last executing test programs: 19.354046876s ago: executing program 4 (id=1843): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000500)=0x809, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000009000)=r0, 0x4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) r3 = socket(0x18, 0x5, 0x1) getsockopt$sock_cred(r3, 0x1, 0x4c, 0x0, &(0x7f0000cab000)=0x1f) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000000c0)={0x0, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x6a}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}]}, 0x18) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000500)=0x809, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000009000)=r0, 0x4) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) (async) socket(0x18, 0x5, 0x1) (async) getsockopt$sock_cred(r3, 0x1, 0x4c, 0x0, &(0x7f0000cab000)=0x1f) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000000), 0x4) (async) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000000c0)={0x0, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x6a}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}]}, 0x18) (async) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) 19.159807982s ago: executing program 4 (id=1847): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x6a, [0x9, 0x2]}, 0x10) sendmmsg$inet6(r0, &(0x7f0000002a00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x101, @remote, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="2c2520a0ad3ecd1f78dcb037bd508f5cdeaa2328c5880bbca18f6be5ce", 0x1d}, {&(0x7f00000001c0)="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", 0x1000}], 0x2, &(0x7f0000002b00)=ANY=[@ANYBLOB="14000000001b0000296ff06d498421c3078519628f5030dc9d597e3a30d21b15b4716fb83fa4ab5a2ede38aa8896e12ea88ccd122fe7692e7768360c868b786dc9254365787074898a507e3e4bd556eca55be5cc46caf862b645b82c92de0c34cd1b8c0e8d39f3c034669a08395b3243b62f961d551b22bec24b8d6faf2812538a363b83a535782db4a9c0428152031143fbe0e0cf65903cadb4593599fa29784e8d7e13"], 0x18}}, {{&(0x7f00000011c0)={0xa, 0x4e23, 0x10, @loopback, 0x1}, 0x1c, &(0x7f0000001200), 0x0, &(0x7f0000002bc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x33, 0x0, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xaab7}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2b, 0x6, 0x2, 0x3, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x21}]}}}], 0x98}}, {{&(0x7f0000001300)={0xa, 0x4e21, 0x400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x84b3}, 0x1c, &(0x7f0000001340), 0x0, &(0x7f0000001380)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdrdstopts={{0x108, 0x29, 0x37, {0x3c, 0x1d, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x39}}, @generic={0x1, 0x8a, "3b280a225df446ab01ec7c701ff382185e802e0fa155b3f7f03f7eb7c8c477e0a2026568908f4bf796106e1c7899d5b49ff4d57350ec07bc2fe2f20ba95234ba72dc16c6a97f3fed630bd32c6c909537aea2f4416251c1d2fc2cc32d7bd6d01b8bbdfba327683360420bbe87d2980c48aafe832528e222c02bda452adface23f150918f514c0c887df33"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @pad1, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x12}}, @hao={0xc9, 0x10, @loopback}]}}}], 0x120}}, {{&(0x7f00000014c0)={0xa, 0x4e22, 0xfc1, @local, 0x100}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000001500)="6756edb259ff7045b577af7794ca47dcd19ee9fb2c101b7009f7634107284ef28a2a4d2ab5161522cb2be707c11c3978c524d0f09fcefcd29633ab138049d1e10fc8cc363165f9ba80eca6c0d2d1861cce9476e52373dda738e2adf4eaca7c111bf65358744e4e6af98ff151147c5a2da729904bf83068206fce6ffd4a95d12984597629ec53377d699c9a957348867de583023a6f6d6380c91ad73f3074ea089a23cc19770f5753fbcf90e7013a216d59fd8088e02d6722b28b84fd396e52748a24c4eeba3d212bf9a675a25fe75c5bc38f", 0xd2}, {&(0x7f0000001600)="89155020d498a805c2b544eff52b166a0c8f5033a79a5f3a448a1afa238bc2fb8429286c840bcf3bcfaf0817", 0x2c}, {&(0x7f0000001640)="3e029f0c520e756cd923624dbea4b7bc5488d6559a85988ab10666ea0daa13d642d2a91db9390b1c2b105758a09f668a281c5e7a339fd8ecf978ff44c7e94c", 0x3f}, {&(0x7f0000001200)="a9ee5d2606207dfae93684d0c2590bbb0b0eb749a28c06ec5a23cbff8466971cf3ef81e27350691b8543ace013766be894ad3ab9e5a7098b470c79e985377643f406ea2c50f540ed17c81e1bd83c8f10a1736dd57697f0012b6e69af348adedf6b000484bc770993e0ec890f35e6c69f0a1b55698541c60f05d803454b68c7ce80ec04fb0bb7b061a618660363f54de34d6fd2f383cd5c441455ede5a627099366881d93794bd1b847a04921858ec5bf0a462106b1ca07f7c7f96e4bf3b4090e8a1242f477015bd0a564c764b8214cf205fe1ca3243b7ddd70781ff9", 0xdc}], 0x4, &(0x7f0000002c80)=[@dstopts_2292={{0x1060, 0x29, 0x4, {0x2b, 0x208, '\x00', [@hao={0xc9, 0x10, @mcast1}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x7fff}, @generic={0x6, 0x1000, "802f27e68856419135fa3ae8d3a2d85822e5a91645d880c03f9d7b43a1532ddc57fe1570ae7e2bd60ea577c12a1d38f50b46e3b151f7759471af489b81efb8a570689c60ba9d7c04d57c12c87faf2cb2cc12046e1cdd77e7e247c627f76f5699072fb1207db5a0b80eba48b4e02b7afcc7bfde37cbd104caaa3894d8ae3314c9ec58c751ac21ca78a2e2a695d4c9f0311abf10b7d366afb6b86608dc6bf9cb5db3066b36c07fa9510a8f4436aa81fa8fb4fad6584957f8b4cd1a9654a073e560594f347004aece39f7e470379eac90fbcab4ce849574a85bf1fa0090cee2335dcaee45319a29171659ae58cda6e76f7ec10dd83e0524e7c5669cb8d7205b084300b6860bf328401889cc39c9b15e9774adf1381f4ac95e69e027846535fd58ef6e45b1d4fe4c9a9df9b762a01492f3fbd92995491cc2ff75a8efb4408e614e9deec5c7d05812ca471b8d7edc1266132c8318a07e0eae884681e698081cd7237b01360b93606df1f3410feff0b743688702279f7f8f9a067ba8edb7924ab155fe553ee8cb8a024e6d6744cd072134b0f94cee9337be0fa193937922d70abfd18a55e7d988c62bb9aa86484e0a178c67255a348f4b6428a25cdd8f8c7ea5fdf685b378e990966a82f15a43bdf53cfccfa8f0fc5961fa1affef0d908c75f954f17ff0f6ca399024c5db038b5a3ad559fc2d8156b141b6c451849b647e949d56ef8715044d1641a53139d4db0991fb82a8c7e7b773db94ca7edb9e2157ebd01849a41fc1c77bf1f3e717a3ec44b0758c55f88fd4cfd9f05cc7cd3cd2a35c1813d6bbe426cf971fde63c4c629225defd2f1bf6e8209787ba653b9af4656e04777f8945cabff28d45040bd41bccf6babf4304560aa4d516ce12d3091bd539044e420bf8618984dfebb7015201fafe2af82a7604539f03ac20097bf1db0df4ef7dada2162e84f4dd53b147610a542a18636729e9d5956f5653e129bf24c6f46796d266e540c540d0104e0b11725446ca91ff9bd4492afb4629b352d2aee1c6b2850c5bb01b74e0682c592a1d1b325603fea860c3f01ad9e9f3fdb7e420b68c534a0b6b033ed8d71c05f165c13e09b281697e6a482eb5d966d3959fe546a30a905e0e302161b28788a630375bf0e58f59760131358ee455df09a4fd811a37c1292a8ea20e7d5066a020873207c95a04a43879298c9bd64d5bc06a3c9617e0143b8f715f176f58efda0bcbfdd85e80f073fdeeba58595ca49f232b920e5c621046903e49e8a117f4b9d067e27e7f45e672337e0f9e91c62b50ffd301804d5603d43fe1f96260c09484c8c47b34d9b8df1b50a075d3902675efc5d81955da9ae5e78a9b273d5a8edb762573254abe13d2789e2f52896f38ce4a70780889ecfb78e1efe1d4ffc2d5d3ab7b0099c71f8f63ea0d94a12aa94ef0d152359251bf38a2f201175dbf3188a74c959ea61c690157f529bc611e4c338f19a62bcf3eca05e40260c1c9a1c6b7cf400f02bb44212606da5d489d3ff707c2392895210054b84524a89df03092328d582b57552646bde516b8fd66b769816bc2f548d0f85fb2a3da0330fa89d16d3a67bed4077a56a10fcc561befca9e9d122c71e975dfedcd4df2088820b664d10bc3dd94a5d0d29769791befc73735aeb70a865d4bafa8b50767bf9f3c520b8b3819372c2f7422733501034be8e192f8485efa046f6f9a37cd468ad9e6308382b3bae3c1bc3512c155953a8ef121e22f959989087c311fe72810caaa17b402f418a9f181ca1a84db16711c65f6289ec67203a4f70274c5147ed187afaacfbf9e2c44829996acb5d94116692af12354a0defb3dcf5dcae36d68fed78091b1d39d03af67b13d319300d085f1fca602ccc20de90351d56a25e7d89be6b908a8b4d76ffe8242a23c42bacc43dd0951f05b7c2c8155d33b75dcd3112f2223f0a58030ad71c45b1a1f0202440d486d79194fbac41e0d5ec94e2d61416dda963d518d2615b85ca94576c57d26c40339bdbfaacab00568cb25c01893c09407bdee3497ac5ed781c8551509ad594fe0d92bc82848e7087373c2376436aeb4825263483a72d2542ae7dccdf08abbbb2545224f8d2811d6e685d008973307e5d37477a249d6d976016b76fb76f6695b9eca48a97a3e45087d0312176098bf566315c856f9335b4ad8102bec2da43fcf720d833af6257df21cabff71379bb0dba180584ba23017046e530a0bdeb5e6071e2a1a00fa91d78417604b2a2d1bf2c077d6fc78e8a06d88f99d28f4e989c1e62097d3a1f7a5b8c22424a46174f5accd5b2ac88378f2c8c21ffbffa48734c83adb93424cd91f5a43ad8399d424e614a4df020f4fc10f0ad320b892fa64344b9eb667c634695f6f3e5d8db9aa3f1aa1cf51f37a5ff22812db6cbde16c7dfdba89816e7557c5f36f442062b0b4c7ad876c80db530d2562a095ec8afe28e873f304d0622d01e55caf444d90c7ca9b4e8cc433560b972098ebff6b9c56a2aff0ac13d59abbad40f0d16fc34d1b2fa08e6e18facb1c4434b2478c349c87349aa599b2924bf75b5f3182454f378fc623faeaca99683e06bda9e061c3c8d112329d20eb6aa2b23a7b47c9900cea9419f306c6b0b135ee2cf5033bc905e17ac005438d0f266e0f9b3f6ab4027ffc11fe19586b5995cb67934023ea3b6bcac15a3ac60c15f84c4e2d2457fdf6817dc6d311e023afcb7d4515d9ecbec1f4eac52ce5056c16a17514dc01def80e34f612c8d24cc02257bf107b0bd94df1810fc9fc64fb5e7ed8a3f3d5dc1eb968be9833ce4f9f2cecbd8203f598637533af3a81b2b70baadfc9f9e492b7f970ade4a5d91b8a29d1dd9b1dc3aa380b050bfd83079d47b2028ffdf115b651d0ae44ba815c7f466084a3d1c3df53599fd86328286214dd09ce4ee21693449d1bbacaf006d3eb7b396a2c05059421ce2185ad3d2c058050efb6101fcba7cb3edf80d6e7a3d168454a72f46fd244fc0154cdcb0b83d60b105c52558af9ef585b4a1bb8dc1808eb68b499e024fec4f8ce9aa58c22abd83f924917dd5719065db8ce1606e76b3bf8e5eba1bd964097f05d4b6c6c598b79a59907f741c9e57e3fb7a160d6224014f238e7c5e3ed9dfdfd7c7f57e1ab5dfb0c52a432f0ba3b611820b4ab721635613ee211c8b9a991376cc894d0c964be4ccaf307da087fffdeed14e2b712c7390ea6a8dbb079e1d949b5a1b2cc916687903d5fd5c8983561422d0997496289b73d36b7f9815483784107de74bc0b02abfdda6d00fa1602472b9556c8e3f8c5d8ed39b254664f2a4523c8a73db19745fe2fbc5f7e4e3a8e3217898e7d75c34e04f690cedda3e9762b62c8542acefc634e468168e16e589f2b8f85fce2b4911816b386897e754d20a74e241aa2d64055535c939102773c3c1c4a142a50efe4c3b2620c3a8d13b135951fc407992fd9dfb87d7e9616d70c50488b034816eb7946ed957cac5fb8a877a8127332f37a66c7ad101a35c5f6fc41ed293d682071d7edbd4c0454be0dc8bc21cea13c1af0073cd78f9c04fe27b0f5e7be6bc4b69b62373b915ebb26a79575b505a8c9d3a4bc0d8c65f3ac14e251fef6a55b84a9c0f1977940728a1ff8105755ec4e064788ca6243a39232067859f8774e2d2697ed7aa3466a3d6999eda7a8164cb408cbfc8323579ba4355d3430491ee7dbb217eb964d1f09b9e6314be94851dc4f848379735655923e52d16da1ea9bd1c4a8f27f898dbfbd9cf1fd85302c6e7ed925d545dcc97a2b809057bd6763b3ebdb3fc56dd647294ed7dcfb2e7c41d04e1845b00e1d10c942c2ebe0ad238ced505e939860077db120b2b9091b46ee95449c6805e1e6fd2cf8a5d8feb533a267006dcd4eac568ec09878dedfb61beb06e5f7c80dbca483c5fcee5d7c9b54d1c27f776f4211e77278d07587a6abbe019de80ba72112e4edb0d12a56a268718af3f4cd5a2ab9d6fc127eaedb71f8cfffecf411caec8b6c5f82759326bd00b25bb86e0d02a1c99f0fc38295a40ac011fb3fe416b207515228e0116d4533925d97770351a6bfeeb3cc31fe347fe5d7160982c4999e8eb9422ded5c698faed9714a8a8ed5d6cde6032a839c4a37d425f11a3ba3b04964fd82258b9a2a9dec03978747f3c5a209ce1bb5a6a3dde50696e7ac878c8318f16ca3c466e5ae461b25bcae5959cc85bb834c12076a11908fca134eefb5b4796284d345c43289942761aa727e2b417f1c9709fdb0b382244e4be5dae08b1b00939f01a9eb64298b461be228352b1048a7f27066f5c2276b613dd0f9f18687108f2bf19fefe7669c5ea2fc068ca12022829a69d2833d7d8a0f4ae0299d6737b0d49171840c3cb464c27e4abd292a5c424cc46929ab86da512475ccd41a59aa2802b8f6768f5f8793cbcbc609a99bb8cd5d69988dba4ecc83fcd90802ad2fcd255b7bec402235aa495247d60caeee59335f7040cb6e5fd67987cf20d726d8852d6f985856de25de50a03e2e686858ca4826dfa0d89fc8f3b47b83bbbdc3fbfc919e9cf163414ae93b1936dff694533eaaf497a9c2de20cbdf81f47e1e8aa8ee500f2ed9a1b445bce30e21b4bf20b46ea6f8ec1292f361348729578e08e1475116c4f95084193143d9e1a5afa9b6bbcae07e69d62ae8b33114a9c26dc2665d60c046c50349a9b8ae081894babe5a402a1f8096a9a2c092a07fa7a591915b29092614799796db39166c3f42ed473a0b34866d2b20421c850b941ade69419310e259fef1583f1689d456ec89579f5391c8fc49ea2b7f5704d73e3f89cd53e1b532e9e04257595ed4956efc7e53fc076a79f7df22680ebed1012c421237c300c0b945cecbdfd3410176938a4a1ad93533eb36e70e981bd973c9d910b2295e5c7f1ad1a978f880e9fd0e2746d92b22b11592bc705259336185badf022f3062cb2df1bd5446b5871f37a07ab9033ef89d608fbc4612596d4e0e7d9118ff4be052d0fdc3a47b119e2d1dff108ac0eec60cb6e95ae4d0aef737f7164a70c952272649c4bc4d223e4d0087094c4a6670b72c32e31c4392d71aa3bb593dd23bd3aa740ec99ca453dc6de55a36c7e142180fbc9c9825cd1e67484a5d5d54a8251dddd2451bc8156ed50bb6360041a00d069e6ca3599a5c7f584df13df54584cd734915eaa258183b8a0b66bd9135e13b905a0501e7c5745a14ea86cc5ea4b9dc97f1633f2b5e9950a6743b7335d39a8cdf50ed5d03060a27e57b6a2b62ab19471e3532df5bedefed75276b610795a4d6bbd2ea153c684b3206b2cfa6710b005eebc8428e4afe286c928b690bdf0d16d82bef512461513da51213e6f5a13849d9ea65d1229def549e6927931c5f1dcf3767a4492d1924935543a15720d27aa4467ea2c1f94887f7d633f04221222f8150cff68a54e4c943f6e50c7ddc669b40b874fb600a82e24b2d349b50609e675f86eaf45ed2b5b288b6e6dfcf19d1502f6f5b09570db35d1f1da280899e374f0a57ced4899d258a31fb99cdcee75aba041ddf6cebcd73905f5fb8f206af460dda4f7bcd994ffa22eeb1ee4a9e073d48eb72cceb730e380c3f1be0e0239d389df7a723c1fc97b58879b9a2c2f9370750b1f3de6261cfb701f752670c053e724f2460d671c70bcb95c80b6cdc3c429f372f623aad882cff2cbaa29b559765157d79545ae332cc862a10807b515c7a28112f5e9b3cb00a7a202d1d8863256d993b7264b31f99bc5974fdfcaa429b6cf57fdff895c41353feb29d9bd62d9e65481943df693fc864b5c8da51199575fcf0344ec1b39b248c1"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x4f, 0x4, [0x3, 0xfb8, 0x4]}}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x8, 0xc, 0x0, 0x3, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @remote, @local, @local, @loopback]}}}, @dstopts_2292={{0x280, 0x29, 0x4, {0x33, 0x4c, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo, @generic={0xf5, 0xc6, "048aa54c833951074d4fbafcee9c733267a6cad5fdd1839bdf9ffdc52ecae76cb2fc3a4c4df1e8af37289880b33f51aa6643b4d70f1e0b305750617086fdaf75ec55908f988b76db8923b15cb5a03714fa0583a0a84070ca7a9fc5c6953e3d15206c389dd887062bfbc3faf7fe26386cf8d2221f619df4a1145be125e1b1f8ac6f4a6c4925dc29dfeaf7889b30084580288e28e8808a2729099f5fef5aa3962731415a3a2f29a569bcb8fd95fcc39f4a45ea5c41f6058782f97bbce1352de357cec72a1450a1"}, @generic={0x8, 0x5d, "d5ffe221d7509e54690f978e58234f9df1b576dcc3d9ee8fbc0eece4fb05aee7139bf714bac34c048eea29fb1075118c8607e61ce66fba9cf59f8d8530949f317ad79916cb676cb53745d957034f622b134f467b1cacd4bc73caf14b24"}, @jumbo={0xc2, 0x4, 0x9f40}, @generic={0x9, 0xcc, "9974b684312cd36edc974b00c3871da0e934c8291c6811c843053b38cc53d258e08896ba9633a41a6f770085e468875334c569c42a5bfaca4cab71663f33f9b2f4de77c218f77bfa0bf6a8401867de34255d7e694c92d89ededcbf30fc67c61114840c507e6bf0e9e2100d73d13590260f1ca8b7244cf4f506842da120c813953acc87c76ec8ff9e61ae98cd9acc312da88443d736ea0ce48fcd9662965a7a7512f39b5fa6d768542d29310c905bc988f4e9e7ecd0801a0679a9468cbb97482530449a11ed5959eda018ce98"}, @ra={0x5, 0x2, 0x7}, @generic={0xf9, 0x45, "3fbde0e1bbc6377856c3c27a6f795a0d4ddeaf2040eb7dc14bcebb5c98eea5ba8bef31dd8165287a568fc430faa8188bd27e2360cc33dcd09ffe396113797be8da22cc868b"}, @hao={0xc9, 0x10, @mcast2}]}}}], 0x1358}}], 0x4, 0x4004000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x1, 0x1, 0x93d}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x0, 0x108c}, 0x20) 18.988339409s ago: executing program 0 (id=1850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) unshare(0x2020600) ppoll(&(0x7f0000000640)=[{r0, 0x8009}], 0x1, &(0x7f0000000700)={0x0, 0x989680}, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x7fffffffffffffff, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r4, 0x6, 0x7fffffff, 0xb3}) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@rand_addr, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x29, 0x81, 0x733, 0x12, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, @rand_addr=' \x01\x00', 0x10, 0x700, 0x4, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000380)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x7800, 0x8, 0x0, 0x4, {{0x1a, 0x4, 0x2, 0x30, 0x68, 0x68, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x44, 0xd3, 0x3, 0xd, [{@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0xf}}, {@private=0xa010100, 0x3}, {@loopback, 0x7f}, {@empty, 0x80000000}, {@private=0xa010100, 0x7}, {@loopback, 0x6}, {@loopback, 0x4}]}, @lsrr={0x83, 0xf, 0x70, [@rand_addr=0x64010102, @rand_addr=0x64010101, @loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000680)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x20, 0x20, 0x0, 0xd0, {{0x14, 0x4, 0x2, 0x21, 0x50, 0x64, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@timestamp_prespec={0x44, 0x24, 0xa8, 0x3, 0x1, [{@private=0xa010100, 0xfff}, {@broadcast, 0x401}, {@multicast1, 0xb}, {@rand_addr=0x64010102, 0xb}]}, @ssrr={0x89, 0x7, 0xda, [@rand_addr=0x64010101]}, @ssrr={0x89, 0xf, 0x14, [@rand_addr=0x64010101, @local, @broadcast]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={&(0x7f0000000880)={0xa7c, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x120, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0xd, 0x4, 0xff}, {0xc, 0x8b, 0x5, 0xfffffffa}]}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x968, 0x4, 0x1, 0x7fff}, {0x8, 0x0, 0x2, 0x9}, {0x2, 0xc, 0x6, 0x7}, {0x400, 0xb, 0x0, 0x8}, {0x10, 0x5, 0x8, 0x8}, {0x9, 0x3, 0x8, 0x72729693}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6baa}}}]}}, {{0x8, 0x1, r8}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r9}, {0x1c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x464c}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0xe, 0x7, 0x4}, {0x7, 0xf8, 0xfe, 0x9}, {0xfff8, 0xe, 0x9, 0x35}, {0x232, 0x80, 0x5, 0x3}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}]}}, {{0x8, 0x1, r10}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbea}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc5}}}]}}, {{0x8, 0x1, r15}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9c9b}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r17}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r18}, {0x298, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe0000000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3d}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8053}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x3, 0x7f, 0xb4, 0x4}, {0x3, 0x6, 0x0, 0xfffffffe}, {0x1000, 0xfb, 0x4, 0x4}, {0x3, 0x6, 0x32, 0x220}, {0x0, 0x7, 0xc, 0x6}, {0x705f, 0x0, 0x2, 0xfffffffe}, {0xb656, 0x0, 0x8, 0x546}, {0xfff9, 0x2, 0x4, 0x6}, {0x2, 0x1, 0x3, 0x125e}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}]}}]}, 0xa7c}, 0x1, 0x0, 0x0, 0x8c0}, 0x80) 18.654279658s ago: executing program 4 (id=1854): r0 = socket(0x2, 0x80805, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0xbb, 0x6, 0x6, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x40, 0x28, 0x5}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@deltfilter={0x2c, 0x2d, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xf, 0xfff2}, {0xe, 0x10}, {0x0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x1}}]}, 0x2c}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001042cf522000100000000000000", @ANYRESOCT=r1, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c95}, 0x24008840) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010800000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000000000000000000000a00000000000000000000008040000000000000000008000000400000000000000000000000004400050000000000000000000000000000000000000004d53c"], 0xfc}, 0x1, 0x0, 0x0, 0x4841}, 0x0) (async) r5 = socket(0x2b, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000240)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0xa, 0x3}, 0x20) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r8, &(0x7f00000009c0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xd8d1) 18.454135967s ago: executing program 0 (id=1858): r0 = socket$isdn(0x22, 0x2, 0x26) r1 = accept(r0, 0x0, &(0x7f0000000000)) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r3}, 0x10) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r3, 0x5}, &(0x7f00000000c0)=0x8) (async) socket$tipc(0x1e, 0x2, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, 0x0, 0x20000004) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r7}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/30, &(0x7f0000000240), &(0x7f0000000280), 0x1, r7}, 0x38) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20008802}, 0x20044880) (async) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_join_ibss(&(0x7f0000000240)='wlan1\x00', &(0x7f0000000440)=@default_ap_ssid, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r10, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea439"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB="050000000000000000c5082294cf42d683c1d9d390caea8c5dcd190003008ea4caa9133eb80093a01836fccdf3f73f99e747afb546124456276ee5091ebe4ab3c9314ad7bf1ef585584b2b3d36e2bbde00c1d1bbcf862ae99b194e8bbdc65187aadfb08a7cf1cfcbf6d95c863c82f8e1bb30d4b80d8f1d2cd6628954fa91d11ad45d3b594e1ab210b7d5b0a11290fb3df8889465fc4f25e10ce9f0622492d5bf829b0da21c83b888000021", @ANYRESHEX=r7, @ANYRESDEC=r4], 0x24}}, 0x0) (async) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) (async) socket$nl_generic(0x10, 0x3, 0x10) 18.311380987s ago: executing program 4 (id=1860): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x3a) accept4(r0, 0x0, 0x0, 0x0) r1 = socket(0x22, 0x2, 0x3) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r1) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='(-\'}-:\'@\x00', 0x9) 18.154427478s ago: executing program 0 (id=1862): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x4e22, @empty}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x10, {0x2, 0x4e20, @multicast2}, 'veth0_macvtap\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x13, 0x0, &(0x7f00000000c0)) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 18.150756632s ago: executing program 4 (id=1863): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) unshare(0x6a040000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x90) socket$netlink(0x10, 0x3, 0x10) socket(0x8, 0x3, 0x3) unshare(0x6020480) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) 18.020246022s ago: executing program 0 (id=1865): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @broadcast, @broadcast, @loopback}}}}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f4940000850000000700000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 17.965715501s ago: executing program 2 (id=1866): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000002000000010000930100000005f1fffffeff00000508000000612e61"], 0x0, 0x38, 0x0, 0x1}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001f40)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, 0x0}}], 0x5, 0x8040) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 17.906393919s ago: executing program 2 (id=1867): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)={0xffffffffffffff2e, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xdc, 0x4baa, 0x2, 0x800, 0xc596, 0x6, 0x8, 0x100]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) 17.805748166s ago: executing program 0 (id=1868): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x7}, &(0x7f00000003c0)=0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000040)='@(\x00', 0x80, &(0x7f0000000100)={@_ha_fsid={[0xfffffffb, 0x6]}, {0x400, 0x7, 0x6, 0x2}}, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0x4}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x804) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) accept(r2, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000200)=0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x86e83e67fbf2b07a}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@gettaction={0x78, 0x32, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900004e9f050005000a0000001400078008001140000000ed070012400000fa000000000000000000020065742c706f72740000001b0000000000000000"], 0x60}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r3, 0x0, 0x0, 0x42, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@loopback, 0x4e21, 0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x3}, {}, 