [ 364.674282][T16139] ? __asan_memset+0x22/0x50 [ 364.674303][T16139] af_alg_get_rsgl+0x436/0x810 [ 364.674340][T16139] skcipher_recvmsg+0x3a3/0x1140 [ 364.674382][T16139] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 364.674402][T16139] ? aa_sock_msg_perm+0xf1/0x1b0 [ 364.674422][T16139] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 364.674442][T16139] ? security_socket_recvmsg+0x7e/0x2c0 [ 364.674464][T16139] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 364.674484][T16139] sock_recvmsg+0x172/0x1b0 [ 364.674509][T16139] ____sys_recvmsg+0x1e6/0x4a0 [ 364.674544][T16139] ? __pfx_____sys_recvmsg+0x10/0x10 [ 364.674584][T16139] ? import_iovec+0x73/0xa0 [ 364.674607][T16139] ___sys_recvmsg+0x215/0x590 [ 364.674634][T16139] ? get_pid_task+0x20/0x1f0 [ 364.674657][T16139] ? __pfx____sys_recvmsg+0x10/0x10 [ 364.674705][T16139] ? __fget_files+0x3a0/0x420 [ 364.674732][T16139] __x64_sys_recvmsg+0x1ba/0x2a0 [ 364.674761][T16139] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 364.674795][T16139] ? __pfx_ksys_write+0x10/0x10 [ 364.674826][T16139] do_syscall_64+0x14d/0xf80 [ 364.674845][T16139] ? trace_irq_disable+0x3b/0x150 [ 364.674861][T16139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.674877][T16139] ? clear_bhb_loop+0x40/0x90 [ 364.674900][T16139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.674918][T16139] RIP: 0033:0x7febd2b9c819 [ 364.674935][T16139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.674949][T16139] RSP: 002b:00007febd3ade028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 364.674969][T16139] RAX: ffffffffffffffda RBX: 00007febd2e15fa0 RCX: 00007febd2b9c819 [ 364.674983][T16139] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 364.674994][T16139] RBP: 00007febd3ade090 R08: 0000000000000000 R09: 0000000000000000 [ 364.675006][T16139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.675017][T16139] R13: 00007febd2e16038 R14: 00007febd2e15fa0 R15: 00007ffdb24080a8 [ 364.675045][T16139] [ 365.097711][T16109] ip6gre4: left allmulticast mode [ 365.152444][T16109] erspan0: left allmulticast mode [ 365.157642][T16109] erspan0: left promiscuous mode [ 365.164815][T16109] macvtap0: left promiscuous mode [ 365.181164][T16109] macvtap0: left allmulticast mode [ 365.239426][T12441] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 365.267834][T12441] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 365.308648][T12441] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 365.337460][T12441] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 365.451039][T16159] ip6gre1: entered promiscuous mode [ 365.456386][T16159] ip6gre1: entered allmulticast mode [ 365.515950][T16159] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.531311][T16168] netlink: 'syz.4.2539': attribute type 4 has an invalid length. [ 365.695316][T16176] IPVS: set_ctl: invalid protocol: 5 172.20.20.49:0 [ 365.816331][T16184] netlink: 'syz.1.2545': attribute type 1 has an invalid length. [ 365.827679][T16184] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR [ 365.859670][T16181] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 366.112294][T16210] netlink: 'syz.2.2554': attribute type 1 has an invalid length. [ 366.160293][T16210] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 366.191992][ T7249] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.220331][T16219] netlink: 'syz.3.2556': attribute type 1 has an invalid length. [ 366.231493][T12821] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.240643][ T7249] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.266224][T16226] FAULT_INJECTION: forcing a failure. [ 366.266224][T16226] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 366.300045][T16226] CPU: 1 UID: 0 PID: 16226 Comm: syz.2.2558 Not tainted syzkaller #0 PREEMPT(full) [ 366.300073][T16226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 366.300084][T16226] Call Trace: [ 366.300092][T16226] [ 366.300100][T16226] dump_stack_lvl+0xe8/0x150 [ 366.300130][T16226] should_fail_ex+0x412/0x560 [ 366.300169][T16226] prepare_alloc_pages+0x22a/0x650 [ 366.300202][T16226] __alloc_frozen_pages_noprof+0x12f/0x380 [ 366.300229][T16226] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 366.300257][T16226] ? __pfx_policy_nodemask+0x10/0x10 [ 366.300289][T16226] alloc_pages_mpol+0x232/0x4a0 [ 366.300318][T16226] vma_alloc_folio_noprof+0xea/0x210 [ 366.300344][T16226] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 366.300378][T16226] do_wp_page+0x1204/0x5a00 [ 366.300424][T16226] ? __pfx_do_wp_page+0x10/0x10 [ 366.300446][T16226] ? do_raw_spin_lock+0x12b/0x2f0 [ 366.300468][T16226] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 366.300498][T16226] handle_mm_fault+0x1520/0x3310 [ 366.300530][T16226] ? handle_mm_fault+0xee/0x3310 [ 366.300554][T16226] ? __pfx_handle_mm_fault+0x10/0x10 [ 366.300573][T16226] ? follow_page_pte+0xd7f/0x1450 [ 366.300600][T16226] ? __pfx_follow_page_pte+0x10/0x10 [ 366.300629][T16226] __get_user_pages+0x165b/0x29d0 [ 366.300685][T16226] __gup_longterm_locked+0xdcf/0x1630 [ 366.300723][T16226] ? sanity_check_pinned_pages+0x1219/0x12d0 [ 366.300757][T16226] gup_fast_fallback+0x1d82/0x22e0 [ 366.300811][T16226] ? __pfx_gup_fast_fallback+0x10/0x10 [ 366.300836][T16226] ? ____sys_recvmsg+0x1e6/0x4a0 [ 366.300862][T16226] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 366.300885][T16226] ? do_syscall_64+0x14d/0xf80 [ 366.300905][T16226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.300928][T16226] ? pin_user_pages_fast+0x4d/0xb0 [ 366.300956][T16226] iov_iter_extract_pages+0x37b/0x5f0 [ 366.300988][T16226] extract_iter_to_sg+0xe62/0x2520 [ 366.301021][T16226] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 366.301038][T16226] ? rcu_is_watching+0x15/0xb0 [ 366.301063][T16226] ? trace_kmalloc+0x2a/0x110 [ 366.301087][T16226] ? __kmalloc_noprof+0x37d/0x760 [ 366.301108][T16226] ? sock_kmalloc+0xd6/0x160 [ 366.301130][T16226] ? __asan_memset+0x22/0x50 [ 366.301158][T16226] af_alg_get_rsgl+0x436/0x810 [ 366.301196][T16226] skcipher_recvmsg+0x3a3/0x1140 [ 366.301236][T16226] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 366.301256][T16226] ? aa_sock_msg_perm+0xf1/0x1b0 [ 366.301277][T16226] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 366.301298][T16226] ? security_socket_recvmsg+0x7e/0x2c0 [ 366.301320][T16226] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 366.301341][T16226] sock_recvmsg+0x172/0x1b0 [ 366.301367][T16226] ____sys_recvmsg+0x1e6/0x4a0 [ 366.301402][T16226] ? __pfx_____sys_recvmsg+0x10/0x10 [ 366.301443][T16226] ? import_iovec+0x73/0xa0 [ 366.301468][T16226] ___sys_recvmsg+0x215/0x590 [ 366.301492][T16226] ? get_pid_task+0x20/0x1f0 [ 366.301516][T16226] ? __pfx____sys_recvmsg+0x10/0x10 [ 366.301566][T16226] ? __fget_files+0x3a0/0x420 [ 366.301595][T16226] __x64_sys_recvmsg+0x1ba/0x2a0 [ 366.301624][T16226] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 366.301660][T16226] ? __pfx_ksys_write+0x10/0x10 [ 366.301693][T16226] do_syscall_64+0x14d/0xf80 [ 366.301712][T16226] ? trace_irq_disable+0x3b/0x150 [ 366.301728][T16226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.301747][T16226] ? clear_bhb_loop+0x40/0x90 [ 366.301770][T16226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.301788][T16226] RIP: 0033:0x7f5765f9c819 [ 366.301806][T16226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.301822][T16226] RSP: 002b:00007f5766ea4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 366.301843][T16226] RAX: ffffffffffffffda RBX: 00007f5766215fa0 RCX: 00007f5765f9c819 [ 366.301857][T16226] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 366.301869][T16226] RBP: 00007f5766ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 366.301881][T16226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.301892][T16226] R13: 00007f5766216038 R14: 00007f5766215fa0 R15: 00007ffeb07f0d88 [ 366.301922][T16226] [ 366.344323][T16221] tipc: Enabled bearer , priority 0 [ 366.692073][T16219] __nla_validate_parse: 7 callbacks suppressed [ 366.692093][T16219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2556'. [ 366.698727][T12821] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.762262][T16249] netlink: 64134 bytes leftover after parsing attributes in process `syz.0.2561'. [ 366.771854][T16231] bond11: (slave geneve3): making interface the new active one [ 366.782541][T16231] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 366.798874][T16236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2560'. [ 366.811525][T16238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2560'. [ 366.821472][T16230] syzkaller0: entered promiscuous mode [ 366.827181][T16230] syzkaller0: entered allmulticast mode [ 366.857764][T16219] 8021q: adding VLAN 0 to HW filter on device bond11 [ 366.885861][T12444] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 366.897169][T12444] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 366.909678][T12821] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.948508][T16258] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2563'. [ 367.060382][T16261] IPv6: Can't replace route, no match found [ 367.067430][T16254] IPVS: Error connecting to the multicast addr [ 367.099594][T12444] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.118029][T12444] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.129500][T16261] IPv6: Can't replace route, no match found [ 367.167403][T16264] bridge0: entered allmulticast mode [ 367.197737][T16267] netlink: 'syz.3.2566': attribute type 1 has an invalid length. [ 367.315758][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2567'. [ 367.383495][T16274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2569'. [ 367.572443][ T29] audit: type=1800 audit(1776194508.850:8): pid=16278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2570" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 367.572716][T16278] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 367.633327][T16278] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 367.643114][T16278] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 367.772152][T16278] syz.4.2570 (16278) used greatest stack depth: 17824 bytes left [ 367.863040][T16296] netlink: 'syz.4.2575': attribute type 12 has an invalid length. [ 367.899223][T16296] netlink: 'syz.4.2575': attribute type 29 has an invalid length. [ 367.927579][T16296] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2575'. [ 367.948462][T16296] netlink: 'syz.4.2575': attribute type 2 has an invalid length. [ 367.968208][T16296] netlink: 'syz.4.2575': attribute type 1 has an invalid length. [ 368.915822][T16333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2582'. [ 369.256470][T16349] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 369.475622][T16358] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2591'. [ 369.488173][T16358] netlink: 'syz.4.2591': attribute type 163 has an invalid length. [ 369.621005][T16365] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 370.497571][T16395] tipc: Enabled bearer , priority 0 [ 370.507036][T16395] tipc: Resetting bearer [ 370.513252][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 370.849761][T16396] tipc: Disabling bearer [ 371.398234][T16406] xt_TPROXY: Can be used only with -p tcp or -p udp [ 371.812188][ T29] audit: type=1800 audit(1776194513.090:9): pid=16417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2608" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2707 res=0 errno=0 [ 371.875544][T16417] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 371.935986][T16418] __nla_validate_parse: 5 callbacks suppressed [ 371.936007][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2607'. [ 372.057784][T16417] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 372.159290][T16428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2611'. [ 372.169001][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2611'. [ 372.246334][T16417] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 372.358627][T16438] netlink: 'syz.0.2614': attribute type 30 has an invalid length. [ 372.372759][T16417] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 372.474997][T12444] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 372.504819][T12444] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 372.534256][ T7249] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 372.567593][ T7249] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 373.172633][T16464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2623'. [ 373.583963][T16471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2622'. [ 373.603625][T16471] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2622'. [ 373.631624][T16471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2622'. [ 373.660563][T16471] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2622'. [ 373.693463][T16483] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2625'. [ 373.736582][T16483] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2625'. [ 374.981693][T16510] bridge0: left allmulticast mode [ 374.987120][T16510] team0: left allmulticast mode [ 375.039323][T16510] team_slave_0: left allmulticast mode [ 375.090431][T16510] team_slave_1: left allmulticast mode [ 375.096145][T16510] dummy0: left allmulticast mode [ 375.260265][T16510] bond2: left promiscuous mode [ 375.265419][T16510] bridge1: left promiscuous mode [ 375.319555][T16510] ip6gre1: left promiscuous mode [ 375.324561][T16510] ip6gre1: left allmulticast mode [ 375.369950][T16510] bond4: left allmulticast mode [ 375.375244][T16510] ip6erspan0: left allmulticast mode [ 375.441230][T16510] ip6tnl1: left allmulticast mode [ 375.523910][T16510] tipc: Resetting bearer [ 375.566307][T16510] syzkaller0: left promiscuous mode [ 375.594585][T16510] syzkaller0: left allmulticast mode [ 375.619616][T16523] tunl0: Caught tx_queue_len zero misconfig [ 375.631292][T16517] dummy0: Caught tx_queue_len zero misconfig [ 375.637751][T16519] netlink: 'syz.3.2635': attribute type 1 has an invalid length. [ 375.646325][T12445] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.654999][T12445] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.689646][T12445] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.698317][T12445] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.390882][T16548] netlink: 'syz.2.2641': attribute type 1 has an invalid length. [ 376.463444][T16548] bond12: entered promiscuous mode [ 376.469292][T16548] bond12: entered allmulticast mode [ 376.475246][T16548] 8021q: adding VLAN 0 to HW filter on device bond12 [ 376.568709][T16552] FAULT_INJECTION: forcing a failure. [ 376.568709][T16552] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 376.639466][T16552] CPU: 0 UID: 0 PID: 16552 Comm: syz.2.2642 Not tainted syzkaller #0 PREEMPT(full) [ 376.639497][T16552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 376.639508][T16552] Call Trace: [ 376.639516][T16552] [ 376.639524][T16552] dump_stack_lvl+0xe8/0x150 [ 376.639555][T16552] should_fail_ex+0x412/0x560 [ 376.639588][T16552] prepare_alloc_pages+0x22a/0x650 [ 376.639620][T16552] __alloc_frozen_pages_noprof+0x12f/0x380 [ 376.639648][T16552] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 376.639676][T16552] ? __pfx_policy_nodemask+0x10/0x10 [ 376.639711][T16552] alloc_pages_mpol+0x232/0x4a0 [ 