last executing test programs: 23.479416757s ago: executing program 0 (id=2107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000940)={{r1, &(0x7f0000000080)='/dev/net/tun\x00', 0x228202, &(0x7f00000000c0)={@align=0xe, {0x1, 0x401, 0x6cadf3b6, 0x4}}, 0x401, &(0x7f0000000180), &(0x7f00000002c0)=0x81d}, 0x6, &(0x7f0000000880)=[{0x2, 0x4608, &(0x7f00000003c0)='\x86\x00', &(0x7f0000000440)="5e47ab041b77c945ba45928a654637eb23eba638b28f06b79d280ada25a6f1c8ba265b6f9cd6bc57cb63c6c54e6ed099dcda8c27385baa746c40f2769c108ea17bf9bcc4c3da9f2aef1971a84d754b2f3ca13c2e51de8c2918bdaded9e73cb7a74bdedd33e800aaa5afa320c03a08de72db90f55cf75646f0946f0dca9de1282f60a254ff53df6f65f49d09c6bc3cbb392a987f99a61390e9aa23e745d6116dcc3a3292f9b1a07118e", 0xa9, 0x2}, {0x1, 0x3ff, &(0x7f0000000500)='!$\x00', &(0x7f0000000540)="3d19efc2dcdaf97a06e30d020cca1811847f2201b603feafcdbfbc6c3a0a276aa5a9191395260c12a1e57b84005f6b905a71fd78642a946d9e3b936053fee11fbc10ad12ba6600192b3a3fb0ac38c9dfea6006a77d7a18bc38816ae4769d91dd64dae9bbf79a623049dbe8d7b8b380f8f818d8101a28fc5176e61bf66905ee3e67f7a602a8f8ceca504df7bde129a5b7d0183b9be45a329075f2fa670d88628e7c22c7fc8eadc853e2f929576b3e0f24fa4baedc8095a5b8fc7e9fc387520d2d5e2117988fd7b8cd9bd77b9734785a8d199d188f8b823e21ac1b1c7cee7d6c3cb4b81f0d5c019b34f8a885cc68afd7dd155b5491062d", 0xf6}, {0x1, 0x7, &(0x7f0000000640)='-/])$\x00', &(0x7f0000000680)="095890bd743c6e35e00360d9e7ec35a4dbdd47f4eeef354c217e87278d64cbeceb37df06fcad0b870400c371ec9d7b725b9f2c0a2c039f028e9ce839503c971e2ea2a36bf2dfe69239505bd5", 0x4c, 0x2}, {0x3, 0x80, &(0x7f0000000700)='\\@(}\x00', &(0x7f0000000740)="11085cfc7e3ad2cff756048d2ec12e9a5ef5e176e498d6acde1d52b4c1141d82d965249988edfad3c2e37ec6aeabfbb6a37a3f465bf326cd187c9d", 0x3b, 0xa}, {0x1, 0x2a, &(0x7f0000000780)=')\x00', &(0x7f00000007c0)="abbe1a40e238ca09ef3aa7c422f9895683165d1f05af8c38399586b52562b4da16f3075f8215b3cb6a0d", 0x2a, 0x8}, {0x0, 0x4, &(0x7f0000000800)='/dev/net/tun\x00', &(0x7f0000000840)}]}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/226, 0xe2}, 0x7f}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r4, 0x4, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010}, 0x2000c0c0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x346, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 22.801497222s ago: executing program 1 (id=2115): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0xb8, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x9c, 0x1, 0x0, 0x1, [@typed={0x97, 0x6, 0x0, 0x0, @str='\x80\n@H\xc3\xe2\xb3\xd1{\x13\xa9\xcd\xbd\xd7Og\x15q\xd0\xb01\xa8\xd7\xc8X\x0f\xb4\xc7\xed\xdb\xb6\xca{d4CFqk\xe2\xa0(Y\xb7[\xed\xd8\x01-=\xedU\x9e.\xb5\xaec\x84&\xff\b^dl\xc7\x97\xb7\xe3\x89\xb6\x00\x00\x00\x00\x00\x00\x00\x00\xb8\xd2\x81\xe0{@\xe0\xa8vx\x110V4\tU\x84T\xe5\xce\xfarT\xcbH\x90\xf9\x1d\xbd\x15\x04\x9d\xb2\xff\xba\x91\xa7l;\xae+\xf1SD\xc8`\xc2.#AE\xe0M7\xd4\\\x80\xcf\x05\xba\x83e0\x8a\xd21\x8f]\xba'}]}, @nested={0x4, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0xaf8, 0x918, 0xffffffff, 0xffffffff, 0x918, 0xffffffff, 0xbb0, 0xffffffff, 0xffffffff, 0xbb0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2b}, 0x0, 0x8b0, 0x918, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x3, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x6, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x9}, {0x7}, {0x7, 0x1000}, {0x20fff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x400009}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0xc0}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x5, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0xe8, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x2}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x8}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0xb}, {0xbf9, 0x6}, {0x4}, {0x101, 0x7}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x8}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0xc}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff, 0x3}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff, 0xffffffff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}], 0x40}}, @common=@icmp6={{0x28}, {0x12, "d08d", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x7, 0x0, 0x6, 0x9, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xb58) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x9, 0x200006}, 0x28) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r7, {0xd, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x4}, {0x7}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f00000004c0)="70b7", 0x5dc}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000010029bd7000ffdbdf2500fe0000b5700d67576c6c1ded150bd3b497c973aa0da99e769df9e8ebcea57631d0bb72ef8a3f47f1268079fe2abf463db45d43f11f0dc09dadf6628c199674faa413e4060d3ac700492de02a7f32928fc84016aaf81331bd8d4072d65c5f76fa883578399118c8f7e4933ea7a40d962bbd5dbb6f79e9c5233102325ef77438998759a8d060776df3b309d8be14ed7b6dba9b2b2055722b0c4e0609b7b8904fc10ff165737a7eb25768bc92723fd8935002815ed24c56c261900a1165ab59d72256a2e67947", @ANYRES32=0x0, @ANYBLOB="df320200201a0100140003006e657464657673696d3000000000000034001680300001802c000c8014000100040000002f0400000200000088a8000014002403050000000d0a000005000000be940000"], 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x880) 20.42648075s ago: executing program 3 (id=2120): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0xfffffbff, 0xa, 0x4, 0x2, 0x1, 0x80000001, '\x00', 0x0, r0, 0x2, 0x2, 0x4, 0x4}, 0x50) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) sendmmsg$unix(r1, &(0x7f0000003080)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000540)="e8d747be2b3c220123424330b2658a470b6512977cf3096473859ad88f8e0d2872bd5e033019e4649a992118edd57c9204fb7215f0e655573c780060e3d4e641820fbe86418360d2f0e2e90915ee9ba8dc662dfe", 0x54}, {&(0x7f0000000600)="3c83d65b218e82a9e46155b048ca94f0d718ac15c7172ea183613b4c875877bf", 0x20}, {&(0x7f0000000640)="356b91ecc0221eadf18b12763e4921668aa81587f6a4cc0d1d741e3877cddf4628c15a4281b5c1546958af8516149d4ec52705e8bf490d1b03745c6dca26c2f473fa9e3c6d7cd8e06101acab353eba6af9d52d8ae10ea78f8f4e76f0b27145e9f32dcad67396741bf6ba0c00b3ff184294cccaed2c224749d8e00aee2a862c893bfdff34684c58d060b96eade35eb45743ebcabee0d6cf6689a3fc7b9d2766c3220f15d01ad198", 0xa7}], 0x3, &(0x7f0000000800)=[@rights={{0x1c, 0x1, 0x1, [r2, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r3, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r0, r0, r0]}}], 0xd0, 0x8000881}}, {{&(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000000a00)="47f66c9afb6a2b3984370f7c1234359e3d66fd288a88675a275457929c9b490071fa48da90e5fc43e47d426e29da27fd25abd822d8fd87037e2c6f8a610ff2d9bb4b24ecce1d7de6c2543b4e9c8b58bc89033cf6c483a71dac5951ea0db8581c828e333bd861e4c7311b3c398dffd3e5b13796c57ec01bb05e8a78e4e92b797c43759b0aca3056dd50f4c156b45ff3e43223cdf4248db6223d7548e861e1a6167f0d70376b6165ef6593343e948d2f55e22f557df3c287683f4234c567e6165b429351feab28e7829b0ffa1c1b5f5c93022289228e6e0101e544857b2b376c695722b4356d81ebf3401cb6fb77e372b0d2ec5f", 0xf3}, {&(0x7f0000000b00)="63636af6efc4a237e732da25ec83d6be80", 0x11}, {&(0x7f0000000b40)="e50f4189bbf4791f800a7424042f66559709112ea9f107d02b164c63a4a08908a2e05a4616e6fe8dc403f514950df0e585155e8386d5b116b55651ca884b1e1dea", 0x41}, {&(0x7f0000000bc0)="69cdddc2973dc606949fb7e5f8eb3f70830d6c3223ad94aaa26a91dbcc030c76bc90a988e67d4444a976b10b540a3a78bc8c11783bb3d6cb00c476637419128b0099eedc5187c0aa1320984c286fdd834373da4c6beccfc001c63a3afbd706f6c2eadccdd5ec1182f285e09a3c684fb6093e78fe8ac5d283d06ea6fe6b794a9e6e914757f08e0b04ebb8e542f5e3c6e09213f2396ebc0cc8abb7bf862f5b", 0x9e}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="423ac6c8a5b15ef6fd74ac2919350a6109a0dd307b69ef10c3e51c0dcf0042ef595ac6004dca00215f17859339cde99306585eef7a233f02f0b514c423f1ea15c42671c12650547331d47c366545d479751af1548b", 0x55}, {&(0x7f0000001d00)="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", 0x1000}], 0x7}}, {{&(0x7f0000002d80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002e00)="444e4e90593d35bc77607a644cbc0aa81538f22cc8c4c4f8d957da95646c23e5b09cab1f49eb6f661ab35207724b872c3198146e2803c9b025c3199d3ad9b8e8800da7689ee0", 0x46}, {&(0x7f0000002e80)="5168ad4f6ec492f4bd0ebdafc6c3e90e09852577c4a2b66d4b36484e1a3769e37f6aca4578278c7b14aff0dd1f7883fcc1ced6a171491bf039b7ad941f8eed48e06ff47491080151ed", 0x49}], 0x2, &(0x7f0000002f80)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c060000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r0], 0xd8, 0x4010}}], 0x3, 0x1e58a86b9081b07c) sendto$inet(r1, &(0x7f00000002c0)="cc", 0xffffffcf, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r0, &(0x7f0000003200)="5fed23ecfac576893179a4f09a9413e8b7c5abb0312b75d68e0438227ab3964ffaffffffb99f046c616e39f07e523c49f4deaaac21da38bb8006728c318aa99da5324371dcda5b1b6794e3f7cc6d10f2c13f707535ef659a7cf94db4c28478d30b61ae71ce1e9aaf65ebe53406b4205d51150f46083c72426d7121bb9198d449233e89365c7e9f96302afe049112fe001f6173646d91b4dc", 0x98, 0x840, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$alg(r1, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb13456f46", 0x5}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) close(r1) 20.374966018s ago: executing program 0 (id=2122): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 20.35678786s ago: executing program 1 (id=2123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES64=0x0, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000002300000000000000007112430000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000005000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x13, &(0x7f0000001a80)=ANY=[@ANYBLOB="180000000400000000000000030000001801000020786c2500000000002020207b1af8ff00000000bfa1000b0000000007010000f8ffffffb702000008000000b703000080370000850000002d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="30000000100001042dbdd35d247bc859fce584e781e67000fcdbdf250000000023299dd9749e439b90599e92fba2e2be11f2f8b19cedb18aa893ccd79c459a7c9948fd9da64d2c04f02a23ff9ce8b803c9fb6026b3d98687e789b02792eb92d1831cdb4a00278754c195d78b7d66a89c9b6a7d7d29a644f863c3b818b78ee913242986b72f1d1e", @ANYRES32=0x0, @ANYBLOB="840000000000000008001c00", @ANYRES32=r1, @ANYBLOB="0500100007000000"], 0x30}, 0x1, 0x0, 0x0, 0x404000c}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20048080) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf250100000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x4008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x200000d, 0x12, r11, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 20.219067248s ago: executing program 3 (id=2124): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x8, 0x9, 0xd5}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180040003000800"], 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) 20.128284508s ago: executing program 0 (id=2125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newtaction={0xc8, 0x30, 0x1, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xffe}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0x5c, 0x17, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xffffff1f, 0x4, 0x3, 0xfa}, 0x7}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xc8}}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a07fefe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x34) 20.044509479s ago: executing program 1 (id=2126): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) recvmmsg(r2, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002040)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20004000) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x5, 0x10, 0x0, 0x0, 0x25dfdbfc, [@sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast1}}]}, 0x80}}, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24008084}, 0x488d1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000140)={0x0, 0xfff8}, 0x8) connect$pppoe(r9, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0xfffffffffffffd39, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000f721d99d8aaabec6d852faaaf0d481cb06b27601e7c2e716f03668030c02151a44272a8cd0d7ac046fb5c2e56e69d00e0f108d1b563352791238a4de1235c10fc5443e584585c6", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2048004) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x5, @broadcast, 'gre0\x00'}}, 0x1e) 19.959379645s ago: executing program 3 (id=2128): syz_emit_ethernet(0x2a, &(0x7f0000001ec0)=ANY=[@ANYBLOB="aaaaaaaaaaaa4aa468739f8508060001080006040001bbbbbabbbbbb0a010100bbbbbbbbbbbbac1414ff"], 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast1}, 0x2, 0x2, 0x2, 0x1}}, {0x0}, 0x0}, 0xa0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000004c0), 0xce, r0}, 0x38) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 19.95831896s ago: executing program 0 (id=2129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000010000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000180)="000a11000500004000eb55000008000100aa34744000fbffffffffffffff75e62e90d9c5596d3ef4dd8a", 0x2a, 0x4000000, &(0x7f0000000380)={0x11, 0xf6, 0x0, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000d00)="df33c9f7b9a60007000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x78999022, @local, 0x6}}, [0x5, 0x8000000000000000, 0xb426, 0x81, 0x7, 0x0, 0x7, 0x8, 0x2, 0x100000000, 0x1a, 0x0, 0xfffffffffffff150, 0x401, 0xf]}, &(0x7f0000000140)=0x100) mmap(&(0x7f00000df000/0x4000)=nil, 0x4000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000001140)=ANY=[@ANYBLOB="87199bbd9aa68ad6808861e093b73165cd9fcd8d56338b85d41ed4bc24fa2b685b3baaf106b0c322006c134fe74d6de77336119f1f865b3e6f48732663bb3e85a1fd8dd7df704b418817f1f4be71c67e176279c1f52ca433298060e98c829814ecbd9f5a814a231e7cfeaf5a807bb4a14c739a77106edcdcc501bf23ae55b92834c723a8611fda686d67d13f83fa59bd99720e01bfc3350844b1f18fec477de6b07680d4fc1e71aa7fa568f527"], 0x190) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) close(0x3) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY(r10, 0x5000940f, &(0x7f0000000140)={{r11}, "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"}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r8}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x66, &(0x7f0000000300)={r9, 0x8}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={r9, 0x84, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x1, @loopback, 0x2}, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0x1, @private2, 0x7ff}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000280)=0x10) socket$can_j1939(0x1d, 0x2, 0x7) 19.859897409s ago: executing program 3 (id=2130): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x1, 0xcc, &(0x7f0000000440)=""/204, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) unshare(0x20000400) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x130901, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x10, 0x2, &(0x7f0000003200)=ANY=[@ANYBLOB="850000008b0000009500000000000000"], &(0x7f0000003240)='GPL\x00'}, 0x94) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x44048014) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000eb75bbb76a66cc3a81de6baf5a17583e5d8f296841f0f34142861928f84953365c1f71e5b3952a1ac14f8b6ddda85a8119a818cf23ef8de204ac007fd2fe202bb624b82a630ccf9aa31e80", @ANYRES32=0x0, @ANYRESDEC=r6, @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r10, &(0x7f0000000340)="afb42f00"/18, 0x0}, 0x20) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x11, r0, 0xe64fe000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 19.771852814s ago: executing program 0 (id=2131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'sit0\x00', 0x10}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x40020) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "3d001c", 0x8, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}, @private1, {[], {0x4e23, 0x4e20, 0x8}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x400, 0x10}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={r2, 0xff}, &(0x7f0000000440)=0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$phonet(0x23, 0x2, 0x1) setsockopt(r4, 0x4, 0x5960, &(0x7f0000000140)="51c71dd2f6684cf23031841e", 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000280)={{0x1d, @empty, 0x4e20, 0x4, 'none\x00', 0x1, 0xffff, 0x8}, {@broadcast, 0x4e23, 0x2000, 0x5, 0x8, 0x4b}}, 0x44) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)={0x44, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x4, 0x700000000000000}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10010000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x88080) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001"], 0xfdef) 19.718521264s ago: executing program 1 (id=2132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000940)={{r1, &(0x7f0000000080)='/dev/net/tun\x00', 0x228202, &(0x7f00000000c0)={@align=0xe, {0x1, 0x401, 0x6cadf3b6, 0x4}}, 0x401, &(0x7f0000000180), &(0x7f00000002c0)=0x81d}, 0x6, &(0x7f0000000880)=[{0x2, 0x4608, &(0x7f00000003c0)='\x86\x00', &(0x7f0000000440)="5e47ab041b77c945ba45928a654637eb23eba638b28f06b79d280ada25a6f1c8ba265b6f9cd6bc57cb63c6c54e6ed099dcda8c27385baa746c40f2769c108ea17bf9bcc4c3da9f2aef1971a84d754b2f3ca13c2e51de8c2918bdaded9e73cb7a74bdedd33e800aaa5afa320c03a08de72db90f55cf75646f0946f0dca9de1282f60a254ff53df6f65f49d09c6bc3cbb392a987f99a61390e9aa23e745d6116dcc3a3292f9b1a07118e", 0xa9, 0x2}, {0x1, 0x3ff, &(0x7f0000000500)='!$\x00', &(0x7f0000000540)="3d19efc2dcdaf97a06e30d020cca1811847f2201b603feafcdbfbc6c3a0a276aa5a9191395260c12a1e57b84005f6b905a71fd78642a946d9e3b936053fee11fbc10ad12ba6600192b3a3fb0ac38c9dfea6006a77d7a18bc38816ae4769d91dd64dae9bbf79a623049dbe8d7b8b380f8f818d8101a28fc5176e61bf66905ee3e67f7a602a8f8ceca504df7bde129a5b7d0183b9be45a329075f2fa670d88628e7c22c7fc8eadc853e2f929576b3e0f24fa4baedc8095a5b8fc7e9fc387520d2d5e2117988fd7b8cd9bd77b9734785a8d199d188f8b823e21ac1b1c7cee7d6c3cb4b81f0d5c019b34f8a885cc68afd7dd155b5491062d", 0xf6}, {0x1, 0x7, &(0x7f0000000640)='-/])$\x00', &(0x7f0000000680)="095890bd743c6e35e00360d9e7ec35a4dbdd47f4eeef354c217e87278d64cbeceb37df06fcad0b870400c371ec9d7b725b9f2c0a2c039f028e9ce839503c971e2ea2a36bf2dfe69239505bd5", 0x4c, 0x2}, {0x3, 0x80, &(0x7f0000000700)='\\@(}\x00', &(0x7f0000000740)="11085cfc7e3ad2cff756048d2ec12e9a5ef5e176e498d6acde1d52b4c1141d82d965249988edfad3c2e37ec6aeabfbb6a37a3f465bf326cd187c9d", 0x3b, 0xa}, {0x1, 0x2a, &(0x7f0000000780)=')\x00', &(0x7f00000007c0)="abbe1a40e238ca09ef3aa7c422f9895683165d1f05af8c38399586b52562b4da16f3075f8215b3cb6a0d", 0x2a, 0x8}, {0x0, 0x4, &(0x7f0000000800)='/dev/net/tun\x00', &(0x7f0000000840)}]}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/226, 0xe2}, 0x7f}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r4, 0x4, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010}, 0x2000c0c0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x346, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) 19.306212064s ago: executing program 0 (id=2135): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095", @ANYRES16=r1, @ANYRES64=0x0], &(0x7f0000000040)='GPL\x00', 0x6, 0x9d, &(0x7f00000002c0)=""/157, 0x40f00}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000240)="94", 0x1) readv(r3, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/135, 0x87}], 0x1) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f00000001c0)) tee(r0, r4, 0x8f5, 0x100000000000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000980)=0x7d, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}, {{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f0000000180)=""/28, 0x1c}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000480)=""/170, 0xaa}, {&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000640)=""/236, 0xec}, {&(0x7f0000000740)=""/69, 0x45}], 0x7, &(0x7f0000000840)=""/191, 0xbf}, 0x3}], 0x2, 0x1000400000de, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r7) sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x24008050) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000009c0), 0xffffffffffffffff) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000a00)={0xffffffffffffffff, 0x30000000000000, 0xfffffffffffff631, 0xc}) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xc0, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe68b}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4800}, 0x50) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000000200)={r14, 0x7f}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f00000003c0)={r14, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000480)=0x84) r15 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r15, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x0, 0xff, 0x3}, {0x2, 0xff, 0x4}, 0xff}, {0x3, 0x0, {0x0, 0x1, 0x6}, {0x0, 0xf0, 0x1}, 0x0, 0x1}], 0x40) r16 = socket$l2tp(0x2, 0x2, 0x73) getpeername(r16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) 19.254702174s ago: executing program 3 (id=2136): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc, 0xd}, 0x10) clock_gettime(0xfffffffffffffff6, 0x0) write(r0, &(0x7f0000000300)="240000001a000502d1f9f407000904001f000000fe0000000000000008001f00fd000000", 0x24) 18.493453531s ago: executing program 2 (id=2138): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0x9, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x58, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x9}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000bf00000000000000000000008500000087000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x13, r4, 0x80c3e000) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17.058385005s ago: executing program 4 (id=2139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180200000020782592593a3e93f2ed5a2aee884f90d4077400000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180200000020782592593a3e93f2ed5a2aee884f90d4077400000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x7}, 0x94) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180)) r0 = socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 