last executing test programs: 32.64425658s ago: executing program 1 (id=2948): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7105020301088207ff0404ada680a98f0603fc001a6084ec5da49edf91b860753f8bd670377e9bb2"], 0x14) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4}}, 0x0, 0x0, 0x17, 0x0, "bb02a3c364ca41d6357e544524014004000b42a21d7214bf34a6324d6193fcf19b2df3ee818afaa4fb1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe0000000600"}, 0xd8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='highspeed', 0x9) r5 = socket$kcm(0x23, 0x5, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000003dc0)={0xa9e, 0x44, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r5, 0xd) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000883bb05b9dd8de61735f601e291dc434e3e4079968a97d3534a59d3cbef059ef2f2f9268eb282ab60c6c5b6a485f681a9537579c06000000000000004945b50abdca5576c5f5ae06b9866454e7155afaa8bda09d459e3a26bf1f785a93bc86c51f00925e43f36f8d88fcb0596edfab79f030a22f84a9d0"], 0x48) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0018120000000000000000009535e46c3e7d0000ea6a8f3b093b5356284621147bd5e3b7779189c6046660b9b74ffcf709e5f459e1e9e5f1e9413b6d92c563483c4f9588816f1541fa16b73a151adcea408d7e137882d7875dda", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70700000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x15, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000d3e4e393869e40ff7e451aef3eefc22d9f8e97b170325d49885d3e4018457b8652e5b1ca9335b5275aed8f51b5f6ba4f69dd7d390e4fe19013efe70803d08bd67ca41d03f5e11cd8f44dd2b03829dbbe5ecd1c546ac2a2c271b5531866f2d4f0f685d00c27ef890e94ae"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, 0x0, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x7) sendmsg$sock(r11, &(0x7f0000000840)={&(0x7f0000000400)=@llc={0x1a, 0x323, 0x4, 0x5, 0x5, 0x5, @remote}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000001c0)="ca949cdb81353da1233b421ccd20cfedff7dfdef3559c9dd73cc6a8f066e04bc133c30e8eae130a347b7bd63ff799fa28d", 0x31}, {&(0x7f0000000640)="d93265c546593832d3dd8b488f930106b891ecf65a090a1ab8e89e709839bf0456345eb9bd701add34517aaf0a3252e8f436fdb2e80487f8e573e1d6e90f75c19c376990bd1ef254b34da26fe0982aa90d74764a8b7132193a78dad5e7e2fbece112dba45c19a851f2ca0be8a716697ff2754ee06c839c5f5634f17ddbf8993bd1d25b89b8978a06ce517a182f08dc5d19f5be0ebe547fdf8b60bb910898f1a3a501073f3a2e5e1649655b2cbb9a6579fc6c262e0915b229d4230543c48490e333f45d42b0ec253839802c01d8a99615e76bb3560bb5bb0fda819b665c85b61808ab05d625", 0xe5}, {&(0x7f0000000280)="07677ddcf92ae643b3686b167a51a65867e257dd7f159dce3c1fb2241b5e288915e64431b494b036599a4bd036204c0c40a2ebce646954ae47c075ec55844f3e", 0x40}, {&(0x7f0000000780)="28de6f1ad3e58b953955a358ee4b57b84df4ac707a96cdd586ee985f24d0c4d55535492e9ede606b4c74c5b75afd3183d6147dd4e8996664a6791eda1e42642fe742424d434b492d70dbb3b538fad53ff91f9471b3c4a87f0cabc1fa6254053baa03404c81512bcc03475835d0a409783938a8636f1aa0bade0e51b3c2d3faed448db8f15f82507bf870dd5ee3c01af64f0f8ff0ac3910763adab05425b126557de7c945e3a375321fd7605e547d20b152a2081f813001", 0xb7}, {&(0x7f0000000480)="c75b4add2618f6d61d167b0a952a15e8ad65748cdae8a33e123618f389", 0x1d}, {&(0x7f00000009c0)="35e098e3d4982e51a0232e32ce658c34bccd59d40e30abe01f8768826cddbb9bfaf1eeadefd3b5620145d6e48461982897a01c5e8c40b7a6dc5f502daf690906bf335f5c4f13cb8a24955a5bc6711c3eabfc5f9e706662805d2f07d14426b1a6adf78b388979126916848d7a865dbeaf84399207e0d4c8210147a478aa02eae1f590ea8a7585492b727d66e9c25b681032bae0d536db25ba7901e8b8babc8a223aade81e477958d1635270e491ea464f416bed3baed0d52788a4d3725ef4d712182e51adcc029d66790fe32288f1e3be760fab59a2a33175810517b6fffeebb762662da6f738e05b7f653977ee0f59cf9da7e7ab99b720", 0xf7}, {&(0x7f0000000ac0)="bb7d12d5654446c4afdae806a43da38b328519b7e95aaa5fb5bbe9185cb3e18457238f1015785af506da010f085476346fd336c3e8705709cc6f4856303a19194d81e95a87aa35d7a884db6839e28d1f12b898c5e45bad189a41b32c93e127f3d27a0deb8d7a66341145e2a11bf6319489a21d155dd2f2ba382d2357dd7cbdc4cb4df073b343ffc2f5e5bf09b3373cd52d300ee4578d39e4dc4142c379f69cec1334bf4849006f568ba4aa8b116fe818e04924073150d995aa19a11d8dd6a64b", 0xc0}], 0x7, &(0x7f0000000c00)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xdaf}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x78}, 0x800) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 23.177291506s ago: executing program 0 (id=3023): r0 = socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc) close(r1) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x6, 0x4, 0x1}, 0x50) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@dellinkprop={0x38, 0x6d, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021a, 0x2800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc04c065}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="920a050000000000480012800e0001006970366772657461700000003400028014000700ff02000000000000000000000000000114000600fe80000000000000000000000000003508000100", @ANYRES32=r3], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 23.133674676s ago: executing program 4 (id=3025): openat$pidfd(0xffffffffffffff9c, &(0x7f0000002340), 0x20100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.962467847s ago: executing program 0 (id=3026): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010013000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 22.958654426s ago: executing program 4 (id=3027): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff038}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa20000000000000702000078ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xfdef, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000002900)=""/4120, 0x1018}, {&(0x7f0000001680)=""/114, 0x72}, {&(0x7f0000000000)=""/84, 0x54}, {&(0x7f00000005c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/172, 0xac}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0xd3a7}], 0x4, 0x2000, 0x0) 22.826450526s ago: executing program 4 (id=3029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="04aa1cc1ae30"}) close(r0) 22.806302867s ago: executing program 0 (id=3030): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='blkio.bfq.dequeue\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e98021422576e1f8f1d2ac6dd60fa7599eba67979a399e581581834335637dd5d84389402a09f581c09118cfd9d9c3310605ef0e1a48220cccc8f2366439a2c1b7086783e30fcbb", 0x48}], 0x1) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e98021422576e1f8f1d2ac6dd60fa7599eba67979a399e581581834335637dd5d84389402a09f581c09118cfd9d9c3310605ef0e1a48220cccc8f2366439a2c1b7086783e30fcbb", 0x48}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e1f, 0x0, @dev}, 0x20, {[0x0, 0x4, 0x0, 0x897, 0x0, 0x2, 0x80000000]}}, 0x5c) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000100000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'xfrm0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'xfrm0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r7, 0x25, 0xc, @void}, 0x10) write$cgroup_subtree(r3, 0x0, 0x3261e) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[], 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a00070072", @ANYRESDEC=r0], 0xf4}, 0x1, 0x0, 0x0, 0x20008005}, 0x814) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a00070072", @ANYRESDEC=r0], 0xf4}, 0x1, 0x0, 0x0, 0x20008005}, 0x814) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffff239, 0x3, 0xfffffffffffffffd, 0x20000000000000}, 0x0, &(0x7f0000000380)={0x3ff, 0x9, 0x0, 0x20009, 0x0, 0xfffffffffffffffd, 0x7fffffff, 0x1}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffff239, 0x3, 0xfffffffffffffffd, 0x20000000000000}, 0x0, &(0x7f0000000380)={0x3ff, 0x9, 0x0, 0x20009, 0x0, 0xfffffffffffffffd, 0x7fffffff, 0x1}, 0x0, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) 22.428770259s ago: executing program 4 (id=3032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000890}, 0x10000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0x2c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2c}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x20}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x7}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x3ff}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}]}, 0x64}}, 0x48094) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x74) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0xa04, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe4, r4, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x81, 0x2}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa1, 0xac, "12951e173ce879be3751d2a403049340150de9059151322813eea28259fc71adb5697cee501d2a9de35b80bdca0f89ae9d0ea5e800afe24f4fe66129f5c0947d1a57bf102ee6b6d65e3d9b57e062f78c640747339f02e904115050a81e7608161bcbd7e88b30766aec3bbcab6133a5096f598ec05a65782d89d6ddb6e8488724d21a1af4297364b58be926a024e0b5ac6e1dd933569f029d84f720f456"}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008003}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r7, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44054}, 0x8810) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000ac0)={&(0x7f0000000980), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x58, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x58}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000c40)={{r0, &(0x7f0000000b00)='\xaa\xaa\xaa\xaa\xaa', 0x66501, &(0x7f0000000b40)={@_ha_fsid={[0xa, 0xe086]}, {0x7ff, 0x9, 0x5, 0x6}}, 0x4, &(0x7f0000000b80)={@_ha_fsid}, &(0x7f0000000bc0)=0xfff}, {[0x9, 0x2, 0x572, 0x7]}, 0x4, 0x26, &(0x7f0000000c00)=""/38}) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000cc0)={'geneve1\x00', 0x4c}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000d40)={0x0, 0xf1, "c131fbc633bd0634e67bdb95c0938a04e6c1825484e369d0bcd37c10ede204dc6c8331faa776130530b63beae2e9d965a5d382aa714c896a865a584f4ee260c1e189e36e08533d8cbe981cf389f5c2787ceb44c7e4deecbcb18bd7cdd1a45cf8fc2f9efc51b9f840de776b1885f5e0549a245620d58f77c5deb3677e6758520f74c914caec3c63831837a379396fea34f0ba2da2df5b9c305c428c49a03a2b727065164ae8642fa52249f84692d840c9e969e7c4b3e9a87375eb0ad141be204345ce3e238291fa9f2e8ef191d84c9c61c95209164d746d2af876b19eba4cb07abd23f92cb4a3de50b8efc0130beda84947"}, &(0x7f0000000e40)=0xf9) setsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000e80)={r10, 0x5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x7fffffff, 0x40, 0x3, 0x20040, r9, 0x0, '\x00', r8, r9, 0x1, 0x4, 0x3, 0xc}, 0x50) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000f40), r11) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x58, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x60bc40ec42587f71) sendmsg$NFT_BATCH(r9, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [@NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}, 0x1, 0x0, 0x0, 0x20040001}, 0x4044800) connect$l2tp6(r9, &(0x7f0000001240)={0xa, 0x0, 0x4, @loopback, 0xd4, 0x1}, 0x20) socket$l2tp(0x2, 0x2, 0x73) socket(0x38, 0x2, 0xd) 22.315837661s ago: executing program 4 (id=3033): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) close(r3) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047459, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x20}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004800600000076657468315f6d616376746170080000080001400000000514000000110001"], 0xe8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x400, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5003}, [@IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x34}}, 0x2000000) close(0x4) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.733969768s ago: executing program 4 (id=3036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000014000280040001000800020000000000040004"], 0x40}}, 0x2008040) (fail_nth: 6) 21.61942309s ago: executing program 0 (id=3037): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x121b, &(0x7f0000002d40)=ANY=[], 0x0) unshare(0x400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x6) r8 = accept4(r7, 0x0, 0x0, 0x80800) shutdown(r7, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)) r9 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r9, &(0x7f0000000f80)={0xa, 0x4, 0x0, @loopback, 0xa7a}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$PPPIOCDISCONN(r1, 0x7439) 21.160619221s ago: executing program 1 (id=2967): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002020800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x1}, 0x28) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) 20.934500051s ago: executing program 1 (id=3040): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x1b, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 20.895186997s ago: executing program 2 (id=3042): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x20, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}}, 0x20}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800001, 0x25dfdc00, {0x2, 0x1f, 0x51, 0xfe, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 20.481226994s ago: executing program 2 (id=3044): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f0000000700), 0x0, 0x10, &(0x7f0000000780), &(0x7f0000000800), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x13, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095", @ANYRES64=0x0, @ANYRES64], 0x0, 0xaf000000, 0x0, 0x0, 0x727c45cd4283345, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="5c0000005a00200029bd7000fedbdf25000800010003000000080001000200000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000100030000000800010000000000080001000300000008000200", @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x880) sendto$packet(r1, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000084) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="0a006558bbbbbbbbbbbbaaaaaaaa2abb86dd6d002000009c1100fe80000000000000000000000000001aff85"], 0xd6) r10 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=@newqdisc={0x368, 0x14, 0x211, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0xd}, {0xb}, {0x0, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x338, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0xc6}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x8}, @TCA_GRED_MAX_P={0x8, 0x4, 0x1}, @TCA_GRED_DPS={0x10, 0x3, {0x7, 0xe, 0x0, 0x4}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x368}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x11, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800204018000000000000000300000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018160000", @ANYRES32=r11, @ANYBLOB="0000000000000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=""/40, 0xab, 0x28, 0x200, 0x3876, 0x10000}, 0x28) 20.097716418s ago: executing program 3 (id=3046): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x15, 0x0, &(0x7f0000000140)="259a53f271a76d2673004c6588a8ede531835cdf5b", 0x0, 0x80d01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000008c0)=r4, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r3, &(0x7f0000000180)='syz0\x00', 0x1ff) 20.006917641s ago: executing program 2 (id=3047): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x35, 0x0, 0x1}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x19, 0x0, &(0x7f0000001a40)) 19.770751219s ago: executing program 2 (id=3048): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffef010}, {0x6}]}, 0x10) (async) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb0800450000300000000000019078ac1e0001ac1414aa039a268af9b6da4aee00000400004000002f0009ac141410ac1414bb"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18001700000000000000000000000000950000000000000094488174b0863396846007d3b22c9324988ce0238d47a48d19c278c4b73c96ee9469f281dc089fc1c4ba44e503b4892a427fbaa832c580ae81a90a4216251087a78da67074616c3dd43dafa6366baa00a2db7cecfc8c1882daded3f2a31b186939a39cd9bb379d62afabb5b77e6ef085a1b5c18bd213ee264de9f7121b3c47bae24eb52653ed7c27aa64d3dae35686dc7fa40c5703bb4ad465412a7f2343bd84b8593ecc49cf775f48b29f53d7f4fc13645687b294393b26e418316e35bdb52ee56cab35e1e18637e220ccb60e72207a24e74ef76caa756f2614af400a51ae839571ae9f4628ebbc7f3a353b76e46092d0df2dcbf66a9a"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x74, r3, 0x1, 0xffffffff, 0x4000000}, 0x74}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008040) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd07, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0xc0) 16.9304508s ago: executing program 0 (id=3049): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRES8=r0, @ANYBLOB="020000001400010020010000000001000000040000000002140001000000000000000000000000000000000182fa400d94221c2e"], 0x4c}, 0x1, 0x0, 0x0, 0x401}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.830187377s ago: executing program 2 (id=3050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) socket$packet(0x11, 0x3, 0x300) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='io.stat\x00', 0x275a, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="0500", 0x2}], 0x1}}], 0x1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x0, 0x6, &(0x7f0000000500)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000540)='GPL\x00', 0x1000, 0x4, &(0x7f0000000580)=""/4, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x10, 0x101, 0xf5}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[r2, 0xffffffffffffffff, r2, 0x1, r2, r2, r2], &(0x7f0000000900)=[{0x1, 0x2, 0x8, 0x9}, {0x1, 0x5, 0x9}], 0x10, 0x6}, 0x94) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x61d8, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000030000000100000f05000000000000000100000005000000004f0030"], &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) (rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x20}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x105e, &(0x7f0000002500)=""/4098, 0x41100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8e400000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xd}, 0x94) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f00000004c0)=0x8) 16.698564349s ago: executing program 2 (id=3051): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x38, r4, 0x421, 0x78bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x48040) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf417}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x6f7, 0x9, 0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)={0x334, r5, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcb3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2682e11b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x66ad}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "cceca2b9b4641e712c6fa0c21badb593e6730c2444a29a"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ID={0x8, 0x3, "aa1b3f65"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x790a3f39}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x167}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x942}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9000}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x42, 0x3, "d4ad7cb44d951b9e8d582eb623969b4239dfa5d40866e75b56dfc006938a737412302d3ebbccd8dda45642cc3b57522b0d43d6b63a75104631678ae0178e"}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6a230d3e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x25}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2ba}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x91}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "bdf86ce003a22089598575c2ea3ffb9fda513e6d1c59189b303dec8c6bb7"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "f68c6c9ac895d4334e7a63687e611f3e9cdf8ea1965b43b6d89e1163d3b473c35c"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x2000851}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000000)) 16.630081844s ago: executing program 3 (id=3052): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x2e584efe32566550, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) socket$kcm(0x29, 0x2, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x4}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0xff, 0x80000001}, {0x6, 0xfd, 0x1, 0x8}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0xfff) write$ppp(r0, &(0x7f0000000140)="1e08", 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000001500)="c0d97953a45dfc043059a811dfe749bd8804500fac8cb4a4c63793de51fc9791fcf43cec631cf93ce8d8dcd320cb2114ac625cc807527b37563adb309b55be4bee5682bcfb2f7385f8570a28991b164f6639579e6ba9860108fc65a9d80e0ebb0d27a7d65004b5fc55e9f19e5aa410b2f8adc64092baa27cc225f0af7a517b93ea7372954ce0829f65ec1bbd24c0edfae579450aa64bc286240ad1ea7cd59532d42af185ed633ff58afa71a45ff7e8325d88d3f9ca38a6", &(0x7f0000002480)=""/4096, &(0x7f00000015c0)="81d7d92d70ee262c287251f2a2467411b79cfe866ca41f413fd253e99a67c7dbf74fc20839f9f98d64c40280f60f05f89dee602ad09c0d88d2bbc351038eaad95294ba85aff3976c8117dcdafbe4f89772dbea454171a55a2c915af8323e5108c884da4f139fb5b221d21172ae33e2d2eaeeef33f8e43a7297dc094d", &(0x7f0000000240)="3047c6188bab0e168b09b8a4f1f728282ddab4782d4a3c3883554e0ea6b4c0b0", 0x6, r9, 0x4}, 0x38) 16.466481336s ago: executing program 0 (id=3053): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310329bd7000ffffffff09000000080003", @ANYRES32=r2, @ANYBLOB="080006"], 0x24}}, 0x4000) 16.30067794s ago: executing program 3 (id=3054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4890) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 16.211003338s ago: executing program 1 (id=3055): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0x94c, 0x2c, 0x107, 0x70bd27, 0x25dfdbff, {0x4, 0x7c}, [@generic="5fff88ddbe0affc1855965da490b30b82ab1918c77a77391492777f1ce6544de87c8408fcf4d786ae6f4ea41774ec82dfe8e729cd0aab1fa801f5e268862b63bf061da82d4eca3e98fab66920452cf9a9fbd2721dc0c5190dbee529cb81cd79b849147518503d135b93ecd5ae3b6db30d0ea659cded6c48d7d6413c6169c0890dbe3fa5968ab45ce6f3b1505a75ae91abdcccf5d013aebfb9f62fad5fe02e1b53126bfcbbdd8aa238a88223845b428cd6c00383cacac02a2968bdc06bd", @generic="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"]}, 0x94c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="94010000100001002bbd700000000000fc010000000000000000000000000000ff0100000000000000000000000000014e22ecdf000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000002b000000ffffffff000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000008fcffffffffffffff00000000000000000000000000000000080000000000000000084000000000000000000000000000000400000000000000000000000000000000000000000000073500000a0004002c0000000000000058000200"], 0x194}}, 0x4050) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000080)={{[0x800, 0x1, 0x9, 0x1]}, 0x0, 0x2, 0x4, 0x0, &(0x7f0000000180)=[{{@align=0x3, {0x2, 0x2, 0x7}}, 0x792, 0x0, '\xb6\\/*\x00'}, {{@align=0xb, {0x4, 0x2, 0x7, 0x10}}, 0x9, 0x0, '\x00'}, {{@align=0x3, {0x5, 0x3, 0x101, 0x9}}, 0x5, 0x0, '@-,$\x00'}, {{@align=0xfffffffffffffffd, {0x8, 0x6, 0xe2e, 0x1}}, 0x390c, 0x0, '-\x00'}, {{@_ha_fsid={[0x4, 0x7fffffff]}, {0x0, 0x1, 0x7, 0x3}}, 0x8, 0x0, '%)\x00'}]}) sendmsg$inet_sctp(r1, &(0x7f0000002440)={&(0x7f0000000000)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000000040)='\b', 0x1}], 0x1, 0x0, 0x0, 0x24040000}, 0xc0) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000700)=@in={0x2, 0x4e1d, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000740)="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", 