last executing test programs: 20.469431245s ago: executing program 1 (id=10915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b2b, &(0x7f0000000000)={'wlan1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, r3, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) 20.080206141s ago: executing program 0 (id=10920): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000010c0)=@mangle={'mangle\x00', 0x2, 0x6, 0xd30, 0x9c8, 0x8d8, 0x8d8, 0x8d8, 0xa98, 0xc60, 0xc60, 0xc60, 0xc60, 0xc60, 0x6, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0xb}, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {0xff}, 0x21}, 0x0, 0x8b0, 0x8d8, 0x0, {0x7a00000010000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x8, 0x1}, {0x5, 0x2}, {0x7fffffff, 0x1}, {0x64c, 0x2}, {0xb4, 0x3}, {0x3}, {0x981e, 0x2}, {}, {0x63b}, {0x8, 0x2}, {0x2}], [{0xfffffffa, 0x1}, {0xb, 0x9}, {0x200, 0x4}, {0x1, 0x9}, {0x7ff, 0x2}, {0x7, 0x5}, {0x1, 0x7}, {0x8001, 0x80}, {0x2, 0x2}, {0xffffffff}, {0x4, 0xd961}], 0x6, 0xa}, {[{0x5, 0x3}, {0x7fff, 0x3}, {0x8001}, {0xfd5, 0x1}, {0x7, 0x2}, {0xffffbf2c, 0x3}, {0x2, 0x2}, {0x1, 0x1}, {0x738}, {0x800, 0x3}, {0xc, 0x2}], [{0x1, 0x9}, {0xffff, 0xf}, {0x2, 0x41}, {0x4000, 0x8}, {0x2, 0x4797}, {0x2, 0x8000}, {0xe0, 0x1}, {0xe, 0x2}, {0x401, 0x6}, {0x3, 0xffff}, {0x7, 0x7}], 0x2, 0x1}, {[{0x0, 0x2}, {0xba}, {0x8, 0x3}, {0xfffffe00, 0x3}, {0x8, 0x1}, {0x4, 0x2}, {0x1, 0x3}, {0x3}, {0x9, 0x2}, {0x9, 0x3}, {0x1}], [{0xe, 0x7}, {0x8, 0x10}, {0x2, 0x6}, {0x80000000, 0x2}, {0x5384, 0x1}, {0x7fff, 0xf}, {0x6, 0x10000}, {0x2, 0xc0}, {0xe, 0x3}, {0x9, 0x1ff}, {0x9, 0x7f}], 0x5, 0x6}, {[{0x3, 0x3}, {0x5, 0x3}, {0x81, 0x2}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x1}, {0x4, 0x2}, {0x6, 0x2}, {0x9, 0x2}, {0x80, 0x3}, {0x3ff, 0x3}], [{0x3, 0x4}, {0x401, 0x500}, {0xe, 0x1}, {0x3, 0xffffffc7}, {0x4c15, 0x10001}, {0x3, 0x4}, {0x3, 0x200}, {0x7fff, 0x8}, {0x2, 0xd39}, {0x7ffe, 0xc}, {0x4, 0x7f}], 0x9, 0xb}, {[{0x101, 0x1}, {0x5, 0x2}, {0xfffffffa}, {}, {0x8, 0x2}, {0x7, 0x2}, {0x100, 0x2}, {0x5, 0x1}, {0xfffffffd, 0x1}, {0xe}, {0x0, 0x1}], [{0x3, 0x9}, {0x8, 0x3}, {0x6, 0x9}, {0x8, 0x80}, {0x1, 0x6}, {0x81, 0x4}, {0x2, 0x7}, {0x80, 0x6}, {0x8, 0x40}, {0x9}, {0x0, 0xff}], 0xa, 0xa}, {[{0x5, 0x2}, {0x7600, 0x3}, {0x10001, 0x1}, {0x1, 0x2}, {0x84}, {0xd}, {0x136}, {0x1, 0x1}, {0x7, 0x3}, {0x3, 0x1}, {0x592c, 0x1}], [{0xf0c}, {0x9, 0xfffffff9}, {0x4, 0xffff1871}, {0x9, 0x101}, {0x6, 0x4}, {0x3000, 0xb}, {0x9, 0xd3f5}, {0x7}, {0x9, 0x9737}, {0xffff, 0xe49}, {0x7fffffff, 0x5}], 0x1, 0xa}, {[{0x1, 0x1}, {0x7fff, 0x3}, {0x9}, {0xfffffff6, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0xe92, 0x3}, {0x9}, {0xb372, 0x1}, {0x5, 0x1}, {0x8}], [{0x9, 0x9}, {0x4, 0x7}, {0x9bc, 0x6}, {0xffff8001, 0x100}, {0x9, 0x10}, {0x66e4, 0x8bf}, {0x6, 0x7}, {0xf639, 0x6}, {0x5, 0x8}, {0x9, 0x401}, {0x4, 0x100}], 0x4, 0x9}, {[{0x3, 0x1}, {0x4, 0x1}, {0x0, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x0, 0x3}, {0x4, 0x1}, {0xff, 0x3}, {0x6, 0x3}, {0x2}], [{0x7, 0x8000}, {0xfff, 0x6}, {0x2, 0x2}, {0xc, 0x3ff}, {0xa, 0x80000000}, {0x4, 0x783}, {0x6, 0x9}, {0x101, 0x8000}, {0x10001, 0x3}, {0x3, 0xd67}, {0xfffffff9, 0xfff}], 0xb, 0x1}, {[{0x80000001, 0x3}, {0x3}, {0x61c5c6cf, 0x2}, {0x0, 0x3}, {}, {0x806, 0x2}, {0x6, 0x3}, {0xfffffffa, 0x1}, {0xb43, 0x3}, {0x6, 0x2}, {0x400, 0x1}], [{0x1, 0x8000}, {0xce47, 0xfffffcef}, {0x100, 0x4}, {0x4, 0x3}, {0xd41, 0x8}, {0x8, 0x18000}, {0x8000, 0x6}, {0xf}, {0x4, 0x7f}, {0x4, 0x2}, {0x5, 0x1}], 0x6, 0x6}, {[{0x4}, {0xfff}, {0x0, 0x1}, {0x9, 0x1}, {0x365, 0x3}, {0x6, 0x2}, {0xfffffffe}, {0xfff, 0x8515453908d9a9fb}, {0xfffffffa, 0x3}, {0x0, 0x2}, {0x58c, 0x3}], [{0x8, 0xb}, {0x6, 0xffff}, {0x2, 0x9}, {0x8000, 0x8}, {0x1, 0x2}, {0x4, 0x29a0f484}, {0x6b, 0x5}, {0x4, 0x2f9}, {0x18a6, 0x2}, {0xd58, 0x10}, {0x8, 0x2}], 0x3, 0x6}, {[{0x4, 0x3}, {0x9}, {0xe, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x5, 0x2}, {0xc16b, 0x2}, {0x6, 0x1}, {0x3, 0x3}, {0x41}, {0x5ae8}], [{0xfff, 0xffffff80}, {0x8, 0xa5}, {0x2, 0x5}, {0x6, 0xbe8f}, {0xfffffbff, 0x7ff}, {0x5, 0x8001}, {0x1, 0x47}, {0x400, 0x47d4}, {0x38a7, 0xfffffff7}, {0x7c6, 0xffff}, {0xbc8, 0x3}], 0x0, 0x4}], 0x3}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@multicast1=0xe0000000, 0x36, 0x11, 0x5}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xff000000], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xb96, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2b}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xd90) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000140)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r1) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c001800fffc020000000000000000000000000001fc010000000000000000000000000001060105"], 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt(r1, 0x1, 0x8, &(0x7f00000008c0), 0x0) r3 = socket(0x15, 0x80005, 0x0) getsockopt(r3, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000300)=0x100000001, 0x4) recvfrom$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x88885}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) close(r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, 0x0, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) close(0x4) 19.479500249s ago: executing program 1 (id=10925): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = accept4(r0, 0x0, &(0x7f00000000c0), 0x80000) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)={0x188, 0x0, 0x400, 0x70bd27, 0x6, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9150}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8000}, {0x8, 0x13, 0xff}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x2}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0xfe3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10}, {0x6}, {0x8, 0x13, 0xfffffffc}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x9}, {0x5}}]}, 0x188}, 0x1, 0x0, 0x0, 0x8080}, 0x4000080) socket$netlink(0x10, 0x3, 0x4) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) unshare(0x880) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016", @ANYRES64=r6, @ANYRES64=0x0], 0x84}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 18.887813288s ago: executing program 0 (id=10930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@end]}}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) close(0x4) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x4b, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}, 0x10) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 18.810351069s ago: executing program 2 (id=10931): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=' '], 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd15fad7106cccf02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000002000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000200)={0x3fc, 0x0, 0x0, 0x9, 0x0, 0xeb, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000010) close(0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x27, &(0x7f00000000c0)="c1188e19b95d02ff4284860186dd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x27) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r9, &(0x7f0000000200)=ANY=[], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r11 = openat$cgroup_devices(r10, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r8, 0x0, r11, 0x0, 0x8, 0xb) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000", @ANYRES16=r7, @ANYBLOB="7961fdffffff210000007e0000000c0099006c91000014000000"], 0x20}}, 0x4000054) 18.287727144s ago: executing program 1 (id=10932): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c0", 0x24}], 0x1}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x40000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c) listen(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x6, 0x4, 0xffff0001}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000001c0)={{0x14, 0x10, 0x30}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}}], {0x14}}, 0x3c}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, @generic={0xf, "ba0e62b7403f9e659a8aed1eb96b"}, @phonet={0x23, 0xab, 0x2, 0x7}, @can={0x1d, r3}, 0x1204, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x8000000000000001, 0x8}) r4 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x3e, 0x0, "72e1ce13fcc03014764e289e9f10b5ccab7337bc7ccb39f7c90836a25b644544849b1f5823b4be943e78aec982c9e6021349a7bd21ed5b4335321f52926493fa63d8f954f02b4e9e30e5e7381a1e879b"}, 0xd8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 18.131859013s ago: executing program 3 (id=10933): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000440)={r1, 0x1, 0x6, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x80003, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1, &(0x7f0000000300)=0x4, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000000f000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400f718fc00001000010000000000000000000000000a2000000039d6fd8a0000000000000000d38c732c4b56cd382704b166cc98070000000900010073797a30000000003c00000000000000000000000700000008000a09000000000900020073797a31000000000900010073797a9712a2cfeffadbb778300000000008000540000000001e0a01080000000000000000070000060900020073797a31000000000900010073797a3000000000140003801000008090d552ffc290eded86040001800800034000000002140000001000010000000000000000000084000a0aaad6c334168a8455"], 0xc4}}, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17a431076b876c1d0000007ea60864160af3653c000cc00400020208002b000000000000000000eab556a705251e61b6a6ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 17.964718218s ago: executing program 1 (id=10935): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f00ffffffff05003600000000000c0005000000000200000000050037000000000008000200", @ANYRES64=r2, @ANYBLOB="52a42ea37e6ef492913222228bbad0ac1ba1d5a5cb4304dda77be4915317a7d1ac94"], 0x40}, 0x4, 0x700000000000000}, 0x40010) 17.845290566s ago: executing program 1 (id=10937): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000100)=r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x208, 0x100}, [@IFLA_MTU={0x8, 0x4, 0xec3}]}, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x7, 0x3, 0x2000, r4, 0x0, '\x00', r6, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) syz_open_procfs$namespace(r0, 0xfffffffffffffffe) getpid() (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000100)=r4, 0x8) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x208, 0x100}, [@IFLA_MTU={0x8, 0x4, 0xec3}]}, 0x28}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x7, 0x3, 0x2000, r4, 0x0, '\x00', r6, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) (async) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) syz_open_procfs$namespace(r0, 0xfffffffffffffffe) (async) 17.636149087s ago: executing program 2 (id=10939): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x20008050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x2, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r10 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0xfffe) preadv(r10, &(0x7f0000000100), 0xa, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r11 = socket$netlink(0x10, 0x3, 0x6) writev(r11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x80ff, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000011cae0000b40000000000000000", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700200100000000000000000000000000001400350077673100"/56], 0x50}}, 0x0) 17.634978296s ago: executing program 3 (id=10940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x54}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000a000000000200000700000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20) connect$can_bcm(r1, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x5, 0x45, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x48}, 0x2}, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000dffffff", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20008000) 17.325071967s ago: executing program 4 (id=10941): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000d00)=""/214, 0xd6}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000002e00)=""/4111, 0x100f}, {&(0x7f0000000580)=""/238, 0xee}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000003e40)=""/4121, 0x1019}, {&(0x7f0000000e00)=""/231, 0xe7}, {&(0x7f0000000800)=""/147, 0x93}, {&(0x7f0000000240)=""/96, 0x60}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000480)=""/101, 0x65}], 0x8}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) (fail_nth: 13) 17.32008618s ago: executing program 3 (id=10942): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x40000000007, 0x20000a0de, 0x40000000000084, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x80000000000000, 0x0, 0x5}, 0xc1, 0x0, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x1, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x0, 0xfffffffd}}, 0xe8) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="2400000016009fb2344655066e4bfdff09000000040000000c000a"], 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x2c}}, 0x60040050) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000280)="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", 0x118) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 16.818894704s ago: executing program 3 (id=10943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0xffffff00], [], 'wg1\x00', 'gre0\x00', {0xff}, {}, 0x87}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200007, 0x2000000, 0x7, 0x3ff}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfff0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x398) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000b, 0x13, r2, 0x2d322000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0xd4, 0x41, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xbc, 0x1, 0x0, 0x1, [@typed={0xb6, 0x6, 0x0, 0x0, @str='\x88\nw\x1a>\xa0X\x12\xf0\x97\x87\xfe\xfc\xa7\v_\xbfG6\x84\x96r\xfe\xe23N\xf9\x11\xfd\xce\x1a\x9f\xffp\x1dR\\\x1e\x92\xc7\xb4\b^\xa5\x1d0m\xa4\x82\xd8\xd2\xc8\x8c\xd3\x84\x85\f\x05y\xf0\x11v\x7fA\xcf#\xfaIQ\x10\xae\x1e\x01\xd7U\xa2%R\\s\x9e\x0e\xca\xe2\xb0\xb6\xeb\xa66`y\xd5\xdcqQ\xf6E\xb5\xf9i\xa8\x9f\xe4\x97\x8b\xe4Xr\xf1\xba\xcb\x9c)Vox\xfb~\x85Yk\x9d\xc6c9\xbf\xda))*\x1b\x18\xdes\xf9\xa9\x16\xf5\xd0[5\xcd\x05x\xe8\xc6\x81\x98+FA\x19\x8d\xe3T\xc2\x94\x02\xfd\v\xf7\x9b\xeb\xd3pA6c\tn\xd8\x8c\x97W\x9c\x90\xe1\x8f'}]}]}, 0xd4}}, 0x0) 16.755682067s ago: executing program 0 (id=10944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x4004}, 0x20008064) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000740)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="240000000062000000000000000700000044200d837f0000010000010008000000000000"], 0x28}, 0x4000810) bind$alg(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x50002, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x80000000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x9, 0x3}, &(0x7f00000003c0)=0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000018c0)=""/4088, 0xff8}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xd}], 0x9, 0x4022, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000300)={0x200, 0x0, 0x5, 0x1000, 0x1, 0xf3, 0x3, 0xc, r5}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$nl_generic(0x11, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) accept4(r1, 0x0, 0x0, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000140)={0x2, 0xce20, @multicast2}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x1bc}}, 0x8000000) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) 16.684371869s ago: executing program 4 (id=10945): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 16.642084587s ago: executing program 2 (id=10946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.570935221s ago: executing program 0 (id=10947): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f00ffffffff05003600000000000c0005000000000200000000050037000000000008000200", @ANYRES64, @ANYBLOB="52a42ea37e6ef492913222228bbad0ac1ba1d5a5cb4304dda77be4915317a7d1ac94"], 0x40}, 0x4, 0x700000000000000}, 0x40010) 16.542230741s ago: executing program 4 (id=10948): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}}], 0x2, 0x48000) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) r3 = accept4(r1, &(0x7f00000001c0)=@alg, &(0x7f0000000100)=0xc8, 0x800) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000140)=@bpq0, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0103fcffffff000000002b0000000c0006"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x0) 16.449300303s ago: executing program 0 (id=10949): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 16.32636227s ago: executing program 4 (id=10950): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x11, '\x00', r4}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200000000452e916b085d437900320003000000000000000000000010000000000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r8, &(0x7f0000000540), 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000009fbe0f0000000095000b000000000010b762213dfa28e384a5ace8c21b333b5f4ddc187d843aa2ced09e1a646a7fbddd817ea427955bbe0438c79f618ac80fd05cfde9b7a3a28f3d5101cb471f9e456c48"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r9}, 0x18) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000c80)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x640100fd, 0x1}, @phonet={0x23, 0x1, 0x8, 0x2}, @generic={0x2a, "85424c9251b9f4e60a7f4f9739ca"}, 0x800, 0x0, 0x0, 0x0, 0xff80, 0x0, 0x0, 0x80000000, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000400)={r10, 0x3, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 16.159382467s ago: executing program 4 (id=10951): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000a400000007000000ac140104000000002000000000000000840000000800000020"], 0x38, 0x4855}, 0x24000052) 16.127172866s ago: executing program 2 (id=10952): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 16.051203679s ago: executing program 3 (id=10953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@end]}}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) close(0x4) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x4b, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}, 0x10) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 16.019116353s ago: executing program 2 (id=10954): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="44000000100001000003000000000000000000004d70156347137facaa06e79039c804968852b8e8a75e06bd89e99e857c33c377344e2a07444aef4a63b2d2c9c4345ff50bf86e4f24d1467f060104dc4468df04e0f82388ce4494293793daa8c568036fb01f1928a29d45c0957f54d2581d25e0ef5ddb42d1abe910e5f777d966dd9e4bbfd31c33164954084d70fe4eefd93d4ed772d96d13ddf1cf37ae63c5be9ea170d1480b328bfe2626593a6828f85d6fa1d77b7536e8ae86f9471536f5a21d08ea929f181a3d54b5561a760bd71e59516fe9f91af98b5acd8f80a7f92573ade11bec", @ANYBLOB="2ba032cdc95fe0d2cc119209a66e36adbac9d70200416d970d73b095e3b111ddf733fa212b94747677663a091041a305c57706a2", @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x42011) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0xfffffffb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x1070bd28, 0x25dfdbf7, {0x0, 0x0, 0x0, r7, {0xf000, 0x7}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0xc8804) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r9, 0x6, 0x3, &(0x7f00000000c0), 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r11, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 15.966819588s ago: executing program 4 (id=10955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = accept4(r1, &(0x7f0000000780)=@alg, &(0x7f00000005c0)=0xfffffffffffffcdc, 0x80000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x19, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa26}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$bt_hci(r4, &(0x7f0000000800)={0x1f, 0x4, 0x2}, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r8], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a0b040000000000000000080000002c0004802800018000000100636d690000000180000800006e6f747261636b000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xfffffffffffffe6d}}, 0x0) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000840)=@generic, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000000440)=""/225, 0xe1}, {&(0x7f0000000300)=""/54, 0x36}], 0x3, &(0x7f0000000680)=""/218, 0xda}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r9) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fbdbdf25100000000c0006000200000001000000050011000100000008000300"], 0x38}, 0x1, 0x0, 0x0, 0x2400c000}, 0xc080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r10, 0x78379978f215f99d, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r12 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r12, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @local}, {0xa, 0x4e24, 0x0, @mcast1}, 0x0, {[0x0, 0x0, 0x6cee, 0x0, 0x0, 0x0, 0x1ed0]}}, 0x5c) accept4$phonet_pipe(r12, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x80000) 15.843952291s ago: executing program 1 (id=10956): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x901, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="1c002d80050004000100000005000100030000000800020068"], 0x38}, 0x1, 0x0, 0x0, 0x20008094}, 0x4c014) 15.53080902s ago: executing program 3 (id=10957): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x2, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)={0xa}) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000440)=[{&(0x7f00000000c0)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0x0) r8 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r8, 0x0, 0x0) setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r8, 0x0, 0x8000, 0x0) getsockopt$bt_hci(r5, 0x0, 0x2, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x9, 