376.639741][T16552] vma_alloc_folio_noprof+0xea/0x210 [ 376.639768][T16552] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 376.639803][T16552] do_wp_page+0x1204/0x5a00 [ 376.639851][T16552] ? __pfx_do_wp_page+0x10/0x10 [ 376.639874][T16552] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.639898][T16552] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 376.639929][T16552] handle_mm_fault+0x1520/0x3310 [ 376.639961][T16552] ? handle_mm_fault+0xee/0x3310 [ 376.639988][T16552] ? __pfx_handle_mm_fault+0x10/0x10 [ 376.640011][T16552] ? follow_page_pte+0xd7f/0x1450 [ 376.640039][T16552] ? __pfx_follow_page_pte+0x10/0x10 [ 376.640068][T16552] __get_user_pages+0x165b/0x29d0 [ 376.640127][T16552] __gup_longterm_locked+0xdcf/0x1630 [ 376.640167][T16552] ? sanity_check_pinned_pages+0x1219/0x12d0 [ 376.640201][T16552] gup_fast_fallback+0x1d82/0x22e0 [ 376.640259][T16552] ? __pfx_gup_fast_fallback+0x10/0x10 [ 376.640288][T16552] ? ____sys_recvmsg+0x1e6/0x4a0 [ 376.640319][T16552] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 376.640343][T16552] ? do_syscall_64+0x14d/0xf80 [ 376.640363][T16552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.640387][T16552] ? pin_user_pages_fast+0x4d/0xb0 [ 376.640416][T16552] iov_iter_extract_pages+0x37b/0x5f0 [ 376.640448][T16552] extract_iter_to_sg+0xe62/0x2520 [ 376.640482][T16552] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 376.640499][T16552] ? rcu_is_watching+0x15/0xb0 [ 376.640525][T16552] ? trace_kmalloc+0x2a/0x110 [ 376.640548][T16552] ? __kmalloc_noprof+0x37d/0x760 [ 376.640570][T16552] ? sock_kmalloc+0xd6/0x160 [ 376.640593][T16552] ? __asan_memset+0x22/0x50 [ 376.640615][T16552] af_alg_get_rsgl+0x436/0x810 [ 376.640654][T16552] skcipher_recvmsg+0x3a3/0x1140 [ 376.640694][T16552] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 376.640715][T16552] ? aa_sock_msg_perm+0xf1/0x1b0 [ 376.640736][T16552] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 376.640757][T16552] ? security_socket_recvmsg+0x7e/0x2c0 [ 376.640779][T16552] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 376.640800][T16552] sock_recvmsg+0x172/0x1b0 [ 376.640825][T16552] ____sys_recvmsg+0x1e6/0x4a0 [ 376.640860][T16552] ? __pfx_____sys_recvmsg+0x10/0x10 [ 376.640903][T16552] ? import_iovec+0x73/0xa0 [ 376.640928][T16552] ___sys_recvmsg+0x215/0x590 [ 376.640952][T16552] ? get_pid_task+0x20/0x1f0 [ 376.640975][T16552] ? __pfx____sys_recvmsg+0x10/0x10 [ 376.641028][T16552] ? __fget_files+0x3a0/0x420 [ 376.641055][T16552] __x64_sys_recvmsg+0x1ba/0x2a0 [ 376.641079][T16552] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 376.641108][T16552] ? __pfx_ksys_write+0x10/0x10 [ 376.641134][T16552] do_syscall_64+0x14d/0xf80 [ 376.641149][T16552] ? trace_irq_disable+0x3b/0x150 [ 376.641162][T16552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.641180][T16552] ? clear_bhb_loop+0x40/0x90 [ 376.641204][T16552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.641222][T16552] RIP: 0033:0x7f5765f9c819 [ 376.641241][T16552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.641257][T16552] RSP: 002b:00007f5766ea4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 376.641279][T16552] RAX: ffffffffffffffda RBX: 00007f5766215fa0 RCX: 00007f5765f9c819 [ 376.641293][T16552] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 376.641337][T16552] RBP: 00007f5766ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 376.641349][T16552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 376.641360][T16552] R13: 00007f5766216038 R14: 00007f5766215fa0 R15: 00007ffeb07f0d88 [ 376.641392][T16552] [ 377.285734][T16565] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2647'. [ 377.339038][T16571] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2645'. [ 377.500782][T16578] nbd: must specify a size in bytes for the device [ 377.524436][T16579] nbd: must specify a size in bytes for the device [ 377.548043][T16579] netlink: 'syz.3.2650': attribute type 1 has an invalid length. [ 377.548581][T16580] batadv_slave_0: Caught tx_queue_len zero misconfig [ 377.573335][T16579] netlink: 'syz.3.2650': attribute type 2 has an invalid length. [ 377.593740][T16578] netlink: 'syz.3.2650': attribute type 1 has an invalid length. [ 377.630036][T16578] netlink: 'syz.3.2650': attribute type 2 has an invalid length. [ 377.692778][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2654'. [ 377.822734][T16610] FAULT_INJECTION: forcing a failure. [ 377.822734][T16610] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 377.909273][T16610] CPU: 0 UID: 0 PID: 16610 Comm: syz.4.2658 Not tainted syzkaller #0 PREEMPT(full) [ 377.909303][T16610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 377.909315][T16610] Call Trace: [ 377.909323][T16610] [ 377.909331][T16610] dump_stack_lvl+0xe8/0x150 [ 377.909361][T16610] should_fail_ex+0x412/0x560 [ 377.909393][T16610] prepare_alloc_pages+0x22a/0x650 [ 377.909425][T16610] __alloc_frozen_pages_noprof+0x12f/0x380 [ 377.909453][T16610] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 377.909480][T16610] ? __pfx_policy_nodemask+0x10/0x10 [ 377.909514][T16610] alloc_pages_mpol+0x232/0x4a0 [ 377.909549][T16610] vma_alloc_folio_noprof+0xea/0x210 [ 377.909575][T16610] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 377.909606][T16610] do_wp_page+0x1204/0x5a00 [ 377.909653][T16610] ? __pfx_do_wp_page+0x10/0x10 [ 377.909675][T16610] ? do_raw_spin_lock+0x12b/0x2f0 [ 377.909699][T16610] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 377.909726][T16610] handle_mm_fault+0x1520/0x3310 [ 377.909758][T16610] ? handle_mm_fault+0xee/0x3310 [ 377.909783][T16610] ? __pfx_handle_mm_fault+0x10/0x10 [ 377.909802][T16610] ? follow_page_pte+0xd7f/0x1450 [ 377.909829][T16610] ? __pfx_follow_page_pte+0x10/0x10 [ 377.909858][T16610] __get_user_pages+0x165b/0x29d0 [ 377.909914][T16610] __gup_longterm_locked+0xdcf/0x1630 [ 377.909953][T16610] ? sanity_check_pinned_pages+0x1219/0x12d0 [ 377.909988][T16610] gup_fast_fallback+0x1d82/0x22e0 [ 377.910053][T16610] ? __pfx_gup_fast_fallback+0x10/0x10 [ 377.910077][T16610] ? ____sys_recvmsg+0x1e6/0x4a0 [ 377.910103][T16610] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 377.910127][T16610] ? do_syscall_64+0x14d/0xf80 [ 377.910146][T16610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.910171][T16610] ? pin_user_pages_fast+0x4d/0xb0 [ 377.910199][T16610] iov_iter_extract_pages+0x37b/0x5f0 [ 377.910231][T16610] extract_iter_to_sg+0xe62/0x2520 [ 377.910263][T16610] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 377.910280][T16610] ? rcu_is_watching+0x15/0xb0 [ 377.910305][T16610] ? trace_kmalloc+0x2a/0x110 [ 377.910329][T16610] ? __kmalloc_noprof+0x37d/0x760 [ 377.910350][T16610] ? sock_kmalloc+0xd6/0x160 [ 377.910373][T16610] ? __asan_memset+0x22/0x50 [ 377.910395][T16610] af_alg_get_rsgl+0x436/0x810 [ 377.910433][T16610] skcipher_recvmsg+0x3a3/0x1140 [ 377.910471][T16610] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 377.910491][T16610] ? aa_sock_msg_perm+0xf1/0x1b0 [ 377.910512][T16610] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 377.910533][T16610] ? security_socket_recvmsg+0x7e/0x2c0 [ 377.910555][T16610] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 377.910576][T16610] sock_recvmsg+0x172/0x1b0 [ 377.910600][T16610] ____sys_recvmsg+0x1e6/0x4a0 [ 377.910634][T16610] ? __pfx_____sys_recvmsg+0x10/0x10 [ 377.910674][T16610] ? import_iovec+0x73/0xa0 [ 377.910699][T16610] ___sys_recvmsg+0x215/0x590 [ 377.910723][T16610] ? get_pid_task+0x20/0x1f0 [ 377.910746][T16610] ? __pfx____sys_recvmsg+0x10/0x10 [ 377.910797][T16610] ? __fget_files+0x3a0/0x420 [ 377.910826][T16610] __x64_sys_recvmsg+0x1ba/0x2a0 [ 377.910855][T16610] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 377.910891][T16610] ? __pfx_ksys_write+0x10/0x10 [ 377.910923][T16610] do_syscall_64+0x14d/0xf80 [ 377.910943][T16610] ? trace_irq_disable+0x3b/0x150 [ 377.910959][T16610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.910977][T16610] ? clear_bhb_loop+0x40/0x90 [ 377.911003][T16610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.911021][T16610] RIP: 0033:0x7f64afb9c819 [ 377.911039][T16610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.911054][T16610] RSP: 002b:00007f64b0b2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 377.911073][T16610] RAX: ffffffffffffffda RBX: 00007f64afe15fa0 RCX: 00007f64afb9c819 [ 377.911086][T16610] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 377.911096][T16610] RBP: 00007f64b0b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 377.911107][T16610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 377.911118][T16610] R13: 00007f64afe16038 R14: 00007f64afe15fa0 R15: 00007ffc54008478 [ 377.911144][T16610] [ 378.508806][T16624] pimreg: entered allmulticast mode [ 378.781712][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 378.819189][ T2036] block nbd0: Possible stuck request ffff888026d40000: control (read@0,1024B). Runtime 120 seconds [ 378.830203][ T2036] block nbd0: Possible stuck request ffff888026d40200: control (read@1024,1024B). Runtime 120 seconds [ 378.841292][ T2036] block nbd0: Possible stuck request ffff888026d40400: control (read@2048,1024B). Runtime 120 seconds [ 378.852363][ T2036] block nbd0: Possible stuck request ffff888026d40600: control (read@3072,1024B). Runtime 120 seconds [ 379.057250][T16618] syz.1.2659 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 379.124006][T16618] CPU: 0 UID: 0 PID: 16618 Comm: syz.1.2659 Not tainted syzkaller #0 PREEMPT(full) [ 379.124038][T16618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 379.124052][T16618] Call Trace: [ 379.124060][T16618] [ 379.124070][T16618] dump_stack_lvl+0xe8/0x150 [ 379.124105][T16618] dump_header+0xd3/0x4c0 [ 379.124133][T16618] oom_kill_process+0x3ab/0x970 [ 379.124161][T16618] out_of_memory+0x106c/0x1410 [ 379.124183][T16618] ? percpu_ref_put+0x19/0x180 [ 379.124212][T16618] ? __pfx___mutex_lock+0x10/0x10 [ 379.124244][T16618] ? __pfx_out_of_memory+0x10/0x10 [ 379.124266][T16618] ? do_raw_spin_unlock+0xf5/0x210 [ 379.124299][T16618] try_charge_memcg+0xc53/0x1560 [ 379.124345][T16618] ? __pfx_try_charge_memcg+0x10/0x10 [ 379.124375][T16618] ? get_mem_cgroup_from_mm+0x38/0x290 [ 379.124412][T16618] ? get_mem_cgroup_from_mm+0x38/0x290 [ 379.124442][T16618] ? get_mem_cgroup_from_mm+0x38/0x290 [ 379.124474][T16618] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 379.124507][T16618] __mem_cgroup_charge+0xab/0x1e0 [ 379.124534][T16618] shmem_alloc_and_add_folio+0x7d0/0xf80 [ 379.124563][T16618] ? filemap_get_entry+0xca/0x320 [ 379.124585][T16618] ? filemap_get_entry+0xca/0x320 [ 379.124610][T16618] ? filemap_get_entry+0x2ac/0x320 [ 379.124632][T16618] ? __pfx_filemap_get_entry+0x10/0x10 [ 379.124655][T16618] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 379.124682][T16618] ? shmem_allowable_huge_orders+0x5ec/0x690 [ 379.124722][T16618] shmem_get_folio_gfp+0x5a9/0x1670 [ 379.124774][T16618] shmem_fault+0x179/0x390 [ 379.124806][T16618] __do_fault+0x138/0x390 [ 379.124834][T16618] do_pte_missing+0x228f/0x3490 [ 379.124858][T16618] ? do_pte_missing+0x130a/0x3490 [ 379.124892][T16618] ? handle_mm_fault+0xee/0x3310 [ 379.124924][T16618] handle_mm_fault+0x1bec/0x3310 [ 379.124958][T16618] ? handle_mm_fault+0xee/0x3310 [ 379.124986][T16618] ? __pfx_handle_mm_fault+0x10/0x10 [ 379.125008][T16618] ? follow_page_pte+0x841/0x1450 [ 379.125038][T16618] ? __pfx_follow_page_pte+0x10/0x10 [ 379.125070][T16618] __get_user_pages+0x165b/0x29d0 [ 379.125138][T16618] populate_vma_page_range+0x2be/0x3c0 [ 379.125172][T16618] ? __pfx_populate_vma_page_range+0x10/0x10 [ 379.125207][T16618] ? down_read+0x272/0x2e0 [ 379.125231][T16618] ? __mm_populate+0x173/0x390 [ 379.125263][T16618] __mm_populate+0x25f/0x390 [ 379.125296][T16618] ? __pfx___mm_populate+0x10/0x10 [ 379.125337][T16618] vm_mmap_pgoff+0x3aa/0x4f0 [ 379.125367][T16618] ? __se_sys_futex+0x3a8/0x450 [ 379.125398][T16618] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 379.125431][T16618] ? rcu_is_watching+0x15/0xb0 [ 379.125464][T16618] ? ksys_mmap_pgoff+0xf3/0x760 [ 379.125485][T16618] ? __x64_sys_mmap+0x7f/0x140 [ 379.125517][T16618] do_syscall_64+0x14d/0xf80 [ 379.125540][T16618] ? trace_irq_disable+0x3b/0x150 [ 379.125559][T16618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.125581][T16618] ? clear_bhb_loop+0x40/0x90 [ 379.125606][T16618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.125626][T16618] RIP: 0033:0x7f4db2b9c819 [ 379.125646][T16618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.125663][T16618] RSP: 002b:00007f4db39bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 379.125685][T16618] RAX: ffffffffffffffda RBX: 00007f4db2e15fa0 RCX: 00007f4db2b9c819 [ 379.125700][T16618] RDX: 000000000100000d RSI: 0000000000600000 RDI: 00002000009fd000 [ 379.125715][T16618] RBP: 00007f4db2c32c91 R08: ffffffffffffffff R09: 0000000000000000 [ 379.125729][T16618] R10: 0000000000006031 R11: 0000000000000246 R12: 0000000000000000 [ 379.125741][T16618] R13: 00007f4db2e16038 R14: 00007f4db2e15fa0 R15: 00007fff579e5e58 [ 379.125775][T16618] [ 379.125783][T16618] memory: usage 307200kB, limit 307200kB, failcnt 417 [ 379.314078][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.316730][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2669'. [ 379.525310][T16618] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 379.533934][T16618] kmem: usage 305400kB, limit 9007199254740988kB, failcnt 0 [ 379.541714][T16618] Memory cgroup stats for /syz1: [ 379.542012][T16618] cache 1822720 [ 379.555699][T16618] rss 0 [ 379.558609][T16618] rss_huge 0 [ 379.562369][T16618] shmem 1822720 [ 379.565957][T16618] mapped_file 1822720 [ 379.570361][T16618] dirty 0 [ 379.573402][T16618] writeback 0 [ 379.576888][T16618] workingset_refault_anon 0 [ 379.586435][T16618] workingset_refault_file 0 [ 379.592765][T16618] swap 212992 [ 379.596185][T16618] swapcached 212992 [ 379.600861][T16618] pgpgin 76979 [ 379.604414][T16618] pgpgout 76534 [ 379.608120][T16618] pgfault 143315 [ 379.611885][T16618] pgmajfault 3 [ 379.615703][T16618] inactive_anon 0 [ 379.619811][T16618] active_anon 0 [ 379.623396][T16618] inactive_file 0 [ 379.627191][T16618] active_file 0 [ 379.631751][T16618] unevictable 1822720 [ 379.637294][T16618] hierarchical_memory_limit 314572800 [ 379.643125][T16618] hierarchical_memsw_limit 9223372036854771712 [ 379.649569][T16618] total_cache 1822720 [ 379.653774][T16618] total_rss 0 [ 379.657252][T16618] total_rss_huge 0 [ 379.661812][T16618] total_shmem 1822720 [ 379.665923][T16618] total_mapped_file 1822720 [ 379.670612][T16618] total_dirty 0 [ 379.674386][T16618] total_writeback 0 [ 379.678398][T16618] total_workingset_refault_anon 0 [ 379.683947][T16618] total_workingset_refault_file 0 [ 379.689410][T16618] total_swap 212992 [ 379.693348][T16618] total_swapcached 212992 [ 379.697824][T16618] total_pgpgin 76979 [ 379.702259][T16618] total_pgpgout 76534 [ 379.706378][T16618] total_pgfault 143316 [ 379.710588][T16618] total_pgmajfault 3 [ 379.714805][T16618] total_inactive_anon 0 [ 379.719505][T16618] total_active_anon 0 [ 379.723731][T16618] total_inactive_file 0 [ 379.728130][T16618] total_active_file 0 [ 379.732405][T16618] total_unevictable 1822720 [ 379.737199][T16618] anon_cost 0 [ 379.741036][T16618] file_cost 0 [ 