0x628}], 0x1, 0x0, 0x0, 0x24040100}, 0x4000050) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000004dc0)=0x2, 0x4) 16.074422316s ago: executing program 1 (id=3056): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000001180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b703000000000100850000003500000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) sendmmsg$inet(r6, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="7fe1b33315b1fd8cd2523811f49a284c7da2c2dab8d7a3562386f41e36be53b97c6eb951e4cd864a0d49c5251ea819d1fb396061defd1768694a459ea9b8e4c53f8b742f21f50ec2a79795f2e2f94bf0da0d30ad6eac955cedbf65b0838294e2bcea1cbd94f308f0774bd9f4b60e9d6a1cf16cf7e6f45924e9d285da684857411a5b3d53f20d6832d37683ab1b1f2a8221086025", 0x94}, {&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396bab3afec71f9767193f0b5309295e6d6188ce88368c55c5a2958d8800a3c2b81faff89887512fde0509148e68ab9788a6a6f8513e442607a7154e11fa396094eb9cc404b6b408c2c38b1ad77e8f41cbe776bf9a3e6961f39350c4a0c157f4dd8ed04ed53312ab6db19962fdc0d0f8cf23aff69951ac76e2deb4f3e8cd737a4f232eb5554096503e38701", 0xc0}, {&(0x7f0000000400)="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", 0xeef}], 0x3}}, {{&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b3764d9d8071a63907858eec8443bec7adaaea2c917ac41790a95d62511755a808b50539fb719daae0341b7d172229c58deb7f2d95c793aee3365bd04cc81c838294ad5237c74cd19b3ea8431a190ea1caf0524e623f56791d2d55bf1a24c7c7b42198afd133af01bbbd167d04159bceb80648e2e740f1d58b762d50ed842933815a8f167dc01363284d8f27e69a83509fd9f1dd0cdeca61ffdb9524f408d698154fbb2ff5381369933e1815ed1703e58405478629df4311893798ead4acd67bc6ab48", 0xc7}, {&(0x7f0000001540)="2aba9e4cc9b55274aa3a5dbd35f30d62249f7226e2ffa535df463037a323c732a94981bd91b9d134d79106da4929ddf57f26696b8911da0e8126ca4c7a6f10192c1ef6dc0191c8a10b6526df22206120b8767c1a1ec3be23fe90f3e3c0092aca4116e03096593f7964ac3c077036e624ff82f8348afba5254a1105", 0x7b}, {&(0x7f0000002a00)="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", 0x14f}, {&(0x7f0000002980)="c61fc952e32af9d06ed135ef945ba121afc7dcbb95e00a15a1aebe2c9d63854ab7d8f30b55ce072b49867372e0c57347c9f93f5d57bbf8ab12ae426441b805834fd2c17e1de7d5e36d8fc36254b673a7ca8be8800bfd25196e325a8beb921abd1654c40b52cd19a01844", 0x6a}], 0x4}}], 0x2, 0x40) close(r6) write$cgroup_devices(r3, &(0x7f0000000080)={'c', ' *:* ', 'rw\x00'}, 0x9) r7 = socket(0x40000000015, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r9, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @loopback, 0x1}, 0x7) write(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="b3070d5b19aa16a7489474168245f80bbfa179c79d3bffb79761ab0d8e009e9b42b881f247de05b072442debf7bc0ed4b393a763a2bf3d12b851fd541f7a7169bf1fbd1640409fb8f29f118ac55c111bb188b49c7bdb0b55d9b03ef63529493d44c4617aa69a7fe28b6438a324f15e3eb21a0f5a233ee9e9071b7d746b5ee5ec93c8f26de857054995b60874a9d27726d9c069ab61a1623c8951aeaabe0e5d7538f7dbd8bd0628798f4622ee0f72d66106093500348e147e9dcee5dae63af07a6fb007e4cf9d6d6359a252aa81ec8a9caefdcb28f79094b5cab4e154a22c44bf971c039f2d566c4aec66cebca90bfe16ada4b03ffc7e90b023eec64cce3c0351597828adc485980b2aaddd930e4e424e2d0314f7fe17c3092ec5f5e54b39844e714661ac9edf447a2e3dc89f110e54528a4e22d8a86585b4601028b2bbbb4f70b7ac3b6c7129d4d0c8ce0b02c3c1f5e4128a6d315002443ac28bdb0c9d7abe3e4286ec1055688ec813b9979121e900aea3693b9c8b427bb69576362dfb258f8df59e0dbefd7034c1e887a06731e1cc25113331eab4b0d022a63107f774b4a631fa71e16e290881c25fe6af9775fd65359e2af043ec9caad726b0ce923e3c6ef9d081f967e8ef34ef0329b1c84b7bf024bda4cfda93debe4ba05de3e1728c8e22cb844c74f8d769929e6295a16bea0c50727fa33b3c10d2e53e66b20761d9fc6ef5f24b311ff8a4239f81fba4a808a08785c8cb22ac1c4a06f7b3ce232806dfb41c5aa694cf55b9872aa2c53175a76a3427dbb5c00c15ed62686a048edba6bff31ef1a84d711eddc76a4db44c880f26a79da84b9f9cfaaf909267b67a9c853ea9eb1fe586db67a98dcf37a15d5295857ee0bb4e8a4b551f2629bfc72592c0854266245b837a91f3eefbc2612ee909fa43209d02af7d3b83ec13e5dbbfe1a34a8b45ce49722a5369c3c1b8bccd5386cf57baae0d5c4a355d5a729ddce5c0be3aaafaffa497dd6b7f363b5e53f3849c7a2013e0db1ca5d2d93b0a809d1c27306883edaf11b73199275301a9d28cb3e9b267e3342fad165a13f3e44d0d53afc95f44474d5761416489612b6054c17a383a03782bf380bf347742f2845be2df988310378dad9bbf1980a4a84a5e4f10b3a28db2e7829e25640b833b0cf6675eba6601502a7ae3177860dac93726ad9adabc6d98ce30a4cb01ce01b6309982898b617f20c55510253405d93e70fbc4c9ded36bacff16e49d9f70d852c41cec96d6e4f6c44167ed6990d04e63f15fd934e6120f9189fd04e8ff4554fe23751dea387ab1ef5b0973d9510c4cbb1fe89f80d7875c16b2ff9a746f8e2b4e9dc5594712c511dea6bf63c4d9fd7114092ffdcfc16dde14359b2fda592214ad728b4e19132970be209ed98dda93c1c3abe8cffef35679b61e9ac56802bbce8509a047415a1badd9c4a359b6971d73d994e5825115fffd6f389144fdec3bb012f9f392fee8310a847192dc6ff4247a6ba44ca75ed0bc40b50767407a7d6420018b2bd1dc9ed66e11fe5c7b768ff7aae6d1ae62516a0ad980f366b6f3ea5d9e407b3e88869749b15fe400509d70256d82b2d5428b2912e648ebe7022d6f3bfc8d0c9423cba893efc65394e63a56269b7a17f69294000b0bd27902730356f238b868803b7ff4da31013ad66e22c5c7afa1b370fd2d10e0175a3bfba66d88e29fb371998424be80737bfb38db011efc5d63f0fa17efcd90a5cd2d310ab8e4ff2631dc2fc2be5404d4026fb916c1cd481dd70ea1755813574a0ec1d01b1411c7a7a69f6ac972487f9b470090c419d1c57d8641d6f4cd10b1d55ce621ed8e14f28f11b579a6408bbff9fc13cf6fb07c22770e65ed772e790844ea608e38ae48302efb09c173d8c653aaf0c6be98d9a2d166c9d318dfbb8f06b9a241ac72d68a82dbf7f3255e2cb0af5227d854a71b7d4c89fe943db9c0c19ac1dd5264bf8515b217f1de94b5da0f3a4a73f587a71bad13e447eb5ca4d76d3645d749f2ba4b46da62a7717e544cfb025b364c5d19ec6330bc6fdf161a153c61720031dfa170f0c77de03b36fa898e8f00dcb04c21db7362200fae366363f82a2d7292e0d67b72f64e227fdd91edd3c455e7341a9a9b8832631891b563a8d064955d0074a216062147414c2c8badd2c547a51734a96c215d82c68f3eeba0f9a4954e479a0534a8fd131a4b9b1d069322907c1b49e5c68b86079841b34867ae69d42f9843a9c9d290d0ea9ab4068a58e9c76588391b12420af3d9e3d8bf672f3f0ac88a8c269a9570576f6a1a5a39d63cdf7e459a620af3fe5b6fdc7576732bae1f8ab81d5294562d5e82f1273ba1f2cc1f336f2ed3b4a9901dbb3e86f3859750ef51db3601247fcd157072bc3843aedb474433c4694942f1c13356d4cfbf56d5834f9c0250044a017137ae689db25feec05600827c11955e492fb67dc2239b75d7ecc3b279901670ef2ca4d2010cf7e8f08107781b2da20d716619117191f8df96cfe9a81ef18ec0ebcc99cc3558830265d0346f9767ddb6c2fbb2495a9b8ee91f82a1bea2324ec011f45f1462aa216c209186229c233006600414628beb9738efbdad2601cac6b2b7e4c803719d6b826c44e9ae057711f067de8b0f0d1ae2a2f78936a44e2dd9e9b19244ad4b07e6cb870b594fa6f86012f699455ee86aebab98c69f332876fd820f11e982b6023325ab335a28cdceb7ce3bc4706856b4aa37b67fc1a7dc1ce4d88b277db25ebad94140b6107310a4f6e597e8895277c749687e89f0a69bf3cb1de8b459b400806fa8fc5ba4441dce50d3ff057467285e4c21cb12bac00791c3ad4f27c46c58d15de6e9cd746acd26a4fbb7da8849aa6f423dbf3974c1c4610804b5e3e46d5d6d945415e22c039481224a30cbe2b3e271b9f50297afd5df882e5b96fe31acd3e92b8fc5d0cec29915946fd0c02bc2775ad54edfb2715c9e0e197e28e0e1a6505fafec1f24d848c18afc2acb48992cab420200e06db88bc50b985932b40b16bddfdf29480fbddf106f8a5caf40d0304e45ab7c19cea65e834ef6742c413563657b8d7c27b30f85fab4fc041b50c532ea646b0755437603f1a05f87b8d67976f3ae9e729c3fb8ddb91f26d7b26f003c1a8efae40acb42360ea5144d550203e38c4e0329e6c42353b08ef1278dc529cf272b2f8e32b578f6d874fbae55f12db0081a2a6b543a418e74b121e1698eadb8f1ef214d38c403768f4df4b96b2a97c18c584b8a81f3fedd0b0653c9380bb7b42db34217a4b2e57c07de829381de337f65415f794c02192ce775e6788b4d7bf3d06f5e027b89824853b086839c75932dcf6f43c5cfe72b8d89401c8ae441f15337483e46bb09cdf6394f4be8f66415cf842f4567d114dc50f3a2c15b54e4fe65b24bc9ffabe9ce60115f309b510f5433da6fb2cc0d9ff04282b355567841a4c04ffcb47d39d5da114fc167b4e8e35437cf55e7d84b3ef27c7a0390c76643e58691d55196fbd2e3070a9308d76af61c4b43005981ef641be82f6eb80ae69a60ec4e78f99cef86f84bc9ad1101397648dfd15b51dac18cdd46c58f433772c6598364b351e1ea15e21eaa5889ad09e6400c72cb3162034838141a86338ca2f47d0f88d6c0ca13729999d0d7233c7d91bfb8359c5b3e7248f6034a57b28299f6465cddb2622a8c07c221beaa2236a04fb9d3c52e5548d0f0f4506ff8ab3d5e24be3d9d11ac02ff44a8efef9145d16ec9af4fc0cb9d5428e70c62785c9a7bb3d818f7403d2547ff80e9bcd922fe58598590d14eddda8fd07aac6776a6ce015c7dd2cc8eafbd927f7ffc8f519b327e3759e7f41ffee8d4a2121d9b9b4ceb32fd820fff7ad156c74604cab787135cc27b715aa26671fe99a5b9b2f47694f0b8183a266a90ef7c724f95c39e3725e2e54c1bfec568dbf42150ff0cf200c6b22d52ffa932443d62a61e3890cee62516fb0dec3c4d310225ee20a3f29b3dd12f3b1d09225a9a6caf3c2e467f47b92ed3888ea6d7095d8c00a78f36c64a28c2feb102a661e7e4642b8ef4eb3fce7846060873c6a64f76081eb765cd9537d2e08c8bc44d07abc3e77b8e0dd366849d63b11667f5e64b96e89b2ef5fe21b4f5425a7ddc257ddd0202e241060e641341faf01b5ae6577e399fb7714a19add131bf9a89a5d5796140ade0561952c3ff17fc2a6a76efaaa13bd1758d79aa0c85cf6d2617c028ac1f3d5e45a4dd6f0957ebe735e1971251942ebf3927db2254bd5a496eb0a77ad70ced2f70aa837319c454a73041c76c6e01da43bb891140d845528c7c5a26f0dc4dc21d592ef72a105cb3677b9a11a63678882b16aee511b40bd177ec7d3ef272ce23839920c104aafc2f46a99a313a54655bf3ed9fa1492fafb57239ba23ef9325825728ef2d878290f83ac338284b863342353eec1bd132055ebb7d79cecd490b02c8e909cc47ec408f5b8d9571055a7976f54a7ed746e7800ad1f0540ae4046e2256b3afa18f98f28b197ed80f9cdeb2795e41558afd12ae6af37c8911a14235319bca43790c3b6b7b53f63ad85fa83f8f96f5b0460da232f7c239888f352d47b2e8d475d1229afb17143e95e06f786cebdab36d8ce9d281b48562e8b9b00991d1530639a8c5df2ddf58a2c836384b25eac8bf41252fdb8f6a22a88cbe9939fdb098d53a090ecf29e1840bb3b40ee5fc4cabf1fb4014c6aca89f9a781d21a5b14adef25cb2afc83c1f2e3a68ee9994d93f211d3eda73f921911ffec1d558a5e555d8663d3464e866d4985785d621b5fb01767978ee3a7a8356ab681537d17eca71a5dc5d25ab9f182a75b68b650b1a7b0e27b70aacbfe32912bf97ab9e9360f4e6263178c4568da1aede597ffae2ee62fa22fd42e667dac1b48acb807e7083c216a5ec3541cacb8af570fbf050b8f0b93d4f532f110f430d4b08dfbb88e00a6c260a240384ac924096a9d9a17e7580c3304e16ca73f3d6903d72921bba5e4c7a6fce1cb97cf0fc137ba4a1bdcf112e423188c55152559610ed7ae1479db0998bd3cb1ed893e82ff38c958d1e7c693a74ce26254ee515939f96089ccbdc602e225b914fce6b4a6cb193de80328b6eb5d4708405cd7f076d23858ddee1e2c5a68209b0cca0b2f3384dc9c161c62d43597f291162787d0caa3af350f37e76b26e77185aa570a3ff962debd2467abc6e4a06f58753c26edab7718f17f2f57ed7d93dfea748780f57bb1270bb59c9e5f3f9bce8d3c5d2c2f3054313e7987c6e8d0771b923122bc969f7d3fc78c2f3cb04a4c6f75592070773cf2a4573e9c9bd9ac3f28226581f76fd4fd369d99e50c0e35a81617089fb496b2c9c1186fde48682e4a319e4feb7590ce561a9bc4aa1b89910c6d9b124a7b68e9f6706f82eb35e12465fdefccc3e5d8dc11264e3b5baa746ef2822c97b65e6361b26b6c51d1d54a9b1ed5da29bf7717f11abb3d59d7c3b54cd1afd0effdbb73dcb2037f6c73ae29400862877bdae935e354c7b275615192eeb904ac8f1f2d08e83a370714e205f66400a17fe4b6b864d358cbffe04a78d5baeba230956e68569ac3fcd854b639b612095e4e7e405713616d69fca80e18f13b1185f1be523ec08794d326e7c2e218ad94e954e10fa37aa5adadc6a6d6e9e238909e7329b016543ec4e7e648efac549cf156bd4b2b7b3a78cfa9ffcfe4fd5d715d11a3a3105df5a27619200843de421d840a893e94e52d70ddb7a6b06f8c675e4dec51726e41e34cd9aeb753cc8123b5b276cc6e76671821994d802e87e6b4ecc84af312bdd4d7d310e89989a0fe976fba8a48bb71655197adceb140de613d1652e9d61d54bea56573c75ace8403cc5c05e637e225327323bd9e0ac1f8bf933625f07ccd7769235a005c0c738e84225c07651220711e991534cd58c2b1f5a5cecdbfc5feed7f5feb119a064a8bc93b6e680e742c0ba33f27059ca62c192983bcb075211db531d7c4cf85ca7a4f833c01ec1bddca9e4072dc854a7db6788bac2f03a86951621c75b0b5827d3f92f9ffd20633a7d2cd55441fe9fcd1658b4f4799caf995a4cd7aa829dd2e24f40", &(0x7f0000000040), 0x11, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) 16.066981478s ago: executing program 3 (id=3057): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x51) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 15.958117723s ago: executing program 3 (id=3058): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x10) write(r2, &(0x7f0000000100)="1800000016005f021dfffffffffffff80700000001000000", 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000040000000900000000000000", @ANYRES16=r2, @ANYBLOB="0000000000000000000000000000000087000000", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB="0008000000000000000000000009000000000000000000ed003ec961"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES16=r1, @ANYBLOB="00b7080000000000007b8af8ff00000000bfa206000000000007020000f8ffffffb7030000080000000400000000000000850000dec20000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffeb7) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r4 = epoll_create(0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x1ff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32, @ANYRES16=r5], 0x2c}, 0x1, 0x0, 0x0, 0x20004050}, 0x6240c6bf6b96bbc3) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000001400b595e3ff0000000000000a008800fee946423a484f4da03cd204f918c0c3ce8831aaefe7fa62c72fb9caa12b6ad570c2b61351eb7ef92b07ca62a75ef8021755d26f7c72fbc47d9cdb28aa4187dffe390e85d3f204730786b0634f12cdae544e4327547fe08f02f83a33cbe1f5f93fe1b7d6d3a3fe8503a2cb4cd1bf", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff000000000800080070030000"], 0x34}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c50904000410ffb0c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r9, @ANYRESDEC=r10], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00000000c0)={0x8000200a}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) socketpair(0x18, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netrom(r11, &(0x7f0000000540)={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) r12 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r12, 0x0, 0x2404c0d0) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r14 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r14, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x8, 0x0, 0x8000000, @vifc_lcl_ifindex=r13, @broadcast}, 0x10) 15.178785359s ago: executing program 1 (id=3059): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@const={0x0, 0x0, 0x0, 0x9}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x4b}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f00000000c0)=[@iv={0x28, 0x117, 0x2, 0x10, "be70221c76eae0445dfbda0935edf985"}], 0x28}], 0x1, 0x40800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x78, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfa4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x802}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc00}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x74}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004840}, 0xcc00) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0xfffffffffffffec9, 0x0}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x80000, 0x2) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'nr0\x00'}) 15.027848073s ago: executing program 3 (id=3060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfcf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xffff0000, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0x76fc}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xf}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @generic={0x65, 0x0, 0x0, 0x2}, @initr0, @exit, @alu={0x4, 0x0, 0x3, 0x3, 0x7, 0x0, 0x700}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) socketpair(0x22, 0x2, 0x1, &(0x7f00000004c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x2) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000f00)=[{&(0x7f0000000d80)="00214717a70700000000030640710a069d313ebb9b49", 0x16}], 0x1, 0x7, 0xfffffff9) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x1c, r2, 0xacf5e67dd0b583a1, 0x2, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) 1.549217794s ago: executing program 32 (id=3051): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x38, r4, 0x421, 0x78bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x48040) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf417}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x6f7, 0x9, 0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)={0x334, r5, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcb3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2682e11b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x66ad}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "cceca2b9b4641e712c6fa0c21badb593e6730c2444a29a"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ID={0x8, 0x3, "aa1b3f65"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x790a3f39}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x167}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x942}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9000}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x42, 0x3, "d4ad7cb44d951b9e8d582eb623969b4239dfa5d40866e75b56dfc006938a737412302d3ebbccd8dda45642cc3b57522b0d43d6b63a75104631678ae0178e"}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6a230d3e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x25}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2ba}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x91}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "bdf86ce003a22089598575c2ea3ffb9fda513e6d1c59189b303dec8c6bb7"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "f68c6c9ac895d4334e7a63687e611f3e9cdf8ea1965b43b6d89e1163d3b473c35c"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x2000851}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000000)) 1.042901173s ago: executing program 33 (id=3053): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310329bd7000ffffffff09000000080003", @ANYRES32=r2, @ANYBLOB="080006"], 0x24}}, 0x4000) 35.862033ms ago: executing program 34 (id=3059): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@const={0x0, 0x0, 0x0, 0x9}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x4b}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f00000000c0)=[@iv={0x28, 0x117, 0x2, 0x10, "be70221c76eae0445dfbda0935edf985"}], 0x28}], 0x1, 0x40800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x78, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfa4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x802}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc00}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x74}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004840}, 0xcc00) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0xfffffffffffffec9, 0x0}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x80000, 0x2) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'nr0\x00'}) 0s ago: executing program 35 (id=3060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfcf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xffff0000, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0x76fc}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xf}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @generic={0x65, 0x0, 0x0, 0x2}, @initr0, @exit, @alu={0x4, 0x0, 0x3, 0x3, 0x7, 0x0, 0x700}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) socketpair(0x22, 0x2, 0x1, &(0x7f00000004c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x2) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000f00)=[{&(0x7f0000000d80)="00214717a70700000000030640710a069d313ebb9b49", 0x16}], 0x1, 0x7, 0xfffffff9) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x1c, r2, 0xacf5e67dd0b583a1, 0x2, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) kernel console output (not intermixed with test programs): 7] geneve1: entered allmulticast mode [ 361.967315][T14155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2108'. [ 362.092050][T14161] syzkaller0: entered promiscuous mode [ 362.098022][T14161] syzkaller0: entered allmulticast mode [ 362.475658][T14177] tipc: New replicast peer: 255.255.255.255 [ 362.494578][T14177] tipc: Enabled bearer , priority 6 [ 362.773852][T14190] syzkaller0: left allmulticast mode [ 362.786779][T14186] batadv_slave_0: entered promiscuous mode [ 362.802172][T14186] batadv_slave_0: entered allmulticast mode [ 362.831447][T14186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.914175][T14195] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 362.955457][T14195] syzkaller0: entered promiscuous mode [ 362.961388][T14195] syzkaller0: entered allmulticast mode [ 362.984293][T14195] tipc: Enabled bearer , priority 0 [ 363.047362][T14194] tipc: Resetting bearer [ 363.087432][T14194] tipc: Disabling bearer [ 363.585145][T14228] syzkaller1: entered promiscuous mode [ 363.605563][T14228] syzkaller1: entered allmulticast mode [ 363.614025][T14234] netlink: 'syz.1.2130': attribute type 1 has an invalid length. [ 363.716662][T14234] bond6: (slave bridge9): making interface the new active one [ 363.785544][T14234] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 363.995916][T14247] netlink: 'syz.2.2131': attribute type 29 has an invalid length. [ 364.009149][T14247] netlink: 'syz.2.2131': attribute type 29 has an invalid length. [ 364.030863][T14247] __nla_validate_parse: 4 callbacks suppressed [ 364.030884][T14247] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2131'. [ 364.101628][T14247] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2131'. [ 364.197796][T14260] xt_hashlimit: size too large, truncated to 1048576 [ 364.501872][T14269] dvmrp1: entered allmulticast mode [ 364.831029][T14277] openvswitch: netlink: Multiple metadata blocks provided [ 364.988289][T14280] sctp: [Deprecated]: syz.1.2142 (pid 14280) Use of int in max_burst socket option deprecated. [ 364.988289][T14280] Use struct sctp_assoc_value instead [ 365.147679][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2145'. [ 365.215519][T14293] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2147'. [ 365.338721][ T7252] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.361535][ T7252] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.398474][ T7252] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.409604][ T7252] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.635333][T14299] lo speed is unknown, defaulting to 1000 [ 365.698009][T14314] netlink: 'syz.4.2153': attribute type 32 has an invalid length. [ 365.776127][T14316] x_tables: duplicate underflow at hook 1 [ 366.450899][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2158'. [ 366.802706][T14343] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 366.829461][T14346] lo speed is unknown, defaulting to 1000 [ 366.946312][T14352] ipt_ECN: cannot use operation on non-tcp rule [ 367.116582][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2161'. [ 367.263074][T14352] lo speed is unknown, defaulting to 1000 [ 367.512389][T14369] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2168'. [ 367.875346][T14372] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2169'. [ 367.944844][T14383] netlink: 'syz.0.2172': attribute type 64 has an invalid length. [ 368.479423][T14408] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 368.502420][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2178'. [ 368.512670][T14408] openvswitch: netlink: Unknown nsh attribute 0 [ 368.863362][T14422] netlink: 'syz.1.2184': attribute type 3 has an invalid length. [ 369.044734][T14425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2184'. [ 369.176230][T14434] netlink: 'syz.4.2187': attribute type 13 has an invalid length. [ 369.378988][T14442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2192'. [ 369.420988][T14443] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2191'. [ 369.432718][T14445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2193'. [ 