0x6}, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x33}, 0xa, @in6=@loopback, 0x0, 0x0, 0x3, 0x4, 0x1, 0xef}}, 0xe8) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1ce2325ba6a7e73385470048690afb0000000806010200000000000000000100000a05000100070000001137e36e733f66f5ce412547f950e3b44906f5db853f2b0c"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) 17.748922938s ago: executing program 2 (id=1870): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pi6 \x00'}, 0x20) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff000000, 0xff, 'syz_tun\x00', 'sit0\x00', {0xff}, {}, 0x6c, 0x1, 0x77}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x3, 0x3, 0x7, 0x0, 0xb0d452e9002af204}, {0x2}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv4=@empty, [0xff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x0, 0x1, 0x7, 0x2, 0x5], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x0, 0x2, 0x7, 0x1, 0x2], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 17.380941575s ago: executing program 2 (id=1872): socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x7, @mcast2, 0x4}}, 0x2, 0x3}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r1, @in={{0x2, 0x4e23, @multicast2}}, 0x101, 0xc7b}, 0x90) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r1, @in={{0x2, 0x4e23, @multicast2}}, 0x101, 0xc7b}, 0x90) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0)=0x401, 0x4) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000280)=0x1000, 0x4) sendto$l2tp6(r2, &(0x7f00000002c0)="9ae8d7775ac51634baa6316b995f3f25c53fedb66027883a39b7e52a63f5f7ceb1ca35044cf9d2e2b239c6d7511f2f0ae18fea61a8758cfd585502ceac6b1094c5c4cbf4d71200382111be0b766019ee27e9ac97b6bb4cbc96d0b328954c819010f93d2e063fe918529b", 0x6a, 0x4, &(0x7f0000000340)={0xa, 0x0, 0x3, @loopback, 0x7, 0x4}, 0x20) socket(0x3, 0x800, 0x50bd57eb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000380)={0xb, {{0xa, 0x4e23, 0x0, @mcast2, 0x4}}, {{0xa, 0x4e21, 0x8, @empty, 0xffffffff}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000380)={0xb, {{0xa, 0x4e23, 0x0, @mcast2, 0x4}}, {{0xa, 0x4e21, 0x8, @empty, 0xffffffff}}}, 0x108) recvmsg$unix(r2, &(0x7f0000001880)={&(0x7f00000004c0)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/211, 0xd3}, {&(0x7f0000001640)=""/162, 0xa2}, {&(0x7f0000001700)=""/143, 0x8f}], 0x4, &(0x7f0000001800)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x2102) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d00)={r7, 0xe0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001a40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000001b00)=[{}], 0x8, 0x10, &(0x7f0000001b40), &(0x7f0000001b80), 0x8, 0x9, 0x8, 0x8, &(0x7f0000001bc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0xe, 0x8, &(0x7f00000018c0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @generic={0x81, 0x3, 0x7, 0x7238, 0x8001}], &(0x7f0000001900)='GPL\x00', 0x9, 0x62, &(0x7f0000001940)=""/98, 0x40f00, 0xc, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f00000019c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001a00)={0x2, 0x8, 0x9, 0x5}, 0x10, r11, r8, 0x7, 0x0, &(0x7f0000001d40)=[{0x3, 0x1, 0x7, 0x5}, {0x3, 0x3, 0x0, 0x2}, {0x4, 0x1, 0x9}, {0x4, 0x4, 0x5, 0x7}, {0x5, 0x5, 0x9, 0xb}, {0x1, 0x2, 0xa, 0x5}, {0x0, 0x1, 0xa}]}, 0x94) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000001e80)={r1, 0xc7, "3d36209babd6b67314ffc435236f5fa3672fee1db4d71fc47a5b6fc9b6dbc49e6f5f0c1df41f8f0aa3dd795363a1b8a52eb09e52acd47964c32d4536c37b06f6de04249e41c9e37cd6ba8f1aa8daed735f3fce82644aaf185ab70611fb0208a18861405d3a07b684dcf9832b6d80b5d3699bd01e83fe5a72bf8529c5bb94ec25595ef178869bede2f1da6c629a9bfc6c902ec936b0cc7d7fbd9dedc95210e8c637bd4941ec03bb93aa33530e7581c0f4696ac6e516e0acfa3f999e78eeffa0ab2b6c40f8f7c1e2"}, &(0x7f0000001f80)=0xcf) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001fc0)={0x0, "0df03187f80b4a631e0c568549b63c5a"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f0000002fc0)={0x0, 0x9, 0x80000001, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f0000002fc0)={0x0, 0x9, 0x80000001, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000033c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000037c0)={0x14, 0x0, {0x4, @usage=0xd, r13, 0xfffffffffffffffb, 0x8, 0x2, 0x6, 0x8, 0x0, @struct={0x9, 0x1}, 0x8, 0x3, [0x7, 0x0, 0x6, 0x0, 0xa0c, 0x7]}, {0xffffffff, @usage=0xffff, r14, 0x1, 0xfffffffffffffffd, 0x4, 0x401, 0x1, 0x402, @struct={0x5, 0x4}, 0x6, 0x99, [0x1, 0x4, 0x7, 0x9, 0x8, 0x9]}, {0x101, @usage=0x7, r15, 0x5, 0x4, 0x5, 0x200, 0x6, 0x0, @usage=0xb1ef, 0x2, 0x1, [0x0, 0x6, 0x3, 0xfffffffffffffffc, 0x7ff, 0x681000000000]}, {0xfe0, 0x4, 0x6}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000037c0)={0x14, 0x0, {0x4, @usage=0xd, r13, 0xfffffffffffffffb, 0x8, 0x2, 0x6, 0x8, 0x0, @struct={0x9, 0x1}, 0x8, 0x3, [0x7, 0x0, 0x6, 0x0, 0xa0c, 0x7]}, {0xffffffff, @usage=0xffff, r14, 0x1, 0xfffffffffffffffd, 0x4, 0x401, 0x1, 0x402, @struct={0x5, 0x4}, 0x6, 0x99, [0x1, 0x4, 0x7, 0x9, 0x8, 0x9]}, {0x101, @usage=0x7, r15, 0x5, 0x4, 0x5, 0x200, 0x6, 0x0, @usage=0xb1ef, 0x2, 0x1, [0x0, 0x6, 0x3, 0xfffffffffffffffc, 0x7ff, 0x681000000000]}, {0xfe0, 0x4, 0x6}}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$AUTOFS_IOC_FAIL(r9, 0x9361, 0x2) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r16 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r16, &(0x7f0000003bc0)={0xa, 0x4e23, 0x7, @remote, 0x6}, 0x1c) (async) bind$inet6(r16, &(0x7f0000003bc0)={0xa, 0x4e23, 0x7, @remote, 0x6}, 0x1c) getsockname$tipc(r4, &(0x7f0000003c00)=@name, &(0x7f0000003c40)=0x10) (async) getsockname$tipc(r4, &(0x7f0000003c00)=@name, &(0x7f0000003c40)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000003c80)={r1, 0x6, 0x8, [0x9, 0x18, 0x36, 0x3, 0x40, 0x75, 0x4, 0x2]}, &(0x7f0000003cc0)=0x18) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000003d00)={r17, 0x5}, &(0x7f0000003d40)=0x8) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000003d00)={r17, 0x5}, &(0x7f0000003d40)=0x8) sendmsg$NFT_BATCH(r9, &(0x7f00000043c0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004380)={&(0x7f0000003dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x314, 0x9, 0xa, 0x101, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFTA_SET_EXPRESSIONS={0x208, 0x12, 0x0, 0x1, [{0x204, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1f0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0x11c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe5, 0x1, "7bd6572cf55afcef377a2a47adaf5801d06b603d21a6d43255db40a76a2fa1ab10533c2c056596d794a673a7457b462c4c159da33df8d07827479a80aa8714ed81589c764d87fd5740388d67c2858d52332d591d05ca4ba7d88a0563bfb9f6bab5ea6b97310db40ab7d5bf543ebe529d8a51429227787b7566936c0b3a2d184408c9ba1c108a446fcf9a9f5f6b3d004d04e7db1afecc8ac37820037009158d4662af18dcaa0c1a7600354c8eee56ab6306a5eeb03c5e1ec967dd85ad7bc24d310604a2069bb485be81d5e244cfe7bce179ec483100beff5aaf5193f9dc34bbdca8"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_IMMEDIATE_DATA={0xc4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4f, 0x1, "e04f5d108e2f82be8309204417c6f116de5e87a4d7f5f2d165a38240c3999b8c60f22660a1d884455a0d61cd0041419ba8ba03638d58a74e1ce872e35fd738161b2ab983f505b97b98bf60"}, @NFTA_DATA_VALUE={0x34, 0x1, "ce9a647d1db76bb89c14cfd79f889599ff89e12879c8561a873a6eaadedcb61c22806f38b1f878c6ce6aea92e5af808f"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x11, 0x1, "e6f7b328e648c2eff12670df5a"}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_USERDATA={0xe0, 0xd, 0x1, 0x0, "4a2f6fa05f6c78e80069f610353c4d831c3b6f5fb5f940a1d424e23279e9536dab3a8b182117b6c6a3f36faf6a23c3cc2bd4ca35bf57915575f35f9cb146953b0a26468cd6e0693f406d3369a5fa775179bce658d624c1d6ee72e8e6b680152898e63098beca105432350552a4e4caa2b5117c692ac0fb3fa45f8585aadb0be84c5816c9f050fcdc041f6d2da6fd896df40f83679dd712e8d6ad2f446a1befe3380c6547260661df6cacd7d0edf1508c358acbffe7328b3324d635df21162ac1f81a6e178d4458b5b7f5435815c496dacc39943d7928dbe9686c9bd6"}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELOBJ={0x74, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELSET={0x160, 0xb, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_DESC={0x138, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x11c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc476}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff02d}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdbb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffc7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xca89}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5b0}, 0x1, 0x0, 0x0, 0x4008050}, 0x80000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000004400)={0x1, 0xa, 0xd, 0x16, r12}, 0x10) r18 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004480), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000004540)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004500)={&(0x7f00000044c0)={0x2c, r18, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 17.340627918s ago: executing program 0 (id=1873): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000160001000000000000000000aa90db15ba45ed57f57e9c804564820a00000085008b801100"], 0x1c}}, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029e46053"], 0x18}, 0x40e0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf350300000008000100000000000a000a007465616d300000000c0002004f830000000000000c0005000000bc5fe6310290539225e8e302aaa0a0be4ad0edb8e41424b1e0"], 0x40}}, 0x8000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xfffffffe) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3c, 0x7ff, 0xf83, 0x3}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x40}, 0x1, 0x0, 0x0, 0x8888}, 0x4008080) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000400)=[{0x5, 0x1, 0x4, 0x4}, {0x1, 0x2, 0x1, 0x7}, {0x2, 0x1, 0x9, 0x9}, {0x0, 0x4, 0x0, 0x3}, {0x2, 0x5, 0x6, 0x1}], 0x10, 0x7}, 0x94) unshare(0x26000400) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) 17.278608887s ago: executing program 2 (id=1874): socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, &(0x7f0000000140)={{@align=0x6c, {0x63, 0x3, 0x2, 0xfffffffffffffff5}}, {{[0xd, 0x4, 0x8, 0x3]}, 0x0, 0x5, 0xd, 0x0, &(0x7f0000000040)=[{{@align, {0xc000, 0x7, 0xfffffff7, 0x8}}, 0x0, 0x0, 'mirred\x00'}]}}) 17.061652211s ago: executing program 4 (id=1875): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000440)={0x27, 0x0, 0x3, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)={0x3, 'rose0\x00', {0x2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) r2 = socket(0x10, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', r4, 0x29, 0x1, 0x53, 0x1000004, 0x0, @local, @mcast2={0xff, 0x5}, 0x10, 0x8, 0xe3e1, 0xcfe}}) recvmmsg(r1, &(0x7f0000005c40), 0x0, 0x2120, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000140)="24000000010006", 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x6, [@union={0xdc, 0x6, 0x0, 0x5, 0x1, 0x5, [{0x9, 0x0, 0x2}, {0x1}, {0x8, 0x5, 0x40}, {0x1, 0x2, 0xd}, {0x7, 0x3, 0x8}, {0x9, 0x4, 0x1}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x2}]}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x51]}}, 0x0, 0x9e}, 0x28) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}]}, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x3, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x3, 0x1, 0xfffffff8, 0x4}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}}}}]}, 0x38}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 17.061370256s ago: executing program 3 (id=1876): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x57) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) 16.938399043s ago: executing program 1 (id=1877): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) close(r2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r3, 0x40047452, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'sit0\x00'}}) (async) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 16.878318135s ago: executing program 2 (id=1878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0x2000}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}]}]}, 0x78}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x61a400, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000580)={0x0, 0x5, 0x4, 0x568c, 0xb93, 0xb8, 0x6, 0xa, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0xe5, 0xff, 0x5, 0x30fc, 0x9c000000}}, &(0x7f0000000480)=0xb0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000540)={r8, 0x2b4}, &(0x7f00000004c0)=0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000000500)={r9, 0x101, 0x4, "d945c52c"}, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x2, 0x1, 0x7}]}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r12, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x70}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_SPORT={0x0, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfff}, @L2TP_ATTR_L2SPEC_TYPE={0xe, 0x5, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40081) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.725582465s ago: executing program 3 (id=1879): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0x1ff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000ff0100000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000563f12e7001079000000000000001800000000000011000000ca8d6b62009500000000000800d50affff000000009500819020abcd310000001839000001000000000000000000000095000000ee54750007903090023e7b651ae34db11f687e0a008f51cff7db7d37f2fcbd0e36c2d20fc2ea54f86d8b8d2d6c73a38b5a04d1ea9040f9de78"], &(0x7f0000000000)='GPL\x00', 0x2, 0xfe3b, &(0x7f0000000340)=""/238}, 0x28) 16.725160742s ago: executing program 1 (id=1880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000300000085000000130000001801000020207025000000000020201e7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000730000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2a}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xe69, 0x298d}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x2000c004) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x9, 0xa}, {0x0, 0x9}, {0xffff, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000061a00020073797a310000000008000440000000000900010073797a3100000000080003400000000a1c000000000a030000000000400000000a000002080002400000000314000000000a0108000000000000000002000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x40000) r7 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x891b, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, 0x0, 0x0, 0x0) preadv(r9, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000232200000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000002fcffffff00000000"]}, 0x108) setsockopt$ALG_SET_KEY(r10, 0x117, 0x7, &(0x7f00000000c0)="fdddab5e", 0x4) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x88, 0x0, &(0x7f00000001c0)="e08a547ef20000000000ffe3554ea59ddd69b7089aa3072fa841ca4f2e70329ee0665bf58d7037f1f2530ad86ba500c56a95ffecd315db2a1491b416d4d16f43fdca21ff1e0ba49d51893fdd8a669fc73a2553d2c3507a1fe207ce9da531477f69d5341e6ec3d67b8bb74cb4d99a772f99dadf2db92c785468eee82435732c7848a6fbde4fa9f8e9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 16.626731049s ago: executing program 3 (id=1881): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x401, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, 0x25, 0x301, 0x70bd29, 0x25dfdbfd, {0x15}, [@nested={0xc, 0x131, 0x0, 0x1, [@typed={0x8, 0x2a, 0x0, 0x0, @u32=0xa78}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x3e59cdaa2f3e420c) 16.484906541s ago: executing program 3 (id=1882): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a1c001280110001006272696467655f736c617665000000000400058014003100"], 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r2, 0xffffffffffffffff, 0x1a, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0xbb}}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808fffeffea0800", @ANYRES32=r0, @ANYBLOB="06001c00"], 0x150}, 0x1, 0x0, 0x0, 0x2400c014}, 0x4040080) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a1c001280110001006272696467655f736c617665000000000400058014003100"], 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff1100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r2, 0xffffffffffffffff, 0x1a, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0xbb}}, 0x30) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808fffeffea0800", @ANYRES32=r0, @ANYBLOB="06001c00"], 0x150}, 0x1, 0x0, 0x0, 0x2400c014}, 0x4040080) (async) 16.261523058s ago: executing program 3 (id=1883): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16.260430534s ago: executing program 1 (id=1884): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x4, 0x6, 0x81, 0x9, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x20, 0x700, 0xfffffff1, 0x3}}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x7, 0xe}, {0xffe0, 0xc}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x5) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002140)=@newqdisc={0x58, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x9}, @TCA_FQ_CODEL_INTERVAL={0x3a, 0x3, 0x3732}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x89}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x0, 0x8, 0x401}]}}]}, 0x58}}, 0x0) 16.202564134s ago: executing program 3 (id=1885): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x2010001, @local}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) close(0x3) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xc}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xe37}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x83) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000000), &(0x7f00000001c0)=0x4) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a0000000e000000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdab7ca67c4fc12ee923ffffff00"/28, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES16=r3], 0x50) 16.126717986s ago: executing program 1 (id=1886): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = socket(0x40000000015, 0x5, 0x0) (rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2}) sendmsg$nl_generic(r3, &(0x7f0000000480)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x2ec, 0x22, 0xfe8c941375415d7b, 0x70bd28, 0x25dfdbfd, {0x3}, [@generic="abad48954a96853bc6b5aef21e1f173b69da26855ef29ab8b106827d6784f416e2cd0557354a300e201037c38ba061c1ebaf34df24e99e34695662fc107f976f5ca1ab06223e13bab525845b140b356ab92bdcd7ec3dc1a1fc27efe866a22f935daf750ab77e7901fb2a752154e5d566f7fa42a4d56174a1729934192549e4274b078fb6790d4de276858a709b85e040fc4da3cd25a039fdbb4d4861ef8fcc9f07a48c0251f55a8c773a8db25c38fd2d01fc7e60870fb646dd60a09a5dfc1b9ab91841da8ef0af39102f0fb164a96eb3935726b017ad264e20533d4eb292b5ca94edbdc52b9fab", @nested={0x182, 0x78, 0x0, 0x1, [@generic="ee230e8999bfd5436bef59a55f37826e57788d711c5ebbde2fd21081c872de3a6e196767ad32da11baaef7ea65594771c77d35918970a726dcaad022559238a1db676856672925925e3040d27b3356c0fda4e2d3a8c7ecee0fa08ea88665984f2563248c4243954d1b783e5a27850150e87134523ef7673d747f7d4d1b0b8a870884006524348635782e0b4758e0b01387c919eab1756217c17619b27fca699456", @nested={0x4, 0xa3}, @generic="98764d56d8e312dea8140adb6da6aabd498e7092143555b41e95206d07094e8e25ca850414c11fd02bc45c21a995f7080e46a9709628e56e191eaf7b7ce0bfe62f658ff655a7fab817fef53e59851bb69eb22387db5fb0ce37cde1b19a781b0cf69b456ada335278eedc5d9d6100c26543babe246a538b0178d28a083f9e873de73da56dd8db6bc914b91c2171d9430e2d4c16a21418d0b96f74b95dc84545b0514536efb4bdd52a0d84aa78e497a546d6790c6ba684d70f09", @nested={0x4, 0x122}, @typed={0x8, 0x97, 0x0, 0x0, @fd=r2}, @nested={0x4, 0xd9}, @nested={0x4, 0x108}, @nested={0x4, 0x8b}, @typed={0x6, 0xdf, 0x0, 0x0, @str='\\\x00'}]}, @nested={0x57, 0xa9, 0x0, 0x1, [@generic="ffd2fa444b439e391c1bb575c707718e3fab7609036b8664024bf264873f2676aef638f574a8836cb024ae821b948be71bb3560a9effef77ca848c0bcf9f8db1a2f05ba7a6cb9445fe111d08940dafff15ed62"]}, @nested={0x14, 0xff, 0x0, 0x1, [@nested={0x4, 0x4b}, @nested={0x4, 0x118}, @nested={0x4, 0x101}, @nested={0x4, 0x107}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x4044}, 0x40) readv(r0, &(0x7f0000001300)=[{&(0x7f0000001340)=""/4097, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x60) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) 15.190122825s ago: executing program 1 (id=1887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000040), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) socket$nl_netfilter(0x10, 0x3, 0xc) (async) writev(r0, &(0x7f0000000040), 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) (async) 15.189693872s ago: executing program 1 (id=1888): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000040000000000000000000c2a0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r0 = socket$xdp(0x2c, 0x3, 0x0) write(r0, &(0x7f0000000080)="08bec194ceec2e5155b96600334c667c818cad3c2b91d9b06db17a83226ae970753482b741a4bda194dd2440f953121ed2f963e69f2040549e173b12346fb95a7a684c4359e37a2ed74013d0ede59c3ae257391c92ef6978f3a6da45b816bc96f8c9b71fa928a15a314ce7a23ec56db995d7abded9a4f5bee686027d286709befd4326200cdd5ba270f6c12217a4", 0x8e) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x54, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1000000}, {0xc}}]}, 0x54}}, 0x80) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f00000004c0)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x34, 0x5}}], 0x18}}], 0x1, 0x4880) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0xd, 0x8}) 2.009134927s ago: executing program 32 (id=1873): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000160001000000000000000000aa90db15ba45ed57f57e9c804564820a00000085008b801100"], 0x1c}}, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029e46053"], 0x18}, 0x40e0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf350300000008000100000000000a000a007465616d300000000c0002004f830000000000000c0005000000bc5fe6310290539225e8e302aaa0a0be4ad0edb8e41424b1e0"], 0x40}}, 0x8000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xfffffffe) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3c, 0x7ff, 0xf83, 0x3}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x40}, 0x1, 0x0, 0x0, 0x8888}, 0x4008080) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000400)=[{0x5, 0x1, 0x4, 0x4}, {0x1, 0x2, 0x1, 0x7}, {0x2, 0x1, 0x9, 0x9}, {0x0, 0x4, 0x0, 0x3}, {0x2, 0x5, 0x6, 0x1}], 0x10, 0x7}, 0x94) unshare(0x26000400) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) 1.97433205s ago: executing program 33 (id=1875): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000440)={0x27, 0x0, 0x3, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)={0x3, 'rose0\x00', {0x2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) r2 = socket(0x10, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', r4, 0x29, 0x1, 0x53, 0x1000004, 0x0, @local, @mcast2={0xff, 0x5}, 0x10, 0x8, 0xe3e1, 0xcfe}}) recvmmsg(r1, &(0x7f0000005c40), 0x0, 0x2120, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000140)="24000000010006", 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x6, [@union={0xdc, 0x6, 0x0, 0x5, 0x1, 0x5, [{0x9, 0x0, 0x2}, {0x1}, {0x8, 0x5, 0x40}, {0x1, 0x2, 0xd}, {0x7, 0x3, 0x8}, {0x9, 0x4, 0x1}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x2}]}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x51]}}, 0x0, 0x9e}, 0x28) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}]}, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x3, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x3, 0x1, 0xfffffff8, 0x4}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}}}}]}, 0x38}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.478761076s ago: executing program 34 (id=1878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0x2000}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}]}]}, 0x78}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x61a400, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000580)={0x0, 0x5, 0x4, 0x568c, 0xb93, 0xb8, 0x6, 0xa, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0xe5, 0xff, 0x5, 0x30fc, 0x9c000000}}, &(0x7f0000000480)=0xb0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000540)={r8, 0x2b4}, &(0x7f00000004c0)=0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000000500)={r9, 0x101, 0x4, "d945c52c"}, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x2, 0x1, 0x7}]}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r12, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x70}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_SPORT={0x0, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfff}, @L2TP_ATTR_L2SPEC_TYPE={0xe, 0x5, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40081) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 980.954103ms ago: executing program 35 (id=1885): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x2010001, @local}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) close(0x3) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xc}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xe37}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x83) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000000), &(0x7f00000001c0)=0x4) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a0000000e000000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdab7ca67c4fc12ee923ffffff00"/28, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES16=r3], 0x50) 0s ago: executing program 36 (id=1888): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000040000000000000000000c2a0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r0 = socket$xdp(0x2c, 0x3, 0x0) write(r0, &(0x7f0000000080)="08bec194ceec2e5155b96600334c667c818cad3c2b91d9b06db17a83226ae970753482b741a4bda194dd2440f953121ed2f963e69f2040549e173b12346fb95a7a684c4359e37a2ed74013d0ede59c3ae257391c92ef6978f3a6da45b816bc96f8c9b71fa928a15a314ce7a23ec56db995d7abded9a4f5bee686027d286709befd4326200cdd5ba270f6c12217a4", 0x8e) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x54, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1000000}, {0xc}}]}, 0x54}}, 0x80) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f00000004c0)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x34, 0x5}}], 0x18}}], 0x1, 0x4880) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0xd, 0x8}) kernel console output (not intermixed with test programs): 357297][ T9564] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.887'. [ 166.368613][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 166.454052][ T9569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.888'. [ 166.634470][ T9579] netlink: 'syz.2.891': attribute type 10 has an invalid length. [ 166.670341][ T9579] veth0_vlan: left promiscuous mode [ 166.689463][ T9579] veth0_vlan: entered promiscuous mode [ 166.722421][ T9579] team0: Device veth0_vlan failed to register rx_handler [ 166.730309][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 166.849004][ T9589] netlink: 64 bytes leftover after parsing attributes in process `syz.3.893'. [ 166.884121][ T9589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.893'. [ 166.902961][ T9591] netlink: 68 bytes leftover after parsing attributes in process `syz.2.894'. [ 166.917208][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 167.293384][ T9612] netlink: 'syz.3.900': attribute type 142 has an invalid length. [ 167.312973][ T9609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.320082][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805946ac00: rx timeout, send abort [ 167.338250][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805946ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 167.386408][ T9611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.441291][ T9619] netlink: 'syz.4.902': attribute type 2 has an invalid length. [ 167.645504][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.904'. [ 168.197935][ T9635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.549940][ T9641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.581871][ T9641] delete_channel: no stack [ 168.620665][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a0ce800: rx timeout, send abort [ 168.630563][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a0ce800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 168.955525][ T9661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.289300][ T9673] lo speed is unknown, defaulting to 1000 [ 169.308452][ T8103] IPVS: starting estimator thread 0... [ 169.374248][ T9677] tunl0: Caught tx_queue_len zero misconfig [ 169.396862][ T9675] IPVS: using max 34 ests per chain, 81600 per kthread [ 169.542880][ T9682] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 169.724203][ T9673] gre0 speed is unknown, defaulting to 1000 [ 170.469678][ T9694] syzkaller0: entered promiscuous mode [ 170.475198][ T9694] syzkaller0: entered allmulticast mode [ 170.525039][ T9694] 0: reclassify loop, rule prio 0, protocol 800 [ 171.019176][ T9728] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 171.382236][ T9732] vlan2: entered promiscuous mode [ 171.388855][ T9732] geneve1: entered promiscuous mode [ 171.395135][ T9732] vlan2: entered allmulticast mode [ 171.401905][ T9732] geneve1: entered allmulticast mode [ 171.424413][ T9734] __nla_validate_parse: 6 callbacks suppressed [ 171.424432][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 171.444136][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'. [ 171.630951][ T9742] tipc: Enabled bearer , priority 0 [ 171.644442][ T9744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.939'. [ 171.646629][ T9742] syzkaller0: entered promiscuous mode [ 171.659022][ T9742] syzkaller0: entered allmulticast mode [ 171.739086][ T9742] tipc: Resetting bearer [ 171.753147][ T9747] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 171.782152][ T9741] tipc: Resetting bearer [ 171.829677][ T9741] tipc: Disabling bearer [ 171.832651][ T9747] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 171.982603][ T9755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.943'. [ 172.037364][ T9755] netlink: 'syz.4.943': attribute type 1 has an invalid length. [ 172.082994][ T9755] bond9: entered promiscuous mode [ 172.088704][ T9755] 8021q: adding VLAN 0 to HW filter on device bond9 [ 172.197171][ T9770] bond9: (slave bridge3): making interface the new active one [ 172.204762][ T9770] bridge3: entered promiscuous mode [ 172.229984][ T9770] bridge3: left promiscuous mode [ 172.297470][ T9774] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 172.303489][ T9774] syzkaller1: linktype set to 825 [ 172.402100][ T9769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.947'. [ 172.754918][ T9797] bond1 (unregistering): Released all slaves [ 172.778321][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'. [ 172.877192][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 172.924772][ T9815] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 172.942619][ T9817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.961'. [ 173.283722][ T9834] netlink: 'syz.3.967': attribute type 1 has an invalid length. [ 173.338968][ T9839] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 173.341149][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 173.365585][ T9842] macvlan0: entered allmulticast mode [ 173.372639][ T9842] hsr0: entered allmulticast mode [ 173.378855][ T9842] hsr_slave_0: entered allmulticast mode [ 173.384726][ T9842] hsr_slave_1: entered allmulticast mode [ 173.595046][ T9858] netlink: 36 bytes leftover after parsing attributes in process `syz.1.974'. [ 173.826576][ T9870] netlink: 'syz.1.978': attribute type 10 has an invalid length. [ 173.843704][ T9870] netlink: 2 bytes leftover after parsing attributes in process `syz.1.978'. [ 173.869634][ T9870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.917894][ T9870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.971172][ T9870] hsr0: entered promiscuous mode [ 173.988562][ T9870] bridge0: port 1(hsr0) entered blocking state [ 173.994866][ T9870] bridge0: port 1(hsr0) entered disabled state [ 174.018118][ T9870] hsr0: entered allmulticast mode [ 174.023352][ T9870] hsr_slave_0: entered allmulticast mode [ 174.040437][ T9870] hsr_slave_1: entered allmulticast mode [ 174.149021][ T9890] wg1: entered promiscuous mode [ 174.154077][ T9890] wg1: entered allmulticast mode [ 174.208655][ T9894] netlink: ct family unspecified [ 174.247245][ T9896] netlink: 'syz.4.985': attribute type 8 has an invalid length. [ 174.847817][ T9926] xt_ipcomp: unknown flags 1D [ 175.057965][ T9936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.082913][ T9914] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 175.111667][ T9939] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 175.257968][ T9950] tap0: tun_chr_ioctl cmd 1074025677 [ 175.263652][ T9950] tap0: linktype set to 772 [ 175.547241][ T9965] tipc: Enabled bearer , priority 0 [ 175.554809][ T9965] syzkaller0: entered promiscuous mode [ 175.561044][ T9965] syzkaller0: entered allmulticast mode [ 175.590514][ T9965] tipc: Resetting bearer [ 175.605758][ T9963] wg1: entered promiscuous mode [ 175.613432][ T9963] wg1: entered allmulticast mode [ 175.626132][ T9964] tipc: Resetting bearer [ 175.656652][ T9964] tipc: Disabling bearer [ 175.677960][ T9970] syzkaller1: entered promiscuous mode [ 175.686917][ T9970] syzkaller1: entered allmulticast mode [ 175.777610][ T9978] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 175.789913][ T9977] bridge0: entered allmulticast mode [ 175.810819][ T9978] lo: Caught tx_queue_len zero misconfig [ 175.816866][ T9978] netem: unknown loss type 4 [ 175.821952][ T9978] netem: change failed [ 176.464350][T10018] netlink: 'syz.0.1025': attribute type 1 has an invalid length. [ 176.480845][T10018] __nla_validate_parse: 3 callbacks suppressed [ 176.480865][T10018] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1025'. [ 176.495360][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'. [ 176.558289][T10020] netlink: 'syz.1.1026': attribute type 5 has an invalid length. [ 176.580702][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1026'. [ 176.595371][T10009] delete_channel: no stack [ 176.675806][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1028'. [ 176.847351][T10039] tipc: Enabled bearer , priority 0 [ 176.854973][T10039] syzkaller0: entered promiscuous mode [ 176.866542][T10039] syzkaller0: entered allmulticast mode [ 176.909092][T10039] tipc: Resetting bearer [ 176.928449][T10041] dvmrp1: entered allmulticast mode [ 176.934180][T10038] tipc: Resetting bearer [ 176.958790][T10038] tipc: Disabling bearer [ 176.970513][T10041] dvmrp1: left allmulticast mode [ 177.396949][T10068] tc_dump_action: action bad kind [ 177.403192][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 177.438822][T10056] netlink: 'syz.1.1034': attribute type 5 has an invalid length. [ 177.599851][T10070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1038'. [ 177.610701][T10070] unsupported nlmsg_type 40 [ 177.773439][T10080] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.433108][T10109] tipc: Enabled bearer , priority 0 [ 178.757427][T10125] netlink: 'syz.2.1057': attribute type 1 has an invalid length. [ 178.774398][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 178.807403][T10125] bond4: entered promiscuous mode [ 178.812845][T10125] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.821492][T10133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1057'. [ 178.975190][T10107] tipc: Resetting bearer [ 179.021632][T10141] xt_bpf: check failed: parse error [ 179.089345][T10106] tipc: Disabling bearer [ 179.198570][T10151] lo speed is unknown, defaulting to 1000 [ 179.258053][T10157] netlink: 'syz.0.1063': attribute type 1 has an invalid length. [ 179.271035][T10157] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1063'. [ 179.554582][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 179.936364][T10151] gre0 speed is unknown, defaulting to 1000 [ 179.938552][T10169] lo speed is unknown, defaulting to 1000 [ 180.036962][T10185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.135663][T10187] netlink: 'syz.1.1071': attribute type 1 has an invalid length. [ 180.143802][T10187] netlink: 'syz.1.1071': attribute type 2 has an invalid length. [ 180.290295][T10193] syzkaller1: entered promiscuous mode [ 180.295910][T10193] syzkaller1: entered allmulticast mode [ 180.368991][T10169] gre0 speed is unknown, defaulting to 1000 [ 181.195188][T10221] tipc: Enabled bearer , priority 0 [ 181.257255][T10221] tipc: Disabling bearer [ 181.421256][T10232] tipc: Enabling of bearer rejected, failed to enable media [ 181.481753][T10237] tipc: Enabling of bearer rejected, failed to enable media [ 181.496830][T10224] lo speed is unknown, defaulting to 1000 [ 181.706433][T10250] __nla_validate_parse: 5 callbacks suppressed [ 181.706490][T10250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1087'. [ 181.755938][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 181.834844][ T1768] block nbd0: Possible stuck request ffff888027000000: control (read@0,1024B). Runtime 30 seconds [ 181.852184][ T1768] block nbd0: Possible stuck request ffff888027000200: control (read@1024,1024B). Runtime 30 seconds [ 181.863658][ T1768] block nbd0: Possible stuck request ffff888027000400: control (read@2048,1024B). Runtime 30 seconds [ 181.874632][ T1768] block nbd0: Possible stuck request ffff888027000600: control (read@3072,1024B). Runtime 30 seconds [ 181.923522][T10259] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1087'. [ 182.110989][T10264] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 182.123505][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1089'. [ 182.199143][T10264] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.266305][T10269] bond4: (slave geneve2): making interface the new active one [ 182.277315][T10269] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 182.294707][ T8889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 182.304183][ T8889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 182.350924][ T8889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 182.367511][ T8889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 182.459330][T10276] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1092'. [ 182.491949][T10276] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1092'. [ 182.527294][T10224] gre0 speed is unknown, defaulting to 1000 [ 182.820007][T10292] syzkaller0: entered promiscuous mode [ 182.835744][T10292] syzkaller0: entered allmulticast mode [ 182.868463][T10292] TC_ACT_REPEAT abuse ? [ 183.296199][T10318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.853686][T10340] netlink: 'syz.3.1114': attribute type 4 has an invalid length. [ 183.874518][T10340] netlink: 'syz.3.1114': attribute type 8 has an invalid length. [ 183.885209][T10340] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1114'. [ 184.194974][T10366] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1119'. [ 184.223564][T10366] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1119'. [ 184.279000][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 184.290437][T10361] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 184.466488][T10379] netlink: 'syz.4.1126': attribute type 1 has an invalid length. [ 184.870464][T10383] bond1: entered promiscuous mode [ 184.875793][T10383] bond1: entered allmulticast mode [ 184.881788][T10383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.930797][T10400] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 185.098353][T10413] netlink: 'syz.4.1134': attribute type 2 has an invalid length. [ 185.106474][T10413] netlink: 'syz.4.1134': attribute type 8 has an invalid length. [ 185.116227][T10407] bridge0: port 1(veth11) entered blocking state [ 185.123256][T10407] bridge0: port 1(veth11) entered disabled state [ 185.132226][T10407] veth11: entered allmulticast mode [ 185.150754][T10407] veth11: entered promiscuous mode [ 185.161721][T10411] wg1: entered promiscuous mode [ 185.168191][T10411] wg1: entered allmulticast mode [ 185.197886][T10414] bridge0: port 2(veth0_to_bond) entered blocking state [ 185.215732][T10414] bridge0: port 2(veth0_to_bond) entered disabled state [ 185.229901][T10414] veth0_to_bond: entered allmulticast mode [ 185.237901][T10414] veth0_to_bond: entered promiscuous mode [ 185.282550][T10407] bridge0: port 3(veth13) entered blocking state [ 185.298388][T10407] bridge0: port 3(veth13) entered disabled state [ 185.307698][T10407] veth13: entered allmulticast mode [ 185.332039][T10407] veth13: entered promiscuous mode [ 185.477546][T10431] netlink: 'syz.2.1143': attribute type 3 has an invalid length. [ 186.576138][T10502] netlink: 'syz.1.1159': attribute type 33 has an invalid length. [ 186.604451][T10502] `: renamed from team0 (while UP) [ 186.737614][T10505] vlan0: entered promiscuous mode [ 186.820197][T10506] ip6erspan1: left allmulticast mode [ 186.836683][T10506] hsr0: left allmulticast mode [ 186.841971][T10510] __nla_validate_parse: 8 callbacks suppressed [ 186.841988][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1162'. [ 186.849857][T10506] hsr_slave_0: left allmulticast mode [ 186.882718][T10506] hsr_slave_1: left allmulticast mode [ 186.898972][T10506] macvlan0: left allmulticast mode [ 186.940648][ T1102] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 186.966907][ T178] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 187.003537][ T178] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 187.054633][ T178] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 187.089197][T10509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.477203][T10533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1168'. [ 187.486211][T10533] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1168'. [ 187.859948][T10554] netlink: 'syz.3.1174': attribute type 58 has an invalid length. [ 187.926822][T10554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1174'. [ 187.978594][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1178'. [ 188.529762][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'. [ 189.105834][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 189.406015][T10621] geneve2: entered promiscuous mode [ 189.412078][T10621] geneve2: entered allmulticast mode [ 189.421071][ T79] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.440271][ T79] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.471549][ T79] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.497601][ T79] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.730393][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'. [ 190.013246][T10641] netlink: 'syz.1.1199': attribute type 10 has an invalid length. [ 190.095477][T10643] xt_hashlimit: size too large, truncated to 1048576 [ 190.187672][T10644] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1200'. [ 190.237523][T10649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1201'. [ 190.382468][T10653] netlink: zone id is out of range [ 190.407028][T10653] netlink: zone id is out of range [ 190.422734][T10653] netlink: zone id is out of range [ 190.439688][T10653] netlink: zone id is out of range [ 190.444842][T10653] netlink: zone id is out of range [ 190.487529][T10656] netlink: 'syz.1.1203': attribute type 20 has an invalid length. [ 190.501570][T10653] netlink: zone id is out of range [ 190.526119][T10653] netlink: zone id is out of range [ 190.537113][T10653] netlink: zone id is out of range [ 190.559835][T10653] netlink: zone id is out of range [ 190.575757][T10653] netlink: zone id is out of range [ 190.908264][T10669] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 190.988987][T10669] netlink: 'syz.2.1207': attribute type 3 has an invalid length. [ 191.220239][T10680] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 191.306367][T10681] syzkaller1: entered promiscuous mode [ 191.317325][T10683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.338731][T10681] syzkaller1: entered allmulticast mode [ 192.287970][T10708] delete_channel: no stack [ 192.355246][T10708] syzkaller0: entered promiscuous mode [ 192.360873][T10708] syzkaller0: entered allmulticast mode [ 192.515959][T10711] __nla_validate_parse: 2 callbacks suppressed [ 192.515981][T10711] netlink: 560 bytes leftover after parsing attributes in process `syz.1.1219'. [ 192.709977][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1221'. [ 192.989893][T10733] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 193.076342][T10733] 8021q: adding VLAN 0 to HW filter on device bond6 [ 193.084002][T10739] lo speed is unknown, defaulting to 1000 [ 193.092529][T10739] lo speed is unknown, defaulting to 1000 [ 193.099983][T10739] lo speed is unknown, defaulting to 1000 [ 193.115136][T10739] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 193.129173][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'. [ 193.133741][T10739] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 193.183288][T10739] lo speed is unknown, defaulting to 1000 [ 193.192405][T10739] lo speed is unknown, defaulting to 1000 [ 193.200524][T10739] lo speed is unknown, defaulting to 1000 [ 193.208240][T10739] lo speed is unknown, defaulting to 1000 [ 193.215924][T10739] lo speed is unknown, defaulting to 1000 [ 193.221467][T10733] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1226'. [ 193.231112][T10741] smc: removing ib device syz0 [ 194.633077][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.953178][T10781] syzkaller0: entered promiscuous mode [ 194.959724][T10781] syzkaller0: entered allmulticast mode [ 195.059027][T10789] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.1241'. [ 195.554453][T10795] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1243'. [ 195.891205][T10729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.039017][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'. [ 196.183843][T10822] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1248'. [ 196.192794][T10824] x_tables: unsorted entry at hook 1 [ 196.218873][T10813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.251459][T10813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.279881][T10813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 196.327371][T10832] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1251'. [ 196.331153][T10836] netlink: 'syz.1.1253': attribute type 62 has an invalid length. [ 196.398177][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1252'. [ 196.444622][T10813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.465678][T10813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.497151][T10813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 196.522007][T10834] 8021q: VLANs not supported on caif0 [ 196.751505][T10853] IPv6: NLM_F_REPLACE set, but no existing node found! [ 197.305453][T10813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.331480][T10813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.344651][T10813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 197.382850][T10849] vlan1: entered promiscuous mode [ 197.407592][T10869] tipc: Enabled bearer , priority 0 [ 