17.058089257s ago: executing program 3 (id=2140): syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x18, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x8048}, 0x4000000) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r3) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) clock_gettime(0x87f60f7a31614e95, 0x0) sendmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x3, &(0x7f0000000780)=[{&(0x7f00000000c0)="280a8768f3aa916a9fea47030db6d2c8b206f9"}, {&(0x7f00000001c0)="069037cdfd32f9b421769663268d4b7650a7f7703c039535776a948800f3347b660612d3c206265ad2510f447e256d2870ec5f9707ac9847c7de0b9d1c0591ec3a4b4f4198794d96b0422ed91af10e2677b35f0c7789d0c625f70b915514000746000975b1aadb0289802d6bfd62bb78a0ed8c853033864acbf5afdba16cf59cc0"}, {&(0x7f0000000300)="eca31c65cf9a99e021cd10557d31cb411a3d90698be7163d10dd8ca322c0390d3d864554d177f76fa377d1af9ca6f7e8f22ad9e82ca26eec5ecc8e9b02e4e62cc7cac18372bcd43d7c9c29ffb505f4"}, {&(0x7f0000000380)="1d7e7d764f6e60cbdfda7c2a312617aeaa2c08b31725"}, {&(0x7f0000000540)="4f25ff8c666adf3c78e31013c0e82f8f422262d7a2a895f7951c6e5adfe31e356b42f0716b1144bca8754ceaf81f6af5d741c4c706bf73cdcb4ee492eb3f4b98802fca"}, {&(0x7f00000005c0)="b9ab2a41dad579ad6b367d5c41f8734e536cafe4e23233b1b36b9964837d00c77f827b688230092c8f6cf6d02ed4539f8cc10d80857eabf26a137dcab8ffe74c919438a2188518ba1e5bdf0f0dbfa14bcee2049c7885043b79a0376e0d57ca05f3dc11f37e"}, {&(0x7f0000000640)="f75bac37b55240914b6cef8c9236e3ef3f05189aee6ec054c1bf9799c19d5466b51b96cb75986e3d63d26d798106a2c7f22ffbde13662a87558a9213beb009dad894596b003938f9f233195b8b07ad00cbe33eae1536b1557b3e792ccaf8fc2ce6d001eb32ff94e546aafaaf326ef6cd156e1f5e49d3c555b5a8ee87ad0cc9797778617af25d0d5ba77a527879bc3e6c2a5f656658a933917f5a6424788d32103586856a961378b9084cc23e69e55de1a015c7e7fc2c3f775c093e7897e92c01573472299b507b33c033a3f1fee557967806bc9ec89f115735c23978140d"}, {&(0x7f0000000740)="e57a83dc8bc1ed73ec668ab25c043e2847cbcc6fa5c64de315a9e3a716a109cc66db82be4ef0"}]}}], 0x1, 0x400c011) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004084}, 0x480c4) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@delchain={0xfffffffffffffe34, 0x65, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xffe0}, {0xffff, 0xfff2}, {0xfff3, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x2c}}, 0x24040084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) 17.052847143s ago: executing program 2 (id=2141): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x1f, &(0x7f0000001680)=""/193, &(0x7f0000000180)=0xc1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xc}, 0x1c) (async) getsockopt$IP6T_SO_GET_INFO(r9, 0x29, 0x40, &(0x7f0000000080)={'filter\x00', 0x0, [0x1, 0x306559d9, 0x0, 0xffff, 0x3]}, &(0x7f0000000140)=0x54) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x40000) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 17.003530541s ago: executing program 1 (id=2142): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x5, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800050000000000000000002d000000000000010000000005000100080000000c000500000000000a00"], 0x1bb0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000003c0)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1_to_batadv\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xffffffff, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x10000000, 0x4, 0x1, 0x3, 0x9, 0xff, 0x9, 0x3, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0xfffffffe, 0x100000, 0x2, 0x3, 0x463c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0x7, 0x40, 0x2, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x2, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x10001, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x9, 0x100aa, 0x7f, 0x8, 0x80180000, 0x3fff, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x8, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0xfffffffc, 0x10000, 0x40000000, 0x800, 0x6, 0x9, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffffffff, 0x84, 0x2, 0xffffffff, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffc, 0x43, 0x2, 0x5, 0x8, 0x1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1f8, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000440)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000000)={r11, 0x3}, 0x8) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 16.955138272s ago: executing program 4 (id=2143): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x604ae000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) (async) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) 16.854470244s ago: executing program 4 (id=2144): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ffffffffffffff0a1400000011000100000000000000001a0000000a"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x2b) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0xf, 0x6, 0x400}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 16.828789983s ago: executing program 1 (id=2145): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="01000000000000000000170000005400060400000000000000286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914000302a168781af428b27b11a0b4dbc3ac7f8c4f98e1e3584a94d06f405b11a7aad584803662e83d11977396c2224fd0751dda7c4bbd551402971d5c27bc3d6208"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0xc054) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x2004}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 16.811773884s ago: executing program 4 (id=2146): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1bfbaa125c6ba1f0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x65918aa5951b0d2a}, 0x48) 16.718140301s ago: executing program 4 (id=2147): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) (async) listen(r1, 0x5) (async) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234567890abcdef"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x111, 0x1, "1234567890abcde1"}, {0x10, 0x6, 0x6b34}, {0x28, 0x1d, 0x7, "cab2e983a719af244cef6882dbc4285dd6dae9d49b"}], 0x50}, 0x0) (async) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234567890abcde2"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234567890abcde3"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) (async) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234567890abcde4"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) (async) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234567890abcde5"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x18, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) close(r1) 16.717683011s ago: executing program 4 (id=2148): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x44840}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000005c0)={@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, {0x0}, 0x0, 0x62}, 0xa0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e00000000a06010100000000000040fb0300000908000940800000010900020073797a3100000000050001000700000800094000000005880008800c000780080009e28dee7194c74d83c5468841b146b7426fa3e2e3df3fe34204ce2b4e276bb1d3c0de3148ff38b9460eb8f0ac4ea262c65fe9f706501fa55e6e54f950e1df460c52bf245d814fc99a279d7eaf10d7afe045cf0587c2ae8973dc2388c3cddab84c5e0540cf8a8a2a41544f9c0a31efefa1f65e44901608b142b6b74bf2e631400f53120acbe593178d570d8e47abb36233f9623852910e34a22671c2c375b6a40a00432c13375e19e73fb9f06b512964e3b71e"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x200480c0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES32=r0], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000000101010100000000000000000a0004080c00198008000100a000000004000180"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24048008) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="3f9d02000000fcdbdf251700000008000300", @ANYRES32=r14, @ANYBLOB="0c00308005000200fd000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r15 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r15, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004041) 16.143386003s ago: executing program 2 (id=2149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 16.099350412s ago: executing program 2 (id=2150): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) (async) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x0, 0xf, 0xc}, &(0x7f00000001c0)=0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, 0x0, &(0x7f00000002c0)) (async) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='veth1\x00') (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYBLOB="4212a6e795683e926bfb1743f1e40de4e023963a790da4384660c7293f", @ANYBLOB="635f7ddd002e71c8aedfb4878256c105fd3d8df6139fbabeacc26f3019a8e34e17d2d65ea9b9f083f5d7e151eba457db2151acda9677d2d59106bbfc2be4fac7316a3ca3584c56c8b0607594308331bca4b8458d074cf54bac1d8506b21ab905e20e6306b9da292191ab253ea4b6d6840bc175e5ebf1c9a72e8b3d0a7f6a89de1e42a553", @ANYRESHEX=r0, @ANYRES32=r6, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="4b937eddf251aecaabc9fd72917fcd90073c661a88e57ab6"], 0x4c}}, 0x200008c0) (async) r9 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockname$llc(r9, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0xc3722b1e) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014011a80400002803c00018022002100", @ANYRES8=r1], 0x134}}, 0x0) 16.014416814s ago: executing program 2 (id=2151): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000020005000000000002"], 0x88}}, 0x20000000) 16.010861446s ago: executing program 2 (id=2152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000940)={{r1, &(0x7f0000000080)='/dev/net/tun\x00', 0x228202, &(0x7f00000000c0)={@align=0xe, {0x1, 0x401, 0x6cadf3b6, 0x4}}, 0x401, &(0x7f0000000180), &(0x7f00000002c0)=0x81d}, 0x6, &(0x7f0000000880)=[{0x2, 0x4608, &(0x7f00000003c0)='\x86\x00', &(0x7f0000000440)="5e47ab041b77c945ba45928a654637eb23eba638b28f06b79d280ada25a6f1c8ba265b6f9cd6bc57cb63c6c54e6ed099dcda8c27385baa746c40f2769c108ea17bf9bcc4c3da9f2aef1971a84d754b2f3ca13c2e51de8c2918bdaded9e73cb7a74bdedd33e800aaa5afa320c03a08de72db90f55cf75646f0946f0dca9de1282f60a254ff53df6f65f49d09c6bc3cbb392a987f99a61390e9aa23e745d6116dcc3a3292f9b1a07118e", 0xa9, 0x2}, {0x1, 0x3ff, &(0x7f0000000500)='!$\x00', &(0x7f0000000540)="3d19efc2dcdaf97a06e30d020cca1811847f2201b603feafcdbfbc6c3a0a276aa5a9191395260c12a1e57b84005f6b905a71fd78642a946d9e3b936053fee11fbc10ad12ba6600192b3a3fb0ac38c9dfea6006a77d7a18bc38816ae4769d91dd64dae9bbf79a623049dbe8d7b8b380f8f818d8101a28fc5176e61bf66905ee3e67f7a602a8f8ceca504df7bde129a5b7d0183b9be45a329075f2fa670d88628e7c22c7fc8eadc853e2f929576b3e0f24fa4baedc8095a5b8fc7e9fc387520d2d5e2117988fd7b8cd9bd77b9734785a8d199d188f8b823e21ac1b1c7cee7d6c3cb4b81f0d5c019b34f8a885cc68afd7dd155b5491062d", 0xf6}, {0x1, 0x7, &(0x7f0000000640)='-/])$\x00', &(0x7f0000000680)="095890bd743c6e35e00360d9e7ec35a4dbdd47f4eeef354c217e87278d64cbeceb37df06fcad0b870400c371ec9d7b725b9f2c0a2c039f028e9ce839503c971e2ea2a36bf2dfe69239505bd5", 0x4c, 0x2}, {0x3, 0x80, &(0x7f0000000700)='\\@(}\x00', &(0x7f0000000740)="11085cfc7e3ad2cff756048d2ec12e9a5ef5e176e498d6acde1d52b4c1141d82d965249988edfad3c2e37ec6aeabfbb6a37a3f465bf326cd187c9d", 0x3b, 0xa}, {0x1, 0x2a, &(0x7f0000000780)=')\x00', &(0x7f00000007c0)="abbe1a40e238ca09ef3aa7c422f9895683165d1f05af8c38399586b52562b4da16f3075f8215b3cb6a0d", 0x2a, 0x8}, {0x0, 0x4, &(0x7f0000000800)='/dev/net/tun\x00', &(0x7f0000000840)}]}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/226, 0xe2}, 0x7f}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r4, 0x4, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010}, 0x2000c0c0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x346, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) 3.519811548s ago: executing program 32 (id=2135): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095", @ANYRES16=r1, @ANYRES64=0x0], &(0x7f0000000040)='GPL\x00', 0x6, 0x9d, &(0x7f00000002c0)=""/157, 0x40f00}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000240)="94", 0x1) readv(r3, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/135, 0x87}], 0x1) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f00000001c0)) tee(r0, r4, 0x8f5, 0x100000000000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000980)=0x7d, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}, {{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f0000000180)=""/28, 0x1c}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000480)=""/170, 0xaa}, {&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000640)=""/236, 0xec}, {&(0x7f0000000740)=""/69, 0x45}], 0x7, &(0x7f0000000840)=""/191, 0xbf}, 0x3}], 0x2, 0x1000400000de, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r7) sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x24008050) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000009c0), 0xffffffffffffffff) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000a00)={0xffffffffffffffff, 0x30000000000000, 0xfffffffffffff631, 0xc}) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xc0, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe68b}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4800}, 0x50) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000000200)={r14, 0x7f}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f00000003c0)={r14, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000480)=0x84) r15 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r15, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x0, 0xff, 0x3}, {0x2, 0xff, 0x4}, 0xff}, {0x3, 0x0, {0x0, 0x1, 0x6}, {0x0, 0xf0, 0x1}, 0x0, 0x1}], 0x40) r16 = socket$l2tp(0x2, 0x2, 0x73) getpeername(r16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) 2.023973s ago: executing program 33 (id=2140): syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x18, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x8048}, 0x4000000) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r3) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) clock_gettime(0x87f60f7a31614e95, 0x0) sendmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x3, &(0x7f0000000780)=[{&(0x7f00000000c0)="280a8768f3aa916a9fea47030db6d2c8b206f9"}, {&(0x7f00000001c0)="069037cdfd32f9b421769663268d4b7650a7f7703c039535776a948800f3347b660612d3c206265ad2510f447e256d2870ec5f9707ac9847c7de0b9d1c0591ec3a4b4f4198794d96b0422ed91af10e2677b35f0c7789d0c625f70b915514000746000975b1aadb0289802d6bfd62bb78a0ed8c853033864acbf5afdba16cf59cc0"}, {&(0x7f0000000300)="eca31c65cf9a99e021cd10557d31cb411a3d90698be7163d10dd8ca322c0390d3d864554d177f76fa377d1af9ca6f7e8f22ad9e82ca26eec5ecc8e9b02e4e62cc7cac18372bcd43d7c9c29ffb505f4"}, {&(0x7f0000000380)="1d7e7d764f6e60cbdfda7c2a312617aeaa2c08b31725"}, {&(0x7f0000000540)="4f25ff8c666adf3c78e31013c0e82f8f422262d7a2a895f7951c6e5adfe31e356b42f0716b1144bca8754ceaf81f6af5d741c4c706bf73cdcb4ee492eb3f4b98802fca"}, {&(0x7f00000005c0)="b9ab2a41dad579ad6b367d5c41f8734e536cafe4e23233b1b36b9964837d00c77f827b688230092c8f6cf6d02ed4539f8cc10d80857eabf26a137dcab8ffe74c919438a2188518ba1e5bdf0f0dbfa14bcee2049c7885043b79a0376e0d57ca05f3dc11f37e"}, {&(0x7f0000000640)="f75bac37b55240914b6cef8c9236e3ef3f05189aee6ec054c1bf9799c19d5466b51b96cb75986e3d63d26d798106a2c7f22ffbde13662a87558a9213beb009dad894596b003938f9f233195b8b07ad00cbe33eae1536b1557b3e792ccaf8fc2ce6d001eb32ff94e546aafaaf326ef6cd156e1f5e49d3c555b5a8ee87ad0cc9797778617af25d0d5ba77a527879bc3e6c2a5f656658a933917f5a6424788d32103586856a961378b9084cc23e69e55de1a015c7e7fc2c3f775c093e7897e92c01573472299b507b33c033a3f1fee557967806bc9ec89f115735c23978140d"}, {&(0x7f0000000740)="e57a83dc8bc1ed73ec668ab25c043e2847cbcc6fa5c64de315a9e3a716a109cc66db82be4ef0"}]}}], 0x1, 0x400c011) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004084}, 0x480c4) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@delchain={0xfffffffffffffe34, 0x65, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xffe0}, {0xffff, 0xfff2}, {0xfff3, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x2c}}, 0x24040084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) 1.015116698s ago: executing program 34 (id=2145): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="01000000000000000000170000005400060400000000000000286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914000302a168781af428b27b11a0b4dbc3ac7f8c4f98e1e3584a94d06f405b11a7aad584803662e83d11977396c2224fd0751dda7c4bbd551402971d5c27bc3d6208"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0xc054) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x2004}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 956.916942ms ago: executing program 35 (id=2148): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x44840}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000005c0)={@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, {0x0}, 0x0, 0x62}, 0xa0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e00000000a06010100000000000040fb0300000908000940800000010900020073797a3100000000050001000700000800094000000005880008800c000780080009e28dee7194c74d83c5468841b146b7426fa3e2e3df3fe34204ce2b4e276bb1d3c0de3148ff38b9460eb8f0ac4ea262c65fe9f706501fa55e6e54f950e1df460c52bf245d814fc99a279d7eaf10d7afe045cf0587c2ae8973dc2388c3cddab84c5e0540cf8a8a2a41544f9c0a31efefa1f65e44901608b142b6b74bf2e631400f53120acbe593178d570d8e47abb36233f9623852910e34a22671c2c375b6a40a00432c13375e19e73fb9f06b512964e3b71e"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x200480c0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES32=r0], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000000101010100000000000000000a0004080c00198008000100a000000004000180"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24048008) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="3f9d02000000fcdbdf251700000008000300", @ANYRES32=r14, @ANYBLOB="0c00308005000200fd000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r15 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r15, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004041) 0s ago: executing program 36 (id=2152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000940)={{r1, &(0x7f0000000080)='/dev/net/tun\x00', 0x228202, &(0x7f00000000c0)={@align=0xe, {0x1, 0x401, 0x6cadf3b6, 0x4}}, 0x401, &(0x7f0000000180), &(0x7f00000002c0)=0x81d}, 0x6, &(0x7f0000000880)=[{0x2, 0x4608, &(0x7f00000003c0)='\x86\x00', &(0x7f0000000440)="5e47ab041b77c945ba45928a654637eb23eba638b28f06b79d280ada25a6f1c8ba265b6f9cd6bc57cb63c6c54e6ed099dcda8c27385baa746c40f2769c108ea17bf9bcc4c3da9f2aef1971a84d754b2f3ca13c2e51de8c2918bdaded9e73cb7a74bdedd33e800aaa5afa320c03a08de72db90f55cf75646f0946f0dca9de1282f60a254ff53df6f65f49d09c6bc3cbb392a987f99a61390e9aa23e745d6116dcc3a3292f9b1a07118e", 0xa9, 0x2}, {0x1, 0x3ff, &(0x7f0000000500)='!