last executing test programs: 21.727005622s ago: executing program 1 (id=5721): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x0, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4060850}, 0x400d4) (async) sendto$inet6(r0, &(0x7f0000000500)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000540)=""/31, 0x1f, 0x2002, 0x0, 0x0) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000005c0)="48050000150019", 0x7}], 0x1) (async, rerun: 32) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000600)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close(r2) (async) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000840)=""/222, 0x0, 0x8}, 0x78) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000980)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000a00)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1, [{0x4, 0x1, "11fb6825931b"}]}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000009c0)={'syzkaller0\x00', @random="0100003600"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b0, 0x130, 0x130, 0x98, 0x130, 0x98, 0x398, 0x398, 0x130, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 21.319711636s ago: executing program 1 (id=5726): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008d6}, 0x840) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}]}, 0x24}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r4, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) 20.978829596s ago: executing program 1 (id=5733): syz_emit_ethernet(0x5a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x24, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x8004, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x100, 0x0, 0x0, {[@generic={0x8, 0x10, "9753d19222b83ecfdb6ebbe04c11"}]}}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4c050) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f00000006c0)) socket(0x1, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r5, 0x84, 0x7a, &(0x7f00000001c0)={0x2, 0xffffffffffffffff}, &(0x7f0000000340)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000003c0)={r7, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) unshare(0x22020400) socket$inet6_sctp(0xa, 0x1, 0x84) 20.222806917s ago: executing program 2 (id=5737): r0 = socket(0x1e, 0x4, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x78bb865c, 0x3e9d, {{0x6, 0x4, 0x2, 0x2c, 0x18, 0x68, 0x0, 0x7, 0x2f, 0x0, @local, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB="00000000000000116608000000001000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000a80)='GPL\x00', 0xa, 0xe9, &(0x7f0000000180)=""/233, 0x0, 0x46, '\x00', r1}, 0x94) 20.097708323s ago: executing program 1 (id=5738): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000300)={0x33, @broadcast, 0x4e24, 0x1, 'lblc\x00', 0x2, 0x8, 0x68}, 0x44) 19.88772207s ago: executing program 2 (id=5739): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wg2\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000008c0)={r0, &(0x7f00000007c0)='team0\x00', 0x4000, &(0x7f0000000800)={@_ha_fsid={[0x3, 0x8000]}, {0x676, 0x5, 0x800, 0x4}}, 0x2, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x400}) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000c80)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000d80), 0x366, 0x10, &(0x7f0000000dc0), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000e80)={r5, &(0x7f0000000ec0), &(0x7f0000000f00)=@tcp6=r3}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x4, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000800000000009000000570402002136b6c82416a08b40b7dd6f20271000000095000000"], &(0x7f00000002c0)='GPL\x00', 0x2, 0xcc, &(0x7f0000000680)=""/204, 0x41000, 0x20, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[r5], 0x0, 0x10, 0x9}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x5411, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@remote, 0x0}, &(0x7f0000000140)=0x14) r12 = socket$inet6(0xa, 0x2, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001180)={{r15, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001240)={r16, 0xffffffffffffffff}, 0x4) sendmsg$nl_route_sched_retired(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)=@delqdisc={0x24, 0x25, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x2, 0x2}, {0xfffa, 0xa}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x6}, 0x800) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x16, 0x10, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r17, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r19 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) write$6lowpan_enable(r19, &(0x7f0000001500)='1', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r18, 0x0, 0x22, 0x48000000, &(0x7f0000001480)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r13, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)={0x4c, r14, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r20}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}}, 0x4000014) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x260, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1a}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff65}}, {0x8}}}]}}]}, 0x260}}, 0x40000) 19.683942141s ago: executing program 1 (id=5742): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000b80)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000bc0)={0xfe55, 0xfffffffffffffffc}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000ac0)={0x2, 0x6bb, @loopback}, 0x10) listen(r3, 0x8001) r4 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r4, &(0x7f0000000b00)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000b40)={0x2, 0x6bb, @loopback}, 0x10) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x2) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x5e04, 0x2, 0x1f0, [0x0, 0x0, 0x2000000004c0], 0x2, 0x0, &(0x7f0000000680)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x4d, 0x890d, 'pimreg\x00', 'ip6gretap0\x00', 'bond_slave_0\x00', 'macvlan1\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@log={'log\x00', 0x28, {{0x7, "6c1c37f5a8e1df32d168a5f48fd767b9ba1ba7b1a71b842457a44feb656b", 0x2}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{0x9, 0x69, 0x8863, 'veth0_to_bond\x00', 'veth0_to_batadv\x00', 'ip6tnl0\x00', 'dvmrp0\x00', @link_local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}]}, 0x268) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000400)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0xffffffbfffff8000, 0x8) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000140)=0xfff) write$ppp(r1, &(0x7f0000000180)="1829", 0x2) getsockopt$inet_sctp6_SCTP_EVENT(r7, 0x84, 0x7f, &(0x7f0000000480)={0x0, 0x8004, 0x1}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000500)={r9, @in6={{0xa, 0x4e23, 0x0, @local, 0x100}}, 0x3, 0x6}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x4, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="85200def788af8b5c1c4000063000000950000000f000000"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r6, 0xc0205866, &(0x7f00000003c0)={&(0x7f00000001c0)=0xadf, 0x80000000, &(0x7f0000000200)=[{}, {}], &(0x7f0000000380)}) write$cgroup_devices(r8, &(0x7f0000000440)={'b', ' *:* ', 'wm\x00'}, 0x9) 19.644821752s ago: executing program 3 (id=5743): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008d6}, 0x840) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}]}, 0x24}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r4, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) 19.416393069s ago: executing program 3 (id=5746): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000014c0)={0x0, 0x7, 0x30}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000daffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_CACHEINFO={0x14, 0x6, {0xb78, 0x3, 0x5, 0xbe}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x9}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x28011, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x18) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000001c0)=ANY=[], 0x18) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000200)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000001540)={0x2, 0x3c, &(0x7f0000001500)=[@in6={0xa, 0x4e20, 0x100, @remote, 0x1}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000001580)=0x10) getsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r1, 0x84, 0x81, &(0x7f00000015c0)={r7, 0x2}, &(0x7f0000001600)=0x8) 19.343804887s ago: executing program 3 (id=5747): socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='GPL\x00', 0x4, 0x1005, &(0x7f00000006c0)=""/4101, 0x0, 0xc}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001800)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) r1 = socket(0x29, 0x6, 0x4098e) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) connect$pppoe(r3, &(0x7f0000001a00)={0x18, 0x0, {0x1, @multicast, 'erspan0\x00'}}, 0x1e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000001700)=@assoc_value, &(0x7f0000001740)=0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x2}, {0xffff, 0xffff}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002280)=@newtfilter={0x354, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r5, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_flow={{0x9}, {0x324, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x9}, @TCA_FLOW_EMATCHES={0x318, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb8c}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x164, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x8, 0x2, 0x8716}, {0x9, 0x7, 0x1, "83c0fa12d5905e"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3, 0x8, 