0x9, 0x2, 0x8, 0x3, 0xc6, 0x4, {0x0, @in6={{0xa, 0x4e24, 0x9037, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, 0x1ff, 0x6, 0x68, 0x6, 0x6}}, &(0x7f00000004c0)=0xb0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000600)={r9, 0x3}, 0x8) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x2, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000080000060000000f0000005a040200", @ANYRES32, @ANYBLOB="7f000000000000f739696f72d477a80000000000c61164e70b95cd41adea30e76fb6afbb399488f86e72947821948368bd8e09271f980c9ebbd002068cc2ec305f85420b93fc4a5cdeb4af8aa3e78c7296beb8c087961376ddadc912d656fb89ac84be84cb57f45ae4356cb129ef6ce31a64c5c7eb54865243d36157938cbd4715317eec442610360be8335ae99f3fca369880895d11b3e7", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="02000000050000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x9, 0x17, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES8=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b50302000000000085000000b8000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 15.408144078s ago: executing program 0 (id=10958): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32, @ANYBLOB="0800040000000010080003"], 0x2c}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, 0x0, &(0x7f0000000500)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3f, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@nested={0xc, 0x15, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @u32=0x4888}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 15.22581726s ago: executing program 2 (id=10959): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f00ffffffff05003600000000000c0005000000000200000000050037000000000008000200", @ANYRES64, @ANYBLOB="52a42ea37e6ef492913222228bbad0ac1ba1d5a5cb4304dda77be4915317a7d1ac94"], 0x40}, 0x4, 0x700000000000000}, 0x40010) 657.472503ms ago: executing program 32 (id=10956): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x901, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="1c002d80050004000100000005000100030000000800020068"], 0x38}, 0x1, 0x0, 0x0, 0x20008094}, 0x4c014) 623.792083ms ago: executing program 33 (id=10955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = accept4(r1, &(0x7f0000000780)=@alg, &(0x7f00000005c0)=0xfffffffffffffcdc, 0x80000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x19, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa26}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$bt_hci(r4, &(0x7f0000000800)={0x1f, 0x4, 0x2}, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r8], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a0b040000000000000000080000002c0004802800018000000100636d690000000180000800006e6f747261636b000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xfffffffffffffe6d}}, 0x0) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000840)=@generic, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000000440)=""/225, 0xe1}, {&(0x7f0000000300)=""/54, 0x36}], 0x3, &(0x7f0000000680)=""/218, 0xda}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r9) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fbdbdf25100000000c0006000200000001000000050011000100000008000300"], 0x38}, 0x1, 0x0, 0x0, 0x2400c000}, 0xc080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r10, 0x78379978f215f99d, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r12 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r12, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @local}, {0xa, 0x4e24, 0x0, @mcast1}, 0x0, {[0x0, 0x0, 0x6cee, 0x0, 0x0, 0x0, 0x1ed0]}}, 0x5c) accept4$phonet_pipe(r12, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x80000) 145.823895ms ago: executing program 34 (id=10958): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32, @ANYBLOB="0800040000000010080003"], 0x2c}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, 0x0, &(0x7f0000000500)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3f, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@nested={0xc, 0x15, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @u32=0x4888}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 88.658828ms ago: executing program 35 (id=10959): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f00ffffffff05003600000000000c0005000000000200000000050037000000000008000200", @ANYRES64, @ANYBLOB="52a42ea37e6ef492913222228bbad0ac1ba1d5a5cb4304dda77be4915317a7d1ac94"], 0x40}, 0x4, 0x700000000000000}, 0x40010) 0s ago: executing program 36 (id=10957): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x2, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)={0xa}) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000440)=[{&(0x7f00000000c0)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0x0) r8 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r8, 0x0, 0x0) setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r8, 0x0, 0x8000, 0x0) getsockopt$bt_hci(r5, 0x0, 0x2, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x9, 0x9, 0x2, 0x8, 0x3, 0xc6, 0x4, {0x0, @in6={{0xa, 0x4e24, 0x9037, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, 0x1ff, 0x6, 0x68, 0x6, 0x6}}, &(0x7f00000004c0)=0xb0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000600)={r9, 0x3}, 0x8) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x2, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000080000060000000f0000005a040200", @ANYRES32, @ANYBLOB="7f000000000000f739696f72d477a80000000000c61164e70b95cd41adea30e76fb6afbb399488f86e72947821948368bd8e09271f980c9ebbd002068cc2ec305f85420b93fc4a5cdeb4af8aa3e78c7296beb8c087961376ddadc912d656fb89ac84be84cb57f45ae4356cb129ef6ce31a64c5c7eb54865243d36157938cbd4715317eec442610360be8335ae99f3fca369880895d11b3e7", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="02000000050000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x9, 0x17, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES8=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b50302000000000085000000b8000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 0211_pre_doit+0x10/0x10 [ 1207.908556][ T8933] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1207.908580][ T8933] ? __asan_memcpy+0x40/0x70 [ 1207.908596][ T8933] ? __pfx_ref_tracker_free+0x10/0x10 [ 1207.908620][ T8933] netlink_rcv_skb+0x28c/0x470 [ 1207.908642][ T8933] ? __lock_acquire+0xab9/0xd20 [ 1207.908663][ T8933] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1207.908685][ T8933] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1207.908726][ T8933] ? down_read+0x1ad/0x2e0 [ 1207.908748][ T8933] genl_rcv+0x28/0x40 [ 1207.908765][ T8933] netlink_unicast+0x82f/0x9e0 [ 1207.908796][ T8933] ? __pfx_netlink_unicast+0x10/0x10 [ 1207.908821][ T8933] ? netlink_sendmsg+0x642/0xb30 [ 1207.908841][ T8933] ? skb_put+0x11b/0x210 [ 1207.908868][ T8933] netlink_sendmsg+0x805/0xb30 [ 1207.908900][ T8933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1207.908929][ T8933] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1207.908952][ T8933] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1207.908975][ T8933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1207.909001][ T8933] __sock_sendmsg+0x21c/0x270 [ 1207.909034][ T8933] ____sys_sendmsg+0x505/0x830 [ 1207.909067][ T8933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1207.909102][ T8933] ? import_iovec+0x74/0xa0 [ 1207.909129][ T8933] ___sys_sendmsg+0x21f/0x2a0 [ 1207.909149][ T8933] ? __pfx____sys_sendmsg+0x10/0x10 [ 1207.909205][ T8933] ? __fget_files+0x2a/0x420 [ 1207.909226][ T8933] ? __fget_files+0x3a0/0x420 [ 1207.909258][ T8933] __x64_sys_sendmsg+0x19b/0x260 [ 1207.909279][ T8933] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1207.909308][ T8933] ? __pfx_ksys_write+0x10/0x10 [ 1207.909332][ T8933] ? do_syscall_64+0xbe/0xfa0 [ 1207.909353][ T8933] do_syscall_64+0xfa/0xfa0 [ 1207.909369][ T8933] ? lockdep_hardirqs_on+0x9c/0x150 [ 1207.909387][ T8933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.909406][ T8933] ? clear_bhb_loop+0x60/0xb0 [ 1207.909428][ T8933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.909444][ T8933] RIP: 0033:0x7fd7d8f8efc9 [ 1207.909462][ T8933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1207.909478][ T8933] RSP: 002b:00007fd7d9eeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1207.909498][ T8933] RAX: ffffffffffffffda RBX: 00007fd7d91e5fa0 RCX: 00007fd7d8f8efc9 [ 1207.909512][ T8933] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1207.909524][ T8933] RBP: 00007fd7d9eeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.909536][ T8933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.909547][ T8933] R13: 00007fd7d91e6038 R14: 00007fd7d91e5fa0 R15: 00007ffea93a4108 [ 1207.909578][ T8933] [ 1208.347866][ T8930] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.10426'. [ 1208.709501][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10434'. [ 1208.723939][ T98] block nbd1: Possible stuck request ffff888025655080: control (read@0,4096B). Runtime 990 seconds [ 1208.752005][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10437'. [ 1208.788525][ T8967] vxcan0: tx address claim with dlc 0 [ 1208.808576][ T5835] tipc: Node number set to 2851111444 [ 1209.000282][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10442'. [ 1209.070349][ T8983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1209.077641][ T8983] IPv6: NLM_F_CREATE should be set when creating new route [ 1209.265743][ T8995] netlink: zone id is out of range [ 1209.289704][ T8995] netlink: zone id is out of range [ 1209.315487][ T8995] netlink: zone id is out of range [ 1209.320641][ T8995] netlink: zone id is out of range [ 1209.335382][ T8995] netlink: zone id is out of range [ 1209.376565][ T8995] netlink: zone id is out of range [ 1209.381713][ T8995] netlink: zone id is out of range [ 1209.396826][ T8995] netlink: zone id is out of range [ 1209.401981][ T8995] netlink: zone id is out of range [ 1209.430258][ T8995] netlink: zone id is out of range [ 1209.550956][ T9012] vxcan0: tx address claim with dlc 0 [ 1209.793253][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10454'. [ 1210.327347][ T9042] No such timeout policy "syz1" [ 1210.561841][ T9039] wg1 speed is unknown, defaulting to 1000 [ 1210.949336][ T9066] FAULT_INJECTION: forcing a failure. [ 1210.949336][ T9066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1210.974724][ T9066] CPU: 1 UID: 0 PID: 9066 Comm: syz.3.10467 Not tainted syzkaller #0 PREEMPT(full) [ 1210.974751][ T9066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1210.974764][ T9066] Call Trace: [ 1210.974771][ T9066] [ 1210.974781][ T9066] dump_stack_lvl+0x189/0x250 [ 1210.974805][ T9066] ? __pfx____ratelimit+0x10/0x10 [ 1210.974831][ T9066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1210.974849][ T9066] ? __pfx__printk+0x10/0x10 [ 1210.974881][ T9066] should_fail_ex+0x414/0x560 [ 1210.974913][ T9066] _copy_from_user+0x2d/0xb0 [ 1210.974937][ T9066] bpf_test_init+0xd8/0x150 [ 1210.974967][ T9066] bpf_prog_test_run_xdp+0x49e/0x10e0 [ 1210.975009][ T9066] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1210.975046][ T9066] ? __fget_files+0x2a/0x420 [ 1210.975075][ T9066] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1210.975102][ T9066] bpf_prog_test_run+0x2c7/0x340 [ 1210.975128][ T9066] __sys_bpf+0x562/0x860 [ 1210.975153][ T9066] ? __pfx___sys_bpf+0x10/0x10 [ 1210.975191][ T9066] ? ksys_write+0x22a/0x250 [ 1210.975215][ T9066] ? __pfx_ksys_write+0x10/0x10 [ 1210.975237][ T9066] __x64_sys_bpf+0x7c/0x90 [ 1210.975256][ T9066] do_syscall_64+0xfa/0xfa0 [ 1210.975272][ T9066] ? lockdep_hardirqs_on+0x9c/0x150 [ 1210.975287][ T9066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.975304][ T9066] ? clear_bhb_loop+0x60/0xb0 [ 1210.975324][ T9066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.975340][ T9066] RIP: 0033:0x7fd7d8f8efc9 [ 1210.975356][ T9066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1210.975369][ T9066] RSP: 002b:00007fd7d9eeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1210.975389][ T9066] RAX: ffffffffffffffda RBX: 00007fd7d91e5fa0 RCX: 00007fd7d8f8efc9 [ 1210.975403][ T9066] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1210.975415][ T9066] RBP: 00007fd7d9eeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1210.975427][ T9066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1210.975438][ T9066] R13: 00007fd7d91e6038 R14: 00007fd7d91e5fa0 R15: 00007ffea93a4108 [ 1210.975467][ T9066] [ 1211.241207][ T9066] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.339288][ T9084] Bluetooth: MGMT ver 1.23 [ 1211.446141][ T9087] FAULT_INJECTION: forcing a failure. [ 1211.446141][ T9087] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.458951][ T9087] CPU: 1 UID: 0 PID: 9087 Comm: syz.4.10473 Not tainted syzkaller #0 PREEMPT(full) [ 1211.458988][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1211.459000][ T9087] Call Trace: [ 1211.459009][ T9087] [ 1211.459019][ T9087] dump_stack_lvl+0x189/0x250 [ 1211.459043][ T9087] ? __pfx____ratelimit+0x10/0x10 [ 1211.459069][ T9087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1211.459086][ T9087] ? __pfx__printk+0x10/0x10 [ 1211.459108][ T9087] ? __pfx___might_resched+0x10/0x10 [ 1211.459128][ T9087] ? fs_reclaim_acquire+0x7d/0x100 [ 1211.459153][ T9087] should_fail_ex+0x414/0x560 [ 1211.459189][ T9087] should_failslab+0xa8/0x100 [ 1211.459212][ T9087] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1211.459231][ T9087] ? __nla_parse+0x40/0x60 [ 1211.459248][ T9087] ? nl80211_register_beacons+0xce/0x360 [ 1211.459276][ T9087] nl80211_register_beacons+0xce/0x360 [ 1211.459302][ T9087] genl_family_rcv_msg_doit+0x215/0x300 [ 1211.459330][ T9087] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1211.459365][ T9087] ? bpf_lsm_capable+0x9/0x20 [ 1211.459381][ T9087] ? security_capable+0x7e/0x2e0 [ 1211.459406][ T9087] genl_rcv_msg+0x60e/0x790 [ 1211.459433][ T9087] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1211.459451][ T9087] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1211.459471][ T9087] ? __pfx_nl80211_register_beacons+0x10/0x10 [ 1211.459490][ T9087] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1211.459514][ T9087] ? __asan_memcpy+0x40/0x70 [ 1211.459531][ T9087] ? __pfx_ref_tracker_free+0x10/0x10 [ 1211.459558][ T9087] netlink_rcv_skb+0x208/0x470 [ 1211.459581][ T9087] ? __lock_acquire+0xab9/0xd20 [ 1211.459604][ T9087] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1211.459626][ T9087] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1211.459671][ T9087] ? down_read+0x1ad/0x2e0 [ 1211.459695][ T9087] genl_rcv+0x28/0x40 [ 1211.459712][ T9087] netlink_unicast+0x82f/0x9e0 [ 1211.459743][ T9087] ? __pfx_netlink_unicast+0x10/0x10 [ 1211.459768][ T9087] ? netlink_sendmsg+0x642/0xb30 [ 1211.459790][ T9087] ? skb_put+0x11b/0x210 [ 1211.459818][ T9087] netlink_sendmsg+0x805/0xb30 [ 1211.459852][ T9087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1211.459881][ T9087] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1211.459903][ T9087] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1211.459924][ T9087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1211.459948][ T9087] __sock_sendmsg+0x21c/0x270 [ 1211.459972][ T9087] ____sys_sendmsg+0x505/0x830 [ 1211.460004][ T9087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1211.460032][ T9087] ? import_iovec+0x74/0xa0 [ 1211.460054][ T9087] ___sys_sendmsg+0x21f/0x2a0 [ 1211.460069][ T9087] ? __pfx____sys_sendmsg+0x10/0x10 [ 1211.460111][ T9087] ? __fget_files+0x2a/0x420 [ 1211.460127][ T9087] ? __fget_files+0x3a0/0x420 [ 1211.460152][ T9087] __x64_sys_sendmsg+0x19b/0x260 [ 1211.460168][ T9087] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1211.460189][ T9087] ? __pfx_ksys_write+0x10/0x10 [ 1211.460207][ T9087] ? do_syscall_64+0xbe/0xfa0 [ 1211.460224][ T9087] do_syscall_64+0xfa/0xfa0 [ 1211.460236][ T9087] ? lockdep_hardirqs_on+0x9c/0x150 [ 1211.460249][ T9087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.460263][ T9087] ? clear_bhb_loop+0x60/0xb0 [ 1211.460280][ T9087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.460293][ T9087] RIP: 0033:0x7f3370f8efc9 [ 1211.460307][ T9087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1211.460319][ T9087] RSP: 002b:00007f3371efd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1211.460335][ T9087] RAX: ffffffffffffffda RBX: 00007f33711e5fa0 RCX: 00007f3370f8efc9 [ 1211.460346][ T9087] RDX: 0000000000000040 RSI: 0000200000003900 RDI: 0000000000000003 [ 1211.460355][ T9087] RBP: 00007f3371efd090 R08: 0000000000000000 R09: 0000000000000000 [ 1211.460364][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.460372][ T9087] R13: 00007f33711e6038 R14: 00007f33711e5fa0 R15: 00007ffc48fc9478 [ 1211.460397][ T9087] [ 1211.464792][ T9066] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.663453][ T9093] netlink: 'syz.2.10477': attribute type 11 has an invalid length. [ 1211.716462][ T9096] netlink: 'syz.2.10477': attribute type 1 has an invalid length. [ 1211.891449][ T9096] netlink: 244 bytes leftover after parsing attributes in process `syz.2.10477'. [ 1211.957453][ T9066] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.067333][ T9066] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.125421][ T9104] wg1 speed is unknown, defaulting to 1000 [ 1212.289975][T30323] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.308398][T30323] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.359961][T30323] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.390095][T30323] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.485016][ T9125] netlink: 'syz.1.10486': attribute type 1 has an invalid length. [ 1212.506202][ T9129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10486'. [ 1212.663538][ T9128] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 1212.750330][ T9137] bond3: option all_slaves_active: invalid value (9) [ 1212.768015][ T9137] bond3 (unregistering): Released all slaves [ 1212.817265][ T9141] No such timeout policy "syz1" [ 1213.228339][ T9147] netlink: 'syz.4.10491': attribute type 11 has an invalid length. [ 1213.267631][ T9148] netlink: 'syz.4.10491': attribute type 11 has an invalid length. [ 1213.361834][ T9150] 8021q: VLANs not supported on vxcan1 [ 1213.398724][ T9154] tc_dump_action: action bad kind [ 1213.438718][ T9157] netlink: 'syz.4.10495': attribute type 4 has an invalid length. [ 1213.469122][ T9157] vlan2: entered allmulticast mode [ 1213.474284][ T9157] bridge_slave_0: entered allmulticast mode [ 1213.544911][ T9161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10497'. [ 1213.780528][ T9168] syzkaller0: entered promiscuous mode [ 1213.786523][ T9168] syzkaller0: entered allmulticast mode [ 1215.317925][ T9193] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10507'. [ 1215.328387][ T9193] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10507'. [ 1216.022414][ T9170] wg1 speed is unknown, defaulting to 1000 [ 1216.022444][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10505'. [ 1216.037737][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10505'. [ 1217.050160][ T9244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10520'. [ 1217.059625][ T9244] netlink: 'syz.2.10520': attribute type 7 has an invalid length. [ 1217.070440][ T9244] netlink: 'syz.2.10520': attribute type 8 has an invalid length. [ 1217.079223][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10520'. [ 1217.236808][ T9253] tipc: Enabling of bearer rejected, failed to enable media [ 1217.308663][ T9260] FAULT_INJECTION: forcing a failure. [ 1217.308663][ T9260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1217.321923][ T9260] CPU: 1 UID: 0 PID: 9260 Comm: syz.0.10526 Not tainted syzkaller #0 PREEMPT(full) [ 1217.321946][ T9260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1217.321957][ T9260] Call Trace: [ 1217.321965][ T9260] [ 1217.321972][ T9260] dump_stack_lvl+0x189/0x250 [ 1217.321996][ T9260] ? __pfx____ratelimit+0x10/0x10 [ 1217.322020][ T9260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1217.322039][ T9260] ? __pfx__printk+0x10/0x10 [ 1217.322062][ T9260] ? __might_fault+0xb0/0x130 [ 1217.322092][ T9260] should_fail_ex+0x414/0x560 [ 1217.322123][ T9260] _copy_from_user+0x2d/0xb0 [ 1217.322147][ T9260] ___sys_recvmsg+0x12e/0x510 [ 1217.322172][ T9260] ? __pfx____sys_recvmsg+0x10/0x10 [ 1217.322219][ T9260] ? __might_fault+0xb0/0x130 [ 1217.322241][ T9260] do_recvmmsg+0x307/0x770 [ 1217.322263][ T9260] ? __pfx_do_recvmmsg+0x10/0x10 [ 1217.322291][ T9260] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1217.322331][ T9260] __x64_sys_recvmmsg+0x190/0x240 [ 1217.322352][ T9260] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1217.322375][ T9260] ? do_syscall_64+0xbe/0xfa0 [ 1217.322397][ T9260] do_syscall_64+0xfa/0xfa0 [ 1217.322413][ T9260] ? lockdep_hardirqs_on+0x9c/0x150 [ 1217.322430][ T9260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.322448][ T9260] ? clear_bhb_loop+0x60/0xb0 [ 1217.322470][ T9260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.322488][ T9260] RIP: 0033:0x7f35f938efc9 [ 1217.322506][ T9260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1217.322522][ T9260] RSP: 002b:00007f35fa155038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1217.322543][ T9260] RAX: ffffffffffffffda RBX: 00007f35f95e6090 RCX: 00007f35f938efc9 [ 1217.322554][ T9260] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000006 [ 1217.322565][ T9260] RBP: 00007f35fa155090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.322576][ T9260] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 1217.322587][ T9260] R13: 00007f35f95e6128 R14: 00007f35f95e6090 R15: 00007ffe5b02ee68 [ 1217.322618][ T9260] [ 1217.639190][ T9266] No such timeout