$\x00', &(0x7f0000000540)="3d19efc2dcdaf97a06e30d020cca1811847f2201b603feafcdbfbc6c3a0a276aa5a9191395260c12a1e57b84005f6b905a71fd78642a946d9e3b936053fee11fbc10ad12ba6600192b3a3fb0ac38c9dfea6006a77d7a18bc38816ae4769d91dd64dae9bbf79a623049dbe8d7b8b380f8f818d8101a28fc5176e61bf66905ee3e67f7a602a8f8ceca504df7bde129a5b7d0183b9be45a329075f2fa670d88628e7c22c7fc8eadc853e2f929576b3e0f24fa4baedc8095a5b8fc7e9fc387520d2d5e2117988fd7b8cd9bd77b9734785a8d199d188f8b823e21ac1b1c7cee7d6c3cb4b81f0d5c019b34f8a885cc68afd7dd155b5491062d", 0xf6}, {0x1, 0x7, &(0x7f0000000640)='-/])$\x00', &(0x7f0000000680)="095890bd743c6e35e00360d9e7ec35a4dbdd47f4eeef354c217e87278d64cbeceb37df06fcad0b870400c371ec9d7b725b9f2c0a2c039f028e9ce839503c971e2ea2a36bf2dfe69239505bd5", 0x4c, 0x2}, {0x3, 0x80, &(0x7f0000000700)='\\@(}\x00', &(0x7f0000000740)="11085cfc7e3ad2cff756048d2ec12e9a5ef5e176e498d6acde1d52b4c1141d82d965249988edfad3c2e37ec6aeabfbb6a37a3f465bf326cd187c9d", 0x3b, 0xa}, {0x1, 0x2a, &(0x7f0000000780)=')\x00', &(0x7f00000007c0)="abbe1a40e238ca09ef3aa7c422f9895683165d1f05af8c38399586b52562b4da16f3075f8215b3cb6a0d", 0x2a, 0x8}, {0x0, 0x4, &(0x7f0000000800)='/dev/net/tun\x00', &(0x7f0000000840)}]}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/226, 0xe2}, 0x7f}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r4, 0x4, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010}, 0x2000c0c0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x346, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) kernel console output (not intermixed with test programs): 4][T10809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.435286][T10824] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 221.482047][T10824] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 222.072700][T10857] __nla_validate_parse: 2 callbacks suppressed [ 222.072716][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1294'. [ 222.357501][T10873] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1298'. [ 222.621433][T10892] netlink: 'syz.3.1301': attribute type 13 has an invalid length. [ 223.029595][T10852] infiniband syz0: set active [ 223.065742][T10852] infiniband syz0: added bond0 [ 223.088285][T10852] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 223.092464][T10852] infiniband syz0: Couldn't open port 1 [ 223.124785][T10852] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 223.151045][T10852] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 223.169048][T10852] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 223.265721][T10852] RDS/IB: syz0: added [ 223.274795][T10852] smc: adding ib device syz0 with port count 1 [ 223.298053][T10852] smc: ib device syz0 port 1 has no pnetid [ 223.449241][T10925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1308'. [ 223.550313][T10928] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1308'. [ 223.607584][T10930] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 223.788012][T10937] netlink: 'syz.4.1311': attribute type 1 has an invalid length. [ 223.955368][T10937] bond6: entered promiscuous mode [ 223.970236][T10937] 8021q: adding VLAN 0 to HW filter on device bond6 [ 224.120642][ T29] audit: type=1800 audit(1785234059.923:19): pid=10947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1313" name="memory.events" dev="tmpfs" ino=1347 res=0 errno=0 [ 224.295923][T10950] lo speed is unknown, defaulting to 1000 [ 224.361393][T10951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1314'. [ 224.657509][T10971] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1321'. [ 224.738202][T10974] netlink: 'syz.3.1322': attribute type 1 has an invalid length. [ 224.747967][T10974] netlink: 'syz.3.1322': attribute type 2 has an invalid length. [ 224.812497][T10974] batman_adv: batadv0: Adding interface: ip6gretap2 [ 224.828447][T10974] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.857115][T10974] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 225.059380][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 225.212913][T10991] syzkaller0: entered promiscuous mode [ 225.218579][T10991] syzkaller0: entered allmulticast mode [ 225.230660][T10950] lo speed is unknown, defaulting to 1000 [ 225.238021][T10993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1328'. [ 225.508698][ T5620] udevd[5620]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 227.460367][T11016] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 227.563738][T11016] bond7: entered promiscuous mode [ 227.582546][T11016] 8021q: adding VLAN 0 to HW filter on device bond7 [ 227.584621][T11023] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1334'. [ 227.695128][T11022] ip6tnl3: entered allmulticast mode [ 227.712243][ T7976] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 227.754574][ T5725] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 227.764743][ T7976] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 227.823059][T11040] ip_tables: iptables: counters copy to user failed while replacing table [ 227.991754][ T5725] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 228.079936][T11047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1341'. [ 228.110600][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1341'. [ 228.128418][T11047] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1341'. [ 228.150211][T11047] netlink: 'syz.3.1341': attribute type 3 has an invalid length. [ 228.176196][T11047] netlink: 'syz.3.1341': attribute type 2 has an invalid length. [ 228.194519][T11047] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1341'. [ 228.218264][T11047] netlink: 'syz.3.1341': attribute type 2 has an invalid length. [ 228.414708][T11062] netlink: 'syz.0.1344': attribute type 1 has an invalid length. [ 228.485916][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1344'. [ 228.651681][ T8558] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 229.002487][T11088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1349'. [ 229.033839][T11093] Bluetooth: MGMT ver 1.23 [ 229.885510][T11120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1352'. [ 231.274772][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'. [ 231.289499][T11152] hsr_slave_1 (unregistering): left promiscuous mode [ 231.770704][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 231.837599][T11075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.085207][T11165] batman_adv: batadv0: Adding interface: ip6gretap2 [ 232.101110][T11165] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.170168][T11165] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 232.280104][T11167] lo speed is unknown, defaulting to 1000 [ 232.805666][T11197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1369'. [ 232.874717][T11197] pim6reg1: entered promiscuous mode [ 232.886850][T11171] xt_hl: Unknown Hop Limit match mode: 206 [ 232.891957][T11197] pim6reg1: entered allmulticast mode [ 233.039991][T11183] lo speed is unknown, defaulting to 1000 [ 233.045642][T11167] lo speed is unknown, defaulting to 1000 [ 233.095330][T11205] xt_l2tp: missing protocol rule (udp|l2tpip) [ 233.117664][T11204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1372'. [ 233.526287][T11183] lo speed is unknown, defaulting to 1000 [ 233.839614][T11222] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 233.887150][T11222] 8021q: adding VLAN 0 to HW filter on device bond8 [ 234.285181][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'. [ 234.467748][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'. [ 234.534443][ T7975] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.554503][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'. [ 234.568936][T11251] netlink: 3288 bytes leftover after parsing attributes in process `syz.0.1383'. [ 234.733857][ T7975] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.781536][ T7975] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.795409][ T7975] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.877747][T11286] lo speed is unknown, defaulting to 1000 [ 236.287507][T11307] netlink: 'syz.1.1400': attribute type 1 has an invalid length. [ 236.505998][T11307] bond9: entered promiscuous mode [ 236.523143][T11314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1401'. [ 236.528721][T11307] 8021q: adding VLAN 0 to HW filter on device bond9 [ 236.935687][T11323] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1403'. [ 237.022415][T11323] netlink: 'syz.1.1403': attribute type 1 has an invalid length. [ 237.036614][T11286] lo speed is unknown, defaulting to 1000 [ 237.541644][ T5618] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 237.599921][ T5618] CPU: 1 UID: 0 PID: 5618 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 237.599948][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 237.599975][ T5618] Call Trace: [ 237.599983][ T5618] [ 237.599990][ T5618] dump_stack_lvl+0xe8/0x150 [ 237.600023][ T5618] dump_header+0xd3/0x4b0 [ 237.600051][ T5618] oom_kill_process+0x3ab/0x970 [ 237.600076][ T5618] out_of_memory+0x1064/0x1480 [ 237.600095][ T5618] ? try_charge_memcg+0xbca/0x1590 [ 237.600133][ T5618] ? __pfx_out_of_memory+0x10/0x10 [ 237.600151][ T5618] ? do_raw_spin_unlock+0xf5/0x210 [ 237.600186][ T5618] try_charge_memcg+0xc74/0x1590 [ 237.600230][ T5618] ? __pfx_try_charge_memcg+0x10/0x10 [ 237.600258][ T5618] ? percpu_ref_tryget+0x15/0x180 [ 237.600308][ T5618] ? charge_memcg+0x20/0x2b0 [ 237.600337][ T5618] charge_memcg+0x19c/0x2b0 [ 237.600364][ T5618] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 237.600389][ T5618] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 237.600420][ T5618] swap_cache_alloc_folio+0x4de/0x990 [ 237.600457][ T5618] swap_cache_read_folio+0x44/0x120 [ 237.600483][ T5618] swap_cluster_readahead+0x3a0/0x640 [ 237.600510][ T5618] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 237.600546][ T5618] ? get_vma_policy+0x27b/0x3c0 [ 237.600579][ T5618] swapin_readahead+0x19a/0xc10 [ 237.600606][ T5618] ? swap_table_get+0x1e/0x260 [ 237.600636][ T5618] ? swap_table_get+0x1e/0x260 [ 237.600658][ T5618] ? __pfx_swapin_readahead+0x10/0x10 [ 237.600682][ T5618] ? swap_table_get+0x1e/0x260 [ 237.600701][ T5618] ? swap_table_get+0x1e/0x260 [ 237.600723][ T5618] ? swap_table_get+0x1e/0x260 [ 237.600744][ T5618] ? swap_table_get+0x216/0x260 [ 237.600766][ T5618] ? swap_cache_get_folio+0x2e7/0x2f0 [ 237.600795][ T5618] do_swap_page+0x455/0x5060 [ 237.600830][ T5618] ? __pte_offset_map+0x29/0x240 [ 237.600859][ T5618] ? __lock_acquire+0x683/0x2cf0 [ 237.600885][ T5618] ? do_swap_page+0x124/0x5060 [ 237.600906][ T5618] ? __pfx_do_swap_page+0x10/0x10 [ 237.600925][ T5618] ? __pte_offset_map+0x1ae/0x240 [ 237.600951][ T5618] ? pte_offset_map_rw_nolock+0xea/0x160 [ 237.600976][ T5618] handle_mm_fault+0x124c/0x3080 [ 237.601010][ T5618] ? handle_mm_fault+0xec/0x3080 [ 237.601039][ T5618] ? __pfx_handle_mm_fault+0x10/0x10 [ 237.601057][ T5618] ? lock_vma_under_rcu+0x45a/0x500 [ 237.601105][ T5618] do_user_addr_fault+0xa4d/0x1340 [ 237.601141][ T5618] ? trace_page_fault_user+0x84/0x1e0 [ 237.601169][ T5618] exc_page_fault+0x6a/0xc0 [ 237.601191][ T5618] asm_exc_page_fault+0x26/0x30 [ 237.601209][ T5618] RIP: 0033:0x7f9e0226be77 [ 237.601235][ T5618] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 99 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 98 ee 00 48 01 d1 39 7c 24 [ 237.601251][ T5618] RSP: 002b:00007ffeb0e08d30 EFLAGS: 00010202 [ 237.601267][ T5618] RAX: 0000001b33b24000 RBX: 00000000000003dc RCX: 0000000000039dc8 [ 237.601279][ T5618] RDX: 0000000003dde82b RSI: 00007ffeb0e08dc0 RDI: 0000000000000015 [ 237.601291][ T5618] RBP: 00007ffeb0e08d6c R08: 000000000ec031f8 R09: 3fffffffffffffff [ 237.601303][ T5618] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 237.601314][ T5618] R13: 00000000000927c0 R14: 0000000000039d7c R15: 00007ffeb0e08dc0 [ 237.601344][ T5618] [ 238.011364][ T5618] memory: usage 307200kB, limit 307200kB, failcnt 699 [ 238.019666][ T5618] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 238.030377][ T5618] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 238.041139][ T5618] Memory cgroup stats for /syz4: [ 238.042071][ T5618] cache 0 [ 238.063656][ T5618] rss 0 [ 238.066582][ T5618] rss_huge 0 [ 238.072156][ T5618] shmem 0 [ 238.080770][ T5618] mapped_file 0 [ 238.090311][ T5618] dirty 0 [ 238.102708][ T5618] writeback 0 [ 238.112453][ T5618] workingset_refault_anon 18 [ 238.127370][ T5618] workingset_refault_file 17 [ 238.140557][ T5618] swap 180224 [ 238.154535][ T5618] swapcached 311296 [ 238.162984][ T5618] pgpgin 39969 [ 238.170804][ T5618] pgpgout 39955 [ 238.174304][ T5618] pgfault 64061 [ 238.177777][ T5618] pgmajfault 7 [ 238.186056][ T5618] inactive_anon 32768 [ 238.190851][ T5618] active_anon 24576 [ 238.200922][ T5618] inactive_file 0 [ 238.212779][ T5618] active_file 0 [ 238.223922][ T5618] unevictable 0 [ 238.233640][ T5618] hierarchical_memory_limit 314572800 [ 238.268341][ T5618] hierarchical_memsw_limit 9223372036854771712 [ 238.311756][ T5618] total_cache 0 [ 238.324372][ T5618] total_rss 0 [ 238.347251][ T5618] total_rss_huge 0 [ 238.351394][ T5618] total_shmem 0 [ 238.357089][ T5618] total_mapped_file 0 [ 238.369630][ T5618] total_dirty 0 [ 238.379456][ T5618] total_writeback 0 [ 238.392622][ T5618] total_workingset_refault_anon 18 [ 238.404074][ T5618] total_workingset_refault_file 17 [ 238.429781][ T5618] total_swap 180224 [ 238.434074][ T5618] total_swapcached 311296 [ 238.442779][ T5618] total_pgpgin 39969 [ 238.459275][ T5618] total_pgpgout 39955 [ 238.469109][ T5618] total_pgfault 64061 [ 238.477473][ T5618] total_pgmajfault 7 [ 238.494801][ T5618] total_inactive_anon 32768 [ 238.502785][ T5618] total_active_anon 24576 [ 238.512156][ T5618] total_inactive_file 0 [ 238.520968][ T5618] total_active_file 0 [ 238.532492][ T5618] total_unevictable 0 [ 238.543707][ T5618] anon_cost 0 [ 238.558539][ T5618] file_cost 0 [ 238.573892][ T5618] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1401,pid=11309,uid=0 [ 238.610881][ T5618] Memory cgroup out of memory: Killed process 11309 (syz.4.1401) total-vm:110908kB, anon-rss:1260kB, file-rss:31644kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 238.659970][T11315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.975861][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1410'. [ 239.690764][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 239.900345][T11383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1420'. [ 239.906725][T11386] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1421'. [ 239.944788][T11383] sctp: [Deprecated]: syz.1.1420 (pid 11383) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.944788][T11383] Use struct sctp_sack_info instead [ 239.998842][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1422'. [ 240.059923][T11387] block nbd0: Unsupported socket: should be TCP or UNIX. [ 240.427142][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 240.637482][T11411] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1427'. [ 241.405749][T11439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1429'. [ 243.561119][T11470] xt_CT: No such helper "netbios-ns" [ 244.376403][T11503] xt_l2tp: invalid flags combination: 0 [ 244.433472][T11504] ip6erspan0: entered allmulticast mode [ 244.626438][T11518] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 245.059462][T11531] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.083005][T11531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.129410][T11531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.166918][T11531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.202164][T11531] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 245.219362][T11531] veth1_vlan: left promiscuous mode [ 245.244326][T11531] veth1_vlan: entered promiscuous mode [ 245.270333][T11531] veth1_macvtap: left promiscuous mode [ 245.293058][T11531] veth0_macvtap: left promiscuous mode [ 245.306017][T11531] veth0_macvtap: entered promiscuous mode [ 245.322053][T11531] veth1_macvtap: entered promiscuous mode [ 245.351272][T11531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.373870][T11531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.398869][T11531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.433549][T11531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.474621][T11531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.517278][T11531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.545097][T11531] bond1: entered allmulticast mode [ 245.561785][T11531] ip6gretap1: entered allmulticast mode [ 245.571739][T11531] bond1: entered promiscuous mode [ 245.576835][T11531] ip6gretap1: entered promiscuous mode [ 245.591503][T11531] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 245.607379][T11531] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 245.617720][T11531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.626858][T11531] batman_adv: batadv0: Interface activated: ip6gretap2 [ 245.637838][ T8558] lo speed is unknown, defaulting to 1000 [ 245.650359][ T7976] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.657582][ T7976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.670230][ T8558] syz2: Port: 1 Link ACTIVE [ 245.670981][ T5623] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 245.677554][ T7976] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.689733][ T7976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.770082][ T7973] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.802785][ T7973] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.831095][ T7973] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 54038 - 0 [ 245.843175][ T5623] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 245.929579][T11539] syzkaller0: entered promiscuous mode [ 245.952744][T11566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1462'. [ 245.963022][T11539] syzkaller0: entered allmulticast mode [ 246.003711][ T7976] bridge0: port 3(team0) entered blocking state [ 246.010055][ T7976] bridge0: port 3(team0) entered forwarding state [ 247.714073][ T7973] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.723053][ T7973] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.731788][ T7973] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 54038 - 0 [ 247.740741][ T7973] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.749431][ T7973] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.758293][ T7973] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 54038 - 0 [ 247.772046][T11566] vlan0: entered promiscuous mode [ 247.788532][ T7974] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 247.811074][ T7974] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 247.818836][ T7157] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 247.898589][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 247.925312][ T7973] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.936253][ T7973] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.946243][ T7973] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 54038 - 0 [ 248.090827][ T5623] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 248.207674][T11596] netlink: 'syz.0.1471': attribute type 1 has an invalid length. [ 248.217370][T11596] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1471'. [ 248.388966][T11603] dvmrp0: entered allmulticast mode [ 248.421067][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 248.498394][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'. [ 248.541353][T11606] netlink: 'syz.0.1474': attribute type 6 has an invalid length. [ 248.562688][T11606] netlink: 'syz.0.1474': attribute type 5 has an invalid length. [ 248.574125][ T5626] Bluetooth: hci4: link tx timeout [ 248.582965][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.599513][ T5626] Bluetooth: hci4: link tx timeout [ 248.604941][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.619878][ T5626] Bluetooth: hci4: link tx timeout [ 248.625264][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.637828][ T5626] Bluetooth: hci4: link tx timeout [ 248.641718][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1476'. [ 248.643084][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.660603][ T5626] Bluetooth: hci4: link tx timeout [ 248.665967][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.674774][ T5626] Bluetooth: hci4: link tx timeout [ 248.681406][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.689371][ T5626] Bluetooth: hci4: link tx timeout [ 248.694736][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.702895][ T5626] Bluetooth: hci4: link tx timeout [ 248.708077][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.719237][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1476'. [ 248.731829][ T7157] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 248.753282][ T5626] Bluetooth: hci4: link tx timeout [ 248.758468][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.766323][ T5626] Bluetooth: hci4: link tx timeout [ 248.771616][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.779442][ T5626] Bluetooth: hci4: link tx timeout [ 248.784708][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.792545][ T5626] Bluetooth: hci4: link tx timeout [ 248.797755][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.805727][ T5626] Bluetooth: hci4: link tx timeout [ 248.812094][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.819899][ T5626] Bluetooth: hci4: link tx timeout [ 248.825178][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.833038][ T5626] Bluetooth: hci4: link tx timeout [ 248.838254][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.846115][ T5626] Bluetooth: hci4: link tx timeout [ 248.851383][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.973461][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 248.985145][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 249.118016][T11632] macsec1: entered promiscuous mode [ 249.123892][T11632] dummy0: entered promiscuous mode [ 249.131924][T11632] macsec1: entered allmulticast mode [ 249.137262][T11632] dummy0: entered allmulticast mode [ 249.144228][T11632] dummy0: left allmulticast mode [ 249.149193][T11632] dummy0: left promiscuous mode [ 249.166173][T11633] macsec1: entered promiscuous mode [ 249.171529][T11633] dummy0: entered promiscuous mode [ 249.176822][T11633] macsec1: entered allmulticast mode [ 249.183149][T11633] dummy0: entered allmulticast mode [ 249.189597][T11633] dummy0: left allmulticast mode [ 249.194721][T11633] dummy0: left promiscuous mode [ 250.650639][ T5626] Bluetooth: hci4: command 0x0405 tx timeout [ 251.532661][T11616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.610766][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 251.727356][T11641] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1481'. [ 251.758485][T11642] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1481'. [ 251.791201][T11647] netlink: 'syz.4.1481': attribute type 1 has an invalid length. [ 251.793617][T11641] netlink: 'syz.4.1481': attribute type 1 has an invalid length. [ 251.907918][T11647] bond9: entered promiscuous mode [ 251.914507][T11647] 8021q: adding VLAN 0 to HW filter on device bond9 [ 251.943890][T11655] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1486'. [ 251.967610][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 252.038186][T11661] veth0: entered promiscuous mode [ 252.363271][T11651] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 252.417783][T11683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1492'. [ 252.427754][T11678] bond8: option mode: invalid value (254) [ 252.442441][T11678] bond8 (unregistering): Released all slaves [ 252.549363][T11660] veth0: left promiscuous mode [ 252.561118][ T7975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.614721][ T7975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.788381][T11698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1495'. [ 252.855813][T11698] ip6gre1: entered promiscuous mode [ 252.878347][T11698] ip6gre1: entered allmulticast mode [ 252.903028][ T8000] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.925932][ T7157] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.935055][ T8000] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.001316][ T7157] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.065499][T11710] netlink: 'syz.3.1500': attribute type 1 has an invalid length. [ 253.090798][T11710] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1500'. [ 253.133956][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1499'. [ 253.216052][T11718] xt_cluster: node mask cannot exceed total number of nodes [ 253.235546][T11713] can: request_module (can-proto-0) failed. [ 253.250037][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1502'. [ 253.465111][ T7157] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.484988][T11728] xt_TCPMSS: Only works on TCP SYN packets [ 253.490050][T11726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1504'. [ 253.557387][T11725] nbd0: detected capacity change from 0 to 63 [ 253.662124][ T5627] block nbd0: Receive