0xffff}, {0x4, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0x11}, {{0x4, 0x0, 0x1}, {0x2, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x10, 0x1, 0xc}, {0x1, 0x7fffffff, 0x81, 0x4, 0x3, 0x1, 0x1}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_META={0xf0, 0x1, 0x0, 0x0, {{0x1, 0x4, 0xff81}, [@TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="1ced", @TCF_META_TYPE_VAR="207aaaf47750e86b"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x7}, {0x404, 0xfc}}}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="fd947839afe20ca5fb"]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="f09a35da0be432", @TCF_META_TYPE_VAR="606252052fa5", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x34, 0x3, [@TCF_META_TYPE_VAR="efe781fba5", @TCF_META_TYPE_VAR="09d965da33fc479b", @TCF_META_TYPE_VAR='\"', @TCF_META_TYPE_VAR="877763dbd77e6852ef", @TCF_META_TYPE_VAR="1d980979e05f3d59", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="d6feb1a04a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff0, 0x57, 0x1}, {0xc, 0x2, 0x2}}}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="48139e0c76", @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffc0, 0x5}, {0xd3e, 0xf}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="cb"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x3c}, {0x3, 0x80, 0x2}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}]}}]}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x2}, {0x3, 0x5, 0x1, "5f42b8ecda"}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x7f, 0x2, 0x2}, {0x2, 0x4, 0x2, "a8d98ada"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xd77, 0x1, 0x7}, {0x8, 0x8, 0xa, 0xf, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1000, 0x8, 0x5}, {0x3, 0x1, 0x5}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xd, 0x8, 0x5}, {0x2, 0x3, 0x4}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x101, 0x3, 0x1}, {0x200, 0x9, 0x1, 0xb}}}]}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x400}, {0x3, 0x5, 0x3}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x97db, 0x2, 0x7}, {0x6a4, 0x4, 0x2, "9185341a"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x81, 0x1, 0xf8cf}, {0x1, 0x7, 0x2, 0x7, 0x9}}}]}, @TCA_EMATCH_TREE_LIST={0xd0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x70, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_DATA={0x43, 0x5, "d6e156f78b9587dec9c09f38c7d1dad842945e7636d7228ec67b77d20c231ea71ac4c8bbe422f5cb2da2cec5f9393bebd747d4070cc2d38a9bafdda2a90137"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x6}, {0x415, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x2, 0x106}, {0x5, 0x9, 0x0, "646aab5839ed569529"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9b, 0x7, 0x3}, {{0x3, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x1}, {0x5dcd, 0xffffffff, 0x2b, 0x896b}}}]}]}]}}]}, 0x354}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) socket$kcm(0x2, 0xa, 0x73) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001ac0)={0x14, 0x19, 0x1, 0x70bd28, 0x25dfdbfd, "", [@generic='-']}, 0x14}], 0x1, 0x0, 0x0, 0x4004}, 0x20000044) sendmsg$nl_xfrm(r7, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=ANY=[@ANYBLOB="f800000010000700000000000000000020010000000000000000000000000000200100000000000000000000000000014e200006000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000002000000000000000200000000000000fdffffffffffffff0000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000017002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000008001600748c0000"], 0xf8}}, 0x0) r9 = socket(0x1e, 0x5, 0x0) connect$tipc(r9, &(0x7f0000001c80)=@name={0x1e, 0x2, 0x0, {{0x1, 0xfffffffe}}}, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000001cc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) accept4(r10, 0x0, 0x0, 0x80000) 19.244419449s ago: executing program 2 (id=5749): r0 = socket(0x10, 0x803, 0x3) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, r2, {}, {}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x48}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r3, 0x100, 0x306c}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x100}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x54}}, 0xeb64d656001f6f32) 18.951941606s ago: executing program 2 (id=5751): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff814f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c36981edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ce852364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b00000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000e40)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000e80)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000001000)={0x0, r6}, 0x8) (async) write$tun(r4, &(0x7f0000001040)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829"], 0xfce) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0xfffffffc}, 0x1c) (async) listen(r0, 0x8) 18.750776879s ago: executing program 4 (id=5752): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@setneightbl={0x2c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_THRESH3={0x8, 0x4, 0x7}]}, 0x2c}}, 0x0) 18.659964167s ago: executing program 4 (id=5754): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000feffffffffffff0010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0xd9, &(0x7f0000000340)=""/217, 0x0, 0x8}, 0x94) 18.600023477s ago: executing program 3 (id=5755): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socketpair(0x21, 0x6, 0x1020, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000003c0)={'batadv0\x00', &(0x7f0000000040)=@ethtool_dump={0x40, 0x400, 0xa2, 0x6c, "a2d9ef20874ed01fb0fd5cdeb38223aa177d50cf356fc639748d528be289ce68b48f8ae6e43ae1b0e3ab9afe4a76adb6f5f0e4d07c66955c80842be94cb87d10319dbb74b27eb336b047bd0a2bd33413b9045cd284f8404f3392ec02c7dca79f6ee3d3afced54d7d23016b7c"}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000440)={'veth0_to_team\x00', &(0x7f0000000480)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) bind$inet6(r2, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[], 0x184}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r7], 0x50}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r11, 0x84, 0x4, &(0x7f0000000780)=0x6, 0x4) getsockname$packet(r11, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) sendmsg$nl_route(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r12], 0x50}}, 0x2) r13 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r13, 0x80047453, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000940)={'hsr0\x00'}) 18.527661602s ago: executing program 1 (id=5756): writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140), 0x0, 0x20004080) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000002f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002f40), 0x0, 0x10, &(0x7f0000002f80), 0xfffffffffffffd00}, 0x48) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf25030000000c00050003010000000000000c0002000200000000000000080001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x10}, {0xd, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x2, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x1, 0x207, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x66, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x4, 0x66b6, 0xd4, 0x9, 0x8, 0x933, 0x10000, 0x0, 0x7, 0x7, 0x3fd, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x9140, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x7fd, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x7, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x6, 0x4, 0xf1, 0xffff, 0xa849, 0x8, 0x0, 0x5, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0x68a5, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x5, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x10, 0x800, 0x4, 0xffffffff, 0x7, 0xb, 0x7, 0xea, 0x40008, 0xffff33fd, 0x0, 0x7, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0xffffffff, 0x8, 0x400, 0xfffffffe, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x3, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x10004, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0xfffffffd, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x6, 0x1, 0x400, 0x0, 0x1, 0x3, 0x228, 0x29, 0x3, 0x7000000, 0x1, 0xffff, 0x9, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x7fff, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x4, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x3, 0x80000002, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x0, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x4000100, 0x76, 0x9, 0x1, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0xfff, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x1, 0x3, 0x9, 0x8, 0x0, 0x40000040, 0x2, 0xffdff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0xffffffff, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x1, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0x0, 0x7fffffff, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x2, 0x8, 0x6, 0x4, 0x3, 0x80, 0x20004, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x4, 0x495, 0x52, 0x8, 0x3, 0x1, 0x5, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x1, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x20004, 0xa4, 0x10, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0xaa, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x40, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0x6, 0x1, 0x9, 0xef, {0x2, 0x1, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x2, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) write$tun(r2, &(0x7f0000001540)=ANY=[], 0x46) r6 = epoll_create(0x7) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x21, 