policy "syz1" [ 1217.729094][ T9268] netlink: 'syz.4.10531': attribute type 1 has an invalid length. [ 1217.869334][ T9271] bond2: (slave bridge0): making interface the new active one [ 1217.879014][ T9271] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 1217.910755][ T9273] wg1 speed is unknown, defaulting to 1000 [ 1218.148269][ T9292] pim6reg1: entered promiscuous mode [ 1218.153606][ T9292] pim6reg1: entered allmulticast mode [ 1218.201155][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10540'. [ 1218.214863][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10540'. [ 1218.225677][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10540'. [ 1218.399836][ T9302] wg1 speed is unknown, defaulting to 1000 [ 1218.439616][ T9306] tipc: Enabled bearer , priority 0 [ 1218.488339][ T9306] wg1 speed is unknown, defaulting to 1000 [ 1218.605780][ T9314] netlink: 'syz.4.10547': attribute type 12 has an invalid length. [ 1218.748785][ T9305] tipc: Disabling bearer [ 1218.792869][ T9320] wg1 speed is unknown, defaulting to 1000 [ 1219.256381][ T9334] netlink: 'syz.0.10554': attribute type 5 has an invalid length. [ 1219.277944][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10554'. [ 1219.333022][ T9339] FAULT_INJECTION: forcing a failure. [ 1219.333022][ T9339] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.342809][ T9337] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 1219.347570][ T9339] CPU: 1 UID: 0 PID: 9339 Comm: syz.2.10556 Not tainted syzkaller #0 PREEMPT(full) [ 1219.347595][ T9339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1219.347606][ T9339] Call Trace: [ 1219.347615][ T9339] [ 1219.347623][ T9339] dump_stack_lvl+0x189/0x250 [ 1219.347647][ T9339] ? __pfx____ratelimit+0x10/0x10 [ 1219.347673][ T9339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1219.347691][ T9339] ? __pfx__printk+0x10/0x10 [ 1219.347715][ T9339] ? __pfx___might_resched+0x10/0x10 [ 1219.347738][ T9339] ? fs_reclaim_acquire+0x7d/0x100 [ 1219.347765][ T9339] should_fail_ex+0x414/0x560 [ 1219.347795][ T9339] should_failslab+0xa8/0x100 [ 1219.347819][ T9339] __kvmalloc_node_noprof+0x158/0x910 [ 1219.347841][ T9339] ? xt_alloc_table_info+0x40/0xb0 [ 1219.347869][ T9339] xt_alloc_table_info+0x40/0xb0 [ 1219.347887][ T9339] do_ip6t_set_ctl+0x88a/0xce0 [ 1219.347911][ T9339] ? rcu_is_watching+0x15/0xb0 [ 1219.347936][ T9339] ? trace_contention_end+0x39/0x120 [ 1219.347960][ T9339] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1219.348000][ T9339] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1219.348028][ T9339] ? __pfx_aa_sk_perm+0x10/0x10 [ 1219.348052][ T9339] nf_setsockopt+0x26f/0x290 [ 1219.348072][ T9339] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1219.348097][ T9339] do_sock_setsockopt+0x17c/0x1b0 [ 1219.348126][ T9339] __x64_sys_setsockopt+0x13f/0x1b0 [ 1219.348156][ T9339] do_syscall_64+0xfa/0xfa0 [ 1219.348172][ T9339] ? lockdep_hardirqs_on+0x9c/0x150 [ 1219.348188][ T9339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.348206][ T9339] ? clear_bhb_loop+0x60/0xb0 [ 1219.348228][ T9339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.348252][ T9339] RIP: 0033:0x7ff64958efc9 [ 1219.348268][ T9339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1219.348283][ T9339] RSP: 002b:00007ff64a4a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1219.348302][ T9339] RAX: ffffffffffffffda RBX: 00007ff6497e5fa0 RCX: 00007ff64958efc9 [ 1219.348316][ T9339] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 1219.348327][ T9339] RBP: 00007ff64a4a4090 R08: 00000000000004e8 R09: 0000000000000000 [ 1219.348338][ T9339] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 1219.348350][ T9339] R13: 00007ff6497e6038 R14: 00007ff6497e5fa0 R15: 00007fff15e04348 [ 1219.348381][ T9339] [ 1219.665066][ T9350] net_ratelimit: 3 callbacks suppressed [ 1219.665087][ T9350] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1219.700982][ T9353] FAULT_INJECTION: forcing a failure. [ 1219.700982][ T9353] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.719743][ T9353] CPU: 1 UID: 0 PID: 9353 Comm: syz.1.10560 Not tainted syzkaller #0 PREEMPT(full) [ 1219.719768][ T9353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1219.719779][ T9353] Call Trace: [ 1219.719787][ T9353] [ 1219.719795][ T9353] dump_stack_lvl+0x189/0x250 [ 1219.719820][ T9353] ? __pfx____ratelimit+0x10/0x10 [ 1219.719843][ T9353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1219.719862][ T9353] ? __pfx__printk+0x10/0x10 [ 1219.719884][ T9353] ? __lock_acquire+0xab9/0xd20 [ 1219.719909][ T9353] should_fail_ex+0x414/0x560 [ 1219.719939][ T9353] should_failslab+0xa8/0x100 [ 1219.719962][ T9353] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1219.719982][ T9353] ? skb_clone+0x212/0x3a0 [ 1219.720004][ T9353] skb_clone+0x212/0x3a0 [ 1219.720025][ T9353] __netlink_deliver_tap+0x404/0x850 [ 1219.720061][ T9353] ? netlink_deliver_tap+0x2e/0x1b0 [ 1219.720085][ T9353] netlink_deliver_tap+0x19c/0x1b0 [ 1219.720120][ T9353] netlink_unicast+0x7fa/0x9e0 [ 1219.720148][ T9353] ? __pfx_netlink_unicast+0x10/0x10 [ 1219.720171][ T9353] ? netlink_sendmsg+0x642/0xb30 [ 1219.720189][ T9353] ? skb_put+0x11b/0x210 [ 1219.720220][ T9353] netlink_sendmsg+0x805/0xb30 [ 1219.720253][ T9353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1219.720278][ T9353] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1219.720299][ T9353] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1219.720321][ T9353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1219.720345][ T9353] __sock_sendmsg+0x21c/0x270 [ 1219.720368][ T9353] ____sys_sendmsg+0x505/0x830 [ 1219.720398][ T9353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1219.720433][ T9353] ? import_iovec+0x74/0xa0 [ 1219.720459][ T9353] ___sys_sendmsg+0x21f/0x2a0 [ 1219.720477][ T9353] ? __pfx____sys_sendmsg+0x10/0x10 [ 1219.720527][ T9353] ? __fget_files+0x2a/0x420 [ 1219.720546][ T9353] ? __fget_files+0x3a0/0x420 [ 1219.720577][ T9353] __x64_sys_sendmsg+0x19b/0x260 [ 1219.720598][ T9353] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1219.720625][ T9353] ? __pfx_ksys_write+0x10/0x10 [ 1219.720649][ T9353] ? do_syscall_64+0xbe/0xfa0 [ 1219.720670][ T9353] do_syscall_64+0xfa/0xfa0 [ 1219.720684][ T9353] ? lockdep_hardirqs_on+0x9c/0x150 [ 1219.720701][ T9353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.720718][ T9353] ? clear_bhb_loop+0x60/0xb0 [ 1219.720739][ T9353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.720756][ T9353] RIP: 0033:0x7f206c78efc9 [ 1219.720774][ T9353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1219.720788][ T9353] RSP: 002b:00007f206d5d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1219.720805][ T9353] RAX: ffffffffffffffda RBX: 00007f206c9e5fa0 RCX: 00007f206c78efc9 [ 1219.720819][ T9353] RDX: 0000000000048000 RSI: 0000200000003000 RDI: 0000000000000003 [ 1219.720829][ T9353] RBP: 00007f206d5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.720841][ T9353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.720852][ T9353] R13: 00007f206c9e6038 R14: 00007f206c9e5fa0 R15: 00007ffce3f7adf8 [ 1219.720881][ T9353] [ 1220.323630][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10564'. [ 1220.435528][ T9365] wg1 speed is unknown, defaulting to 1000 [ 1220.552522][ T9377] netlink: 'syz.3.10568': attribute type 10 has an invalid length. [ 1220.673912][ T9382] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10569'. [ 1220.686221][ T9382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10569'. [ 1220.806826][ T9373] netlink: 'syz.1.10566': attribute type 1 has an invalid length. [ 1220.814801][ T9373] netlink: 'syz.1.10566': attribute type 4 has an invalid length. [ 1220.822708][ T9373] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.10566'. [ 1220.834413][ T9373] netlink: 'syz.1.10566': attribute type 1 has an invalid length. [ 1220.845850][ T9373] netlink: 'syz.1.10566': attribute type 4 has an invalid length. [ 1220.874085][ T9373] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.10566'. [ 1221.114882][ T9397] netlink: 220 bytes leftover after parsing attributes in process `syz.3.10575'. [ 1221.221000][ T9400] bridge1: entered promiscuous mode [ 1221.227474][ T9400] bridge1: entered allmulticast mode [ 1221.403909][ T9416] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1221.423430][ T9412] nbd: error processing sock list [ 1221.435809][ T9412] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1221.472134][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10584'. [ 1221.517782][ T9420] vlan0: entered promiscuous mode [ 1221.545352][ T9420] 1ªX¹¦D: entered promiscuous mode [ 1221.591764][ T9424] ip6gre1: entered allmulticast mode [ 1221.747641][ T9434] No such timeout policy "syz1" [ 1221.862133][ T9438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10589'. [ 1222.601899][ T9464] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1222.931982][ T9481] No such timeout policy "syz1" [ 1222.950705][ T9477] wg1 speed is unknown, defaulting to 1000 [ 1223.059589][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10600'. [ 1223.477958][ T9489] vlan0: entered promiscuous mode [ 1223.483041][ T9489] batadv0: entered promiscuous mode [ 1223.861176][ T9503] xt_policy: too many policy elements [ 1224.189943][ T9506] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1224.325141][ T9513] __nla_validate_parse: 6 callbacks suppressed [ 1224.325161][ T9513] netlink: 168 bytes leftover after parsing attributes in process `syz.2.10608'. [ 1224.583305][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10613'. [ 1224.608244][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10612'. [ 1224.759389][ T9538] No such timeout policy "syz1" [ 1225.330802][ T9553] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1225.424218][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10621'. [ 1225.433520][ T9561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10621'. [ 1225.473863][ T9556] 1ªX¹¦D: left allmulticast mode [ 1225.491152][ T9556] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1225.671053][ T9573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10625'. [ 1225.680789][ T9573] validate_nla: 3 callbacks suppressed [ 1225.680807][ T9573] netlink: 'syz.3.10625': attribute type 7 has an invalid length. [ 1225.694446][ T9573] netlink: 'syz.3.10625': attribute type 8 has an invalid length. [ 1225.711037][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10625'. [ 1225.722214][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10623'. [ 1226.663577][ T9612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1226.739248][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10637'. [ 1226.743570][ T9617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10635'. [ 1227.034063][ T9629] wg1 speed is unknown, defaulting to 1000 [ 1227.937229][ T9659] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1228.160705][ T9666] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1238.805918][ T98] block nbd1: Possible stuck request ffff888025655080: control (read@0,4096B). Runtime 1020 seconds [ 1268.878818][ T98] block nbd1: Possible stuck request ffff888025655080: control (read@0,4096B). Runtime 1050 seconds [ 1283.771282][ T9691] __nla_validate_parse: 6 callbacks suppressed [ 1283.771303][ T9691] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10662'. [ 1283.930976][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10667'. [ 1284.129968][ T9714] wg1 speed is unknown, defaulting to 1000 [ 1284.517807][ T9726] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1284.555150][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10674'. [ 1284.641167][ T9737] FAULT_INJECTION: forcing a failure. [ 1284.641167][ T9737] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.660301][ T9737] CPU: 0 UID: 0 PID: 9737 Comm: syz.3.10675 Not tainted syzkaller #0 PREEMPT(full) [ 1284.660337][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1284.660348][ T9737] Call Trace: [ 1284.660357][ T9737] [ 1284.660366][ T9737] dump_stack_lvl+0x189/0x250 [ 1284.660392][ T9737] ? __pfx____ratelimit+0x10/0x10 [ 1284.660418][ T9737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1284.660437][ T9737] ? __pfx__printk+0x10/0x10 [ 1284.660462][ T9737] ? __pfx___might_resched+0x10/0x10 [ 1284.660490][ T9737] should_fail_ex+0x414/0x560 [ 1284.660522][ T9737] should_failslab+0xa8/0x100 [ 1284.660545][ T9737] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1284.660566][ T9737] ? __alloc_skb+0x112/0x2d0 [ 1284.660595][ T9737] __alloc_skb+0x112/0x2d0 [ 1284.660623][ T9737] netlink_ack+0x146/0xa50 [ 1284.660645][ T9737] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1284.660681][ T9737] netlink_rcv_skb+0x28c/0x470 [ 1284.660704][ T9737] ? __lock_acquire+0xab9/0xd20 [ 1284.660726][ T9737] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1284.660747][ T9737] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1284.660791][ T9737] ? down_read+0x1ad/0x2e0 [ 1284.660814][ T9737] genl_rcv+0x28/0x40 [ 1284.660831][ T9737] netlink_unicast+0x82f/0x9e0 [ 1284.660863][ T9737] ? __pfx_netlink_unicast+0x10/0x10 [ 1284.660885][ T9737] ? netlink_sendmsg+0x642/0xb30 [ 1284.660907][ T9737] ? skb_put+0x11b/0x210 [ 1284.660934][ T9737] netlink_sendmsg+0x805/0xb30 [ 1284.660968][ T9737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1284.660997][ T9737] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1284.661019][ T9737] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1284.661040][ T9737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1284.661066][ T9737] __sock_sendmsg+0x21c/0x270 [ 1284.661090][ T9737] ____sys_sendmsg+0x505/0x830 [ 1284.661122][ T9737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1284.661159][ T9737] ? import_iovec+0x74/0xa0 [ 1284.661185][ T9737] ___sys_sendmsg+0x21f/0x2a0 [ 1284.661206][ T9737] ? __pfx____sys_sendmsg+0x10/0x10 [ 1284.661265][ T9737] ? __fget_files+0x2a/0x420 [ 1284.661286][ T9737] ? __fget_files+0x3a0/0x420 [ 1284.661318][ T9737] __x64_sys_sendmsg+0x19b/0x260 [ 1284.661346][ T9737] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1284.661382][ T9737] ? do_syscall_64+0xbe/0xfa0 [ 1284.661404][ T9737] do_syscall_64+0xfa/0xfa0 [ 1284.661423][ T9737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.661441][ T9737] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1284.661458][ T9737] ? clear_bhb_loop+0x60/0xb0 [ 1284.661480][ T9737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.661499][ T9737] RIP: 0033:0x7fd7d8f8efc9 [ 1284.661518][ T9737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1284.661533][ T9737] RSP: 002b:00007fd7d9eeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1284.661554][ T9737] RAX: ffffffffffffffda RBX: 00007fd7d91e5fa0 RCX: 00007fd7d8f8efc9 [ 1284.661568][ T9737] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1284.661580][ T9737] RBP: 00007fd7d9eeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1284.661592][ T9737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1284.661604][ T9737] R13: 00007fd7d91e6038 R14: 00007fd7d91e5fa0 R15: 00007ffea93a4108 [ 1284.661637][ T9737] [ 1285.139144][ T9744] wg1 speed is unknown, defaulting to 1000 [ 1285.170493][ T9742] FAULT_INJECTION: forcing a failure. [ 1285.170493][ T9742] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1285.189748][ T9742] CPU: 1 UID: 0 PID: 9742 Comm: syz.4.10676 Not tainted syzkaller #0 PREEMPT(full) [ 1285.189775][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1285.189788][ T9742] Call Trace: [ 1285.189796][ T9742] [ 1285.189804][ T9742] dump_stack_lvl+0x189/0x250 [ 1285.189829][ T9742] ? __pfx____ratelimit+0x10/0x10 [ 1285.189854][ T9742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1285.189874][ T9742] ? __pfx__printk+0x10/0x10 [ 1285.189893][ T9742] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1285.189919][ T9742] ? lockdep_hardirqs_on+0x9c/0x150 [ 1285.189938][ T9742] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1285.189967][ T9742] should_fail_ex+0x414/0x560 [ 1285.190000][ T9742] get_futex_key+0x1a8/0x1660 [ 1285.190020][ T9742] ? look_up_lock_class+0x74/0x170 [ 1285.190045][ T9742] ? __pfx_get_futex_key+0x10/0x10 [ 1285.190060][ T9742] ? __lock_acquire+0xab9/0xd20 [ 1285.190093][ T9742] futex_wake+0xf8/0x560 [ 1285.190113][ T9742] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1285.190144][ T9742] ? __pfx_futex_wake+0x10/0x10 [ 1285.190167][ T9742] ? __lock_acquire+0xab9/0xd20 [ 1285.190199][ T9742] do_futex+0x395/0x420 [ 1285.190224][ T9742] ? __pfx_do_futex+0x10/0x10 [ 1285.190246][ T9742] ? __might_fault+0xb0/0x130 [ 1285.190268][ T9742] mm_release+0x188/0x390 [ 1285.190289][ T9742] ? __pfx_mm_release+0x10/0x10 [ 1285.190312][ T9742] ? lockdep_hardirqs_on+0x9c/0x150 [ 1285.190341][ T9742] exit_mm+0xa8/0x2c0 [ 1285.190361][ T9742] ? __pfx_exit_mm+0x10/0x10 [ 1285.190382][ T9742] ? rcu_is_watching+0x15/0xb0 [ 1285.190407][ T9742] do_exit+0x648/0x2300 [ 1285.190432][ T9742] ? cgroup_freezing+0x20/0x350 [ 1285.190453][ T9742] ? __pfx_do_exit+0x10/0x10 [ 1285.190474][ T9742] ? cgroup_freezing+0x20/0x350 [ 1285.190496][ T9742] ? cgroup_freezing+0x20/0x350 [ 1285.190525][ T9742] do_group_exit+0x21c/0x2d0 [ 1285.190551][ T9742] ? lockdep_hardirqs_on+0x9c/0x150 [ 1285.190571][ T9742] get_signal+0x1285/0x1340 [ 1285.190615][ T9742] arch_do_signal_or_restart+0xa0/0x790 [ 1285.190641][ T9742] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1285.190664][ T9742] ? __se_sys_pselect6+0x291/0x300 [ 1285.190697][ T9742] ? exit_to_user_mode_loop+0x40/0x130 [ 1285.190723][ T9742] exit_to_user_mode_loop+0x72/0x130 [ 1285.190746][ T9742] do_syscall_64+0x2bd/0xfa0 [ 1285.190762][ T9742] ? lockdep_hardirqs_on+0x9c/0x150 [ 1285.190778][ T9742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.190795][ T9742] ? clear_bhb_loop+0x60/0xb0 [ 1285.190816][ T9742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.190833][ T9742] RIP: 0033:0x7f3370f8efc9 [ 1285.190849][ T9742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1285.190863][ T9742] RSP: 002b:00007f3371edc038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1285.190883][ T9742] RAX: fffffffffffffdfe RBX: 00007f33711e6090 RCX: 00007f3370f8efc9 [ 1285.190897][ T9742] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1285.190910][ T9742] RBP: 00007f3371edc090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.190922][ T9742] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1285.190932][ T9742] R13: 00007f33711e6128 R14: 00007f33711e6090 R15: 00007ffc48fc9478 [ 1285.190962][ T9742] [ 1285.601299][ T9757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10681'. [ 1285.784339][ T9761] netlink: 'syz.0.10680': attribute type 10 has an invalid length. [ 1285.964368][ T9744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10678'. [ 1286.060003][ T9756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10682'. [ 1286.423976][ T9781] veth0: entered promiscuous mode [ 1286.473407][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10685'. [ 1286.590981][ T9788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10687'. [ 1286.642647][ T9790] FAULT_INJECTION: forcing a failure. [ 1286.642647][ T9790] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.685378][ T9790] CPU: 0 UID: 0 PID: 9790 Comm: syz.1.10688 Not tainted syzkaller #0 PREEMPT(full) [ 1286.685404][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1286.685416][ T9790] Call Trace: [ 1286.685423][ T9790] [ 1286.685432][ T9790] dump_stack_lvl+0x189/0x250 [ 1286.685457][ T9790] ? __pfx____ratelimit+0x10/0x10 [ 1286.685483][ T9790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1286.685502][ T9790] ? __pfx__printk+0x10/0x10 [ 1286.685526][ T9790] ? __pfx___might_resched+0x10/0x10 [ 1286.685550][ T9790] ? fs_reclaim_acquire+0x7d/0x100 [ 1286.685575][ T9790] should_fail_ex+0x414/0x560 [ 1286.685606][ T9790] should_failslab+0xa8/0x100 [ 1286.685629][ T9790] __kvmalloc_node_noprof+0x158/0x910 [ 1286.685652][ T9790] ? xt_alloc_table_info+0x40/0xb0 [ 1286.685679][ T9790] xt_alloc_table_info+0x40/0xb0 [ 1286.685699][ T9790] do_ipt_set_ctl+0x881/0xcd0 [ 1286.685722][ T9790] ? rcu_is_watching+0x15/0xb0 [ 1286.685747][ T9790] ? trace_contention_end+0x39/0x120 [ 1286.685773][ T9790] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1286.685814][ T9790] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1286.685843][ T9790] ? __pfx_aa_sk_perm+0x10/0x10 [ 1286.685868][ T9790] nf_setsockopt+0x26f/0x290 [ 1286.685890][ T9790] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1286.685915][ T9790] do_sock_setsockopt+0x17c/0x1b0 [ 1286.685945][ T9790] __x64_sys_setsockopt+0x13f/0x1b0 [ 1286.685975][ T9790] do_syscall_64+0xfa/0xfa0 [ 1286.685991][ T9790] ? lockdep_hardirqs_on+0x9c/0x150 [ 1286.686008][ T9790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.686026][ T9790] ? clear_bhb_loop+0x60/0xb0 [ 1286.686080][ T9790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.686097][ T9790] RIP: 0033:0x7f206c78efc9 [ 1286.686114][ T9790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1286.686129][ T9790] RSP: 002b:00007f206d5d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1286.686150][ T9790] RAX: ffffffffffffffda RBX: 00007f206c9e5fa0 RCX: 00007f206c78efc9 [ 1286.686164][ T9790] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1286.686181][ T9790] RBP: 00007f206d5d7090 R08: 00000000000002c0 R09: 0000000000000000 [ 1286.686193][ T9790] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.686205][ T9790] R13: 00007f206c9e6038 R14: 00007f206c9e5fa0 R15: 00007ffce3f7adf8 [ 1286.686235][ T9790] [ 1287.345129][ T9822] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1287.352769][ T9819] dvmrp0: entered