369.684108][T14461] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 369.772558][T14464] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 369.786132][T14464] syzkaller0: entered promiscuous mode [ 369.792651][T14464] syzkaller0: entered allmulticast mode [ 369.861296][T14467] netlink: 'syz.2.2199': attribute type 1 has an invalid length. [ 369.869995][T14467] netlink: 'syz.2.2199': attribute type 1 has an invalid length. [ 369.877857][T14467] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2199'. [ 370.020705][ T1650] block nbd2: Possible stuck request ffff888027278000: control (read@0,1024B). Runtime 60 seconds [ 370.031959][ T1650] block nbd2: Possible stuck request ffff888027278200: control (read@1024,1024B). Runtime 60 seconds [ 370.043781][ T1650] block nbd2: Possible stuck request ffff888027278400: control (read@2048,1024B). Runtime 60 seconds [ 370.054905][ T1650] block nbd2: Possible stuck request ffff888027278600: control (read@3072,1024B). Runtime 60 seconds [ 370.237199][T14473] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2201'. [ 372.351025][T14442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.205816][T14509] netlink: 'syz.4.2212': attribute type 1 has an invalid length. [ 373.211336][T14500] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 373.234554][T14502] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 373.314970][T14512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2212'. [ 373.336709][T14511] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 373.350962][T14511] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 373.377230][T14509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2212'. [ 373.490908][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2212'. [ 373.509594][T14512] bond2: (slave bridge9): Enslaving as an active interface with a down link [ 373.561498][T14509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.652360][T14515] macvlan3: entered promiscuous mode [ 373.663867][T14515] macvlan3: entered allmulticast mode [ 373.800244][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2216'. [ 374.014073][T14537] netlink: 'syz.0.2219': attribute type 58 has an invalid length. [ 374.460327][T14554] __nla_validate_parse: 3 callbacks suppressed [ 374.460349][T14554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2222'. [ 374.489345][T14550] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2223'. [ 374.903325][T14562] veth0_vlan: left promiscuous mode [ 374.910293][T14565] netlink: 'syz.3.2227': attribute type 10 has an invalid length. [ 374.931562][T14562] veth0_vlan: entered promiscuous mode [ 374.940275][T14565] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2227'. [ 374.991532][T14562] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2226'. [ 375.014479][T14565] netlink: 'syz.3.2227': attribute type 11 has an invalid length. [ 375.025720][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'. [ 375.070563][T14565] vlan2: entered promiscuous mode [ 375.347914][T14586] netlink: 824 bytes leftover after parsing attributes in process `syz.1.2233'. [ 375.389319][T14586] tunl0: Caught tx_queue_len zero misconfig [ 375.410103][T14586] sch_tbf: peakrate 65535 is lower than or equals to rate 3051052888541593565 ! [ 375.455384][ T6827] lec:lec_start_xmit: lec0:No lecd attached [ 375.629225][T14595] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2236'. [ 375.638993][T14600] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2237'. [ 375.843798][T14612] netlink: 'syz.4.2241': attribute type 61 has an invalid length. [ 376.205093][T14628] ip6tnl0: Caught tx_queue_len zero misconfig [ 376.415993][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2248'. [ 376.453199][T14641] netlink: 'syz.2.2248': attribute type 2 has an invalid length. [ 376.478229][T14642] netlink: 'syz.0.2250': attribute type 298 has an invalid length. [ 376.551309][T14647] netlink: 'syz.2.2248': attribute type 2 has an invalid length. [ 376.578750][T14641] !: entered promiscuous mode [ 376.643426][T14642] pim6reg1: entered promiscuous mode [ 376.648939][T14642] pim6reg1: entered allmulticast mode [ 376.740967][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2253'. [ 376.796191][T14656] x_tables: duplicate underflow at hook 2 [ 376.847270][T14658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.873961][ T795] lo speed is unknown, defaulting to 1000 [ 376.891759][ T795] syz2: Port: 1 Link ACTIVE [ 377.486228][T14691] syzkaller0: entered promiscuous mode [ 377.496825][T14691] 0: reclassify loop, rule prio 0, protocol 800 [ 378.673263][T14707] lo speed is unknown, defaulting to 1000 [ 378.989963][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.175683][T14737] syzkaller0: entered promiscuous mode [ 379.215843][T14737] 0: reclassify loop, rule prio 0, protocol 800 [ 379.417121][T14741] lo speed is unknown, defaulting to 1000 [ 379.443372][T14751] tipc: Enabled bearer , priority 0 [ 379.549365][T14751] tipc: Disabling bearer [ 379.683281][T14759] netlink: 'syz.0.2281': attribute type 13 has an invalid length. [ 380.063823][T14765] __nla_validate_parse: 14 callbacks suppressed [ 380.063846][T14765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 380.094352][T14784] IPVS: set_ctl: invalid protocol: 26467 117.112.0.0:0 [ 380.464147][T14802] syzkaller0: Caught tx_queue_len zero misconfig [ 380.469922][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 380.479702][ C0] lec:lec_tx_timeout: lec0 [ 380.486531][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 380.549227][T14802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2291'. [ 380.552131][T14809] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2289'. [ 380.593456][T14802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2291'. [ 380.625655][T14800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2290'. [ 380.637014][T14800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2290'. [ 380.928004][T14822] tipc: Enabled bearer , priority 0 [ 380.942591][T14822] syzkaller0: entered promiscuous mode [ 380.956078][T14822] syzkaller0: entered allmulticast mode [ 381.003621][T14822] tipc: Resetting bearer [ 381.014834][T14821] tipc: Resetting bearer [ 381.042566][T14821] tipc: Disabling bearer [ 381.075718][T14826] syzkaller0: entered promiscuous mode [ 381.091601][T14826] syzkaller0: entered allmulticast mode [ 381.131095][T14830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2297'. [ 381.251447][T14833] bridge7: entered promiscuous mode [ 381.259176][T14833] bridge7: port 1(macvtap1) entered blocking state [ 381.280169][T14833] bridge7: port 1(macvtap1) entered disabled state [ 381.288013][T14833] macvtap1: entered allmulticast mode [ 381.310325][T14833] bridge7: entered allmulticast mode [ 381.317724][T14833] macvtap1: left allmulticast mode [ 381.329946][T14833] bridge7: left allmulticast mode [ 381.348243][T14833] bridge7: left promiscuous mode [ 381.632520][T14844] netlink: 'syz.2.2302': attribute type 1 has an invalid length. [ 381.790405][T14848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2303'. [ 381.802014][T14852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2303'. [ 381.841918][T14849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2303'. [ 381.925733][T14854] syzkaller0: entered promiscuous mode [ 382.390431][T14869] tipc: Enabling of bearer rejected, already enabled [ 382.414045][T14869] wg0: entered allmulticast mode [ 382.974769][T14888] netlink: 'syz.0.2316': attribute type 29 has an invalid length. [ 382.994755][T14888] netlink: 'syz.0.2316': attribute type 29 has an invalid length. [ 383.223283][T14892] syzkaller0: entered promiscuous mode [ 383.635575][T14907] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 384.929557][T14948] syzkaller0: entered promiscuous mode [ 384.950372][T14948] syzkaller0: entered allmulticast mode [ 384.991163][T14951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.020443][T14951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.046982][T14979] __nla_validate_parse: 8 callbacks suppressed [ 386.047004][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2341'. [ 386.069276][T14979] netlink: zone id is out of range [ 386.093035][T14979] netlink: zone id is out of range [ 386.098488][T14979] netlink: zone id is out of range [ 386.105330][T14979] netlink: zone id is out of range [ 386.111311][T14979] netlink: zone id is out of range [ 386.116815][T14979] netlink: zone id is out of range [ 386.135658][T14979] netlink: zone id is out of range [ 386.160518][T14979] netlink: zone id is out of range [ 386.168235][T14979] netlink: zone id is out of range [ 386.181728][T14979] netlink: zone id is out of range [ 386.318673][T14993] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 386.365434][T14989] lo speed is unknown, defaulting to 1000 [ 386.659838][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6170 ms [ 386.668809][ C0] lec:lec_tx_timeout: lec0 [ 386.944724][T15023] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20000 [ 387.432965][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2371'. [ 387.687691][T15046] vlan3: entered promiscuous mode [ 387.950695][T15066] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2377'. [ 388.236687][T15074] lo speed is unknown, defaulting to 1000 [ 388.280574][T15076] lo speed is unknown, defaulting to 1000 [ 388.301269][T15084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2387'. [ 388.405223][T15094] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2387'. [ 388.583116][T15098] bridge0: port 3(gretap0) entered blocking state [ 388.594867][T15098] bridge0: port 3(gretap0) entered disabled state [ 388.616403][T15098] gretap0: entered allmulticast mode [ 388.624729][T15098] gretap0: entered promiscuous mode [ 388.697427][T15100] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2390'. [ 388.737068][T15098] lo speed is unknown, defaulting to 1000 [ 389.454774][T15121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2395'. [ 390.383951][T15148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2402'. [ 390.510437][T15153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2404'. [ 390.616238][T15153] xt_hashlimit: size too large, truncated to 1048576 [ 390.667018][T15163] mac80211_hwsim hwsim4 wlan0: Caught tx_queue_len zero misconfig [ 391.955169][T15190] tipc: Enabled bearer , priority 0 [ 391.963125][T15188] syzkaller0: entered promiscuous mode [ 391.969384][T15188] syzkaller0: entered allmulticast mode [ 391.980633][T15181] tipc: Resetting bearer [ 392.059457][T15181] tipc: Disabling bearer [ 392.287709][T15204] netlink: 'syz.2.2416': attribute type 3 has an invalid length. [ 392.304668][T15204] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2416'. [ 392.607592][T15216] bond0: Device is already in use. [ 392.772087][T15228] xt_hashlimit: max too large, truncated to 1048576 [ 392.780128][T15228] xt_bpf: check failed: parse error [ 392.959140][T15234] syzkaller0: entered allmulticast mode [ 393.006142][T15234] tipc: Enabling of bearer rejected, already enabled [ 393.209350][T15246] xt_policy: output policy not valid in PREROUTING and INPUT [ 393.386380][T15251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2431'. [ 393.523790][T15247] lo speed is unknown, defaulting to 1000 [ 393.630532][T15251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2431'. [ 393.926408][T15268] netlink: 'syz.3.2440': attribute type 2 has an invalid length. [ 395.261565][T15308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 395.296791][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 395.388600][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 395.409661][T15314] netlink: 'syz.4.2453': attribute type 20 has an invalid length. [ 395.440236][T15314] netlink: 'syz.4.2453': attribute type 21 has an invalid length. [ 395.452311][T15312] IPv6: Can't replace route, no match found [ 395.751308][T15329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2458'. [ 395.936101][T15338] netlink: 'syz.3.2462': attribute type 1 has an invalid length. [ 397.006311][T15349] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2464'. [ 397.027254][T15349] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2464'. [ 397.048025][T15349] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2464'. [ 397.293052][T15338] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 397.687272][T15381] FAULT_INJECTION: forcing a failure. [ 397.687272][T15381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.768933][T15381] CPU: 0 UID: 0 PID: 15381 Comm: syz.1.2471 Not tainted syzkaller #0 PREEMPT(full) [ 397.768966][T15381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 397.768977][T15381] Call Trace: [ 397.768986][T15381] [ 397.768994][T15381] dump_stack_lvl+0xe8/0x150 [ 397.769032][T15381] should_fail_ex+0x412/0x560 [ 397.769069][T15381] _copy_to_user+0x31/0xb0 [ 397.769096][T15381] simple_read_from_buffer+0xe1/0x170 [ 397.769131][T15381] proc_fail_nth_read+0x1bb/0x230 [ 397.769162][T15381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.769195][T15381] ? rw_verify_area+0x2a6/0x4d0 [ 397.769217][T15381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.769246][T15381] vfs_read+0x20c/0xa70 [ 397.769263][T15381] ? fdget_pos+0x246/0x320 [ 397.769277][T15381] ? __pfx_do_recvmmsg+0x10/0x10 [ 397.769302][T15381] ? __pfx___mutex_lock+0x10/0x10 [ 397.769322][T15381] ? __pfx_vfs_read+0x10/0x10 [ 397.769341][T15381] ? __fget_files+0x2a/0x420 [ 397.770457][T15381] ? __fget_files+0x3a0/0x420 [ 397.770483][T15381] ? __fget_files+0x2a/0x420 [ 397.770514][T15381] ksys_read+0x150/0x270 [ 397.770537][T15381] ? __pfx_ksys_read+0x10/0x10 [ 397.770564][T15381] do_syscall_64+0x14d/0xf80 [ 397.770595][T15381] ? trace_irq_disable+0x3b/0x150 [ 397.770619][T15381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.770641][T15381] ? clear_bhb_loop+0x40/0x90 [ 397.770662][T15381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.770678][T15381] RIP: 0033:0x7f593c55cfce [ 397.770695][T15381] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 397.770720][T15381] RSP: 002b:00007f593d517fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 397.770739][T15381] RAX: ffffffffffffffda RBX: 00007f593d5186c0 RCX: 00007f593c55cfce [ 397.770751][T15381] RDX: 000000000000000f RSI: 00007f593d5180a0 RDI: 0000000000000005 [ 397.770761][T15381] RBP: 00007f593d518090 R08: 0000000000000000 R09: 0000000000000000 [ 397.770770][T15381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.770780][T15381] R13: 00007f593c816128 R14: 00007f593c816090 R15: 00007ffc4feae918 [ 397.770807][T15381] [ 398.331244][T15399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2477'. [ 398.370012][T15399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2477'. [ 398.389632][T15399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2477'. [ 398.409993][T15399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2477'. [ 398.435229][T15399] netlink: 'syz.4.2477': attribute type 6 has an invalid length. [ 398.439477][T15404] netlink: 'syz.4.2477': attribute type 39 has an invalid length. [ 399.275566][T15421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2484'. [ 400.100567][ T1650] block nbd2: Possible stuck request ffff888027278000: control (read@0,1024B). Runtime 90 seconds [ 400.111709][ T1650] block nbd2: Possible stuck request ffff888027278200: control (read@1024,1024B). Runtime 90 seconds [ 400.123366][ T1650] block nbd2: Possible stuck request ffff888027278400: control (read@2048,1024B). Runtime 90 seconds [ 400.135513][ T1650] block nbd2: Possible stuck request ffff888027278600: control (read@3072,1024B). Runtime 90 seconds [ 400.177147][T15425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 400.189955][T15427] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2486'. [ 400.541662][T15445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2488'. [ 400.573956][T15434] IPVS: Scheduler module ip_vs_ not found [ 400.695957][T15454] netlink: 'syz.4.2495': attribute type 2 has an invalid length. [ 400.831985][T15462] netlink: 'syz.3.2497': attribute type 15 has an invalid length. [ 400.840974][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2497'. [ 400.865096][T15462] netlink: 'syz.3.2497': attribute type 15 has an invalid length. [ 400.880245][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2497'. [ 400.896330][ T1158] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 400.928613][ T1158] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 400.961464][ T1158] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 400.982875][T15465] ±ÿ,úÝá¡p?: Caught tx_queue_len zero misconfig [ 401.022859][ T1158] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 401.056343][T15465] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.2499'. [ 401.123327][T15471] tipc: Enabled bearer , priority 0 [ 401.147930][T15472] syzkaller0: entered promiscuous mode [ 401.168391][T15472] syzkaller0: entered allmulticast mode [ 401.245407][T15472] tipc: Resetting bearer [ 401.491382][T15472] tipc: Disabling bearer [ 402.015889][T15510] lo speed is unknown, defaulting to 1000 [ 402.105819][T15518] lo speed is unknown, defaulting to 1000 [ 403.164188][T15568] netlink: 'syz.4.2527': attribute type 4 has an invalid length. [ 403.215918][T15570] netlink: 'syz.4.2527': attribute type 4 has an invalid length. [ 403.597628][T15583] __nla_validate_parse: 3 callbacks suppressed [ 403.597649][T15583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2531'. [ 403.641861][T15583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2531'. [ 403.651536][ T7248] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.672442][ T7248] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.747436][ T7248] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.772453][ T7248] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.787507][T15591] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2535'. [ 403.798686][T15586] netlink: 'syz.3.2533': attribute type 4 has an invalid length. [ 403.808249][T15580] lo speed is unknown, defaulting to 1000 [ 403.820049][T15585] netlink: 'syz.3.2533': attribute type 4 has an invalid length. [ 403.832902][T15591] netlink: 47 bytes leftover after parsing attributes in process `syz.4.2535'. [ 403.843463][T15591] netlink: 'syz.4.2535': attribute type 6 has an invalid length. [ 403.851877][T15591] netlink: 'syz.4.2535': attribute type 6 has an invalid length. [ 404.217669][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2536'. [ 404.271427][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2536'. [ 404.305118][T15591] x_tables: duplicate underflow at hook 1 [ 404.415602][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2536'. [ 404.627975][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2540'. [ 404.660383][T15610] 8021q: VLANs not supported on lo [ 404.670518][T15611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 404.813903][T15616] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2542'. [ 405.208905][T15626] batadv_slave_1: entered promiscuous mode [ 405.442164][T15635] 8021q: adding VLAN 0 to HW filter on device bond11 [ 405.449766][T15625] batadv_slave_1: left promiscuous mode [ 405.488978][T15640] bond11: (slave macvlan4): Enslaving as an active interface with an up link [ 406.243919][T15677] netlink: 'syz.4.2562': attribute type 3 has an invalid length. [ 406.265665][T15677] netlink: 'syz.4.2562': attribute type 3 has an invalid length. [ 406.281898][T15676] netlink: 'syz.4.2562': attribute type 3 has an invalid length. [ 406.301676][T15676] netlink: 'syz.4.2562': attribute type 3 has an invalid length. [ 406.516650][T15689] xt_connbytes: Forcing CT accounting to be enabled [ 406.535771][T15689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 406.633876][T15698] netlink: 'syz.2.2570': attribute type 1 has an invalid length. [ 406.671531][T15699] netlink: 'syz.3.2569': attribute type 6 has an invalid length. [ 407.023808][T15718] bridge_slave_1: left allmulticast mode [ 407.036355][T15718] bridge_slave_1: left promiscuous mode [ 407.056922][T15718] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.101274][T15718] bridge_slave_0: left allmulticast mode [ 407.120437][T15718] bridge_slave_0: left promiscuous mode [ 407.126647][T15718] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.371613][T15755] lo speed is unknown, defaulting to 1000 [ 408.637754][T15771] lo speed is unknown, defaulting to 1000 [ 408.656147][T15773] __nla_validate_parse: 22 callbacks suppressed [ 408.656170][T15773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2591'. [ 408.775796][T15773] bond12: entered promiscuous mode [ 408.783483][T15773] 8021q: adding VLAN 0 to HW filter on device bond12 [ 408.801262][T15782] validate_nla: 4 callbacks suppressed [ 408.801281][T15782] netlink: 'syz.1.2593': attribute type 4 has an invalid length. [ 408.802601][T15776] pim6reg: entered allmulticast mode [ 408.817374][T15782] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2593'. [ 408.841952][T15781] pim6reg: left allmulticast mode [ 408.863058][T15776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2592'. [ 408.874521][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2592'. [ 408.918542][T15775] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2591'. [ 409.208353][T15787] Cannot find del_set index 0 as target [ 409.295324][T15787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2594'. [ 409.401544][T15801] netlink: 64010 bytes leftover after parsing attributes in process `syz.2.2598'. [ 409.466880][T15804] netlink: 'syz.0.2599': attribute type 1 has an invalid length. [ 409.500840][T15806] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2600'. [ 409.541498][T15806] net_ratelimit: 2 callbacks suppressed [ 409.541520][T15806] netlink: Unknown conntrack attr (0) [ 409.554844][T15801] netlink: 'syz.2.2598': attribute type 1 has an invalid length. [ 409.672478][T15809] bond7: (slave bridge8): making interface the new active one [ 409.681169][T15809] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 410.062772][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'. [ 410.071958][T15824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2605'. [ 410.142148][T15829] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 410.153396][T15829] syzkaller0: entered promiscuous mode [ 410.159259][T15829] syzkaller0: entered allmulticast mode [ 410.244836][T15833] tipc: Enabling of bearer rejected, already enabled [ 410.473634][T15850] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 411.006075][T15877] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 411.083583][T15877] syzkaller0: entered promiscuous mode [ 411.089614][T15877] syzkaller0: entered allmulticast mode [ 411.120503][T15878] lo speed is unknown, defaulting to 1000 [ 411.167742][T15877] tipc: Enabled bearer , priority 0 [ 411.242370][T15876] tipc: Resetting bearer [ 411.274609][T15876] tipc: Disabling bearer [ 411.377075][T15888] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 412.225383][T15917] lo speed is unknown, defaulting to 1000 [ 412.262469][T15943] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 