control failed (result -104) [ 253.924473][T11747] syzkaller0: entered promiscuous mode [ 253.943689][T11747] syzkaller0: entered allmulticast mode [ 254.138429][T11771] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 254.233201][T11771] 8021q: adding VLAN 0 to HW filter on device bond8 [ 254.329850][T11756] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 254.369562][T11777] bond8: entered promiscuous mode [ 254.390614][T11777] bond8: entered allmulticast mode [ 254.729674][T11753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.691938][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.693618][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 255.849604][T11828] netlink: 'syz.4.1532': attribute type 4 has an invalid length. [ 256.214877][T11838] lo speed is unknown, defaulting to 1000 [ 256.649072][T11856] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 256.696563][T11853] lo speed is unknown, defaulting to 1000 [ 256.696602][T11838] lo speed is unknown, defaulting to 1000 [ 257.210779][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 257.473365][T11853] lo speed is unknown, defaulting to 1000 [ 258.784553][T11922] batadv_slave_0: Caught tx_queue_len zero misconfig [ 259.416492][T11930] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20001 [ 259.541533][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 260.164555][T11938] __nla_validate_parse: 18 callbacks suppressed [ 260.164574][T11938] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1567'. [ 260.249829][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1568'. [ 260.507297][T11951] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1570'. [ 260.603691][T11954] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1571'. [ 260.685643][T11962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1571'. [ 260.724520][T11962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1571'. [ 260.809376][T11960] netlink: 'syz.2.1573': attribute type 1 has an invalid length. [ 260.832953][T11960] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1573'. [ 260.860924][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'. [ 261.097387][T11960] syzkaller0: entered promiscuous mode [ 261.128709][T11960] syzkaller0: entered allmulticast mode [ 261.538993][T11993] FAULT_INJECTION: forcing a failure. [ 261.538993][T11993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.579877][T11993] CPU: 0 UID: 0 PID: 11993 Comm: syz.4.1581 Not tainted syzkaller #0 PREEMPT(full) [ 261.579905][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 261.579916][T11993] Call Trace: [ 261.579924][T11993] [ 261.579932][T11993] dump_stack_lvl+0xe8/0x150 [ 261.579974][T11993] should_fail_ex+0x40c/0x560 [ 261.580003][T11993] _copy_from_user+0x2d/0xb0 [ 261.580024][T11993] __sys_sendto+0x2a9/0x5a0 [ 261.580044][T11993] ? ksys_write+0x1e6/0x270 [ 261.580065][T11993] ? __pfx___sys_sendto+0x10/0x10 [ 261.580082][T11993] ? __mutex_unlock_slowpath+0x731/0x900 [ 261.580127][T11993] ? __pfx_ksys_write+0x10/0x10 [ 261.580149][T11993] __x64_sys_sendto+0xde/0x100 [ 261.580169][T11993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.580187][T11993] do_syscall_64+0x174/0x580 [ 261.580207][T11993] ? trace_irq_disable+0x3b/0x140 [ 261.580228][T11993] ? clear_bhb_loop+0x40/0x90 [ 261.580248][T11993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.580266][T11993] RIP: 0033:0x7f9e0239de99 [ 261.580284][T11993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.580298][T11993] RSP: 002b:00007f9e031fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 261.580318][T11993] RAX: ffffffffffffffda RBX: 00007f9e02625fa0 RCX: 00007f9e0239de99 [ 261.580332][T11993] RDX: 000000000000005e RSI: 0000200000000380 RDI: 0000000000000003 [ 261.580344][T11993] RBP: 00007f9e031fb090 R08: 00002000000001c0 R09: 000000000000001c [ 261.580356][T11993] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000001 [ 261.580367][T11993] R13: 00007f9e02626038 R14: 00007f9e02625fa0 R15: 00007ffeb0e089c8 [ 261.580399][T11993] [ 261.923962][T11997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1583'. [ 262.510929][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1587'. [ 264.348348][T11999] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.356148][T11999] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.402743][T11999] batman_adv: batadv0: Interface deactivated: dummy0 [ 264.484240][T11999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.507948][T11999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.611554][T11999] vlan0: left promiscuous mode [ 264.848203][T11999] bond1: left allmulticast mode [ 264.856925][T11999] bridge1: left allmulticast mode [ 264.880175][T11999] vxlan0: left allmulticast mode [ 264.895073][T11999] vxlan1: left allmulticast mode [ 264.964264][T11999] bridge3: left allmulticast mode [ 264.990384][T11999] gretap1: left allmulticast mode [ 265.003562][T11999] batman_adv: batadv0: Interface deactivated: gretap2 [ 265.026235][T11999] geneve2: left allmulticast mode [ 265.039959][T11999] bond6: left promiscuous mode [ 265.054506][T11999] bond7: left promiscuous mode [ 265.066179][T11999] bond9: left promiscuous mode [ 265.090994][T12006] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 265.094783][ T7973] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.172822][ T7973] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.213698][ T7973] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.264910][ T7973] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.302615][ T7973] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.328073][ T7973] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.342672][T12028] __nla_validate_parse: 1 callbacks suppressed [ 265.342690][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'. [ 265.368489][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1591'. [ 265.448283][ T7973] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.489145][ T7973] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.505976][T12045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1594'. [ 265.509946][T12032] netlink: 'syz.0.1591': attribute type 39 has an invalid length. [ 265.538487][T12039] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1593'. [ 265.757393][T12055] batadv_slave_1: entered promiscuous mode [ 265.779839][T12055] macvlan2: entered allmulticast mode [ 265.794283][T12055] batadv_slave_1: entered allmulticast mode [ 265.826547][T12057] macvlan3: entered allmulticast mode [ 265.930733][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.001938][T12069] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1603'. [ 266.092068][T12071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1602'. [ 266.141664][T12075] SET target dimension over the limit! [ 266.196296][T12081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1605'. [ 266.551844][T12095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1609'. [ 266.947659][T12116] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 267.005146][T12120] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 267.021742][T12120] bond9 (unregistering): Released all slaves [ 268.665573][T12212] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1631'. [ 269.749614][T12224] netlink: 'syz.2.1638': attribute type 13 has an invalid length. [ 269.811235][ T5722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.111580][ T5722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.851652][T12162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.006328][T12264] netlink: 'syz.4.1643': attribute type 13 has an invalid length. [ 271.111056][T12263] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 271.336083][T12278] geneve1: entered promiscuous mode [ 271.453751][T12282] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 271.633068][T12293] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 271.658485][T12293] netlink: 'syz.4.1651': attribute type 1 has an invalid length. [ 271.708381][T12293] bond11: entered promiscuous mode [ 271.714381][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1651'. [ 271.724324][T12293] 8021q: adding VLAN 0 to HW filter on device bond11 [ 271.734215][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1653'. [ 271.797081][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'. [ 271.917383][T12310] netlink: 'syz.3.1656': attribute type 4 has an invalid length. [ 272.076703][T12319] lo: Caught tx_queue_len zero misconfig [ 272.132916][T12324] netlink: 'syz.1.1661': attribute type 1 has an invalid length. [ 272.200366][T12324] 8021q: adding VLAN 0 to HW filter on device bond10 [ 272.238428][T12333] 8021q: adding VLAN 0 to HW filter on device bond10 [ 272.246587][T12333] bond10: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 272.259172][T12333] bond10: (slave ip6gre0): Error -95 calling set_mac_address [ 272.402498][T12324] bond10: entered promiscuous mode [ 272.413374][T12324] bond10: entered allmulticast mode [ 272.628733][T12352] tc_dump_action: action bad kind [ 272.667661][T12353] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 272.776746][T12367] xt_cluster: node mask cannot exceed total number of nodes [ 272.806188][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'. [ 273.029556][T12381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1672'. [ 273.358495][T12390] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1674'. [ 273.377546][T12394] netlink: 'syz.0.1676': attribute type 1 has an invalid length. [ 273.537319][T12399] nbd: must specify a device to reconfigure [ 273.672383][T12402] netlink: 'syz.0.1679': attribute type 11 has an invalid length. [ 273.795509][T12407] sit0: entered promiscuous mode [ 273.834405][T12410] xt_cluster: node mask cannot exceed total number of nodes [ 273.836736][T12407] netlink: 'syz.3.1680': attribute type 1 has an invalid length. [ 273.849617][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1682'. [ 273.871499][T12407] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1680'. [ 274.095305][T12421] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 274.168444][T12421] syzkaller0: entered promiscuous mode [ 274.186568][T12421] syzkaller0: entered allmulticast mode [ 274.243727][T12432] netlink: 'syz.3.1686': attribute type 49 has an invalid length. [ 274.398072][T12432] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 274.406304][T12432] ip6gretap0: entered promiscuous mode [ 274.423972][T12432] ip6gretap0: entered allmulticast mode [ 274.440933][T12437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.603163][T12443] syzkaller1: entered promiscuous mode [ 274.618959][T12443] syzkaller1: entered allmulticast mode [ 274.687250][T12448] netlink: 'syz.3.1691': attribute type 1 has an invalid length. [ 274.711125][T12448] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1691'. [ 274.807877][T12458] xt_cluster: node mask cannot exceed total number of nodes [ 274.846205][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1693'. [ 275.089723][T12471] 8021q: VLANs not supported on vcan0 [ 275.216729][T12479] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 275.875568][T12520] xt_cluster: node mask cannot exceed total number of nodes [ 276.173385][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 276.655638][T12545] netlink: 'syz.3.1711': attribute type 1 has an invalid length. [ 276.683780][T12545] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 276.756807][T12550] __nla_validate_parse: 6 callbacks suppressed [ 276.756827][T12550] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1713'. [ 276.994041][T12559] "syz.0.1716" (12559) uses obsolete ecb(arc4) skcipher [ 277.177432][T12564] xt_cluster: node mask cannot exceed total number of nodes [ 277.197807][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1718'. [ 277.372845][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1719'. [ 278.774135][T12602] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1726'. [ 278.791351][T12602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1726'. [ 279.497849][T12599] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 280.001656][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 280.187559][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1736'. [ 280.226631][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1736'. [ 280.319642][T12640] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1739'. [ 280.547334][T12656] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 280.784222][T12663] wireguard: wg2: Could not create IPv6 socket [ 280.798365][T12669] netlink: 'syz.0.1748': attribute type 1 has an invalid length. [ 280.834311][T12669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.875831][T12669] netlink: 'syz.0.1748': attribute type 1 has an invalid length. [ 280.903296][T12669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.963284][T12669] netlink: 'syz.0.1748': attribute type 1 has an invalid length. [ 280.990808][T12669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.024230][T12669] netlink: 'syz.0.1748': attribute type 1 has an invalid length. [ 281.032947][T12669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.048761][T12669] netlink: 'syz.0.1748': attribute type 1 has an invalid length. [ 281.066538][T12669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.084904][T12669] netlink: 'syz.0.1748': attribute type 1 has an invalid length. [ 281.096308][T12669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.112089][T12669] netlink: 'syz.0.1748': attribute type 1 has an invalid length. [ 281.152103][T12669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.193505][T12669] netlink: 'syz.0.1748': attribute type 1 has an invalid length. [ 281.208990][T12669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.246008][T12687] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1750'. [ 281.246172][T12669] netlink: 'syz.0.1748': attribute type 1 has an invalid length. [ 281.310434][T12669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.364174][T12669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.509033][T12697] syzkaller0: entered promiscuous mode [ 281.523254][T12697] syzkaller0: entered allmulticast mode [ 281.583892][T12697] tipc: Enabled bearer , priority 0 [ 281.617532][T12695] tipc: Resetting bearer [ 281.699107][T12695] tipc: Disabling bearer [ 281.729018][T12706] batadv0: entered promiscuous mode [ 281.760181][T12706] macvtap0: entered promiscuous mode [ 281.780897][T12706] macvtap0: entered allmulticast mode [ 281.802236][T12706] batadv0: entered allmulticast mode [ 281.821111][T12706] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 281.867936][T12706] batadv0: left allmulticast mode [ 281.877292][T12712] sctp: [Deprecated]: syz.0.1762 (pid 12712) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.877292][T12712] Use struct sctp_sack_info instead [ 281.899207][T12706] batadv0: left promiscuous mode [ 282.253016][T12725] __nla_validate_parse: 4 callbacks suppressed [ 282.253038][T12725] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1766'. [ 282.598808][T12747] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1773'. [ 282.858355][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1775'. [ 282.919245][T12760] sctp: [Deprecated]: syz.3.1775 (pid 12760) Use of int in max_burst socket option. [ 282.919245][T12760] Use struct sctp_assoc_value instead [ 282.991771][T12762] geneve3: entered promiscuous mode [ 283.022434][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.051388][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.070643][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.105030][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.165197][T12768] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1779'. [ 283.168541][T12770] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1780'. [ 283.210765][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.589018][T12791] validate_nla: 24 callbacks suppressed [ 283.589035][T12791] netlink: 'syz.1.1787': attribute type 1 has an invalid length. [ 283.712436][T12797] bond11: (slave dummy0): making interface the new active one [ 283.744352][T12800] netlink: 'syz.3.1788': attribute type 1 has an invalid length. [ 283.752891][T12797] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 283.837659][T12791] ip6gretap0: left allmulticast mode [ 283.858231][T12791] ip6gretap0: left promiscuous mode [ 283.871522][ T1745] block nbd0: Possible stuck request ffff888027550000: control (read@0,4096B). Runtime 30 seconds [ 283.887463][T12791] bridge0: port 3(ip6gretap0) entered disabled state [ 283.927646][T12791] bond11: (slave dummy0): Releasing active interface [ 283.943923][T12791] bridge_slave_1: left allmulticast mode [ 283.951440][T12791] bridge_slave_1: left promiscuous mode [ 283.957345][T12791] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.889128][T12817] IPv6: Can't replace route, no match found [ 285.180453][T12791] bond0: (slave bond_slave_0): Releasing backup interface [ 286.410696][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 286.569455][T12791] bond0: (slave bond_slave_1): Releasing backup interface [ 286.578670][T12791] team0: Port device team_slave_0 removed [ 286.586018][T12791] team0: Port device team_slave_1 removed [ 286.593340][T12791] net_ratelimit: 23 callbacks suppressed [ 286.593358][T12791] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 286.736864][T12815] lo speed is unknown, defaulting to 1000 [ 286.794780][T12828] batadv0: Caught tx_queue_len zero misconfig [ 286.853542][T12829] netlink: 'syz.4.1796': attribute type 3 has an invalid length. [ 287.060397][T12846] ip6tnl0: Caught tx_queue_len zero misconfig [ 287.350471][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1804'. [ 287.424953][T12865] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 287.576442][T12815] lo speed is unknown, defaulting to 1000 [ 287.677877][T12881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1807'. [ 287.723228][T12880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1807'. [ 288.225584][T12902] netlink: 'syz.4.1812': attribute type 23 has an invalid length. [ 288.351866][T12903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1810'. [ 288.696429][ T6538] block nbd64: NBD_DISCONNECT [ 289.424677][T12955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1816'. [ 289.468917][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1816'. [ 289.480219][T12955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1816'. [ 289.978946][T12955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1816'. [ 290.089964][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1816'. [ 290.175164][T12955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1816'. [ 290.415875][T12975] macsec2: entered promiscuous mode [ 290.431161][T12975] bridge0: entered promiscuous mode [ 291.348218][T13007] netlink: 'syz.4.1833': attribute type 6 has an invalid length. [ 291.368330][T13005] netlink: 'syz.2.1832': attribute type 2 has an invalid length. [ 291.874888][T13031] netlink: 'syz.0.1839': attribute type 2 has an invalid length. [ 292.296840][T13041] syzkaller0: refused to change device tx_queue_len [ 292.377531][T13048] xt_hashlimit: size too large, truncated to 1048576 [ 292.429824][T13047] @0Ù: renamed from bond_slave_1 [ 292.759146][T13067] tipc: Started in network mode [ 292.764659][T13067] tipc: Node identity 6efbdef5e2f1, cluster identity 4711 [ 292.775587][T13067] tipc: Enabled bearer , priority 0 [ 292.788835][T13067] syzkaller0: entered promiscuous mode [ 292.794790][T13067] syzkaller0: entered allmulticast mode [ 292.819842][T13069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.889922][T13074] netlink: 'syz.0.1854': attribute type 2 has an invalid length. [ 292.950290][T13072] bridge0: port 3(team0) entered disabled state [ 292.956885][T13072] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.964222][T13072] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.204276][T13072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.397571][T13072] bond1: left allmulticast mode [ 293.403906][T13072] ip6gretap1: left allmulticast mode [ 293.409408][T13072] bond1: left promiscuous mode [ 293.415684][T13072] ip6gretap1: left promiscuous mode [ 293.467159][T13072] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 293.520013][ T7162] lo speed is unknown, defaulting to 1000 [ 293.534604][ T7162] syz2: Port: 1 Link DOWN [ 293.555072][T13074] D†'|o: entered promiscuous mode [ 293.566497][T13067] tipc: Resetting bearer [ 293.573661][T13067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.585928][T13090] __nla_validate_parse: 12 callbacks suppressed [ 293.585946][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'. [ 293.614905][T13088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'. [ 293.639699][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.679142][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.700067][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 54038 - 0 [ 293.710785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.733949][T13065] tipc: Resetting bearer [ 293.801887][T13065] tipc: Disabling bearer [ 293.815851][T13098] xt_hashlimit: size too large, truncated to 1048576 [ 293.837277][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.853040][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.873025][T13105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1859'. [ 293.886223][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 54038 - 0 [ 293.896698][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.906401][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.915426][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 54038 - 0 [ 293.930768][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.939817][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.949959][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 