379.744451][T16618] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2659,pid=16616,uid=0 [ 379.762632][T16618] Memory cgroup out of memory: Killed process 16616 (syz.1.2659) total-vm:102420kB, anon-rss:1236kB, file-rss:22660kB, shmem-rss:1780kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 379.929708][T16661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2671'. [ 379.970313][T16661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2671'. [ 379.992323][T16664] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 380.118953][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2673'. [ 380.130315][T16668] erspan0: left allmulticast mode [ 380.135486][T16668] erspan0: left promiscuous mode [ 380.140871][T16668] bridge0: port 3(erspan0) entered disabled state [ 380.166115][T16668] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.264441][T16668] bridge_slave_1: left allmulticast mode [ 380.289065][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2676'. [ 380.306661][T16668] bridge_slave_1: left promiscuous mode [ 380.312524][T16668] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.370916][T16668] bond0: (slave bond_slave_1): Releasing backup interface [ 380.420010][T16668] team0: Port device team_slave_0 removed [ 380.447061][T16668] team0: Port device team_slave_1 removed [ 380.454564][T16668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.491442][T16668] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 380.541022][T16690] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2678'. [ 380.868118][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2683'. [ 381.317648][T16732] netlink: 'syz.4.2690': attribute type 1 has an invalid length. [ 382.027732][T16763] syzkaller0: entered promiscuous mode [ 382.035011][T16763] syzkaller0: entered allmulticast mode [ 382.214902][T16766] delete_channel: no stack [ 382.295680][T16776] __nla_validate_parse: 6 callbacks suppressed [ 382.295702][T16776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2699'. [ 382.415017][T16788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2702'. [ 382.432344][T16791] Cannot find add_set index 3 as target [ 382.878459][T16822] netlink: 'syz.4.2707': attribute type 33 has an invalid length. [ 382.906108][T16822] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2707'. [ 382.981773][T16825] FAULT_INJECTION: forcing a failure. [ 382.981773][T16825] name failslab, interval 1, probability 0, space 0, times 1 [ 382.995978][T16825] CPU: 1 UID: 0 PID: 16825 Comm: syz.4.2709 Not tainted syzkaller #0 PREEMPT(full) [ 382.996005][T16825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 382.996017][T16825] Call Trace: [ 382.996025][T16825] [ 382.996034][T16825] dump_stack_lvl+0xe8/0x150 [ 382.996064][T16825] should_fail_ex+0x412/0x560 [ 382.996096][T16825] should_failslab+0xa8/0x100 [ 382.996121][T16825] __kmalloc_noprof+0xe8/0x760 [ 382.996143][T16825] ? sock_kmalloc+0xd6/0x160 [ 382.996166][T16825] sock_kmalloc+0xd6/0x160 [ 382.996187][T16825] skcipher_recvmsg+0x54d/0x1140 [ 382.996226][T16825] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 382.996247][T16825] ? aa_sock_msg_perm+0xf1/0x1b0 [ 382.996268][T16825] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 382.996288][T16825] ? security_socket_recvmsg+0x7e/0x2c0 [ 382.996310][T16825] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 382.996332][T16825] sock_recvmsg+0x172/0x1b0 [ 382.996356][T16825] ____sys_recvmsg+0x1e6/0x4a0 [ 382.996391][T16825] ? __pfx_____sys_recvmsg+0x10/0x10 [ 382.996432][T16825] ? import_iovec+0x73/0xa0 [ 382.996457][T16825] ___sys_recvmsg+0x215/0x590 [ 382.996481][T16825] ? get_pid_task+0x20/0x1f0 [ 382.996504][T16825] ? __pfx____sys_recvmsg+0x10/0x10 [ 382.996553][T16825] ? __fget_files+0x3a0/0x420 [ 382.996581][T16825] __x64_sys_recvmsg+0x1ba/0x2a0 [ 382.996610][T16825] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 382.996645][T16825] ? __pfx_ksys_write+0x10/0x10 [ 382.996677][T16825] do_syscall_64+0x14d/0xf80 [ 382.996697][T16825] ? trace_irq_disable+0x3b/0x150 [ 382.996714][T16825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.996740][T16825] ? clear_bhb_loop+0x40/0x90 [ 382.996763][T16825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.996782][T16825] RIP: 0033:0x7f64afb9c819 [ 382.996801][T16825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.996817][T16825] RSP: 002b:00007f64b0b2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 382.996842][T16825] RAX: ffffffffffffffda RBX: 00007f64afe15fa0 RCX: 00007f64afb9c819 [ 382.996856][T16825] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 382.996868][T16825] RBP: 00007f64b0b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 382.996880][T16825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.996891][T16825] R13: 00007f64afe16038 R14: 00007f64afe15fa0 R15: 00007ffc54008478 [ 382.996922][T16825] [ 383.314137][T16831] netlink: 404 bytes leftover after parsing attributes in process `syz.4.2710'. [ 383.323455][T16831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2710'. [ 383.333337][T16831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2710'. [ 383.342357][T16831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2710'. [ 383.413002][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2711'. [ 383.428795][T16834] sctp: [Deprecated]: syz.4.2711 (pid 16834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.428795][T16834] Use struct sctp_sack_info instead [ 383.445533][T16834] sctp: [Deprecated]: syz.4.2711 (pid 16834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.445533][T16834] Use struct sctp_sack_info instead [ 383.462293][T16834] sctp: [Deprecated]: syz.4.2711 (pid 16834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.462293][T16834] Use struct sctp_sack_info instead [ 383.480391][T16834] sctp: [Deprecated]: syz.4.2711 (pid 16834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.480391][T16834] Use struct sctp_sack_info instead [ 383.497166][T16834] sctp: [Deprecated]: syz.4.2711 (pid 16834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.497166][T16834] Use struct sctp_sack_info instead [ 383.653643][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2713'. [ 383.949127][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5170 ms [ 383.957312][ C1] lec:lec_tx_timeout: lec0 [ 385.121266][T16773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.272768][T16849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2716'. [ 385.320688][T16855] netlink: 'syz.0.2718': attribute type 21 has an invalid length. [ 385.411872][T16859] FAULT_INJECTION: forcing a failure. [ 385.411872][T16859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.434888][T16860] netlink: 'syz.1.2719': attribute type 5 has an invalid length. [ 385.439631][T16859] CPU: 1 UID: 0 PID: 16859 Comm: syz.2.2720 Not tainted syzkaller #0 PREEMPT(full) [ 385.439658][T16859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 385.439669][T16859] Call Trace: [ 385.439677][T16859] [ 385.439684][T16859] dump_stack_lvl+0xe8/0x150 [ 385.439714][T16859] should_fail_ex+0x412/0x560 [ 385.439745][T16859] _copy_to_user+0x31/0xb0 [ 385.439769][T16859] simple_read_from_buffer+0xe1/0x170 [ 385.439799][T16859] proc_fail_nth_read+0x1bb/0x230 [ 385.439827][T16859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.439854][T16859] ? rw_verify_area+0x2a6/0x4d0 [ 385.439873][T16859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.439900][T16859] vfs_read+0x20c/0xa70 [ 385.439918][T16859] ? fdget_pos+0x246/0x320 [ 385.439938][T16859] ? __pfx___mutex_lock+0x10/0x10 [ 385.439960][T16859] ? __pfx_vfs_read+0x10/0x10 [ 385.439981][T16859] ? __fget_files+0x2a/0x420 [ 385.440001][T16859] ? __fget_files+0x3a0/0x420 [ 385.440017][T16859] ? __fget_files+0x2a/0x420 [ 385.440041][T16859] ksys_read+0x150/0x270 [ 385.440063][T16859] ? __pfx_ksys_read+0x10/0x10 [ 385.440093][T16859] do_syscall_64+0x14d/0xf80 [ 385.440112][T16859] ? trace_irq_disable+0x3b/0x150 [ 385.440129][T16859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.440147][T16859] ? clear_bhb_loop+0x40/0x90 [ 385.440168][T16859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.440185][T16859] RIP: 0033:0x7f5765f5d04e [ 385.440203][T16859] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 385.440218][T16859] RSP: 002b:00007f5766ea3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 385.440237][T16859] RAX: ffffffffffffffda RBX: 00007f5766ea46c0 RCX: 00007f5765f5d04e [ 385.440251][T16859] RDX: 000000000000000f RSI: 00007f5766ea40a0 RDI: 0000000000000007 [ 385.440262][T16859] RBP: 00007f5766ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 385.440282][T16859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 385.440293][T16859] R13: 00007f5766216038 R14: 00007f5766215fa0 R15: 00007ffeb07f0d88 [ 385.440322][T16859] [ 385.443172][T16863] xt_TCPMSS: Only works on TCP SYN packets [ 385.647975][T16868] syzkaller1: entered promiscuous mode [ 385.679332][T16868] syzkaller1: entered allmulticast mode [ 386.063275][T16897] x_tables: ip_tables: ah match: only valid for protocol 51 [ 386.137620][T16902] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 386.590813][T16939] veth1_to_team: Caught tx_queue_len zero misconfig [ 386.791122][T16944] netlink: 'syz.3.2748': attribute type 4 has an invalid length. [ 386.885561][T12445] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 386.902873][T12445] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 386.920024][T12445] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 386.997256][T12445] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 387.279848][T16978] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20004 [ 387.387312][T16983] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 387.827779][T16985] netlink: 'syz.4.2760': attribute type 58 has an invalid length. [ 387.835971][T16985] __nla_validate_parse: 10 callbacks suppressed [ 387.835985][T16985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2760'. [ 388.149382][ T5195] udevd[5195]: worker [12392] /devices/virtual/block/nbd0 is taking a long time [ 388.158773][ T5195] udevd[5195]: worker [12588] /devices/virtual/block/nbd1 is taking a long time [ 392.749428][ T2036] block nbd1: Possible stuck request ffff888026dd0000: control (read@0,1024B). Runtime 120 seconds [ 392.760665][ T2036] block nbd1: Possible stuck request ffff888026dd0200: control (read@1024,1024B). Runtime 120 seconds [ 392.771866][ T2036] block nbd1: Possible stuck request ffff888026dd0400: control (read@2048,1024B). Runtime 120 seconds [ 392.783246][ T2036] block nbd1: Possible stuck request ffff888026dd0600: control (read@3072,1024B). Runtime 120 seconds [ 397.229370][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 402.474660][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 402.486596][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 402.496429][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 402.501489][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 402.513602][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 402.522382][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 402.530888][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 402.538259][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 402.548187][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 402.558273][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 402.865256][T17001] chnl_net:caif_netlink_parms(): no params data found [ 402.979650][T17001] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.986872][T17001] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.994517][T17001] bridge_slave_0: entered allmulticast mode [ 403.002113][T17001] bridge_slave_0: entered promiscuous mode [ 403.014432][T17001] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.022134][T17001] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.029636][T17001] bridge_slave_1: entered allmulticast mode [ 403.036640][T17001] bridge_slave_1: entered promiscuous mode [ 403.068421][T17001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.094330][T17001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.139876][T17001] team0: Port device team_slave_0 added [ 403.153119][T17001] team0: Port device team_slave_1 added [ 403.193099][T17001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.200355][T17001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.227020][T17001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.248049][T17001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.255307][T17001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.283415][T17001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.295291][T17003] chnl_net:caif_netlink_parms(): no params data found [ 403.370158][T17001] hsr_slave_0: entered promiscuous mode [ 403.376740][T17001] hsr_slave_1: entered promiscuous mode [ 403.512512][T17003] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.552428][T17003] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.566547][T17003] bridge_slave_0: entered allmulticast mode [ 403.590378][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 403.600677][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 403.612130][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 403.620266][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 403.628968][T17003] bridge_slave_0: entered promiscuous mode [ 403.639565][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 403.668495][T17003] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.677301][T17003] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.685505][T17003] bridge_slave_1: entered allmulticast mode [ 403.693910][T17003] bridge_slave_1: entered promiscuous mode [ 403.712504][ T5838] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 403.723464][ T5838] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 403.733081][ T5838] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 403.741395][ T5838] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 403.755215][ T5838] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 403.804631][ T5838] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 403.815281][ T5838] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 403.824965][ T5838] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 403.827761][T17003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.843009][ T5838] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 403.853515][ T5838] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 403.884318][T17003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.949587][T17003] team0: Port device team_slave_0 added [ 403.984874][T17003] team0: Port device team_slave_1 added [ 404.065870][T17003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.073257][T17003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.100266][T17003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.126451][T17003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.134051][T17003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.160586][T17003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.265496][T17003] hsr_slave_0: entered promiscuous mode [ 404.277586][T17003] hsr_slave_1: entered promiscuous mode [ 404.284891][T17003] debugfs: 'hsr0' already exists in 'hsr' [ 404.291285][T17003] Cannot create hsr debugfs directory [ 404.591186][ T5845] Bluetooth: hci6: command