0x0, 0x0) sendmsg$key(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="070000000200400028bd7000ffdbdf254c4ea951e2e0bb56b18d979f39f0e8c5"], 0x10}}, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000340)) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000480)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000780)={0xa000001c}) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f00000000c0)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 18.5060496s ago: executing program 4 (id=5757): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1ffd1684a4a9b69d, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x0, 0x34, 0x6}}], 0x18}}], 0x1, 0x14) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000003c0)=0x7, 0x4) 18.348559061s ago: executing program 3 (id=5759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = socket(0x10, 0x3, 0x0) close(0x3) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bind$bt_hci(r1, &(0x7f0000000600)={0x1f, 0xffffffffffffffff}, 0x6) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000140), &(0x7f0000000280)=r5}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 18.29731877s ago: executing program 4 (id=5760): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x200, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000580)=0x100000001, 0x4) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000600), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x1, 0x0, &(0x7f0000000640)) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xc, @mcast1, 0x4}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x58}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @mcast2}}}, 0x32) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r2], 0x8) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="ee", 0x1}], 0x1) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000480)=0x10) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000004c0)=[{&(0x7f0000000500)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) writev(r2, &(0x7f0000000680)=[{&(0x7f00000006c0)="94dc60058f437de220ec35ab09743e03dc3bceeefc71488a3f28cae7d796e44e28d5289ad453eccbfb35acd3bdd85de1014b5bc8ea18a601977093cdf2d9fc8cbd203d80f28b4ae6a1345db355722b94de166280c9f86195d7d399770d0b68b5e2b85f37a41f8bee2ce8adc9883f384f61537ec4f6fb997ce2f1ae6e6f9a51337390143f61", 0x85}], 0x1) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @random="1886c9efee00"}, 0x10) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) splice(r10, 0x0, r9, 0x0, 0x406f413, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="210000000000d075050000000500000020895185", @ANYRES32=0x0, @ANYBLOB="ff01312a5600d68a5940ce62039ceb6fc38977ea3d00"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000100"/20, @ANYRESHEX=r7, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000001000000000000000000000000ffff"], 0x4c}}, 0x0) 18.18529111s ago: executing program 2 (id=5761): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e1e, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=r3, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000006c0)=[{0x0, 0x12, 0x800003, 0x9}], 0x10, 0x3}, 0x94) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={0x0, 0x401}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0x1, @mcast2, 0x813}}, 0x3, 0x0, 0x8, 0x9, 0x62, 0x401, 0xc}, &(0x7f00000004c0)=0x9c) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000500)={r6, 0x6, 0x4279, 0x6, 0x2, 0x5}, 0x14) 18.176038369s ago: executing program 3 (id=5762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x29}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0xa71895d81d14beb7) syz_emit_ethernet(0x93, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa0800450000850000000000069078ac1414bbac1414aa4e22400100000000000000000009cab7d4b92e0bb02f5a4323e75b35b5c46327d47ba705dfa0efbb3f638eb150963af6b36cfe0cbdad7149d957e735d6df6eeade2cceb94efbc639b6e7af1fee87a1bab3a6aad7475c022aa7a0193c15ef0e4c11444a615c05ae2a1399132c7db0636ddcdde487647e420e6dd0f6e8b213f3379d089ffc59ffc598087b143a3514b998f1a249b079dc9eabca62611049396e346eb9788ac88323633eb25b9f34411daee18c085e5ff229a358dbc555572d98ffc7243a1c8282ef31e53033c74fbf1f9b814c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002fffe90780000fe08f9894f46b51f050e000003940000000600000006fe06e2d4c3d9051a000000050000009500000005fffffff8000080000000000302040600220fef4c01040000e2f6ab0f2147ad0000001fa6aca4a5a9cc33aba9eae2029a5d3916"], 0x0) unshare(0x400) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r3, 0x6, 0x2b, 0x0, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00U', @ANYRES16=r4, @ANYBLOB="010029bd7000000000000100000038000180060001000a0000000700060072720000080005000100000008000800030000000c00070000000000000000000800090080000000"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000500000014000180060001000a00000008000500010000005000028014000100000000000000000000000000000000010600020050000000080003000200000008000400010000000800050000000000080006000000000006000e004e21000005000d0009"], 0x78}, 0x1, 0x0, 0x0, 0x4806}, 0x0) 18.051152767s ago: executing program 4 (id=5763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x40000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)='\t', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x8, 0x9, 0x62, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf05c1113a4a505d5, 0x80, 0xde5, 0x46}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x10, 0x10, 0x9, 0xfffff000, {{0x7, 0x4, 0x3, 0x13, 0x1c, 0x65, 0x0, 0xe, 0x29, 0x0, @private=0xa010102, @private=0xa010100, {[@ssrr={0x89, 0x7, 0x34, [@multicast2]}]}}}}}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0xfc47, &(0x7f00000003c0)={&(0x7f00000007c0)=@RTM_NEWMDB={0x98, 0x54, 0x1, 0x70bd2b, 0x25dfdbfd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x1, {@ip4=@dev={0xac, 0x14, 0x14, 0x2a}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x1, 0x2, {@ip4=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x4, {@ip4=@private=0xa010102, 0x86dd}}}]}, 0x98}}, 0xc041) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f0000000480), 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000004c0)={0x0, 0xffff}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYBLOB="87860100060025894a231d8def85ac8461d2d1b90270ffe6dbd8a2a6e88a0ecae8328790dafbd9209d076d4014143421048919a27c2378a48917c8c6927fd602cf95b9e83d11a418f2564b5d8ad04f109acbc725d5e2a4cdc7b8965057c6449c8a23776658c72858f32721718382487917467a82a05d1d4f5d14dd078bdd7e9b98f4a424305660e84787d6c7dc16076509f8ed0d8ae565a32665f6f74b5f4b3c140f76c46643e0a755c4899c82ab24ca0d7e1c1a84286773b0b02c409194"], 0xa) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x8010, r10, 0x3000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x89, 0x200, 0x2907b85b, 0x10, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000100)={r11, 0x6}, &(0x7f0000000140)=0x8) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c000000090603417c17da00000000000a000000340007800c000180080001407f0000010c00148008000140ac1e01010600044050000000060005406b640000050007000a00000005000100060000000900020073797a31"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x16, 0x20010, r12, 0x88362000) 17.187287382s ago: executing program 2 (id=5766): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x16f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x536f}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@hopopts={{0x30, 0x29, 0x32, {0xff, 0x2, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}], 0x30}}], 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000001c0), 0x56) sendmsg$kcm(r3, &(0x7f0000000380)={&(0x7f00000003c0)=@xdp={0x2c, 0x0, r4, 0x36}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="442ea407603a16ff", 0x8}], 0x2}, 0x20048085) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000010000f80700000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) 17.17462504s ago: executing program 4 (id=5767): r0 = socket(0x2e, 0x80805, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000000)={0x0, 0x0, 0xecb, 0x0, 0x1}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080005000000000008000600000000004dfd050000000000240007800800050000000000000005000000000061ff0500000000000800050000000000040007801400078008000600000040"], 0xd0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x130, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x110, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6398}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54fe47c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c63}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc23f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x614}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84d2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd853}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x240d54a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19f9309a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc748}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72520900}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x863f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b41787f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ed9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fab3da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b2b67f9}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27235e5d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef3e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x95e13c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d24ea54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x265e8150}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f7a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x164c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb87a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde48}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa91}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003e00)=""/4109, 