allmulticast mode [ 1287.360421][ T9826] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10697'. [ 1287.401798][ T9827] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10694'. [ 1287.728311][ T9840] wg1 speed is unknown, defaulting to 1000 [ 1287.832678][ T9849] netlink: 'syz.2.10703': attribute type 1 has an invalid length. [ 1288.214895][ T9865] netlink: 'syz.1.10707': attribute type 1 has an invalid length. [ 1288.366736][ T9876] netlink: 'syz.1.10710': attribute type 23 has an invalid length. [ 1288.890280][ T9901] netlink: 'syz.3.10718': attribute type 10 has an invalid length. [ 1289.149309][ T9917] __nla_validate_parse: 4 callbacks suppressed [ 1289.149327][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10722'. [ 1289.270488][ T9917] wg1 speed is unknown, defaulting to 1000 [ 1289.372592][ T52] Bluetooth: hci0: command tx timeout [ 1289.374039][ T9920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10721'. [ 1289.430075][ T9922] FAULT_INJECTION: forcing a failure. [ 1289.430075][ T9922] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.443197][ T9922] CPU: 1 UID: 0 PID: 9922 Comm: syz.3.10723 Not tainted syzkaller #0 PREEMPT(full) [ 1289.443223][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1289.443234][ T9922] Call Trace: [ 1289.443243][ T9922] [ 1289.443251][ T9922] dump_stack_lvl+0x189/0x250 [ 1289.443277][ T9922] ? __pfx____ratelimit+0x10/0x10 [ 1289.443303][ T9922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1289.443320][ T9922] ? __pfx__printk+0x10/0x10 [ 1289.443344][ T9922] ? __pfx___might_resched+0x10/0x10 [ 1289.443366][ T9922] ? fs_reclaim_acquire+0x7d/0x100 [ 1289.443391][ T9922] should_fail_ex+0x414/0x560 [ 1289.443420][ T9922] should_failslab+0xa8/0x100 [ 1289.443444][ T9922] __kmalloc_noprof+0xcb/0x7f0 [ 1289.443462][ T9922] ? bpf_test_init+0x9f/0x150 [ 1289.443492][ T9922] bpf_test_init+0x9f/0x150 [ 1289.443518][ T9922] bpf_prog_test_run_skb+0x206/0x1550 [ 1289.443542][ T9922] ? __fget_files+0x2a/0x420 [ 1289.443570][ T9922] ? __fget_files+0x2a/0x420 [ 1289.443596][ T9922] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1289.443621][ T9922] bpf_prog_test_run+0x2c7/0x340 [ 1289.443648][ T9922] __sys_bpf+0x562/0x860 [ 1289.443671][ T9922] ? __pfx___sys_bpf+0x10/0x10 [ 1289.443709][ T9922] ? ksys_write+0x22a/0x250 [ 1289.443731][ T9922] ? __pfx_ksys_write+0x10/0x10 [ 1289.443756][ T9922] __x64_sys_bpf+0x7c/0x90 [ 1289.443777][ T9922] do_syscall_64+0xfa/0xfa0 [ 1289.443794][ T9922] ? lockdep_hardirqs_on+0x9c/0x150 [ 1289.443811][ T9922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.443829][ T9922] ? clear_bhb_loop+0x60/0xb0 [ 1289.443852][ T9922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.443869][ T9922] RIP: 0033:0x7fd7d8f8efc9 [ 1289.443886][ T9922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1289.443902][ T9922] RSP: 002b:00007fd7d9eeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1289.443922][ T9922] RAX: ffffffffffffffda RBX: 00007fd7d91e5fa0 RCX: 00007fd7d8f8efc9 [ 1289.443936][ T9922] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 1289.443949][ T9922] RBP: 00007fd7d9eeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1289.443961][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.443973][ T9922] R13: 00007fd7d91e6038 R14: 00007fd7d91e5fa0 R15: 00007ffea93a4108 [ 1289.444006][ T9922] [ 1290.034425][ T9932] wg1 speed is unknown, defaulting to 1000 [ 1291.173274][ T9984] Cannot find set identified by id 65534 to match [ 1291.226610][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10740'. [ 1291.240055][ T9985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10740'. [ 1291.291426][ T9987] wg1 speed is unknown, defaulting to 1000 [ 1291.309240][ T9985] netlink: 'syz.1.10740': attribute type 1 has an invalid length. [ 1291.317522][ T9985] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10740'. [ 1291.491152][ T9995] FAULT_INJECTION: forcing a failure. [ 1291.491152][ T9995] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.515124][ T9995] CPU: 1 UID: 0 PID: 9995 Comm: syz.1.10745 Not tainted syzkaller #0 PREEMPT(full) [ 1291.515151][ T9995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1291.515162][ T9995] Call Trace: [ 1291.515171][ T9995] [ 1291.515180][ T9995] dump_stack_lvl+0x189/0x250 [ 1291.515207][ T9995] ? __pfx____ratelimit+0x10/0x10 [ 1291.515231][ T9995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1291.515251][ T9995] ? __pfx__printk+0x10/0x10 [ 1291.515276][ T9995] ? __pfx___might_resched+0x10/0x10 [ 1291.515297][ T9995] ? fs_reclaim_acquire+0x7d/0x100 [ 1291.515321][ T9995] should_fail_ex+0x414/0x560 [ 1291.515350][ T9995] should_failslab+0xa8/0x100 [ 1291.515373][ T9995] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1291.515393][ T9995] ? nft_trans_flowtable_add+0x59/0x460 [ 1291.515420][ T9995] nft_trans_flowtable_add+0x59/0x460 [ 1291.515442][ T9995] ? nf_flow_table_init+0x280/0x2a0 [ 1291.515469][ T9995] nf_tables_newflowtable+0x1b05/0x2390 [ 1291.515506][ T9995] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 1291.515540][ T9995] ? __nla_parse+0x40/0x60 [ 1291.515562][ T9995] nfnetlink_rcv+0x11d9/0x2590 [ 1291.515613][ T9995] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1291.515648][ T9995] ? ref_tracker_free+0x63a/0x7d0 [ 1291.515691][ T9995] ? __netlink_deliver_tap+0x807/0x850 [ 1291.515714][ T9995] ? netlink_deliver_tap+0x2e/0x1b0 [ 1291.515756][ T9995] netlink_unicast+0x82f/0x9e0 [ 1291.515786][ T9995] ? __pfx_netlink_unicast+0x10/0x10 [ 1291.515810][ T9995] ? netlink_sendmsg+0x642/0xb30 [ 1291.515832][ T9995] ? skb_put+0x11b/0x210 [ 1291.515859][ T9995] netlink_sendmsg+0x805/0xb30 [ 1291.515892][ T9995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1291.515919][ T9995] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1291.515941][ T9995] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1291.515964][ T9995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1291.515988][ T9995] __sock_sendmsg+0x21c/0x270 [ 1291.516012][ T9995] ____sys_sendmsg+0x505/0x830 [ 1291.516042][ T9995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1291.516077][ T9995] ? import_iovec+0x74/0xa0 [ 1291.516120][ T9995] ___sys_sendmsg+0x21f/0x2a0 [ 1291.516139][ T9995] ? __pfx____sys_sendmsg+0x10/0x10 [ 1291.516190][ T9995] ? __fget_files+0x2a/0x420 [ 1291.516210][ T9995] ? __fget_files+0x3a0/0x420 [ 1291.516241][ T9995] __x64_sys_sendmsg+0x19b/0x260 [ 1291.516263][ T9995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1291.516290][ T9995] ? __pfx_ksys_write+0x10/0x10 [ 1291.516313][ T9995] ? do_syscall_64+0xbe/0xfa0 [ 1291.516333][ T9995] do_syscall_64+0xfa/0xfa0 [ 1291.516348][ T9995] ? lockdep_hardirqs_on+0x9c/0x150 [ 1291.516364][ T9995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.516382][ T9995] ? clear_bhb_loop+0x60/0xb0 [ 1291.516402][ T9995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.516419][ T9995] RIP: 0033:0x7f206c78efc9 [ 1291.516435][ T9995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1291.516449][ T9995] RSP: 002b:00007f206d5d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1291.516469][ T9995] RAX: ffffffffffffffda RBX: 00007f206c9e5fa0 RCX: 00007f206c78efc9 [ 1291.516483][ T9995] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 1291.516495][ T9995] RBP: 00007f206d5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.516506][ T9995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1291.516518][ T9995] R13: 00007f206c9e6038 R14: 00007f206c9e5fa0 R15: 00007ffce3f7adf8 [ 1291.516551][ T9995] [ 1292.061471][T10008] xt_hashlimit: size too large, truncated to 1048576 [ 1292.151008][T10011] netlink: 136 bytes leftover after parsing attributes in process `syz.1.10749'. [ 1292.518774][T10020] netlink: 'syz.2.10750': attribute type 1 has an invalid length. [ 1292.550910][ T9998] wg1 speed is unknown, defaulting to 1000 [ 1292.561154][T10020] netlink: 'syz.2.10750': attribute type 2 has an invalid length. [ 1292.640775][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10750'. [ 1292.874633][T10030] Cannot find set identified by id 65534 to match [ 1293.121930][T10041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10755'. [ 1293.516387][T10066] netlink: 'syz.4.10763': attribute type 10 has an invalid length. [ 1293.986236][T10083] netlink: 'syz.1.10771': attribute type 1 has an invalid length. [ 1294.095673][T10091] FAULT_INJECTION: forcing a failure. [ 1294.095673][T10091] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.118000][T10086] veth5: entered promiscuous mode [ 1294.125395][T10091] CPU: 1 UID: 0 PID: 10091 Comm: syz.4.10772 Not tainted syzkaller #0 PREEMPT(full) [ 1294.125423][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1294.125433][T10091] Call Trace: [ 1294.125441][T10091] [ 1294.125449][T10091] dump_stack_lvl+0x189/0x250 [ 1294.125474][T10091] ? __pfx____ratelimit+0x10/0x10 [ 1294.125522][T10091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1294.125541][T10091] ? __pfx__printk+0x10/0x10 [ 1294.125563][T10091] ? __pfx___might_resched+0x10/0x10 [ 1294.125587][T10091] ? fs_reclaim_acquire+0x7d/0x100 [ 1294.125612][T10091] should_fail_ex+0x414/0x560 [ 1294.125644][T10091] should_failslab+0xa8/0x100 [ 1294.125667][T10091] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1294.125687][T10091] ? __alloc_skb+0x112/0x2d0 [ 1294.125709][T10091] ? netlink_autobind+0xdb/0x300 [ 1294.125745][T10091] __alloc_skb+0x112/0x2d0 [ 1294.125768][T10091] netlink_sendmsg+0x5c6/0xb30 [ 1294.125800][T10091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1294.125825][T10091] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1294.125842][T10091] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1294.125862][T10091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1294.125884][T10091] __sock_sendmsg+0x21c/0x270 [ 1294.125906][T10091] ____sys_sendmsg+0x505/0x830 [ 1294.125935][T10091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1294.125966][T10091] ? import_iovec+0x74/0xa0 [ 1294.125990][T10091] ___sys_sendmsg+0x21f/0x2a0 [ 1294.126008][T10091] ? __pfx____sys_sendmsg+0x10/0x10 [ 1294.126062][T10091] ? __fget_files+0x2a/0x420 [ 1294.126081][T10091] ? __fget_files+0x3a0/0x420 [ 1294.126113][T10091] __x64_sys_sendmsg+0x19b/0x260 [ 1294.126133][T10091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1294.126160][T10091] ? __pfx_ksys_write+0x10/0x10 [ 1294.126184][T10091] ? do_syscall_64+0xbe/0xfa0 [ 1294.126205][T10091] do_syscall_64+0xfa/0xfa0 [ 1294.126221][T10091] ? lockdep_hardirqs_on+0x9c/0x150 [ 1294.126238][T10091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.126256][T10091] ? clear_bhb_loop+0x60/0xb0 [ 1294.126276][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.126293][T10091] RIP: 0033:0x7f3370f8efc9 [ 1294.126310][T10091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1294.126326][T10091] RSP: 002b:00007f3371efd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1294.126347][T10091] RAX: ffffffffffffffda RBX: 00007f33711e5fa0 RCX: 00007f3370f8efc9 [ 1294.126360][T10091] RDX: 0000000000008000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1294.126373][T10091] RBP: 00007f3371efd090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.126386][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1294.126397][T10091] R13: 00007f33711e6038 R14: 00007f33711e5fa0 R15: 00007ffc48fc9478 [ 1294.126428][T10091] [ 1294.411277][T10085] netlink: 'syz.2.10770': attribute type 22 has an invalid length. [ 1294.425372][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10770'. [ 1294.441108][T30340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.449227][T30340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.468290][T10085] netlink: 'syz.2.10770': attribute type 22 has an invalid length. [ 1294.494298][T30340] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1294.501873][T10073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10765'. [ 1294.514514][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10770'. [ 1294.559196][T30340] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1294.591393][T30340] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1294.599727][T30340] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1294.646782][T10100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10774'. [ 1294.670443][T10097] wg1 speed is unknown, defaulting to 1000 [ 1294.805578][T10101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1295.057752][T10117] FAULT_INJECTION: forcing a failure. [ 1295.057752][T10117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1295.080053][T10117] CPU: 0 UID: 0 PID: 10117 Comm: syz.4.10781 Not tainted syzkaller #0 PREEMPT(full) [ 1295.080081][T10117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1295.080093][T10117] Call Trace: [ 1295.080101][T10117] [ 1295.080110][T10117] dump_stack_lvl+0x189/0x250 [ 1295.080135][T10117] ? __pfx____ratelimit+0x10/0x10 [ 1295.080161][T10117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1295.080180][T10117] ? __pfx__printk+0x10/0x10 [ 1295.080200][T10117] ? __might_fault+0xb0/0x130 [ 1295.080230][T10117] should_fail_ex+0x414/0x560 [ 1295.080261][T10117] _copy_from_user+0x2d/0xb0 [ 1295.080285][T10117] ___sys_recvmsg+0x12e/0x510 [ 1295.080309][T10117] ? __pfx____sys_recvmsg+0x10/0x10 [ 1295.080356][T10117] ? __might_fault+0xb0/0x130 [ 1295.080378][T10117] do_recvmmsg+0x307/0x770 [ 1295.080403][T10117] ? __pfx_do_recvmmsg+0x10/0x10 [ 1295.080432][T10117] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1295.080467][T10117] __x64_sys_recvmmsg+0x190/0x240 [ 1295.080488][T10117] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1295.080509][T10117] ? do_syscall_64+0xbe/0xfa0 [ 1295.080526][T10117] do_syscall_64+0xfa/0xfa0 [ 1295.080540][T10117] ? lockdep_hardirqs_on+0x9c/0x150 [ 1295.080556][T10117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.080573][T10117] ? clear_bhb_loop+0x60/0xb0 [ 1295.080595][T10117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.080612][T10117] RIP: 0033:0x7f3370f8efc9 [ 1295.080628][T10117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1295.080642][T10117] RSP: 002b:00007f3371efd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1295.080662][T10117] RAX: ffffffffffffffda RBX: 00007f33711e5fa0 RCX: 00007f3370f8efc9 [ 1295.080675][T10117] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000006 [ 1295.080686][T10117] RBP: 00007f3371efd090 R08: 0000000000000000 R09: 0000000000000000 [ 1295.080696][T10117] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 1295.080706][T10117] R13: 00007f33711e6038 R14: 00007f33711e5fa0 R15: 00007ffc48fc9478 [ 1295.080738][T10117] [ 1295.731486][T10138] bridge5: entered allmulticast mode [ 1295.975565][T10150] wg1 speed is unknown, defaulting to 1000 [ 1295.986829][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10793'. [ 1295.999204][T10148] netlink: 'syz.0.10793': attribute type 5 has an invalid length. [ 1296.007187][T10148] netlink: 'syz.0.10793': attribute type 8 has an invalid length. [ 1296.015128][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10793'. [ 1296.045567][T10153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10793'. [ 1296.072923][T10148] geneve3: entered promiscuous mode [ 1296.081919][T10148] geneve3: entered allmulticast mode [ 1296.102757][T30339] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1296.112168][T30339] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1296.190984][T30339] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1296.251152][T30339] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1296.345598][T10159] xt_cgroup: invalid path, errno=-2 [ 1296.346525][T10161] FAULT_INJECTION: forcing a failure. [ 1296.346525][T10161] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.405446][T10161] CPU: 0 UID: 0 PID: 10161 Comm: syz.0.10795 Not tainted syzkaller #0 PREEMPT(full) [ 1296.405473][T10161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1296.405485][T10161] Call Trace: [ 1296.405494][T10161] [ 1296.405503][T10161] dump_stack_lvl+0x189/0x250 [ 1296.405528][T10161] ? __pfx____ratelimit+0x10/0x10 [ 1296.405555][T10161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1296.405574][T10161] ? __pfx__printk+0x10/0x10 [ 1296.405600][T10161] ? __pfx___might_resched+0x10/0x10 [ 1296.405631][T10161] should_fail_ex+0x414/0x560 [ 1296.405664][T10161] should_failslab+0xa8/0x100 [ 1296.405689][T10161] __kvmalloc_node_noprof+0x158/0x910 [ 1296.405717][T10161] ? nf_hook_entries_grow+0x281/0x720 [ 1296.405745][T10161] ? __pfx___mutex_lock+0x10/0x10 [ 1296.405769][T10161] nf_hook_entries_grow+0x281/0x720 [ 1296.405811][T10161] __nf_register_net_hook+0x2c9/0x930 [ 1296.405850][T10161] nf_register_net_hook+0xb2/0x190 [ 1296.405877][T10161] nf_register_net_hooks+0x44/0x1b0 [ 1296.405908][T10161] nf_defrag_ipv6_enable+0x87/0x120 [ 1296.405935][T10161] nf_ct_netns_do_get+0x1e7/0x5a0 [ 1296.405957][T10161] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 1296.406000][T10161] nft_connlimit_do_init+0x1de/0x2e0 [ 1296.406033][T10161] nft_set_elem_expr_alloc+0x1db/0x590 [ 1296.406060][T10161] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 1296.406102][T10161] ? nla_strcmp+0x106/0x140 [ 1296.406120][T10161] ? nla_strcmp+0x106/0x140 [ 1296.406153][T10161] nf_tables_newsetelem+0x1688/0x4330 [ 1296.406222][T10161] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 1296.406242][T10161] ? __lock_acquire+0xab9/0xd20 [ 1296.406288][T10161] ? nla_validate_array+0xfc/0x260 [ 1296.406343][T10161] ? __pfx___nla_validate_parse+0x10/0x10 [ 1296.406370][T10161] ? __lock_acquire+0xab9/0xd20 [ 1296.406404][T10161] ? nfnl_pernet+0x23/0x240 [ 1296.406437][T10161] ? __nla_parse+0x40/0x60 [ 1296.406463][T10161] nfnetlink_rcv+0x11d9/0x2590 [ 1296.406529][T10161] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1296.406571][T10161] ? ref_tracker_free+0x63a/0x7d0 [ 1296.406623][T10161] ? __netlink_deliver_tap+0x807/0x850 [ 1296.406649][T10161] ? netlink_deliver_tap+0x2e/0x1b0 [ 1296.406694][T10161] netlink_unicast+0x82f/0x9e0 [ 1296.406733][T10161] ? __pfx_netlink_unicast+0x10/0x10 [ 1296.406758][T10161] ? netlink_sendmsg+0x642/0xb30 [ 1296.406781][T10161] ? skb_put+0x11b/0x210 [ 1296.406811][T10161] netlink_sendmsg+0x805/0xb30 [ 1296.406847][T10161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1296.406877][T10161] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1296.406899][T10161] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1296.406922][T10161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1296.406948][T10161] __sock_sendmsg+0x21c/0x270 [ 1296.406974][T10161] ____sys_sendmsg+0x505/0x830 [ 1296.407008][T10161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1296.407045][T10161] ? import_iovec+0x74/0xa0 [ 1296.407073][T10161] ___sys_sendmsg+0x21f/0x2a0 [ 1296.407094][T10161] ? __pfx____sys_sendmsg+0x10/0x10 [ 1296.407155][T10161] ? __fget_files+0x2a/0x420 [ 1296.407177][T10161] ? __fget_files+0x3a0/0x420 [ 1296.407210][T10161] __x64_sys_sendmsg+0x19b/0x260 [ 1296.407232][T10161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1296.407262][T10161] ? __pfx_ksys_write+0x10/0x10 [ 1296.407286][T10161] ? do_syscall_64+0xbe/0xfa0 [ 1296.407309][T10161] do_syscall_64+0xfa/0xfa0 [ 1296.407326][T10161] ? lockdep_hardirqs_on+0x9c/0x150 [ 1296.407343][T10161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.407362][T10161] ? clear_bhb_loop+0x60/0xb0 [ 1296.407385][T10161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.407403][T10161] RIP: 0033:0x7f35f938efc9 [ 1296.407420][T10161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1296.407435][T10161] RSP: 002b:00007f35fa176038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1296.407456][T10161] RAX: ffffffffffffffda RBX: 00007f35f95e5fa0 RCX: 00007f35f938efc9 [ 1296.407470][T10161] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1296.407482][T10161] RBP: 00007f35fa176090 R08: 0000000000000000 R09: 0000000000000000 [ 1296.407493][T10161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1296.407504][T10161] R13: 00007f35f95e6038 R14: 00007f35f95e5fa0 R15: 00007ffe5b02ee68 [ 1296.407539][T10161] [ 1296.899651][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10797'. [ 1297.138627][T10170] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1297.174452][T10174] wg1 speed is unknown, defaulting to 1000 [ 1297.703987][T10199] netlink: 'syz.3.10807': attribute type 10 has an invalid length. [ 1297.813190][T10206] netlink: 'syz.0.10810': attribute type 10 has an invalid length. [ 1297.885070][T10202] wg1 speed is unknown, defaulting to 1000 [ 1297.927550][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10809'. [ 1298.007713][T10207] wg1 speed is unknown, defaulting to 1000 [ 1298.286370][T10218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10814'. [ 1298.885446][T10257] lo: left promiscuous mode [ 1298.897096][T10257] tunl0: left promiscuous mode [ 1298.902868][T10257] gre0: left promiscuous mode [ 1298.908696][T10257] gretap0: left promiscuous mode [ 1298.914539][T10257] erspan0: left promiscuous mode [ 1298.920684][T10257] ip_vti0: left promiscuous mode [ 1298.927080][T10257] ip6_vti0: left promiscuous mode [ 1298.933001][T10257] sit0: left promiscuous mode [ 1298.943488][T10257] ip6tnl0: left promiscuous mode [ 1298.967481][T10257] ip6gre0: left promiscuous mode [ 1298.973382][T10257] ip6gretap0: left promiscuous mode [ 1298.980035][T10257] bridge0: left promiscuous mode [ 1298.994059][T10257] bond0: left promiscuous mode [ 1299.000987][T10257] team0: left promiscuous mode [ 1299.010427][T10257] nlmon0: left promiscuous mode [ 1299.024678][ T98] block nbd1: Possible stuck request ffff888025655080: control (read@0,4096B). Runtime 1080 seconds [ 1299.157807][T10257] caif0: left promiscuous mode [ 1299.167339][T10257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1299.322708][T10271] FAULT_INJECTION: forcing a failure. [ 1299.322708][T10271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1299.336733][T10271] CPU: 0 UID: 0 PID: 10271 Comm: syz.3.10830 Not tainted syzkaller #0 PREEMPT(full) [ 1299.336757][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1299.336767][T10271] Call Trace: [ 1299.336773][T10271] [ 1299.336779][T10271] dump_stack_lvl+0x189/0x250 [ 1299.336800][T10271] ? __pfx____ratelimit+0x10/0x10 [ 1299.336823][T10271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1299.336837][T10271] ? __pfx__printk+0x10/0x10 [ 1299.336851][T10271] ? __might_fault+0xb0/0x130 [ 1299.336875][T10271] should_fail_ex+0x414/0x560 [ 1299.336900][T10271] _copy_from_user+0x2d/0xb0 [ 1299.336919][T10271] ___sys_sendmsg+0x158/0x2a0 [ 1299.336935][T10271] ? __pfx____sys_sendmsg+0x10/0x10 [ 1299.336978][T10271] ? __fget_files+0x2a/0x420 [ 1299.336994][T10271] ? __fget_files+0x3a0/0x420 [ 1299.337018][T10271] __x64_sys_sendmsg+0x19b/0x260 [ 1299.337034][T10271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1299.337055][T10271] ? __pfx_ksys_write+0x10/0x10 [ 1299.337073][T10271] ? do_syscall_64+0xbe/0xfa0 [ 1299.337089][T10271] do_syscall_64+0xfa/0xfa0 [ 1299.337101][T10271] ? lockdep_hardirqs_on+0x9c/0x150 [ 1299.337114][T10271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.337127][T10271] ? clear_bhb_loop+0x60/0xb0 [ 1299.337144][T10271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.337157][T10271] RIP: 0033:0x7fd7d8f8efc9 [ 1299.337171][T10271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1299.337183][T10271] RSP: 002b:00007fd7d9eeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1299.337199][T10271] RAX: ffffffffffffffda RBX: 00007fd7d91e5fa0 RCX: 00007fd7d8f8efc9 [ 1299.337210][T10271] RDX: 0000000000000000 RSI: 0000200000002b40 RDI: 0000000000000003 [ 1299.337218][T10271] RBP: 00007fd7d9eeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1299.337227][T10271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1299.337234][T10271] R13: 00007fd7d91e6038 R14: 00007fd7d91e5fa0 R15: 00007ffea93a4108 [ 1299.337259][T10271] [ 1299.543622][T10269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.580591][T10269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1299.776747][T10269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.813048][T10269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1299.835840][T10282] tipc: Enabled bearer , priority 0 [ 1299.842955][T10288] syzkaller0: entered promiscuous mode [ 1299.849997][T10288] syzkaller0: entered allmulticast mode [ 1299.927895][T10269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.946850][T10269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1300.019385][T10269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.028953][T10278] __nla_validate_parse: 21 callbacks suppressed [ 1300.028975][T10278] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10832'. [ 1300.029841][T10269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1300.074900][T10282] tipc: Resetting bearer [ 1300.094131][T10295] Cannot find set identified by id 65534 to match [ 1300.107994][T10274] tipc: Resetting bearer [ 1300.144887][T10297] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10837'. [ 1300.155156][T10274] tipc: Disabling bearer [ 1300.304665][T30343] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1300.326751][T30343] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1300.367193][T30343] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1300.375582][T30343] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1300.403955][T10305] tipc: Enabled bearer , priority 0 [ 1300.414099][T30343] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1300.422698][T30343] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1300.438499][T30343] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1300.447030][T30343] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1300.455881][T10305] syzkaller0: entered allmulticast mode [ 1300.466708][T10305] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1300.498772][T10305] tipc: Resetting bearer [ 1300.543112][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10841'. [ 1300.581738][T10304] tipc: Disabling bearer [ 1300.595898][T10309] 8021q: VLANs not supported on nlmon0 [ 1300.719472][T10317] netlink: 'syz.0.10844': attribute type 1 has an invalid length. [ 1300.829961][T10317] bond1: (slave veth1): Enslaving as an active interface with a down link [ 1300.841212][T10322] netlink: 'syz.1.10846': attribute type 10 has an invalid length. [ 1300.850962][T10323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10844'. [ 1300.880577][T10323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1301.034898][T10329] Cannot find set identified by id 65534 to match [ 1301.099686][T10331] wg1: entered promiscuous mode [ 1301.122903][T10331] wg1: entered allmulticast mode [ 1301.160826][T10336] netlink: 180 bytes leftover after parsing attributes in process `syz.4.10851'. [ 1301.285562][T10343] netlink: 84 bytes leftover after parsing attributes in process `syz.4.10854'. [ 1301.300829][T10343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10854'. [ 1301.318012][T10343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10854'. [ 1301.347187][T10343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10854'. [ 1301.403529][T10349] netlink: 'syz.1.10857': attribute type 10 has an invalid length. [ 1301.545368][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10858'. [ 1301.616944][T10352] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1301.787209][T10363] 8021q: VLANs not supported on nlmon0 [ 1302.582265][T10398] netlink: 'syz.3.10875': attribute type 1 has an invalid length. [ 1303.033750][T10418] macsec0: entered promiscuous mode [ 1303.042771][T10418] team0: entered promiscuous mode [ 1303.053548][T10418] team0: Device macsec0 is already an upper device of the team interface [ 1303.279243][T10418] team0: left promiscuous mode [ 1303.680667][T10457] netlink: 'syz.0.10899': attribute type 10 has an invalid length. [ 1303.783429][T10459] tipc: Enabled bearer , priority 0 [ 1303.808028][T10459] syzkaller0: entered promiscuous mode [ 1303.820439][T10459] syzkaller0: entered allmulticast mode [ 1304.091704][T10452] tipc: Resetting bearer [ 1304.185257][T10452] tipc: Disabling bearer [ 1304.488846][T10496] wg1 speed is unknown, defaulting to 1000 [ 1304.707866][T10514] FAULT_INJECTION: forcing a failure. [ 1304.707866][T10514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.734189][T10514] CPU: 1 UID: 0 PID: 10514 Comm: syz.3.10918 Not tainted syzkaller #0 PREEMPT(full) [ 1304.734216][T10514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1304.734228][T10514] Call Trace: [ 1304.734237][T10514] [ 1304.734246][T10514] dump_stack_lvl+0x189/0x250 [ 1304.734272][T10514] ? __pfx____ratelimit+0x10/0x10 [ 1304.734308][T10514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1304.734327][T10514] ? __pfx__printk+0x10/0x10 [ 1304.734347][T10514] ? __might_fault+0xb0/0x130 [ 1304.734378][T10514] should_fail_ex+0x414/0x560 [ 1304.734415][T10514] _copy_from_user+0x2d/0xb0 [ 1304.734440][T10514] __sys_sendto+0x25c/0x520 [ 1304.734468][T10514] ? __pfx___sys_sendto+0x10/0x10 [ 1304.734489][T10514] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1304.734521][T10514] ? __fget_files+0x3a0/0x420 [ 1304.734561][T10514] ? ksys_write+0x22a/0x250 [ 1304.734584][T10514] ? __pfx_ksys_write+0x10/0x10 [ 1304.734607][T10514] __x64_sys_sendto+0xde/0x100 [ 1304.734635][T10514] do_syscall_64+0xfa/0xfa0 [ 1304.734651][T10514] ? lockdep_hardirqs_on+0x9c/0x150 [ 1304.734668][T10514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.734686][T10514] ? clear_bhb_loop+0x60/0xb0 [ 1304.734708][T10514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.734726][T10514] RIP: 0033:0x7fd7d8f8efc9 [ 1304.734743][T10514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1304.734759][T10514] RSP: 002b:00007fd7d9eeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1304.734779][T10514] RAX: ffffffffffffffda RBX: 00007fd7d91e5fa0 RCX: 00007fd7d8f8efc9 [ 1304.734794][T10514] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000005 [ 1304.734811][T10514] RBP: 00007fd7d9eeb090 R08: 000020000005ffe4 R09: 000000000000001c [ 1304.734823][T10514] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 1304.734839][T10514] R13: 00007fd7d91e6038 R14: 00007fd7d91e5fa0 R15: 00007ffea93a4108 [ 1304.734879][T10514] [ 1304.988098][T10519] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1305.028113][T10511] wg1 speed is unknown, defaulting to 1000 [ 1305.068767][T10504] __nla_validate_parse: 16 callbacks suppressed [ 1305.069571][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10913'. [ 1305.510181][T10536] tipc: Enabling of bearer rejected, already enabled [ 1305.550193][T10536] netlink: 'syz.3.10924': attribute type 21 has an invalid length. [ 1305.571102][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10924'. [ 1305.607120][T10536] netlink: 'syz.3.10924': attribute type 21 has an invalid length. [ 1305.616046][T10541] tipc: Resetting bearer [ 1305.624511][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10924'. [ 1305.638678][T10537] wg1 speed is unknown, defaulting to 1000 [ 1305.703027][T10545] FAULT_INJECTION: forcing a failure. [ 1305.703027][T10545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1305.717039][T10545] CPU: 1 UID: 0 PID: 10545 Comm: syz.2.10927 Not tainted syzkaller #0 PREEMPT(full) [ 1305.717065][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1305.717085][T10545] Call Trace: [ 1305.717093][T10545] [ 1305.717102][T10545] dump_stack_lvl+0x189/0x250 [ 1305.717128][T10545] ? __pfx____ratelimit+0x10/0x10 [ 1305.717153][T10545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1305.717173][T10545] ? __pfx__printk+0x10/0x10 [ 1305.717192][T10545] ? __might_fault+0xb0/0x130 [ 1305.717224][T10545] should_fail_ex+0x414/0x560 [ 1305.717256][T10545] _copy_from_user+0x2d/0xb0 [ 1305.717280][T10545] bpf_prog_test_run_xdp+0xd77/0x10e0 [ 1305.717320][T10545] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1305.717350][T10545] ? __fget_files+0x2a/0x420 [ 1305.717377][T10545] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1305.717401][T10545] bpf_prog_test_run+0x2c7/0x340 [ 1305.717428][T10545] __sys_bpf+0x562/0x860 [ 1305.717452][T10545] ? __pfx___sys_bpf+0x10/0x10 [ 1305.717487][T10545] ? ksys_write+0x22a/0x250 [ 1305.717509][T10545] ? __pfx_ksys_write+0x10/0x10 [ 1305.717538][T10545] __x64_sys_bpf+0x7c/0x90 [ 1305.717559][T10545] do_syscall_64+0xfa/0xfa0 [ 1305.717575][T10545] ? lockdep_hardirqs_on+0x9c/0x150 [ 1305.717592][T10545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.717610][T10545] ? clear_bhb_loop+0x60/0xb0 [ 1305.717632][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.717650][T10545] RIP: 0033:0x7ff64958efc9 [ 1305.717667][T10545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1305.717683][T10545] RSP: 002b:00007ff64a4a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1305.717703][T10545] RAX: ffffffffffffffda RBX: 00007ff6497e5fa0 RCX: 00007ff64958efc9 [ 1305.717717][T10545] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1305.717729][T10545] RBP: 00007ff64a4a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1305.717741][T10545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1305.717752][T10545] R13: 00007ff6497e6038 R14: 00007ff6497e5fa0 R15: 00007fff15e04348 [ 1305.717785][T10545] [ 1306.130703][T10544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10928'. [ 1306.142478][T10550] FAULT_INJECTION: forcing a failure. [ 1306.142478][T10550] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.185471][T10550] CPU: 1 UID: 0 PID: 10550 Comm: syz.3.10929 Not tainted syzkaller #0 PREEMPT(full) [ 1306.185496][T10550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1306.185507][T10550] Call Trace: [ 1306.185515][T10550] [ 1306.185524][T10550] dump_stack_lvl+0x189/0x250 [ 1306.185548][T10550] ? __pfx____ratelimit+0x10/0x10 [ 1306.185574][T10550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1306.185593][T10550] ? __pfx__printk+0x10/0x10 [ 1306.185617][T10550] ? __pfx___might_resched+0x10/0x10 [ 1306.185641][T10550] ? fs_reclaim_acquire+0x7d/0x100 [ 1306.185667][T10550] should_fail_ex+0x414/0x560 [ 1306.185699][T10550] should_failslab+0xa8/0x100 [ 1306.185722][T10550] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1306.185740][T10550] ? __alloc_skb+0x112/0x2d0 [ 1306.185763][T10550] ? netlink_autobind+0xdb/0x300 [ 1306.185801][T10550] __alloc_skb+0x112/0x2d0 [ 1306.185828][T10550] netlink_sendmsg+0x5c6/0xb30 [ 1306.185863][T10550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1306.185890][T10550] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1306.185913][T10550] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1306.185935][T10550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1306.185961][T10550] __sock_sendmsg+0x21c/0x270 [ 1306.185987][T10550] ____sys_sendmsg+0x505/0x830 [ 1306.186019][T10550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1306.186058][T10550] ? import_iovec+0x74/0xa0 [ 1306.186085][T10550] ___sys_sendmsg+0x21f/0x2a0 [ 1306.186105][T10550] ? __pfx____sys_sendmsg+0x10/0x10 [ 1306.186161][T10550] ? __fget_files+0x2a/0x420 [ 1306.186182][T10550] ? __fget_files+0x3a0/0x420 [ 1306.186214][T10550] __x64_sys_sendmsg+0x19b/0x260 [ 1306.186234][T10550] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1306.186262][T10550] ? __pfx_ksys_write+0x10/0x10 [ 1306.186285][T10550] ? do_syscall_64+0xbe/0xfa0 [ 1306.186307][T10550] do_syscall_64+0xfa/0xfa0 [ 1306.186322][T10550] ? lockdep_hardirqs_on+0x9c/0x150 [ 1306.186339][T10550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.186358][T10550] ? clear_bhb_loop+0x60/0xb0 [ 1306.186380][T10550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.186398][T10550] RIP: 0033:0x7fd7d8f8efc9 [ 1306.186415][T10550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1306.186430][T10550] RSP: 002b:00007fd7d9eca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1306.186450][T10550] RAX: ffffffffffffffda RBX: 00007fd7d91e6090 RCX: 00007fd7d8f8efc9 [ 1306.186464][T10550] RDX: 0000000000040040 RSI: 0000200000000300 RDI: 000000000000000b [ 1306.186477][T10550] RBP: 00007fd7d9eca090 R08: 0000000000000000 R09: 0000000000000000 [ 1306.186489][T10550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1306.186500][T10550] R13: 00007fd7d91e6128 R14: 00007fd7d91e6090 R15: 00007ffea93a4108 [ 1306.186533][T10550] [ 1306.560977][T10548] wg1 speed is unknown, defaulting to 1000 [ 1306.833514][T10554] wg1 speed is unknown, defaulting to 1000 [ 1306.913086][T10574] batadv_slave_1: entered promiscuous mode [ 1306.958100][T10574] batadv_slave_1: left promiscuous mode [ 1307.086217][T10580] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10936'. [ 1307.277337][T10584] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.553134][T10594] wg1: entered promiscuous mode [ 1307.571762][T10594] wg1: entered allmulticast mode [ 1307.643341][T30807] wg1 speed is unknown, defaulting to 1000 [ 1307.653474][T30807] syz0: Port: 1 Link ACTIVE [ 1307.658817][T10596] netlink: 'syz.3.10942': attribute type 10 has an invalid length. [ 1307.672209][T10584] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.703890][T10598] FAULT_INJECTION: forcing a failure. [ 1307.703890][T10598] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.719786][T10598] CPU: 1 UID: 0 PID: 10598 Comm: syz.4.10941 Not tainted syzkaller #0 PREEMPT(full) [ 1307.719814][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1307.719826][T10598] Call Trace: [ 1307.719835][T10598] [ 1307.719844][T10598] dump_stack_lvl+0x189/0x250 [ 1307.719870][T10598] ? __pfx____ratelimit+0x10/0x10 [ 1307.719904][T10598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1307.719923][T10598] ? __pfx__printk+0x10/0x10 [ 1307.719939][T10598] ? rcu_is_watching+0x15/0xb0 [ 1307.719970][T10598] ? __lock_acquire+0xab9/0xd20 [ 1307.720000][T10598] should_fail_ex+0x414/0x560 [ 1307.720034][T10598] should_failslab+0xa8/0x100 [ 1307.720059][T10598] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1307.720080][T10598] ? skb_clone+0x212/0x3a0 [ 1307.720104][T10598] skb_clone+0x212/0x3a0 [ 1307.720127][T10598] __netlink_deliver_tap+0x404/0x850 [ 1307.720165][T10598] ? netlink_deliver_tap+0x2e/0x1b0 [ 1307.720191][T10598] netlink_deliver_tap+0x19c/0x1b0 [ 1307.720217][T10598] netlink_dump+0x92b/0xe90 [ 1307.720254][T10598] ? __pfx_netlink_dump+0x10/0x10 [ 1307.720295][T10598] ? netlink_recvmsg+0x5b2/0xa30 [ 1307.720318][T10598] ? kmem_cache_free+0x19b/0x690 [ 1307.720345][T10598] netlink_recvmsg+0x676/0xa30 [ 1307.720381][T10598] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1307.720404][T10598] ? __lock_acquire+0xab9/0xd20 [ 1307.720430][T10598] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1307.720453][T10598] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1307.720477][T10598] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1307.720503][T10598] sock_recvmsg_nosec+0x186/0x1c0 [ 1307.720530][T10598] ____sys_recvmsg+0x3aa/0x460 [ 1307.720560][T10598] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1307.720596][T10598] ? import_iovec+0x74/0xa0 [ 1307.720624][T10598] ___sys_recvmsg+0x1b5/0x510 [ 1307.720648][T10598] ? __pfx____sys_recvmsg+0x10/0x10 [ 1307.720702][T10598] ? __might_fault+0xb0/0x130 [ 1307.720727][T10598] do_recvmmsg+0x307/0x770 [ 1307.720755][T10598] ? __pfx_do_recvmmsg+0x10/0x10 [ 1307.720789][T10598] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1307.720828][T10598] __x64_sys_recvmmsg+0x190/0x240 [ 1307.720849][T10598] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1307.720872][T10598] ? do_syscall_64+0xbe/0xfa0 [ 1307.720899][T10598] do_syscall_64+0xfa/0xfa0 [ 1307.720915][T10598] ? lockdep_hardirqs_on+0x9c/0x150 [ 1307.720932][T10598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.720950][T10598] ? clear_bhb_loop+0x60/0xb0 [ 1307.720972][T10598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.720990][T10598] RIP: 0033:0x7f3370f8efc9 [ 1307.721008][T10598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1307.721023][T10598] RSP: 002b:00007f3371efd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1307.721042][T10598] RAX: ffffffffffffffda RBX: 00007f33711e5fa0 RCX: 00007f3370f8efc9 [ 1307.721056][T10598] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 1307.721068][T10598] RBP: 00007f3371efd090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.721077][T10598] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000002 [ 1307.721086][T10598] R13: 00007f33711e6038 R14: 00007f33711e5fa0 R15: 00007ffc48fc9478 [ 1307.721117][T10598] [ 1308.066740][T10584] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.132606][T10600] xt_hashlimit: size too large, truncated to 1048576 [ 1308.140562][T10600] xt_hashlimit: max too large, truncated to 1048576 [ 1308.180389][T10600] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1308.262176][T10584] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.275634][T10605] netlink: 448 bytes leftover after parsing attributes in process `syz.0.10944'. [ 1308.469116][T10615] netlink: 'syz.3.10943': attribute type 1 has an invalid length. [ 1308.848395][T30343] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.873506][T30330] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.902910][T30330] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.940189][T30330] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.013240][T10630] dvmrp1: entered allmulticast mode [ 1309.020946][T10632] wg1 speed is unknown, defaulting to 1000 [ 1309.021294][T10634] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10955'. [ 1309.039421][T10634] nbd: couldn't find a device at index 0 [ 1309.094468][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10954'. [ 1309.094742][T10630] wg1 speed is unknown, defaulting to 1000 [ 1309.118372][T10638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10954'. [ 1309.626447][T10654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1324.548316][T19483] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1324.558990][T19483] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1324.566263][ T7038] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1324.567944][T10664] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1324.577009][T19483] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1324.582712][T10664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1324.589128][T19483] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1324.597268][T10664] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1324.603474][T19483] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1324.616802][T19483] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1324.646770][T10661] wg1 speed is unknown, defaulting to 1000 [ 1324.682818][T10663] wg1 speed is unknown, defaulting to 1000 [ 1325.113925][T10661] chnl_net:caif_netlink_parms(): no params data found [ 1325.190109][ T8328] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1325.203990][ T8328] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1325.212663][ T8328] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1325.220768][ T8328] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1325.228677][ T8328] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1325.337332][T10663] chnl_net:caif_netlink_parms(): no params data found [ 