197.422748][T10851] syz.4.1257: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 197.460395][T10851] CPU: 1 UID: 0 PID: 10851 Comm: syz.4.1257 Not tainted syzkaller #0 PREEMPT(full) [ 197.460424][T10851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.460438][T10851] Call Trace: [ 197.460447][T10851] [ 197.460456][T10851] dump_stack_lvl+0xe8/0x150 [ 197.460489][T10851] warn_alloc+0x249/0x340 [ 197.460512][T10851] ? stack_trace_save+0xa9/0x100 [ 197.460537][T10851] ? __pfx_warn_alloc+0x10/0x10 [ 197.460566][T10851] ? kasan_save_track+0x4f/0x80 [ 197.460586][T10851] ? kasan_save_track+0x3e/0x80 [ 197.460606][T10851] ? __kasan_kmalloc+0x93/0xb0 [ 197.460626][T10851] ? __kmalloc_cache_noprof+0x31c/0x660 [ 197.460648][T10851] ? xskq_create+0x56/0x170 [ 197.460668][T10851] ? xsk_setsockopt+0x54c/0x990 [ 197.460696][T10851] ? do_sock_setsockopt+0x17c/0x1b0 [ 197.460717][T10851] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 197.460737][T10851] ? do_syscall_64+0x14d/0xf80 [ 197.460762][T10851] __vmalloc_node_range_noprof+0x132/0x1730 [ 197.460813][T10851] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 197.460846][T10851] ? __kasan_kmalloc+0x93/0xb0 [ 197.460876][T10851] vmalloc_user_noprof+0xad/0xe0 [ 197.460898][T10851] ? xskq_create+0xbf/0x170 [ 197.460920][T10851] xskq_create+0xbf/0x170 [ 197.460944][T10851] xsk_init_queue+0x8a/0xe0 [ 197.460967][T10851] xsk_setsockopt+0x54c/0x990 [ 197.460999][T10851] ? __pfx_xsk_setsockopt+0x10/0x10 [ 197.461030][T10851] ? __pfx_aa_sk_perm+0x10/0x10 [ 197.461071][T10851] ? aa_sock_opt_perm+0xff/0x1a0 [ 197.461104][T10851] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 197.461127][T10851] ? __pfx_xsk_setsockopt+0x10/0x10 [ 197.461159][T10851] do_sock_setsockopt+0x17c/0x1b0 [ 197.461188][T10851] __x64_sys_setsockopt+0x13d/0x1b0 [ 197.461218][T10851] do_syscall_64+0x14d/0xf80 [ 197.461240][T10851] ? trace_irq_disable+0x3b/0x150 [ 197.461268][T10851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.461289][T10851] ? clear_bhb_loop+0x40/0x90 [ 197.461313][T10851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.461333][T10851] RIP: 0033:0x7f1adb39c799 [ 197.461352][T10851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.461369][T10851] RSP: 002b:00007f1adc197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 197.461392][T10851] RAX: ffffffffffffffda RBX: 00007f1adb615fa0 RCX: 00007f1adb39c799 [ 197.461407][T10851] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 197.461419][T10851] RBP: 00007f1adb432c99 R08: 0000000000000004 R09: 0000000000000000 [ 197.461432][T10851] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.461444][T10851] R13: 00007f1adb616038 R14: 00007f1adb615fa0 R15: 00007fff31a72ed8 [ 197.461477][T10851] [ 197.461494][T10851] Mem-Info: [ 197.743538][T10851] active_anon:9044 inactive_anon:2876 isolated_anon:0 [ 197.743538][T10851] active_file:2821 inactive_file:40303 isolated_file:0 [ 197.743538][T10851] unevictable:768 dirty:88 writeback:0 [ 197.743538][T10851] slab_reclaimable:11565 slab_unreclaimable:112103 [ 197.743538][T10851] mapped:34646 shmem:4013 pagetables:1485 [ 197.743538][T10851] sec_pagetables:0 bounce:0 [ 197.743538][T10851] kernel_misc_reclaimable:0 [ 197.743538][T10851] free:1301226 free_pcp:18372 free_cma:0 [ 197.790066][T10851] Node 0 active_anon:31876kB inactive_anon:11504kB active_file:11284kB inactive_file:161004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138584kB dirty:352kB writeback:0kB shmem:10316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13760kB pagetables:5752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 197.793486][T10813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.822766][T10851] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 197.822858][T10851] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.822919][T10851] lowmem_reserve[]: 0 2492 [ 197.899324][T10813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.934061][T10813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 197.947380][T10851] 2493 2493 2493 [ 197.951192][T10851] Node 0 DMA32 free:1251236kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25376kB inactive_anon:11504kB active_file:11284kB inactive_file:161004kB unevictable:1536kB writepending:352kB zspages:0kB present:3129332kB managed:2552480kB mlocked:0kB bounce:0kB free_pcp:70600kB local_pcp:22596kB free_cma:0kB [ 197.986885][T10851] lowmem_reserve[]: 0 0 0 0 0 [ 197.994947][T10851] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 198.032684][T10855] __nla_validate_parse: 2 callbacks suppressed [ 198.032703][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1257'. [ 198.034894][T10851] lowmem_reserve[]: 0 0 0 0 0 [ 198.053878][T10851] Node 1 Normal free:3953704kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.101570][T10887] netlink: 'syz.1.1263': attribute type 1 has an invalid length. [ 198.137105][T10851] lowmem_reserve[]: 0 0 0 0 0 [ 198.141896][T10851] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 198.155851][T10851] Node 0 DMA32: 3037*4kB (UME) 2643*8kB (UME) 1294*16kB (UME) 848*32kB (UME) 352*64kB (UME) 188*128kB (UM) 166*256kB (UM) 107*512kB (UME) 146*1024kB (UME) 88*2048kB (UM) 170*4096kB (UM) = 1251052kB [ 198.176202][T10851] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 198.188546][T10851] Node 1 Normal: 0*4kB 5*8kB (UM) 8*16kB (UM) 6*32kB (UM) 7*64kB (UM) 4*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 964*4096kB (M) = 3953704kB [ 198.207786][T10851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.217908][T10851] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.228042][T10851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.238083][T10851] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.248332][T10851] 44488 total pagecache pages [ 198.253143][T10851] 0 pages in swap cache [ 198.257806][T10851] Free swap = 124996kB [ 198.262051][T10851] Total swap = 124996kB [ 198.266270][T10851] 2097051 pages RAM [ 198.270802][T10851] 0 pages HighMem/MovableOnly [ 198.275560][T10851] 427096 pages reserved [ 198.279867][T10851] 0 pages cma reserved [ 198.284550][T10850] tipc: Disabling bearer [ 198.313502][T10887] bond5: entered promiscuous mode [ 198.321247][T10887] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.393606][T10891] bond2: option primary_reselect: invalid value (4) [ 198.403039][T10891] bond2 (unregistering): Released all slaves [ 198.455900][T10895] bond5: (slave bridge7): making interface the new active one [ 198.463650][T10895] bridge7: entered promiscuous mode [ 198.472211][T10895] bridge7: left promiscuous mode [ 198.684633][ T1102] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.733928][ T1102] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 198.756818][ T1102] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.772598][T10916] netlink: 'syz.1.1271': attribute type 1 has an invalid length. [ 198.794847][ T1102] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.806303][ T1102] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 198.815052][ T1102] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.825601][T10917] xfrm0: entered promiscuous mode [ 198.825605][T10916] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1271'. [ 198.833265][T10917] xfrm0: entered allmulticast mode [ 198.900096][T10918] netlink: 'syz.1.1271': attribute type 8 has an invalid length. [ 198.917571][ T178] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.925830][ T178] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 198.943061][ T178] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 199.013414][ T178] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.031428][ T178] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 199.045302][ T178] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 199.055806][T10923] veth0_to_team: Caught tx_queue_len zero misconfig [ 199.175009][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 199.199897][T10934] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1276'. [ 199.327619][T10945] net_ratelimit: 1050 callbacks suppressed [ 199.327639][T10945] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 199.397802][T10948] tipc: Enabled bearer , priority 0 [ 199.432427][T10948] syzkaller0: entered promiscuous mode [ 199.443128][T10948] syzkaller0: entered allmulticast mode [ 199.506106][T10954] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1283'. [ 199.530964][T10948] tipc: Resetting bearer [ 199.569278][T10946] tipc: Resetting bearer [ 199.603013][T10946] tipc: Disabling bearer [ 199.901563][T10979] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1286'. [ 199.903254][T10977] netlink: 'syz.1.1285': attribute type 2 has an invalid length. [ 199.933413][T10977] netlink: 'syz.1.1285': attribute type 2 has an invalid length. [ 200.105323][T10982] syzkaller1: entered promiscuous mode [ 200.128450][T10982] syzkaller1: entered allmulticast mode [ 200.187615][T10986] erspan0: entered promiscuous mode [ 200.215031][T10986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.284450][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1290'. [ 200.319918][T10999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.358464][T10996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 200.965909][T11043] gre0 speed is unknown, defaulting to 1000 [ 201.152003][T11054] syzkaller1: entered promiscuous mode [ 201.164697][T11054] syzkaller1: entered allmulticast mode [ 201.424320][T11043] lo speed is unknown, defaulting to 1000 [ 201.699113][T11086] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1313'. [ 201.718198][T11086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1313'. [ 201.806255][T11086] netlink: 'syz.1.1313': attribute type 1 has an invalid length. [ 201.827558][T11091] netlink: 'syz.3.1316': attribute type 2 has an invalid length. [ 201.841756][T11091] netlink: 'syz.3.1316': attribute type 2 has an invalid length. [ 201.869955][T11091] netlink: 'syz.3.1316': attribute type 2 has an invalid length. [ 201.884725][T11091] netlink: 'syz.3.1316': attribute type 2 has an invalid length. [ 201.914088][T11086] : entered promiscuous mode [ 202.141203][T11103] netlink: 'syz.0.1318': attribute type 13 has an invalid length. [ 202.149757][T11105] netlink: 'syz.1.1319': attribute type 21 has an invalid length. [ 202.150403][T11105] netlink: 'syz.1.1319': attribute type 4 has an invalid length. [ 202.286881][T11113] netlink: 'syz.1.1319': attribute type 1 has an invalid length. [ 202.478206][T11105] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 202.540618][T11105] bond6 (unregistering): Released all slaves [ 203.125004][T11140] __nla_validate_parse: 3 callbacks suppressed [ 203.125024][T11140] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1327'. [ 203.202296][T11140] syzkaller1: entered promiscuous mode [ 203.234489][T11140] syzkaller1: entered allmulticast mode [ 203.248624][T11142] gre0 speed is unknown, defaulting to 1000 [ 203.331808][T11152] sock: sock_timestamping_bind_phc: sock not bind to device [ 203.539714][T11152] bond2 (unregistering): Released all slaves [ 203.644709][T11142] lo speed is unknown, defaulting to 1000 [ 203.705666][T11159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1332'. [ 203.706796][T11160] rdma_op ffff888026a801f0 conn xmit_rdma 0000000000000000 [ 204.242493][T11205] netlink: 'syz.3.1340': attribute type 10 has an invalid length. [ 204.369442][T11211] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 204.639813][T11225] openvswitch: netlink: IP tunnel dst address not specified [ 204.661603][T11220] gre0 speed is unknown, defaulting to 1000 [ 204.702272][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1347'. [ 204.908044][T11220] lo speed is unknown, defaulting to 1000 [ 209.347235][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 211.436919][ T5194] udevd[5194]: worker [5812] /devices/virtual/block/nbd0 is taking a long time [ 211.907263][ T1768] block nbd0: Possible stuck request ffff888027000000: control (read@0,1024B). Runtime 60 seconds [ 211.918002][ T1768] block nbd0: Possible stuck request ffff888027000200: control (read@1024,1024B). Runtime 60 seconds [ 211.928933][ T1768] block nbd0: Possible stuck request ffff888027000400: control (read@2048,1024B). Runtime 60 seconds [ 211.939941][ T1768] block nbd0: Possible stuck request ffff888027000600: control (read@3072,1024B). Runtime 60 seconds [ 232.607161][T11236] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1349'. [ 232.741112][T11244] openvswitch: netlink: Message has 111 unknown bytes. [ 232.778249][T11248] validate_nla: 1 callbacks suppressed [ 232.778267][T11248] netlink: 'syz.1.1356': attribute type 14 has an invalid length. [ 232.994931][T11262] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.006627][T11262] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 233.034751][T11262] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 233.057186][T11265] netlink: 'syz.0.1357': attribute type 1 has an invalid length. [ 233.315133][T11265] bond5: entered promiscuous mode [ 233.320757][T11265] bond5: entered allmulticast mode [ 233.330888][T11265] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.380229][T11270] macvlan1: entered promiscuous mode [ 233.385574][T11270] macvlan1: entered allmulticast mode [ 233.460611][T11270] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 233.592471][T11262] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.602441][T11262] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 233.634552][T11262] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 233.674554][T11280] bridge7: entered allmulticast mode [ 233.760286][T11262] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.796830][T11262] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 233.864060][T11262] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 233.912634][T11294] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1369'. [ 233.929166][T11295] netlink: 'syz.4.1370': attribute type 10 has an invalid length. [ 234.488838][T11262] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.506964][T11262] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 234.526862][T11262] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 234.721906][ T55] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.782715][ T55] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 234.792645][ T55] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 234.837790][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1375'. [ 234.868524][ T55] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.877303][ T55] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 234.886138][ T55] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 234.895372][ T55] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.911848][ T55] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 234.923441][ T55] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 235.047598][ T55] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.066911][ T55] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 235.088038][ T55] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 235.263200][T11324] gretap1: entered promiscuous mode [ 235.269489][T11324] batman_adv: batadv0: Adding interface: gretap1 [ 235.275988][T11324] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 235.300199][T11324] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 235.327817][T11323] syzkaller1: entered promiscuous mode [ 235.333527][T11323] syzkaller1: entered allmulticast mode [ 235.499322][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1379'. [ 235.718056][T11329] gre0 speed is unknown, defaulting to 1000 [ 235.916291][T11329] lo speed is unknown, defaulting to 1000 [ 236.196414][T11335] netlink: 'syz.1.1380': attribute type 32 has an invalid length. [ 236.207467][T11333] netlink: 592 bytes leftover after parsing attributes in process `syz.3.1381'. [ 237.290402][T11346] xt_bpf: check failed: parse error [ 238.348504][T11389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.486215][T11396] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 238.493520][T11396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1397'. [ 238.505742][T11396] netlink: 'syz.3.1397': attribute type 29 has an invalid length. [ 239.210088][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1403'. [ 239.328298][T11424] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 239.523037][T11431] netlink: 'syz.4.1407': attribute type 5 has an invalid length. [ 239.802151][T11440] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1409'. [ 240.048535][T11449] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1413'. [ 240.060436][T11449] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1413'. [ 240.296571][T11464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1417'. [ 240.389963][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1419'. [ 240.460689][T11478] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1422'. [ 240.597794][T11483] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 240.669277][T11487] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1425'. [ 240.818700][T11492] team0: Port device veth5 added [ 240.909151][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'. [ 241.006533][T11512] gre0 speed is unknown, defaulting to 1000 [ 241.015207][T11492] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí [ 241.015207][T11492] 3ìUH†5rºBnœæ [ 241.029284][T11500] syzkaller1: entered promiscuous mode [ 241.034798][T11500] syzkaller1: entered allmulticast mode [ 241.090403][T11517] bond7: option primary_reselect: invalid value (4) [ 241.100132][T11517] bond7 (unregistering): Released all slaves [ 241.352587][T11526] netlink: 'syz.3.1433': attribute type 11 has an invalid length. [ 241.369864][T11512] lo speed is unknown, defaulting to 1000 [ 241.442370][T11531] tipc: Enabling of bearer rejected, failed to enable media [ 241.641009][T11538] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.651022][T11538] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 241.677682][T11538] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 241.852588][T11538] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.862726][T11538] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 241.881732][T11538] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 241.927444][T11546] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 241.967675][T11538] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.979328][T11538] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 241.996981][ T1768] block nbd0: Possible stuck request ffff888027000000: control (read@0,1024B). Runtime 90 seconds [ 242.007186][T11538] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.011307][ T1768] block nbd0: Possible stuck request ffff888027000200: control (read@1024,1024B). Runtime 90 seconds [ 242.030083][ T1768] block nbd0: Possible stuck request ffff888027000400: control (read@2048,1024B). Runtime 90 seconds [ 242.041144][ T1768] block nbd0: Possible stuck request ffff888027000600: control (read@3072,1024B). Runtime 90 seconds [ 242.143790][T11538] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.171316][T11538] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.181948][T11538] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.660812][ T55] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.687827][ T55] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.705823][ T55] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 242.872110][ T1102] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.885473][ T1102] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.905967][ T1102] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 242.916329][ T1102] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.933932][ T1102] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.943144][ T1102] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.138145][ T55] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.150136][ T55] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 243.168706][ T55] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.336593][T11609] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 243.383243][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.401502][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.447997][T11616] netlink: 'syz.3.1455': attribute type 4 has an invalid length. [ 243.649270][T11613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.706352][T11633] netlink: 'syz.4.1460': attribute type 1 has an invalid length. [ 243.719593][T11632] xt_hashlimit: size too large, truncated to 1048576 [ 243.768382][T11633] 8021q: adding VLAN 0 to HW filter on device bond10 [ 243.869426][T11639] bond10: (slave veth7): Enslaving as an active interface with a down link [ 243.922966][T11627] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 243.930460][T11627] bond10: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 244.279128][T11659] netlink: 'syz.2.1465': attribute type 7 has an invalid length. [ 244.289523][T11659] tipc: Enabled bearer , priority 0 [ 244.482093][T11668] __nla_validate_parse: 10 callbacks suppressed [ 244.482116][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'. [ 244.553160][T11671] gre0 speed is unknown, defaulting to 1000 [ 244.575498][T11667] netlink: 3768 bytes leftover after parsing attributes in process `syz.4.1467'. [ 244.616301][T11667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1467'. [ 244.667148][T11667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1467'. [ 245.082601][T11693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1475'. [ 245.148713][T11671] lo speed is unknown, defaulting to 1000 [ 245.158488][T11695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1476'. [ 245.272703][T11698] bond6: option lacp_active: invalid value (8) [ 245.301121][T11701] "syz.0.1477" (11701) uses obsolete ecb(arc4) skcipher [ 245.317463][T11698] bond6 (unregistering): Released all slaves [ 245.426064][ T5886] tipc: Node number set to 1855292201 [ 245.531256][T11711] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1479'. [ 245.630891][T11716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.225925][T11739] netlink: 'syz.1.1487': attribute type 8 has an invalid length. [ 246.234034][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 246.449115][ T29] audit: type=1800 audit(1774477576.388:3): pid=11747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1489" name="memory.events" dev="tmpfs" ino=1650 res=0 errno=0 [ 246.654191][T11769] IPv6: sit1: Disabled Multicast RS [ 246.661768][T11768] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1495'. [ 246.679189][T11768] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1495'. [ 246.681673][T11765] dvmrp0: left allmulticast mode [ 246.768251][T11768] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.775479][T11768] bridge0: port 2(bridge_slave_1) entered listening state [ 246.831165][T11768] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.008087][T11784] netlink: 'syz.3.1497': attribute type 30 has an invalid length. [ 247.120095][T11784] netlink: 'syz.3.1497': attribute type 30 has an invalid length. [ 247.244423][T11797] pim6reg1: entered promiscuous mode [ 247.251598][T11797] pim6reg1: entered allmulticast mode [ 247.259900][T11802] batadv_slave_1: entered promiscuous mode [ 247.266493][T11804] gre0: entered promiscuous mode [ 247.275894][T11804] gre0: entered allmulticast mode [ 