0x100d}, 0x0) 16.43607592s ago: executing program 0 (id=5769): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000108000000000000000000e018010000756c6c2500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000001140000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0xa, 0x1000, &(0x7f0000000d40)=""/4096, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1001}, 0x94) 16.250522266s ago: executing program 0 (id=5770): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03920000004000003c00128008000100677470003000028008000300eec2000008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="14000800fe8000000000000000000000000000bb08000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00T'], 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e980)={0x6, 0xe, &(0x7f000000ea40)=ANY=[@ANYBLOB="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"/686], &(0x7f000000ed00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f000000ed40), 0x3a, 0x10, &(0x7f000000ed80), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000040)=r2}, 0x20) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x3}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000380)={r2, 0x4, 0x6, 0xcd81}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000440)={r2, 0x2, 0x8}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x8, 0xffffffff, 0x4, 0x20042, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x8}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x20) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0x7, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0xe, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xed6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffffa}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x300}]}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0xcd, &(0x7f0000000280)=""/205, 0x41100, 0x32, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f00000003c0)={0x1, 0xffff0001}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xb, 0x6, 0x995d}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000840)=[r7, r8, r9, r10, r11, r12], &(0x7f0000000880)=[{0x4, 0x1, 0x7f, 0x2}, {0x4, 0x5, 0xf, 0x3}, {0x2, 0x4, 0xf, 0x8}, {0x3, 0x3, 0x7, 0x1}, {0x3, 0x1, 0x3, 0x7}, {0x2, 0x4, 0x0, 0x4}], 0x10, 0xfff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000000edc0)={r2, 0x2000012, 0xe, 0x0, &(0x7f000000ee40)="257fd3cbb7ba7feb35295a62cd27", 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 16.172566106s ago: executing program 0 (id=5771): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r2, &(0x7f00000003c0)=[{{&(0x7f0000000400)=@in={0x2, 0x4e24, @private=0xa010102}, 0x80, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="f8000000000000000100000041"], 0xf8}}], 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffc, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000340), 0x4) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRES16=r5], 0x18) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000180)={0xfffa, 0x6, 0x8, 0x3}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x24, 0x31, 0x800, 0x70bd2b, 0x0, {0x4}, [@nested={0x4, 0xc}, @typed={0x4, 0x1}, @typed={0x8, 0x140, 0x0, 0x0, @uid=r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0x18, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r9, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @empty, 0x3}, 0x10) 16.0554132s ago: executing program 0 (id=5772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = socket(0x10, 0x3, 0x0) close(0x3) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bind$bt_hci(r1, &(0x7f0000000600)={0x1f, 0xffffffffffffffff}, 0x6) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000140), &(0x7f0000000280)=r5}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 16.05322795s ago: executing program 0 (id=5773): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) close(r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="180000008f000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000017090000fcffffffbf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000684e746889333456764597668808944dccb48ae2b283671127e06aeca64479e52f01c69c14a4e2aeb2f5821585893febf7a7f4fb61050ed5b1d15a0b5794968306499c817003beea85f9da6d3721cd5000a0cf7085604eeceec4911a97ac1a74"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x1001, &(0x7f0000000e80)=""/4097, 0x41000, 0x5}, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d40)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@ifindex, 0xffffffffffffffff, 0x15, 0x103c}, 0x20) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000200)={0x0, r0, r4, 0x4, 0x6314, '\x00', {0x6, 0x8, 0x7fff, 0x6, 0x7fffffff, 0x3ff, 0x9, 0x2, {0x5, 0xff}, {0x0, 0x9e}, {0xfff, 0x9}, 0x100000001, 0xfffff529, 0x8, 0x10000, 0x7, 0xa, 0xc09e, 0x4, 0x9, 0x9, '\x00', 0x9, 0x1, 0x51, 0x5}}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000e00)={0x0, 0x0}, &(0x7f0000000e40)=0xc) sendmmsg$unix(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r5, r6}}}], 0x20, 0x20000004}}], 0x1, 0x0) (async) sendmmsg$unix(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r5, r6}}}], 0x20, 0x20000004}}], 0x1, 0x0) 15.975231839s ago: executing program 0 (id=5774): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000f00)='syzkaller\x00'}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x42a01, 0x0) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000017c0)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000001800)) r6 = epoll_create1(0x0) r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000001840)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f0000001880)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f00000018c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'syzkaller1\x00', 0xc201}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000001480)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000014c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r0, 0x18000000000002a0, 0x108, 0x0, &(0x7f0000001a00)="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", 0x0, 0x2000028e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000016c0), r10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001500)=ANY=[@ANYBLOB="1ccc24000000", @ANYRES16=r11, @ANYBLOB="01002abd7000fbdbdf252e0000000c00050000000000000000000a0001007770616e3000000005002b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x50) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x48000288}, 0xc, &(0x7f0000001640)={&(0x7f0000001900)={0x70, r12, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x519d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc6d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x60004091}, 0x80001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$sock_int(r13, 0x1, 0x6, &(0x7f0000000100)=0x1, 0x4) bind$can_j1939(r13, &(0x7f00000015c0)={0x1d, r14, 0x102030405060708, {0x0, 0x1, 0x4}, 0x2}, 0x54) 2.561345946s ago: executing program 32 (id=5756): writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140), 0x0, 0x20004080) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b700000081110000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000072030000000000001d400500000000004704000001ed000072030200030000001d440000000000006b0a02fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f0000002f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002f40), 0x0, 0x10, &(0x7f0000002f80), 0xfffffffffffffd00}, 0x48) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf25030000000c00050003010000000000000c0002000200000000000000080001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x10}, {0xd, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x2, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x1, 0x207, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x66, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x4, 0x66b6, 0xd4, 0x9, 0x8, 0x933, 0x10000, 0x0, 0x7, 0x7, 0x3fd, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x9140, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x7fd, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x7, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x6, 0x4, 0xf1, 0xffff, 0xa849, 0x8, 0x0, 0x5, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0x68a5, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x5, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x10, 0x800, 0x4, 0xffffffff, 0x7, 0xb, 0x7, 0xea, 0x40008, 0xffff33fd, 0x0, 0x7, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0xffffffff, 0x8, 0x400, 0xfffffffe, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x3, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x10004, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0xfffffffd, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x6, 0x1, 0x400, 0x0, 0x1, 0x3, 0x228, 0x29, 0x3, 0x7000000, 0x1, 0xffff, 0x9, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x7fff, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x4, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x3, 0x80000002, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x0, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x4000100, 0x76, 0x9, 0x1, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0xfff, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x1, 0x3, 0x9, 0x8, 0x0, 0x40000040, 0x2, 