54038 - 0 [ 294.252456][T13117] bond9: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 294.270298][T13117] bond9: entered allmulticast mode [ 294.287135][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1863'. [ 294.389016][T13129] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.448565][T13133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1869'. [ 294.449394][T13131] pim6reg1: entered allmulticast mode [ 294.691676][T13150] x_tables: duplicate underflow at hook 1 [ 294.798737][T13163] IPv6: NLM_F_CREATE should be specified when creating new route [ 294.821328][T13163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.828624][T13163] IPv6: NLM_F_CREATE should be set when creating new route [ 294.835978][T13163] IPv6: NLM_F_CREATE should be set when creating new route [ 294.843267][T13163] IPv6: NLM_F_CREATE should be set when creating new route [ 294.895043][T13168] netlink: 'syz.3.1877': attribute type 22 has an invalid length. [ 295.104099][T13177] lo speed is unknown, defaulting to 1000 [ 295.357600][T13177] lo speed is unknown, defaulting to 1000 [ 295.425487][T13178] netlink: 'syz.4.1878': attribute type 1 has an invalid length. [ 295.470664][T13178] bond12: entered promiscuous mode [ 295.476463][T13178] 8021q: adding VLAN 0 to HW filter on device bond12 [ 295.835310][T13189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1880'. [ 296.223830][T13208] netlink: 'syz.4.1885': attribute type 26 has an invalid length. [ 296.437076][T13213] syzkaller0: entered promiscuous mode [ 296.444240][T13213] syzkaller0: entered allmulticast mode [ 297.773612][T13163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.957439][T13225] netlink: 'syz.0.1890': attribute type 1 has an invalid length. [ 297.991804][T13223] netlink: 'syz.1.1888': attribute type 1 has an invalid length. [ 298.031985][T13228] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 298.070194][T13225] 8021q: adding VLAN 0 to HW filter on device bond10 [ 298.181975][T13223] bond12: entered promiscuous mode [ 298.204049][T13223] 8021q: adding VLAN 0 to HW filter on device bond12 [ 298.389935][T13232] bridge_slave_0: left allmulticast mode [ 298.404609][T13232] bridge_slave_0: left promiscuous mode [ 298.426948][T13232] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.447306][T13232] bridge_slave_1: left allmulticast mode [ 298.453698][T13232] bridge_slave_1: left promiscuous mode [ 298.459689][T13232] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.485284][T13232] bond0: (slave bond_slave_0): Releasing backup interface [ 298.506233][T13232] team0: Port device team_slave_0 removed [ 298.524606][T13232] team0: Port device team_slave_1 removed [ 298.532437][T13232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.546707][T13232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.556995][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'. [ 298.567500][T13247] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1893'. [ 298.581958][T13232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.589512][T13232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.601806][T13232] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 298.635976][T13226] bond10: (slave geneve2): making interface the new active one [ 298.655496][T13226] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 298.686041][T13223] vlan0: entered allmulticast mode [ 298.691896][T13223] bond12: entered allmulticast mode [ 298.707589][T13243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1893'. [ 298.786807][T13241] bond12: (slave bridge1): making interface the new active one [ 298.797247][T13241] bridge1: entered promiscuous mode [ 298.804645][T13241] bridge1: entered allmulticast mode [ 298.818288][T13241] bond12: (slave bridge1): Enslaving as an active interface with an up link [ 299.095193][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1898'. [ 299.098727][T13277] netlink: 'syz.2.1900': attribute type 29 has an invalid length. [ 299.116663][T13276] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1901'. [ 299.142781][T13269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1898'. [ 299.352597][T13291] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1903'. [ 299.388459][T13290] smc: removing ib device sz1 [ 299.417406][T13297] netlink: 'syz.0.1904': attribute type 3 has an invalid length. [ 299.439879][T13298] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1905'. [ 299.453709][T13299] lo: Caught tx_queue_len zero misconfig [ 299.509086][T13290] smbdirect: ib_dev[sz1] removed [ 299.650446][T13311] netlink: 'syz.2.1909': attribute type 1 has an invalid length. [ 299.821826][T13311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1909'. [ 299.985167][T13318] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.009975][T13318] bond3: (slave bond4): making interface the new active one [ 300.031120][T13318] bond3: (slave bond4): Enslaving as an active interface with an up link [ 300.123664][T13319] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 300.146272][T13311] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.163482][T13293] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 300.496832][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 300.524554][T13339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1916'. [ 300.524639][T13337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1916'. [ 300.995011][T13349] netlink: 'syz.2.1921': attribute type 11 has an invalid length. [ 301.104617][T13364] netlink: 'syz.3.1924': attribute type 1 has an invalid length. [ 301.107834][T13356] lo speed is unknown, defaulting to 1000 [ 301.299916][ T5721] IPVS: starting estimator thread 0... [ 301.406215][T13374] IPVS: using max 28 ests per chain, 67200 per kthread [ 301.579461][ T5627] Bluetooth: hci4: link tx timeout [ 301.585740][ T5627] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 301.595756][ T5626] Bluetooth: hci4: link tx timeout [ 301.602782][ T5626] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 301.610589][ T5626] Bluetooth: hci4: link tx timeout [ 301.615747][ T5626] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 301.623993][ T5626] Bluetooth: hci4: link tx timeout [ 301.629142][ T5626] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 301.637258][ T5626] Bluetooth: hci4: link tx timeout [ 301.642439][ T5626] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 303.208308][T13422] xt_cluster: node mask cannot exceed total number of nodes [ 303.610732][ T5626] Bluetooth: hci4: command 0x0405 tx timeout [ 304.555984][T13384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.797421][T13432] netlink: 'syz.0.1941': attribute type 1 has an invalid length. [ 304.886186][T13432] 8021q: adding VLAN 0 to HW filter on device bond11 [ 304.925598][T13439] __nla_validate_parse: 9 callbacks suppressed [ 304.925615][T13439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1943'. [ 304.934162][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1944'. [ 304.961824][T13445] batadv1: entered promiscuous mode [ 304.968948][T13445] bond11: (slave batadv1): Opening slave failed [ 305.046227][T13442] bond11: (slave veth5): Enslaving as an active interface with a down link [ 305.067013][T13456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1946'. [ 305.363590][T13468] xt_cluster: node mask cannot exceed total number of nodes [ 305.373138][T13469] sctp: [Deprecated]: syz.4.1947 (pid 13469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.373138][T13469] Use struct sctp_sack_info instead [ 305.517009][T13469] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1947'. [ 305.547206][T13469] pim6reg1: entered allmulticast mode [ 305.695521][T13483] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 305.740048][T13483] bridge_slave_1: Caught tx_queue_len zero misconfig [ 306.355357][T13511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 306.406350][T13514] netlink: 'syz.3.1961': attribute type 83 has an invalid length. [ 306.474889][T13516] netlink: 'syz.4.1962': attribute type 22 has an invalid length. [ 306.661563][T13520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1964'. [ 306.884393][ T5635] udevd[5635]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 307.068464][T13550] can: request_module (can-proto-3) failed. [ 307.459702][T13525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.637447][T13561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1975'. [ 307.695609][T13561] tipc: Enabling of bearer rejected, failed to enable media [ 307.742652][T13567] tipc: Enabled bearer , priority 0 [ 307.776223][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1976'. [ 307.807292][T13571] netlink: 'syz.4.1977': attribute type 1 has an invalid length. [ 307.818715][T13567] syzkaller0: entered promiscuous mode [ 307.825908][T13567] syzkaller0: entered allmulticast mode [ 307.867449][T13577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1977'. [ 307.909843][T13571] bond14: entered promiscuous mode [ 307.916129][T13571] 8021q: adding VLAN 0 to HW filter on device bond14 [ 307.933125][T13573] bond3: (slave ip6tnl4): The slave device specified does not support setting the MAC address [ 307.944891][T13573] bond3: (slave ip6tnl4): Error -95 calling set_mac_address [ 307.947016][T13584] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1979'. [ 307.966552][T13575] 8021q: VLANs not supported on ip6gre0 [ 307.976025][T13581] tipc: Resetting bearer [ 307.985634][T13577] bond14: entered allmulticast mode [ 308.067767][T13571] bond14: (slave bridge6): making interface the new active one [ 308.094600][T13571] bridge6: entered promiscuous mode [ 308.101909][T13571] bridge6: entered allmulticast mode [ 308.111834][T13589] ieee802154 phy1 wpan1: encryption failed: -22 [ 308.119513][T13571] bond14: (slave bridge6): Enslaving as an active interface with an up link [ 308.131324][T13589] netlink: 'syz.2.1980': attribute type 22 has an invalid length. [ 308.144684][T13565] tipc: Resetting bearer [ 308.214409][T13565] tipc: Disabling bearer [ 308.359988][T13597] bond5 (unregistering): Released all slaves [ 308.381426][T13602] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 308.445626][T13580] lo speed is unknown, defaulting to 1000 [ 308.964067][T13631] netlink: 'syz.3.1992': attribute type 22 has an invalid length. [ 309.058334][T13628] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 310.066866][T13668] __nla_validate_parse: 5 callbacks suppressed [ 310.066886][T13668] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2001'. [ 310.121991][T13668] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2001'. [ 310.361441][T13674] syzkaller0: entered promiscuous mode [ 310.367077][T13674] syzkaller0: entered allmulticast mode [ 310.549983][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2005'. [ 310.559724][T13686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2005'. [ 310.571631][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2005'. [ 310.582463][T13686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2005'. [ 312.608907][T13662] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.614385][T13700] x_tables: duplicate entry at hook 3 [ 312.648881][T13701] x_tables: duplicate entry at hook 3 [ 312.829164][T13703] can: request_module (can-proto-0) failed. [ 312.929278][T13719] batman_adv: batadv0: Interface activated: dummy0 [ 312.950609][T13719] batadv0: mtu less than device minimum [ 312.962333][T13719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.974202][T13719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.986008][T13719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.997753][T13719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.009526][T13719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.021289][T13719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.033000][T13719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.044719][T13719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.056529][T13719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.228449][T13721] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.424555][T13721] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 313.497727][T13721] geneve1: left promiscuous mode [ 313.516800][T13721] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 313.539519][T13721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.582044][T13751] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2020'. [ 313.600119][T13721] bridge1: left promiscuous mode [ 313.607929][T13721] bond1: left promiscuous mode [ 313.614391][T13721] vlan2: left promiscuous mode [ 313.619287][T13721] bridge0: left promiscuous mode [ 313.633367][T13721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 313.645792][T13721] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 313.659985][T13721] ip6gre1: left promiscuous mode [ 313.691400][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 313.873826][T13763] netlink: 'syz.3.2023': attribute type 11 has an invalid length. [ 313.933017][ T1745] block nbd0: Possible stuck request ffff888027550000: control (read@0,4096B). Runtime 60 seconds [ 313.980824][ T8558] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.954290][T13787] ipip0: entered promiscuous mode [ 315.041597][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2033'. [ 315.185752][T13797] syzkaller0: entered promiscuous mode [ 315.202205][T13797] syzkaller0: entered allmulticast mode [ 315.616783][T13812] syzkaller0: entered promiscuous mode [ 315.631308][T13812] syzkaller0: entered allmulticast mode [ 317.144330][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.770648][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.849334][T13818] lo speed is unknown, defaulting to 1000 [ 317.915031][T13847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2049'. [ 317.985492][T13843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2048'. [ 318.013359][T13843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2048'. [ 318.041608][T13850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2048'. [ 318.073970][T13856] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2052'. [ 318.093985][T13850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2048'. [ 318.138109][T13856] netlink: 'syz.3.2052': attribute type 13 has an invalid length. [ 318.150578][T13856] netlink: 'syz.3.2052': attribute type 17 has an invalid length. [ 318.336649][T13856] sit0: left promiscuous mode [ 318.374708][T13856] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.385563][T13856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.438322][T13856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.453453][T13856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.468456][T13856] veth1_vlan: left promiscuous mode [ 318.476931][T13856] vlan0: left promiscuous mode [ 318.483822][T13856] veth1_vlan: entered promiscuous mode [ 318.494630][T13856] veth1_macvtap: left promiscuous mode [ 318.501503][T13856] veth0_macvtap: left promiscuous mode [ 318.507815][T13856] veth0_macvtap: entered promiscuous mode [ 318.516248][T13869] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2055'. [ 318.522076][T13856] veth1_macvtap: entered promiscuous mode [ 318.531204][T13869] netlink: 'syz.4.2055': attribute type 2 has an invalid length. [ 318.538131][T13856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 318.547606][T13869] netlink: 'syz.4.2055': attribute type 1 has an invalid length. [ 318.555130][T13856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 318.555768][T13869] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2055'. [ 318.579129][T13856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 318.591591][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2055'. [ 318.595249][T13856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 318.619099][T13856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.627054][T13856] geneve2: left promiscuous mode [ 318.632660][T13856] geneve2: left allmulticast mode [ 318.644986][T13856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.654240][T13856] bond1: entered allmulticast mode [ 318.659410][T13856] ip6gretap1: entered allmulticast mode [ 318.668684][T13856] bond1: entered promiscuous mode [ 318.674860][T13856] ip6gretap1: entered promiscuous mode [ 318.681388][T13856] macvlan2: left promiscuous mode [ 318.686470][T13856] bond1: left promiscuous mode [ 318.691998][T13856] ip6gretap1: left promiscuous mode [ 318.697456][T13856] macvlan2: left allmulticast mode [ 318.703229][T13856] bond1: left allmulticast mode [ 318.708092][T13856] ip6gretap1: left allmulticast mode [ 318.714991][T13856] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 318.723309][T13856] ip6gretap1: entered promiscuous mode [ 318.737107][T13856] xfrm1: left allmulticast mode [ 318.746414][T13856] gretap1: left promiscuous mode [ 318.755130][T13856] bond2: left promiscuous mode [ 318.760025][T13856] bond2: left allmulticast mode [ 318.766985][T13856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.780402][T13856] batman_adv: batadv0: Interface activated: ip6gretap2 [ 318.795150][T13856] ip6tnl3: left allmulticast mode [ 318.843847][T13856] 8021q: adding VLAN 0 to HW filter on device bond3 [ 318.856411][T13861] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.857758][ T24] lo speed is unknown, defaulting to 1000 [ 318.885843][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.893094][ T7998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.906789][ T24] syz2: Port: 1 Link ACTIVE [ 318.959287][ T7998] bridge0: port 3(team0) entered blocking state [ 318.965729][ T7998] bridge0: port 3(team0) entered forwarding state [ 318.977205][ T8007] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.987734][ T8007] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.008523][ T8007] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 46422 - 0 [ 319.056059][ T8007] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.079997][ T8007] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.110458][ T8007] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 46422 - 0 [ 319.124530][T13877] xt_hashlimit: size too large, truncated to 1048576 [ 319.160769][ T8007] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.174986][T13878] xt_hashlimit: size too large, truncated to 1048576 [ 319.202025][ T8007] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.227465][ T8007] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 46422 - 0 [ 319.261370][ T8007] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.262856][T13881] netlink: 'syz.1.2059': attribute type 4 has an invalid length. [ 319.293065][ T8007] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.344919][T13881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2059'. [ 319.345900][ T8007] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 46422 - 0 [ 319.465862][ T7998] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 319.713805][ T7998] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 319.995099][ T7998] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 320.962855][ T1026] smc: removing ib device syz1 [ 320.995490][ T24] syz1: Port: 1 Link DOWN [ 321.040236][T13943] ip6gre1: entered promiscuous mode [ 321.045801][T13943] ip6gre1: entered allmulticast mode [ 321.073624][T13943] x_tables: duplicate underflow at hook 1 [ 321.082612][ T1026] smbdirect: ib_dev[syz1] removed [ 321.194155][T13953] netlink: 'syz.3.2077': attribute type 8 has an invalid length. [ 321.219299][T13955] netlink: 'syz.4.2078': attribute type 22 has an invalid length. [ 321.362222][T13961] netlink: 'syz.3.2077': attribute type 23 has an invalid length. [ 321.669969][T13965] batman_adv: batadv0: Interface deactivated: dummy0 [ 321.694638][T13965] batman_adv: batadv0: Removing interface: dummy0 [ 321.723341][T13965] bridge_slave_0: left allmulticast mode [ 321.742528][T13965] bridge_slave_0: left promiscuous mode [ 321.770929][T13965] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.859859][T13965] bridge_slave_1: left allmulticast mode [ 321.879916][T13965] bridge_slave_1: left promiscuous mode [ 321.906507][T13965] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.935754][T13965] bond0: (slave bond_slave_0): Releasing backup interface [ 321.965132][T13965] bond0: (slave bond_slave_1): Releasing backup interface [ 321.986951][T13965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.012138][T13965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.024190][T13965] net_ratelimit: 11 callbacks suppressed [ 322.024420][T13965] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 323.293235][T14033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.300542][T14033] IPv6: NLM_F_CREATE should be set when creating new route [ 323.307785][T14033] IPv6: NLM_F_CREATE should be set when creating new route [ 323.315070][T14033] IPv6: NLM_F_CREATE should be set when creating new route [ 323.632961][T14044] erspan0: entered promiscuous mode [ 323.653310][T14044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.661409][T14044] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.690896][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 323.732940][T14044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.752722][T14044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.802868][T14044] veth1_vlan: left promiscuous mode [ 323.808939][T14044] veth0_vlan: left promiscuous mode [ 323.815654][T14044] veth0_vlan: entered promiscuous mode [ 323.822647][T14044] veth1_vlan: entered promiscuous mode [ 323.832938][T14044] veth1_macvtap: left promiscuous mode [ 323.839210][T14044] veth0_macvtap: left promiscuous mode [ 323.846220][T14044] veth0_macvtap: entered promiscuous mode [ 323.856268][T14044] veth1_macvtap: entered promiscuous