247.300958][T11797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.369486][T11797] batman_adv: batadv0: Removing interface: ipvlan2 [ 247.433155][T11797] batadv_slave_1 (unregistering): left promiscuous mode [ 247.444524][T11797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.651506][T11827] xt_ecn: cannot match TCP bits for non-tcp packets [ 247.906063][T11832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.932730][T11832] gre0 speed is unknown, defaulting to 1000 [ 248.133171][T11832] lo speed is unknown, defaulting to 1000 [ 248.133340][T11839] gre0 speed is unknown, defaulting to 1000 [ 248.257454][T11844] bridge3: entered promiscuous mode [ 248.364028][T11846] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 248.428155][T11839] lo speed is unknown, defaulting to 1000 [ 248.443232][T11848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.459214][T11848] GUP no longer grows the stack in syz.3.1514 (11848): 200000003000-20000000a000 (200000001000) [ 248.470709][T11848] CPU: 1 UID: 0 PID: 11848 Comm: syz.3.1514 Not tainted syzkaller #0 PREEMPT(full) [ 248.470737][T11848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.470763][T11848] Call Trace: [ 248.470772][T11848] [ 248.470788][T11848] dump_stack_lvl+0xe8/0x150 [ 248.470824][T11848] __get_user_pages+0x2453/0x29d0 [ 248.470858][T11848] ? __lock_acquire+0x6b5/0x2cf0 [ 248.470902][T11848] ? __gup_longterm_locked+0xc4e/0x1630 [ 248.470932][T11848] ? down_read_killable+0x1bb/0x340 [ 248.470966][T11848] __gup_longterm_locked+0xdcf/0x1630 [ 248.471021][T11848] gup_fast_fallback+0x1d82/0x22e0 [ 248.471082][T11848] ? __pfx_gup_fast_fallback+0x10/0x10 [ 248.471113][T11848] ? is_valid_gup_args+0x11f/0x200 [ 248.471143][T11848] ? get_user_pages_fast+0x4d/0xb0 [ 248.471175][T11848] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 248.471205][T11848] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 248.471231][T11848] iov_iter_get_pages2+0x5e/0xa0 [ 248.471256][T11848] __se_sys_vmsplice+0x7b3/0x1490 [ 248.471303][T11848] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 248.471335][T11848] ? __pfx_futex_wake+0x10/0x10 [ 248.471426][T11848] do_syscall_64+0x14d/0xf80 [ 248.471449][T11848] ? trace_irq_disable+0x3b/0x150 [ 248.471476][T11848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.471495][T11848] ? clear_bhb_loop+0x40/0x90 [ 248.471519][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.471539][T11848] RIP: 0033:0x7f4e9b19c799 [ 248.471559][T11848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.471575][T11848] RSP: 002b:00007f4e9bf8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 248.471596][T11848] RAX: ffffffffffffffda RBX: 00007f4e9b415fa0 RCX: 00007f4e9b19c799 [ 248.471611][T11848] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 248.471623][T11848] RBP: 00007f4e9b232c99 R08: 0000000000000000 R09: 0000000000000000 [ 248.471636][T11848] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 248.471647][T11848] R13: 00007f4e9b416038 R14: 00007f4e9b415fa0 R15: 00007ffcc9395cb8 [ 248.471680][T11848] [ 248.870003][T11852] syzkaller0: entered promiscuous mode [ 248.875489][T11852] syzkaller0: entered allmulticast mode [ 250.431199][T11816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.293595][T11895] openvswitch: netlink: Flow actions attr not present in new flow. [ 251.441769][T11889] bond7: option ad_select: invalid value (34) [ 251.480535][T11889] bond7 (unregistering): Released all slaves [ 251.525037][T11898] __nla_validate_parse: 101 callbacks suppressed [ 251.525057][T11898] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1526'. [ 251.603533][T11898] .70·: renamed from hsr0 (while UP) [ 251.629998][T11898] .70·: entered allmulticast mode [ 251.649015][T11898] hsr_slave_0: entered allmulticast mode [ 251.680024][T11898] hsr_slave_1: entered allmulticast mode [ 251.686257][T11898] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 251.740750][T11902] syzkaller1: entered promiscuous mode [ 251.768623][T11908] bridge0: entered promiscuous mode [ 251.775678][T11908] macsec1: entered promiscuous mode [ 251.778194][T11912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1529'. [ 252.023674][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1536'. [ 252.046574][T11926] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1537'. [ 252.130668][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'. [ 252.160013][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'. [ 252.197011][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'. [ 252.678732][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1547'. [ 252.730538][T11985] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 252.767154][T11985] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 252.777167][T11985] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 252.796196][T11985] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 252.811185][T11985] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 252.828041][T11985] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 252.838882][T11985] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 252.868739][T11985] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 252.879471][T11985] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 252.888700][T11985] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 253.787555][T12031] openvswitch: : Dropping previously announced user features [ 253.863272][T12033] xfrm0: left promiscuous mode [ 253.876898][T12033] xfrm0: left allmulticast mode [ 253.953051][T12033] bond5: left promiscuous mode [ 253.972549][T12033] bond5: left allmulticast mode [ 253.988455][T12045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1565'. [ 254.112107][T12041] syzkaller0: entered promiscuous mode [ 254.134775][T12041] syzkaller0: entered allmulticast mode [ 254.159367][T12047] gre0 speed is unknown, defaulting to 1000 [ 254.978006][T12067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1570'. [ 255.543812][T12047] lo speed is unknown, defaulting to 1000 [ 255.588564][T12066] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 255.611402][T12066] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 255.812664][T12083] tipc: Enabling of bearer rejected, failed to enable media [ 256.072456][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.648414][T12131] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 256.766670][T12137] __nla_validate_parse: 8 callbacks suppressed [ 256.766689][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1583'. [ 256.807912][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1585'. [ 257.080081][T12148] syzkaller0: entered promiscuous mode [ 257.085686][T12148] syzkaller0: entered allmulticast mode [ 257.098410][T12161] tipc: Enabling of bearer rejected, already enabled [ 257.109863][T12155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1587'. [ 257.299028][T12168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.014655][T12192] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.1597'. [ 259.442716][T12164] tipc: Resetting bearer [ 259.450269][T12181] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 259.644101][T12208] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1599'. [ 259.699618][T12208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1599'. [ 259.864852][T12220] validate_nla: 59 callbacks suppressed [ 259.864872][T12220] netlink: 'syz.4.1605': attribute type 1 has an invalid length. [ 259.944988][T12220] 8021q: adding VLAN 0 to HW filter on device bond11 [ 260.031876][T12233] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1605'. [ 260.106406][T12238] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1608'. [ 260.396456][T12226] bond11: (slave veth11): Enslaving as an active interface with a down link [ 260.412883][T12220] bond0: (slave dummy0): Releasing backup interface [ 260.433995][T12220] bond11: (slave dummy0): making interface the new active one [ 260.443533][T12220] dummy0: entered promiscuous mode [ 260.451271][T12220] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 260.523664][T12233] bond11: (slave dummy0): Releasing active interface [ 260.536985][T12233] dummy0 (unregistering): left promiscuous mode [ 260.570695][T12239] syzkaller1: entered promiscuous mode [ 260.578434][T12239] syzkaller1: entered allmulticast mode [ 260.636913][T12224] gre0 speed is unknown, defaulting to 1000 [ 260.836246][T12259] netlink: 'syz.0.1614': attribute type 4 has an invalid length. [ 261.246830][T12224] lo speed is unknown, defaulting to 1000 [ 261.779347][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1626'. [ 261.990194][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1628'. [ 262.015389][T12318] ip6_vti0: Master is either lo or non-ether device [ 262.119645][T12327] netlink: 'syz.4.1631': attribute type 11 has an invalid length. [ 262.129245][T12327] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1631'. [ 262.279565][T12336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1633'. [ 262.293498][T12336] 8021q: VLANs not supported on vcan0 [ 262.414135][T12344] sctp: [Deprecated]: syz.3.1635 (pid 12344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.414135][T12344] Use struct sctp_sack_info instead [ 262.486956][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'. [ 262.578054][T12345] gre0 speed is unknown, defaulting to 1000 [ 262.795738][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'. [ 262.800255][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1641'. [ 263.032389][T12345] lo speed is unknown, defaulting to 1000 [ 263.035503][T12362] gre0 speed is unknown, defaulting to 1000 [ 263.376068][T12362] lo speed is unknown, defaulting to 1000 [ 263.503408][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1646'. [ 263.718271][T12387] syzkaller0: entered promiscuous mode [ 263.725021][T12387] syzkaller0: entered allmulticast mode [ 263.778547][T12387] netlink: 'syz.4.1649': attribute type 13 has an invalid length. [ 263.854547][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1651'. [ 264.039589][T12401] tipc: Enabled bearer , priority 30 [ 264.178981][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1657'. [ 264.318617][T12422] netlink: 'syz.3.1660': attribute type 1 has an invalid length. [ 264.348726][T12419] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 264.409301][T12423] bond3: (slave bridge4): making interface the new active one [ 264.418458][T12423] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 264.763534][T12444] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 264.795978][T12448] netlink: 'syz.3.1667': attribute type 4 has an invalid length. [ 264.803278][T12435] syzkaller1: entered promiscuous mode [ 264.824357][T12435] syzkaller1: entered allmulticast mode [ 265.006839][ T5145] block nbd1: Receive control failed (result -1) [ 265.157245][ T24] tipc: Node number set to 1114983108 [ 265.600102][T12495] netlink: 'syz.1.1677': attribute type 10 has an invalid length. [ 266.587332][ T178] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.621727][ T178] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.638314][ T178] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.660190][ T178] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.750717][ T178] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.796891][ T178] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.805325][ T178] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.835282][ T178] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.904305][T12546] __nla_validate_parse: 12 callbacks suppressed [ 266.904325][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1693'. [ 267.036109][T12556] netlink: 'syz.4.1696': attribute type 21 has an invalid length. [ 267.066239][T12556] openvswitch: netlink: VXLAN extension message has 1327 unknown bytes. [ 267.243376][T12569] xt_hashlimit: size too large, truncated to 1048576 [ 267.411894][T12582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1702'. [ 267.599316][T12582] bond6: entered promiscuous mode [ 267.617608][T12582] 8021q: adding VLAN 0 to HW filter on device bond6 [ 267.623327][T12595] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 267.649782][T12594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1706'. [ 267.689157][T12595] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 267.968397][T12619] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1710'. [ 268.973017][T12680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1724'. [ 269.484220][T12709] netlink: 'syz.4.1728': attribute type 3 has an invalid length. [ 269.681045][T12704] team_slave_0: entered promiscuous mode [ 269.687158][T12704] team_slave_1: entered promiscuous mode [ 269.693101][T12704] veth5: entered promiscuous mode [ 269.720188][T12704] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 269.793785][T12727] xt_HMARK: spi-set and port-set can't be combined [ 269.832455][T12727] xt_hashlimit: size too large, truncated to 1048576 [ 269.913714][T12728] xt_hashlimit: size too large, truncated to 1048576 [ 269.930156][T12728] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 270.206029][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1738'. [ 270.263676][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1735'. [ 270.351386][T12752] netlink: 'syz.3.1740': attribute type 3 has an invalid length. [ 270.384748][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1740'. [ 270.696620][T12760] gre0 speed is unknown, defaulting to 1000 [ 270.766929][T12766] netlink: 'syz.2.1743': attribute type 6 has an invalid length. [ 270.865107][T12771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1744'. [ 271.224150][T12760] lo speed is unknown, defaulting to 1000 [ 271.224168][T12772] gre0 speed is unknown, defaulting to 1000 [ 271.242206][ T10] IPVS: starting estimator thread 0... [ 271.293734][T12784] netlink: 'syz.4.1749': attribute type 39 has an invalid length. [ 271.336810][T12785] IPVS: using max 31 ests per chain, 74400 per kthread [ 271.423846][T12793] netlink: 'syz.2.1750': attribute type 10 has an invalid length. [ 271.442892][T12793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.600982][T12772] lo speed is unknown, defaulting to 1000 [ 272.067070][ T1768] block nbd0: Possible stuck request ffff888027000000: control (read@0,1024B). Runtime 120 seconds [ 272.078641][ T1768] block nbd0: Possible stuck request ffff888027000200: control (read@1024,1024B). Runtime 120 seconds [ 272.093936][ T1768] block nbd0: Possible stuck request ffff888027000400: control (read@2048,1024B). Runtime 120 seconds [ 272.105173][ T1768] block nbd0: Possible stuck request ffff888027000600: control (read@3072,1024B). Runtime 120 seconds [ 272.151627][T12810] netlink: 'syz.3.1754': attribute type 1 has an invalid length. [ 272.245669][T12818] wg1 speed is unknown, defaulting to 1000 [ 272.251742][T12818] wg1 speed is unknown, defaulting to 1000 [ 272.273930][T12817] netlink: 'syz.1.1756': attribute type 13 has an invalid length. [ 272.341191][T12822] netlink: 'syz.0.1759': attribute type 1 has an invalid length. [ 272.354147][T12822] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1759'. [ 272.384053][T12822] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1759'. [ 272.384149][T12818] wg1 speed is unknown, defaulting to 1000 [ 272.400759][T12815] gre0 speed is unknown, defaulting to 1000 [ 272.425197][T12822] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1759'. [ 272.543974][T12834] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1762'. [ 272.560377][T12834] bond0: Caught tx_queue_len zero misconfig [ 272.688220][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1764'. [ 272.711067][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1764'. [ 272.849575][T12815] lo speed is unknown, defaulting to 1000 [ 272.870948][T12818] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 272.993564][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1766'. [ 273.062089][T12818] wg1 speed is unknown, defaulting to 1000 [ 273.069363][T12818] wg1 speed is unknown, defaulting to 1000 [ 273.107365][T12818] wg1 speed is unknown, defaulting to 1000 [ 273.115403][T12818] wg1 speed is unknown, defaulting to 1000 [ 273.159452][T12818] wg1 speed is unknown, defaulting to 1000 [ 273.176298][T12818] wg1 speed is unknown, defaulting to 1000 [ 273.209746][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1766'. [ 273.230885][T12818] wg1 speed is unknown, defaulting to 1000 [ 273.255150][T12866] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 273.557130][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1770'. [ 273.933169][T12874] netlink: 'syz.2.1772': attribute type 1 has an invalid length. [ 274.131067][T12874] 8021q: adding VLAN 0 to HW filter on device bond7 [ 274.184355][T12883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.402707][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1775'. [ 274.488180][T12890] ip6tnl0: Caught tx_queue_len zero misconfig [ 274.688046][T12902] ip6gretap0: left allmulticast mode [ 274.729423][T12901] netlink: 'syz.3.1781': attribute type 14 has an invalid length. [ 275.188553][T12919] netlink: 'syz.2.1784': attribute type 23 has an invalid length. [ 275.650671][T12928] ip6tnl0: Caught tx_queue_len zero misconfig [ 275.784433][T12931] netlink: 'syz.3.1787': attribute type 6 has an invalid length. [ 275.792886][T12931] netlink: 'syz.3.1787': attribute type 5 has an invalid length. [ 275.827589][ T49] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.836595][T12931] netlink: 'syz.3.1787': attribute type 6 has an invalid length. [ 275.853310][ T49] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.867006][T12931] netlink: 'syz.3.1787': attribute type 5 has an invalid length. [ 275.887019][ T49] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.898088][ T49] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.169055][T12942] syzkaller0: entered promiscuous mode [ 276.174585][T12942] syzkaller0: entered allmulticast mode [ 276.192845][T12942] netlink: 'syz.3.1793': attribute type 5 has an invalid length. [ 276.262724][T12944] netlink: 'syz.2.1792': attribute type 2 has an invalid length. [ 276.272638][T12944] netlink: 'syz.2.1792': attribute type 1 has an invalid length. [ 276.642890][T12961] tipc: Enabled bearer , priority 0 [ 276.667546][T12961] syzkaller0: entered promiscuous mode [ 276.673061][T12961] syzkaller0: entered allmulticast mode [ 276.727295][T12961] tipc: Resetting bearer [ 276.777407][T12958] tipc: Resetting bearer [ 276.874557][T12958] tipc: Disabling bearer [ 277.348151][T13003] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.365051][T13003] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 277.379125][T13003] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 277.453199][T13013] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 277.523809][T13003] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.536948][T13003] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 277.573861][T13003] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 277.683995][T13003] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.701836][T13021] netlink: 'syz.4.1814': attribute type 10 has an invalid length. [ 277.712563][T13003] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 277.723965][T13003] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 277.752174][T13022] __nla_validate_parse: 17 callbacks suppressed [ 277.752195][T13022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1813'. [ 277.800409][T13022] netlink: 'syz.0.1813': attribute type 15 has an invalid length. [ 277.826365][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1814'. [ 277.898480][T13003] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.917233][T13003] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 277.942335][T13003] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 277.995723][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1816'. [ 278.098277][T13031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1816'. [ 278.120917][T13031] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 278.139795][T13031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1816'. [ 278.209195][T13031] 8021q: adding VLAN 0 to HW filter on device bond6 [ 278.239372][ T1102] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.250541][ T1102] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 278.260748][ T1102] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 278.310768][ T1102] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.320288][ T1102] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 278.345590][ T1102] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 278.378324][ T1102] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.389803][ T1102] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 278.404809][ T1102] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 278.675171][ T8889] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.711413][ T8889] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 278.745282][ T8889] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 278.800030][T13064] netlink: 'syz.3.1823': attribute type 27 has an invalid length. [ 278.858848][T13064] wg1: left promiscuous mode [ 278.863925][T13064] wg1: left allmulticast mode [ 278.913832][T13064] vlan2: left promiscuous mode [ 278.919959][T13064] geneve1: left promiscuous mode [ 278.925109][T13064] vlan2: left allmulticast mode [ 278.932210][T13064] geneve1: left allmulticast mode [ 278.938504][T13064] bond1: left promiscuous mode [ 278.943996][T13064] bond1: left allmulticast mode [ 279.010728][ T178] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.022204][ T178] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.044277][ T178] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.118027][ T178] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.159251][T13074] xt_CT: No such helper "snmp_trap" [ 279.355177][T13085] gre0 speed is unknown, defaulting to 1000 [ 279.478734][T13100] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20000 [ 279.978428][T13085] lo speed is unknown, defaulting to 1000 [ 279.988909][T13085] wg1 speed is unknown, defaulting to 1000 [ 280.171293][T13126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1836'. [ 280.479376][T13142] netlink: 364 bytes leftover after parsing attributes in process `syz.2.1837'. [ 280.512191][T13149] openvswitch: netlink: Actions may not be safe on all matching packets [ 280.889430][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1846'. [ 280.915940][T13175] validate_nla: 1 callbacks suppressed [ 280.915958][T13175] netlink: 'syz.3.1846': attribute type 14 has an invalid length. [ 280.951095][T13175] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1846'. [ 281.009831][T13186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1847'. [ 281.260347][T13196] netlink: 'syz.3.1851': attribute type 29 has an invalid length. [ 281.280630][T13196] netlink: del zone limit has 8 unknown bytes [ 281.302733][T13196] xt_hashlimit: overflow, try lower: 241/0 [ 281.563382][ T178] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.584859][ T178] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.619329][T13215] syzkaller1: entered promiscuous mode [ 281.635491][T13215] syzkaller1: entered allmulticast mode [ 281.683749][ T178] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.715624][ T178] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.806271][T13227] delete_channel: no stack [ 281.931821][T13251] ieee802154 