0xffdff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0xffffffff, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x1, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0x0, 0x7fffffff, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x2, 0x8, 0x6, 0x4, 0x3, 0x80, 0x20004, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x4, 0x495, 0x52, 0x8, 0x3, 0x1, 0x5, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x1, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x20004, 0xa4, 0x10, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0xaa, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x40, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0x6, 0x1, 0x9, 0xef, {0x2, 0x1, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x2, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) write$tun(r2, &(0x7f0000001540)=ANY=[], 0x46) r6 = epoll_create(0x7) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x21, 0x0, 0x0) sendmsg$key(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="070000000200400028bd7000ffdbdf254c4ea951e2e0bb56b18d979f39f0e8c5"], 0x10}}, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000340)) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000480)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000780)={0xa000001c}) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f00000000c0)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2.519392073s ago: executing program 33 (id=5762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x29}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0xa71895d81d14beb7) syz_emit_ethernet(0x93, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa0800450000850000000000069078ac1414bbac1414aa4e22400100000000000000000009cab7d4b92e0bb02f5a4323e75b35b5c46327d47ba705dfa0efbb3f638eb150963af6b36cfe0cbdad7149d957e735d6df6eeade2cceb94efbc639b6e7af1fee87a1bab3a6aad7475c022aa7a0193c15ef0e4c11444a615c05ae2a1399132c7db0636ddcdde487647e420e6dd0f6e8b213f3379d089ffc59ffc598087b143a3514b998f1a249b079dc9eabca62611049396e346eb9788ac88323633eb25b9f34411daee18c085e5ff229a358dbc555572d98ffc7243a1c8282ef31e53033c74fbf1f9b814c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002fffe90780000fe08f9894f46b51f050e000003940000000600000006fe06e2d4c3d9051a000000050000009500000005fffffff8000080000000000302040600220fef4c01040000e2f6ab0f2147ad0000001fa6aca4a5a9cc33aba9eae2029a5d3916"], 0x0) unshare(0x400) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r3, 0x6, 0x2b, 0x0, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00U', @ANYRES16=r4, @ANYBLOB="010029bd7000000000000100000038000180060001000a0000000700060072720000080005000100000008000800030000000c00070000000000000000000800090080000000"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000500000014000180060001000a00000008000500010000005000028014000100000000000000000000000000000000010600020050000000080003000200000008000400010000000800050000000000080006000000000006000e004e21000005000d0009"], 0x78}, 0x1, 0x0, 0x0, 0x4806}, 0x0) 2.044625368s ago: executing program 34 (id=5766): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x16f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x536f}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@hopopts={{0x30, 0x29, 0x32, {0xff, 0x2, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}], 0x30}}], 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000001c0), 0x56) sendmsg$kcm(r3, &(0x7f0000000380)={&(0x7f00000003c0)=@xdp={0x2c, 0x0, r4, 0x36}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="442ea407603a16ff", 0x8}], 0x2}, 0x20048085) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000010000f80700000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) 1.981600265s ago: executing program 35 (id=5767): r0 = socket(0x2e, 0x80805, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000000)={0x0, 0x0, 0xecb, 0x0, 0x1}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080005000000000008000600000000004dfd050000000000240007800800050000000000000005000000000061ff0500000000000800050000000000040007801400078008000600000040"], 0xd0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x130, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x110, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6398}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54fe47c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c63}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc23f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x614}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84d2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd853}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x240d54a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19f9309a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc748}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72520900}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x863f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b41787f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ed9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fab3da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b2b67f9}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27235e5d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef3e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x95e13c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d24ea54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x265e8150}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f7a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x164c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb87a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde48}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa91}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003e00)=""/4109, 0x100d}, 0x0) 0s ago: executing program 36 (id=5774): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000f00)='syzkaller\x00'}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x42a01, 0x0) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000017c0)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000001800)) r6 = epoll_create1(0x0) r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000001840)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f0000001880)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f00000018c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'syzkaller1\x00', 0xc201}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000001480)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000014c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r0, 0x18000000000002a0, 0x108, 0x0, &(0x7f0000001a00)="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", 0x0, 0x2000028e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000016c0), r10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001500)=ANY=[@ANYBLOB="1ccc24000000", @ANYRES16=r11, @ANYBLOB="01002abd7000fbdbdf252e0000000c00050000000000000000000a0001007770616e3000000005002b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x50) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x48000288}, 0xc, &(0x7f0000001640)={&(0x7f0000001900)={0x70, r12, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x519d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc6d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x60004091}, 0x80001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$sock_int(r13, 0x1, 0x6, &(0x7f0000000100)=0x1, 0x4) bind$can_j1939(r13, &(0x7f00000015c0)={0x1d, r14, 0x102030405060708, {0x0, 0x1, 0x4}, 0x2}, 0x54) kernel console output (not intermixed with test programs): _after_hwframe+0x77/0x7f [ 603.484094][T24940] RIP: 0033:0x7f88a839f559 [ 603.484114][T24940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.484132][T24940] RSP: 002b:00007f88a922a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 603.484155][T24940] RAX: ffffffffffffffda RBX: 00007f88a8626090 RCX: 00007f88a839f559 [ 603.484170][T24940] RDX: 0000000000000078 RSI: 0000200000000080 RDI: 0000000000000005 [ 603.484183][T24940] RBP: 00007f88a922a090 R08: 0000000000000000 R09: 0000000000000000 [ 603.484196][T24940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 603.484208][T24940] R13: 00007f88a8626128 R14: 00007f88a8626090 R15: 00007ffda09078c8 [ 603.484243][T24940] [ 603.722476][T24944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4805'. [ 604.152992][T24959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4809'. [ 604.153022][T24959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4809'. [ 604.379301][T21374] net_ratelimit: 23 callbacks suppressed [ 604.379321][T21374] bond10: (slave dummy0): failed to get link speed/duplex [ 604.404049][T24981] FAULT_INJECTION: forcing a failure. [ 604.404049][T24981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.404082][T24981] CPU: 1 UID: 0 PID: 24981 Comm: syz.3.4816 Not tainted syzkaller #0 PREEMPT(full) [ 604.404104][T24981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 604.404117][T24981] Call Trace: [ 604.404126][T24981] [ 604.404135][T24981] dump_stack_lvl+0xe8/0x150 [ 604.404173][T24981] should_fail_ex+0x410/0x560 [ 604.404204][T24981] _copy_to_user+0x31/0xb0 [ 604.404238][T24981] bpf_verifier_vlog+0x496/0x900 [ 604.404276][T24981] bpf_verifier_log_write+0x11d/0x1a0 [ 604.404300][T24981] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 604.404329][T24981] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 604.404351][T24981] ? __kvmalloc_node_noprof+0x52a/0x820 [ 604.404386][T24981] ? verbose_arg_track+0x40b/0x610 [ 604.404419][T24981] analyze_subprog+0x2cdc/0x9df0 [ 604.404482][T24981] ? __kfence_alloc+0x1f1/0x3e0 [ 604.404521][T24981] ? call_instance+0x263/0x560 [ 604.404554][T24981] ? __pfx_analyze_subprog+0x10/0x10 [ 604.404621][T24981] ? call_instance+0x263/0x560 [ 604.404646][T24981] ? rcu_is_watching+0x16/0xb0 [ 604.404673][T24981] ? call_instance+0x263/0x560 [ 604.404706][T24981] ? trace_kmalloc+0x2a/0xf0 [ 604.404732][T24981] ? call_instance+0x263/0x560 [ 604.404758][T24981] ? __kvmalloc_node_noprof+0x52a/0x820 [ 604.404788][T24981] ? call_instance+0x263/0x560 [ 604.404811][T24981] ? call_instance+0x263/0x560 [ 604.404855][T24981] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 604.404881][T24981] ? bpf_get_trace_printk_proto+0x48/0x60 [ 604.404901][T24981] ? bpf_tracing_func_proto+0x72/0x180 [ 604.404954][T24981] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 604.404988][T24981] ? __kvmalloc_node_noprof+0x340/0x820 [ 604.405015][T24981] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 604.405042][T24981] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 604.405076][T24981] bpf_compute_live_registers+0x8d3/0x1ff0 [ 604.405125][T24981] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 604.405165][T24981] bpf_check+0x2744/0x2ef0 [ 604.405209][T24981] ? __pfx_bpf_check+0x10/0x10 [ 604.405238][T24981] ? bpf_obj_name_cpy+0x194/0x1e0 [ 604.405264][T24981] bpf_prog_load+0x14d1/0x1c20 [ 604.405304][T24981] ? __pfx_bpf_prog_load+0x10/0x10 [ 604.405357][T24981] __sys_bpf+0xd0d/0xd90 [ 604.405392][T24981] ? __pfx___sys_bpf+0x10/0x10 [ 604.405431][T24981] ? __fget_files+0x2a/0x420 [ 604.405472][T24981] ? ksys_write+0x242/0x270 [ 604.405500][T24981] ? __pfx_ksys_write+0x10/0x10 [ 604.405529][T24981] __x64_sys_bpf+0xba/0xd0 [ 604.405557][T24981] do_syscall_64+0x166/0x520 [ 604.405584][T24981] ? trace_irq_disable+0x3b/0x140 [ 604.405607][T24981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.405628][T24981] ? clear_bhb_loop+0x70/0xc0 [ 604.405653][T24981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.405673][T24981] RIP: 0033:0x7f88a839f559 [ 604.405693][T24981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.405718][T24981] RSP: 002b:00007f88a924b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 604.405740][T24981] RAX: ffffffffffffffda RBX: 00007f88a8625fa0 RCX: 00007f88a839f559 [ 604.405756][T24981] RDX: 0000000000000078 RSI: 0000200000000080 RDI: 0000000000000005 [ 604.405769][T24981] RBP: 00007f88a924b090 R08: 0000000000000000 R09: 0000000000000000 [ 604.405783][T24981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 604.405796][T24981] R13: 00007f88a8626038 R14: 00007f88a8625fa0 R15: 00007ffda09078c8 [ 604.405830][T24981] [ 604.489502][T21374] bond10: (slave dummy0): failed to get link speed/duplex [ 604.599289][T22095] bond10: (slave dummy0): failed to get link speed/duplex [ 604.709228][ T43] bond10: (slave dummy0): failed to get link speed/duplex [ 604.819721][ T43] bond10: (slave dummy0): failed to get link speed/duplex [ 604.826975][T24995] ip_tables: iptables: counters copy to user failed while replacing table [ 604.929061][ T43] bond10: (slave dummy0): failed to get link speed/duplex [ 605.039116][T21368] bond10: (slave dummy0): failed to get link speed/duplex [ 605.149170][T21368] bond10: (slave dummy0): failed to get link speed/duplex [ 605.259060][T22095] bond10: (slave dummy0): failed to get link speed/duplex [ 607.208634][T24966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.410311][T25014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4826'. [ 608.081382][T25015] netlink: 'syz.2.4822': attribute type 1 has an invalid length. [ 608.130642][T25015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 608.322162][T25056] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4833'. [ 608.383873][T25062] ±ÿ: renamed from lo [ 608.411919][T25058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4831'. [ 608.412013][T25058] bridge_slave_1: left allmulticast mode [ 608.412035][T25058] bridge_slave_1: left promiscuous mode [ 608.412260][T25058] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.450947][T25058] bridge_slave_0: left allmulticast mode [ 608.450974][T25058] bridge_slave_0: left promiscuous mode [ 608.452736][T25058] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.593380][T25069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4837'. [ 608.847288][T25080] syzkaller0: MTU not usable for tipc bearer [ 608.847329][T25080] tipc: Enabling of bearer rejected, failed to enable media [ 609.066451][T25095] vlan2: entered promiscuous mode [ 609.066467][T25095] hsr0: entered promiscuous mode [ 609.066617][T25095] vlan2: entered allmulticast mode [ 609.066626][T25095] hsr0: entered allmulticast mode [ 609.066633][T25095] hsr_slave_0: entered allmulticast mode [ 609.066642][T25095] hsr_slave_1: entered allmulticast mode [ 609.122742][T25097] syzkaller1: entered promiscuous mode [ 609.122766][T25097] syzkaller1: entered allmulticast mode [ 609.147342][T25095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4840'. [ 609.182131][T25095] hsr_slave_0: left promiscuous mode [ 609.183147][T25095] hsr_slave_1: left promiscuous mode [ 609.459087][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 609.838706][T25108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.854384][T25125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.857005][T25108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.160535][ T43] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.160595][ T43] net_ratelimit: 35 callbacks suppressed [ 610.160608][ T43] bond10: (slave dummy0): failed to get link speed/duplex [ 610.160641][ T43] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.160679][ T43] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.160725][ T43] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.329036][T22095] bond10: (slave dummy0): failed to get link speed/duplex [ 610.441490][ T43] bond10: (slave dummy0): failed to get link speed/duplex [ 610.463751][T25153] netlink: 'syz.3.4855': attribute type 1 has an invalid length. [ 610.535426][T25153] bond3: entered promiscuous mode [ 610.535880][T25153] 8021q: adding VLAN 0 to HW filter on device bond3 [ 610.568868][T25156] 8021q: adding VLAN 0 to HW filter on device bond4 [ 610.581643][T25156] bond3: (slave bond4): making interface the new active one [ 610.581669][T25156] bond4: entered promiscuous mode [ 610.589750][T25156] bond3: (slave bond4): Enslaving as an active interface with an up link [ 610.612831][T22095] bond10: (slave dummy0): failed to get link speed/duplex [ 610.795528][T25166] syzkaller0: entered promiscuous mode [ 610.795553][T25166] syzkaller0: entered allmulticast mode [ 610.800116][T22095] bond10: (slave dummy0): failed to get link speed/duplex [ 610.877346][T25175] netlink: 'syz.1.4860': attribute type 12 has an invalid length. [ 611.059360][T16895] bond10: (slave dummy0): failed to get link speed/duplex [ 611.170744][T16895] bond10: (slave dummy0): failed to get link speed/duplex [ 611.274123][T25192] pim6reg: entered allmulticast mode [ 611.288177][T25192] pim6reg: left allmulticast mode [ 611.330613][T16895] bond10: (slave dummy0): failed to get link speed/duplex [ 611.357556][T25201] FAULT_INJECTION: forcing a failure. [ 611.357556][T25201] name failslab, interval 1, probability 0, space 0, times 0 [ 611.357590][T25201] CPU: 0 UID: 0 PID: 25201 Comm: syz.4.4865 Not tainted syzkaller #0 PREEMPT(full) [ 611.357613][T25201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 611.357626][T25201] Call Trace: [ 611.357634][T25201] [ 611.357643][T25201] dump_stack_lvl+0xe8/0x150 [ 611.357678][T25201] should_fail_ex+0x410/0x560 [ 611.357717][T25201] should_failslab+0xa8/0x100 [ 611.357757][T25201] __kmalloc_cache_noprof+0x9e/0x600 [ 611.357783][T25201] ? rtnl_newlink+0x147/0x1c30 [ 611.357809][T25201] ? rtnl_newlink+0x147/0x1c30 [ 611.357834][T25201] ? stack_trace_save+0xa9/0x100 [ 611.357895][T25201] rtnl_newlink+0x147/0x1c30 [ 611.357919][T25201] ? stack_depot_save_flags+0x33/0x7f0 [ 611.358009][T25201] ? __lock_acquire+0x6e0/0x2de0 [ 611.358037][T25201] ? kasan_save_track+0x4f/0x80 [ 611.358062][T25201] ? kasan_save_track+0x3e/0x80 [ 611.358086][T25201] ? kasan_save_free_info+0x40/0x50 [ 611.358106][T25201] ? __kasan_slab_free+0x5c/0x80 [ 611.358135][T25201] ? __pfx_rtnl_newlink+0x10/0x10 [ 611.358157][T25201] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 611.358177][T25201] ? netlink_deliver_tap+0x19c/0x1b0 [ 611.358196][T25201] ? netlink_unicast+0x8c1/0xa80 [ 611.358223][T25201] ? netlink_sendmsg+0x7f0/0xb20 [ 611.358242][T25201] ? sock_sendmsg_nosec+0x14e/0x190 [ 611.358273][T25201] ? ____sys_sendmsg+0x54e/0x850 [ 611.358296][T25201] ? ___sys_sendmsg+0x2a5/0x360 [ 611.358319][T25201] ? __x64_sys_sendmsg+0x1b1/0x290 [ 611.358344][T25201] ? do_syscall_64+0x166/0x520 [ 611.358368][T25201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.358427][T25201] ? kasan_quarantine_put+0xbb/0x1f0 [ 611.358452][T25201] ? lockdep_hardirqs_on+0x7b/0x110 [ 611.358482][T25201] ? nlmon_xmit+0xb0/0x100 [ 611.358588][T25201] ? kmem_cache_free+0x182/0x650 [ 611.358622][T25201] ? __lock_acquire+0x747/0x2de0 [ 611.358651][T25201] ? __pfx_hook_capable+0x10/0x10 [ 611.358705][T25201] ? __dev_queue_xmit+0x29b/0x3920 [ 611.358794][T25201] ? __pfx_hook_capable+0x10/0x10 [ 611.358818][T25201] ? lockdep_hardirqs_on+0x7b/0x110 [ 611.358852][T25201] ? lock_acquire+0x115/0x350 [ 611.358873][T25201] ? __pfx_rtnl_newlink+0x10/0x10 [ 611.358906][T25201] ? __pfx_rtnl_newlink+0x10/0x10 [ 611.358928][T25201] rtnetlink_rcv_msg+0x802/0xc00 [ 611.358954][T25201] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 