mode [ 323.866630][T14044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.874906][T14044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.883533][T14044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.891820][T14044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 323.904253][T14044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 323.912086][T14044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.919233][T14044] veth0_to_team: entered promiscuous mode [ 323.926953][T14044] 8021q: adding VLAN 0 to HW filter on device bond2 [ 323.934218][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 323.945401][T14044] 8021q: adding VLAN 0 to HW filter on device bond3 [ 323.956453][T14044] 8021q: adding VLAN 0 to HW filter on device bond4 [ 323.968621][T14044] 8021q: adding VLAN 0 to HW filter on device bond5 [ 323.976905][T14044] 8021q: adding VLAN 0 to HW filter on device bond6 [ 323.988040][T14044] 8021q: adding VLAN 0 to HW filter on device bond7 [ 323.996276][T14044] batman_adv: batadv0: Interface activated: ip6gretap2 [ 324.007495][T14044] 8021q: adding VLAN 0 to HW filter on device bond10 [ 324.014414][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 324.025475][T14044] 8021q: adding VLAN 0 to HW filter on device bond11 [ 324.094023][ T8010] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 324.202398][T14053] tipc: Failed to remove unknown binding: 66,0,0/0:2212838667/2212838669 [ 324.219654][T14053] tipc: Failed to remove unknown binding: 66,0,0/0:2212838667/2212838668 [ 324.229481][T14053] tipc: Failed to remove unknown binding: 66,0,0/0:2212838667/2212838669 [ 324.239691][T14053] tipc: Failed to remove unknown binding: 66,0,0/0:2212838667/2212838668 [ 324.252995][T14053] __nla_validate_parse: 6 callbacks suppressed [ 324.253008][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2102'. [ 324.272541][T14053] netlink: 'syz.1.2102': attribute type 10 has an invalid length. [ 324.280373][T14053] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2102'. [ 324.292871][T14053] dummy0: entered promiscuous mode [ 324.456960][T14057] syzkaller0: entered promiscuous mode [ 324.462921][T14057] syzkaller0: entered allmulticast mode [ 325.499182][T14010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.508575][T14019] netlink: 'syz.4.2094': attribute type 9 has an invalid length. [ 325.779564][T14069] syzkaller0: entered promiscuous mode [ 325.796083][T14069] syzkaller0: entered allmulticast mode [ 325.907802][T14073] batadv_slave_0: Caught tx_queue_len zero misconfig [ 325.944439][T14066] syzkaller0: entered promiscuous mode [ 325.961350][T14066] syzkaller0: entered allmulticast mode [ 325.992514][T14074] netlink: 'syz.3.2108': attribute type 25 has an invalid length. [ 326.108633][T14088] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2111'. [ 326.134564][T14088] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2111'. [ 326.428465][T14106] openvswitch: netlink: Key 6 has unexpected len 147 expected 2 [ 326.786441][T14116] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2115'. [ 326.838161][T14119] netlink: 'syz.3.2118': attribute type 3 has an invalid length. [ 326.854036][T14119] netlink: 'syz.3.2118': attribute type 1 has an invalid length. [ 326.862338][T14119] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2118'. [ 328.411022][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 328.838067][T14123] bond5: option lacp_rate: invalid value (64) [ 328.848591][T14132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2123'. [ 328.862895][T14123] bond5 (unregistering): Released all slaves [ 329.220417][T14149] Bluetooth: hci1: too big key_count value 29096 [ 329.249312][T14147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2126'. [ 329.391413][T14159] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2130'. [ 329.449903][T14166] FAULT_INJECTION: forcing a failure. [ 329.449903][T14166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.468222][T14166] CPU: 0 UID: 0 PID: 14166 Comm: syz.2.2133 Not tainted syzkaller #0 PREEMPT(full) [ 329.468250][T14166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 329.468263][T14166] Call Trace: [ 329.468270][T14166] [ 329.468278][T14166] dump_stack_lvl+0xe8/0x150 [ 329.468312][T14166] should_fail_ex+0x40c/0x560 [ 329.468340][T14166] _copy_from_user+0x2d/0xb0 [ 329.468360][T14166] ___sys_sendmsg+0x1c6/0x360 [ 329.468381][T14166] ? __lock_acquire+0x683/0x2cf0 [ 329.468413][T14166] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.468440][T14166] ? kstrtouint+0x6e/0xe0 [ 329.468487][T14166] ? __fget_files+0x2a/0x420 [ 329.468511][T14166] ? __fget_files+0x3a2/0x420 [ 329.468544][T14166] __sys_sendmmsg+0x273/0x4d0 [ 329.468572][T14166] ? __pfx___sys_sendmmsg+0x10/0x10 [ 329.468603][T14166] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 329.468642][T14166] ? ksys_write+0x242/0x270 [ 329.468663][T14166] ? __pfx_ksys_write+0x10/0x10 [ 329.468688][T14166] __x64_sys_sendmmsg+0xa0/0xc0 [ 329.468711][T14166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.468732][T14166] do_syscall_64+0x174/0x580 [ 329.468754][T14166] ? trace_irq_disable+0x3b/0x140 [ 329.468778][T14166] ? clear_bhb_loop+0x40/0x90 [ 329.468802][T14166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.468821][T14166] RIP: 0033:0x7f63f659de99 [ 329.468839][T14166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.468856][T14166] RSP: 002b:00007f63f73ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 329.468875][T14166] RAX: ffffffffffffffda RBX: 00007f63f6825fa0 RCX: 00007f63f659de99 [ 329.468889][T14166] RDX: 0000000000000001 RSI: 0000200000002a80 RDI: 0000000000000003 [ 329.468901][T14166] RBP: 00007f63f73ba090 R08: 0000000000000000 R09: 0000000000000000 [ 329.468913][T14166] R10: 0000000020004041 R11: 0000000000000246 R12: 0000000000000001 [ 329.468926][T14166] R13: 00007f63f6826038 R14: 00007f63f6825fa0 R15: 00007ffff1e38fb8 [ 329.468956][T14166] [ 329.636990][T14165] syzkaller0: entered promiscuous mode [ 329.680373][T14165] syzkaller0: entered allmulticast mode [ 329.918065][T14178] xt_socket: unknown flags 0x4c [ 331.852459][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 332.158712][T14200] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2142'. [ 332.392909][T14218] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2148'. [ 332.492667][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 333.132080][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 333.252112][T14235] syzkaller0: entered promiscuous mode [ 333.257622][T14235] syzkaller0: entered allmulticast mode [ 336.161552][ T4986] udevd[4986]: worker [5620] /devices/virtual/block/nbd0 is taking a long time [ 337.622724][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 344.011725][ T1745] block nbd0: Possible stuck request ffff888027550000: control (read@0,4096B). Runtime 90 seconds [ 345.663671][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.672605][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.682136][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.693766][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.701709][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.908346][T14238] lo speed is unknown, defaulting to 1000 [ 346.191399][T14238] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.198661][T14238] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.206333][T14238] bridge_slave_0: entered allmulticast mode [ 346.213568][T14238] bridge_slave_0: entered promiscuous mode [ 346.221620][T14238] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.228793][T14238] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.236418][T14238] bridge_slave_1: entered allmulticast mode [ 346.243992][T14238] bridge_slave_1: entered promiscuous mode [ 346.269301][T14238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.281437][T14238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.308905][T14238] team0: Port device team_slave_0 added [ 346.316791][T14238] team0: Port device team_slave_1 added [ 346.343584][T14238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.350620][T14238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.376734][T14238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.388617][T14238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.395651][T14238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.422021][T14238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.460206][T14238] hsr_slave_0: entered promiscuous mode [ 346.466891][T14238] hsr_slave_1: entered promiscuous mode [ 346.473293][T14238] debugfs: 'hsr0' already exists in 'hsr' [ 346.479051][T14238] Cannot create hsr debugfs directory [ 347.159339][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 347.167566][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 347.178588][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 347.188814][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 347.199146][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 347.414873][T14256] lo speed is unknown, defaulting to 1000 [ 347.699634][T14256] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.707430][T14256] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.714975][T14256] bridge_slave_0: entered allmulticast mode [ 347.722117][T14256] bridge_slave_0: entered promiscuous mode [ 347.729932][T14256] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.737169][T14256] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.744610][T14256] bridge_slave_1: entered allmulticast mode [ 347.752302][T14256] bridge_slave_1: entered promiscuous mode [ 347.771520][ T5626] Bluetooth: hci5: command tx timeout [ 347.780692][T14256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.792917][T14256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.819486][T14256] team0: Port device team_slave_0 added [ 347.827164][T14256] team0: Port device team_slave_1 added [ 347.849802][T14256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.853249][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 347.859319][T14256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.890704][T14256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.903954][T14256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.911049][T14256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.937251][T14256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.976663][T14256] hsr_slave_0: entered promiscuous mode [ 347.982995][T14256] hsr_slave_1: entered promiscuous mode [ 347.989004][T14256] debugfs: 'hsr0' already exists in 'hsr' [ 347.994799][T14256] Cannot create hsr debugfs directory [ 348.272744][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 348.287287][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 348.296993][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 348.307461][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 348.316551][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 348.371414][ T4936] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 348.384374][ T4936] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 348.395252][ T4936] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 348.404812][ T4936] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 348.412803][ T4936] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 348.748014][T14275] lo speed is unknown, defaulting to 1000 [ 348.798447][T14277] lo speed is unknown, defaulting to 1000 [ 349.131750][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 349.259653][ T5627] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 349.277237][ T5627] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 349.287042][ T5627] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 349.295399][ T5633] Bluetooth: hci6: command tx timeout [ 349.302248][ T5627] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 349.312403][ T5627] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 349.372962][T14275] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.380273][T14275] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.388941][T14275] bridge_slave_0: entered allmulticast mode [ 349.397687][T14275] bridge_slave_0: entered promiscuous mode [ 349.417248][T14275] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.425132][T14275] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.440941][T14275] bridge_slave_1: entered allmulticast mode [ 349.448734][T14275] bridge_slave_1: entered promiscuous mode [ 349.509834][T14275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.524134][T14275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.579437][T14275] team0: Port device team_slave_0 added [ 349.603403][T14275] team0: Port device team_slave_1 added [ 349.667303][T14275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.675978][T14275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.705333][T14275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.726805][T14275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.734662][T14275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.761454][T14275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.802570][T14277] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.812436][T14277] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.819706][T14277] bridge_slave_0: entered allmulticast mode [ 349.827054][T14277] bridge_slave_0: entered promiscuous mode [ 349.835346][T14277] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.843000][T14277] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.850432][T14277] bridge_slave_1: entered allmulticast mode [ 349.852411][ T5627] Bluetooth: hci5: command tx timeout [ 349.858973][T14277] bridge_slave_1: entered promiscuous mode [ 349.884326][T14302] lo speed is unknown, defaulting to 1000 [ 349.911946][T14277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.944846][T14277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.968741][T14275] hsr_slave_0: entered promiscuous mode [ 349.976281][T14275] hsr_slave_1: entered promiscuous mode [ 349.984260][T14275] debugfs: 'hsr0' already exists in 'hsr' [ 349.990027][T14275] Cannot create hsr debugfs directory [ 350.043087][T14277] team0: Port device team_slave_0 added [ 350.070159][T14277] team0: Port device team_slave_1 added [ 350.143694][T14277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.151133][T14277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.177766][T14277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.206467][T14277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.214105][T14277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.240388][T14277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.369050][T14277] hsr_slave_0: entered promiscuous mode [ 350.375716][T14277] hsr_slave_1: entered promiscuous mode [ 350.382460][T14277] debugfs: 'hsr0' already exists in 'hsr' [ 350.388196][T14277] Cannot create hsr debugfs directory [ 350.414135][ T5627] Bluetooth: hci7: command tx timeout [ 350.490680][ T5627] Bluetooth: hci8: command tx timeout [ 350.723735][T14302] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.731416][T14302] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.738606][T14302] bridge_slave_0: entered allmulticast mode [ 350.746161][T14302] bridge_slave_0: entered promiscuous mode [ 350.762407][T14302] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.769630][T14302] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.777609][T14302] bridge_slave_1: entered allmulticast mode [ 350.784785][T14302] bridge_slave_1: entered promiscuous mode [ 350.821129][T14302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.833227][T14302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.861254][T14302] team0: Port device team_slave_0 added [ 350.868659][T14302] team0: Port device team_slave_1 added [ 350.893433][T14302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.900411][T14302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.926529][T14302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.938734][T14302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.945866][T14302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.972289][T14302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.016329][T14302] hsr_slave_0: entered promiscuous mode [ 351.022874][T14302] hsr_slave_1: entered promiscuous mode [ 351.028873][T14302] debugfs: 'hsr0' already exists in 'hsr' [ 351.034698][T14302] Cannot create hsr debugfs directory [ 351.371215][ T5627] Bluetooth: hci9: command tx timeout [ 351.371238][ T4936] Bluetooth: hci6: command tx timeout [ 351.693439][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 351.930753][ T5627] Bluetooth: hci5: command tx timeout [ 352.500698][ T5627] Bluetooth: hci7: command tx timeout [ 352.570608][ T5627] Bluetooth: hci8: command tx timeout [ 353.452801][ T5627] Bluetooth: hci6: command tx timeout [ 353.453243][ T4936] Bluetooth: hci9: command tx timeout [ 354.010768][ T4936] Bluetooth: hci5: command tx timeout [ 354.570650][ T4936] Bluetooth: hci7: command tx timeout [ 354.650650][ T4936] Bluetooth: hci8: command tx timeout [ 354.891104][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 355.531449][ T4936] Bluetooth: hci6: command tx timeout [ 355.531840][ T5627] Bluetooth: hci9: command tx timeout [ 356.650695][ T5627] Bluetooth: hci7: command tx timeout [ 356.730621][ T5627] Bluetooth: hci8: command tx timeout [ 357.611139][ T5627] Bluetooth: hci9: command tx timeout [ 374.092284][ T1745] block nbd0: Possible stuck request ffff888027550000: control (read@0,4096B). Runtime 120 seconds [ 378.573507][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.211122][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 383.693299][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 386.900815][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 387.531211][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 388.810811][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.172828][ T1745] block nbd0: Possible stuck request ffff888027550000: control (read@0,4096B). Runtime 150 seconds [ 406.218472][ T4936] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 406.228260][ T4936] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 406.238814][ T4936] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 406.247600][ T4936] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 406.255915][ T4936] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 406.466610][T14333] lo speed is unknown, defaulting to 1000 [ 406.753448][T14333] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.761236][T14333] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.768640][T14333] bridge_slave_0: entered allmulticast mode [ 406.776161][T14333] bridge_slave_0: entered promiscuous mode [ 406.784000][T14333] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.791388][T14333] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.798647][T14333] bridge_slave_1: entered allmulticast mode [ 406.805789][T14333] bridge_slave_1: entered promiscuous mode [ 406.832107][T14333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.844367][T14333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.872755][T14333] team0: Port device team_slave_0 added [ 406.880191][T14333] team0: Port device team_slave_1 added [ 406.904238][T14333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.911568][T14333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.937520][T14333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.949416][T14333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.956955][T14333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.984538][T14333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.023284][T14333] hsr_slave_0: entered promiscuous mode [ 407.029592][T14333] hsr_slave_1: entered promiscuous mode [ 407.035881][T14333] debugfs: 'hsr0' already exists in 'hsr' [ 407.041858][T14333] Cannot create hsr debugfs directory [ 407.254284][ T4936] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 407.272162][ T4936] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 407.286602][ T4936] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 407.298576][ T4936] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 407.307409][ T4936] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 407.615680][T14351] lo speed is unknown, defaulting to 1000 [ 407.905814][T14351] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.913355][T14351] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.921271][T14351] bridge_slave_0: entered allmulticast mode [ 407.928212][T14351] bridge_slave_0: entered promiscuous mode [ 407.937032][T14351] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.944501][T14351] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.952346][T14351] bridge_slave_1: entered allmulticast mode [ 407.960335][T14351] bridge_slave_1: entered promiscuous mode [ 407.987063][T14351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.001641][T14351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.031403][T14351] team0: Port device team_slave_0 added [ 408.038815][T14351] team0: Port device team_slave_1 added [ 408.061569][T14351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.068582][T14351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.095333][T14351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.108535][T14351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.116147][T14351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.142627][T14351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.198838][T14351] hsr_slave_0: entered promiscuous mode [ 408.206408][T14351] hsr_slave_1: entered promiscuous mode [ 408.214694][T14351] debugfs: 'hsr0' already exists in 'hsr' [ 408.224733][T14351] Cannot create hsr debugfs directory [ 408.331842][ T4936] Bluetooth: hci10: command tx timeout [ 408.386492][ T5627] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 408.403791][ T5627] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 408.412565][ T5627] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 408.434042][ T5627] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 408.446244][ T5627] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 408.476172][ T5633] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 408.500296][ T5633] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 408.514166][ T5633] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 408.533181][ T5633] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 408.541610][ T5633] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 409.008519][T14370] lo speed is unknown, defaulting to 1000 [ 409.086526][T14372] lo speed is unknown, defaulting to 1000 [ 409.304104][ T4936] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 409.317764][ T4936] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 409.328249][ T4936] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 409.341532][ T4936] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 409.351034][ T4936] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 409.374385][ T5627] Bluetooth: hci11: command tx timeout [ 409.703652][T14370] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.711376][T14370] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.718633][T14370] bridge_slave_0: entered allmulticast mode [ 409.726418][T14370] bridge_slave_0: entered promiscuous mode [ 409.752966][T14370] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.764587][T14370] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.774357][T14370] bridge_slave_1: entered allmulticast mode [ 409.782077][T14370] bridge_slave_1: entered promiscuous mode [ 409.823916][T14370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.843598][T14370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.865243][T14392] lo speed is unknown, defaulting to 1000 [ 409.888014][T14370] team0: Port device team_slave_0 added [ 409.909694][T14370] team0: Port device team_slave_1 added [ 409.975507][T14370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.983417][T14370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.010357][T14370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.033623][T14370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.041946][T14370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.069032][T14370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.163268][T14370] hsr_slave_0: entered promiscuous mode [ 410.169779][T14370] hsr_slave_1: entered promiscuous mode [ 410.179018][T14370] debugfs: 'hsr0' already exists in 'hsr' [ 410.185681][T14370] Cannot create hsr debugfs directory [ 410.354528][T14372] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.362199][T14372] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.369350][T14372] bridge_slave_0: entered allmulticast mode [ 410.376984][T14372] bridge_slave_0: entered promiscuous mode [ 410.394078][T14372] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.401490][T14372] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.408704][T14372] bridge_slave_1: entered allmulticast mode [ 410.411167][ T4936] Bluetooth: hci10: command tx timeout [ 410.418341][T14372] bridge_slave_1: entered promiscuous mode [ 410.494272][T14372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.517561][T14372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.571503][ T4936] Bluetooth: hci12: command tx timeout [ 410.578467][ T5627] Bluetooth: hci13: command tx timeout [ 410.615806][T14372] team0: Port device team_slave_0 added [ 410.628612][T14372] team0: Port device team_slave_1 added [ 410.691611][T14372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.698594][T14372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.726826][T14372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.740275][T14372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.747792][T14372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.774180][T14372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.861518][T14372] hsr_slave_0: entered promiscuous mode [ 410.867828][T14372] hsr_slave_1: entered promiscuous mode [ 410.878644][T14372] debugfs: 'hsr0' already exists in 'hsr' [ 410.884903][T14372] Cannot create hsr debugfs directory [ 410.936158][T14392] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.947001][T14392] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.954794][T14392] bridge_slave_0: entered allmulticast mode [ 410.962307][T14392] bridge_slave_0: entered promiscuous mode [ 410.970376][T14392] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.978167][T14392] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.985672][T14392] bridge_slave_1: entered allmulticast mode [ 410.993838][T14392] bridge_slave_1: entered promiscuous mode [ 411.077704][T14392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.103452][T14392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.178286][T14392] team0: Port device team_slave_0 added [ 411.199700][T14392] team0: Port device team_slave_1 added [ 411.258718][T14392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.266300][T14392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.293028][T14392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.307022][T14392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.314338][T14392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.341918][T14392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.395850][T14392] hsr_slave_0: entered promiscuous mode [ 411.402458][T14392] hsr_slave_1: entered promiscuous mode [ 411.408749][T14392] debugfs: 'hsr0' already exists in 'hsr' [ 411.415214][T14392] Cannot create hsr debugfs directory [ 411.450966][ T4936] Bluetooth: hci11: command tx timeout [ 411.453332][ T5627] Bluetooth: hci14: command tx timeout [ 412.490935][ T5627] Bluetooth: hci10: command tx timeout [ 412.651312][ T4936] Bluetooth: hci13: command tx timeout [ 412.651970][ T5627] Bluetooth: hci12: command tx timeout [ 413.530648][ T5627] Bluetooth: hci14: command tx timeout [ 413.531130][ T4936] Bluetooth: hci11: command tx timeout [ 414.571178][ T4936] Bluetooth: hci10: command tx timeout [ 414.730670][ T4936] Bluetooth: hci12: command tx timeout [ 414.732619][ T5627] Bluetooth: hci13: command tx timeout [ 415.610648][ T5627] Bluetooth: hci14: command tx timeout [ 415.611509][ T4936] Bluetooth: hci11: command tx timeout [ 416.811194][ T4936] Bluetooth: hci13: command tx timeout [ 416.812658][ T5627] Bluetooth: hci12: command tx timeout [ 417.690687][ T5627] Bluetooth: hci14: command tx timeout [ 434.252906][ T1745] block nbd0: Possible stuck request ffff888027550000: control (read@0,4096B). Runtime 180 seconds [ 435.964769][ T4986] udevd[4986]: worker [5620] /devices/virtual/block/nbd0 timeout; kill it [ 435.973521][ T4986] udevd[4986]: seq 17258 '/devices/virtual/block/nbd0' killed [ 440.013298][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.132750][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 450.251125][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 450.251431][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 460.491614][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 464.332823][ T1745] block nbd0: Possible stuck request ffff888027550000: control (read@0,4096B). Runtime 210 seconds [ 466.790204][ T4936] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 466.803557][ T4936] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 466.812919][ T4936] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 466.822652][ T4936] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 466.834642][ T4936] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 467.046929][T14428] lo speed is unknown, defaulting to 1000 [ 467.336444][T14428] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.344406][T14428] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.352151][T14428] bridge_slave_0: entered allmulticast mode [ 467.359302][T14428] bridge_slave_0: entered promiscuous mode [ 467.367298][T14428] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.374762][T14428] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.382203][T14428] bridge_slave_1: entered allmulticast mode [ 467.389173][T14428] bridge_slave_1: entered promiscuous mode [ 467.415729][T14428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.427917][T14428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.456228][T14428] team0: Port device team_slave_0 added [ 467.464717][T14428] team0: Port device team_slave_1 added [ 467.487269][T14428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.494543][T14428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.521089][T14428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.534665][T14428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.542257][T14428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.568572][T14428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.606213][T14428] hsr_slave_0: entered promiscuous mode [ 467.612871][T14428] hsr_slave_1: entered promiscuous mode [ 467.618867][T14428] debugfs: 'hsr0' already exists in 'hsr' [ 467.625259][T14428] Cannot create hsr debugfs directory [ 467.826385][ T4936] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 467.840821][ T4936] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 467.850015][ T4936] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 467.863696][ T4936] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 467.871445][ T4936] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 468.178305][T14446] lo speed is unknown, defaulting to 1000 [ 468.464809][T14446] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.472179][T14446] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.479347][T14446] bridge_slave_0: entered allmulticast mode [ 468.486860][T14446] bridge_slave_0: entered promiscuous mode [ 468.496851][T14446] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.504412][T14446] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.512021][T14446] bridge_slave_1: entered allmulticast mode [ 468.518924][T14446] bridge_slave_1: entered promiscuous mode [ 468.544968][T14446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.556624][T14446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.586248][T14446] team0: Port device team_slave_0 added [ 468.594291][T14446] team0: Port device team_slave_1 added [ 468.617299][T14446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.624749][T14446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.651477][T14446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.663569][T14446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.671201][T14446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.697543][T14446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.774688][T14446] hsr_slave_0: entered promiscuous mode [ 468.782146][T14446] hsr_slave_1: entered promiscuous mode [ 468.788538][T14446] debugfs: 'hsr0' already exists in 'hsr' [ 468.794890][T14446] Cannot create hsr debugfs directory [ 468.891438][ T5627] Bluetooth: hci15: command tx timeout [ 468.959750][ T4936] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 468.976329][ T4936] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 468.988113][ T4936] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 469.004509][ T4936] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 469.019670][ T4936] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 469.032667][ T5626] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 469.050867][ T5627] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 469.069096][ T4936] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 469.094483][ T4936] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 469.106425][ T4936] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 469.596196][T14467] lo speed is unknown, defaulting to 1000 [ 469.644829][T14465] lo speed is unknown, defaulting to 1000 [ 469.932843][ T5633] Bluetooth: hci16: command tx timeout [ 470.018823][ T4936] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 470.035460][ T4936] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 470.043681][ T4936] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 470.053369][ T4936] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 470.063949][ T4936] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 470.319429][T14467] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.341322][T14467] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.348609][T14467] bridge_slave_0: entered allmulticast mode [ 470.357576][T14467] bridge_slave_0: entered promiscuous mode [ 470.372862][T14467] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.380350][T14467] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.388591][T14467] bridge_slave_1: entered allmulticast mode [ 470.397211][T14467] bridge_slave_1: entered promiscuous mode [ 470.471492][T14467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.486683][T14467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.548737][T14467] team0: Port device team_slave_0 added [ 470.559287][T14467] team0: Port device team_slave_1 added [ 470.614063][T14467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.621433][T14467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.648488][T14467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.669890][T14467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.677251][T14467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.704102][T14467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.761083][T14489] lo speed is unknown, defaulting to 1000 [ 470.864228][T14467] hsr_slave_0: entered promiscuous mode [ 470.871993][T14467] hsr_slave_1: entered promiscuous mode [ 470.878456][T14467] debugfs: 'hsr0' already exists in 'hsr' [ 470.887311][T14467] Cannot create hsr debugfs directory [ 470.898544][T14465] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.907235][T14465] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.915388][T14465] bridge_slave_0: entered allmulticast mode [ 470.924193][T14465] bridge_slave_0: entered promiscuous mode [ 470.952842][T14465] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.960916][T14465] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.968155][T14465] bridge_slave_1: entered allmulticast mode [ 470.974230][ T49] Bluetooth: hci15: command tx timeout [ 470.982031][T14465] bridge_slave_1: entered promiscuous mode [ 471.055324][T14465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.076304][T14465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.130746][ T49] Bluetooth: hci17: command tx timeout [ 471.145176][T14465] team0: Port device team_slave_0 added [ 471.164773][T14465] team0: Port device team_slave_1 added [ 471.209664][T14465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.216856][ T49] Bluetooth: hci18: command tx timeout [ 471.223381][T14465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.249737][T14465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.276752][T14465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.284952][T14465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.312502][T14465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.425314][T14465] hsr_slave_0: entered promiscuous mode [ 471.432230][T14465] hsr_slave_1: entered promiscuous mode [ 471.438572][T14465] debugfs: 'hsr0' already exists in 'hsr' [ 471.444555][T14465] Cannot create hsr debugfs directory [ 471.647251][T14489] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.654716][T14489] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.662479][T14489] bridge_slave_0: entered allmulticast mode [ 471.669456][T14489] bridge_slave_0: entered promiscuous mode [ 471.678203][T14489] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.685503][T14489] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.692961][T14489] bridge_slave_1: entered allmulticast mode [ 471.699905][T14489] bridge_slave_1: entered promiscuous mode [ 471.749476][T14489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.762748][T14489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.796919][T14489] team0: Port device team_slave_0 added [ 471.809757][T14489] team0: Port device team_slave_1 added [ 471.855866][T14489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.863993][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.891268][T14489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.904249][T14489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.911710][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.938992][T14489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.988724][T14489] hsr_slave_0: entered promiscuous mode [ 471.996517][T14489] hsr_slave_1: entered promiscuous mode [ 472.003233][T14489] debugfs: 'hsr0' already exists in 'hsr' [ 472.008995][T14489] Cannot create hsr debugfs directory [ 472.021208][ T49] Bluetooth: hci16: command tx timeout [ 472.171919][ T49] Bluetooth: hci19: command tx timeout [ 472.821323][ T49] Bluetooth: hci6: command 0x0406 tx timeout [ 472.834364][ T49] Bluetooth: hci7: command 0x0406 tx timeout [ 472.834567][T14507] Bluetooth: hci8: command 0x0406 tx timeout [ 472.842936][ T49] Bluetooth: hci5: command 0x0406 tx timeout [ 472.847628][T14507] Bluetooth: hci9: command 0x0406 tx timeout [ 473.050872][ T5626] Bluetooth: hci15: command tx timeout [ 473.210660][ T5626] Bluetooth: hci17: command tx timeout [ 473.290940][ T5626] Bluetooth: hci18: command tx timeout [ 474.090730][ T5626] Bluetooth: hci16: command tx timeout [ 474.250947][ T5626] Bluetooth: hci19: command tx timeout [ 475.130875][ T5626] Bluetooth: hci15: command tx timeout [ 475.290770][ T5626] Bluetooth: hci17: command tx timeout [ 475.371231][ T5626] Bluetooth: hci18: command tx timeout [ 476.170826][ T5626] Bluetooth: hci16: command tx timeout [ 476.331023][ T5626] Bluetooth: hci19: command tx timeout [ 476.491751][ T30] INFO: task syz.0.2135:14179 blocked for more than 143 seconds. [ 476.499625][ T30] Not tainted syzkaller #0 [ 476.505233][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 476.514356][ T30] task:syz.0.2135 state:D stack:26376 pid:14179 tgid:14175 ppid:5617 task_flags:0x480140 flags:0x00080002 [ 476.526761][ T30] Call Trace: [ 476.530053][ T30] [ 476.533741][ T30] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 476.538309][ T30] ? __lock_acquire+0x683/0x2cf0 [ 476.544353][ T30] ? __pfx___schedule+0x10/0x10 [ 476.549295][ T30] ? schedule+0x90/0x2b0 [ 476.553820][ T30] schedule+0x164/0x2b0 [ 476.558293][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 476.564829][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 476.574311][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 476.594378][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 476.620773][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 476.629188][ T30] nbd_set_size+0x454/0x680 [ 476.634667][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 476.639774][ T30] ? nla_memcpy+0x5b/0xc0 [ 476.644645][ T30] nbd_genl_reconfigure+0x7e9/0x1e80 [ 476.650005][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 476.658550][ T30] ? rcu_is_watching+0x15/0xb0 [ 476.663846][ T30] ? trace_kmalloc+0x2a/0xf0 [ 476.668749][ T30] ? __kmalloc_noprof+0x396/0x720 [ 476.673972][ T30] ? __nla_parse+0x40/0x60 [ 476.678436][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 476.684833][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 476.691300][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 476.696868][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 476.703159][ T30] ? __lock_acquire+0x683/0x2cf0 [ 476.708123][ T30] genl_rcv_msg+0x614/0x7a0 [ 476.713011][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 476.718074][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 476.723868][ T30] netlink_rcv_skb+0x226/0x4a0 [ 476.728677][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 476.734208][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 476.739522][ T30] ? down_read+0x2be/0x330 [ 476.744470][ T30] genl_rcv+0x28/0x40 [ 476.748472][ T30] netlink_unicast+0x7bb/0x940 [ 476.753909][ T30] netlink_sendmsg+0x813/0xb40 [ 476.758705][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.764579][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 476.769555][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.775430][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 476.781071][ T30] ____sys_sendmsg+0x54e/0x850 [ 476.785870][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.791669][ T30] ? import_iovec+0x73/0xa0 [ 476.796198][ T30] ___sys_sendmsg+0x2a5/0x360 [ 476.801361][ T30] ? __lock_acquire+0x683/0x2cf0 [ 476.806321][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.812074][ T30] ? futex_wake+0x51b/0x5f0 [ 476.816616][ T30] ? __fget_files+0x2a/0x420 [ 476.821865][ T30] ? __fget_files+0x3a2/0x420 [ 476.826679][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 476.832064][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.837544][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.844170][ T30] do_syscall_64+0x174/0x580 [ 476.848779][ T30] ? trace_irq_disable+0x3b/0x140 [ 476.854289][ T30] ? clear_bhb_loop+0x40/0x90 [ 476.859000][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.865390][ T30] RIP: 0033:0x7f483cf9de99 [ 476.869803][ T30] RSP: 002b:00007f483ddae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.878811][ T30] RAX: ffffffffffffffda RBX: 00007f483d226090 RCX: 00007f483cf9de99 [ 476.887236][ T30] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 0000000000000009 [ 476.895982][ T30] RBP: 00007f483d033eaf R08: 0000000000000000 R09: 0000000000000000 [ 