412.360837][T15943] syzkaller0: entered promiscuous mode [ 412.368406][T15943] syzkaller0: entered allmulticast mode [ 412.403913][T15943] tipc: Enabled bearer , priority 0 [ 412.444894][T15941] tipc: Resetting bearer [ 412.491912][T15941] tipc: Disabling bearer [ 412.888060][T15974] xt_ecn: cannot match TCP bits for non-tcp packets [ 413.100929][T15975] lo speed is unknown, defaulting to 1000 [ 413.123294][T15974] lo speed is unknown, defaulting to 1000 [ 413.456729][T15991] tipc: Enabling of bearer rejected, already enabled [ 413.480886][T16001] netlink: 'syz.2.2662': attribute type 1 has an invalid length. [ 413.546923][T16006] tipc: Enabling of bearer rejected, already enabled [ 413.687517][T16009] xfrm2: entered allmulticast mode [ 413.723111][T16014] __nla_validate_parse: 5 callbacks suppressed [ 413.723134][T16014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2666'. [ 413.926480][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2671'. [ 413.996510][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2671'. [ 414.158190][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2671'. [ 414.197945][T16039] ±ÿ: renamed from lo [ 414.212611][T16039] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2675'. [ 414.228752][T16039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2675'. [ 414.287448][T16039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2675'. [ 414.408529][T16047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2676'. [ 414.504730][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2678'. [ 414.819112][T16059] syzkaller1: entered promiscuous mode [ 414.877484][T16059] syzkaller1: entered allmulticast mode [ 414.909301][T16063] bridge0: port 3(syz_tun) entered blocking state [ 414.931803][T16063] bridge0: port 3(syz_tun) entered disabled state [ 414.958665][T16063] syz_tun: entered allmulticast mode [ 414.975685][T16063] syz_tun: entered promiscuous mode [ 415.057565][T16063] tipc: Resetting bearer [ 415.078180][T16063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2683'. [ 415.328182][T16088] lo speed is unknown, defaulting to 1000 [ 415.824949][T16108] netlink: 'syz.3.2697': attribute type 5 has an invalid length. [ 416.103833][T16120] lo speed is unknown, defaulting to 1000 [ 417.019645][T16158] syzkaller0: entered promiscuous mode [ 417.040021][T16158] syzkaller0: entered allmulticast mode [ 419.054974][T16178] syzkaller0: entered promiscuous mode [ 419.061610][T16178] syzkaller0: entered allmulticast mode [ 419.069555][T16188] tipc: Enabled bearer , priority 0 [ 419.092440][T16173] tipc: Resetting bearer [ 419.167592][T16173] tipc: Disabling bearer [ 419.279631][T16209] __nla_validate_parse: 13 callbacks suppressed [ 419.279652][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2720'. [ 419.325160][T16211] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.2717'. [ 419.401590][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2720'. [ 419.497122][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2720'. [ 419.822253][T16239] syzkaller1: entered promiscuous mode [ 419.835309][T16239] syzkaller1: entered allmulticast mode [ 420.099629][T16252] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 422.090974][T16195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.417452][T16264] lo speed is unknown, defaulting to 1000 [ 422.506277][T16266] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2733'. [ 422.516115][T16266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.602199][T16311] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004 [ 423.692934][T16318] netlink: 'syz.1.2747': attribute type 11 has an invalid length. [ 423.730174][T16318] netlink: 'syz.1.2747': attribute type 4 has an invalid length. [ 423.739182][T16322] openvswitch: netlink: IP tunnel dst address not specified [ 423.770133][T16318] netlink: 199780 bytes leftover after parsing attributes in process `syz.1.2747'. [ 424.037192][T16339] sit1: entered promiscuous mode [ 424.068882][T16338] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 424.093376][T16338] netlink: 'syz.1.2752': attribute type 3 has an invalid length. [ 424.111573][T16338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2752'. [ 424.153075][T16338] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2752'. [ 424.917955][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2764'. [ 424.951965][T16386] ip6gre0: Caught tx_queue_len zero misconfig [ 424.973154][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2764'. [ 424.983755][T16388] bridge0: entered allmulticast mode [ 425.423627][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2768'. [ 425.579066][T16410] syzkaller1: entered promiscuous mode [ 425.598279][T16410] syzkaller1: entered allmulticast mode [ 426.117944][T16437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.700714][T16456] block nbd0: reconnected socket [ 426.701053][ T5146] block nbd0: Receive control failed (result -107) [ 426.973526][T16472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2788'. [ 427.002858][T16472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2788'. [ 427.011437][T16470] lo speed is unknown, defaulting to 1000 [ 427.327941][T16478] FAULT_INJECTION: forcing a failure. [ 427.327941][T16478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.372305][T16478] CPU: 1 UID: 0 PID: 16478 Comm: syz.3.2789 Not tainted syzkaller #0 PREEMPT(full) [ 427.372336][T16478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.372348][T16478] Call Trace: [ 427.372367][T16478] [ 427.372376][T16478] dump_stack_lvl+0xe8/0x150 [ 427.372411][T16478] should_fail_ex+0x412/0x560 [ 427.372446][T16478] _copy_to_user+0x31/0xb0 [ 427.372473][T16478] simple_read_from_buffer+0xe1/0x170 [ 427.372509][T16478] proc_fail_nth_read+0x1bb/0x230 [ 427.372543][T16478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 427.372577][T16478] ? rw_verify_area+0x2a6/0x4d0 [ 427.372598][T16478] ? reacquire_held_locks+0x104/0x190 [ 427.372625][T16478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 427.372654][T16478] vfs_read+0x20c/0xa70 [ 427.372674][T16478] ? fdget_pos+0x246/0x320 [ 427.372708][T16478] ? __pfx___mutex_lock+0x10/0x10 [ 427.372736][T16478] ? __pfx_vfs_read+0x10/0x10 [ 427.372760][T16478] ? __fget_files+0x2a/0x420 [ 427.372796][T16478] ? __fget_files+0x3a0/0x420 [ 427.372824][T16478] ? __fget_files+0x2a/0x420 [ 427.372863][T16478] ksys_read+0x150/0x270 [ 427.372889][T16478] ? __pfx_ksys_read+0x10/0x10 [ 427.372925][T16478] do_syscall_64+0x14d/0xf80 [ 427.372948][T16478] ? trace_irq_disable+0x3b/0x150 [ 427.372977][T16478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.372998][T16478] ? clear_bhb_loop+0x40/0x90 [ 427.373025][T16478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.373045][T16478] RIP: 0033:0x7ff367f5cfce [ 427.373065][T16478] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 427.373084][T16478] RSP: 002b:00007ff368d9ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 427.373106][T16478] RAX: ffffffffffffffda RBX: 00007ff368da06c0 RCX: 00007ff367f5cfce [ 427.373121][T16478] RDX: 000000000000000f RSI: 00007ff368da00a0 RDI: 0000000000000004 [ 427.373134][T16478] RBP: 00007ff368da0090 R08: 0000000000000000 R09: 0000000000000000 [ 427.373156][T16478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.373168][T16478] R13: 00007ff368216128 R14: 00007ff368216090 R15: 00007ffeadc45b88 [ 427.373204][T16478] [ 427.785994][T16486] syzkaller0: entered promiscuous mode [ 427.986861][T16504] xt_connbytes: Forcing CT accounting to be enabled [ 427.994181][T16504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.185067][ T1650] block nbd2: Possible stuck request ffff888027278000: control (read@0,1024B). Runtime 120 seconds [ 430.197679][ T1650] block nbd2: Possible stuck request ffff888027278200: control (read@1024,1024B). Runtime 120 seconds [ 430.208773][ T1650] block nbd2: Possible stuck request ffff888027278400: control (read@2048,1024B). Runtime 120 seconds [ 430.220364][ T1650] block nbd2: Possible stuck request ffff888027278600: control (read@3072,1024B). Runtime 120 seconds [ 430.499034][T16539] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2802'. [ 430.608464][T16544] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2803'. [ 430.862069][T16554] bridge0: port 4(vlan3) entered blocking state [ 430.884559][T16554] bridge0: port 4(vlan3) entered disabled state [ 430.893558][T16554] vlan3: entered allmulticast mode [ 430.899286][T16554] bond0: entered allmulticast mode [ 430.949487][T16554] vlan3: entered promiscuous mode [ 430.964532][T16554] bond0: entered promiscuous mode [ 430.996984][T16568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2807'. [ 431.014083][T16569] netlink: 'syz.1.2809': attribute type 4 has an invalid length. [ 431.042162][T16570] netlink: 'syz.1.2809': attribute type 4 has an invalid length. [ 431.178710][T16576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2811'. [ 431.278005][T16581] netlink: 'syz.4.2813': attribute type 13 has an invalid length. [ 431.295825][T16581] netlink: 'syz.4.2813': attribute type 17 has an invalid length. [ 431.317054][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2815'. [ 431.353783][T16581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 432.753755][T16623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.761539][T16623] IPv6: NLM_F_CREATE should be set when creating new route [ 432.836234][T16618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2825'. [ 432.855190][T16618] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2825'. [ 432.915976][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2825'. [ 433.304380][T16636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2828'. [ 434.227617][T16664] gre0: entered promiscuous mode [ 434.236216][T16664] gre0: entered allmulticast mode [ 434.270996][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2836'. [ 434.363953][T16668] lo speed is unknown, defaulting to 1000 [ 434.661351][T16665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.693063][T16676] lo speed is unknown, defaulting to 1000 [ 435.299621][T16703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.468016][T16708] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 435.488838][T16708] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 435.498242][T16708] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 435.517378][T16710] __nla_validate_parse: 4 callbacks suppressed [ 435.517399][T16710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2848'. [ 435.553690][T16708] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 435.561914][T16701] 8021q: VLANs not supported on syzkaller1 [ 435.571528][T16708] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 435.596406][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2847'. [ 435.656623][T16701] netlink: 'syz.2.2847': attribute type 2 has an invalid length. [ 435.884127][ T5824] syz_tun (unregistering): left allmulticast mode [ 435.910118][ T5824] syz_tun (unregistering): left promiscuous mode [ 435.938823][ T5824] bridge0: port 3(syz_tun) entered disabled state [ 436.091192][T16726] bond13 (unregistering): Released all slaves [ 436.311533][T16739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2852'. [ 436.413540][T16704] lo speed is unknown, defaulting to 1000 [ 436.563031][T16742] netlink: 'syz.2.2853': attribute type 3 has an invalid length. [ 436.581912][T16743] netlink: 'syz.2.2853': attribute type 3 has an invalid length. [ 437.587063][T16581] Set syz1 is full, maxelem 65536 reached [ 437.666075][T16704] chnl_net:caif_netlink_parms(): no params data found [ 437.703829][ T5146] Bluetooth: hci5: command tx timeout [ 437.870195][T16782] netlink: 'syz.1.2862': attribute type 1 has an invalid length. [ 437.889062][T16704] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.897235][T16704] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.908751][T16704] bridge_slave_0: entered allmulticast mode [ 437.917611][T16704] bridge_slave_0: entered promiscuous mode [ 437.928066][T16704] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.937671][T16704] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.945623][T16704] bridge_slave_1: entered allmulticast mode [ 437.952673][T16782] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2862'. [ 437.954612][T16704] bridge_slave_1: entered promiscuous mode [ 438.039464][T16704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.053115][T16785] netlink: 'syz.2.2863': attribute type 1 has an invalid length. [ 438.054835][T16704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.075117][T16784] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .¿šØ ÕáÊÎí ÿìà´*žËî]æÌÔáÿÿÿÿÁ [ 438.212262][T16704] team0: Port device team_slave_0 added [ 438.222327][T16704] team0: Port device team_slave_1 added [ 438.282846][T16704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.290258][T16704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.319595][T16704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.334028][T16704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.341775][T16704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.391800][T16704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.522972][T16704] hsr_slave_0: entered promiscuous mode [ 438.531297][T16704] hsr_slave_1: entered promiscuous mode [ 438.538192][T16704] debugfs: 'hsr0' already exists in 'hsr' [ 438.546632][T16704] Cannot create hsr debugfs directory [ 438.662812][T16800] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2866'. [ 438.744593][T16798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.013265][T16704] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.152911][T16704] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.243538][T16704] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.255618][T16809] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2868'. [ 439.364062][T16809] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 439.364325][T16805] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2868'. [ 439.508308][ T6827] lec:lec_start_xmit: lec0:No lecd attached [ 439.566998][T16704] team0: Port device netdevsim0 removed [ 439.592004][T16704] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.792054][ T5146] Bluetooth: hci5: command tx timeout [ 439.854535][T16823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2869'. [ 440.433770][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.557332][T16704] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 440.679889][T16704] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 440.720267][T16837] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2875'. [ 440.735923][T16704] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 440.771854][T16837] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 440.789280][T16704] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 441.043676][T16704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.082138][T16853] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2877'. [ 441.119015][T16704] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.128343][T16853] netlink: 'syz.1.2877': attribute type 10 has an invalid length. [ 441.147779][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.155430][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.181376][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.188972][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.248344][T16855] netlink: 'syz.1.2877': attribute type 10 has an invalid length. [ 441.889459][ T5146] Bluetooth: hci5: command tx timeout [ 441.912503][T16704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.939208][T16874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2881'. [ 442.108094][T16704] veth0_vlan: entered promiscuous mode [ 442.173806][T16704] veth1_vlan: entered promiscuous mode [ 442.269560][T16882] netlink: 'syz.2.2884': attribute type 1 has an invalid length. [ 442.328761][T16704] veth0_macvtap: entered promiscuous mode [ 442.381669][T16704] veth1_macvtap: entered promiscuous mode [ 442.495937][T16704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.536094][T16704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.601928][ T7253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.624231][ T7253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.653619][ T7253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.731584][ T7253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.995302][T16892] lo speed is unknown, defaulting to 1000 [ 443.102860][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.120090][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.313596][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.323153][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.626140][T16774] Set syz1 is full, maxelem 65536 reached [ 443.945565][ T5146] Bluetooth: hci5: command tx timeout [ 444.205525][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2890'. [ 444.248564][T16708] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 444.258249][T16708] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 444.271626][T16708] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 444.280726][T16708] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 444.289010][T16708] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 444.302012][T16901] syzkaller0: entered promiscuous mode [ 444.350969][T16912] lo speed is unknown, defaulting to 1000 [ 444.920507][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'. [ 445.300262][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 445.308479][ C0] lec:lec_tx_timeout: lec0 [ 445.314026][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 446.511903][T16708] Bluetooth: hci0: command tx timeout [ 446.885398][T16924] lo speed is unknown, defaulting to 1000 [ 447.044799][T16952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2896'. [ 447.073410][T16953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2895'. [ 447.235420][T16958] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2898'. [ 447.274672][T16958] bond7: (slave lo): Releasing backup interface [ 447.296412][T16958] bond7: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 447.354863][T16958] team0: Port device C removed [ 447.367177][T16958] team0: Port device team_slave_1 removed [ 447.377287][T16958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.388353][T16958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.397269][T16958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.406896][T16958] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 448.012188][T16924] chnl_net:caif_netlink_parms(): no params data found [ 448.243520][T16998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2904'. [ 448.268497][T17000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2905'. [ 448.288598][T16992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2904'. [ 448.321862][T16992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2904'. [ 448.360678][T17000] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2905'. [ 448.383802][T16924] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.407022][T16924] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.421441][T17000] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2905'. [ 448.432242][T16924] bridge_slave_0: entered allmulticast mode [ 448.468367][T16924] bridge_slave_0: entered promiscuous mode [ 448.599410][T16708] Bluetooth: hci0: command tx timeout [ 448.611735][T16924] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.620522][T16924] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.628198][T16924] bridge_slave_1: entered allmulticast mode [ 448.637254][T16924] bridge_slave_1: entered promiscuous mode [ 449.022543][T17005] syzkaller0: entered promiscuous mode [ 449.031273][T17005] syzkaller0: entered allmulticast mode [ 449.063576][T17009] sch_tbf: burst 2097152 is lower than device lo mtu (11337746) ! [ 449.182016][T16924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.207717][T17025] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2912'. [ 449.402968][T17031] xt_TCPMSS: Only works on TCP SYN packets [ 450.335851][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 450.344368][ C0] lec:lec_tx_timeout: lec0 [ 450.670096][T16708] Bluetooth: hci0: command tx timeout [ 451.741914][T16924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.767082][T17031] @0Ù: renamed from bond_slave_1 (while UP) [ 451.778632][T17035] ¾x9ÿ: renamed from bridge_slave_0 [ 451.930842][T16924] team0: Port device team_slave_0 added [ 451.960250][T16924] team0: Port device team_slave_1 added [ 452.013382][T17048] syzkaller0: entered promiscuous mode [ 452.021757][T17048] syzkaller0: entered allmulticast mode [ 452.070051][T16924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.085424][T16924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.139900][T16924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.161933][T17053] __nla_validate_parse: 2 callbacks suppressed [ 452.161958][T17053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2919'. [ 452.192687][T17050] lo speed is unknown, defaulting to 1000 [ 452.226204][T16924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.234290][T16924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.272359][T16924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.364801][T17057] lo speed is unknown, defaulting to 1000 [ 452.482264][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2918'. [ 452.517803][T16924] hsr_slave_0: entered promiscuous mode [ 452.528766][T16924] hsr_slave_1: entered promiscuous mode [ 452.537905][T16924] debugfs: 'hsr0' already exists in 'hsr' [ 452.544670][T16924] Cannot create hsr debugfs directory [ 452.637971][T17068] netlink: 'syz.4.2921': attribute type 10 has an invalid length. [ 452.688794][T17065] netlink: 'syz.4.2921': attribute type 10 has an invalid length. [ 452.740182][T16708] Bluetooth: hci0: command tx timeout [ 452.977493][T17079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2924'. [ 453.016092][T17073] netlink: 'syz.4.2923': attribute type 22 has an invalid length. [ 453.050415][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2923'. [ 453.103077][T17073] netlink: 'syz.4.2923': attribute type 22 has an invalid length. [ 453.121680][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2923'. [ 453.335861][T16924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.449535][T17086] lo speed is unknown, defaulting to 1000 [ 453.477032][T17090] tipc: Enabled bearer , priority 0 [ 453.484909][T17090] syzkaller0: entered promiscuous mode [ 453.498375][T17090] syzkaller0: entered allmulticast mode [ 453.573421][T17103] Bluetooth: MGMT ver 1.23 [ 453.607719][T16924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.780922][T16924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.881859][T17090] tipc: Resetting bearer [ 453.918536][T17106] lo speed is unknown, defaulting to 1000 [ 453.931058][T17089] tipc: Resetting bearer [ 453.987883][T17089] tipc: Disabling bearer [ 454.123533][T16924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.216295][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'. [ 