611.358979][T25201] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 611.359007][T25201] ? __copy_skb_header+0xa3/0x4a0 [ 611.359046][T25201] netlink_rcv_skb+0x226/0x4a0 [ 611.359068][T25201] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 611.359095][T25201] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.359130][T25201] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.359150][T25201] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.359177][T25201] netlink_unicast+0x8ef/0xa80 [ 611.359225][T25201] netlink_sendmsg+0x7f0/0xb20 [ 611.359252][T25201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.359277][T25201] ? aa_sock_msg_perm+0x144/0x210 [ 611.359307][T25201] ? apparmor_socket_sendmsg+0x98/0x360 [ 611.359329][T25201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.359350][T25201] sock_sendmsg_nosec+0x14e/0x190 [ 611.359384][T25201] ____sys_sendmsg+0x54e/0x850 [ 611.359416][T25201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.359445][T25201] ? __import_iovec+0x63a/0x7e0 [ 611.359476][T25201] ? import_iovec+0x73/0xa0 [ 611.359506][T25201] ___sys_sendmsg+0x2a5/0x360 [ 611.359530][T25201] ? __lock_acquire+0x747/0x2de0 [ 611.359557][T25201] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.359621][T25201] ? __fget_files+0x3a2/0x420 [ 611.359641][T25201] ? __fget_files+0x2a/0x420 [ 611.359672][T25201] __x64_sys_sendmsg+0x1b1/0x290 [ 611.359702][T25201] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 611.359764][T25201] do_syscall_64+0x166/0x520 [ 611.359789][T25201] ? trace_irq_disable+0x3b/0x140 [ 611.359812][T25201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.359833][T25201] ? clear_bhb_loop+0x70/0xc0 [ 611.359858][T25201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.359878][T25201] RIP: 0033:0x7f95e519f559 [ 611.359898][T25201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.359915][T25201] RSP: 002b:00007f95e6052028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.359937][T25201] RAX: ffffffffffffffda RBX: 00007f95e5425fa0 RCX: 00007f95e519f559 [ 611.359952][T25201] RDX: 0000000000004040 RSI: 0000200000000380 RDI: 0000000000000003 [ 611.359966][T25201] RBP: 00007f95e6052090 R08: 0000000000000000 R09: 0000000000000000 [ 611.359979][T25201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.359992][T25201] R13: 00007f95e5426038 R14: 00007f95e5425fa0 R15: 00007ffc6630b378 [ 611.360025][T25201] [ 611.449123][ T43] bond10: (slave dummy0): failed to get link speed/duplex [ 611.560856][T22095] bond10: (slave dummy0): failed to get link speed/duplex [ 611.861950][T25210] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 611.993077][T25221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4871'. [ 612.105524][T22095] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 612.153674][T21374] bond9: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 612.213050][T25231] bridge_slave_0: entered promiscuous mode [ 612.216922][T25231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4873'. [ 613.558158][T25319] ip6gre2: entered allmulticast mode [ 613.584339][T25319] batadv_slave_1: entered promiscuous mode [ 613.746666][T25332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4898'. [ 613.826915][T25319] netlink: 'syz.4.4896': attribute type 3 has an invalid length. [ 613.826940][T25319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4896'. [ 613.992030][T25345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4906'. [ 614.027032][T25345] ip6tnl1: entered allmulticast mode [ 614.027302][T25345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4906'. [ 614.028245][T25347] netlink: 'syz.1.4905': attribute type 5 has an invalid length. [ 614.028263][T25347] netlink: 'syz.1.4905': attribute type 9 has an invalid length. [ 614.028277][T25347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4905'. [ 614.046952][T25345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4906'. [ 614.047554][T25345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4906'. [ 614.053881][T25345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4906'. [ 614.058039][T25345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4906'. [ 614.058588][T25345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4906'. [ 614.464323][T25364] netlink: 'syz.3.4912': attribute type 1 has an invalid length. [ 614.784278][T25364] 8021q: adding VLAN 0 to HW filter on device bond5 [ 614.831871][T25390] netlink: 'syz.1.4917': attribute type 1 has an invalid length. [ 614.915571][T25390] 8021q: adding VLAN 0 to HW filter on device bond12 [ 614.977724][T25388] bond8: ARP target 9.0.0.0 is already present [ 614.977750][T25388] bond8: option arp_ip_target: invalid value (9) [ 614.986354][T25388] bond8 (unregistering): Released all slaves [ 615.032490][T25393] bond10: (slave veth0_to_bond): Releasing active interface [ 615.136771][T25393] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 615.177024][T25390] bridge5: entered promiscuous mode [ 615.186480][T25390] bond12: (slave bridge5): Enslaving as an active interface with an up link [ 615.244811][T25406] 8021q: VLANs not supported on lo [ 615.245402][T25406] 8021q: VLANs not supported on lo [ 615.245489][T25406] 8021q: VLANs not supported on lo [ 615.245577][T25406] 8021q: VLANs not supported on lo [ 615.245659][T25406] 8021q: VLANs not supported on lo [ 615.245735][T25406] 8021q: VLANs not supported on lo [ 615.246997][T25406] 8021q: VLANs not supported on lo [ 615.247092][T25406] 8021q: VLANs not supported on lo [ 615.247180][T25406] 8021q: VLANs not supported on lo [ 615.247255][T25406] 8021q: VLANs not supported on lo [ 615.247326][T25406] 8021q: VLANs not supported on lo [ 615.247397][T25406] 8021q: VLANs not supported on lo [ 615.247463][T25406] 8021q: VLANs not supported on lo [ 615.247538][T25406] 8021q: VLANs not supported on lo [ 615.247606][T25406] 8021q: VLANs not supported on lo [ 615.247677][T25406] 8021q: VLANs not supported on lo [ 615.247784][T25406] 8021q: VLANs not supported on lo [ 615.247855][T25406] 8021q: VLANs not supported on lo [ 615.250610][T25406] 8021q: VLANs not supported on lo [ 615.250686][T25406] 8021q: VLANs not supported on lo [ 615.250766][T25406] 8021q: VLANs not supported on lo [ 615.250838][T25406] 8021q: VLANs not supported on lo [ 615.250910][T25406] 8021q: VLANs not supported on lo [ 615.250983][T25406] 8021q: VLANs not supported on lo [ 615.251056][T25406] 8021q: VLANs not supported on lo [ 615.251129][T25406] 8021q: VLANs not supported on lo [ 615.251202][T25406] 8021q: VLANs not supported on lo [ 615.251274][T25406] 8021q: VLANs not supported on lo [ 615.251349][T25406] 8021q: VLANs not supported on lo [ 615.251447][T25406] 8021q: VLANs not supported on lo [ 615.251527][T25406] 8021q: VLANs not supported on lo [ 615.253596][T25406] 8021q: VLANs not supported on lo [ 615.253678][T25406] 8021q: VLANs not supported on lo [ 615.280933][T21369] net_ratelimit: 28 callbacks suppressed [ 615.280954][T21369] bond10: (slave dummy0): failed to get link speed/duplex [ 615.394660][T21368] bond10: (slave dummy0): failed to get link speed/duplex [ 615.499673][T25415] bond10: (slave dummy0): failed to get link speed/duplex [ 615.649525][T25425] tipc: Enabling of bearer rejected, already enabled [ 615.661769][T25412] bond10: (slave dummy0): failed to get link speed/duplex [ 615.771120][T22094] bond10: (slave dummy0): failed to get link speed/duplex [ 615.832362][T25441] macvtap1: entered allmulticast mode [ 615.832384][T25441] veth0_to_bridge: entered allmulticast mode [ 615.838719][T25441] veth0_to_bridge: left allmulticast mode [ 615.939178][T25412] bond10: (slave dummy0): failed to get link speed/duplex [ 616.069200][T22728] bond10: (slave dummy0): failed to get link speed/duplex [ 616.160510][T25457] syzkaller1: entered allmulticast mode [ 616.177786][T25460] syzkaller0: entered promiscuous mode [ 616.177809][T25460] syzkaller0: entered allmulticast mode [ 616.181185][T21368] bond10: (slave dummy0): failed to get link speed/duplex [ 616.207779][T25460] sctp_getsockopt_maxseg: 23 callbacks suppressed [ 616.207880][T25460] sctp: [Deprecated]: syz.0.4932 (pid 25460) Use of int in maxseg socket option. [ 616.207880][T25460] Use struct sctp_assoc_value instead [ 616.259172][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 616.339819][T25470] geneve1: entered promiscuous mode [ 616.349368][T21368] bond10: (slave dummy0): failed to get link speed/duplex [ 616.459071][T22728] bond10: (slave dummy0): failed to get link speed/duplex [ 616.488775][T25488] netlink: 'syz.1.4933': attribute type 16 has an invalid length. [ 616.488799][T25488] netlink: 'syz.1.4933': attribute type 17 has an invalid length. [ 616.507768][T25488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.782703][T25497] netlink: 'syz.3.4938': attribute type 1 has an invalid length. [ 617.129458][T25517] netlink: 'syz.3.4945': attribute type 1 has an invalid length. [ 617.243043][T25517] bond6: entered promiscuous mode [ 617.243556][T25517] 8021q: adding VLAN 0 to HW filter on device bond6 [ 617.293458][T25517] veth3: entered allmulticast mode [ 617.308134][T25517] bond6: (slave veth3): making interface the new active one [ 617.308160][T25517] veth3: entered promiscuous mode [ 617.338277][T25517] bond6: (slave veth3): Enslaving as an active interface with an up link [ 617.755897][T25548] 8021q: VLANs not supported on ip6gre0 [ 617.955711][T25562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.028724][T25562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.053330][T25562] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 618.070090][T25562] bond0 (unregistering): Released