476.904562][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.913203][ T30] R13: 00007f483d226128 R14: 00007f483d226090 R15: 00007fff596bd9e8 [ 476.921682][ T30] [ 476.924718][ T30] INFO: task syz.0.2135:14183 blocked for more than 143 seconds. [ 476.933040][ T30] Not tainted syzkaller #0 [ 476.938014][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 476.947264][ T30] task:syz.0.2135 state:D stack:28808 pid:14183 tgid:14175 ppid:5617 task_flags:0x400040 flags:0x00080002 [ 476.959618][ T30] Call Trace: [ 476.963334][ T30] [ 476.966263][ T30] __schedule+0x17d9/0x56c0 [ 476.971424][ T30] ? __lock_acquire+0x683/0x2cf0 [ 476.976403][ T30] ? __lock_acquire+0x683/0x2cf0 [ 476.982015][ T30] ? unwind_next_frame+0x8f/0x2550 [ 476.987195][ T30] ? __pfx___schedule+0x10/0x10 [ 476.992377][ T30] ? schedule+0x90/0x2b0 [ 476.996643][ T30] schedule+0x164/0x2b0 [ 477.000855][ T30] schedule_preempt_disabled+0x13/0x30 [ 477.006326][ T30] __mutex_lock+0x7bf/0x1550 [ 477.010999][ T30] ? __mutex_lock+0x5d4/0x1550 [ 477.015773][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 477.021083][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 477.026159][ T30] ? stack_trace_save+0xa9/0x100 [ 477.031539][ T30] ? __lock_acquire+0x683/0x2cf0 [ 477.036481][ T30] ? radix_tree_lookup+0x240/0x290 [ 477.042133][ T30] genl_rcv_msg+0x10b/0x7a0 [ 477.046666][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.052283][ T30] ? __lock_acquire+0x683/0x2cf0 [ 477.057259][ T30] netlink_rcv_skb+0x226/0x4a0 [ 477.062461][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.067496][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 477.073263][ T30] ? down_read+0x2be/0x330 [ 477.077683][ T30] genl_rcv+0x28/0x40 [ 477.082139][ T30] netlink_unicast+0x7bb/0x940 [ 477.086906][ T30] netlink_sendmsg+0x813/0xb40 [ 477.092261][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.097573][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 477.103002][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.108295][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 477.113832][ T30] __sys_sendto+0x408/0x5a0 [ 477.118347][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 477.123865][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 477.129168][ T30] __x64_sys_sendto+0xde/0x100 [ 477.134660][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.141368][ T30] do_syscall_64+0x174/0x580 [ 477.146015][ T30] ? trace_irq_disable+0x3b/0x140 [ 477.151723][ T30] ? clear_bhb_loop+0x40/0x90 [ 477.156469][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.162803][ T30] RIP: 0033:0x7f483cf5e6ce [ 477.167220][ T30] RSP: 002b:00007f483adf2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 477.176133][ T30] RAX: ffffffffffffffda RBX: 00007f483adf46c0 RCX: 00007f483cf5e6ce [ 477.184546][ T30] RDX: 0000000000000024 RSI: 00007f483adf3000 RDI: 0000000000000008 [ 477.192957][ T30] RBP: 0000000000000000 R08: 00007f483adf2f04 R09: 000000000000000c [ 477.201449][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 477.209439][ T30] R13: 00007f483adf2f58 R14: 00007f483adf3000 R15: 0000000000000000 [ 477.218089][ T30] [ 477.221744][ T30] INFO: task syz.3.2140:14193 blocked for more than 144 seconds. [ 477.229465][ T30] Not tainted syzkaller #0 [ 477.234963][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 477.244106][ T30] task:syz.3.2140 state:D stack:27872 pid:14193 tgid:14190 ppid:5619 task_flags:0x400040 flags:0x00080002 [ 477.256484][ T30] Call Trace: [ 477.259763][ T30] [ 477.263239][ T30] __schedule+0x17d9/0x56c0 [ 477.267782][ T30] ? __lock_acquire+0x683/0x2cf0 [ 477.273267][ T30] ? __lock_acquire+0x683/0x2cf0 [ 477.278248][ T30] ? __pfx___schedule+0x10/0x10 [ 477.283356][ T30] ? schedule+0x90/0x2b0 [ 477.287623][ T30] schedule+0x164/0x2b0 [ 477.291889][ T30] schedule_preempt_disabled+0x13/0x30 [ 477.297358][ T30] __mutex_lock+0x7bf/0x1550 [ 477.302037][ T30] ? __mutex_lock+0x5d4/0x1550 [ 477.306817][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 477.311978][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 477.317085][ T30] ? __dev_queue_xmit+0x29b/0x3820 [ 477.322733][ T30] ? radix_tree_lookup+0x240/0x290 [ 477.327853][ T30] genl_rcv_msg+0x10b/0x7a0 [ 477.332813][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.337844][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 477.343741][ T30] netlink_rcv_skb+0x226/0x4a0 [ 477.348545][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.354122][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 477.359458][ T30] ? down_read+0x2be/0x330 [ 477.364367][ T30] genl_rcv+0x28/0x40 [ 477.368357][ T30] netlink_unicast+0x7bb/0x940 [ 477.375373][ T30] netlink_sendmsg+0x813/0xb40 [ 477.380782][ T5626] Bluetooth: hci17: command tx timeout [ 477.383835][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.391889][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 477.396867][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.402724][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 477.407781][ T30] __sys_sendto+0x408/0x5a0 [ 477.412687][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 477.417725][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 477.423544][ T30] __x64_sys_sendto+0xde/0x100 [ 477.428329][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.434881][ T30] do_syscall_64+0x174/0x580 [ 477.439472][ T30] ? trace_irq_disable+0x3b/0x140 [ 477.445055][ T30] ? clear_bhb_loop+0x40/0x90 [ 477.449752][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.456526][ T30] RIP: 0033:0x7f139675e6ce [ 477.461487][ T5626] Bluetooth: hci18: command tx timeout [ 477.467345][ T30] RSP: 002b:00007f13976aee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 477.476364][ T30] RAX: ffffffffffffffda RBX: 00007f13976b06c0 RCX: 00007f139675e6ce [ 477.484879][ T30] RDX: 000000000000001c RSI: 00007f13976af000 RDI: 0000000000000003 [ 477.493313][ T30] RBP: 0000000000000000 R08: 00007f13976aef04 R09: 000000000000000c [ 477.501761][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 477.509757][ T30] R13: 00007f13976aef58 R14: 00007f13976af000 R15: 0000000000000000 [ 477.518211][ T30] [ 477.521788][ T30] INFO: task syz.1.2145:14210 blocked for more than 144 seconds. [ 477.529510][ T30] Not tainted syzkaller #0 [ 477.544046][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 477.553280][ T30] task:syz.1.2145 state:D stack:27312 pid:14210 tgid:14208 ppid:5621 task_flags:0x400140 flags:0x00080002 [ 477.565520][ T30] Call Trace: [ 477.568790][ T30] [ 477.572016][ T30] __schedule+0x17d9/0x56c0 [ 477.576594][ T30] ? __lock_acquire+0x683/0x2cf0 [ 477.581599][ T30] ? __lock_acquire+0x683/0x2cf0 [ 477.586559][ T30] ? __pfx___schedule+0x10/0x10 [ 477.591549][ T30] ? schedule+0x90/0x2b0 [ 477.595833][ T30] schedule+0x164/0x2b0 [ 477.599983][ T30] schedule_preempt_disabled+0x13/0x30 [ 477.605918][ T30] __mutex_lock+0x7bf/0x1550 [ 477.611163][ T30] ? __mutex_lock+0x5d4/0x1550 [ 477.615970][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 477.621050][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 477.626079][ T30] ? __dev_queue_xmit+0x29b/0x3820 [ 477.631794][ T30] ? radix_tree_lookup+0x240/0x290 [ 477.636935][ T30] genl_rcv_msg+0x10b/0x7a0 [ 477.642097][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.647158][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 477.653014][ T30] netlink_rcv_skb+0x226/0x4a0 [ 477.657785][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.663305][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 477.668599][ T30] ? down_read+0x2be/0x330 [ 477.673529][ T30] genl_rcv+0x28/0x40 [ 477.677520][ T30] netlink_unicast+0x7bb/0x940 [ 477.682839][ T30] netlink_sendmsg+0x813/0xb40 [ 477.687623][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.693814][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 477.698787][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.704534][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 477.709586][ T30] __sys_sendto+0x408/0x5a0 [ 477.714557][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 477.719597][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 477.725362][ T30] __x64_sys_sendto+0xde/0x100 [ 477.730130][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.736689][ T30] do_syscall_64+0x174/0x580 [ 477.741747][ T30] ? trace_irq_disable+0x3b/0x140 [ 477.746789][ T30] ? clear_bhb_loop+0x40/0x90 [ 477.752006][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.757946][ T30] RIP: 0033:0x7fae6935e6ce [ 477.762934][ T30] RSP: 002b:00007fae6a2eee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 477.772092][ T30] RAX: ffffffffffffffda RBX: 00007fae6a2f06c0 RCX: 00007fae6935e6ce [ 477.780139][ T30] RDX: 0000000000000020 RSI: 00007fae6a2ef000 RDI: 0000000000000008 [ 477.788579][ T30] RBP: 0000000000000000 R08: 00007fae6a2eef04 R09: 000000000000000c [ 477.797064][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 477.805481][ T30] R13: 00007fae6a2eef58 R14: 00007fae6a2ef000 R15: 0000000000000000 [ 477.813957][ T30] [ 477.817005][ T30] INFO: task syz.4.2148:14222 blocked for more than 144 seconds. [ 477.825211][ T30] Not tainted syzkaller #0 [ 477.830141][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 477.839279][ T30] task:syz.4.2148 state:D stack:27536 pid:14222 tgid:14217 ppid:5618 task_flags:0x400140 flags:0x00080002 [ 477.851991][ T30] Call Trace: [ 477.855292][ T30] [ 477.858214][ T30] __schedule+0x17d9/0x56c0 [ 477.863313][ T30] ? __lock_acquire+0x683/0x2cf0 [ 477.868274][ T30] ? __lock_acquire+0x683/0x2cf0 [ 477.873434][ T30] ? unwind_next_frame+0x8f/0x2550 [ 477.878563][ T30] ? __pfx___schedule+0x10/0x10 [ 477.883497][ T30] ? schedule+0x90/0x2b0 [ 477.887760][ T30] schedule+0x164/0x2b0 [ 477.892006][ T30] schedule_preempt_disabled+0x13/0x30 [ 477.897488][ T30] __mutex_lock+0x7bf/0x1550 [ 477.902596][ T30] ? __mutex_lock+0x5d4/0x1550 [ 477.907385][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 477.912548][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 477.917574][ T30] ? stack_trace_save+0xa9/0x100 [ 477.923026][ T30] ? __lock_acquire+0x683/0x2cf0 [ 477.927986][ T30] ? radix_tree_lookup+0x240/0x290 [ 477.933713][ T30] genl_rcv_msg+0x10b/0x7a0 [ 477.938282][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.943773][ T30] ? __lock_acquire+0x683/0x2cf0 [ 477.948730][ T30] netlink_rcv_skb+0x226/0x4a0 [ 477.954039][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.959090][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 477.964876][ T30] ? down_read+0x2be/0x330 [ 477.969306][ T30] genl_rcv+0x28/0x40 [ 477.973820][ T30] netlink_unicast+0x7bb/0x940 [ 477.978621][ T30] netlink_sendmsg+0x813/0xb40 [ 477.983871][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.989163][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 477.994567][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.999855][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 478.005367][ T30] __sys_sendto+0x408/0x5a0 [ 478.011119][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 478.016219][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 478.022098][ T30] __x64_sys_sendto+0xde/0x100 [ 478.026883][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.033417][ T30] do_syscall_64+0x174/0x580 [ 478.038034][ T30] ? trace_irq_disable+0x3b/0x140 [ 478.043527][ T30] ? clear_bhb_loop+0x40/0x90 [ 478.048207][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.054649][ T30] RIP: 0033:0x7f9e0235e6ce [ 478.059084][ T30] RSP: 002b:00007f9dffdf0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 478.068007][ T30] RAX: ffffffffffffffda RBX: 00007f9dffdf26c0 RCX: 00007f9e0235e6ce [ 478.076438][ T30] RDX: 0000000000000024 RSI: 00007f9dffdf1000 RDI: 0000000000000000 [ 478.084976][ T30] RBP: 0000000000000000 R08: 00007f9dffdf0f04 R09: 000000000000000c [ 478.093453][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.102000][ T30] R13: 00007f9dffdf0f58 R14: 00007f9dffdf1000 R15: 0000000000000000 [ 478.109991][ T30] [ 478.113549][ T30] [ 478.113549][ T30] Showing all locks held in the system: [ 478.121835][ T30] 1 lock held by khungtaskd/30: [ 478.126698][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 478.137211][ T30] 1 lock held by klogd/4975: [ 478.142268][ T30] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 478.152878][ T30] 2 locks held by getty/5369: [ 478.157584][ T30] #0: ffff8880365f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 478.167701][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 478.177997][ T30] 1 lock held by udevd/5620: [ 478.182667][ T30] #0: ffff888027446350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 478.192468][ T30] 6 locks held by syz.0.2135/14179: [ 478.197682][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.206352][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.215747][ T30] #2: ffff888027473260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 478.226513][ T30] #3: ffff88802750c7c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 478.236450][ T30] #4: ffff88802750c190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 478.248941][ T30] #5: ffff88802750c1c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 478.261774][ T30] 2 locks held by syz.0.2135/14183: [ 478.266982][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.275740][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.285285][ T30] 2 locks held by syz.3.2140/14193: [ 478.290887][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.299071][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.308642][ T30] 2 locks held by syz.1.2145/14210: [ 478.314331][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.322924][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.332330][ T30] 2 locks held by syz.4.2148/14222: [ 478.337516][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.346232][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.355700][ T30] 2 locks held by syz.2.2152/14234: [ 478.361362][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.369590][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.379071][ T30] 2 locks held by syz-executor/14238: [ 478.384882][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.393487][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.403015][ T30] 2 locks held by syz-executor/14256: [ 478.408395][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.419456][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.428747][ T5626] Bluetooth: hci19: command tx timeout [ 478.434758][ T30] 2 locks held by syz-executor/14275: [ 478.440130][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.448377][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.457499][ T30] 2 locks held by syz-executor/14277: [ 478.463269][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.471759][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.480944][ T30] 2 locks held by syz-executor/14302: [ 478.486339][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.495367][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.504901][ T30] 2 locks held by syz-executor/14333: [ 478.511188][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.519440][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.529075][ T30] 2 locks held by syz-executor/14351: [ 478.534940][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.543422][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.552859][ T30] 2 locks held by syz-executor/14370: [ 478.558219][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.567679][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.577513][ T30] 2 locks held by syz-executor/14372: [ 478.583632][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.592108][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.601264][ T30] 2 locks held by syz-executor/14392: [ 478.606661][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.614941][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.624548][ T30] 2 locks held by syz-executor/14428: [ 478.629943][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.638274][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.647409][ T30] 2 locks held by syz-executor/14446: [ 478.653140][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.661445][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.670562][ T30] 2 locks held by syz-executor/14465: [ 478.675938][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.684158][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.693527][ T30] 2 locks held by syz-executor/14467: [ 478.698926][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.707202][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.716262][ T30] 2 locks held by syz-executor/14489: [ 478.721717][ T30] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 478.729921][ T30] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 478.739663][ T30] [ 478.742176][ T30] ============================================= [ 478.742176][ T30] [ 478.750709][ T30] NMI backtrace for cpu 1 [ 478.750732][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 478.750753][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 478.750764][ T30] Call Trace: [ 478.750771][ T30] [ 478.750778][ T30] dump_stack_lvl+0xe8/0x150 [ 478.750810][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 478.750831][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 478.750860][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 478.750882][ T30] sys_info+0x135/0x170 [ 478.750908][ T30] watchdog+0xfd7/0x1030 [ 478.750939][ T30] ? watchdog+0x1c7/0x1030 [ 478.750968][ T30] kthread+0x388/0x470 [ 478.750995][ T30] ? __pfx_watchdog+0x10/0x10 [ 478.751013][ T30] ? __pfx_kthread+0x10/0x10 [ 478.751038][ T30] ret_from_fork+0x514/0xb70 [ 478.751066][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 478.751091][ T30] ? __switch_to+0xc89/0x1420 [ 478.751116][ T30] ? __pfx_kthread+0x10/0x10 [ 478.751135][ T30] ret_from_fork_asm+0x1a/0x30 [ 478.751152][ T30] [ 478.751156][ T30] Sending NMI from CPU 1 to CPUs 0: [ 478.861123][ C0] NMI backtrace for cpu 0 [ 478.861141][ C0] CPU: 0 UID: 0 PID: 9942 Comm: ipvs-e:3:0 Not tainted syzkaller #0 PREEMPT(full) [ 478.861161][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 478.861172][ C0] RIP: 0010:rcu_read_lock_any_held+0x43/0x90 [ 478.861197][ C0] Code: e8 32 38 01 00 84 c0 74 44 48 c7 c7 60 9c b5 8e be ff ff ff ff e8 fd 2b 26 0a 85 c0 75 2a 48 c7 c7 c0 9c b5 8e be ff ff ff ff e8 2b 26 0a 85 c0 75 15 48 c7 c7 20 9d b5 8e be ff ff ff ff e8 [ 478.861213][ C0] RSP: 0018:ffffc9000455f6d8 EFLAGS: 00000046 [ 478.861228][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080000002 [ 478.861239][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8eb59cc0 [ 478.861251][ C0] RBP: dffffc0000000000 R08: ffffffff9057904f R09: 1ffffffff20af209 [ 478.861264][ C0] R10: dffffc0000000000 R11: fffffbfff20af20a R12: ffff8880b863bfe0 [ 478.861277][ C0] R13: ffff8880b863bcb0 R14: ffff8880b863b100 R15: ffffc9000455f9c8 [ 478.861290][ C0] FS: 0000000000000000(0000) GS:ffff888124f53000(0000) knlGS:0000000000000000 [ 478.861304][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.861316][ C0] CR2: 000055b278ae7ee8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 478.861332][ C0] Call Trace: [ 478.861338][ C0] [ 478.861346][ C0] pick_task_fair+0x3f3/0x1320 [ 478.861383][ C0] __pick_next_task+0xdb/0x3c0 [ 478.861404][ C0] __schedule+0x901/0x56c0 [ 478.861423][ C0] ? __lock_acquire+0x683/0x2cf0 [ 478.861459][ C0] ? __pfx___schedule+0x10/0x10 [ 478.861481][ C0] ? schedule+0x90/0x2b0 [ 478.861501][ C0] schedule+0x164/0x2b0 [ 478.861519][ C0] schedule_timeout+0x152/0x2c0 [ 478.861536][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 478.861552][ C0] ? __pfx_process_timeout+0x10/0x10 [ 478.861582][ C0] ip_vs_estimation_kthread+0x29a6/0x38f0 [ 478.861607][ C0] ? ip_vs_estimation_kthread+0x27f1/0x38f0 [ 478.861647][ C0] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 478.861679][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 478.861698][ C0] ? __kthread_parkme+0x71/0x1f0 [ 478.861721][ C0] ? __kthread_parkme+0x196/0x1f0 [ 478.861745][ C0] kthread+0x388/0x470 [ 478.861769][ C0] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 478.861793][ C0] ? __pfx_kthread+0x10/0x10 [ 478.861818][ C0] ret_from_fork+0x514/0xb70 [ 478.861845][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 478.861869][ C0] ? __switch_to+0xc89/0x1420 [ 478.861892][ C0] ? __pfx_kthread+0x10/0x10 [ 478.861916][ C0] ret_from_fork_asm+0x1a/0x30 [ 478.861941][ C0] [ 479.111567][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 479.118454][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 479.127554][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 479.137605][ T30] Call Trace: [ 479.140881][ T30] [ 479.143817][ T30] vpanic+0x56c/0xa60 [ 479.147794][ T30] ? __pfx___schedule+0x10/0x10 [ 479.152639][ T30] ? __pfx_vpanic+0x10/0x10 [ 479.157166][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 479.163316][ T30] panic+0xc5/0xd0 [ 479.167030][ T30] ? __pfx_panic+0x10/0x10 [ 479.171440][ T30] ? preempt_schedule_common+0x82/0xd0 [ 479.176933][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 479.182319][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 479.188479][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 479.194631][ T30] watchdog+0x1030/0x1030 [ 479.199003][ T30] ? watchdog+0x1c7/0x1030 [ 479.203420][ T30] kthread+0x388/0x470 [ 479.207499][ T30] ? __pfx_watchdog+0x10/0x10 [ 479.212167][ T30] ? __pfx_kthread+0x10/0x10 [ 479.216756][ T30] ret_from_fork+0x514/0xb70 [ 479.221345][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 479.226456][ T30] ? __switch_to+0xc89/0x1420 [ 479.231133][ T30] ? __pfx_kthread+0x10/0x10 [ 479.235724][ T30] ret_from_fork_asm+0x1a/0x30 [ 479.240497][ T30] [ 479.243676][ T30] Kernel Offset: disabled [ 479.247992][ T30] Rebooting in 86400 seconds..