phy0 wpan0: encryption failed: -90 [ 282.062729][T13261] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 282.172827][T13257] gre0 speed is unknown, defaulting to 1000 [ 282.428512][T13274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.435050][T13257] lo speed is unknown, defaulting to 1000 [ 282.444367][T13257] wg1 speed is unknown, defaulting to 1000 [ 282.536541][T13278] netlink: 'syz.0.1868': attribute type 1 has an invalid length. [ 282.587275][T13277] tipc: Enabled bearer , priority 0 [ 282.596529][T13282] syzkaller0: entered promiscuous mode [ 282.645376][T13282] syzkaller0: entered allmulticast mode [ 282.702703][T13277] tipc: Resetting bearer [ 282.751573][T13275] tipc: Resetting bearer [ 282.838453][T13275] tipc: Disabling bearer [ 283.056671][T13294] netlink: 'syz.0.1873': attribute type 2 has an invalid length. [ 283.067017][T13294] __nla_validate_parse: 8 callbacks suppressed [ 283.067036][T13294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1873'. [ 283.125594][T13303] netlink: 'syz.3.1876': attribute type 4 has an invalid length. [ 283.136097][T13303] netlink: 'syz.3.1876': attribute type 4 has an invalid length. [ 283.443479][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1880'. [ 283.670008][T13337] netlink: 'syz.3.1882': attribute type 49 has an invalid length. [ 283.688202][T13337] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1882'. [ 283.700636][T13340] netlink: 'syz.3.1882': attribute type 49 has an invalid length. [ 298.157740][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.169028][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.179138][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.192225][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.192364][ T5825] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.209222][ T5825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.209223][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.209930][ T5825] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.231849][ T5825] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.239586][ T5825] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.267188][T13375] gre0 speed is unknown, defaulting to 1000 [ 298.382631][T13375] lo speed is unknown, defaulting to 1000 [ 298.382695][T13377] gre0 speed is unknown, defaulting to 1000 [ 298.390392][T13375] wg1 speed is unknown, defaulting to 1000 [ 298.620304][T13375] chnl_net:caif_netlink_parms(): no params data found [ 298.640015][T13377] lo speed is unknown, defaulting to 1000 [ 298.648934][T13377] wg1 speed is unknown, defaulting to 1000 [ 298.680456][ T5821] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.689423][ T5821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.698220][ T5821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.707962][ T5821] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.715502][ T5821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 298.783289][T13375] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.793588][T13375] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.801004][T13375] bridge_slave_0: entered allmulticast mode [ 298.808790][T13375] bridge_slave_0: entered promiscuous mode [ 298.816614][T13375] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.824153][T13375] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.831642][T13375] bridge_slave_1: entered allmulticast mode [ 298.838925][T13375] bridge_slave_1: entered promiscuous mode [ 298.902029][T13375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.913211][T13383] gre0 speed is unknown, defaulting to 1000 [ 298.939298][T13375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.009471][T13375] team0: Port device team_slave_0 added [ 299.035938][T13375] team0: Port device team_slave_1 added [ 299.113740][T13375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.120939][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.149741][T13375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.187746][T13375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.194739][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.224713][T13375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.237379][T13383] lo speed is unknown, defaulting to 1000 [ 299.244685][T13383] wg1 speed is unknown, defaulting to 1000 [ 299.253104][ T5825] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 299.256527][T13377] chnl_net:caif_netlink_parms(): no params data found [ 299.269237][ T5825] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 299.278688][ T5825] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 299.288994][ T5825] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 299.296895][ T5825] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 299.339113][T13375] hsr_slave_0: entered promiscuous mode [ 299.345411][T13375] hsr_slave_1: entered promiscuous mode [ 299.352140][T13375] debugfs: 'hsr0' already exists in 'hsr' [ 299.358172][T13375] Cannot create hsr debugfs directory [ 299.510477][T13377] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.517689][T13377] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.525064][T13377] bridge_slave_0: entered allmulticast mode [ 299.533184][T13377] bridge_slave_0: entered promiscuous mode [ 299.541726][T13377] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.541844][T13392] gre0 speed is unknown, defaulting to 1000 [ 299.549016][T13377] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.562230][T13377] bridge_slave_1: entered allmulticast mode [ 299.570299][T13377] bridge_slave_1: entered promiscuous mode [ 299.698784][T13377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.729499][T13392] lo speed is unknown, defaulting to 1000 [ 299.744896][T13392] wg1 speed is unknown, defaulting to 1000 [ 299.747420][T13377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.827250][T13377] team0: Port device team_slave_0 added [ 299.850943][T13377] team0: Port device team_slave_1 added [ 299.921868][T13377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.929700][T13377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.956097][T13377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.974373][T13377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.982348][T13377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.008668][T13377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.053101][T13383] chnl_net:caif_netlink_parms(): no params data found [ 300.149373][ T5821] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 300.158756][ T5821] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 300.168109][ T5821] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 300.177117][ T5821] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 300.187333][ T5821] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 300.227772][ T5821] Bluetooth: hci5: command tx timeout [ 300.252272][T13377] hsr_slave_0: entered promiscuous mode [ 300.259353][T13377] hsr_slave_1: entered promiscuous mode [ 300.265483][T13377] debugfs: 'hsr0' already exists in 'hsr' [ 300.271414][T13377] Cannot create hsr debugfs directory [ 300.307508][ T5821] Bluetooth: hci6: command tx timeout [ 300.380487][T13383] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.387953][T13383] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.395541][T13383] bridge_slave_0: entered allmulticast mode [ 300.403859][T13383] bridge_slave_0: entered promiscuous mode [ 300.432328][T13383] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.441343][T13383] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.449159][T13383] bridge_slave_1: entered allmulticast mode [ 300.456186][T13383] bridge_slave_1: entered promiscuous mode [ 300.464035][T13402] gre0 speed is unknown, defaulting to 1000 [ 300.529079][T13383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.541700][T13383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.557468][T13392] chnl_net:caif_netlink_parms(): no params data found [ 300.664674][T13383] team0: Port device team_slave_0 added [ 300.696336][T13383] team0: Port device team_slave_1 added [ 300.727851][T13402] lo speed is unknown, defaulting to 1000 [ 300.738310][T13402] wg1 speed is unknown, defaulting to 1000 [ 300.769987][T13383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.777098][T13383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.803479][T13383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.807800][ T5821] Bluetooth: hci7: command tx timeout [ 300.816083][T13383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.826959][T13383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.854207][T13383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.943427][T13383] hsr_slave_0: entered promiscuous mode [ 300.949909][T13383] hsr_slave_1: entered promiscuous mode [ 300.956028][T13383] debugfs: 'hsr0' already exists in 'hsr' [ 300.961879][T13383] Cannot create hsr debugfs directory [ 300.979419][T13392] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.986645][T13392] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.994020][T13392] bridge_slave_0: entered allmulticast mode [ 301.001249][T13392] bridge_slave_0: entered promiscuous mode [ 301.013653][T13392] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.020853][T13392] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.028535][T13392] bridge_slave_1: entered allmulticast mode [ 301.035609][T13392] bridge_slave_1: entered promiscuous mode [ 301.082259][T13392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.116090][T13392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.188792][T13392] team0: Port device team_slave_0 added [ 301.197390][T13392] team0: Port device team_slave_1 added [ 301.239846][T13392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.247089][T13392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.274321][T13392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.298904][T13392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.305870][T13392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.333923][T13392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.347083][ T5821] Bluetooth: hci8: command tx timeout [ 301.472361][T13392] hsr_slave_0: entered promiscuous mode [ 301.479100][T13392] hsr_slave_1: entered promiscuous mode [ 301.485612][T13392] debugfs: 'hsr0' already exists in 'hsr' [ 301.491556][T13392] Cannot create hsr debugfs directory [ 301.570816][T13402] chnl_net:caif_netlink_parms(): no params data found [ 301.734631][T13402] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.742104][T13402] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.749716][T13402] bridge_slave_0: entered allmulticast mode [ 301.756680][T13402] bridge_slave_0: entered promiscuous mode [ 301.764585][T13402] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.772050][T13402] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.779764][T13402] bridge_slave_1: entered allmulticast mode [ 301.787069][T13402] bridge_slave_1: entered promiscuous mode [ 301.827218][T13402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.846609][T13402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.884102][T13402] team0: Port device team_slave_0 added [ 301.901180][T13402] team0: Port device team_slave_1 added [ 301.930817][T13402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.938004][T13402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.964504][T13402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.976439][T13402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.983446][T13402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.009583][T13402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.047946][T13402] hsr_slave_0: entered promiscuous mode [ 302.054313][T13402] hsr_slave_1: entered promiscuous mode [ 302.060595][T13402] debugfs: 'hsr0' already exists in 'hsr' [ 302.066414][T13402] Cannot create hsr debugfs directory [ 302.150188][ T1768] block nbd0: Possible stuck request ffff888027000000: control (read@0,1024B). Runtime 150 seconds [ 302.160962][ T1768] block nbd0: Possible stuck request ffff888027000200: control (read@1024,1024B). Runtime 150 seconds [ 302.171973][ T1768] block nbd0: Possible stuck request ffff888027000400: control (read@2048,1024B). Runtime 150 seconds [ 302.183246][ T1768] block nbd0: Possible stuck request ffff888027000600: control (read@3072,1024B). Runtime 150 seconds [ 302.228227][ T5821] Bluetooth: hci9: command tx timeout [ 302.307179][ T5821] Bluetooth: hci5: command tx timeout [ 302.386944][ T5821] Bluetooth: hci6: command tx timeout [ 302.867226][ T5821] Bluetooth: hci7: command tx timeout [ 303.427123][ T5821] Bluetooth: hci8: command tx timeout [ 304.306907][ T5821] Bluetooth: hci9: command tx timeout [ 304.386991][ T5821] Bluetooth: hci5: command tx timeout [ 304.467058][ T5821] Bluetooth: hci6: command tx timeout [ 304.946999][ T5821] Bluetooth: hci7: command tx timeout [ 305.507029][ T5821] Bluetooth: hci8: command tx timeout [ 306.396952][ T5821] Bluetooth: hci9: command tx timeout [ 306.477752][ T5821] Bluetooth: hci5: command tx timeout [ 306.547153][ T5821] Bluetooth: hci6: command tx timeout [ 307.026951][ T5821] Bluetooth: hci7: command tx timeout [ 307.587057][ T5821] Bluetooth: hci8: command tx timeout [ 308.467059][ T5821] Bluetooth: hci9: command tx timeout [ 317.511209][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.236830][ T1768] block nbd0: Possible stuck request ffff888027000000: control (read@0,1024B). Runtime 180 seconds [ 332.247707][ T1768] block nbd0: Possible stuck request ffff888027000200: control (read@1024,1024B). Runtime 180 seconds [ 332.258779][ T1768] block nbd0: Possible stuck request ffff888027000400: control (read@2048,1024B). Runtime 180 seconds [ 332.269858][ T5194] udevd[5194]: worker [5812] /devices/virtual/block/nbd0 timeout; kill it [ 332.269859][ T1768] block nbd0: Possible stuck request ffff888027000600: control (read@3072,1024B). Runtime 180 seconds [ 332.289870][ T5194] udevd[5194]: seq 14545 '/devices/virtual/block/nbd0' killed [ 358.773451][ T5825] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 358.784603][ T5825] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 358.793446][ T5825] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 358.803221][ T5825] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 358.814453][ T5825] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 358.843862][ T5825] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 358.853867][ T5825] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 358.863867][ T5825] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 358.872136][ T5825] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 358.880260][ T5825] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 358.885142][T13421] gre0 speed is unknown, defaulting to 1000 [ 358.935050][ T5821] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 358.947475][ T5821] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 358.955410][ T5821] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 358.964474][ T5821] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 358.973297][ T5821] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 359.083979][T13423] gre0 speed is unknown, defaulting to 1000 [ 359.083982][T13421] lo speed is unknown, defaulting to 1000 [ 359.085527][T13421] wg1 speed is unknown, defaulting to 1000 [ 359.263881][T13425] gre0 speed is unknown, defaulting to 1000 [ 359.263886][T13423] lo speed is unknown, defaulting to 1000 [ 359.265388][T13423] wg1 speed is unknown, defaulting to 1000 [ 359.346245][T13421] chnl_net:caif_netlink_parms(): no params data found [ 359.518147][T13425] lo speed is unknown, defaulting to 1000 [ 359.543541][T13425] wg1 speed is unknown, defaulting to 1000 [ 359.544532][T13421] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.557032][T13421] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.564292][T13421] bridge_slave_0: entered allmulticast mode [ 359.571836][T13421] bridge_slave_0: entered promiscuous mode [ 359.599631][T13421] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.607008][T13421] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.617106][T13421] bridge_slave_1: entered allmulticast mode [ 359.624758][T13421] bridge_slave_1: entered promiscuous mode [ 359.686408][T13421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.702430][T13423] chnl_net:caif_netlink_parms(): no params data found [ 359.726628][T13421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.850730][ T5821] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 359.859995][ T5821] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 359.868415][ T5821] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 359.878100][ T5821] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 359.883037][T13421] team0: Port device team_slave_0 added [ 359.891618][ T5821] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 359.920765][T13421] team0: Port device team_slave_1 added [ 359.961940][T13421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.969114][T13421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.995798][T13421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.019516][T13423] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.027428][T13423] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.034663][T13423] bridge_slave_0: entered allmulticast mode [ 360.042028][T13423] bridge_slave_0: entered promiscuous mode [ 360.052698][T13423] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.060404][T13423] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.068521][T13423] bridge_slave_1: entered allmulticast mode [ 360.075586][T13423] bridge_slave_1: entered promiscuous mode [ 360.083302][T13421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.090654][T13421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.117557][T13421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.271839][T13423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.281081][T13440] gre0 speed is unknown, defaulting to 1000 [ 360.289274][T13421] hsr_slave_0: entered promiscuous mode [ 360.296425][T13421] hsr_slave_1: entered promiscuous mode [ 360.301185][ T5821] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 360.307641][T13421] debugfs: 'hsr0' already exists in 'hsr' [ 360.314969][T13421] Cannot create hsr debugfs directory [ 360.320029][ T5821] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 360.330177][ T5821] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 360.331276][T13423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.369049][ T5821] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 360.376983][ T5821] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 360.449300][T13423] team0: Port device team_slave_0 added [ 360.491377][T13423] team0: Port device team_slave_1 added [ 360.524470][T13425] chnl_net:caif_netlink_parms(): no params data found [ 360.597542][T13440] lo speed is unknown, defaulting to 1000 [ 360.598514][T13445] gre0 speed is unknown, defaulting to 1000 [ 360.604866][T13440] wg1 speed is unknown, defaulting to 1000 [ 360.616183][T13423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.625824][T13423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.652856][T13423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.665881][T13423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.673143][T13423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.700608][T13423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.829190][T13445] lo speed is unknown, defaulting to 1000 [ 360.860471][T13445] wg1 speed is unknown, defaulting to 1000 [ 360.867150][ T5825] Bluetooth: hci10: command tx timeout [ 360.934624][T13423] hsr_slave_0: entered promiscuous mode [ 360.941180][T13423] hsr_slave_1: entered promiscuous mode [ 360.947062][ T5825] Bluetooth: hci11: command tx timeout [ 360.954088][T13423] debugfs: 'hsr0' already exists in 'hsr' [ 360.960133][T13423] Cannot create hsr debugfs directory [ 360.983735][T13425] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.991008][T13425] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.998843][T13425] bridge_slave_0: entered allmulticast mode [ 361.005862][T13425] bridge_slave_0: entered promiscuous mode [ 361.037351][ T5825] Bluetooth: hci12: command tx timeout [ 361.046550][T13425] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.054047][T13425] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.061788][T13425] bridge_slave_1: entered allmulticast mode [ 361.069561][T13425] bridge_slave_1: entered promiscuous mode [ 361.136604][T13425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.169232][T13425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.260581][T13425] team0: Port device team_slave_0 added [ 361.298993][T13425] team0: Port device team_slave_1 added [ 361.369650][T13425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.376621][T13425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.403898][T13425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.440048][T13425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.447194][T13425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.473718][T13425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.592004][T13425] hsr_slave_0: entered promiscuous mode [ 361.600162][T13425] hsr_slave_1: entered promiscuous mode [ 361.606589][T13425] debugfs: 'hsr0' already exists in 'hsr' [ 361.612443][T13425] Cannot create hsr debugfs directory [ 361.624297][T13440] chnl_net:caif_netlink_parms(): no params data found [ 361.704511][T13445] chnl_net:caif_netlink_parms(): no params data found [ 361.878440][T13440] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.885601][T13440] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.893338][T13440] bridge_slave_0: entered allmulticast mode [ 361.901117][T13440] bridge_slave_0: entered promiscuous mode [ 361.936240][T13440] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.943490][T13440] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.952253][T13440] bridge_slave_1: entered allmulticast mode [ 361.959380][T13440] bridge_slave_1: entered promiscuous mode [ 361.987128][ T5825] Bluetooth: hci13: command tx timeout [ 362.000668][T13445] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.008378][T13445] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.015742][T13445] bridge_slave_0: entered allmulticast mode [ 362.023735][T13445] bridge_slave_0: entered promiscuous mode [ 362.051586][T13440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.063124][T13440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.085617][T13445] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.094090][T13445] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.101687][T13445] bridge_slave_1: entered allmulticast mode [ 362.108993][T13445] bridge_slave_1: entered promiscuous mode [ 362.148491][T13440] team0: Port device team_slave_0 added [ 362.165118][T13440] team0: Port device team_slave_1 added [ 362.174474][T13445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.187618][T13445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.243170][T13440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.250979][T13440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.277463][T13440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.290929][T13445] team0: Port device team_slave_0 added [ 