454.442370][T17123] lo speed is unknown, defaulting to 1000 [ 454.635572][T17142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2939'. [ 454.860814][T16924] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 454.893518][T17150] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 454.937822][T16924] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 454.964821][T17150] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 454.980080][T17150] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 455.045559][T17155] netlink: 'syz.3.2942': attribute type 20 has an invalid length. [ 455.065937][T16924] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 455.065944][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2942'. [ 455.091134][T17150] tipc: Started in network mode [ 455.098268][T17150] tipc: Node identity 080211, cluster identity 4711 [ 455.106208][T17150] tipc: Enabled bearer , priority 0 [ 455.132133][T17158] bridge0: port 3(syz_tun) entered blocking state [ 455.143232][T17158] bridge0: port 3(syz_tun) entered disabled state [ 455.154882][T17158] syz_tun: entered allmulticast mode [ 455.162804][T17158] syz_tun: entered promiscuous mode [ 455.169214][T17158] bridge0: port 3(syz_tun) entered blocking state [ 455.176011][T17158] bridge0: port 3(syz_tun) entered forwarding state [ 455.191204][T17155] netlink: 'syz.3.2942': attribute type 20 has an invalid length. [ 455.199571][T16924] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 455.208380][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2942'. [ 455.225322][T17163] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2944'. [ 455.417658][ T30] audit: type=1800 audit(1774505900.733:7): pid=17172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2945" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=100 res=0 errno=0 [ 455.569024][T16924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.621332][T16924] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.648991][ T7258] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.656480][ T7258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.683536][T17179] x_tables: unsorted underflow at hook 4 [ 455.709442][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.716771][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.231356][ T5837] tipc: Node number set to 134353152 [ 456.451950][T16924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.542834][T17207] IPv6: addrconf: prefix option has invalid lifetime [ 456.614463][T16924] veth0_vlan: entered promiscuous mode [ 456.655996][T16924] veth1_vlan: entered promiscuous mode [ 456.767504][T16924] veth0_macvtap: entered promiscuous mode [ 456.790291][T16924] veth1_macvtap: entered promiscuous mode [ 456.838106][T16924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.893010][T16924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.922407][ T10] IPVS: starting estimator thread 0... [ 456.939541][ T7254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.957443][ T7254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.007530][ T7254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.017757][ T7254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.019977][T17213] IPVS: using max 27 ests per chain, 64800 per kthread [ 457.096518][T17208] dvmrp0: left allmulticast mode [ 458.097210][T17222] lo speed is unknown, defaulting to 1000 [ 458.412799][T17228] __nla_validate_parse: 2 callbacks suppressed [ 458.412837][T17228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2958'. [ 458.553400][T17235] FAULT_INJECTION: forcing a failure. [ 458.553400][T17235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.568505][T17235] CPU: 0 UID: 0 PID: 17235 Comm: syz.3.2960 Not tainted syzkaller #0 PREEMPT(full) [ 458.568524][T17235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.568532][T17235] Call Trace: [ 458.568537][T17235] [ 458.568542][T17235] dump_stack_lvl+0xe8/0x150 [ 458.568568][T17235] should_fail_ex+0x412/0x560 [ 458.568593][T17235] _copy_to_user+0x31/0xb0 [ 458.568609][T17235] simple_read_from_buffer+0xe1/0x170 [ 458.568629][T17235] proc_fail_nth_read+0x1bb/0x230 [ 458.568650][T17235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 458.568668][T17235] ? rw_verify_area+0x2a6/0x4d0 [ 458.568681][T17235] ? __fget_files+0x2a/0x420 [ 458.568697][T17235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 458.568715][T17235] vfs_read+0x20c/0xa70 [ 458.568727][T17235] ? fdget_pos+0x246/0x320 [ 458.568741][T17235] ? __pfx___mutex_lock+0x10/0x10 [ 458.568757][T17235] ? __pfx_vfs_read+0x10/0x10 [ 458.568771][T17235] ? __fget_files+0x2a/0x420 [ 458.568790][T17235] ? __fget_files+0x3a0/0x420 [ 458.568807][T17235] ? __fget_files+0x2a/0x420 [ 458.568829][T17235] ksys_read+0x150/0x270 [ 458.568844][T17235] ? __pfx_ksys_read+0x10/0x10 [ 458.568863][T17235] do_syscall_64+0x14d/0xf80 [ 458.568877][T17235] ? trace_irq_disable+0x3b/0x150 [ 458.568895][T17235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.568907][T17235] ? clear_bhb_loop+0x40/0x90 [ 458.568922][T17235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.568934][T17235] RIP: 0033:0x7ff367f5cfce [ 458.568947][T17235] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 458.568958][T17235] RSP: 002b:00007ff368dc0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 458.568972][T17235] RAX: ffffffffffffffda RBX: 00007ff368dc16c0 RCX: 00007ff367f5cfce [ 458.568981][T17235] RDX: 000000000000000f RSI: 00007ff368dc10a0 RDI: 0000000000000005 [ 458.568989][T17235] RBP: 00007ff368dc1090 R08: 0000000000000000 R09: 0000000000000000 [ 458.568997][T17235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 458.569006][T17235] R13: 00007ff368216038 R14: 00007ff368215fa0 R15: 00007ffeadc45b88 [ 458.569025][T17235] [ 458.795942][T17181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.953896][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.962913][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.974790][T17239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2962'. [ 459.039998][ T7258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.049143][ T7258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.283125][T17263] xt_hashlimit: overflow, try lower: 18446744073709551615/0 [ 459.476326][T17273] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2968'. [ 459.733646][T17281] lo speed is unknown, defaulting to 1000 [ 459.772876][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 459.783883][ T5146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 459.794810][ T5146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 459.803428][ T5146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 459.814878][ T5146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 459.968122][T17295] netlink: 'syz.2.2975': attribute type 4 has an invalid length. [ 460.022934][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2974'. [ 460.035647][T17299] netlink: 'syz.2.2975': attribute type 4 has an invalid length. [ 460.229594][T17285] lo speed is unknown, defaulting to 1000 [ 460.261870][ T1650] block nbd2: Possible stuck request ffff888027278000: control (read@0,1024B). Runtime 150 seconds [ 460.273597][ T1650] block nbd2: Possible stuck request ffff888027278200: control (read@1024,1024B). Runtime 150 seconds [ 460.285306][ T1650] block nbd2: Possible stuck request ffff888027278400: control (read@2048,1024B). Runtime 150 seconds [ 460.296482][ T1650] block nbd2: Possible stuck request ffff888027278600: control (read@3072,1024B). Runtime 150 seconds [ 460.336334][T17303] block nbd3: not configured, cannot reconfigure [ 460.669444][T17285] chnl_net:caif_netlink_parms(): no params data found [ 460.738170][T17321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2981'. [ 461.028042][T17285] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.040611][T17285] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.048360][T17285] bridge_slave_0: entered allmulticast mode [ 461.061747][T17285] bridge_slave_0: entered promiscuous mode [ 461.064534][T17333] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 461.087080][T17285] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.095071][T17285] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.103415][T17285] bridge_slave_1: entered allmulticast mode [ 461.113290][T17285] bridge_slave_1: entered promiscuous mode [ 461.174757][T17285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.294938][T17285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.317664][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2984'. [ 461.352735][T17339] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 461.395912][T17285] team0: Port device team_slave_0 added [ 461.448933][T17285] team0: Port device team_slave_1 added [ 461.538475][T17285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.549925][T17285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.606639][T17285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.623329][T17285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.632411][T17285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.664992][T17285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.695157][T17348] syzkaller0: entered promiscuous mode [ 461.727852][T17351] tipc: Started in network mode [ 461.734117][T17351] tipc: Node identity ac141426, cluster identity 4711 [ 461.742810][T17351] tipc: New replicast peer: 255.255.255.255 [ 461.742866][T17348] TC_ACT_REPEAT abuse ? [ 461.749626][T17351] tipc: Enabled bearer , priority 6 [ 461.764119][T17348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2987'. [ 461.776856][T17348] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2987'. [ 461.829702][T17285] hsr_slave_0: entered promiscuous mode [ 461.839427][T17285] hsr_slave_1: entered promiscuous mode [ 461.848044][T17285] debugfs: 'hsr0' already exists in 'hsr' [ 461.855301][T17285] Cannot create hsr debugfs directory [ 461.861803][T16708] Bluetooth: hci3: command tx timeout [ 461.917528][T17355] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 462.225071][T17361] netlink: 'syz.3.2990': attribute type 11 has an invalid length. [ 462.264060][T17361] netlink: 'syz.3.2990': attribute type 23 has an invalid length. [ 462.280106][T17361] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2990'. [ 462.434320][T17371] sit1: entered promiscuous mode [ 462.562894][T17376] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2994'. [ 462.643308][T17378] netlink: 'syz.0.2995': attribute type 8 has an invalid length. [ 462.652178][T17378] netlink: 'syz.0.2995': attribute type 4 has an invalid length. [ 462.904861][ T5837] tipc: Node number set to 2886997030 [ 463.357228][T17407] syzkaller0: entered promiscuous mode [ 463.417685][T17285] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 463.434013][T17285] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 463.464407][T17285] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 463.490558][T17285] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 463.519419][T17414] __nla_validate_parse: 6 callbacks suppressed [ 463.519440][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3004'. [ 463.730174][T17285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.781842][T17409] syzkaller0: entered promiscuous mode [ 463.787491][T17409] syzkaller0: entered allmulticast mode [ 463.826858][T17426] lo speed is unknown, defaulting to 1000 [ 463.838258][T17285] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.910531][T17247] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.917850][T17247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.940323][T16708] Bluetooth: hci3: command tx timeout [ 464.002375][T17247] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.009959][T17247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.101064][T17433] netlink: 'syz.0.3010': attribute type 2 has an invalid length. [ 464.129405][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3010'. [ 464.477114][T17450] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3014'. [ 464.595990][T17465] pimreg: left allmulticast mode [ 464.736191][T17445] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 464.818497][T17473] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 464.874324][T17475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3019'. [ 465.059121][T17481] lo speed is unknown, defaulting to 1000 [ 465.093916][T17285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.307902][T17497] syzkaller0: entered allmulticast mode [ 465.325585][T17497] syzkaller0 (unregistering): left allmulticast mode [ 465.388947][T17285] veth0_vlan: entered promiscuous mode [ 465.592379][T17285] veth1_vlan: entered promiscuous mode [ 465.851865][T17285] veth0_macvtap: entered promiscuous mode [ 465.884136][T17285] veth1_macvtap: entered promiscuous mode [ 466.021044][T16708] Bluetooth: hci3: command tx timeout [ 466.095650][T17285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.098185][T17530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3033'. [ 466.117270][T17285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.143440][T17253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.199714][T17253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.234571][T17253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.264735][T17253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.385604][T17248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.432710][T17248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.546268][T17253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.571213][T17253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.590238][T17536] netlink: 'syz.2.3035': attribute type 1 has an invalid length. [ 466.610702][T17536] syzkaller1: entered promiscuous mode [ 466.616587][T17536] syzkaller1: entered allmulticast mode [ 466.622828][T17539] FAULT_INJECTION: forcing a failure. [ 466.622828][T17539] name failslab, interval 1, probability 0, space 0, times 0 [ 466.704556][T17539] CPU: 0 UID: 0 PID: 17539 Comm: syz.4.3036 Not tainted syzkaller #0 PREEMPT(full) [ 466.704585][T17539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.704598][T17539] Call Trace: [ 466.704606][T17539] [ 466.704615][T17539] dump_stack_lvl+0xe8/0x150 [ 466.704652][T17539] should_fail_ex+0x412/0x560 [ 466.704688][T17539] should_failslab+0xa8/0x100 [ 466.704718][T17539] __kmalloc_noprof+0xe8/0x760 [ 466.704742][T17539] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 466.704778][T17539] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 466.704807][T17539] ? __dev_queue_xmit+0x28b/0x3870 [ 466.704839][T17539] genl_family_rcv_msg_doit+0xd9/0x330 [ 466.704866][T17539] ? __asan_memcpy+0x40/0x70 [ 466.704889][T17539] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 466.704924][T17539] ? apparmor_capable+0x126/0x170 [ 466.704951][T17539] ? bpf_lsm_capable+0x9/0x20 [ 466.704977][T17539] ? security_capable+0x7e/0x2c0 [ 466.705012][T17539] genl_rcv_msg+0x61c/0x7a0 [ 466.705046][T17539] ? __pfx_genl_rcv_msg+0x10/0x10 [ 466.705071][T17539] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 466.705098][T17539] ? __lock_acquire+0x6b5/0x2cf0 [ 466.705146][T17539] netlink_rcv_skb+0x232/0x4b0 [ 466.705169][T17539] ? __pfx_genl_rcv_msg+0x10/0x10 [ 466.705198][T17539] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 466.705238][T17539] ? down_read+0x272/0x2e0 [ 466.705263][T17539] ? genl_rcv+0xd/0x40 [ 466.705291][T17539] genl_rcv+0x28/0x40 [ 466.705315][T17539] netlink_unicast+0x80f/0x9b0 [ 466.705356][T17539] ? __pfx_netlink_unicast+0x10/0x10 [ 466.705389][T17539] ? netlink_sendmsg+0x650/0xb40 [ 466.705408][T17539] ? skb_put+0x11b/0x210 [ 466.705435][T17539] netlink_sendmsg+0x813/0xb40 [ 466.705467][T17539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.705494][T17539] ? aa_sock_msg_perm+0xf1/0x1b0 [ 466.705525][T17539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.705553][T17539] ____sys_sendmsg+0x972/0x9f0 [ 466.705590][T17539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.705622][T17539] ? import_iovec+0x73/0xa0 [ 466.705650][T17539] ___sys_sendmsg+0x2a5/0x360 [ 466.705682][T17539] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.705746][T17539] ? __fget_files+0x2a/0x420 [ 466.705777][T17539] ? __fget_files+0x3a0/0x420 [ 466.705818][T17539] __x64_sys_sendmsg+0x1bd/0x2a0 [ 466.705846][T17539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.705880][T17539] ? __pfx_ksys_write+0x10/0x10 [ 466.705917][T17539] do_syscall_64+0x14d/0xf80 [ 466.705941][T17539] ? trace_irq_disable+0x3b/0x150 [ 466.705968][T17539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.705989][T17539] ? clear_bhb_loop+0x40/0x90 [ 466.706015][T17539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.706035][T17539] RIP: 0033:0x7f69aef9c799 [ 466.706056][T17539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.706073][T17539] RSP: 002b:00007f69afe3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.706097][T17539] RAX: ffffffffffffffda RBX: 00007f69af215fa0 RCX: 00007f69aef9c799 [ 466.706120][T17539] RDX: 0000000002008040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 466.706134][T17539] RBP: 00007f69afe3e090 R08: 0000000000000000 R09: 0000000000000000 [ 466.706146][T17539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.706158][T17539] R13: 00007f69af216038 R14: 00007f69af215fa0 R15: 00007fff69303db8 [ 466.706192][T17539] [ 467.410632][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 467.423292][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 467.433505][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 467.457801][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 467.470394][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 467.690872][T17549] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.800876][ T5826] bridge0: port 3(syz_tun) entered disabled state [ 467.852708][ T5826] syz_tun (unregistering): left allmulticast mode [ 467.859575][ T5826] syz_tun (unregistering): left promiscuous mode [ 467.867716][ T5826] bridge0: port 3(syz_tun) entered disabled state [ 467.881479][T17565] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 467.888442][T17565] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 467.903057][T17546] lo speed is unknown, defaulting to 1000 [ 467.925336][T17549] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.029251][T17549] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.103481][T16708] Bluetooth: hci3: command tx timeout [ 468.154681][T17549] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.550101][T17586] nbd: must specify an index to disconnect [ 469.543199][T16708] Bluetooth: hci4: command tx timeout [ 471.252518][ T5196] udevd[5196]: worker [9602] /devices/virtual/block/nbd2 is taking a long time [ 471.318618][T17546] chnl_net:caif_netlink_parms(): no params data found [ 471.470932][T17588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3049'. [ 471.491113][T17588] netlink: 'syz.0.3049': attribute type 30 has an invalid length. [ 471.508274][T17248] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.569345][T17588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3049'. [ 471.579517][T17588] netlink: 'syz.0.3049': attribute type 30 has an invalid length. [ 471.608288][T17252] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.629437][T16708] Bluetooth: hci4: command tx timeout [ 471.636071][T17252] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.795552][T17252] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.844677][T17546] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.853215][T17546] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.861585][T17546] bridge_slave_0: entered allmulticast mode [ 471.870523][T17546] bridge_slave_0: entered promiscuous mode [ 471.882842][T17252] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.919473][T17606] veth1_macvtap: left promiscuous mode [ 471.926478][T17606] macsec0: entered promiscuous mode [ 471.937842][T17546] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.946551][T17546] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.956138][T17546] bridge_slave_1: entered allmulticast mode [ 471.965269][T17546] bridge_slave_1: entered promiscuous mode [ 472.007279][T17252] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.028948][T17612] veth1_macvtap: entered promiscuous mode [ 472.036040][T17612] macsec0: left promiscuous mode [ 472.073549][T17252] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.087096][T17252] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.108703][T17546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.116602][T17616] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3055'. [ 472.141092][T17546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.248934][T17546] team0: Port device team_slave_0 added [ 472.267673][T17546] team0: Port device team_slave_1 added [ 472.280749][T17620] netlink: 'syz.3.3057': attribute type 10 has an invalid length. [ 472.312413][T17546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.324340][T17546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.376709][T17546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.402837][T17546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.405207][T17624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3058'. [ 472.411537][T17546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.453188][T17546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.483252][T17627] lo: entered allmulticast mode [ 472.515497][T17546] hsr_slave_0: entered promiscuous mode [ 472.523633][T17546] hsr_slave_1: entered promiscuous mode [ 472.530377][T17546] debugfs: 'hsr0' already exists in 'hsr' [ 472.536411][T17546] Cannot create hsr debugfs directory [ 473.701410][T16708] Bluetooth: hci4: command tx timeout [ 475.780001][T16708] Bluetooth: hci4: command tx timeout [ 486.835914][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 486.845132][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 486.853728][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 486.864967][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 486.873553][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 486.912625][T17639] lo speed is unknown, defaulting to 1000 [ 487.049677][T17639] chnl_net:caif_netlink_parms(): no params data found [ 487.130831][T17639] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.138260][T17639] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.147087][T17639] bridge_slave_0: entered allmulticast mode [ 487.155245][T17639] bridge_slave_0: entered promiscuous mode [ 487.166169][T17639] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.173756][T17639] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.181442][T17639] bridge_slave_1: entered allmulticast mode [ 487.189192][T17639] bridge_slave_1: entered promiscuous mode [ 487.226993][T17639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.241164][T17639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.287785][T17639] team0: Port device team_slave_0 added [ 487.297541][T17639] team0: Port