tx timeout [ 404.599807][ T5845] Bluetooth: hci5: command tx timeout [ 404.627452][T17020] chnl_net:caif_netlink_parms(): no params data found [ 404.858650][T17020] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.866427][T17020] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.873734][T17020] bridge_slave_0: entered allmulticast mode [ 404.881225][T17020] bridge_slave_0: entered promiscuous mode [ 404.888720][T17022] chnl_net:caif_netlink_parms(): no params data found [ 404.914513][T17020] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.922119][T17020] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.929971][T17020] bridge_slave_1: entered allmulticast mode [ 404.937206][T17020] bridge_slave_1: entered promiscuous mode [ 404.995480][T17020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.019746][T17020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.081591][T17022] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.088851][T17022] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.096476][T17022] bridge_slave_0: entered allmulticast mode [ 405.104218][T17022] bridge_slave_0: entered promiscuous mode [ 405.113697][T17020] team0: Port device team_slave_0 added [ 405.127434][T17020] team0: Port device team_slave_1 added [ 405.133449][T17022] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.141140][T17022] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.148525][T17022] bridge_slave_1: entered allmulticast mode [ 405.156113][T17022] bridge_slave_1: entered promiscuous mode [ 405.215364][T17020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.223129][T17020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.250158][T17020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.263181][T17020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.270342][T17020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.296717][T17020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.311887][T17022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.328600][T17022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.343583][T17024] chnl_net:caif_netlink_parms(): no params data found [ 405.394478][T17022] team0: Port device team_slave_0 added [ 405.421547][T17022] team0: Port device team_slave_1 added [ 405.432369][T17020] hsr_slave_0: entered promiscuous mode [ 405.438902][T17020] hsr_slave_1: entered promiscuous mode [ 405.445436][T17020] debugfs: 'hsr0' already exists in 'hsr' [ 405.451318][T17020] Cannot create hsr debugfs directory [ 405.504112][T17022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.511169][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.538030][T17022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.551318][T17022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.558393][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.585072][T17022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.673550][T17024] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.680841][T17024] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.688032][T17024] bridge_slave_0: entered allmulticast mode [ 405.696042][T17024] bridge_slave_0: entered promiscuous mode [ 405.709290][ T5838] Bluetooth: hci7: command tx timeout [ 405.734169][T17024] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.742403][T17024] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.750363][T17024] bridge_slave_1: entered allmulticast mode [ 405.757553][T17024] bridge_slave_1: entered promiscuous mode [ 405.776432][T17022] hsr_slave_0: entered promiscuous mode [ 405.783048][T17022] hsr_slave_1: entered promiscuous mode [ 405.789573][T17022] debugfs: 'hsr0' already exists in 'hsr' [ 405.795414][T17022] Cannot create hsr debugfs directory [ 405.801148][ T5838] Bluetooth: hci8: command tx timeout [ 405.868402][T17024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.892616][T17024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.949419][ T5838] Bluetooth: hci9: command tx timeout [ 405.975058][T17024] team0: Port device team_slave_0 added [ 405.995622][T17024] team0: Port device team_slave_1 added [ 406.063775][T17024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.070980][T17024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.097222][T17024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.110142][T17024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.117365][T17024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.143623][T17024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.224574][T17024] hsr_slave_0: entered promiscuous mode [ 406.231089][T17024] hsr_slave_1: entered promiscuous mode [ 406.237201][T17024] debugfs: 'hsr0' already exists in 'hsr' [ 406.243052][T17024] Cannot create hsr debugfs directory [ 406.669424][ T5845] Bluetooth: hci6: command tx timeout [ 406.675248][ T5838] Bluetooth: hci5: command tx timeout [ 407.479822][ T6518] lec:lec_start_xmit: lec0:No lecd attached [ 407.789399][ T5838] Bluetooth: hci7: command tx timeout [ 407.869403][ T5838] Bluetooth: hci8: command tx timeout [ 408.029305][ T5838] Bluetooth: hci9: command tx timeout [ 408.749426][ T5838] Bluetooth: hci5: command tx timeout [ 408.749434][ T5845] Bluetooth: hci6: command tx timeout [ 409.390254][ T2036] block nbd0: Possible stuck request ffff888026d40000: control (read@0,1024B). Runtime 150 seconds [ 409.401196][ T2036] block nbd0: Possible stuck request ffff888026d40200: control (read@1024,1024B). Runtime 150 seconds [ 409.412539][ T2036] block nbd0: Possible stuck request ffff888026d40400: control (read@2048,1024B). Runtime 150 seconds [ 409.423898][ T2036] block nbd0: Possible stuck request ffff888026d40600: control (read@3072,1024B). Runtime 150 seconds [ 409.869311][ T5838] Bluetooth: hci7: command tx timeout [ 409.949410][ T5838] Bluetooth: hci8: command tx timeout [ 410.109648][ T5838] Bluetooth: hci9: command tx timeout [ 410.829371][ T5838] Bluetooth: hci6: command tx timeout [ 410.829393][ T5845] Bluetooth: hci5: command tx timeout [ 411.949424][ T5838] Bluetooth: hci7: command tx timeout [ 412.029442][ T5838] Bluetooth: hci8: command tx timeout [ 412.189381][ T5838] Bluetooth: hci9: command tx timeout [ 412.909279][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 412.917406][ C1] lec:lec_tx_timeout: lec0 [ 422.829401][ T2036] block nbd1: Possible stuck request ffff888026dd0000: control (read@0,1024B). Runtime 150 seconds [ 422.840851][ T2036] block nbd1: Possible stuck request ffff888026dd0200: control (read@1024,1024B). Runtime 150 seconds [ 422.852951][ T2036] block nbd1: Possible stuck request ffff888026dd0400: control (read@2048,1024B). Runtime 150 seconds [ 422.864073][ T2036] block nbd1: Possible stuck request ffff888026dd0600: control (read@3072,1024B). Runtime 150 seconds [ 431.149373][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 439.463060][ T5195] udevd[5195]: worker [12392] /devices/virtual/block/nbd0 timeout; kill it [ 439.472173][ T2036] block nbd0: Possible stuck request ffff888026d40000: control (read@0,1024B). Runtime 180 seconds [ 439.483115][ T2036] block nbd0: Possible stuck request ffff888026d40200: control (read@1024,1024B). Runtime 180 seconds [ 439.494592][ T5195] udevd[5195]: seq 20850 '/devices/virtual/block/nbd0' killed [ 439.502313][ T2036] block nbd0: Possible stuck request ffff888026d40400: control (read@2048,1024B). Runtime 180 seconds [ 439.513447][ T2036] block nbd0: Possible stuck request ffff888026d40600: control (read@3072,1024B). Runtime 180 seconds [ 440.113849][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 445.129191][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 445.137343][ C1] lec:lec_tx_timeout: lec0 [ 452.909469][ T2036] block nbd1: Possible stuck request ffff888026dd0000: control (read@0,1024B). Runtime 180 seconds [ 452.920804][ T2036] block nbd1: Possible stuck request ffff888026dd0200: control (read@1024,1024B). Runtime 180 seconds [ 452.932297][ T2036] block nbd1: Possible stuck request ffff888026dd0400: control (read@2048,1024B). Runtime 180 seconds [ 452.943563][ T2036] block nbd1: Possible stuck request ffff888026dd0600: control (read@3072,1024B). Runtime 180 seconds [ 454.543006][ T5195] udevd[5195]: worker [12588] /devices/virtual/block/nbd1 timeout; kill it [ 454.552039][ T5195] udevd[5195]: seq 21400 '/devices/virtual/block/nbd1' killed [ 463.023703][ T5845] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 463.033499][ T5845] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 463.043176][ T5845] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 463.055752][ T5825] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 463.065354][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 463.066351][ T5825] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 463.082056][ T5825] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 463.090441][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 463.100845][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 463.110204][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 463.428438][T17051] chnl_net:caif_netlink_parms(): no params data found [ 463.541080][T17051] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.548336][T17051] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.556202][T17051] bridge_slave_0: entered allmulticast mode [ 463.563370][T17051] bridge_slave_0: entered promiscuous mode [ 463.576162][T17051] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.583690][T17051] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.591633][T17051] bridge_slave_1: entered allmulticast mode [ 463.598662][T17051] bridge_slave_1: entered promiscuous mode [ 463.634547][T17051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.647537][T17051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.689629][T17051] team0: Port device team_slave_0 added [ 463.704371][T17051] team0: Port device team_slave_1 added [ 463.747381][T17051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.754681][T17051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.781016][T17051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.794450][T17051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.802093][T17051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.828459][T17051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.895165][T17051] hsr_slave_0: entered promiscuous mode [ 463.904992][T17051] hsr_slave_1: entered promiscuous mode [ 463.911440][T17051] debugfs: 'hsr0' already exists in 'hsr' [ 463.917168][T17051] Cannot create hsr debugfs directory [ 463.923442][T17053] chnl_net:caif_netlink_parms(): no params data found [ 464.041184][T17053] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.048450][T17053] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.056183][T17053] bridge_slave_0: entered allmulticast mode [ 464.063869][T17053] bridge_slave_0: entered promiscuous mode [ 464.077697][T17053] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.085126][T17053] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.092527][T17053] bridge_slave_1: entered allmulticast mode [ 464.099833][T17053] bridge_slave_1: entered promiscuous mode [ 464.149477][T17053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.167553][T17053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.223002][T17053] team0: Port device team_slave_0 added [ 464.231050][T17053] team0: Port device team_slave_1 added [ 464.255531][T17053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.263094][T17053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.291220][T17053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.312721][T17053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.319759][T17053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.346464][T17053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.393407][T17053] hsr_slave_0: entered promiscuous mode [ 464.400814][T17053] hsr_slave_1: entered promiscuous mode [ 464.407458][T17053] debugfs: 'hsr0' already exists in 'hsr' [ 464.413695][T17053] Cannot create hsr debugfs directory [ 464.673952][ T51] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 464.685507][ T51] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 464.695376][ T51] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 464.707124][ T5838] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 464.717712][ T5838] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 464.726758][ T5838] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 464.735249][ T5825] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 464.745573][ T5825] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 464.757374][ T5825] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 464.776109][ T5825] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 464.790094][ T51] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 464.799624][ T51] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 464.807831][ T5844] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 464.829308][ T5825] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 464.837600][ T5825] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 465.151986][ T5845] Bluetooth: hci11: command tx timeout [ 465.158471][ T5845] Bluetooth: hci10: command tx timeout [ 465.418826][T17072] chnl_net:caif_netlink_parms(): no params data found [ 465.596736][T17072] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.604030][T17072] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.611392][T17072] bridge_slave_0: entered allmulticast mode [ 465.618865][T17072] bridge_slave_0: entered promiscuous mode [ 465.637433][T17072] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.644858][T17072] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.652824][T17072] bridge_slave_1: entered allmulticast mode [ 465.660535][T17072] bridge_slave_1: entered promiscuous mode [ 465.715303][T17072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.728250][T17072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.777951][T17072] team0: Port device team_slave_0 added [ 465.784451][T17070] chnl_net:caif_netlink_parms(): no params data found [ 465.804238][T17072] team0: Port device team_slave_1 added [ 465.877578][T17072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.884957][T17072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.911811][T17072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.933718][T17072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.941134][T17072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.970049][T17072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.022901][T17074] chnl_net:caif_netlink_parms(): no params data found [ 466.035013][T17070] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.042951][T17070] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.050448][T17070] bridge_slave_0: entered allmulticast mode [ 466.057673][T17070] bridge_slave_0: entered promiscuous mode [ 466.080725][T17070] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.088072][T17070] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.096106][T17070] bridge_slave_1: entered allmulticast mode [ 466.103653][T17070] bridge_slave_1: entered promiscuous mode [ 466.155103][T17072] hsr_slave_0: entered promiscuous mode [ 466.162158][T17072] hsr_slave_1: entered promiscuous mode [ 466.168467][T17072] debugfs: 