1325.397643][T19483] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1325.408545][T19483] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1325.420087][T19483] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1325.428294][T19483] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1325.436575][T19483] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1325.521726][T19483] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1325.532320][T19483] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1325.541118][T19483] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1325.541603][T10674] wg1 speed is unknown, defaulting to 1000 [ 1325.549532][T10661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.561749][T10661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.569686][T19483] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1325.570385][T10661] bridge_slave_0: entered allmulticast mode [ 1325.578118][T19483] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1325.584931][T10661] bridge_slave_0: entered promiscuous mode [ 1325.626352][T10661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.633584][T10661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.641216][T10661] bridge_slave_1: entered allmulticast mode [ 1325.648738][T10661] bridge_slave_1: entered promiscuous mode [ 1325.735086][T10682] wg1 speed is unknown, defaulting to 1000 [ 1325.754957][T10663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.762411][T10663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.770241][T10663] bridge_slave_0: entered allmulticast mode [ 1325.777619][T10663] bridge_slave_0: entered promiscuous mode [ 1325.787882][T10661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.805782][T10661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.816080][T10679] wg1 speed is unknown, defaulting to 1000 [ 1325.833628][T10663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.842710][T10663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.852768][T10663] bridge_slave_1: entered allmulticast mode [ 1325.860563][T10663] bridge_slave_1: entered promiscuous mode [ 1325.950402][T10663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.964121][T10661] team0: Port device team_slave_0 added [ 1325.999849][T10663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1326.026198][T10661] team0: Port device team_slave_1 added [ 1326.077102][T10663] team0: Port device team_slave_0 added [ 1326.099705][T10661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.106937][T10661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.133122][T10661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.151332][T10661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.158639][T10661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.185309][T10661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.200168][T10663] team0: Port device team_slave_1 added [ 1326.294783][T10663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.301870][T10663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.328534][T10663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.346349][T10663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.353363][T10663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.379968][T10663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.408346][T10661] hsr_slave_0: entered promiscuous mode [ 1326.415145][T10661] hsr_slave_1: entered promiscuous mode [ 1326.421642][T10661] debugfs: 'hsr0' already exists in 'hsr' [ 1326.427393][T10661] Cannot create hsr debugfs directory [ 1326.503137][T10663] hsr_slave_0: entered promiscuous mode [ 1326.510076][T10663] hsr_slave_1: entered promiscuous mode [ 1326.516620][T10663] debugfs: 'hsr0' already exists in 'hsr' [ 1326.522342][T10663] Cannot create hsr debugfs directory [ 1326.635497][T19483] Bluetooth: hci2: command tx timeout [ 1326.641878][T19483] Bluetooth: hci6: command tx timeout [ 1326.753258][T10674] chnl_net:caif_netlink_parms(): no params data found [ 1326.964073][T10679] chnl_net:caif_netlink_parms(): no params data found [ 1326.984429][T10682] chnl_net:caif_netlink_parms(): no params data found [ 1327.107353][T10674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.114516][T10674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.122570][T10674] bridge_slave_0: entered allmulticast mode [ 1327.129878][T10674] bridge_slave_0: entered promiscuous mode [ 1327.177212][T10674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.184366][T10674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.191959][T10674] bridge_slave_1: entered allmulticast mode [ 1327.199204][T10674] bridge_slave_1: entered promiscuous mode [ 1327.279120][T19483] Bluetooth: hci7: command tx timeout [ 1327.298096][T10674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.318533][T10679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.325981][T10679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.333199][T10679] bridge_slave_0: entered allmulticast mode [ 1327.340866][T10679] bridge_slave_0: entered promiscuous mode [ 1327.354479][T10679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.362022][T10679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.369650][T10679] bridge_slave_1: entered allmulticast mode [ 1327.377373][T10679] bridge_slave_1: entered promiscuous mode [ 1327.387358][T10674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.491892][T10674] team0: Port device team_slave_0 added [ 1327.508069][T10682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.516557][T10682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.516756][T19483] Bluetooth: hci8: command tx timeout [ 1327.523860][T10682] bridge_slave_0: entered allmulticast mode [ 1327.536777][T10682] bridge_slave_0: entered promiscuous mode [ 1327.547460][T10679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.558837][T10674] team0: Port device team_slave_1 added [ 1327.565035][T10682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.572480][T10682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.579979][T10682] bridge_slave_1: entered allmulticast mode [ 1327.587260][T10682] bridge_slave_1: entered promiscuous mode [ 1327.595535][T19483] Bluetooth: hci9: command tx timeout [ 1327.597760][T10679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.685703][T10679] team0: Port device team_slave_0 added [ 1327.694942][T10682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.705666][T10674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1327.712622][T10674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1327.739209][T10674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1327.753729][T10679] team0: Port device team_slave_1 added [ 1327.762961][T10682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.773414][T10674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1327.780599][T10674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1327.806517][T10674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1327.874126][T10682] team0: Port device team_slave_0 added [ 1327.881267][T10679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1327.888628][T10679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1327.915111][T10679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1327.927964][T10679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1327.934921][T10679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1327.961165][T10679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1327.975881][T10682] team0: Port device team_slave_1 added [ 1328.030456][T10674] hsr_slave_0: entered promiscuous mode [ 1328.037178][T10674] hsr_slave_1: entered promiscuous mode [ 1328.043393][T10674] debugfs: 'hsr0' already exists in 'hsr' [ 1328.049392][T10674] Cannot create hsr debugfs directory [ 1328.092811][T10682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.099966][T10682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.126435][T10682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.157266][T10679] hsr_slave_0: entered promiscuous mode [ 1328.163723][T10679] hsr_slave_1: entered promiscuous mode [ 1328.170019][T10679] debugfs: 'hsr0' already exists in 'hsr' [ 1328.175915][T10679] Cannot create hsr debugfs directory [ 1328.182348][T10682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.189642][T10682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.216077][T10682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.358714][T10682] hsr_slave_0: entered promiscuous mode [ 1328.365151][T10682] hsr_slave_1: entered promiscuous mode [ 1328.372113][T10682] debugfs: 'hsr0' already exists in 'hsr' [ 1328.378059][T10682] Cannot create hsr debugfs directory [ 1328.715463][T19483] Bluetooth: hci2: command tx timeout [ 1328.725567][T19483] Bluetooth: hci6: command tx timeout [ 1329.357282][T19483] Bluetooth: hci7: command tx timeout [ 1329.595463][T19483] Bluetooth: hci8: command tx timeout [ 1329.675837][ T8328] Bluetooth: hci9: command tx timeout [ 1329.681422][ T98] block nbd1: Possible stuck request ffff888025655080: control (read@0,4096B). Runtime 1110 seconds [ 1330.795492][ T8328] Bluetooth: hci6: command tx timeout [ 1330.795497][T19483] Bluetooth: hci2: command tx timeout [ 1331.435652][ T8328] Bluetooth: hci7: command tx timeout [ 1331.675594][ T8328] Bluetooth: hci8: command tx timeout [ 1331.755349][ T8328] Bluetooth: hci9: command tx timeout [ 1332.875476][ T8328] Bluetooth: hci2: command tx timeout [ 1332.877565][T19483] Bluetooth: hci6: command tx timeout [ 1333.516490][T19483] Bluetooth: hci7: command tx timeout [ 1333.755526][T19483] Bluetooth: hci8: command tx timeout [ 1333.836509][T19483] Bluetooth: hci9: command tx timeout [ 1359.755769][ T98] block nbd1: Possible stuck request ffff888025655080: control (read@0,4096B). Runtime 1140 seconds [ 1384.634629][ T8328] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1384.646277][ T8328] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1384.653329][T10664] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1384.654566][ T8328] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1384.665508][T10664] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1384.670675][ T8328] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1384.677603][T10664] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1384.683802][ T8328] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1384.692406][T10664] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1384.705125][T10664] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1384.735597][T10707] wg1 speed is unknown, defaulting to 1000 [ 1384.773225][T10709] wg1 speed is unknown, defaulting to 1000 [ 1385.184039][T10707] chnl_net:caif_netlink_parms(): no params data found [ 1385.212158][T10709] chnl_net:caif_netlink_parms(): no params data found [ 1385.282259][ T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1385.292785][ T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1385.301933][ T52] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1385.310400][ T52] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1385.325892][ T52] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1385.386598][T10664] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1385.399090][T10664] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1385.408638][T10664] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1385.416956][T10664] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1385.424724][T10664] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1385.580336][T10719] wg1 speed is unknown, defaulting to 1000 [ 1385.588695][T10707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.598881][T10707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.606969][T10707] bridge_slave_0: entered allmulticast mode [ 1385.615022][T10707] bridge_slave_0: entered promiscuous mode [ 1385.663769][T10664] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1385.666730][T10707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.678837][T10707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.687609][T10664] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1385.689337][T10707] bridge_slave_1: entered allmulticast mode [ 1385.696332][T10664] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1385.703255][T10707] bridge_slave_1: entered promiscuous mode [ 1385.710222][T10664] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1385.722044][T10664] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1385.730297][T10722] wg1 speed is unknown, defaulting to 1000 [ 1385.751529][T10709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.759844][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.767736][T10709] bridge_slave_0: entered allmulticast mode [ 1385.774882][T10709] bridge_slave_0: entered promiscuous mode [ 1385.813672][T10709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.820970][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.828318][T10709] bridge_slave_1: entered allmulticast mode [ 1385.835801][T10709] bridge_slave_1: entered promiscuous mode [ 1385.880018][T10707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.930105][T10707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.959188][T10709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.972353][T10709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.002650][T10730] wg1 speed is unknown, defaulting to 1000 [ 1386.064099][T10709] team0: Port device team_slave_0 added [ 1386.072178][T10707] team0: Port device team_slave_0 added [ 1386.085517][T10707] team0: Port device team_slave_1 added [ 1386.101800][T10709] team0: Port device team_slave_1 added [ 1386.169912][T10707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.177020][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.203384][T10707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.225128][T10707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1386.232665][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.259480][T10707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1386.319869][T10709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.327224][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.353339][T10709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.369287][T10709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1386.376380][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.402393][T10709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1386.532822][T10709] hsr_slave_0: entered promiscuous mode [ 1386.540183][T10709] hsr_slave_1: entered promiscuous mode [ 1386.546427][T10709] debugfs: 'hsr0' already exists in 'hsr' [ 1386.552146][T10709] Cannot create hsr debugfs directory [ 1386.640979][T10707] hsr_slave_0: entered promiscuous mode [ 1386.648435][T10707] hsr_slave_1: entered promiscuous mode [ 1386.654566][T10707] debugfs: 'hsr0' already exists in 'hsr' [ 1386.660320][T10707] Cannot create hsr debugfs directory [ 1386.685135][T10719] chnl_net:caif_netlink_parms(): no params data found [ 1386.725744][ T52] Bluetooth: hci10: command tx timeout [ 1386.797611][ T52] Bluetooth: hci11: command tx timeout [ 1386.889092][T10722] chnl_net:caif_netlink_parms(): no params data found [ 1387.113427][T10719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.121021][T10719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.128553][T10719] bridge_slave_0: entered allmulticast mode [ 1387.137387][T10719] bridge_slave_0: entered promiscuous mode [ 1387.173423][T10719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.180915][T10719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.188362][T10719] bridge_slave_1: entered allmulticast mode [ 1387.196871][T10719] bridge_slave_1: entered promiscuous mode [ 1387.204072][T10730] chnl_net:caif_netlink_parms(): no params data found [ 1387.279073][T10722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.287258][T10722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.294736][T10722] bridge_slave_0: entered allmulticast mode [ 1387.302264][T10722] bridge_slave_0: entered promiscuous mode [ 1387.310341][T10722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.317786][T10722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.325102][T10722] bridge_slave_1: entered allmulticast mode [ 1387.332653][T10722] bridge_slave_1: entered promiscuous mode [ 1387.355608][ T52] Bluetooth: hci12: command tx timeout [ 1387.369285][T10719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.404594][T10719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.447961][T10722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.488334][T10722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.515740][ T52] Bluetooth: hci13: command tx timeout [ 1387.536366][T10719] team0: Port device team_slave_0 added [ 1387.557457][T10719] team0: Port device team_slave_1 added [ 1387.573892][T10730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.581324][T10730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.588759][T10730] bridge_slave_0: entered allmulticast mode [ 1387.596362][T10730] bridge_slave_0: entered promiscuous mode [ 1387.629232][T10722] team0: Port device team_slave_0 added [ 1387.635789][T10730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.642926][T10730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.650575][T10730] bridge_slave_1: entered allmulticast mode [ 1387.658881][T10730] bridge_slave_1: entered promiscuous mode [ 1387.693156][T10722] team0: Port device team_slave_1 added [ 1387.719000][T10719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.726429][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.754031][T10719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.766864][ T52] Bluetooth: hci14: command tx timeout [ 1387.766915][T10719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.779640][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.805913][T10719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.832065][T10730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.866806][T10730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.891045][T10722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.898129][T10722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.930698][T10722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.944135][T10722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.951705][T10722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.978752][T10722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.022094][T10730] team0: Port device team_slave_0 added [ 1388.054527][T10719] hsr_slave_0: entered promiscuous mode [ 1388.061853][T10719] hsr_slave_1: entered promiscuous mode [ 1388.069510][T10719] debugfs: 'hsr0' already exists in 'hsr' [ 1388.075813][T10719] Cannot create hsr debugfs directory [ 1388.083606][T10730] team0: Port device team_slave_1 added [ 1388.122795][T10722] hsr_slave_0: entered promiscuous mode [ 1388.130811][T10722] hsr_slave_1: entered promiscuous mode [ 1388.138135][T10722] debugfs: 'hsr0' already exists in 'hsr' [ 1388.143864][T10722] Cannot create hsr debugfs directory [ 1388.187581][T10730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.194544][T10730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.221038][T10730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.276113][T10730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.283087][T10730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.309484][T10730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.459235][T10730] hsr_slave_0: entered promiscuous mode [ 1388.466153][T10730] hsr_slave_1: entered promiscuous mode [ 1388.472361][T10730] debugfs: 'hsr0' already exists in 'hsr' [ 1388.480317][T10730] Cannot create hsr debugfs directory [ 1388.795596][ T52] Bluetooth: hci10: command tx timeout [ 1388.875638][ T52] Bluetooth: hci11: command tx timeout [ 1389.435485][ T52] Bluetooth: hci12: command tx timeout [ 1389.595585][ T52] Bluetooth: hci13: command tx timeout [ 1389.836506][ T98] block nbd1: Possible stuck request ffff888025655080: control (read@0,4096B). Runtime 1170 seconds [ 1389.840531][T10664] Bluetooth: hci14: command tx timeout [ 1390.875539][T10664] Bluetooth: hci10: command tx timeout [ 1390.955547][T10664] Bluetooth: hci11: command tx timeout [ 1391.515534][T10664] Bluetooth: hci12: command tx timeout [ 1391.675506][T10664] Bluetooth: hci13: command tx timeout [ 1391.915616][T10664] Bluetooth: hci14: command tx timeout [ 1392.955607][T10664] Bluetooth: hci10: command tx timeout [ 1393.035503][T10664] Bluetooth: hci11: command tx timeout [ 1393.595516][T10664] Bluetooth: hci12: command tx timeout [ 1393.755513][T10664] Bluetooth: hci13: command tx timeout [ 1393.995714][T10664] Bluetooth: hci14: command tx timeout [ 1419.916220][ T98] block nbd1: Possible stuck request ffff888025655080: control (read@0,4096B). Runtime 1200 seconds [ 1444.724710][ T52] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1444.734913][ T52] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1444.744541][ T52] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1444.752831][ T52] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1444.760975][ T52] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1444.761479][ T8328] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1444.782814][T10664] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1444.791661][T10664] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1444.801420][T10664] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1444.804631][T10752] wg1 speed is unknown, defaulting to 1000 [ 1444.812623][T10664] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1444.890809][T10754] wg1 speed is unknown, defaulting to 1000 [ 1445.018656][T10752] chnl_net:caif_netlink_parms(): no params data found [ 