device team_slave_1 added [ 487.339342][T17639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.346752][T17639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.375351][T17639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.391535][T17639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.392668][ T5146] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 487.398619][T17639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.411116][ T5146] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 487.445422][T17639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.449374][ T5146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 487.465625][ T5146] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 487.474936][ T5146] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 487.516986][T17639] hsr_slave_0: entered promiscuous mode [ 487.524318][T17639] hsr_slave_1: entered promiscuous mode [ 487.531171][T17639] debugfs: 'hsr0' already exists in 'hsr' [ 487.537007][T17639] Cannot create hsr debugfs directory [ 487.596803][T17648] lo speed is unknown, defaulting to 1000 [ 487.862523][T17648] chnl_net:caif_netlink_parms(): no params data found [ 487.939127][T17648] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.946619][T17648] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.954587][T17648] bridge_slave_0: entered allmulticast mode [ 487.962203][T17648] bridge_slave_0: entered promiscuous mode [ 487.970978][T17648] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.978298][T17648] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.986971][T17648] bridge_slave_1: entered allmulticast mode [ 487.995097][T17648] bridge_slave_1: entered promiscuous mode [ 488.029541][T17648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.043217][T17648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.073367][T17648] team0: Port device team_slave_0 added [ 488.081780][T17648] team0: Port device team_slave_1 added [ 488.112605][T17648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.120711][T17648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.147946][T17648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.160674][T17648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.167803][T17648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.195212][T17648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.295195][T17648] hsr_slave_0: entered promiscuous mode [ 488.311292][T17648] hsr_slave_1: entered promiscuous mode [ 488.318658][T17648] debugfs: 'hsr0' already exists in 'hsr' [ 488.343188][T17648] Cannot create hsr debugfs directory [ 488.425114][ T5146] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 488.443229][ T5146] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 488.462187][ T5146] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 488.478858][ T5146] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 488.486981][ T5146] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 488.542152][ T5146] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 488.551683][ T5146] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 488.563384][ T5146] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 488.580700][ T5146] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 488.590642][ T5146] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 488.705350][T17658] lo speed is unknown, defaulting to 1000 [ 488.718549][T17660] lo speed is unknown, defaulting to 1000 [ 488.901585][T16708] Bluetooth: hci1: command tx timeout [ 489.002155][T17660] chnl_net:caif_netlink_parms(): no params data found [ 489.044525][T17658] chnl_net:caif_netlink_parms(): no params data found [ 489.153704][T17660] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.161314][T17660] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.168937][T17660] bridge_slave_0: entered allmulticast mode [ 489.176723][T17660] bridge_slave_0: entered promiscuous mode [ 489.197917][T17660] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.205403][T17660] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.215384][T17660] bridge_slave_1: entered allmulticast mode [ 489.223659][T17660] bridge_slave_1: entered promiscuous mode [ 489.274930][T17658] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.282870][T17658] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.290477][T17658] bridge_slave_0: entered allmulticast mode [ 489.297662][T17658] bridge_slave_0: entered promiscuous mode [ 489.308565][T17660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.321005][T17658] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.328429][T17658] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.336876][T17658] bridge_slave_1: entered allmulticast mode [ 489.344767][T17658] bridge_slave_1: entered promiscuous mode [ 489.356056][T17660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.413346][T17658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.427025][T17660] team0: Port device team_slave_0 added [ 489.436634][T17658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.449055][T17660] team0: Port device team_slave_1 added [ 489.498648][T17660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.506302][T17660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.534433][T17660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.545614][T16708] Bluetooth: hci6: command tx timeout [ 489.554470][T17658] team0: Port device team_slave_0 added [ 489.561437][T17660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.568492][T17660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.596989][T17660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.610443][T17658] team0: Port device team_slave_1 added [ 489.662212][T17658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.669605][T17658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.697220][T17658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.722236][T17658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.730346][T17658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.757577][T17658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.774042][T17660] hsr_slave_0: entered promiscuous mode [ 489.781409][T17660] hsr_slave_1: entered promiscuous mode [ 489.787969][T17660] debugfs: 'hsr0' already exists in 'hsr' [ 489.794106][T17660] Cannot create hsr debugfs directory [ 489.873753][T17658] hsr_slave_0: entered promiscuous mode [ 489.881098][T17658] hsr_slave_1: entered promiscuous mode [ 489.887614][T17658] debugfs: 'hsr0' already exists in 'hsr' [ 489.893819][T17658] Cannot create hsr debugfs directory [ 490.351391][ T1650] block nbd2: Possible stuck request ffff888027278000: control (read@0,1024B). Runtime 180 seconds [ 490.362554][ T1650] block nbd2: Possible stuck request ffff888027278200: control (read@1024,1024B). Runtime 180 seconds [ 490.374186][ T1650] block nbd2: Possible stuck request ffff888027278400: control (read@2048,1024B). Runtime 180 seconds [ 490.385459][ T1650] block nbd2: Possible stuck request ffff888027278600: control (read@3072,1024B). Runtime 180 seconds [ 490.580162][T16708] Bluetooth: hci7: command tx timeout [ 490.660121][T16708] Bluetooth: hci8: command tx timeout [ 490.980532][ T5146] Bluetooth: hci1: command tx timeout [ 491.620374][ T5146] Bluetooth: hci6: command tx timeout [ 492.660157][ T5146] Bluetooth: hci7: command tx timeout [ 492.750048][ T5146] Bluetooth: hci8: command tx timeout [ 493.060168][ T5146] Bluetooth: hci1: command tx timeout [ 493.224789][ T5196] udevd[5196]: worker [9602] /devices/virtual/block/nbd2 timeout; kill it [ 493.233882][ T5196] udevd[5196]: seq 18894 '/devices/virtual/block/nbd2' killed [ 493.700247][ T5146] Bluetooth: hci6: command tx timeout [ 494.740146][ T5146] Bluetooth: hci7: command tx timeout [ 494.821289][ T5146] Bluetooth: hci8: command tx timeout [ 495.140032][ T5146] Bluetooth: hci1: command tx timeout [ 495.780644][ T5146] Bluetooth: hci6: command tx timeout [ 496.820068][ T5146] Bluetooth: hci7: command tx timeout [ 496.900057][ T5146] Bluetooth: hci8: command tx timeout [ 501.861918][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.872896][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 507.300005][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 507.308604][ C0] lec:lec_tx_timeout: lec0 [ 507.313282][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 512.329956][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 512.338855][ C0] lec:lec_tx_timeout: lec0 [ 520.432390][ T1650] block nbd2: Possible stuck request ffff888027278000: control (read@0,1024B). Runtime 210 seconds [ 520.443501][ T1650] block nbd2: Possible stuck request ffff888027278200: control (read@1024,1024B). Runtime 210 seconds [ 520.455540][ T1650] block nbd2: Possible stuck request ffff888027278400: control (read@2048,1024B). Runtime 210 seconds [ 520.468175][ T1650] block nbd2: Possible stuck request ffff888027278600: control (read@3072,1024B). Runtime 210 seconds [ 527.361779][T16708] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 527.371655][T16708] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 527.379718][T16708] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 527.390491][T16708] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 527.398605][T16708] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 527.441564][T17680] lo speed is unknown, defaulting to 1000 [ 527.579523][T17680] chnl_net:caif_netlink_parms(): no params data found [ 527.657913][T17680] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.665776][T17680] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.674751][T17680] bridge_slave_0: entered allmulticast mode [ 527.682745][T17680] bridge_slave_0: entered promiscuous mode [ 527.692814][T17680] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.700682][T17680] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.708051][T17680] bridge_slave_1: entered allmulticast mode [ 527.717479][T17680] bridge_slave_1: entered promiscuous mode [ 527.747331][T17680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.760789][T17680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.793660][T17680] team0: Port device team_slave_0 added [ 527.802954][T17680] team0: Port device team_slave_1 added [ 527.832058][T17680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.840196][T17680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.869529][T17680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.882921][T17680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.890301][T17680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.917115][T17680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.963851][T17680] hsr_slave_0: entered promiscuous mode [ 527.970826][T17680] hsr_slave_1: entered promiscuous mode [ 527.977562][T17680] debugfs: 'hsr0' already exists in 'hsr' [ 527.984382][T17680] Cannot create hsr debugfs directory [ 529.460101][ T5146] Bluetooth: hci9: command tx timeout [ 531.540238][ T5146] Bluetooth: hci9: command tx timeout [ 533.620082][ T5146] Bluetooth: hci9: command tx timeout [ 535.699988][ T5146] Bluetooth: hci9: command tx timeout [ 547.458188][T16708] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 547.474893][ T5836] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 547.480890][T17693] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 547.485410][ T5836] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 547.494644][T17693] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 547.500916][ T5836] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 547.508781][T17693] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 547.516324][ T5836] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 547.521488][T17693] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 547.542316][ T5146] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 547.604426][T17690] lo speed is unknown, defaulting to 1000 [ 547.613141][T17692] lo speed is unknown, defaulting to 1000 [ 547.856234][T17690] chnl_net:caif_netlink_parms(): no params data found [ 547.924496][T17692] chnl_net:caif_netlink_parms(): no params data found [ 548.009541][T17690] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.016857][T17690] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.025268][T17690] bridge_slave_0: entered allmulticast mode [ 548.034004][T17690] bridge_slave_0: entered promiscuous mode [ 548.068284][T17690] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.076518][T17690] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.084199][T17690] bridge_slave_1: entered allmulticast mode [ 548.093761][T17690] bridge_slave_1: entered promiscuous mode [ 548.139067][T17692] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.146517][T17692] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.155184][T17692] bridge_slave_0: entered allmulticast mode [ 548.163156][T17692] bridge_slave_0: entered promiscuous mode [ 548.174003][T17692] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.182200][T17692] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.193488][T17692] bridge_slave_1: entered allmulticast mode [ 548.203031][T17692] bridge_slave_1: entered promiscuous mode [ 548.216343][T17690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.240098][T17690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.291120][T17692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.306111][T17692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.320532][T17690] team0: Port device team_slave_0 added [ 548.330470][T17690] team0: Port device team_slave_1 added [ 548.411318][T17690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.419032][T17690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.453017][T17690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.468538][T17692] team0: Port device team_slave_0 added [ 548.480380][T17692] team0: Port device team_slave_1 added [ 548.505114][ T5146] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 548.506000][T17690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.520845][T17690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.530418][ T5146] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 548.548518][T17690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.570158][ T5146] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 548.580771][T17693] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 548.589686][T17693] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 548.596034][T17692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.606881][T17692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.652093][T17692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.666447][T17692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.674473][T17692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.704414][T17692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.759565][T17690] hsr_slave_0: entered promiscuous mode [ 548.766858][T17690] hsr_slave_1: entered promiscuous mode [ 548.774035][T17690] debugfs: 'hsr0' already exists in 'hsr' [ 548.780514][T17690] Cannot create hsr debugfs directory [ 548.888108][T17692] hsr_slave_0: entered promiscuous mode [ 548.895969][T17692] hsr_slave_1: entered promiscuous mode [ 548.907973][T17692] debugfs: 'hsr0' already exists in 'hsr' [ 548.917372][T17692] Cannot create hsr debugfs directory [ 548.964619][T17709] lo speed is unknown, defaulting to 1000 [ 548.987460][T16708] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 548.998495][T16708] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 549.011742][T16708] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 549.023032][T16708] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 549.032406][T16708] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 549.197383][T17712] lo speed is unknown, defaulting to 1000 [ 549.540330][T17693] Bluetooth: hci10: command tx timeout [ 549.558037][T17709] chnl_net:caif_netlink_parms(): no params data found [ 549.620172][T17693] Bluetooth: hci11: command tx timeout [ 549.679217][T17712] chnl_net:caif_netlink_parms(): no params data found [ 549.777754][T17709] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.792326][T17709] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.800775][T17709] bridge_slave_0: entered allmulticast mode [ 549.808765][T17709] bridge_slave_0: entered promiscuous mode [ 549.826389][T17709] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.835227][T17709] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.843380][T17709] bridge_slave_1: entered allmulticast mode [ 549.852260][T17709] bridge_slave_1: entered promiscuous mode [ 549.916393][T17712] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.925016][T17712] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.933875][T17712] bridge_slave_0: entered allmulticast mode [ 549.942782][T17712] bridge_slave_0: entered promiscuous mode [ 549.951605][T17712] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.959321][T17712] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.968789][T17712] bridge_slave_1: entered allmulticast mode [ 549.976571][T17712] bridge_slave_1: entered promiscuous mode [ 549.988050][T17709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.017367][T17709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.075061][T17712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.089310][T17712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.110153][T17709] team0: Port device team_slave_0 added [ 550.120265][T17709] team0: Port device team_slave_1 added [ 550.201066][T17712] team0: Port device team_slave_0 added [ 550.211159][T17712] team0: Port device team_slave_1 added [ 550.218203][T17709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.226946][T17709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.255951][T17709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.271107][T17709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.278680][T17709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.309071][T17709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.368181][T17712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.377216][T17712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.405453][T17712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.435407][T17712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.443729][T17712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.474896][T17712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.511330][ T1650] block nbd2: Possible stuck request ffff888027278000: control (read@0,1024B). Runtime 240 seconds [ 550.523289][ T1650] block nbd2: Possible stuck request ffff888027278200: control (read@1024,1024B). Runtime 240 seconds [ 550.535641][ T1650] block nbd2: Possible stuck request ffff888027278400: control (read@2048,1024B). Runtime 240 seconds [ 550.547444][ T1650] block nbd2: Possible stuck request ffff888027278600: control (read@3072,1024B). Runtime 240 seconds [ 550.592142][T17709] hsr_slave_0: entered promiscuous mode [ 550.599222][T17709] hsr_slave_1: entered promiscuous mode [ 550.607484][T17709] debugfs: 'hsr0' already exists in 'hsr' [ 550.613785][T17709] Cannot create hsr debugfs directory [ 550.656401][T17712] hsr_slave_0: entered promiscuous mode [ 550.663560][T17712] hsr_slave_1: entered promiscuous mode [ 550.670083][T17693] Bluetooth: hci12: command tx timeout [ 550.677925][T17712] debugfs: 'hsr0' already exists in 'hsr' [ 550.685494][T17712] Cannot create hsr debugfs directory [ 551.142321][T16708] Bluetooth: hci13: command tx timeout [ 551.620221][T17693] Bluetooth: hci10: command tx timeout [ 551.700280][T17693] Bluetooth: hci11: command tx timeout [ 552.740061][T17693] Bluetooth: hci12: command tx timeout [ 553.220037][T17693] Bluetooth: hci13: command tx timeout [ 553.700155][T17693] Bluetooth: hci10: command tx timeout [ 553.780158][T17693] Bluetooth: hci11: command tx timeout [ 554.820396][T17693] Bluetooth: hci12: command tx timeout [ 555.301075][T17693] Bluetooth: hci13: command tx timeout [ 555.780077][T17693] Bluetooth: hci10: command tx timeout [ 555.860890][T17693] Bluetooth: hci11: command tx timeout [ 556.900023][T17693] Bluetooth: hci12: command tx timeout [ 557.380157][T17693] Bluetooth: hci13: command tx timeout [ 560.263231][T17693] Bluetooth: hci5: command 0x0406 tx timeout [ 563.307758][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.319464][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 568.330035][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 568.338334][ C0] lec:lec_tx_timeout: lec0 [ 568.343366][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 570.500390][T17693] Bluetooth: hci0: command 0x0406 tx timeout [ 573.369907][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 573.378193][ C0] lec:lec_tx_timeout: lec0 [ 573.554500][T17248] bridge_slave_1: left allmulticast mode [ 573.561358][T17248] bridge_slave_1: left promiscuous mode [ 573.568894][T17248] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.579406][T17248] bridge_slave_0: left allmulticast mode [ 573.586352][T17248] bridge_slave_0: left promiscuous mode [ 573.593581][T17248] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.627778][T17248] pimreg: left allmulticast mode [ 574.244259][T17248] bond2 (unregistering): (slave bridge9): Releasing active interface [ 574.373107][T17248] bond0 (unregistering): (slave veth7): Releasing active interface [ 574.383834][T17248] bond0 (unregistering): (slave veth9): Releasing active interface [ 574.392957][T17248] bond0 (unregistering): Released all slaves [ 574.408973][T17248] bond1 (unregistering): Released all slaves [ 574.429167][T17248] bond2 (unregistering): Released all slaves [ 574.443115][T17248] bond3 (unregistering): Released all slaves [ 574.534177][T17248] tipc: Left network mode [ 574.976998][T17248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.986223][T17248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.532116][T17248] IPVS: stop unused estimator thread 0... [ 580.580515][ T1650] block nbd2: Possible stuck request ffff888027278000: control (read@0,1024B). Runtime 270 seconds [ 580.592005][ T1650] block nbd2: Possible stuck request ffff888027278200: control (read@1024,1024B). Runtime 270 seconds [ 580.603185][ T1650] block nbd2: Possible stuck request ffff888027278400: control (read@2048,1024B). Runtime 270 seconds [ 580.614787][ T1650] block nbd2: Possible stuck request ffff888027278600: control (read@3072,1024B). Runtime 270 seconds [ 587.490575][T17693] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 587.499642][T17693] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 587.509610][T17693] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 587.520802][T17693] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 587.529091][T17693] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 587.567182][T17732] lo speed is unknown, defaulting to 1000 [ 587.686338][T17732] chnl_net:caif_netlink_parms(): no params data found [ 587.770688][T17732] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.778552][T17732] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.787527][T17732] bridge_slave_0: entered allmulticast mode [ 587.795381][T17732] bridge_slave_0: entered promiscuous mode [ 587.804139][T17732] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.811758][T17732] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.819670][T17732] bridge_slave_1: entered allmulticast mode [ 587.828303][T17732] bridge_slave_1: entered promiscuous mode [ 587.862620][T17732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.874912][T17732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.906789][T17732] team0: Port device team_slave_0 added [ 587.914975][T17732] team0: Port device team_slave_1 added [ 587.944258][T17732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.951401][T17732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.978152][T17732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.991287][T17732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.998658][T17732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.025632][T17732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.070936][T17732] hsr_slave_0: entered promiscuous mode [ 588.078139][T17732] hsr_slave_1: entered promiscuous mode [ 588.085063][T17732] debugfs: 'hsr0' already exists in 'hsr' [ 588.091260][T17732] Cannot create hsr debugfs directory [ 589.620494][T17693] Bluetooth: hci14: command tx timeout [ 590.980179][T17693] Bluetooth: hci4: command 0x0406 tx timeout [ 591.700420][T16708] Bluetooth: hci14: command tx timeout [ 593.780293][T16708] Bluetooth: hci14: command tx timeout [ 595.860205][T16708] Bluetooth: hci14: command tx timeout [ 607.534207][T17693] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 607.545803][T17693] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 607.554915][T17693] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 607.566367][T17693] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 607.566875][ T5836] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 607.576733][T17693] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 607.583531][ T5836] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 607.593845][T17693] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 607.607392][T17693] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 607.615997][T17693] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 607.678174][T17743] lo speed is unknown, defaulting to 1000 [ 607.699107][T17745] lo speed is unknown, defaulting to 1000 [ 607.938223][T17743] chnl_net:caif_netlink_parms(): no params data found [ 607.993936][T17745] chnl_net:caif_netlink_parms(): no params data found [ 608.085606][T17743] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.093272][T17743] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.101900][T17743] bridge_slave_0: entered allmulticast mode [ 608.109505][T17743] bridge_slave_0: entered promiscuous mode [ 608.123760][T17743] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.131507][T17743] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.138907][T17743] bridge_slave_1: entered allmulticast mode [ 608.146633][T17743] bridge_slave_1: entered promiscuous mode [ 608.204941][T17743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.217511][T17743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.227221][T17745] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.234501][T17745] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.242674][T17745] bridge_slave_0: entered allmulticast mode [ 608.250397][T17745] bridge_slave_0: entered promiscuous mode [ 608.272093][T17745] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.279658][T17745] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.287626][T17745] bridge_slave_1: entered allmulticast mode [ 608.295371][T17745] bridge_slave_1: entered promiscuous mode [ 608.333040][T17743] team0: Port device team_slave_0 added [ 608.356909][T17743] team0: Port device team_slave_1 added [ 608.376546][T17745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.401246][T17745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.412856][T17743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.421438][T17743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.450551][T17743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.475501][T17743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.482965][T17743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.511359][T17743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.545930][T17745] team0: Port device team_slave_0 added [ 608.554984][T17745] team0: Port device team_slave_1 added [ 608.620834][T17745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.628516][T17745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.658160][T17745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.677597][T17743] hsr_slave_0: entered promiscuous mode [ 608.685229][T17743] hsr_slave_1: entered promiscuous mode [ 608.692744][T17743] debugfs: 'hsr0' already exists in 'hsr' [ 608.698586][T17743] Cannot create hsr debugfs directory [ 608.705921][T17745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.714733][T17745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.742595][T17745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.830380][T17745] hsr_slave_0: entered promiscuous mode [ 608.837304][T17745] hsr_slave_1: entered promiscuous mode [ 608.844365][T17745] debugfs: 'hsr0' already exists in 'hsr' [ 608.850632][T17745] Cannot create hsr debugfs directory [ 609.131787][ T5146] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 609.143851][ T5146] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 609.153450][ T5146] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 609.168952][ T5146] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 609.182361][ T5146] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 609.182835][ T5836] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 609.221604][ T5836] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 609.231907][ T5836] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 609.241228][ T5836] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 609.251447][ T5836] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 609.370955][T17761] lo speed is unknown, defaulting to 1000 [ 609.409034][T17763] lo speed is unknown, defaulting to 1000 [ 609.624638][T17695] Bluetooth: hci15: command tx timeout [ 609.711589][T17695] Bluetooth: hci16: command tx timeout [ 609.717092][T17763] chnl_net:caif_netlink_parms(): no params data found [ 609.775728][T17761] chnl_net:caif_netlink_parms(): no params data found [ 609.908104][T17763] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.918680][T17763] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.926814][T17763] bridge_slave_0: entered allmulticast mode [ 609.935327][T17763] bridge_slave_0: entered promiscuous mode [ 609.968237][T17763] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.975659][T17763] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.983636][T17763] bridge_slave_1: entered allmulticast mode [ 609.991717][T17763] bridge_slave_1: entered promiscuous mode [ 610.036764][T17761] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.045405][T17761] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.053651][T17761] bridge_slave_0: entered allmulticast mode [ 610.061749][T17761] bridge_slave_0: entered promiscuous mode [ 610.091536][T17761] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.098865][T17761] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.112244][T17761] bridge_slave_1: entered allmulticast mode [ 610.119748][T17761] bridge_slave_1: entered promiscuous mode [ 610.130685][T17763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.164505][T17763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.202300][T17761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.235525][T17761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.250476][T17763] team0: Port device team_slave_0 added [ 610.271319][T17763] team0: Port device team_slave_1 added [ 610.326977][T17761] team0: Port device team_slave_0 added [ 610.357093][T17761] team0: Port device team_slave_1 added [ 610.364226][T17763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.372496][T17763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.399299][T17763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.442157][T17763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.449677][T17763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.479202][T17763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.543230][T17761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.550908][T17761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.578407][T17761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.612670][T17761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.620200][T17761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.648952][T17761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.676526][ T1650] block nbd2: Possible stuck request ffff888027278000: control (read@0,1024B). Runtime 300 seconds [ 610.678740][T17763] hsr_slave_0: entered promiscuous mode [ 610.688206][ T1650] block nbd2: Possible stuck request ffff888027278200: control (read@1024,1024B). Runtime 300 seconds [ 610.696556][T17763] hsr_slave_1: entered promiscuous mode [ 610.706381][ T1650] block nbd2: Possible stuck request ffff888027278400: control (read@2048,1024B). Runtime 300 seconds [ 610.706423][ T1650] block nbd2: Possible stuck request ffff888027278600: control (read@3072,1024B). Runtime 300 seconds [ 610.736323][T17763] debugfs: 'hsr0' already exists in 'hsr' [ 610.743285][T17763] Cannot create hsr debugfs directory [ 610.869164][T17761] hsr_slave_0: entered promiscuous mode [ 610.876564][T17761] hsr_slave_1: entered promiscuous mode [ 610.883978][T17761] debugfs: 'hsr0' already exists in 'hsr' [ 610.889822][T17761] Cannot create hsr debugfs directory [ 611.222051][T17695] Bluetooth: hci17: command tx timeout [ 611.300107][T17695] Bluetooth: hci18: command tx timeout [ 611.460329][T17695] Bluetooth: hci6: command 0x0406 tx timeout [ 611.466615][T17695] Bluetooth: hci7: command 0x0406 tx timeout [ 611.475744][T17695] Bluetooth: hci1: command 0x0406 tx timeout [ 611.482616][T17695] Bluetooth: hci8: command 0x0406 tx timeout [ 611.700198][ T5146] Bluetooth: hci15: command tx timeout [ 611.780610][ T5146] Bluetooth: hci16: command tx timeout [ 613.310144][ T5146] Bluetooth: hci17: command tx timeout [ 613.380082][ T5146] Bluetooth: hci18: command tx timeout [ 613.780365][ T5146] Bluetooth: hci15: command tx timeout [ 613.860293][ T5146] Bluetooth: hci16: command tx timeout [ 615.380134][ T5146] Bluetooth: hci17: command tx timeout [ 615.459996][ T5146] Bluetooth: hci18: command tx timeout [ 615.860485][ T5146] Bluetooth: hci15: command tx timeout [ 615.940122][ T5146] Bluetooth: hci16: command tx timeout [ 617.460093][ T5146] Bluetooth: hci17: command tx timeout [ 617.540248][ T5146] Bluetooth: hci18: command tx timeout [ 624.743156][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.753113][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 630.260018][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 630.268348][ C0] lec:lec_tx_timeout: lec0 [ 631.940176][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 632.410851][ T6827] lec:lec_start_xmit: lec0:No lecd attached [ 632.427556][ T31] INFO: task syz-executor:17546 blocked for more than 143 seconds. [ 632.438127][ T31] Not tainted syzkaller #0 [ 632.443537][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 632.453481][ T31] task:syz-executor state:D stack:22664 pid:17546 tgid:17546 ppid:1 task_flags:0x400140 flags:0x00080002 [ 632.466395][ T31] Call Trace: [ 632.472029][ T31] [ 632.475093][ T31] __schedule+0x15dd/0x52d0 [ 632.480085][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 632.485178][ T31] ? __pfx___schedule+0x10/0x10 [ 632.490627][ T31] ? schedule+0x90/0x360 [ 632.526091][ T31] schedule+0x164/0x360 [ 632.538635][ T31] schedule_preempt_disabled+0x13/0x30 [ 632.558505][ T31] __mutex_lock+0x7fe/0x1300 [ 632.568799][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 632.576497][ T31] ? __mutex_lock+0x5ac/0x1300 [ 632.582029][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 632.586890][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 632.592822][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 632.598660][ T31] ? radix_tree_lookup+0x240/0x290 [ 632.604172][ T31] genl_rcv_msg+0x10b/0x7a0 [ 632.609017][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 632.614414][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 632.619407][ T31] netlink_rcv_skb+0x232/0x4b0 [ 632.624871][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 632.630276][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 632.635634][ T31] ? down_read+0x272/0x2e0 [ 632.640501][ T31] ? genl_rcv+0xd/0x40 [ 632.644724][ T31] genl_rcv+0x28/0x40 [ 632.648964][ T31] netlink_unicast+0x80f/0x9b0 [ 632.654342][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 632.660228][ T31] ? netlink_sendmsg+0x650/0xb40 [ 632.665382][ T31] ? skb_put+0x11b/0x210 [ 632.670341][ T31] netlink_sendmsg+0x813/0xb40 [ 632.676195][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.682453][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 632.687732][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 632.693246][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.698847][ T31] __sys_sendto+0x672/0x710 [ 632.703632][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 632.708828][ T31] ? fd_install+0x94/0x3d0 [ 632.713688][ T31] ? fd_install+0x306/0x3d0 [ 632.718212][ T31] __x64_sys_sendto+0xde/0x100 [ 632.723250][ T31] do_syscall_64+0x14d/0xf80 [ 632.727905][ T31] ? trace_irq_disable+0x3b/0x150 [ 632.733042][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.739432][ T31] ? clear_bhb_loop+0x40/0x90 [ 632.745677][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.752089][ T31] RIP: 0033:0x7f519155cfce [ 632.756644][ T31] RSP: 002b:00007ffdb16ac828 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 632.765395][ T31] RAX: ffffffffffffffda RBX: 0000555559535500 RCX: 00007f519155cfce [ 632.773457][ T31] RDX: 0000000000000020 RSI: 00007f5192344670 RDI: 0000000000000005 [ 632.782509][ T31] RBP: 0000000000000001 R08: 00007ffdb16ac8a4 R09: 000000000000000c [ 632.790594][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 632.798875][ T31] R13: 00007ffdb16ac8f8 R14: 00007f5192344670 R15: 0000000000000000 [ 632.807223][ T31] [ 632.810331][ T31] INFO: task syz.2.3051:17602 blocked for more than 143 seconds. [ 632.818074][ T31] Not tainted syzkaller #0 [ 632.823401][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 632.832472][ T31] task:syz.2.3051 state:D stack:26240 pid:17602 tgid:17597 ppid:16924 task_flags:0x480140 flags:0x00080002 [ 632.844814][ T31] Call Trace: [ 632.848120][ T31] [ 632.851377][ T31] __schedule+0x15dd/0x52d0 [ 632.856179][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 632.861258][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 632.866308][ T31] ? __pfx___schedule+0x10/0x10 [ 632.871212][ T31] ? schedule+0x90/0x360 [ 632.875584][ T31] schedule+0x164/0x360 [ 632.880720][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 632.886499][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 632.893022][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 632.899214][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 632.906389][ T31] nbd_set_size+0x454/0x680 [ 632.911100][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 632.916176][ T31] ? nla_memcpy+0x5b/0xc0 [ 632.920875][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 632.926311][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 632.932213][ T31] ? rcu_is_watching+0x15/0xb0 [ 632.937007][ T31] ? trace_kmalloc+0x2a/0x110 [ 632.941856][ T31] ? __nla_parse+0x40/0x60 [ 632.946564][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 632.952989][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 632.959359][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 632.965375][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 632.971575][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 632.976695][ T31] genl_rcv_msg+0x61c/0x7a0 [ 632.981330][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 632.986972][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 632.992856][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 632.997925][ T31] netlink_rcv_skb+0x232/0x4b0 [ 633.003254][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.008340][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 633.013745][ T31] ? down_read+0x272/0x2e0 [ 633.018188][ T31] ? genl_rcv+0xd/0x40 [ 633.022373][ T31] genl_rcv+0x28/0x40 [ 633.026393][ T31] netlink_unicast+0x80f/0x9b0 [ 633.031529][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 633.037310][ T31] ? netlink_sendmsg+0x650/0xb40 [ 633.042661][ T31] ? skb_put+0x11b/0x210 [ 633.047067][ T31] netlink_sendmsg+0x813/0xb40 [ 633.052058][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.057428][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 633.062607][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 633.067943][ T31] ____sys_sendmsg+0x972/0x9f0 [ 633.073116][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.078474][ T31] ? import_iovec+0x73/0xa0 [ 633.083272][ T31] ___sys_sendmsg+0x2a5/0x360 [ 633.088960][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.094478][ T31] ? futex_wake+0x4ac/0x580 [ 633.099079][ T31] ? __fget_files+0x2a/0x420 [ 633.103863][ T31] ? __fget_files+0x3a0/0x420 [ 633.108928][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 633.114128][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 633.120048][ T31] ? rcu_is_watching+0x15/0xb0 [ 633.125014][ T31] do_syscall_64+0x14d/0xf80 [ 633.130001][ T31] ? trace_irq_disable+0x3b/0x150 [ 633.135409][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.142062][ T31] ? clear_bhb_loop+0x40/0x90 [ 633.146989][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.153167][ T31] RIP: 0033:0x7fa7a639c799 [ 633.157706][ T31] RSP: 002b:00007fa7a7260028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.166646][ T31] RAX: ffffffffffffffda RBX: 00007fa7a6616090 RCX: 00007fa7a639c799 [ 633.174888][ T31] RDX: 0000000000048040 RSI: 00002000000000c0 RDI: 0000000000000006 [ 633.183460][ T31] RBP: 00007fa7a6432c99 R08: 0000000000000000 R09: 0000000000000000 [ 633.192353][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.201062][ T31] R13: 00007fa7a6616128 R14: 00007fa7a6616090 R15: 00007ffc3e3f1088 [ 633.209344][ T31] [ 633.212464][ T31] INFO: task syz.0.3053:17609 blocked for more than 144 seconds. [ 633.223079][ T31] Not tainted syzkaller #0 [ 633.228162][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 633.236984][ T31] task:syz.0.3053 state:D stack:27880 pid:17609 tgid:17608 ppid:16704 task_flags:0x400040 flags:0x00080002 [ 633.249084][ T31] Call Trace: [ 633.252490][ T31] [ 633.255443][ T31] __schedule+0x15dd/0x52d0 [ 633.260151][ T31] ? __pfx___schedule+0x10/0x10 [ 633.265298][ T31] ? schedule+0x90/0x360 [ 633.269561][ T31] schedule+0x164/0x360 [ 633.273846][ T31] schedule_preempt_disabled+0x13/0x30 [ 633.279528][ T31] __mutex_lock+0x7fe/0x1300 [ 633.284494][ T31] ? __mutex_lock+0x5ac/0x1300 [ 633.290876][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 633.295609][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 633.301288][ T31] ? __dev_queue_xmit+0x28b/0x3870 [ 633.306813][ T31] ? radix_tree_lookup+0x240/0x290 [ 633.312105][ T31] genl_rcv_msg+0x10b/0x7a0 [ 633.317061][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.322300][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 633.327518][ T31] netlink_rcv_skb+0x232/0x4b0 [ 633.332664][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.337741][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 633.343400][ T31] ? down_read+0x272/0x2e0 [ 633.347951][ T31] ? genl_rcv+0xd/0x40 [ 633.352409][ T31] genl_rcv+0x28/0x40 [ 633.356455][ T31] netlink_unicast+0x80f/0x9b0 [ 633.361580][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 633.367350][ T31] ? netlink_sendmsg+0x650/0xb40 [ 633.372736][ T31] ? skb_put+0x11b/0x210 [ 633.377035][ T31] netlink_sendmsg+0x813/0xb40 [ 633.382498][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.388238][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 633.394046][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 633.399664][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.405650][ T31] __sys_sendto+0x672/0x710 [ 633.410774][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 633.416191][ T31] ? exc_page_fault+0x6a/0xc0 [ 633.421111][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 633.427351][ T31] __x64_sys_sendto+0xde/0x100 [ 633.432449][ T31] do_syscall_64+0x14d/0xf80 [ 633.437426][ T31] ? trace_irq_disable+0x3b/0x150 [ 633.442624][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.448839][ T31] ? clear_bhb_loop+0x40/0x90 [ 633.453935][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.462881][ T31] RIP: 0033:0x7ff1a375cfce [ 633.467332][ T31] RSP: 002b:00007ff1a19f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 633.475960][ T31] RAX: ffffffffffffffda RBX: 00007ff1a19f66c0 RCX: 00007ff1a375cfce [ 633.484064][ T31] RDX: 0000000000000020 RSI: 00007ff1a19f5000 RDI: 0000000000000004 [ 633.492422][ T31] RBP: 0000000000000000 R08: 00007ff1a19f4f04 R09: 000000000000000c [ 633.501671][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 633.510299][ T31] R13: 00007ff1a19f4f58 R14: 00007ff1a19f5000 R15: 0000000000000000 [ 633.518443][ T31] [ 633.521577][ T31] INFO: task syz.1.3059:17629 blocked for more than 144 seconds. [ 633.529497][ T31] Not tainted syzkaller #0 [ 633.548821][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 633.558144][ T31] task:syz.1.3059 state:D stack:27904 pid:17629 tgid:17628 ppid:17285 task_flags:0x400140 flags:0x00080002 [ 633.570726][ T31] Call Trace: [ 633.574310][ T31] [ 633.577260][ T31] __schedule+0x15dd/0x52d0 [ 633.581896][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 633.586985][ T31] ? __pfx___schedule+0x10/0x10 [ 633.591964][ T31] ? schedule+0x90/0x360 [ 633.597273][ T31] schedule+0x164/0x360 [ 633.601676][ T31] schedule_preempt_disabled+0x13/0x30 [ 633.607176][ T31] __mutex_lock+0x7fe/0x1300 [ 633.612235][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 633.617618][ T31] ? __mutex_lock+0x5ac/0x1300 [ 633.623051][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 633.627896][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 633.633300][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 633.638455][ T31] ? radix_tree_lookup+0x240/0x290 [ 633.643964][ T31] genl_rcv_msg+0x10b/0x7a0 [ 633.648524][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.653803][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 633.658995][ T31] netlink_rcv_skb+0x232/0x4b0 [ 633.664137][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.669459][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 633.675019][ T31] ? down_read+0x272/0x2e0 [ 633.679479][ T31] ? genl_rcv+0xd/0x40 [ 633.683659][ T31] genl_rcv+0x28/0x40 [ 633.687844][ T31] netlink_unicast+0x80f/0x9b0 [ 633.692882][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 633.698564][ T31] ? netlink_sendmsg+0x650/0xb40 [ 633.704982][ T31] ? skb_put+0x11b/0x210 [ 633.709281][ T31] netlink_sendmsg+0x813/0xb40 [ 633.714497][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.720011][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 633.725007][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 633.730693][ T31] ____sys_sendmsg+0x972/0x9f0 [ 633.735625][ T31] ? futex_unqueue+0x211/0x240 [ 633.740557][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.745974][ T31] ? import_iovec+0x73/0xa0 [ 633.750613][ T31] ___sys_sendmsg+0x2a5/0x360 [ 633.755641][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.761070][ T31] ? futex_wait+0x29a/0x380 [ 633.765839][ T31] ? __fget_files+0x2a/0x420 [ 633.770619][ T31] ? __fget_files+0x3a0/0x420 [ 633.775513][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 633.781083][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 633.786606][ T31] ? rcu_is_watching+0x15/0xb0 [ 633.791816][ T31] do_syscall_64+0x14d/0xf80 [ 633.796636][ T31] ? trace_irq_disable+0x3b/0x150 [ 633.802590][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.808812][ T31] ? clear_bhb_loop+0x40/0x90 [ 633.813608][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.819613][ T31] RIP: 0033:0x7f84bfd9c799 [ 633.824262][ T31] RSP: 002b:00007f84c0b71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.832853][ T31] RAX: ffffffffffffffda RBX: 00007f84c0015fa0 RCX: 00007f84bfd9c799 [ 633.841472][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 633.849583][ T31] RBP: 00007f84bfe32c99 R08: 0000000000000000 R09: 0000000000000000 [ 633.857944][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.866017][ T31] R13: 00007f84c0016038 R14: 00007f84c0015fa0 R15: 00007ffccdb7e808 [ 633.874421][ T31] [ 633.877582][ T31] INFO: task syz.1.3059:17630 blocked for more than 144 seconds. [ 633.886156][ T31] Not tainted syzkaller #0 [ 633.891229][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 633.900165][ T31] task:syz.1.3059 state:D stack:26120 pid:17630 tgid:17628 ppid:17285 task_flags:0x400140 flags:0x00080002 [ 633.913630][ T31] Call Trace: [ 633.917091][ T31] [ 633.920539][ T31] __schedule+0x15dd/0x52d0 [ 633.925182][ T31] ? __pfx___schedule+0x10/0x10 [ 633.930262][ T31] ? schedule+0x90/0x360 [ 633.934819][ T31] schedule+0x164/0x360 [ 633.939006][ T31] schedule_preempt_disabled+0x13/0x30 [ 633.945356][ T31] __mutex_lock+0x7fe/0x1300 [ 633.950449][ T31] ? __mutex_lock+0x5ac/0x1300 [ 633.955351][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 633.960562][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 633.965920][ T31] ? __dev_queue_xmit+0x28b/0x3870 [ 633.971419][ T31] ? radix_tree_lookup+0x240/0x290 [ 633.977157][ T31] genl_rcv_msg+0x10b/0x7a0 [ 633.982255][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.987823][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 633.993658][ T31] netlink_rcv_skb+0x232/0x4b0 [ 633.998671][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.004750][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.010825][ T31] ? down_read+0x272/0x2e0 [ 634.015395][ T31] ? genl_rcv+0xd/0x40 [ 634.019477][ T31] genl_rcv+0x28/0x40 [ 634.025332][ T31] netlink_unicast+0x80f/0x9b0 [ 634.030591][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 634.036190][ T31] ? netlink_sendmsg+0x650/0xb40 [ 634.041798][ T31] ? skb_put+0x11b/0x210 [ 634.046222][ T31] netlink_sendmsg+0x813/0xb40 [ 634.051439][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.056915][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 634.062606][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.067962][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.073446][ T31] __sys_sendto+0x672/0x710 [ 634.078112][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 634.083501][ T31] ? exc_page_fault+0x6a/0xc0 [ 634.088569][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 634.094209][ T31] __x64_sys_sendto+0xde/0x100 [ 634.099188][ T31] do_syscall_64+0x14d/0xf80 [ 634.104429][ T31] ? trace_irq_disable+0x3b/0x150 [ 634.110553][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.116779][ T31] ? clear_bhb_loop+0x40/0x90 [ 634.122108][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.128317][ T31] RIP: 0033:0x7f84bfd5cfce [ 634.133600][ T31] RSP: 002b:00007f84bdff4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 634.142504][ T31] RAX: ffffffffffffffda RBX: 00007f84bdff66c0 RCX: 00007f84bfd5cfce [ 634.150915][ T31] RDX: 0000000000000020 RSI: 00007f84bdff5000 RDI: 000000000000000b [ 634.159182][ T31] RBP: 0000000000000000 R08: 00007f84bdff4f04 R09: 000000000000000c [ 634.167510][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 634.177233][ T31] R13: 00007f84bdff4f58 R14: 00007f84bdff5000 R15: 0000000000000000 [ 634.186324][ T31] [ 634.189400][ T31] INFO: task syz.3.3060:17632 blocked for more than 145 seconds. [ 634.197807][ T31] Not tainted syzkaller #0 [ 634.203271][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.212814][ T31] task:syz.3.3060 state:D stack:26120 pid:17632 tgid:17631 ppid:5832 task_flags:0x400140 flags:0x00080002 [ 634.225246][ T31] Call Trace: [ 634.228742][ T31] [ 634.231921][ T31] __schedule+0x15dd/0x52d0 [ 634.236606][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.242156][ T31] ? __pfx___schedule+0x10/0x10 [ 634.247428][ T31] ? schedule+0x90/0x360 [ 634.252211][ T31] schedule+0x164/0x360 [ 634.256685][ T31] schedule_preempt_disabled+0x13/0x30 [ 634.262847][ T31] __mutex_lock+0x7fe/0x1300 [ 634.267501][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 634.273107][ T31] ? __mutex_lock+0x5ac/0x1300 [ 634.277907][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 634.283287][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 634.288359][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.293462][ T31] ? radix_tree_lookup+0x240/0x290 [ 634.298697][ T31] genl_rcv_msg+0x10b/0x7a0 [ 634.303712][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.308800][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.314890][ T31] netlink_rcv_skb+0x232/0x4b0 [ 634.320231][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.325390][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.331040][ T31] ? down_read+0x272/0x2e0 [ 634.335847][ T31] ? genl_rcv+0xd/0x40 [ 634.340880][ T31] genl_rcv+0x28/0x40 [ 634.345098][ T31] netlink_unicast+0x80f/0x9b0 [ 634.350067][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 634.355691][ T31] ? netlink_sendmsg+0x650/0xb40 [ 634.361403][ T31] ? skb_put+0x11b/0x210 [ 634.365716][ T31] netlink_sendmsg+0x813/0xb40 [ 634.370914][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.376499][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 634.381583][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.387104][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.392960][ T31] __sys_sendto+0x672/0x710 [ 634.397931][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 634.404035][ T31] ? exc_page_fault+0x6a/0xc0 [ 634.408810][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 634.414231][ T31] __x64_sys_sendto+0xde/0x100 [ 634.420186][ T31] do_syscall_64+0x14d/0xf80 [ 634.425120][ T31] ? trace_irq_disable+0x3b/0x150 [ 634.430762][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.437020][ T31] ? clear_bhb_loop+0x40/0x90 [ 634.442081][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.448176][ T31] RIP: 0033:0x7ff367f5cfce [ 634.452978][ T31] RSP: 002b:00007ff368dbfe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 634.461878][ T31] RAX: ffffffffffffffda RBX: 00007ff368dc16c0 RCX: 00007ff367f5cfce [ 634.470109][ T31] RDX: 0000000000000020 RSI: 00007ff368dc0000 RDI: 0000000000000005 [ 634.478146][ T31] RBP: 0000000000000000 R08: 00007ff368dbff04 R09: 000000000000000c [ 634.486450][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 634.494996][ T31] R13: 00007ff368dbff58 R14: 00007ff368dc0000 R15: 0000000000000000 [ 634.503503][ T31] [ 634.506599][ T31] INFO: task syz-executor:17639 blocked for more than 145 seconds. [ 634.515670][ T31] Not tainted syzkaller #0 [ 634.521770][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.530586][ T31] task:syz-executor state:D stack:23040 pid:17639 tgid:17639 ppid:1 task_flags:0x400140 flags:0x00080002 [ 634.543247][ T31] Call Trace: [ 634.546635][ T31] [ 634.549586][ T31] __schedule+0x15dd/0x52d0 [ 634.554725][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.560201][ T31] ? __pfx___schedule+0x10/0x10 [ 634.565154][ T31] ? schedule+0x90/0x360 [ 634.569602][ T31] schedule+0x164/0x360 [ 634.574379][ T31] schedule_preempt_disabled+0x13/0x30 [ 634.580296][ T31] __mutex_lock+0x7fe/0x1300 [ 634.584941][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 634.590355][ T31] ? __mutex_lock+0x5ac/0x1300 [ 634.595487][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 634.600482][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 634.605657][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.611193][ T31] ? radix_tree_lookup+0x240/0x290 [ 634.616337][ T31] genl_rcv_msg+0x10b/0x7a0 [ 634.622345][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.627425][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.632486][ T31] netlink_rcv_skb+0x232/0x4b0 [ 634.637302][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.642683][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.648090][ T31] ? down_read+0x272/0x2e0 [ 634.652927][ T31] ? genl_rcv+0xd/0x40 [ 634.657157][ T31] genl_rcv+0x28/0x40 [ 634.662796][ T31] netlink_unicast+0x80f/0x9b0 [ 634.667826][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 634.673620][ T31] ? netlink_sendmsg+0x650/0xb40 [ 634.678761][ T31] ? skb_put+0x11b/0x210 [ 634.683236][ T31] netlink_sendmsg+0x813/0xb40 [ 634.688234][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.694022][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 634.699187][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.704886][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.710350][ T31] __sys_sendto+0x672/0x710 [ 634.715168][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 634.720766][ T31] ? fd_install+0x94/0x3d0 [ 634.725894][ T31] ? fd_install+0x306/0x3d0 [ 634.730537][ T31] __x64_sys_sendto+0xde/0x100 [ 634.735450][ T31] do_syscall_64+0x14d/0xf80 [ 634.740285][ T31] ? trace_irq_disable+0x3b/0x150 [ 634.745377][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.751797][ T31] ? clear_bhb_loop+0x40/0x90 [ 634.756719][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.763081][ T31] RIP: 0033:0x7f7c8ff5cfce [ 634.767594][ T31] RSP: 002b:00007ffdd0f79588 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 634.776354][ T31] RAX: ffffffffffffffda RBX: 000055555c7c4500 RCX: 00007f7c8ff5cfce [ 634.784553][ T31] RDX: 0000000000000020 RSI: 00007f7c90d44670 RDI: 0000000000000005 [ 634.793042][ T31] RBP: 0000000000000001 R08: 00007ffdd0f79604 R09: 000000000000000c [ 634.801586][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 634.809663][ T31] R13: 00007ffdd0f79658 R14: 00007f7c90d44670 R15: 0000000000000000 [ 634.818017][ T31] [ 634.821265][ T31] INFO: task syz-executor:17648 blocked for more than 145 seconds. [ 634.831059][ T31] Not tainted syzkaller #0 [ 634.836125][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.845131][ T31] task:syz-executor state:D stack:23208 pid:17648 tgid:17648 ppid:1 task_flags:0x400140 flags:0x00080002 [ 634.857228][ T31] Call Trace: [ 634.860589][ T31] [ 634.863729][ T31] __schedule+0x15dd/0x52d0 [ 634.868258][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.873564][ T31] ? __pfx___schedule+0x10/0x10 [ 634.878564][ T31] ? schedule+0x90/0x360 [ 634.883236][ T31] schedule+0x164/0x360 [ 634.887454][ T31] schedule_preempt_disabled+0x13/0x30 [ 634.893146][ T31] __mutex_lock+0x7fe/0x1300 [ 634.897886][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 634.903542][ T31] ? __mutex_lock+0x5ac/0x1300 [ 634.908798][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 634.914108][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 634.919306][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.924447][ T31] ? radix_tree_lookup+0x240/0x290 [ 634.930612][ T31] genl_rcv_msg+0x10b/0x7a0 [ 634.935186][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.940678][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.946120][ T31] netlink_rcv_skb+0x232/0x4b0 [ 634.951110][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.956269][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.961938][ T31] ? down_read+0x272/0x2e0 [ 634.966754][ T31] ? genl_rcv+0xd/0x40 [ 634.970997][ T31] genl_rcv+0x28/0x40 [ 634.975249][ T31] netlink_unicast+0x80f/0x9b0 [ 634.981539][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 634.987071][ T31] ? netlink_sendmsg+0x650/0xb40 [ 634.992639][ T31] ? skb_put+0x11b/0x210 [ 634.997020][ T31] netlink_sendmsg+0x813/0xb40 [ 635.002079][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.007764][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 635.012981][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.018311][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.023996][ T31] __sys_sendto+0x672/0x710 [ 635.028616][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 635.034549][ T31] ? fd_install+0x94/0x3d0 [ 635.039121][ T31] ? fd_install+0x306/0x3d0 [ 635.044076][ T31] __x64_sys_sendto+0xde/0x100 [ 635.049415][ T31] do_syscall_64+0x14d/0xf80 [ 635.054305][ T31] ? trace_irq_disable+0x3b/0x150 [ 635.059396][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.065724][ T31] ? clear_bhb_loop+0x40/0x90 [ 635.070672][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.076708][ T31] RIP: 0033:0x7f185975cfce [ 635.081447][ T31] RSP: 002b:00007ffe673fc6e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 635.090080][ T31] RAX: ffffffffffffffda RBX: 000055555bdc5500 RCX: 00007f185975cfce [ 635.098258][ T31] RDX: 0000000000000020 RSI: 00007f185a544670 RDI: 0000000000000005 [ 635.106345][ T31] RBP: 0000000000000001 R08: 00007ffe673fc764 R09: 000000000000000c [ 635.114673][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 635.123017][ T31] R13: 00007ffe673fc7b8 R14: 00007f185a544670 R15: 0000000000000000 [ 635.131761][ T31] [ 635.135769][ T31] [ 635.135769][ T31] Showing all locks held in the system: [ 635.143924][ T31] 1 lock held by khungtaskd/31: [ 635.148886][ T31] #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 635.159134][ T31] 2 locks held by getty/5584: [ 635.164233][ T31] #0: ffff8880323cb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 635.174944][ T31] #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 635.185397][ T31] 1 lock held by udevd/9602: [ 635.190176][ T31] #0: ffff88802713c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 635.200071][ T31] 2 locks held by syz-executor/17546: [ 635.205556][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.214304][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.223722][ T31] 6 locks held by syz.2.3051/17602: [ 635.229306][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.238501][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.247984][ T31] #2: ffff888027124a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 635.258773][ T31] #3: ffff88802712b668 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 635.268574][ T31] #4: ffff88802712b008 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 635.281249][ T31] #5: ffff88802712b040 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 635.294175][ T31] 2 locks held by syz.0.3053/17609: [ 635.299477][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.310563][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.319951][ T31] 2 locks held by syz.1.3059/17629: [ 635.325462][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.333924][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.343937][ T31] 2 locks held by syz.1.3059/17630: [ 635.349265][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.358273][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.367430][ T31] 2 locks held by syz.3.3060/17632: [ 635.373058][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.381805][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.391528][ T31] 2 locks held by syz-executor/17639: [ 635.397071][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.405965][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.415743][ T31] 2 locks held by syz-executor/17648: [ 635.421441][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.430152][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.440573][ T31] 2 locks held by syz-executor/17658: [ 635.446167][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.454770][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.464421][ T31] 2 locks held by syz-executor/17660: [ 635.470003][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.478736][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.488048][ T31] 2 locks held by syz-executor/17680: [ 635.493752][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.502462][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.511966][ T31] 2 locks held by syz-executor/17690: [ 635.517385][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.525895][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.535082][ T31] 2 locks held by syz-executor/17692: [ 635.547152][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.555497][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.564942][ T31] 2 locks held by syz-executor/17709: [ 635.570471][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.578896][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.588077][ T31] 2 locks held by syz-executor/17712: [ 635.593642][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.602012][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.611367][ T31] 2 locks held by syz-executor/17732: [ 635.616857][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.626072][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.635876][ T31] 1 lock held by kworker/0:0/17740: [ 635.641761][ T31] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 635.652511][ T31] 2 locks held by syz-executor/17743: [ 635.658008][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.666761][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.676295][ T31] 2 locks held by syz-executor/17745: [ 635.682548][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.691051][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.700775][ T31] 2 locks held by syz-executor/17761: [ 635.706250][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.714684][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.724459][ T31] 2 locks held by syz-executor/17763: [ 635.730170][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 635.738741][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 635.748718][ T31] [ 635.751402][ T31] ============================================= [ 635.751402][ T31] [ 635.760577][ T31] NMI backtrace for cpu 1 [ 635.760595][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 635.760617][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.760629][ T31] Call Trace: [ 635.760636][ T31] [ 635.760644][ T31] dump_stack_lvl+0xe8/0x150 [ 635.760678][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 635.760707][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 635.760734][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 635.760768][ T31] sys_info+0x135/0x170 [ 635.760795][ T31] watchdog+0xfd9/0x1030 [ 635.760820][ T31] ? watchdog+0x21a/0x1030 [ 635.760845][ T31] kthread+0x388/0x470 [ 635.760864][ T31] ? __pfx_watchdog+0x10/0x10 [ 635.760879][ T31] ? __pfx_kthread+0x10/0x10 [ 635.760933][ T31] ret_from_fork+0x51e/0xb90 [ 635.760964][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 635.760989][ T31] ? __switch_to+0xc7d/0x1450 [ 635.761017][ T31] ? __pfx_kthread+0x10/0x10 [ 635.761040][ T31] ret_from_fork_asm+0x1a/0x30 [ 635.761085][ T31] [ 635.761094][ T31] Sending NMI from CPU 1 to CPUs 0: [ 635.876890][ C0] NMI backtrace for cpu 0 [ 635.876910][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 635.876928][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.876937][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 635.876962][ C0] Code: 3e 6e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 c2 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 635.876977][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 635.876993][ C0] RAX: 000000000025a547 RBX: ffffffff819a900a RCX: 0000000080000001 [ 635.877006][ C0] RDX: 0000000000000001 RSI: ffffffff8df23ae1 RDI: ffffffff8c27c180 [ 635.877017][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 635.877029][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: 0000000000000000 [ 635.877040][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 1ffffffff1c929d8 [ 635.877051][ C0] FS: 0000000000000000(0000) GS:ffff88812545f000(0000) knlGS:0000000000000000 [ 635.877064][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 635.877076][ C0] CR2: 0000559fb4f6ff40 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 635.877093][ C0] Call Trace: [ 635.877100][ C0] [ 635.877106][ C0] default_idle+0x9/0x20 [ 635.877134][ C0] default_idle_call+0x72/0xb0 [ 635.877155][ C0] do_idle+0x36a/0x5f0 [ 635.877176][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 635.877197][ C0] ? __pfx_do_idle+0x10/0x10 [ 635.877222][ C0] cpu_startup_entry+0x43/0x60 [ 635.877243][ C0] rest_init+0x2de/0x300 [ 635.877264][ C0] start_kernel+0x385/0x3d0 [ 635.877290][ C0] x86_64_start_reservations+0x24/0x30 [ 635.877309][ C0] x86_64_start_kernel+0x143/0x1c0 [ 635.877328][ C0] common_startup_64+0x13e/0x147 [ 635.877351][ C0] [ 636.065788][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 636.072651][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 636.081773][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 636.091834][ T31] Call Trace: [ 636.095131][ T31] [ 636.098071][ T31] vpanic+0x56c/0xa60 [ 636.102177][ T31] ? __pfx___schedule+0x10/0x10 [ 636.107087][ T31] ? __pfx_vpanic+0x10/0x10 [ 636.111642][ T31] ? __pfx_console_unlock+0x10/0x10 [ 636.116958][ T31] panic+0xc5/0xd0 [ 636.120706][ T31] ? __pfx_panic+0x10/0x10 [ 636.125229][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 636.130719][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 636.137068][ T31] watchdog+0x1023/0x1030 [ 636.141527][ T31] ? watchdog+0x21a/0x1030 [ 636.145981][ T31] kthread+0x388/0x470 [ 636.150079][ T31] ? __pfx_watchdog+0x10/0x10 [ 636.155125][ T31] ? __pfx_kthread+0x10/0x10 [ 636.159726][ T31] ret_from_fork+0x51e/0xb90 [ 636.164362][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 636.169692][ T31] ? __switch_to+0xc7d/0x1450 [ 636.174410][ T31] ? __pfx_kthread+0x10/0x10 [ 636.179028][ T31] ret_from_fork_asm+0x1a/0x30 [ 636.183832][ T31] [ 636.187025][ T31] Kernel Offset: disabled [ 636.191434][ T31] Rebooting in 86400 seconds..