'hsr0' already exists in 'hsr' [ 466.174503][T17072] Cannot create hsr debugfs directory [ 466.199537][T17070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.217565][T17070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.293305][T17074] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.301040][T17074] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.308435][T17074] bridge_slave_0: entered allmulticast mode [ 466.316469][T17074] bridge_slave_0: entered promiscuous mode [ 466.326258][T17070] team0: Port device team_slave_0 added [ 466.338527][T17074] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.346130][T17074] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.354780][T17074] bridge_slave_1: entered allmulticast mode [ 466.362221][T17074] bridge_slave_1: entered promiscuous mode [ 466.371317][T17070] team0: Port device team_slave_1 added [ 466.434538][T17074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.446593][T17070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.453678][T17070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.480283][T17070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.500046][T17074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.517452][T17070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.524928][T17070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.551954][T17070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.613774][T17074] team0: Port device team_slave_0 added [ 466.622558][T17074] team0: Port device team_slave_1 added [ 466.688890][T17070] hsr_slave_0: entered promiscuous mode [ 466.695608][T17070] hsr_slave_1: entered promiscuous mode [ 466.702392][T17070] debugfs: 'hsr0' already exists in 'hsr' [ 466.708400][T17070] Cannot create hsr debugfs directory [ 466.725418][T17074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.732748][T17074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.760532][T17074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.773208][T17074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.780677][T17074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.807737][T17074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.829567][ T5845] Bluetooth: hci12: command tx timeout [ 466.839793][ T5845] Bluetooth: hci13: command tx timeout [ 466.909374][ T5845] Bluetooth: hci14: command tx timeout [ 466.933655][T17074] hsr_slave_0: entered promiscuous mode [ 466.940705][T17074] hsr_slave_1: entered promiscuous mode [ 466.946994][T17074] debugfs: 'hsr0' already exists in 'hsr' [ 466.953315][T17074] Cannot create hsr debugfs directory [ 467.230828][ T5825] Bluetooth: hci11: command tx timeout [ 467.236341][ T5845] Bluetooth: hci10: command tx timeout [ 468.919542][ T5845] Bluetooth: hci13: command tx timeout [ 468.925183][ T5845] Bluetooth: hci12: command tx timeout [ 468.990645][ T5845] Bluetooth: hci14: command tx timeout [ 469.319383][ T5825] Bluetooth: hci11: command tx timeout [ 469.325114][ T5845] Bluetooth: hci10: command tx timeout [ 469.559716][ T2036] block nbd0: Possible stuck request ffff888026d40000: control (read@0,1024B). Runtime 210 seconds [ 469.570851][ T2036] block nbd0: Possible stuck request ffff888026d40200: control (read@1024,1024B). Runtime 210 seconds [ 469.582332][ T2036] block nbd0: Possible stuck request ffff888026d40400: control (read@2048,1024B). Runtime 210 seconds [ 469.593944][ T2036] block nbd0: Possible stuck request ffff888026d40600: control (read@3072,1024B). Runtime 210 seconds [ 470.989677][ T5845] Bluetooth: hci13: command tx timeout [ 470.989687][ T5825] Bluetooth: hci12: command tx timeout [ 471.079435][ T5825] Bluetooth: hci14: command tx timeout [ 471.399297][ T5825] Bluetooth: hci10: command tx timeout [ 471.399418][ T5845] Bluetooth: hci11: command tx timeout [ 471.770232][ T6518] lec:lec_start_xmit: lec0:No lecd attached [ 473.069471][ T5845] Bluetooth: hci13: command tx timeout [ 473.075106][ T5845] Bluetooth: hci12: command tx timeout [ 473.149497][ T5845] Bluetooth: hci14: command tx timeout [ 476.909167][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5140 ms [ 476.917362][ C1] lec:lec_tx_timeout: lec0 [ 483.000537][ T2036] block nbd1: Possible stuck request ffff888026dd0000: control (read@0,1024B). Runtime 210 seconds [ 483.011491][ T2036] block nbd1: Possible stuck request ffff888026dd0200: control (read@1024,1024B). Runtime 210 seconds [ 483.022772][ T2036] block nbd1: Possible stuck request ffff888026dd0400: control (read@2048,1024B). Runtime 210 seconds [ 483.033831][ T2036] block nbd1: Possible stuck request ffff888026dd0600: control (read@3072,1024B). Runtime 210 seconds [ 499.630109][ T2036] block nbd0: Possible stuck request ffff888026d40000: control (read@0,1024B). Runtime 240 seconds [ 499.641065][ T2036] block nbd0: Possible stuck request ffff888026d40200: control (read@1024,1024B). Runtime 240 seconds [ 499.652593][ T2036] block nbd0: Possible stuck request ffff888026d40400: control (read@2048,1024B). Runtime 240 seconds [ 499.664438][ T2036] block nbd0: Possible stuck request ffff888026d40600: control (read@3072,1024B). Runtime 240 seconds [ 501.562097][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.563845][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 506.909307][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 506.917373][ C1] lec:lec_tx_timeout: lec0 [ 513.079205][ T2036] block nbd1: Possible stuck request ffff888026dd0000: control (read@0,1024B). Runtime 240 seconds [ 513.090358][ T2036] block nbd1: Possible stuck request ffff888026dd0200: control (read@1024,1024B). Runtime 240 seconds [ 513.101515][ T2036] block nbd1: Possible stuck request ffff888026dd0400: control (read@2048,1024B). Runtime 240 seconds [ 513.113284][ T2036] block nbd1: Possible stuck request ffff888026dd0600: control (read@3072,1024B). Runtime 240 seconds [ 523.091769][ T5825] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 523.102470][ T5825] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 523.111051][ T5844] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 523.111286][ T5825] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 523.120381][ T5844] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 523.136419][ T5825] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 523.137937][ T5844] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 523.154223][ T5844] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 523.166139][ T5845] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 523.175363][ T5844] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 523.499176][T17101] chnl_net:caif_netlink_parms(): no params data found [ 523.620230][T17101] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.627554][T17101] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.635371][T17101] bridge_slave_0: entered allmulticast mode [ 523.643331][T17101] bridge_slave_0: entered promiscuous mode [ 523.655379][T17101] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.662816][T17101] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.670664][T17101] bridge_slave_1: entered allmulticast mode [ 523.677855][T17101] bridge_slave_1: entered promiscuous mode [ 523.713138][T17101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.725620][T17101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.767064][T17101] team0: Port device team_slave_0 added [ 523.782106][T17101] team0: Port device team_slave_1 added [ 523.822577][T17101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.829893][T17101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.856258][T17101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.874940][T17101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.882305][T17101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.909682][T17101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.933800][T17103] chnl_net:caif_netlink_parms(): no params data found [ 523.997712][T17101] hsr_slave_0: entered promiscuous mode [ 524.004446][T17101] hsr_slave_1: entered promiscuous mode [ 524.011163][T17101] debugfs: 'hsr0' already exists in 'hsr' [ 524.016911][T17101] Cannot create hsr debugfs directory [ 524.084804][T17103] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.092215][T17103] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.099827][T17103] bridge_slave_0: entered allmulticast mode [ 524.107066][T17103] bridge_slave_0: entered promiscuous mode [ 524.124635][T17103] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.132030][T17103] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.139757][T17103] bridge_slave_1: entered allmulticast mode [ 524.147103][T17103] bridge_slave_1: entered promiscuous mode [ 524.199923][T17103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.217988][T17103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.268854][T17103] team0: Port device team_slave_0 added [ 524.277936][T17103] team0: Port device team_slave_1 added [ 524.329621][T17103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.336586][T17103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.363701][T17103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.377744][T17103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.384924][T17103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.411553][T17103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.459333][T17103] hsr_slave_0: entered promiscuous mode [ 524.465893][T17103] hsr_slave_1: entered promiscuous mode [ 524.472746][T17103] debugfs: 'hsr0' already exists in 'hsr' [ 524.478536][T17103] Cannot create hsr debugfs directory [ 525.167065][ T5845] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 525.179996][ T5845] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 525.190936][ T5845] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 525.202073][ T5845] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 525.211712][ T5845] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 525.233138][ T5825] Bluetooth: hci16: command tx timeout [ 525.234754][ T5844] Bluetooth: hci15: command tx timeout [ 525.242109][ T5845] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 525.257190][ T5845] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 525.266231][ T5845] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 525.275425][ T5845] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 525.277537][ T5838] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 525.283523][ T5845] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 525.293875][ T5838] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 525.309740][ T5838] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 525.322674][ T5838] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 525.330922][ T5838] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 525.684632][T17120] chnl_net:caif_netlink_parms(): no params data found [ 525.867444][T17120] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.875169][T17120] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.882678][T17120] bridge_slave_0: entered allmulticast mode [ 525.890432][T17120] bridge_slave_0: entered promiscuous mode [ 525.918241][T17120] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.925799][T17120] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.933486][T17120] bridge_slave_1: entered allmulticast mode [ 525.941297][T17120] bridge_slave_1: entered promiscuous mode [ 525.981359][T17120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.998390][T17120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.048448][T17120] team0: Port device team_slave_0 added [ 526.066521][T17120] team0: Port device team_slave_1 added [ 526.126109][T17120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.133420][T17120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.161692][T17120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.188187][T17120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.198848][T17120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.225561][T17120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.236923][T17122] chnl_net:caif_netlink_parms(): no params data found [ 526.316207][T17120] hsr_slave_0: entered promiscuous mode [ 526.323352][T17120] hsr_slave_1: entered promiscuous mode [ 526.330332][T17120] debugfs: 'hsr0' already exists in 'hsr' [ 526.336076][T17120] Cannot create hsr debugfs directory [ 526.428841][T17124] chnl_net:caif_netlink_parms(): no params data found [ 526.491303][T17122] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.498731][T17122] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.506544][T17122] bridge_slave_0: entered allmulticast mode [ 526.514666][T17122] bridge_slave_0: entered promiscuous mode [ 526.546067][T17122] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.553384][T17122] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.560994][T17122] bridge_slave_1: entered allmulticast mode [ 526.568391][T17122] bridge_slave_1: entered promiscuous mode [ 526.635094][T17122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.663772][T17122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.683237][T17124] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.690581][T17124] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.698045][T17124] bridge_slave_0: entered allmulticast mode [ 526.705903][T17124] bridge_slave_0: entered promiscuous mode [ 526.734719][T17124] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.742316][T17124] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.750881][T17124] bridge_slave_1: entered allmulticast mode [ 526.758350][T17124] bridge_slave_1: entered promiscuous mode [ 526.790697][T17122] team0: Port device team_slave_0 added [ 526.814712][T17122] team0: Port device team_slave_1 added [ 526.823386][T17124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.847330][T17124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.897158][T17122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.904672][T17122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.932032][T17122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.946434][T17124] team0: Port device team_slave_0 added [ 526.953575][T17122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.960824][T17122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.987747][T17122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.001906][T17124] team0: Port device team_slave_1 added [ 527.037378][T17124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.045056][T17124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.072018][T17124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.095070][T17124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.102772][T17124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.129477][T17124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.163721][T17122] hsr_slave_0: entered promiscuous mode [ 527.170689][T17122] hsr_slave_1: entered promiscuous mode [ 527.177040][T17122] debugfs: 'hsr0' already exists in 'hsr' [ 527.183166][T17122] Cannot create hsr debugfs directory [ 527.277936][T17124] hsr_slave_0: entered promiscuous mode [ 527.285232][T17124] hsr_slave_1: entered promiscuous mode [ 527.291783][T17124] debugfs: 'hsr0' already exists in 'hsr' [ 527.297815][T17124] Cannot create hsr debugfs directory [ 