1445.149404][T10752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.160238][T10752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.167880][T10752] bridge_slave_0: entered allmulticast mode [ 1445.175985][T10752] bridge_slave_0: entered promiscuous mode [ 1445.190915][T10752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.198721][T10752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.206204][T10752] bridge_slave_1: entered allmulticast mode [ 1445.213420][T10752] bridge_slave_1: entered promiscuous mode [ 1445.233133][T10754] chnl_net:caif_netlink_parms(): no params data found [ 1445.263584][T10752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.284871][T10752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.338320][T10752] team0: Port device team_slave_0 added [ 1445.354283][T10752] team0: Port device team_slave_1 added [ 1445.406581][T10754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.413776][T10754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.421149][T10754] bridge_slave_0: entered allmulticast mode [ 1445.428761][T10754] bridge_slave_0: entered promiscuous mode [ 1445.437112][T10752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1445.444672][T10752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1445.471539][T10752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1445.497958][T10752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1445.504929][T10752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1445.534309][T10752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.545812][T10754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.566344][T10754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.573751][T10754] bridge_slave_1: entered allmulticast mode [ 1445.587082][T10754] bridge_slave_1: entered promiscuous mode [ 1445.817599][T10752] hsr_slave_0: entered promiscuous mode [ 1445.846415][T10752] hsr_slave_1: entered promiscuous mode [ 1445.865619][T10752] debugfs: 'hsr0' already exists in 'hsr' [ 1445.871403][T10752] Cannot create hsr debugfs directory [ 1445.899474][T10754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.975164][T10754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.987725][T10664] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1445.998727][T10664] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1446.017023][T10664] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1446.032397][ T8328] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1446.033809][ T52] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1446.050811][ T8328] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1446.051820][ T52] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1446.068135][ T8328] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1446.083077][ T52] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1446.093622][T19483] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1446.178918][T10754] team0: Port device team_slave_0 added [ 1446.180380][ T52] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1446.197925][ T52] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1446.201065][T10754] team0: Port device team_slave_1 added [ 1446.206586][ T52] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1446.218970][ T52] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1446.226712][ T52] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1446.282767][T10771] wg1 speed is unknown, defaulting to 1000 [ 1446.308330][T10754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.315897][T10754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1446.342621][T10754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1446.368045][T10775] wg1 speed is unknown, defaulting to 1000 [ 1446.393102][T10754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1446.400251][T10754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1446.426395][T10754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1446.484505][T10773] wg1 speed is unknown, defaulting to 1000 [ 1446.581731][T10754] hsr_slave_0: entered promiscuous mode [ 1446.588883][T10754] hsr_slave_1: entered promiscuous mode [ 1446.596190][T10754] debugfs: 'hsr0' already exists in 'hsr' [ 1446.601919][T10754] Cannot create hsr debugfs directory [ 1446.803241][ T52] Bluetooth: hci15: command tx timeout [ 1446.884366][ T52] Bluetooth: hci16: command tx timeout [ 1447.003552][T10771] chnl_net:caif_netlink_parms(): no params data found [ 1447.144474][T10775] chnl_net:caif_netlink_parms(): no params data found [ 1447.206774][T10773] chnl_net:caif_netlink_parms(): no params data found [ 1447.278003][T10771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.285129][T10771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.292606][T10771] bridge_slave_0: entered allmulticast mode [ 1447.299997][T10771] bridge_slave_0: entered promiscuous mode [ 1447.342136][T10771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.349558][T10771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.357089][T10771] bridge_slave_1: entered allmulticast mode [ 1447.364324][T10771] bridge_slave_1: entered promiscuous mode [ 1447.454504][T10771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1447.503163][T10771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.513555][T10775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.521163][T10775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.528740][T10775] bridge_slave_0: entered allmulticast mode [ 1447.536509][T10775] bridge_slave_0: entered promiscuous mode [ 1447.589329][T10775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.597159][T10775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.604464][T10775] bridge_slave_1: entered allmulticast mode [ 1447.611815][T10775] bridge_slave_1: entered promiscuous mode [ 1447.619680][T10773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.626927][T10773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.634211][T10773] bridge_slave_0: entered allmulticast mode [ 1447.642251][T10773] bridge_slave_0: entered promiscuous mode [ 1447.651591][T10771] team0: Port device team_slave_0 added [ 1447.681927][T10773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.689470][T10773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.697432][T10773] bridge_slave_1: entered allmulticast mode [ 1447.704666][T10773] bridge_slave_1: entered promiscuous mode [ 1447.713804][T10771] team0: Port device team_slave_1 added [ 1447.740034][T10775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1447.801811][T10775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.832906][T10773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1447.843200][T10771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1447.850778][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1447.877058][T10771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1447.914386][T10773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.945975][T10771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1447.952921][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1447.979586][T10771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.003514][T10775] team0: Port device team_slave_0 added [ 1448.040444][T10775] team0: Port device team_slave_1 added [ 1448.050941][T10773] team0: Port device team_slave_0 added [ 1448.059745][T10773] team0: Port device team_slave_1 added [ 1448.133532][T10775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.140675][T10775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.166872][ T52] Bluetooth: hci17: command tx timeout [ 1448.174516][T10775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1448.185074][ T52] Bluetooth: hci18: command tx timeout [ 1448.203662][T10773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.210868][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.237367][T10773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1448.249447][T10775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1448.256640][T10775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.282937][T10775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.299161][T10771] hsr_slave_0: entered promiscuous mode [ 1448.306080][T10771] hsr_slave_1: entered promiscuous mode [ 1448.312341][T10771] debugfs: 'hsr0' already exists in 'hsr' [ 1448.318560][ T52] Bluetooth: hci19: command tx timeout [ 1448.318737][T10771] Cannot create hsr debugfs directory [ 1448.343718][T10773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1448.350791][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.376879][T10773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.457235][T10775] hsr_slave_0: entered promiscuous mode [ 1448.463834][T10775] hsr_slave_1: entered promiscuous mode [ 1448.470443][T10775] debugfs: 'hsr0' already exists in 'hsr' [ 1448.476686][T10775] Cannot create hsr debugfs directory [ 1448.547562][T10773] hsr_slave_0: entered promiscuous mode [ 1448.554188][T10773] hsr_slave_1: entered promiscuous mode [ 1448.561202][T10773] debugfs: 'hsr0' already exists in 'hsr' [ 1448.567317][T10773] Cannot create hsr debugfs directory [ 1448.875569][T10796] Bluetooth: hci15: command tx timeout [ 1448.958525][T10796] Bluetooth: hci16: command tx timeout [ 1449.997206][ T98] block nbd1: Possible stuck request ffff888025655080: control (read@0,4096B). Runtime 1230 seconds [ 1450.235537][T10796] Bluetooth: hci18: command tx timeout [ 1450.241489][T10796] Bluetooth: hci17: command tx timeout [ 1450.405481][T10797] Bluetooth: hci19: command tx timeout [ 1450.795614][T10797] Bluetooth: hci2: command 0x0406 tx timeout [ 1450.801988][T10797] Bluetooth: hci8: command 0x0406 tx timeout [ 1450.809592][T10795] Bluetooth: hci6: command 0x0406 tx timeout [ 1450.816685][T10795] Bluetooth: hci7: command 0x0406 tx timeout [ 1450.819143][T10664] Bluetooth: hci9: command 0x0406 tx timeout [ 1450.955571][ T7038] Bluetooth: hci15: command tx timeout [ 1451.038810][ T7038] Bluetooth: hci16: command tx timeout [ 1452.315443][ T7038] Bluetooth: hci17: command tx timeout [ 1452.315678][T19483] Bluetooth: hci18: command tx timeout [ 1452.475393][T19483] Bluetooth: hci19: command tx timeout [ 1453.035504][T19483] Bluetooth: hci15: command tx timeout [ 1453.118317][T19483] Bluetooth: hci16: command tx timeout [ 1454.395455][T19483] Bluetooth: hci17: command tx timeout [ 1454.400993][T19483] Bluetooth: hci18: command tx timeout [ 1454.555566][T19483] Bluetooth: hci19: command tx timeout [ 1460.876016][ T31] INFO: task syz.4.10955:10639 blocked for more than 143 seconds. [ 1460.883922][ T31] Not tainted syzkaller #0 [ 1460.888990][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1460.897722][ T31] task:syz.4.10955 state:D stack:27104 pid:10639 tgid:10633 ppid:4474 task_flags:0x400140 flags:0x00080002 [ 1460.909774][ T31] Call Trace: [ 1460.913046][ T31] [ 1460.916037][ T31] __schedule+0x1798/0x4cc0 [ 1460.920663][ T31] ? __lock_acquire+0xab9/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1460.925698][ T31] ? __lock_acquire+0xab9/0xd20 [ 1460.930890][ T31] ? __pfx___schedule+0x10/0x10 [ 1460.937269][ T31] ? schedule+0x91/0x360 [ 1460.941556][ T31] schedule+0x165/0x360 [ 1460.945912][ T31] schedule_preempt_disabled+0x13/0x30 [ 1460.951388][ T31] __mutex_lock+0x7e6/0x1350 [ 1460.956348][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1460.961140][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1460.965985][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1460.971035][ T31] ? stack_trace_save+0x9c/0xe0 [ 1460.975947][ T31] ? radix_tree_lookup+0x240/0x290 [ 1460.981078][ T31] genl_rcv_msg+0x10d/0x790 [ 1460.985733][ T31] ? __lock_acquire+0xab9/0xd20 [ 1460.990609][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1460.995971][ T31] netlink_rcv_skb+0x208/0x470 [ 1461.000757][ T31] ? __lock_acquire+0xab9/0xd20 [ 1461.005669][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1461.010730][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1461.016447][ T31] ? down_read+0x1ad/0x2e0 [ 1461.020890][ T31] genl_rcv+0x28/0x40 [ 1461.024881][ T31] netlink_unicast+0x82f/0x9e0 [ 1461.029779][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1461.035083][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1461.040337][ T31] ? skb_put+0x11b/0x210 [ 1461.044621][ T31] netlink_sendmsg+0x805/0xb30 [ 1461.049674][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1461.054989][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1461.060113][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1461.065570][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1461.070883][ T31] __sock_sendmsg+0x21c/0x270 [ 1461.075849][ T31] __sys_sendto+0x3bd/0x520 [ 1461.080408][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1461.085577][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1461.090905][ T31] ? exc_page_fault+0x82/0x100 [ 1461.095804][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 1461.125338][ T31] __x64_sys_sendto+0xde/0x100 [ 1461.130164][ T31] do_syscall_64+0xfa/0xfa0 [ 1461.155298][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1461.160555][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.169725][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1461.174446][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.180379][ T31] RIP: 0033:0x7f3370f90e5c [ 1461.184776][ T31] RSP: 002b:00007f3371edaec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1461.193246][ T31] RAX: ffffffffffffffda RBX: 00007f3371edafc0 RCX: 00007f3370f90e5c [ 1461.202052][ T31] RDX: 0000000000000024 RSI: 00007f3371edb010 RDI: 0000000000000010 [ 1461.210233][ T31] RBP: 0000000000000000 R08: 00007f3371edaf14 R09: 000000000000000c [ 1461.218304][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000010 [ 1461.226316][ T31] R13: 00007f3371edaf68 R14: 00007f3371edb010 R15: 0000000000000000 [ 1461.234289][ T31] [ 1461.237377][ T31] INFO: task syz.1.10956:10637 blocked for more than 143 seconds. [ 1461.245175][ T31] Not tainted syzkaller #0 [ 1461.250228][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1461.258970][ T31] task:syz.1.10956 state:D stack:24824 pid:10637 tgid:10636 ppid:5164 task_flags:0x480140 flags:0x00080002 [ 1461.270969][ T31] Call Trace: [ 1461.274238][ T31] [ 1461.277347][ T31] __schedule+0x1798/0x4cc0 [ 1461.281873][ T31] ? __lock_acquire+0xab9/0xd20 [ 1461.286777][ T31] ? __lock_acquire+0xab9/0xd20 [ 1461.291614][ T31] ? __pfx___schedule+0x10/0x10 [ 1461.296483][ T31] ? schedule+0x91/0x360 [ 1461.300714][ T31] schedule+0x165/0x360 [ 1461.304939][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 1461.310462][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1461.316617][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1461.322699][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 1461.328673][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 1461.335016][ T31] nbd_set_size+0x47e/0x6a0 [ 1461.339560][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 1461.344583][ T31] ? nla_memcpy+0x5b/0xc0 [ 1461.348958][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 1461.353894][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 1461.359423][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 1461.365900][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1461.370591][ T31] ? security_capable+0x7e/0x2e0 [ 1461.375566][ T31] ? radix_tree_lookup+0x240/0x290 [ 1461.380688][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 1461.386011][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1461.391734][ T31] ? rcu_is_watching+0x15/0xb0 [ 1461.396606][ T31] ? __nla_parse+0x40/0x60 [ 1461.401030][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1461.407388][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 1461.412927][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1461.419030][ T31] ? stack_trace_save+0x9c/0xe0 [ 1461.423868][ T31] genl_rcv_msg+0x60e/0x790 [ 1461.428401][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1461.433417][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1461.442140][ T31] netlink_rcv_skb+0x208/0x470 [ 1461.446972][ T31] ? __lock_acquire+0xab9/0xd20 [ 1461.451839][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1461.456922][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1461.462211][ T31] ? down_read+0x1ad/0x2e0 [ 1461.466647][ T31] genl_rcv+0x28/0x40 [ 1461.470615][ T31] netlink_unicast+0x82f/0x9e0 [ 1461.475403][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1461.480693][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1461.485673][ T31] netlink_sendmsg+0x805/0xb30 [ 1461.490453][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1461.495759][ T31] ? __lock_acquire+0xab9/0xd20 [ 1461.500597][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1461.505559][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1461.510830][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1461.516333][ T31] __sock_sendmsg+0x21c/0x270 [ 1461.521025][ T31] ____sys_sendmsg+0x505/0x830 [ 1461.525845][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1461.531151][ T31] ? import_iovec+0x74/0xa0 [ 1461.535680][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1461.540343][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1461.545576][ T31] ? __fget_files+0x2a/0x420 [ 1461.550148][ T31] ? __fget_files+0x3a0/0x420 [ 1461.554844][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1461.559826][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1461.565387][ T31] ? do_syscall_64+0xbe/0xfa0 [ 1461.570070][ T31] do_syscall_64+0xfa/0xfa0 [ 1461.574557][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1461.579822][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.585933][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1461.590625][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.596677][ T31] RIP: 0033:0x7f206c78efc9 [ 1461.601111][ T31] RSP: 002b:00007f206d5d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1461.609563][ T31] RAX: ffffffffffffffda RBX: 00007f206c9e5fa0 RCX: 00007f206c78efc9 [ 1461.617570][ T31] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1461.625582][ T31] RBP: 00007f206c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1461.633571][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1461.641600][ T31] R13: 00007f206c9e6038 R14: 00007f206c9e5fa0 R15: 00007ffce3f7adf8 [ 1461.649613][ T31] [ 1461.652641][ T31] INFO: task syz.1.10956:10641 blocked for more than 144 seconds. [ 1461.660497][ T31] Not tainted syzkaller #0 [ 1461.665484][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1461.674159][ T31] task:syz.1.10956 state:D stack:27104 pid:10641 tgid:10636 ppid:5164 task_flags:0x400040 flags:0x00080002 [ 1461.686162][ T31] Call Trace: [ 1461.689435][ T31] [ 1461.692350][ T31] __schedule+0x1798/0x4cc0 [ 1461.696938][ T31] ? __lock_acquire+0xab9/0xd20 [ 1461.701825][ T31] ? __lock_acquire+0xab9/0xd20 [ 1461.706751][ T31] ? __pfx___schedule+0x10/0x10 [ 1461.711624][ T31] ? schedule+0x91/0x360 [ 1461.715907][ T31] schedule+0x165/0x360 [ 1461.720089][ T31] schedule_preempt_disabled+0x13/0x30 [ 1461.725557][ T31] __mutex_lock+0x7e6/0x1350 [ 1461.730135][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1461.734881][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1461.739588][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1461.744601][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1461.749993][ T31] ? radix_tree_lookup+0x240/0x290 [ 1461.755093][ T31] genl_rcv_msg+0x10d/0x790 [ 1461.759735][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1461.764773][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 1461.769819][ T31] ? __asan_memcpy+0x40/0x70 [ 1461.774402][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1461.779788][ T31] netlink_rcv_skb+0x208/0x470 [ 1461.784551][ T31] ? __lock_acquire+0xab9/0xd20 [ 1461.789449][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1461.794469][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1461.799794][ T31] ? down_read+0x1ad/0x2e0 [ 1461.804210][ T31] genl_rcv+0x28/0x40 [ 1461.808251][ T31] netlink_unicast+0x82f/0x9e0 [ 1461.813016][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1461.818413][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1461.823351][ T31] ? skb_put+0x11b/0x210 [ 1461.827665][ T31] netlink_sendmsg+0x805/0xb30 [ 1461.832468][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1461.837813][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1461.842764][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1461.848081][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1461.853361][ T31] __sock_sendmsg+0x21c/0x270 [ 1461.858055][ T31] __sys_sendto+0x3bd/0x520 [ 1461.862547][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1461.867583][ T31] ? __lock_acquire+0xab9/0xd20 [ 1461.872436][ T31] ? fd_install+0x97/0x540 [ 1461.876871][ T31] ? fd_install+0x30d/0x540 [ 1461.881366][ T31] __x64_sys_sendto+0xde/0x100 [ 1461.886161][ T31] do_syscall_64+0xfa/0xfa0 [ 1461.890647][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1461.895873][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.901940][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1461.906642][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.912530][ T31] RIP: 0033:0x7f206c790e5c [ 1461.917375][ T31] RSP: 002b:00007f206d5b4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1461.925892][ T31] RAX: ffffffffffffffda RBX: 00007f206d5b4fc0 RCX: 00007f206c790e5c [ 1461.933872][ T31] RDX: 0000000000000024 RSI: 00007f206d5b5010 RDI: 0000000000000003 [ 1461.941904][ T31] RBP: 0000000000000000 R08: 00007f206d5b4f14 R09: 000000000000000c [ 1461.949948][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1461.957975][ T31] R13: 