362.297421][T13440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.304408][T13440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.331198][ T1768] block nbd0: Possible stuck request ffff888027000000: control (read@0,1024B). Runtime 210 seconds [ 362.341995][ T1768] block nbd0: Possible stuck request ffff888027000200: control (read@1024,1024B). Runtime 210 seconds [ 362.346826][T13440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.353225][ T1768] block nbd0: Possible stuck request ffff888027000400: control (read@2048,1024B). Runtime 210 seconds [ 362.369061][T13445] team0: Port device team_slave_1 added [ 362.374850][ T1768] block nbd0: Possible stuck request ffff888027000600: control (read@3072,1024B). Runtime 210 seconds [ 362.425161][T13445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.432209][T13445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.458371][T13445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.477867][ T5825] Bluetooth: hci14: command tx timeout [ 362.483883][T13445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.491142][T13445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.517348][T13445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.546306][T13440] hsr_slave_0: entered promiscuous mode [ 362.553521][T13440] hsr_slave_1: entered promiscuous mode [ 362.560164][T13440] debugfs: 'hsr0' already exists in 'hsr' [ 362.565896][T13440] Cannot create hsr debugfs directory [ 362.665400][T13445] hsr_slave_0: entered promiscuous mode [ 362.671905][T13445] hsr_slave_1: entered promiscuous mode [ 362.678724][T13445] debugfs: 'hsr0' already exists in 'hsr' [ 362.684451][T13445] Cannot create hsr debugfs directory [ 362.947537][ T5825] Bluetooth: hci10: command tx timeout [ 363.027087][ T5825] Bluetooth: hci11: command tx timeout [ 363.106880][ T5825] Bluetooth: hci12: command tx timeout [ 364.066993][ T5825] Bluetooth: hci13: command tx timeout [ 364.547420][ T5825] Bluetooth: hci14: command tx timeout [ 365.026916][ T5825] Bluetooth: hci10: command tx timeout [ 365.106912][ T5825] Bluetooth: hci11: command tx timeout [ 365.187166][ T5825] Bluetooth: hci12: command tx timeout [ 366.147299][ T5825] Bluetooth: hci13: command tx timeout [ 366.627131][ T5825] Bluetooth: hci14: command tx timeout [ 367.107233][ T5825] Bluetooth: hci10: command tx timeout [ 367.186964][ T5825] Bluetooth: hci11: command tx timeout [ 367.266910][ T5825] Bluetooth: hci12: command tx timeout [ 368.227080][ T5825] Bluetooth: hci13: command tx timeout [ 368.707731][ T5825] Bluetooth: hci14: command tx timeout [ 378.949775][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.406829][ T1768] block nbd0: Possible stuck request ffff888027000000: control (read@0,1024B). Runtime 240 seconds [ 392.417954][ T1768] block nbd0: Possible stuck request ffff888027000200: control (read@1024,1024B). Runtime 240 seconds [ 392.429037][ T1768] block nbd0: Possible stuck request ffff888027000400: control (read@2048,1024B). Runtime 240 seconds [ 392.440138][ T1768] block nbd0: Possible stuck request ffff888027000600: control (read@3072,1024B). Runtime 240 seconds [ 418.839099][ T5821] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 418.849390][ T5821] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 418.857942][ T5821] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 418.880980][ T5821] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 418.888890][ T5821] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 418.938699][T13466] gre0 speed is unknown, defaulting to 1000 [ 418.981278][ T5821] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 418.990655][ T5821] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 418.999569][ T5821] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 419.010776][ T5821] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 419.018457][ T5821] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 419.026254][T13472] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 419.036325][ T5825] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 419.044648][ T5825] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 419.054417][ T5825] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 419.065499][ T5825] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 419.183278][T13468] gre0 speed is unknown, defaulting to 1000 [ 419.183278][T13466] lo speed is unknown, defaulting to 1000 [ 419.184818][T13466] wg1 speed is unknown, defaulting to 1000 [ 419.383233][T13466] chnl_net:caif_netlink_parms(): no params data found [ 419.398312][T13468] lo speed is unknown, defaulting to 1000 [ 419.414972][T13470] gre0 speed is unknown, defaulting to 1000 [ 419.434672][T13468] wg1 speed is unknown, defaulting to 1000 [ 419.582458][T13466] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.590198][T13466] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.597543][T13466] bridge_slave_0: entered allmulticast mode [ 419.604710][T13466] bridge_slave_0: entered promiscuous mode [ 419.618093][T13470] lo speed is unknown, defaulting to 1000 [ 419.629361][T13466] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.636531][T13466] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.644578][T13466] bridge_slave_1: entered allmulticast mode [ 419.651948][T13466] bridge_slave_1: entered promiscuous mode [ 419.659362][T13470] wg1 speed is unknown, defaulting to 1000 [ 419.723319][T13466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.745715][T13466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.795469][T13466] team0: Port device team_slave_0 added [ 419.805847][T13466] team0: Port device team_slave_1 added [ 419.895577][T13466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.904880][T13466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.941651][T13466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.955220][T13466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.963078][T13466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.991138][T13466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.000802][T13484] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 420.012319][T13484] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 420.020904][T13484] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 420.021345][T13468] chnl_net:caif_netlink_parms(): no params data found [ 420.029190][T13484] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 420.043356][T13484] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 420.153474][T13466] hsr_slave_0: entered promiscuous mode [ 420.160373][T13466] hsr_slave_1: entered promiscuous mode [ 420.166541][T13466] debugfs: 'hsr0' already exists in 'hsr' [ 420.172611][T13466] Cannot create hsr debugfs directory [ 420.299932][T13486] gre0 speed is unknown, defaulting to 1000 [ 420.300192][T13470] chnl_net:caif_netlink_parms(): no params data found [ 420.337742][T13468] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.346098][T13468] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.354570][T13468] bridge_slave_0: entered allmulticast mode [ 420.362679][T13468] bridge_slave_0: entered promiscuous mode [ 420.399789][T13468] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.407429][T13468] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.414752][T13468] bridge_slave_1: entered allmulticast mode [ 420.423368][T13468] bridge_slave_1: entered promiscuous mode [ 420.525088][T13486] lo speed is unknown, defaulting to 1000 [ 420.554430][T13486] wg1 speed is unknown, defaulting to 1000 [ 420.558610][T13468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.595390][T13468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.676543][T13470] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.684140][T13470] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.691720][T13470] bridge_slave_0: entered allmulticast mode [ 420.699772][T13470] bridge_slave_0: entered promiscuous mode [ 420.731561][T13468] team0: Port device team_slave_0 added [ 420.737735][T13470] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.744896][T13470] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.752994][T13470] bridge_slave_1: entered allmulticast mode [ 420.761276][T13470] bridge_slave_1: entered promiscuous mode [ 420.800602][T13468] team0: Port device team_slave_1 added [ 420.880972][T13470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.896629][T13468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.904887][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.918948][T13485] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 420.941444][T13468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.943580][T13485] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 420.961120][T13485] Bluetooth: hci15: command tx timeout [ 420.967783][T13485] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 420.968417][T13470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.976230][T13485] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 420.985313][T13468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.992553][T13485] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 420.999674][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.032411][T13468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.107353][T13484] Bluetooth: hci17: command tx timeout [ 421.113602][T13485] Bluetooth: hci16: command tx timeout [ 421.124338][T13470] team0: Port device team_slave_0 added [ 421.132408][T13470] team0: Port device team_slave_1 added [ 421.199214][T13470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.206196][T13470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.233359][T13470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.258074][T13470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.265061][T13470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.291781][T13470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.308855][T13468] hsr_slave_0: entered promiscuous mode [ 421.315392][T13468] hsr_slave_1: entered promiscuous mode [ 421.323166][T13468] debugfs: 'hsr0' already exists in 'hsr' [ 421.329099][T13468] Cannot create hsr debugfs directory [ 421.339887][T13498] gre0 speed is unknown, defaulting to 1000 [ 421.340269][T13486] chnl_net:caif_netlink_parms(): no params data found [ 421.474639][T13470] hsr_slave_0: entered promiscuous mode [ 421.482771][T13470] hsr_slave_1: entered promiscuous mode [ 421.489858][T13470] debugfs: 'hsr0' already exists in 'hsr' [ 421.495605][T13470] Cannot create hsr debugfs directory [ 421.571166][T13498] lo speed is unknown, defaulting to 1000 [ 421.603337][T13498] wg1 speed is unknown, defaulting to 1000 [ 421.697362][T13486] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.705823][T13486] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.713464][T13486] bridge_slave_0: entered allmulticast mode [ 421.720701][T13486] bridge_slave_0: entered promiscuous mode [ 421.760801][T13486] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.768529][T13486] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.776010][T13486] bridge_slave_1: entered allmulticast mode [ 421.783457][T13486] bridge_slave_1: entered promiscuous mode [ 421.864654][T13486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.901730][T13486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.987331][T13484] Bluetooth: hci8: command 0x0406 tx timeout [ 421.987697][T13500] Bluetooth: hci6: command 0x0406 tx timeout [ 421.993407][T13484] Bluetooth: hci5: command 0x0406 tx timeout [ 422.006054][T13485] Bluetooth: hci7: command 0x0406 tx timeout [ 422.046490][T13486] team0: Port device team_slave_0 added [ 422.067806][ T5821] Bluetooth: hci18: command tx timeout [ 422.082203][T13486] team0: Port device team_slave_1 added [ 422.154675][T13486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.161691][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.187765][T13486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.207399][T13486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.214370][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.240893][T13486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.261736][T13498] chnl_net:caif_netlink_parms(): no params data found [ 422.365078][T13486] hsr_slave_0: entered promiscuous mode [ 422.372527][T13486] hsr_slave_1: entered promiscuous mode [ 422.378949][T13486] debugfs: 'hsr0' already exists in 'hsr' [ 422.384676][T13486] Cannot create hsr debugfs directory [ 422.405570][T13498] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.413133][T13498] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.420811][T13498] bridge_slave_0: entered allmulticast mode [ 422.428545][T13498] bridge_slave_0: entered promiscuous mode [ 422.436389][T13498] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.443931][T13498] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.451423][T13498] bridge_slave_1: entered allmulticast mode [ 422.461201][T13498] bridge_slave_1: entered promiscuous mode [ 422.467947][ T1768] block nbd0: Possible stuck request ffff888027000000: control (read@0,1024B). Runtime 270 seconds [ 422.478869][ T1768] block nbd0: Possible stuck request ffff888027000200: control (read@1024,1024B). Runtime 270 seconds [ 422.490234][ T1768] block nbd0: Possible stuck request ffff888027000400: control (read@2048,1024B). Runtime 270 seconds [ 422.501300][ T1768] block nbd0: Possible stuck request ffff888027000600: control (read@3072,1024B). Runtime 270 seconds [ 422.580063][T13498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.593453][T13498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.656534][T13498] team0: Port device team_slave_0 added [ 422.664548][T13498] team0: Port device team_slave_1 added [ 422.725393][T13498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.732412][T13498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.758422][T13498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.776619][T13498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.783741][T13498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.811869][T13498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.871967][T13498] hsr_slave_0: entered promiscuous mode [ 422.878411][T13498] hsr_slave_1: entered promiscuous mode [ 422.884528][T13498] debugfs: 'hsr0' already exists in 'hsr' [ 422.892240][T13498] Cannot create hsr debugfs directory [ 423.030578][T13472] Bluetooth: hci15: command tx timeout [ 423.036854][ T5821] Bluetooth: hci19: command tx timeout [ 423.187128][T13472] Bluetooth: hci17: command tx timeout [ 423.192704][ T5821] Bluetooth: hci16: command tx timeout [ 424.147317][ T5821] Bluetooth: hci18: command tx timeout [ 425.107012][ T5825] Bluetooth: hci15: command tx timeout [ 425.112567][ T5821] Bluetooth: hci19: command tx timeout [ 425.267059][ T5825] Bluetooth: hci17: command tx timeout [ 425.272627][ T5821] Bluetooth: hci16: command tx timeout [ 426.227405][ T5821] Bluetooth: hci18: command tx timeout [ 427.109393][ T5821] Bluetooth: hci9: command 0x0406 tx timeout [ 427.187159][T13472] Bluetooth: hci19: command tx timeout [ 427.187191][ T5821] Bluetooth: hci15: command tx timeout [ 427.347336][ T5821] Bluetooth: hci17: command tx timeout [ 427.356852][ T5821] Bluetooth: hci16: command tx timeout [ 428.307379][ T5821] Bluetooth: hci18: command tx timeout [ 429.267113][ T5821] Bluetooth: hci19: command tx timeout [ 440.387307][ T30] INFO: task dhcpcd:5488 blocked for more than 143 seconds. [ 440.391091][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.394724][ T30] Not tainted syzkaller #0 [ 440.407700][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 440.416389][ T30] task:dhcpcd state:D stack:23464 pid:5488 tgid:5488 ppid:1 task_flags:0x400140 flags:0x00080000 [ 440.428828][ T30] Call Trace: [ 440.432124][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 440.435070][ T30] __schedule+0x15dd/0x52d0 [ 440.440223][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 440.445216][ T30] ? __pfx___schedule+0x10/0x10 [ 440.461187][ T30] ? schedule+0x90/0x360 [ 440.465487][ T30] schedule+0x164/0x360 [ 440.516787][ T30] schedule_preempt_disabled+0x13/0x30 [ 440.522309][ T30] __mutex_lock+0x7fe/0x1300 [ 440.531247][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 440.536493][ T30] ? __mutex_lock+0x5ac/0x1300 [ 440.541869][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 440.546565][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 440.551806][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 440.556996][ T30] ? radix_tree_lookup+0x240/0x290 [ 440.562132][ T30] genl_rcv_msg+0x10b/0x7a0 [ 440.566656][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.571798][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 440.576833][ T30] netlink_rcv_skb+0x232/0x4b0 [ 440.581630][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.586641][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.592467][ T30] ? down_read+0x272/0x2e0 [ 440.596997][ T30] ? genl_rcv+0xd/0x40 [ 440.601079][ T30] genl_rcv+0x28/0x40 [ 440.605078][ T30] netlink_unicast+0x80f/0x9b0 [ 440.610394][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 440.615707][ T30] ? netlink_sendmsg+0x650/0xb40 [ 440.620677][ T30] ? skb_put+0x11b/0x210 [ 440.624927][ T30] netlink_sendmsg+0x813/0xb40 [ 440.629857][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.635164][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 440.640609][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.645911][ T30] ____sys_sendmsg+0x972/0x9f0 [ 440.651069][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.656377][ T30] ? import_iovec+0x73/0xa0 [ 440.661163][ T30] ___sys_sendmsg+0x2a5/0x360 [ 440.665862][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.671327][ T30] ? __rtnl_unlock+0xc8/0xf0 [ 440.675926][ T30] ? __seccomp_filter+0x3e9/0x1ef0 [ 440.681236][ T30] ? __pfx___seccomp_filter+0x10/0x10 [ 440.686635][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 440.691732][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.697612][ T30] ? __secure_computing+0xe1/0x2a0 [ 440.702741][ T30] do_syscall_64+0x14d/0xf80 [ 440.707697][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.713779][ T30] ? clear_bhb_loop+0x40/0x90 [ 440.718689][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.724604][ T30] RIP: 0033:0x7f8a59901407 [ 440.729424][ T30] RSP: 002b:00007ffdbd2d3240 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 440.737951][ T30] RAX: ffffffffffffffda RBX: 00007f8a59877780 RCX: 00007f8a59901407 [ 440.745930][ T30] RDX: 0000000000000000 RSI: 00007ffdbd2d32c0 RDI: 000000000000000e [ 440.753991][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 440.762367][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b29d86fe10 [ 440.770537][ T30] R13: 000000000000000e R14: 00007ffdbd2e7780 R15: 000055b2c481ecb0 [ 440.778575][ T30] [ 440.781669][ T30] INFO: task syz.0.1873:13291 blocked for more than 143 seconds. [ 440.790047][ T30] Not tainted syzkaller #0 [ 440.794991][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 440.803764][ T30] task:syz.0.1873 state:D stack:26240 pid:13291 tgid:13290 ppid:5828 task_flags:0x480140 flags:0x00080002 [ 440.815809][ T30] Call Trace: [ 440.819424][ T30] [ 440.822362][ T30] __schedule+0x15dd/0x52d0 [ 440.827024][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 440.831982][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 440.837083][ T30] ? __pfx___schedule+0x10/0x10 [ 440.841951][ T30] ? schedule+0x90/0x360 [ 440.846181][ T30] schedule+0x164/0x360 [ 440.850664][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 440.856216][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 440.862337][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 440.868671][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 440.874842][ T30] nbd_set_size+0x454/0x680 [ 440.879692][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 440.884745][ T30] ? nla_memcpy+0x5b/0xc0 [ 440.889168][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 440.894469][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 440.900272][ T30] ? rcu_is_watching+0x15/0xb0 [ 440.905047][ T30] ? trace_kmalloc+0x2a/0x110 [ 440.910009][ T30] ? __nla_parse+0x40/0x60 [ 440.914419][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 440.920855][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 440.927273][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 440.932829][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 440.939324][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 440.944290][ T30] genl_rcv_msg+0x61c/0x7a0 [ 440.949042][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.954082][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 440.959874][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 440.964827][ T30] netlink_rcv_skb+0x232/0x4b0 [ 440.969944][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.974964][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.980506][ T30] ? down_read+0x272/0x2e0 [ 440.984940][ T30] ? genl_rcv+0xd/0x40 [ 440.989141][ T30] genl_rcv+0x28/0x40 [ 440.993135][ T30] netlink_unicast+0x80f/0x9b0 [ 440.998178][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 441.003465][ T30] ? netlink_sendmsg+0x650/0xb40 [ 441.008527][ T30] ? skb_put+0x11b/0x210 [ 441.012806][ T30] netlink_sendmsg+0x813/0xb40 [ 441.017666][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.022959][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 441.028391][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.033712][ T30] ____sys_sendmsg+0x972/0x9f0 [ 441.038606][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.043917][ T30] ? import_iovec+0x73/0xa0 [ 441.048554][ T30] ___sys_sendmsg+0x2a5/0x360 [ 441.053246][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.058775][ T30] ? futex_wake+0x4ac/0x580 [ 441.063329][ T30] ? __fget_files+0x2a/0x420 [ 441.068150][ T30] ? __fget_files+0x3a0/0x420 [ 441.072850][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 441.077871][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.083340][ T30] ? rcu_is_watching+0x15/0xb0 [ 441.088525][ T30] do_syscall_64+0x14d/0xf80 [ 441.093117][ T30] ? trace_irq_disable+0x3b/0x150 [ 441.098242][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.104321][ T30] ? clear_bhb_loop+0x40/0x90 [ 441.109159][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.115062][ T30] RIP: 0033:0x7f07c859c799 [ 441.119757][ T30] RSP: 002b:00007f07c9520028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.128295][ T30] RAX: ffffffffffffffda RBX: 00007f07c8815fa0 RCX: 00007f07c859c799 [ 441.136303][ T30] RDX: 0000000000008000 RSI: 00002000000003c0 RDI: 0000000000000007 [ 441.144384][ T30] RBP: 00007f07c8632c99 R08: 0000000000000000 R09: 0000000000000000 [ 441.152639][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.160749][ T30] R13: 00007f07c8816038 R14: 00007f07c8815fa0 R15: 00007ffd1fa49088 [ 441.168799][ T30] [ 441.171908][ T30] INFO: task syz.4.1875:13304 blocked for more than 144 seconds. [ 441.179995][ T30] Not tainted syzkaller #0 [ 441.184939][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 441.193905][ T30] task:syz.4.1875 state:D stack:26896 pid:13304 tgid:13300 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 441.206138][ T30] Call Trace: [ 441.209899][ T30] [ 441.212835][ T30] __schedule+0x15dd/0x52d0 [ 441.217431][ T30] ? __pfx___schedule+0x10/0x10 [ 441.222297][ T30] ? schedule+0x90/0x360 [ 441.226531][ T30] schedule+0x164/0x360 [ 441.230752][ T30] schedule_preempt_disabled+0x13/0x30 [ 