527.309369][T17145] Bluetooth: hci16: command tx timeout [ 527.315013][T17145] Bluetooth: hci17: command tx timeout [ 527.323149][T17145] Bluetooth: hci15: command tx timeout [ 527.390424][T17147] Bluetooth: hci19: command tx timeout [ 527.396785][T17147] Bluetooth: hci18: command tx timeout [ 529.233863][T17146] Bluetooth: hci5: command 0x0406 tx timeout [ 529.234458][T17147] Bluetooth: hci9: command 0x0406 tx timeout [ 529.241600][T17146] Bluetooth: hci6: command 0x0406 tx timeout [ 529.246584][T17148] Bluetooth: hci7: command 0x0406 tx timeout [ 529.252637][T17146] Bluetooth: hci8: command 0x0406 tx timeout [ 529.399391][ T5845] Bluetooth: hci17: command tx timeout [ 529.399399][ T51] Bluetooth: hci16: command tx timeout [ 529.405315][ T5844] Bluetooth: hci15: command tx timeout [ 529.469319][ T5844] Bluetooth: hci18: command tx timeout [ 529.469495][ T5845] Bluetooth: hci19: command tx timeout [ 529.709504][ T2036] block nbd0: Possible stuck request ffff888026d40000: control (read@0,1024B). Runtime 270 seconds [ 529.720285][ T2036] block nbd0: Possible stuck request ffff888026d40200: control (read@1024,1024B). Runtime 270 seconds [ 529.731433][ T2036] block nbd0: Possible stuck request ffff888026d40400: control (read@2048,1024B). Runtime 270 seconds [ 529.742865][ T2036] block nbd0: Possible stuck request ffff888026d40600: control (read@3072,1024B). Runtime 270 seconds [ 531.469746][ T5845] Bluetooth: hci15: command tx timeout [ 531.469763][ T5844] Bluetooth: hci16: command tx timeout [ 531.475283][ T5845] Bluetooth: hci17: command tx timeout [ 531.549435][ T5845] Bluetooth: hci19: command tx timeout [ 531.549442][ T5844] Bluetooth: hci18: command tx timeout [ 533.549542][ T5844] Bluetooth: hci17: command tx timeout [ 533.629294][ T5844] Bluetooth: hci18: command tx timeout [ 533.629499][ T5845] Bluetooth: hci19: command tx timeout [ 535.819952][ T6518] lec:lec_start_xmit: lec0:No lecd attached [ 538.673034][ T30] INFO: task syz.0.2756:16967 blocked for more than 143 seconds. [ 538.683560][ T30] Not tainted syzkaller #0 [ 538.688835][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 538.697719][ T30] task:syz.0.2756 state:D stack:24960 pid:16967 tgid:16965 ppid:5823 task_flags:0x480140 flags:0x00080002 [ 538.710084][ T30] Call Trace: [ 538.713401][ T30] [ 538.716344][ T30] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 538.721064][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 538.726192][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 538.731923][ T30] ? __pfx___schedule+0x10/0x10 [ 538.736870][ T30] ? schedule+0x90/0x360 [ 538.741329][ T30] schedule+0x164/0x360 [ 538.745626][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 538.769304][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 538.775536][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 538.786067][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 538.799666][ T30] nbd_set_size+0x454/0x680 [ 538.804240][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 538.809987][ T30] ? nla_memcpy+0x5b/0xc0 [ 538.814368][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 538.820198][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 538.826303][ T30] ? rcu_is_watching+0x15/0xb0 [ 538.833067][ T30] ? trace_kmalloc+0x2a/0x110 [ 538.837789][ T30] ? __nla_parse+0x40/0x60 [ 538.842484][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 538.848858][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 538.855451][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 538.861180][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 538.867382][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 538.872580][ T30] genl_rcv_msg+0x61c/0x7a0 [ 538.877230][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.882429][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 538.888196][ T30] netlink_rcv_skb+0x232/0x4b0 [ 538.893108][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.898160][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 538.903755][ T30] ? down_read+0x272/0x2e0 [ 538.908461][ T30] ? genl_rcv+0xd/0x40 [ 538.912876][ T30] genl_rcv+0x28/0x40 [ 538.916908][ T30] netlink_unicast+0x75c/0x8e0 [ 538.921867][ T30] netlink_sendmsg+0x813/0xb40 [ 538.926893][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.932423][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 538.937468][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 538.943121][ T30] ____sys_sendmsg+0x972/0x9f0 [ 538.947940][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.953426][ T30] ? import_iovec+0x73/0xa0 [ 538.958039][ T30] ___sys_sendmsg+0x2a5/0x360 [ 538.963078][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.968393][ T30] ? futex_wait+0x29a/0x380 [ 538.973589][ T30] ? __fget_files+0x2a/0x420 [ 538.978486][ T30] ? __fget_files+0x3a0/0x420 [ 538.983316][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 538.988380][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 538.994254][ T30] ? rcu_is_watching+0x15/0xb0 [ 538.999155][ T30] do_syscall_64+0x14d/0xf80 [ 539.003780][ T30] ? trace_irq_disable+0x3b/0x150 [ 539.008888][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.015266][ T30] ? clear_bhb_loop+0x40/0x90 [ 539.020165][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.026079][ T30] RIP: 0033:0x7febd2b9c819 [ 539.030978][ T30] RSP: 002b:00007febd3ade028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.039729][ T30] RAX: ffffffffffffffda RBX: 00007febd2e15fa0 RCX: 00007febd2b9c819 [ 539.047702][ T30] RDX: 0000000000000814 RSI: 00002000000007c0 RDI: 0000000000000005 [ 539.055961][ T30] RBP: 00007febd2c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 539.064232][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.072457][ T30] R13: 00007febd2e16038 R14: 00007febd2e15fa0 R15: 00007ffdb24080a8 [ 539.080541][ T30] [ 539.083602][ T30] INFO: task syz.0.2756:16969 blocked for more than 143 seconds. [ 539.091556][ T30] Not tainted syzkaller #0 [ 539.096794][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.105583][ T30] task:syz.0.2756 state:D stack:28064 pid:16969 tgid:16965 ppid:5823 task_flags:0x400040 flags:0x00080002 [ 539.117791][ T30] Call Trace: [ 539.121145][ T30] [ 539.124089][ T30] __schedule+0x15dd/0x52d0 [ 539.128712][ T30] ? __pfx___schedule+0x10/0x10 [ 539.133674][ T30] ? schedule+0x90/0x360 [ 539.137937][ T30] schedule+0x164/0x360 [ 539.142247][ T30] schedule_preempt_disabled+0x13/0x30 [ 539.147723][ T30] __mutex_lock+0x7fe/0x1300 [ 539.152524][ T30] ? __mutex_lock+0x5ac/0x1300 [ 539.157409][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 539.162335][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 539.167475][ T30] ? stack_trace_save+0xa9/0x100 [ 539.172526][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 539.177484][ T30] ? radix_tree_lookup+0x240/0x290 [ 539.182842][ T30] genl_rcv_msg+0x10b/0x7a0 [ 539.187644][ T30] ? __x64_sys_sendto+0xde/0x100 [ 539.192699][ T30] ? do_syscall_64+0x14d/0xf80 [ 539.197514][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.202988][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 539.207950][ T30] netlink_rcv_skb+0x232/0x4b0 [ 539.212892][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.218141][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 539.223569][ T30] ? down_read+0x272/0x2e0 [ 539.228094][ T30] ? genl_rcv+0xd/0x40 [ 539.232495][ T30] genl_rcv+0x28/0x40 [ 539.236607][ T30] netlink_unicast+0x75c/0x8e0 [ 539.241524][ T30] netlink_sendmsg+0x813/0xb40 [ 539.246310][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.251679][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 539.256638][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 539.262104][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.267408][ T30] __sys_sendto+0x672/0x710 [ 539.272184][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 539.277408][ T30] ? do_futex+0x333/0x420 [ 539.281836][ T30] ? __pfx___se_sys_futex+0x10/0x10 [ 539.287083][ T30] ? rcu_is_watching+0x15/0xb0 [ 539.292292][ T30] __x64_sys_sendto+0xde/0x100 [ 539.297081][ T30] do_syscall_64+0x14d/0xf80 [ 539.301830][ T30] ? trace_irq_disable+0x3b/0x150 [ 539.306955][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.313658][ T30] ? clear_bhb_loop+0x40/0x90 [ 539.318372][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.324346][ T30] RIP: 0033:0x7febd2b5d04e [ 539.328953][ T30] RSP: 002b:00007febd3abbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 539.337442][ T30] RAX: ffffffffffffffda RBX: 00007febd3abd6c0 RCX: 00007febd2b5d04e [ 539.345511][ T30] RDX: 0000000000000028 RSI: 00007febd3abc000 RDI: 0000000000000005 [ 539.353564][ T30] RBP: 0000000000000000 R08: 00007febd3abbf04 R09: 000000000000000c [ 539.362052][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 539.370097][ T30] R13: 00007febd3abbf58 R14: 00007febd3abc000 R15: 0000000000000000 [ 539.378083][ T30] [ 539.381324][ T30] INFO: task syz.0.2756:16975 blocked for more than 144 seconds. [ 539.389443][ T30] Not tainted syzkaller #0 [ 539.394494][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.403396][ T30] task:syz.0.2756 state:D stack:28472 pid:16975 tgid:16965 ppid:5823 task_flags:0x400040 flags:0x00080002 [ 539.415521][ T30] Call Trace: [ 539.418898][ T30] [ 539.421921][ T30] __schedule+0x15dd/0x52d0 [ 539.426529][ T30] ? __pfx___schedule+0x10/0x10 [ 539.431537][ T30] ? schedule+0x90/0x360 [ 539.435838][ T30] schedule+0x164/0x360 [ 539.440061][ T30] schedule_preempt_disabled+0x13/0x30 [ 539.445619][ T30] __mutex_lock+0x7fe/0x1300 [ 539.450380][ T30] ? __mutex_lock+0x5ac/0x1300 [ 539.455157][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 539.459876][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 539.464915][ T30] ? stack_trace_save+0xa9/0x100 [ 539.470154][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 539.475115][ T30] ? radix_tree_lookup+0x240/0x290 [ 539.480330][ T30] genl_rcv_msg+0x10b/0x7a0 [ 539.485118][ T30] ? __x64_sys_sendto+0xde/0x100 [ 539.490319][ T30] ? do_syscall_64+0x14d/0xf80 [ 539.495201][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.500377][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 539.505514][ T30] netlink_rcv_skb+0x232/0x4b0 [ 539.510472][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.515643][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 539.520995][ T30] ? down_read+0x272/0x2e0 [ 539.525514][ T30] ? genl_rcv+0xd/0x40 [ 539.529935][ T30] genl_rcv+0x28/0x40 [ 539.534201][ T30] netlink_unicast+0x75c/0x8e0 [ 539.539133][ T30] netlink_sendmsg+0x813/0xb40 [ 539.544164][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.550369][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 539.555664][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 539.561128][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.566457][ T30] __sys_sendto+0x672/0x710 [ 539.571125][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 539.576387][ T30] ? exc_page_fault+0x6a/0xc0 [ 539.581176][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 539.586669][ T30] __x64_sys_sendto+0xde/0x100 [ 539.591672][ T30] do_syscall_64+0x14d/0xf80 [ 539.596382][ T30] ? trace_irq_disable+0x3b/0x150 [ 539.601839][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.608060][ T30] ? clear_bhb_loop+0x40/0x90 [ 539.612874][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.618786][ T30] RIP: 0033:0x7febd2b5d04e [ 539.623382][ T30] RSP: 002b:00007febd3a9ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 539.632153][ T30] RAX: ffffffffffffffda RBX: 00007febd3a9c6c0 RCX: 00007febd2b5d04e [ 539.640302][ T30] RDX: 0000000000000028 RSI: 00007febd3a9b000 RDI: 0000000000000005 [ 539.648391][ T30] RBP: 0000000000000000 R08: 00007febd3a9af04 R09: 000000000000000c [ 539.656468][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 539.664523][ T30] R13: 00007febd3a9af58 R14: 00007febd3a9b000 R15: 0000000000000000 [ 539.672838][ T30] [ 539.675928][ T30] INFO: task syz.1.2758:16973 blocked for more than 144 seconds. [ 539.687213][ T30] Not tainted syzkaller #0 [ 539.695661][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.704615][ T30] task:syz.1.2758 state:D stack:28472 pid:16973 tgid:16971 ppid:5835 task_flags:0x400040 flags:0x00080002 [ 539.717245][ T30] Call Trace: [ 539.721026][ T30] [ 539.723984][ T30] __schedule+0x15dd/0x52d0 [ 539.728618][ T30] ? __pfx___schedule+0x10/0x10 [ 539.733720][ T30] ? schedule+0x90/0x360 [ 539.738003][ T30] schedule+0x164/0x360 [ 539.742361][ T30] schedule_preempt_disabled+0x13/0x30 [ 539.747873][ T30] __mutex_lock+0x7fe/0x1300 [ 539.752585][ T30] ? __mutex_lock+0x5ac/0x1300 [ 539.757410][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 539.762184][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 539.767425][ T30] ? stack_trace_save+0xa9/0x100 [ 539.772658][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 539.777723][ T30] ? radix_tree_lookup+0x240/0x290 [ 539.782950][ T30] genl_rcv_msg+0x10b/0x7a0 [ 539.787591][ T30] ? __x64_sys_sendto+0xde/0x100 [ 539.792869][ T30] ? do_syscall_64+0x14d/0xf80 [ 539.797667][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.802789][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 539.807760][ T30] netlink_rcv_skb+0x232/0x4b0 [ 539.812647][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.817975][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 539.823647][ T30] ? down_read+0x272/0x2e0 [ 539.828085][ T30] ? genl_rcv+0xd/0x40 [ 539.832250][ T30] genl_rcv+0x28/0x40 [ 539.836251][ T30] netlink_unicast+0x75c/0x8e0 [ 539.841076][ T30] netlink_sendmsg+0x813/0xb40 [ 539.846207][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.851681][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 539.856729][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 539.862362][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.867667][ T30] __sys_sendto+0x672/0x710 [ 539.872419][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 539.877484][ T30] ? exc_page_fault+0x6a/0xc0 [ 539.882285][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 539.887765][ T30] __x64_sys_sendto+0xde/0x100 [ 539.892605][ T30] do_syscall_64+0x14d/0xf80 [ 539.897334][ T30] ? trace_irq_disable+0x3b/0x150 [ 539.902517][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.908600][ T30] ? clear_bhb_loop+0x40/0x90 [ 539.913609][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.919588][ T30] RIP: 0033:0x7f4db2b5d04e [ 539.924117][ T30] RSP: 002b:00007f4db39bae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 539.932947][ T30] RAX: ffffffffffffffda RBX: 00007f4db39bc6c0 RCX: 00007f4db2b5d04e [ 539.940988][ T30] RDX: 0000000000000020 RSI: 00007f4db39bb000 RDI: 0000000000000005 [ 539.948976][ T30] RBP: 0000000000000000 R08: 00007f4db39baf04 R09: 000000000000000c [ 539.957635][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 539.965927][ T30] R13: 00007f4db39baf58 R14: 00007f4db39bb000 R15: 0000000000000000 [ 539.974179][ T30] [ 539.977464][ T30] INFO: task syz.1.2758:16976 blocked for more than 144 seconds. [ 539.985338][ T30] Not tainted syzkaller #0 [ 539.990489][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.999536][ T30] task:syz.1.2758 state:D stack:28728 pid:16976 tgid:16971 ppid:5835 task_flags:0x400140 flags:0x00080002 [ 540.011539][ T30] Call Trace: [ 540.014828][ T30] [ 540.017785][ T30] __schedule+0x15dd/0x52d0 [ 540.022389][ T30] ? __pfx___schedule+0x10/0x10 [ 540.027370][ T30] ? schedule+0x90/0x360 [ 540.031738][ T30] schedule+0x164/0x360 [ 540.035929][ T30] schedule_preempt_disabled+0x13/0x30 [ 540.041632][ T30] __mutex_lock+0x7fe/0x1300 [ 540.046249][ T30] ? __mutex_lock+0x5ac/0x1300 [ 540.051112][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 540.055897][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 540.061025][ T30] ? stack_trace_save+0xa9/0x100 [ 540.065981][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 540.071010][ T30] ? radix_tree_lookup+0x240/0x290 [ 540.076143][ T30] genl_rcv_msg+0x10b/0x7a0 [ 540.080808][ T30] ? __x64_sys_sendto+0xde/0x100 [ 540.085761][ T30] ? do_syscall_64+0x14d/0xf80 [ 540.090710][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 540.095759][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 540.100839][ T30] netlink_rcv_skb+0x232/0x4b0 [ 540.105790][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 540.111012][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 540.116429][ T30] ? down_read+0x272/0x2e0 [ 540.120907][ T30] ? genl_rcv+0xd/0x40 [ 540.125006][ T30] genl_rcv+0x28/0x40 [ 540.129199][ T30] netlink_unicast+0x75c/0x8e0 [ 540.134101][ T30] netlink_sendmsg+0x813/0xb40 [ 540.138982][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.144461][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 540.149703][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 540.155015][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.160558][ T30] __sys_sendto+0x672/0x710 [ 540.165093][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 540.170323][ T30] ? fd_install+0x94/0x3d0 [ 540.174873][ T30] ? fd_install+0x306/0x3d0 [ 540.179456][ T30] __x64_sys_sendto+0xde/0x100 [ 540.184859][ T30] do_syscall_64+0x14d/0xf80 [ 540.189581][ T30] ? trace_irq_disable+0x3b/0x150 [ 540.194625][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.200793][ T30] ? clear_bhb_loop+0x40/0x90 [ 540.205508][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.213573][ T30] RIP: 0033:0x7f4db2b5d04e [ 540.218212][ T30] RSP: 002b:00007f4db3999e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 540.226900][ T30] RAX: ffffffffffffffda RBX: 00007f4db399b6c0 RCX: 00007f4db2b5d04e [ 540.235138][ T30] RDX: 0000000000000020 RSI: 00007f4db399a000 RDI: 0000000000000006 [ 540.243587][ T30] RBP: 0000000000000000 R08: 00007f4db3999f04 R09: 000000000000000c [ 540.251721][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 540.260027][ T30] R13: 00007f4db3999f58 R14: 00007f4db399a000 R15: 0000000000000000 [ 540.268031][ T30] [ 540.271392][ T30] INFO: task syz.4.2761:16988 blocked for more than 144 seconds. [ 540.279550][ T30] Not tainted syzkaller #0 [ 540.284682][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 540.293533][ T30] task:syz.4.2761 state:D stack:26120 pid:16988 tgid:16987 ppid:5836 task_flags:0x400140 flags:0x00080002 [ 540.305742][ T30] Call Trace: [ 540.309199][ T30] [ 540.312146][ T30] __schedule+0x15dd/0x52d0 [ 540.316759][ T30] ? __pfx___schedule+0x10/0x10 [ 540.321814][ T30] ? schedule+0x90/0x360 [ 540.326092][ T30] schedule+0x164/0x360 [ 540.330342][ T30] schedule_preempt_disabled+0x13/0x30 [ 540.335914][ T30] __mutex_lock+0x7fe/0x1300 [ 540.340610][ T30] ? __mutex_lock+0x5ac/0x1300 [ 540.345394][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 540.350310][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 540.355446][ T30] ? stack_trace_save+0xa9/0x100 [ 540.360665][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 540.365709][ T30] ? radix_tree_lookup+0x240/0x290 [ 540.371075][ T30] genl_rcv_msg+0x10b/0x7a0 [ 540.375603][ T30] ? __x64_sys_sendto+0xde/0x100 [ 540.380738][ T30] ? do_syscall_64+0x14d/0xf80 [ 540.385633][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 540.390851][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 540.395843][ T30] netlink_rcv_skb+0x232/0x4b0 [ 540.400808][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 540.405855][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 540.411295][ T30] ? down_read+0x272/0x2e0 [ 540.415745][ T30] ? genl_rcv+0xd/0x40 [ 540.420005][ T30] genl_rcv+0x28/0x40 [ 540.424260][ T30] netlink_unicast+0x75c/0x8e0 [ 540.429110][ T30] netlink_sendmsg+0x813/0xb40 [ 540.433988][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.439437][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 540.444475][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 540.450033][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.455340][ T30] __sys_sendto+0x672/0x710 [ 540.459933][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 540.465192][ T30] ? exc_page_fault+0x6a/0xc0 [ 540.470392][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 540.475791][ T30] __x64_sys_sendto+0xde/0x100 [ 540.480884][ T30] do_syscall_64+0x14d/0xf80 [ 540.485515][ T30] ? trace_irq_disable+0x3b/0x150 [ 540.490623][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.496719][ T30] ? clear_bhb_loop+0x40/0x90 [ 540.501565][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.507962][ T30] RIP: 0033:0x7f64afb5d04e [ 540.512494][ T30] RSP: 002b:00007f64b0b2ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 540.520992][ T30] RAX: ffffffffffffffda RBX: 00007f64b0b2e6c0 RCX: 00007f64afb5d04e [ 540.529100][ T30] RDX: 0000000000000020 RSI: 00007f64b0b2d000 RDI: 0000000000000006 [ 540.537087][ T30] RBP: 0000000000000000 R08: 00007f64b0b2cf04 R09: 000000000000000c [ 540.545429][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 540.553501][ T30] R13: 00007f64b0b2cf58 R14: 00007f64b0b2d000 R15: 0000000000000000 [ 540.561665][ T30] [ 540.564736][ T30] INFO: task syz.4.2761:16989 blocked for more than 145 seconds. [ 540.572903][ T30] Not tainted syzkaller #0 [ 540.577875][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 540.586730][ T30] task:syz.4.2761 state:D stack:26120 pid:16989 tgid:16987 ppid:5836 task_flags:0x400140 flags:0x00080002 [ 540.599633][ T30] Call Trace: [ 540.602942][ T30] [ 540.605880][ T30] __schedule+0x15dd/0x52d0 [ 540.610486][ T30] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 540.617197][ T30] ? __pfx___schedule+0x10/0x10 [ 540.622158][ T30] ? schedule+0x90/0x360 [ 540.626519][ T30] schedule+0x164/0x360 [ 540.630765][ T30] schedule_preempt_disabled+0x13/0x30 [ 540.636258][ T30] __mutex_lock+0x7fe/0x1300 [ 540.640934][ T30] ? __mutex_lock+0x5ac/0x1300 [ 540.645905][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 540.650655][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 540.655869][ T30] ? stack_trace_save+0xa9/0x100 [ 540.660913][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 540.665880][ T30] ? radix_tree_lookup+0x240/0x290 [ 540.671209][ T30] genl_rcv_msg+0x10b/0x7a0 [ 540.675931][ T30] ? __x64_sys_sendto+0xde/0x100 [ 540.680952][ T30] ? do_syscall_64+0x14d/0xf80 [ 540.685775][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 540.690859][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 540.695939][ T30] netlink_rcv_skb+0x232/0x4b0 [ 540.700971][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 540.706451][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 540.711974][ T30] ? down_read+0x272/0x2e0 [ 540.716510][ T30] ? genl_rcv+0xd/0x40 [ 540.720656][ T30] genl_rcv+0x28/0x40 [ 540.724832][ T30] netlink_unicast+0x75c/0x8e0 [ 540.729950][ T30] netlink_sendmsg+0x813/0xb40 [ 540.734748][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.740391][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 540.745365][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 540.750924][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.756327][ T30] __sys_sendto+0x672/0x710 [ 540.761024][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 540.766057][ T30] ? fd_install+0x94/0x3d0 [ 540.770627][ T30] ? fd_install+0x306/0x3d0 [ 540.775156][ T30] __x64_sys_sendto+0xde/0x100 [ 540.780031][ T30] do_syscall_64+0x14d/0xf80 [ 540.784811][ T30] ? trace_irq_disable+0x3b/0x150 [ 540.789906][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.796174][ T30] ? clear_bhb_loop+0x40/0x90 [ 540.801029][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.806939][ T30] RIP: 0033:0x7f64afb5d04e [ 540.811524][ T30] RSP: 002b:00007f64b0b0be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 540.820370][ T30] RAX: ffffffffffffffda RBX: 00007f64b0b0d6c0 RCX: 00007f64afb5d04e [ 540.828352][ T30] RDX: 0000000000000020 RSI: 00007f64b0b0c000 RDI: 0000000000000007 [ 540.836511][ T30] RBP: 0000000000000000 R08: 00007f64b0b0bf04 R09: 000000000000000c [ 540.844737][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 540.852895][ T30] R13: 00007f64b0b0bf58 R14: 00007f64b0b0c000 R15: 0000000000000000 [ 540.861024][ T30] [ 540.864057][ T30] INFO: task syz.3.2762:16993 blocked for more than 145 seconds. [ 540.871842][ T30] Not tainted syzkaller #0 [ 540.877232][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 540.885967][ T30] task:syz.3.2762 state:D stack:28832 pid:16993 tgid:16992 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 540.898343][ T30] Call Trace: [ 540.901801][ T30] [ 540.904747][ T30] __schedule+0x15dd/0x52d0 [ 540.909278][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 540.909305][ C1] lec:lec_tx_timeout: lec0 [ 540.921950][ T30] ? __pfx___schedule+0x10/0x10 [ 540.926893][ T30] ? schedule+0x90/0x360 [ 540.931371][ T30] schedule+0x164/0x360 [ 540.935563][ T30] schedule_preempt_disabled+0x13/0x30 [ 540.941387][ T30] __mutex_lock+0x7fe/0x1300 [ 540.945999][ T30] ? __mutex_lock+0x5ac/0x1300 [ 540.950832][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 540.955531][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 540.960790][ T30] ? stack_trace_save+0xa9/0x100 [ 540.965836][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 540.970860][ T30] ? radix_tree_lookup+0x240/0x290 [ 540.976087][ T30] genl_rcv_msg+0x10b/0x7a0 [ 540.980668][ T30] ? __x64_sys_sendto+0xde/0x100 [ 540.985647][ T30] ? do_syscall_64+0x14d/0xf80 [ 540.990886][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 540.995936][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 541.001016][ T30] netlink_rcv_skb+0x232/0x4b0 [ 541.005808][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 541.010899][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.016220][ T30] ? down_read+0x272/0x2e0 [ 541.020711][ T30] ? genl_rcv+0xd/0x40 [ 541.024804][ T30] genl_rcv+0x28/0x40 [ 541.028777][ T30] netlink_unicast+0x75c/0x8e0 [ 541.033773][ T30] netlink_sendmsg+0x813/0xb40 [ 541.038658][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.044260][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 541.049503][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 541.054818][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.060229][ T30] __sys_sendto+0x672/0x710 [ 541.064873][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 541.070095][ T30] ? exc_page_fault+0x6a/0xc0 [ 541.074797][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 541.080311][ T30] __x64_sys_sendto+0xde/0x100 [ 541.085098][ T30] do_syscall_64+0x14d/0xf80 [ 541.089743][ T30] ? trace_irq_disable+0x3b/0x150 [ 541.094784][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.101118][ T30] ? clear_bhb_loop+0x40/0x90 [ 541.105809][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.111911][ T30] RIP: 0033:0x7febb055d04e [ 541.116422][ T30] RSP: 002b:00007febb14cde88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 541.124917][ T30] RAX: ffffffffffffffda RBX: 00007febb14cf6c0 RCX: 00007febb055d04e [ 541.133045][ T30] RDX: 0000000000000020 RSI: 00007febb14ce000 RDI: 0000000000000003 [ 541.141303][ T30] RBP: 0000000000000000 R08: 00007febb14cdf04 R09: 000000000000000c [ 541.149655][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 541.157653][ T30] R13: 00007febb14cdf58 R14: 00007febb14ce000 R15: 0000000000000000 [ 541.165849][ T30] [ 541.168894][ T30] INFO: task syz.3.2762:16994 blocked for more than 145 seconds. [ 541.176840][ T30] Not tainted syzkaller #0 [ 541.181919][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.190668][ T30] task:syz.3.2762 state:D stack:28832 pid:16994 tgid:16992 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 541.203012][ T30] Call Trace: [ 541.206303][ T30] [ 541.209405][ T30] __schedule+0x15dd/0x52d0 [ 541.213954][ T30] ? __pfx___schedule+0x10/0x10 [ 541.219003][ T30] ? schedule+0x90/0x360 [ 541.223321][ T30] schedule+0x164/0x360 [ 541.227575][ T30] schedule_preempt_disabled+0x13/0x30 [ 541.233321][ T30] __mutex_lock+0x7fe/0x1300 [ 541.237951][ T30] ? __mutex_lock+0x5ac/0x1300 [ 541.242830][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 541.247531][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 541.253026][ T30] ? stack_trace_save+0xa9/0x100 [ 541.258132][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 541.263431][ T30] ? radix_tree_lookup+0x240/0x290 [ 541.268587][ T30] genl_rcv_msg+0x10b/0x7a0 [ 541.273228][ T30] ? __x64_sys_sendto+0xde/0x100 [ 541.278279][ T30] ? do_syscall_64+0x14d/0xf80 [ 541.283147][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 541.288260][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 541.293350][ T30] netlink_rcv_skb+0x232/0x4b0 [ 541.298150][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 541.303472][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.308879][ T30] ? down_read+0x272/0x2e0 [ 541.313685][ T30] ? genl_rcv+0xd/0x40 [ 541.317778][ T30] genl_rcv+0x28/0x40 [ 541.321852][ T30] netlink_unicast+0x75c/0x8e0 [ 541.326651][ T30] netlink_sendmsg+0x813/0xb40 [ 541.331657][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.337107][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 541.342331][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 541.347654][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.353312][ T30] __sys_sendto+0x672/0x710 [ 541.357948][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 541.363357][ T30] ? fd_install+0x94/0x3d0 [ 541.367918][ T30] ? fd_install+0x306/0x3d0 [ 541.372712][ T30] __x64_sys_sendto+0xde/0x100 [ 541.377599][ T30] do_syscall_64+0x14d/0xf80 [ 541.382268][ T30] ? trace_irq_disable+0x3b/0x150 [ 541.387425][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.393647][ T30] ? clear_bhb_loop+0x40/0x90 [ 541.398553][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.404872][ T30] RIP: 0033:0x7febb055d04e [ 541.409376][ T30] RSP: 002b:00007febb14ace88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 541.417819][ T30] RAX: ffffffffffffffda RBX: 00007febb14ae6c0 RCX: 00007febb055d04e [ 541.426071][ T30] RDX: 0000000000000020 RSI: 00007febb14ad000 RDI: 0000000000000006 [ 541.434541][ T30] RBP: 0000000000000000 R08: 00007febb14acf04 R09: 000000000000000c [ 541.442699][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 541.450734][ T30] R13: 00007febb14acf58 R14: 00007febb14ad000 R15: 0000000000000000 [ 541.458769][ T30] [ 541.461935][ T30] INFO: task syz.2.2763:16997 blocked for more than 146 seconds. [ 541.469842][ T30] Not tainted syzkaller #0 [ 541.474816][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.484559][ T30] task:syz.2.2763 state:D stack:26120 pid:16997 tgid:16996 ppid:5842 task_flags:0x400140 flags:0x00080002 [ 541.497537][ T30] Call Trace: [ 541.501026][ T30] [ 541.504165][ T30] __schedule+0x15dd/0x52d0 [ 541.508689][ T30] ? __pfx___schedule+0x10/0x10 [ 541.513735][ T30] ? schedule+0x90/0x360 [ 541.518086][ T30] schedule+0x164/0x360 [ 541.522312][ T30] schedule_preempt_disabled+0x13/0x30 [ 541.527897][ T30] __mutex_lock+0x7fe/0x1300 [ 541.532856][ T30] ? __mutex_lock+0x5ac/0x1300 [ 541.537771][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 541.543014][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 541.548161][ T30] ? stack_trace_save+0xa9/0x100 [ 541.553259][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 541.558336][ T30] ? radix_tree_lookup+0x240/0x290 [ 541.563818][ T30] genl_rcv_msg+0x10b/0x7a0 [ 541.568375][ T30] ? __x64_sys_sendto+0xde/0x100 [ 541.573772][ T30] ? do_syscall_64+0x14d/0xf80 [ 541.578927][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 541.584182][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 541.589474][ T30] netlink_rcv_skb+0x232/0x4b0 [ 541.594399][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 541.599637][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.605231][ T30] ? down_read+0x272/0x2e0 [ 541.609823][ T30] ? genl_rcv+0xd/0x40 [ 541.613920][ T30] genl_rcv+0x28/0x40 [ 541.617923][ T30] netlink_unicast+0x75c/0x8e0 [ 541.622998][ T30] netlink_sendmsg+0x813/0xb40 [ 541.627910][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.633769][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 541.638937][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 541.644450][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.650001][ T30] __sys_sendto+0x672/0x710 [ 541.654536][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 541.659756][ T30] ? exc_page_fault+0x6a/0xc0 [ 541.664634][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 541.670094][ T30] __x64_sys_sendto+0xde/0x100 [ 541.674894][ T30] do_syscall_64+0x14d/0xf80 [ 541.679678][ T30] ? trace_irq_disable+0x3b/0x150 [ 541.684798][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.691004][ T30] ? clear_bhb_loop+0x40/0x90 [ 541.695802][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.701957][ T30] RIP: 0033:0x7f5765f5d04e [ 541.706483][ T30] RSP: 002b:00007f5766ea2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 541.715242][ T30] RAX: ffffffffffffffda RBX: 00007f5766ea46c0 RCX: 00007f5765f5d04e [ 541.723446][ T30] RDX: 0000000000000020 RSI: 00007f5766ea3000 RDI: 0000000000000007 [ 541.731498][ T30] RBP: 0000000000000000 R08: 00007f5766ea2f04 R09: 000000000000000c [ 541.739599][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 541.747743][ T30] R13: 00007f5766ea2f58 R14: 00007f5766ea3000 R15: 0000000000000000 [ 541.756031][ T30] [ 541.759268][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 541.768383][ T30] INFO: task syz.2.2763:16998 blocked for more than 146 seconds. [ 541.776283][ T30] Not tainted syzkaller #0 [ 541.781282][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.790244][ T30] task:syz.2.2763 state:D stack:28744 pid:16998 tgid:16996 ppid:5842 task_flags:0x400040 flags:0x00080002 [ 541.802360][ T30] Call Trace: [ 541.805689][ T30] [ 541.808699][ T30] __schedule+0x15dd/0x52d0 [ 541.813513][ T30] ? __pfx___schedule+0x10/0x10 [ 541.818502][ T30] ? schedule+0x90/0x360 [ 541.822836][ T30] schedule+0x164/0x360 [ 541.827009][ T30] schedule_preempt_disabled+0x13/0x30 [ 541.832565][ T30] __mutex_lock+0x7fe/0x1300 [ 541.837180][ T30] ? __mutex_lock+0x5ac/0x1300 [ 541.842032][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 541.846819][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 541.852052][ T30] ? stack_trace_save+0xa9/0x100 [ 541.857018][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 541.862018][ T30] ? radix_tree_lookup+0x240/0x290 [ 541.867237][ T30] genl_rcv_msg+0x10b/0x7a0 [ 541.872161][ T30] ? __x64_sys_sendto+0xde/0x100 [ 541.877124][ T30] ? do_syscall_64+0x14d/0xf80 [ 541.881994][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 541.887120][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 541.892153][ T30] netlink_rcv_skb+0x232/0x4b0 [ 541.896940][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 541.902137][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.907621][ T30] ? down_read+0x272/0x2e0 [ 541.912108][ T30] ? genl_rcv+0xd/0x40 [ 541.916274][ T30] genl_rcv+0x28/0x40 [ 541.920507][ T30] netlink_unicast+0x75c/0x8e0 [ 541.925643][ T30] netlink_sendmsg+0x813/0xb40 [ 541.930596][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.936433][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 541.941464][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 541.946881][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.952976][ T30] __sys_sendto+0x672/0x710 [ 541.957856][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 541.963316][ T30] ? exc_page_fault+0x6a/0xc0 [ 541.968023][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 541.973463][ T30] __x64_sys_sendto+0xde/0x100 [ 541.978256][ T30] do_syscall_64+0x14d/0xf80 [ 541.982925][ T30] ? trace_irq_disable+0x3b/0x150 [ 541.987964][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.994303][ T30] ? clear_bhb_loop+0x40/0x90 [ 541.999137][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.005130][ T30] RIP: 0033:0x7f5765f5d04e [ 542.009705][ T30] RSP: 002b:00007f5766e81e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 542.018134][ T30] RAX: ffffffffffffffda RBX: 00007f5766e836c0 RCX: 00007f5765f5d04e [ 542.026225][ T30] RDX: 0000000000000024 RSI: 00007f5766e82000 RDI: 0000000000000006 [ 542.034687][ T30] RBP: 0000000000000000 R08: 00007f5766e81f04 R09: 000000000000000c [ 542.042760][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 542.050886][ T30] R13: 00007f5766e81f58 R14: 00007f5766e82000 R15: 0000000000000000 [ 542.058969][ T30] [ 542.062105][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 542.071400][ T30] [ 542.071400][ T30] Showing all locks held in the system: [ 542.079218][ T30] 1 lock held by khungtaskd/30: [ 542.084201][ T30] #0: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 542.094535][ T30] 2 locks held by getty/5584: [ 542.099268][ T30] #0: ffff888032bda0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 542.109117][ T30] #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 542.119364][ T30] 1 lock held by udevd/12392: [ 542.124060][ T30] #0: ffff888026c97358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 542.133419][ T30] 1 lock held by udevd/12588: [ 542.138188][ T30] #0: ffff888026da3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 542.147778][ T30] 6 locks held by syz.0.2756/16967: [ 542.153144][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.161596][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.170629][ T30] #2: ffff888026caca78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 542.181221][ T30] #3: ffff888026cf4978 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 542.190818][ T30] #4: ffff888026cf4318 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 542.203656][ T30] #5: ffff888026cf4350 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 542.216274][ T30] 2 locks held by syz.0.2756/16969: [ 542.221638][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.229924][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.239389][ T30] 2 locks held by syz.0.2756/16975: [ 542.244726][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.253767][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.262883][ T30] 2 locks held by syz.1.2758/16973: [ 542.268255][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.276694][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.285855][ T30] 2 locks held by syz.1.2758/16976: [ 542.291300][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.299642][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.308694][ T30] 2 locks held by syz.4.2761/16988: [ 542.313988][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.322364][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.331536][ T30] 2 locks held by syz.4.2761/16989: [ 542.336857][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.345236][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.354447][ T30] 2 locks held by syz.3.2762/16993: [ 542.360021][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.368257][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.377349][ T30] 2 locks held by syz.3.2762/16994: [ 542.382625][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.390877][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.400011][ T30] 2 locks held by syz.2.2763/16997: [ 542.405293][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.413798][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.422950][ T30] 2 locks held by syz.2.2763/16998: [ 542.428146][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.436678][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.445898][ T30] 2 locks held by syz-executor/17001: [ 542.451355][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.459646][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.468674][ T30] 2 locks held by syz-executor/17003: [ 542.474367][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.482674][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.491841][ T30] 2 locks held by syz-executor/17020: [ 542.497493][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.505929][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.515209][ T30] 2 locks held by syz-executor/17022: [ 542.520703][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.529238][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.538360][ T30] 2 locks held by syz-executor/17024: [ 542.543927][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.552204][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.561266][ T30] 2 locks held by syz-executor/17051: [ 542.566674][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.575046][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.584316][ T30] 2 locks held by syz-executor/17053: [ 542.589941][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.598169][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.607281][ T30] 2 locks held by syz-executor/17070: [ 542.612684][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.621199][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.630611][ T30] 2 locks held by syz-executor/17072: [ 542.636176][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.644641][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.653794][ T30] 2 locks held by syz-executor/17074: [ 542.659278][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.667598][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.677215][ T30] 2 locks held by syz-executor/17101: [ 542.682800][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.691217][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.700304][ T30] 2 locks held by syz-executor/17103: [ 542.705723][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.713973][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.723398][ T30] 2 locks held by syz-executor/17120: [ 542.728771][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.737235][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.746416][ T30] 2 locks held by syz-executor/17122: [ 542.751963][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.760267][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.769349][ T30] 2 locks held by syz-executor/17124: [ 542.774810][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.783081][ T30] #1: ffffffff8fc3a648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.792147][ T30] [ 542.794474][ T30] ============================================= [ 542.794474][ T30] [ 542.803196][ T30] NMI backtrace for cpu 0 [ 542.803211][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 542.803232][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 542.803242][ T30] Call Trace: [ 542.803250][ T30] [ 542.803258][ T30] dump_stack_lvl+0xe8/0x150 [ 542.803287][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 542.803314][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 542.803340][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 542.803368][ T30] sys_info+0x135/0x170 [ 542.803390][ T30] watchdog+0xfd9/0x1030 [ 542.803413][ T30] ? watchdog+0x21a/0x1030 [ 542.803437][ T30] kthread+0x388/0x470 [ 542.803456][ T30] ? __pfx_watchdog+0x10/0x10 [ 542.803471][ T30] ? __pfx_kthread+0x10/0x10 [ 542.803491][ T30] ret_from_fork+0x51e/0xb90 [ 542.803516][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 542.803538][ T30] ? __switch_to+0xc7d/0x1450 [ 542.803563][ T30] ? __pfx_kthread+0x10/0x10 [ 542.803582][ T30] ret_from_fork_asm+0x1a/0x30 [ 542.803621][ T30] [ 542.803628][ T30] Sending NMI from CPU 0 to CPUs 1: [ 542.914320][ C1] NMI backtrace for cpu 1 [ 542.914341][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 542.914358][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 542.914368][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 542.914391][ C1] Code: fe 6a 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 82 15 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 542.914405][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 542.914420][ C1] RAX: 00000000001bcea5 RBX: ffffffff819a8d1a RCX: 0000000080000001 [ 542.914432][ C1] RDX: 0000000000000001 RSI: ffffffff8df2facf RDI: ffffffff8c27d480 [ 542.914443][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 542.914454][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 542.914465][ C1] R13: 1ffff11003b59000 R14: 0000000000000001 R15: 1ffff11003b59000 [ 542.914476][ C1] FS: 0000000000000000(0000) GS:ffff888125547000(0000) knlGS:0000000000000000 [ 542.914488][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.914499][ C1] CR2: 0000561c7f55b168 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 542.914513][ C1] Call Trace: [ 542.914519][ C1] [ 542.914525][ C1] default_idle+0x9/0x20 [ 542.914544][ C1] default_idle_call+0x72/0xb0 [ 542.914564][ C1] do_idle+0x36a/0x5f0 [ 542.914586][ C1] ? __pfx_do_idle+0x10/0x10 [ 542.914617][ C1] cpu_startup_entry+0x43/0x60 [ 542.914636][ C1] start_secondary+0x101/0x110 [ 542.914655][ C1] common_startup_64+0x13e/0x147 [ 542.914677][ C1] [ 543.078065][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 543.085105][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 543.094205][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 543.104438][ T30] Call Trace: [ 543.107716][ T30] [ 543.110654][ T30] vpanic+0x56c/0xa60 [ 543.114638][ T30] ? __pfx___schedule+0x10/0x10 [ 543.119480][ T30] ? __pfx_vpanic+0x10/0x10 [ 543.123995][ T30] ? __pfx_console_unlock+0x10/0x10 [ 543.129202][ T30] panic+0xc5/0xd0 [ 543.132990][ T30] ? __pfx_panic+0x10/0x10 [ 543.137514][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 543.142887][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 543.149056][ T30] watchdog+0x1023/0x1030 [ 543.153427][ T30] ? watchdog+0x21a/0x1030 [ 543.157931][ T30] kthread+0x388/0x470 [ 543.161997][ T30] ? __pfx_watchdog+0x10/0x10 [ 543.166695][ T30] ? __pfx_kthread+0x10/0x10 [ 543.171373][ T30] ret_from_fork+0x51e/0xb90 [ 543.176062][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 543.181206][ T30] ? __switch_to+0xc7d/0x1450 [ 543.185880][ T30] ? __pfx_kthread+0x10/0x10 [ 543.190461][ T30] ret_from_fork_asm+0x1a/0x30 [ 543.195234][ T30] [ 543.198796][ T30] Kernel Offset: disabled [ 543.203130][ T30] Rebooting in 86400 seconds..