00007f206d5b4f68 R14: 00007f206d5b5010 R15: 0000000000000000 [ 1461.966010][ T31] [ 1461.969047][ T31] INFO: task syz.3.10957:10653 blocked for more than 144 seconds. [ 1461.979022][ T31] Not tainted syzkaller #0 [ 1461.983953][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1461.992800][ T31] task:syz.3.10957 state:D stack:26432 pid:10653 tgid:10648 ppid:3913 task_flags:0x400140 flags:0x00080002 [ 1462.004837][ T31] Call Trace: [ 1462.008147][ T31] [ 1462.011075][ T31] __schedule+0x1798/0x4cc0 [ 1462.015614][ T31] ? __lock_acquire+0xab9/0xd20 [ 1462.020456][ T31] ? __lock_acquire+0xab9/0xd20 [ 1462.025320][ T31] ? __pfx___schedule+0x10/0x10 [ 1462.030198][ T31] ? schedule+0x91/0x360 [ 1462.034432][ T31] schedule+0x165/0x360 [ 1462.038624][ T31] schedule_preempt_disabled+0x13/0x30 [ 1462.044082][ T31] __mutex_lock+0x7e6/0x1350 [ 1462.048705][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1462.053461][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1462.058158][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1462.063197][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1462.068584][ T31] ? radix_tree_lookup+0x240/0x290 [ 1462.073696][ T31] genl_rcv_msg+0x10d/0x790 [ 1462.078339][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1462.083398][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 1462.088489][ T31] ? __asan_memcpy+0x40/0x70 [ 1462.093086][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1462.098515][ T31] netlink_rcv_skb+0x208/0x470 [ 1462.103272][ T31] ? __lock_acquire+0xab9/0xd20 [ 1462.108155][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1462.113169][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1462.118509][ T31] ? down_read+0x1ad/0x2e0 [ 1462.122917][ T31] genl_rcv+0x28/0x40 [ 1462.126954][ T31] netlink_unicast+0x82f/0x9e0 [ 1462.131716][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1462.137018][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1462.141947][ T31] ? skb_put+0x11b/0x210 [ 1462.146260][ T31] netlink_sendmsg+0x805/0xb30 [ 1462.151042][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1462.156516][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1462.161468][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1462.166820][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1462.172099][ T31] __sock_sendmsg+0x21c/0x270 [ 1462.176800][ T31] ____sys_sendmsg+0x505/0x830 [ 1462.181556][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1462.186871][ T31] ? import_iovec+0x74/0xa0 [ 1462.191364][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1462.196088][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1462.201311][ T31] ? __fget_files+0x2a/0x420 [ 1462.205952][ T31] ? __fget_files+0x3a0/0x420 [ 1462.210641][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1462.215593][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1462.221063][ T31] ? do_syscall_64+0xbe/0xfa0 [ 1462.225772][ T31] do_syscall_64+0xfa/0xfa0 [ 1462.230279][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1462.236227][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.242313][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1462.247157][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.253053][ T31] RIP: 0033:0x7fd7d8f8efc9 [ 1462.257509][ T31] RSP: 002b:00007fd7d9ea9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1462.265987][ T31] RAX: ffffffffffffffda RBX: 00007fd7d91e6180 RCX: 00007fd7d8f8efc9 [ 1462.273955][ T31] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 000000000000000a [ 1462.281934][ T31] RBP: 00007fd7d9011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1462.289970][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1462.298081][ T31] R13: 00007fd7d91e6218 R14: 00007fd7d91e6180 R15: 00007ffea93a4108 [ 1462.306084][ T31] [ 1462.309106][ T31] INFO: task syz.0.10958:10652 blocked for more than 144 seconds. [ 1462.317001][ T31] Not tainted syzkaller #0 [ 1462.321943][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1462.330692][ T31] task:syz.0.10958 state:D stack:25728 pid:10652 tgid:10650 ppid:4842 task_flags:0x400140 flags:0x00080002 [ 1462.342679][ T31] Call Trace: [ 1462.346002][ T31] [ 1462.348954][ T31] __schedule+0x1798/0x4cc0 [ 1462.353454][ T31] ? __lock_acquire+0xab9/0xd20 [ 1462.358360][ T31] ? __lock_acquire+0xab9/0xd20 [ 1462.363293][ T31] ? __pfx___schedule+0x10/0x10 [ 1462.368204][ T31] ? schedule+0x91/0x360 [ 1462.372441][ T31] schedule+0x165/0x360 [ 1462.376618][ T31] schedule_preempt_disabled+0x13/0x30 [ 1462.382065][ T31] __mutex_lock+0x7e6/0x1350 [ 1462.386704][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1462.391470][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1462.396244][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1462.401286][ T31] ? stack_trace_save+0x9c/0xe0 [ 1462.406152][ T31] ? radix_tree_lookup+0x240/0x290 [ 1462.411254][ T31] genl_rcv_msg+0x10d/0x790 [ 1462.415805][ T31] ? __lock_acquire+0xab9/0xd20 [ 1462.420643][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1462.425681][ T31] netlink_rcv_skb+0x208/0x470 [ 1462.430431][ T31] ? __lock_acquire+0xab9/0xd20 [ 1462.435315][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1462.440341][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1462.445695][ T31] ? down_read+0x1ad/0x2e0 [ 1462.450125][ T31] genl_rcv+0x28/0x40 [ 1462.454109][ T31] netlink_unicast+0x82f/0x9e0 [ 1462.458941][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1462.464237][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1462.469206][ T31] ? skb_put+0x11b/0x210 [ 1462.473441][ T31] netlink_sendmsg+0x805/0xb30 [ 1462.481198][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1462.486555][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1462.491486][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1462.496795][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1462.502071][ T31] __sock_sendmsg+0x21c/0x270 [ 1462.506779][ T31] __sys_sendto+0x3bd/0x520 [ 1462.511286][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1462.516323][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1462.521606][ T31] ? exc_page_fault+0x82/0x100 [ 1462.526387][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 1462.531662][ T31] __x64_sys_sendto+0xde/0x100 [ 1462.536446][ T31] do_syscall_64+0xfa/0xfa0 [ 1462.540944][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1462.546151][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.552204][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1462.557010][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.562911][ T31] RIP: 0033:0x7f35f9390e5c [ 1462.567393][ T31] RSP: 002b:00007f35fa174ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1462.575844][ T31] RAX: ffffffffffffffda RBX: 00007f35fa174fc0 RCX: 00007f35f9390e5c [ 1462.583802][ T31] RDX: 000000000000001c RSI: 00007f35fa175010 RDI: 0000000000000004 [ 1462.591842][ T31] RBP: 0000000000000000 R08: 00007f35fa174f14 R09: 000000000000000c [ 1462.599854][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 1462.607840][ T31] R13: 00007f35fa174f68 R14: 00007f35fa175010 R15: 0000000000000000 [ 1462.615845][ T31] [ 1462.618866][ T31] INFO: task syz.2.10959:10657 blocked for more than 145 seconds. [ 1462.626743][ T31] Not tainted syzkaller #0 [ 1462.631704][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1462.640404][ T31] task:syz.2.10959 state:D stack:27872 pid:10657 tgid:10656 ppid:4258 task_flags:0x400140 flags:0x00080002 [ 1462.652349][ T31] Call Trace: [ 1462.655667][ T31] [ 1462.658602][ T31] __schedule+0x1798/0x4cc0 [ 1462.663103][ T31] ? __lock_acquire+0xab9/0xd20 [ 1462.668007][ T31] ? __lock_acquire+0xab9/0xd20 [ 1462.672850][ T31] ? __pfx___schedule+0x10/0x10 [ 1462.677728][ T31] ? schedule+0x91/0x360 [ 1462.681964][ T31] schedule+0x165/0x360 [ 1462.686148][ T31] schedule_preempt_disabled+0x13/0x30 [ 1462.691599][ T31] __mutex_lock+0x7e6/0x1350 [ 1462.696272][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1462.701053][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1462.705801][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1462.710832][ T31] ? stack_trace_save+0x9c/0xe0 [ 1462.715800][ T31] ? radix_tree_lookup+0x240/0x290 [ 1462.720929][ T31] genl_rcv_msg+0x10d/0x790 [ 1462.725489][ T31] ? __lock_acquire+0xab9/0xd20 [ 1462.730352][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1462.735438][ T31] netlink_rcv_skb+0x208/0x470 [ 1462.740198][ T31] ? __lock_acquire+0xab9/0xd20 [ 1462.745043][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1462.750124][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1462.755470][ T31] ? down_read+0x1ad/0x2e0 [ 1462.759883][ T31] genl_rcv+0x28/0x40 [ 1462.763848][ T31] netlink_unicast+0x82f/0x9e0 [ 1462.768649][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1462.773932][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1462.778922][ T31] ? skb_put+0x11b/0x210 [ 1462.783184][ T31] netlink_sendmsg+0x805/0xb30 [ 1462.787992][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1462.793273][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1462.798448][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1462.803776][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1462.809166][ T31] __sock_sendmsg+0x21c/0x270 [ 1462.813846][ T31] __sys_sendto+0x3bd/0x520 [ 1462.818396][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1462.823429][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1462.828786][ T31] ? exc_page_fault+0x82/0x100 [ 1462.833565][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 1462.838890][ T31] __x64_sys_sendto+0xde/0x100 [ 1462.843647][ T31] do_syscall_64+0xfa/0xfa0 [ 1462.848171][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1462.853352][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.859417][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1462.864077][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.869986][ T31] RIP: 0033:0x7ff649590e5c [ 1462.874388][ T31] RSP: 002b:00007ff64a4a2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1462.883026][ T31] RAX: ffffffffffffffda RBX: 00007ff64a4a2fc0 RCX: 00007ff649590e5c [ 1462.891051][ T31] RDX: 0000000000000028 RSI: 00007ff64a4a3010 RDI: 0000000000000004 [ 1462.899062][ T31] RBP: 0000000000000000 R08: 00007ff64a4a2f14 R09: 000000000000000c [ 1462.907050][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 1462.915018][ T31] R13: 00007ff64a4a2f68 R14: 00007ff64a4a3010 R15: 0000000000000000 [ 1462.923026][ T31] [ 1462.926140][ T31] [ 1462.926140][ T31] Showing all locks held in the system: [ 1462.933844][ T31] 1 lock held by khungtaskd/31: [ 1462.938729][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1462.948673][ T31] 2 locks held by getty/5588: [ 1462.953349][ T31] #0: ffff88814c7390a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1462.963336][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1462.973468][ T31] 1 lock held by udevd/6766: [ 1462.978058][ T31] #0: ffff88802554a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1462.987315][ T31] 2 locks held by syz.4.10955/10639: [ 1462.992580][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.000795][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.009784][ T31] 6 locks held by syz.1.10956/10637: [ 1463.015060][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.023282][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.032280][ T31] #2: ffff888025544270 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 1463.042835][ T31] #3: ffff888142f26928 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 1463.052323][ T31] #4: ffff888142f262c8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 1463.064469][ T31] #5: ffff888142f26300 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 1463.076928][ T31] 2 locks held by syz.1.10956/10641: [ 1463.082219][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.090444][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.099433][ T31] 2 locks held by syz.3.10957/10653: [ 1463.104700][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.112908][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.121905][ T31] 2 locks held by syz.0.10958/10652: [ 1463.127200][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.135455][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.144441][ T31] 2 locks held by syz.2.10959/10657: [ 1463.149735][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.157933][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.166945][ T31] 2 locks held by syz-executor/10661: [ 1463.172296][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.180498][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.189505][ T31] 2 locks held by syz-executor/10663: [ 1463.194880][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.203130][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.212140][ T31] 2 locks held by syz-executor/10674: [ 1463.217563][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.225777][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.234765][ T31] 2 locks held by syz-executor/10679: [ 1463.240168][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.248412][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.257390][ T31] 2 locks held by syz-executor/10682: [ 1463.262741][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.270933][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.283155][ T31] 2 locks held by syz-executor/10707: [ 1463.288560][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.296765][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.305800][ T31] 2 locks held by syz-executor/10709: [ 1463.311173][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.319415][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.328415][ T31] 2 locks held by syz-executor/10719: [ 1463.333768][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.341967][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.350967][ T31] 2 locks held by syz-executor/10722: [ 1463.356514][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.364730][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.373735][ T31] 2 locks held by syz-executor/10730: [ 1463.379122][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.387313][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.396282][ T31] 2 locks held by syz-executor/10752: [ 1463.401631][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.409827][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.418843][ T31] 2 locks held by syz-executor/10754: [ 1463.424212][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.432403][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.441894][ T31] 2 locks held by syz-executor/10771: [ 1463.447317][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.455543][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.464527][ T31] 2 locks held by syz-executor/10773: [ 1463.469929][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.478116][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.487108][ T31] 2 locks held by syz-executor/10775: [ 1463.492491][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1463.500714][ T31] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1463.509713][ T31] [ 1463.512038][ T31] ============================================= [ 1463.512038][ T31] [ 1463.523466][ T31] NMI backtrace for cpu 1 [ 1463.523491][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1463.523512][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1463.523523][ T31] Call Trace: [ 1463.523532][ T31] [ 1463.523541][ T31] dump_stack_lvl+0x189/0x250 [ 1463.523569][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1463.523587][ T31] ? __pfx__printk+0x10/0x10 [ 1463.523619][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1463.523645][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1463.523670][ T31] ? __pfx__printk+0x10/0x10 [ 1463.523693][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1463.523718][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1463.523743][ T31] watchdog+0xf60/0xfa0 [ 1463.523771][ T31] ? watchdog+0x1e2/0xfa0 [ 1463.523798][ T31] kthread+0x711/0x8a0 [ 1463.523821][ T31] ? __pfx_watchdog+0x10/0x10 [ 1463.523841][ T31] ? __pfx_kthread+0x10/0x10 [ 1463.523861][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1463.523885][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1463.523901][ T31] ? __pfx_kthread+0x10/0x10 [ 1463.523920][ T31] ret_from_fork+0x4bc/0x870 [ 1463.523946][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1463.523976][ T31] ? __switch_to_asm+0x39/0x70 [ 1463.523995][ T31] ? __switch_to_asm+0x33/0x70 [ 1463.524013][ T31] ? __pfx_kthread+0x10/0x10 [ 1463.524032][ T31] ret_from_fork_asm+0x1a/0x30 [ 1463.524069][ T31] [ 1463.524077][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1463.668773][ C0] NMI backtrace for cpu 0 [ 1463.668791][ C0] CPU: 0 UID: 0 PID: 16 Comm: rcu_preempt Not tainted syzkaller #0 PREEMPT(full) [ 1463.668809][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1463.668819][ C0] RIP: 0010:__lock_acquire+0x799/0xd20 [ 1463.668844][ C0] Code: 84 34 05 00 00 83 bb 10 0b 00 00 00 48 89 df 0f 84 17 ff ff ff 48 8b 3c 24 4c 89 f6 ba 07 00 00 00 e9 48 02 00 00 45 8b 66 20 <48> 83 7c 24 68 00 4c 8b 6c 24 10 74 53 83 bf 28 0b 00 00 00 0f 8e [ 1463.668860][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00000046 [ 1463.668875][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff933a9801 [ 1463.668887][ C0] RDX: 0000000000000008 RSI: ffff88801c2c65f0 RDI: ffff88801c2c5ac0 [ 1463.668898][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff81ad4496 [ 1463.668909][ C0] R10: dffffc0000000000 R11: fffffbfff1f3c16f R12: 00000000000c00fc [ 1463.668922][ C0] R13: 0000000000000000 R14: ffff88801c2c65f0 R15: ffffffffffffffff [ 1463.668934][ C0] FS: 0000000000000000(0000) GS:ffff888125d0e000(0000) knlGS:0000000000000000 [ 1463.668948][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1463.668959][ C0] CR2: 000056178f2c6000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1463.668974][ C0] Call Trace: [ 1463.668982][ C0] [ 1463.668993][ C0] ? __timer_delete_sync+0x106/0x2d0 [ 1463.669011][ C0] lock_acquire+0x120/0x360 [ 1463.669028][ C0] ? __timer_delete_sync+0x106/0x2d0 [ 1463.669048][ C0] ? __timer_delete_sync+0x106/0x2d0 [ 1463.669065][ C0] __timer_delete_sync+0x11f/0x2d0 [ 1463.669081][ C0] ? __timer_delete_sync+0x106/0x2d0 [ 1463.669098][ C0] ? __pfx___timer_delete_sync+0x10/0x10 [ 1463.669115][ C0] ? schedule+0x91/0x360 [ 1463.669137][ C0] ? schedule+0x16f/0x360 [ 1463.669158][ C0] schedule_timeout+0x133/0x270 [ 1463.669177][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1463.669195][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1463.669222][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1463.669247][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1463.669265][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1463.669291][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1463.669310][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1463.669328][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1463.669350][ C0] ? finish_swait+0xcd/0x1f0 [ 1463.669366][ C0] rcu_gp_kthread+0x99/0x390 [ 1463.669386][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1463.669405][ C0] ? __kthread_parkme+0x7b/0x200 [ 1463.669426][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1463.669448][ C0] kthread+0x711/0x8a0 [ 1463.669464][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1463.669482][ C0] ? __pfx_kthread+0x10/0x10 [ 1463.669498][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1463.669518][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1463.669531][ C0] ? __pfx_kthread+0x10/0x10 [ 1463.669547][ C0] ret_from_fork+0x4bc/0x870 [ 1463.669567][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1463.669589][ C0] ? __switch_to_asm+0x39/0x70 [ 1463.669607][ C0] ? __switch_to_asm+0x33/0x70 [ 1463.669623][ C0] ? __pfx_kthread+0x10/0x10 [ 1463.669639][ C0] ret_from_fork_asm+0x1a/0x30 [ 1463.669663][ C0] [ 1463.669818][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1463.977627][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1463.986723][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1463.996769][ T31] Call Trace: [ 1464.000039][ T31] [ 1464.002961][ T31] dump_stack_lvl+0x99/0x250 [ 1464.007542][ T31] ? __asan_memcpy+0x40/0x70 [ 1464.012124][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1464.017312][ T31] ? __pfx__printk+0x10/0x10 [ 1464.021984][ T31] vpanic+0x237/0x6d0 [ 1464.025959][ T31] ? __pfx_vpanic+0x10/0x10 [ 1464.030455][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1464.035912][ T31] panic+0xb9/0xc0 [ 1464.039623][ T31] ? __pfx_panic+0x10/0x10 [ 1464.044048][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1464.049416][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1464.055570][ T31] watchdog+0xf9f/0xfa0 [ 1464.059726][ T31] ? watchdog+0x1e2/0xfa0 [ 1464.064052][ T31] kthread+0x711/0x8a0 [ 1464.068110][ T31] ? __pfx_watchdog+0x10/0x10 [ 1464.072776][ T31] ? __pfx_kthread+0x10/0x10 [ 1464.077354][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1464.082547][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1464.087732][ T31] ? __pfx_kthread+0x10/0x10 [ 1464.092312][ T31] ret_from_fork+0x4bc/0x870 [ 1464.096896][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1464.102010][ T31] ? __switch_to_asm+0x39/0x70 [ 1464.106764][ T31] ? __switch_to_asm+0x33/0x70 [ 1464.111513][ T31] ? __pfx_kthread+0x10/0x10 [ 1464.116089][ T31] ret_from_fork_asm+0x1a/0x30 [ 1464.120852][ T31] [ 1464.124140][ T31] Kernel Offset: disabled [ 1464.128450][ T31] Rebooting in 86400 seconds..