441.236218][ T30] __mutex_lock+0x7fe/0x1300 [ 441.241104][ T30] ? __mutex_lock+0x5ac/0x1300 [ 441.245957][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 441.250700][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 441.255749][ T30] ? __dev_queue_xmit+0x28b/0x3870 [ 441.260948][ T30] ? radix_tree_lookup+0x240/0x290 [ 441.266069][ T30] genl_rcv_msg+0x10b/0x7a0 [ 441.273307][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.278433][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 441.283400][ T30] netlink_rcv_skb+0x232/0x4b0 [ 441.288213][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.293246][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.298806][ T30] ? down_read+0x272/0x2e0 [ 441.303240][ T30] ? genl_rcv+0xd/0x40 [ 441.307562][ T30] genl_rcv+0x28/0x40 [ 441.311555][ T30] netlink_unicast+0x80f/0x9b0 [ 441.316323][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 441.321720][ T30] ? netlink_sendmsg+0x650/0xb40 [ 441.326661][ T30] ? skb_put+0x11b/0x210 [ 441.331216][ T30] netlink_sendmsg+0x813/0xb40 [ 441.336010][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.341421][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 441.346377][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.351847][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.357458][ T30] __sys_sendto+0x672/0x710 [ 441.361959][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 441.367063][ T30] ? exc_page_fault+0x6a/0xc0 [ 441.371749][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 441.377173][ T30] __x64_sys_sendto+0xde/0x100 [ 441.381969][ T30] do_syscall_64+0x14d/0xf80 [ 441.386560][ T30] ? trace_irq_disable+0x3b/0x150 [ 441.391910][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.398041][ T30] ? clear_bhb_loop+0x40/0x90 [ 441.402709][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.408636][ T30] RIP: 0033:0x7f1adb35cfce [ 441.413051][ T30] RSP: 002b:00007f1adc195e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 441.421851][ T30] RAX: ffffffffffffffda RBX: 00007f1adc1976c0 RCX: 00007f1adb35cfce [ 441.430028][ T30] RDX: 0000000000000020 RSI: 00007f1adc196000 RDI: 0000000000000004 [ 441.438062][ T30] RBP: 0000000000000000 R08: 00007f1adc195f04 R09: 000000000000000c [ 441.446022][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 441.454278][ T30] R13: 00007f1adc195f58 R14: 00007f1adc196000 R15: 0000000000000000 [ 441.462348][ T30] [ 441.465400][ T30] INFO: task syz.2.1878:13329 blocked for more than 144 seconds. [ 441.475704][ T30] Not tainted syzkaller #0 [ 441.483064][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 441.491868][ T30] task:syz.2.1878 state:D stack:27880 pid:13329 tgid:13315 ppid:5819 task_flags:0x400040 flags:0x00080002 [ 441.503894][ T30] Call Trace: [ 441.507617][ T30] [ 441.510594][ T30] __schedule+0x15dd/0x52d0 [ 441.515124][ T30] ? __pfx___schedule+0x10/0x10 [ 441.520074][ T30] ? schedule+0x90/0x360 [ 441.524334][ T30] schedule+0x164/0x360 [ 441.528729][ T30] schedule_preempt_disabled+0x13/0x30 [ 441.534195][ T30] __mutex_lock+0x7fe/0x1300 [ 441.539152][ T30] ? __mutex_lock+0x5ac/0x1300 [ 441.543918][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 441.548665][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 441.553702][ T30] ? __dev_queue_xmit+0x28b/0x3870 [ 441.558884][ T30] ? radix_tree_lookup+0x240/0x290 [ 441.564001][ T30] genl_rcv_msg+0x10b/0x7a0 [ 441.568784][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.573811][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 441.578830][ T30] netlink_rcv_skb+0x232/0x4b0 [ 441.583598][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.588842][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.594161][ T30] ? down_read+0x272/0x2e0 [ 441.598963][ T30] ? genl_rcv+0xd/0x40 [ 441.603053][ T30] genl_rcv+0x28/0x40 [ 441.607110][ T30] netlink_unicast+0x80f/0x9b0 [ 441.611891][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 441.617243][ T30] ? netlink_sendmsg+0x650/0xb40 [ 441.622182][ T30] ? skb_put+0x11b/0x210 [ 441.626412][ T30] netlink_sendmsg+0x813/0xb40 [ 441.631470][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.636992][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 441.641953][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.647358][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.652645][ T30] __sys_sendto+0x672/0x710 [ 441.657477][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 441.662526][ T30] ? exc_page_fault+0x6a/0xc0 [ 441.667456][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 441.672762][ T30] __x64_sys_sendto+0xde/0x100 [ 441.677610][ T30] do_syscall_64+0x14d/0xf80 [ 441.682214][ T30] ? trace_irq_disable+0x3b/0x150 [ 441.687533][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.693695][ T30] ? clear_bhb_loop+0x40/0x90 [ 441.698452][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.704350][ T30] RIP: 0033:0x7f9b6095cfce [ 441.709000][ T30] RSP: 002b:00007f9b618a6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 441.717699][ T30] RAX: ffffffffffffffda RBX: 00007f9b618a86c0 RCX: 00007f9b6095cfce [ 441.725660][ T30] RDX: 0000000000000028 RSI: 00007f9b618a7000 RDI: 0000000000000005 [ 441.733737][ T30] RBP: 0000000000000000 R08: 00007f9b618a6f04 R09: 000000000000000c [ 441.741776][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 441.750182][ T30] R13: 00007f9b618a6f58 R14: 00007f9b618a7000 R15: 0000000000000000 [ 441.758288][ T30] [ 441.761334][ T30] INFO: task syz.2.1878:13332 blocked for more than 144 seconds. [ 441.769138][ T30] Not tainted syzkaller #0 [ 441.774069][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 441.783016][ T30] task:syz.2.1878 state:D stack:27880 pid:13332 tgid:13315 ppid:5819 task_flags:0x400040 flags:0x00080002 [ 441.795023][ T30] Call Trace: [ 441.798360][ T30] [ 441.801283][ T30] __schedule+0x15dd/0x52d0 [ 441.805788][ T30] ? __pfx___schedule+0x10/0x10 [ 441.810908][ T30] ? schedule+0x90/0x360 [ 441.815162][ T30] schedule+0x164/0x360 [ 441.819468][ T30] schedule_preempt_disabled+0x13/0x30 [ 441.824932][ T30] __mutex_lock+0x7fe/0x1300 [ 441.829745][ T30] ? __mutex_lock+0x5ac/0x1300 [ 441.834527][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 441.839587][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 441.844654][ T30] ? __dev_queue_xmit+0x28b/0x3870 [ 441.849860][ T30] ? radix_tree_lookup+0x240/0x290 [ 441.854974][ T30] genl_rcv_msg+0x10b/0x7a0 [ 441.859717][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.864784][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 441.870114][ T30] netlink_rcv_skb+0x232/0x4b0 [ 441.874904][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.879999][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.885307][ T30] ? down_read+0x272/0x2e0 [ 441.889794][ T30] ? genl_rcv+0xd/0x40 [ 441.893870][ T30] genl_rcv+0x28/0x40 [ 441.898136][ T30] netlink_unicast+0x80f/0x9b0 [ 441.902904][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 441.908370][ T30] ? netlink_sendmsg+0x650/0xb40 [ 441.913320][ T30] ? skb_put+0x11b/0x210 [ 441.917642][ T30] netlink_sendmsg+0x813/0xb40 [ 441.922422][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.928077][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 441.933038][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.938370][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.943667][ T30] __sys_sendto+0x672/0x710 [ 441.948225][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 441.953267][ T30] ? exc_page_fault+0x6a/0xc0 [ 441.958222][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 441.963525][ T30] __x64_sys_sendto+0xde/0x100 [ 441.968570][ T30] do_syscall_64+0x14d/0xf80 [ 441.973185][ T30] ? trace_irq_disable+0x3b/0x150 [ 441.978355][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.984435][ T30] ? clear_bhb_loop+0x40/0x90 [ 441.989511][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.995428][ T30] RIP: 0033:0x7f9b6095cfce [ 441.999889][ T30] RSP: 002b:00007f9b61885e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 442.008469][ T30] RAX: ffffffffffffffda RBX: 00007f9b618876c0 RCX: 00007f9b6095cfce [ 442.016450][ T30] RDX: 0000000000000028 RSI: 00007f9b61886000 RDI: 0000000000000005 [ 442.024738][ T30] RBP: 0000000000000000 R08: 00007f9b61885f04 R09: 000000000000000c [ 442.032776][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 442.040871][ T30] R13: 00007f9b61885f58 R14: 00007f9b61886000 R15: 0000000000000000 [ 442.049033][ T30] [ 442.052061][ T30] INFO: task syz.3.1885:13349 blocked for more than 145 seconds. [ 442.059844][ T30] Not tainted syzkaller #0 [ 442.064771][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 442.073572][ T30] task:syz.3.1885 state:D stack:26464 pid:13349 tgid:13348 ppid:5823 task_flags:0x400140 flags:0x00080002 [ 442.085800][ T30] Call Trace: [ 442.089186][ T30] [ 442.092120][ T30] __schedule+0x15dd/0x52d0 [ 442.096618][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 442.101630][ T30] ? __pfx___schedule+0x10/0x10 [ 442.106489][ T30] ? schedule+0x90/0x360 [ 442.111032][ T30] schedule+0x164/0x360 [ 442.115223][ T30] schedule_preempt_disabled+0x13/0x30 [ 442.120798][ T30] __mutex_lock+0x7fe/0x1300 [ 442.125413][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 442.130695][ T30] ? __mutex_lock+0x5ac/0x1300 [ 442.135493][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 442.140482][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 442.145513][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 442.150625][ T30] ? radix_tree_lookup+0x240/0x290 [ 442.155762][ T30] genl_rcv_msg+0x10b/0x7a0 [ 442.160378][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.165418][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 442.170661][ T30] netlink_rcv_skb+0x232/0x4b0 [ 442.175433][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.180513][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 442.185808][ T30] ? down_read+0x272/0x2e0 [ 442.190439][ T30] ? genl_rcv+0xd/0x40 [ 442.194516][ T30] genl_rcv+0x28/0x40 [ 442.198852][ T30] netlink_unicast+0x80f/0x9b0 [ 442.203643][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 442.208989][ T30] ? netlink_sendmsg+0x650/0xb40 [ 442.213927][ T30] ? skb_put+0x11b/0x210 [ 442.218248][ T30] netlink_sendmsg+0x813/0xb40 [ 442.223028][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.228714][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 442.233654][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 442.239020][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.244317][ T30] __sys_sendto+0x672/0x710 [ 442.248920][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 442.253980][ T30] ? exc_page_fault+0x6a/0xc0 [ 442.259053][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 442.264359][ T30] __x64_sys_sendto+0xde/0x100 [ 442.269291][ T30] do_syscall_64+0x14d/0xf80 [ 442.273896][ T30] ? trace_irq_disable+0x3b/0x150 [ 442.278980][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.285137][ T30] ? clear_bhb_loop+0x40/0x90 [ 442.290091][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.295977][ T30] RIP: 0033:0x7f4e9b15cfce [ 442.300631][ T30] RSP: 002b:00007f4e9bf8ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 442.312257][ T30] RAX: ffffffffffffffda RBX: 00007f4e9bf8c6c0 RCX: 00007f4e9b15cfce [ 442.320994][ T30] RDX: 0000000000000020 RSI: 00007f4e9bf8b000 RDI: 0000000000000009 [ 442.329227][ T30] RBP: 0000000000000000 R08: 00007f4e9bf8af04 R09: 000000000000000c [ 442.337353][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 442.345326][ T30] R13: 00007f4e9bf8af58 R14: 00007f4e9bf8b000 R15: 0000000000000000 [ 442.353413][ T30] [ 442.356445][ T30] INFO: task syz.1.1888:13371 blocked for more than 145 seconds. [ 442.364335][ T30] Not tainted syzkaller #0 [ 442.369439][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 442.378221][ T30] task:syz.1.1888 state:D stack:26504 pid:13371 tgid:13370 ppid:5822 task_flags:0x400140 flags:0x00080002 [ 442.390500][ T30] Call Trace: [ 442.393798][ T30] [ 442.396836][ T30] __schedule+0x15dd/0x52d0 [ 442.401385][ T30] ? __pfx___schedule+0x10/0x10 [ 442.406244][ T30] ? schedule+0x90/0x360 [ 442.410578][ T30] schedule+0x164/0x360 [ 442.414741][ T30] schedule_preempt_disabled+0x13/0x30 [ 442.420265][ T30] __mutex_lock+0x7fe/0x1300 [ 442.424868][ T30] ? __mutex_lock+0x5ac/0x1300 [ 442.429897][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 442.434595][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 442.439786][ T30] ? __dev_queue_xmit+0x28b/0x3870 [ 442.444921][ T30] ? radix_tree_lookup+0x240/0x290 [ 442.450148][ T30] genl_rcv_msg+0x10b/0x7a0 [ 442.454668][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.459767][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 442.464732][ T30] netlink_rcv_skb+0x232/0x4b0 [ 442.469867][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.475087][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 442.480482][ T30] ? down_read+0x272/0x2e0 [ 442.484915][ T30] ? genl_rcv+0xd/0x40 [ 442.489049][ T30] genl_rcv+0x28/0x40 [ 442.493039][ T30] netlink_unicast+0x80f/0x9b0 [ 442.497881][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 442.503182][ T30] ? netlink_sendmsg+0x650/0xb40 [ 442.508216][ T30] ? skb_put+0x11b/0x210 [ 442.512474][ T30] netlink_sendmsg+0x813/0xb40 [ 442.517435][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.522736][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 442.527812][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 442.533108][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.538475][ T30] __sys_sendto+0x672/0x710 [ 442.542991][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 442.549836][ T30] ? exc_page_fault+0x6a/0xc0 [ 442.554533][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 442.559970][ T30] __x64_sys_sendto+0xde/0x100 [ 442.564748][ T30] do_syscall_64+0x14d/0xf80 [ 442.569446][ T30] ? trace_irq_disable+0x3b/0x150 [ 442.574485][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.580660][ T30] ? clear_bhb_loop+0x40/0x90 [ 442.585347][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.591329][ T30] RIP: 0033:0x7fa2c515cfce [ 442.595748][ T30] RSP: 002b:00007fa2c5faee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 442.604225][ T30] RAX: ffffffffffffffda RBX: 00007fa2c5fb06c0 RCX: 00007fa2c515cfce [ 442.612273][ T30] RDX: 0000000000000020 RSI: 00007fa2c5faf000 RDI: 0000000000000005 [ 442.620314][ T30] RBP: 0000000000000000 R08: 00007fa2c5faef04 R09: 000000000000000c [ 442.628683][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 442.636664][ T30] R13: 00007fa2c5faef58 R14: 00007fa2c5faf000 R15: 0000000000000000 [ 442.644752][ T30] [ 442.647897][ T30] [ 442.647897][ T30] Showing all locks held in the system: [ 442.655619][ T30] 1 lock held by khungtaskd/30: [ 442.660858][ T30] #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 442.670831][ T30] 2 locks held by dhcpcd/5488: [ 442.675592][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.683874][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 442.692906][ T30] 2 locks held by getty/5580: [ 442.697787][ T30] #0: ffff888036e430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 442.707740][ T30] #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 442.717924][ T30] 1 lock held by udevd/5812: [ 442.722493][ T30] #0: ffff888026b2a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 442.731778][ T30] 6 locks held by syz.0.1873/13291: [ 442.737039][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.745244][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 442.754330][ T30] #2: ffff888026b18a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 442.764785][ T30] #3: ffff888026bcc978 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 442.774357][ T30] #4: ffff888026bcc318 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 442.786508][ T30] #5: ffff888026bcc350 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 442.799158][ T30] 2 locks held by syz.4.1875/13304: [ 442.804371][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.812681][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 442.821727][ T30] 2 locks held by syz.2.1878/13329: [ 442.827013][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.835227][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 442.844263][ T30] 2 locks held by syz.2.1878/13332: [ 442.849495][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.857855][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 442.867409][ T30] 2 locks held by syz.3.1885/13349: [ 442.872618][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.880980][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 442.890036][ T30] 2 locks held by syz.1.1888/13371: [ 442.895232][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.903469][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 442.912529][ T30] 2 locks held by syz-executor/13375: [ 442.917955][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.926169][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 442.935223][ T30] 2 locks held by syz-executor/13377: [ 442.940628][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.949101][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 442.958161][ T30] 2 locks held by syz-executor/13383: [ 442.963513][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.971733][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 442.980773][ T30] 2 locks held by syz-executor/13392: [ 442.986123][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.994491][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 443.003534][ T30] 2 locks held by syz-executor/13402: [ 443.008922][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.017215][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 443.026218][ T30] 2 locks held by syz-executor/13421: [ 443.031837][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.040153][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 443.049299][ T30] 2 locks held by syz-executor/13423: [ 443.054675][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.062975][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 443.072061][ T30] 2 locks held by syz-executor/13425: [ 443.077481][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.085685][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 443.094765][ T30] 2 locks held by syz-executor/13440: [ 443.100270][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.108790][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 443.117968][ T30] 2 locks held by syz-executor/13445: [ 443.123334][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.131592][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 443.140633][ T30] 2 locks held by syz-executor/13466: [ 443.145988][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.154271][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 443.163331][ T30] 2 locks held by syz-executor/13468: [ 443.168837][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.177110][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 443.186087][ T30] 2 locks held by syz-executor/13470: [ 443.191669][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.199941][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 443.209092][ T30] 2 locks held by syz-executor/13486: [ 443.214464][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.222696][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 443.231725][ T30] 2 locks held by syz-executor/13498: [ 443.237202][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 443.245408][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 443.254466][ T30] [ 443.256850][ T30] ============================================= [ 443.256850][ T30] [ 443.265267][ T30] NMI backtrace for cpu 0 [ 443.265352][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 443.265366][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 443.265372][ T30] Call Trace: [ 443.265378][ T30] [ 443.265383][ T30] dump_stack_lvl+0xe8/0x150 [ 443.265404][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 443.265421][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 443.265437][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 443.265454][ T30] sys_info+0x135/0x170 [ 443.265468][ T30] watchdog+0xfd9/0x1030 [ 443.265481][ T30] ? watchdog+0x21a/0x1030 [ 443.265494][ T30] kthread+0x388/0x470 [ 443.265505][ T30] ? __pfx_watchdog+0x10/0x10 [ 443.265514][ T30] ? __pfx_kthread+0x10/0x10 [ 443.265525][ T30] ret_from_fork+0x51e/0xb90 [ 443.265540][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 443.265553][ T30] ? __switch_to+0xc7d/0x1450 [ 443.265567][ T30] ? __pfx_kthread+0x10/0x10 [ 443.265578][ T30] ret_from_fork_asm+0x1a/0x30 [ 443.265601][ T30] [ 443.265605][ T30] Sending NMI from CPU 0 to CPUs 1: [ 443.375079][ C1] NMI backtrace for cpu 1 [ 443.375096][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 443.375114][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 443.375125][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 443.375150][ C1] Code: 3e 6e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 c2 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 443.375166][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 443.375181][ C1] RAX: 0000000000168627 RBX: ffffffff819a900a RCX: 0000000080000001 [ 443.375193][ C1] RDX: 0000000000000001 RSI: ffffffff8df23ae1 RDI: ffffffff8c27c180 [ 443.375205][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 443.375217][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: 0000000000000001 [ 443.375228][ C1] R13: 1ffff11003ad8000 R14: 0000000000000001 R15: 1ffff11003ad8000 [ 443.375241][ C1] FS: 0000000000000000(0000) GS:ffff88812555f000(0000) knlGS:0000000000000000 [ 443.375254][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.375266][ C1] CR2: 0000563ffa56bee8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 443.375285][ C1] Call Trace: [ 443.375292][ C1] [ 443.375298][ C1] default_idle+0x9/0x20 [ 443.375319][ C1] default_idle_call+0x72/0xb0 [ 443.375343][ C1] do_idle+0x36a/0x5f0 [ 443.375369][ C1] ? __pfx_do_idle+0x10/0x10 [ 443.375393][ C1] ? do_idle+0x5c7/0x5f0 [ 443.375417][ C1] cpu_startup_entry+0x43/0x60 [ 443.375440][ C1] start_secondary+0x101/0x110 [ 443.375460][ C1] common_startup_64+0x13e/0x147 [ 443.375484][ C1] [ 443.540193][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 443.547035][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 443.556133][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 443.566175][ T30] Call Trace: [ 443.569446][ T30] [ 443.572370][ T30] vpanic+0x56c/0xa60 [ 443.576351][ T30] ? __pfx___schedule+0x10/0x10 [ 443.581191][ T30] ? __pfx_vpanic+0x10/0x10 [ 443.585689][ T30] ? __pfx_console_unlock+0x10/0x10 [ 443.590925][ T30] panic+0xc5/0xd0 [ 443.594647][ T30] ? __pfx_panic+0x10/0x10 [ 443.599057][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 443.604423][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 443.610599][ T30] watchdog+0x1023/0x1030 [ 443.614942][ T30] ? watchdog+0x21a/0x1030 [ 443.619361][ T30] kthread+0x388/0x470 [ 443.623430][ T30] ? __pfx_watchdog+0x10/0x10 [ 443.628096][ T30] ? __pfx_kthread+0x10/0x10 [ 443.632677][ T30] ret_from_fork+0x51e/0xb90 [ 443.637272][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 443.642391][ T30] ? __switch_to+0xc7d/0x1450 [ 443.647067][ T30] ? __pfx_kthread+0x10/0x10 [ 443.651658][ T30] ret_from_fork_asm+0x1a/0x30 [ 443.656429][ T30] [ 443.659766][ T30] Kernel Offset: disabled [ 443.664078][ T30] Rebooting in 86400 seconds..