all slaves [ 618.740335][ T2010] block nbd0: Possible stuck request ffff8880286f5080: control (read@0,4096B). Runtime 60 seconds [ 619.068458][T25627] __nla_validate_parse: 71 callbacks suppressed [ 619.068479][T25627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4974'. [ 619.068496][T25627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4974'. [ 619.100794][T25628] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4974'. [ 619.100818][T25628] tc_dump_action: action bad kind [ 619.285262][T25634] netlink: 'syz.3.4975': attribute type 4 has an invalid length. [ 619.285286][T25634] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4975'. [ 619.285894][T25634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4975'. [ 619.346520][T25638] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 619.400804][T25642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4978'. [ 619.456552][T25645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4978'. [ 619.502488][T25645] ipvlan2: entered allmulticast mode [ 619.502510][T25645] virt_wifi0: entered allmulticast mode [ 619.511753][T25645] batman_adv: batadv0: Adding interface: ipvlan2 [ 619.511770][T25645] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.511803][T25645] batman_adv: batadv0: Interface activated: ipvlan2 [ 619.613263][T22095] tipc: Resetting bearer [ 619.613307][T22095] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 619.717519][T25651] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4981'. [ 619.717544][T25651] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4981'. [ 619.717558][T25651] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4981'. [ 619.928368][T22095] bond3 (unregistering): (slave erspan0): Releasing active interface [ 620.014664][T22095] bond4 (unregistering): (slave geneve0): Releasing active interface [ 620.031327][T22095] bond1 (unregistering): (slave geneve2): Releasing active interface [ 620.070171][T22095] tipc: Disabling bearer [ 620.074660][T22095] batman_adv: batadv0: Removing interface: syzkaller0 [ 620.115859][T22095] bond5 (unregistering): (slave bridge0): Releasing backup interface [ 620.115887][T22095] bridge0 (unregistering): left promiscuous mode [ 620.147703][T22095] bond8 (unregistering): (slave bridge3): Releasing backup interface [ 620.147732][T22095] bridge3 (unregistering): left promiscuous mode [ 620.204254][T22095] bond9 (unregistering): (slave vlan2): Releasing active interface [ 620.227143][T22728] smc: removing ib device syz0 [ 620.239913][T22095] bond0 (unregistering): Released all slaves [ 620.245627][T22095] bond1 (unregistering): Released all slaves [ 620.267079][T22095] bond2 (unregistering): Released all slaves [ 620.293314][T22095] bond3 (unregistering): Released all slaves [ 620.308239][T22095] bond4 (unregistering): Released all slaves [ 620.326896][T22095] bond5 (unregistering): Released all slaves [ 620.352168][T22095] bond6 (unregistering): Released all slaves [ 620.366804][T22095] bond7 (unregistering): Released all slaves [ 620.381756][T22095] bond8 (unregistering): Released all slaves [ 620.392631][T22095] bond9 (unregistering): Released all slaves [ 620.415802][T22095] bond10 (unregistering): (slave veth7): Releasing backup interface [ 620.417731][T22095] bond10 (unregistering): (slave dummy0): Removing an active aggregator [ 620.418170][T22095] bond10 (unregistering): (slave dummy0): Releasing backup interface [ 620.420382][T22095] bond10 (unregistering): Released all slaves [ 620.500973][T25658] bridge8: entered promiscuous mode [ 620.500997][T25658] bridge8: entered allmulticast mode [ 620.547605][T25658] team0: Port device bridge8 added [ 620.571770][T22728] smbdirect: ib_dev[syz0] removed [ 620.813576][T25677] netlink: 'syz.3.4986': attribute type 1 has an invalid length. [ 620.821689][T24550] wg2 speed is unknown, defaulting to 1000 [ 620.821728][T24550] syz2: Port: 1 Link DOWN [ 620.880529][T25679] xt_CT: You must specify a L4 protocol and not use inversions on it [ 621.267759][T25679] bond7: (slave veth5): Enslaving as an active interface with a down link [ 621.312348][T25680] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 621.420231][T25693] erspan0: entered promiscuous mode [ 621.420446][T25693] vlan4: entered promiscuous mode [ 621.485354][T25699] erspan0: left promiscuous mode [ 621.516299][T25699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.566358][T25699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.568855][T25699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.593152][T25699] net_ratelimit: 23 callbacks suppressed [ 621.593174][T25699] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 621.754283][T25708] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 621.926443][T25412] bridge0: port 1(veth0) entered blocking state [ 621.926550][T25412] bridge0: port 1(veth0) entered forwarding state [ 622.115486][T25711] geneve4: entered promiscuous mode [ 622.170875][T22094] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.171009][T25412] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.171046][T25412] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.171088][T25412] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.176516][T25718] tipc: Failed to remove unknown binding: 66,0,0/2130706433:562818543/562818544 [ 622.177147][T25718] tipc: Failed to remove unknown binding: 66,0,0/2130706433:562818543/562818544 [ 622.437791][T25732] bond0: entered promiscuous mode [ 622.447690][T25733] openvswitch: netlink: Invalid VLAN frame [ 622.485006][T25732] bond0: left promiscuous mode [ 622.516217][T25738] netlink: 'syz.4.5001': attribute type 1 has an invalid length. [ 622.803747][T25750] sctp: [Deprecated]: syz.0.5004 (pid 25750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 622.803747][T25750] Use struct sctp_sack_info instead [ 623.215098][T25766] netlink: 'syz.3.5011': attribute type 1 has an invalid length. [ 623.432390][T25785] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 623.604247][ T4993] udevd[4993]: worker [23166] /devices/virtual/block/nbd0 is taking a long time [ 623.777875][T25783] bridge2: entered promiscuous mode [ 623.825455][T25783] bond8: (slave bridge2): making interface the new active one [ 623.826230][T25783] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 623.877954][T25784] bridge3: entered promiscuous mode [ 623.897212][T25784] bond8: (slave bridge3): Enslaving as a backup interface with an up link [ 623.938594][T25766] bridge4: entered promiscuous mode [ 623.959763][T25766] bond8: (slave bridge4): Enslaving as a backup interface with an up link [ 623.966869][T25789] bridge_slave_0: entered promiscuous mode [ 624.208754][T25803] syzkaller0: left promiscuous mode [ 624.208780][T25803] syzkaller0: left allmulticast mode [ 624.292730][T25814] __nla_validate_parse: 9 callbacks suppressed [ 624.292750][T25814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5021'. [ 624.408855][T25821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5024'. [ 624.565890][T25834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5028'. [ 624.581329][T22095] ovs-dp0: left promiscuous mode [ 624.631932][T25827] netlink: 392 bytes leftover after parsing attributes in process `syz.3.5026'. [ 624.690970][T22095] tipc: Left network mode [ 625.149794][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 625.345261][T25865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.360335][T25877] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5037'. [ 625.476510][T25881] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5037'. [ 625.746072][T25893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5043'. [ 625.995913][T22095] hsr_slave_0: left promiscuous mode [ 625.997617][T22095] hsr_slave_1: left promiscuous mode [ 626.024074][T22095] batadv_slave_1: left promiscuous mode [ 626.053489][T22095] veth1_macvtap: left promiscuous mode [ 626.053651][T22095] veth0_macvtap: left promiscuous mode [ 626.053791][T22095] veth1_vlan: left promiscuous mode [ 626.053828][T22095] veth0_vlan: left promiscuous mode [ 626.813877][T22094] smbdirect: ib_dev[syz2] removed [ 626.904102][T25914] veth0: entered promiscuous mode [ 626.965890][T25909] veth0: left promiscuous mode [ 627.067267][T25931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5047'. [ 627.181530][T25931] 8021q: adding VLAN 0 to HW filter on device bond11 [ 627.232340][T25930] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 627.271782][T25930] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 627.652442][T24548] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 627.675600][T22095] IPVS: stop unused estimator thread 0... [ 627.772593][T25966] netlink: 'syz.1.5055': attribute type 83 has an invalid length. [ 627.952994][T25979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5058'. [ 628.012857][T24550] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 628.105031][T22094] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 628.174102][T25987] netlink: Failed to add helper -22 [ 628.174150][T25987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.290342][T25982] netlink: Failed to add helper -22 [ 628.290394][T25982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.541105][T26001] SET target dimension over the limit! [ 628.632135][T26004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5063'. [ 629.141780][T25412] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 629.145678][T25412] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 629.431425][T26054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5079'. [ 629.584056][T26058] xt_ecn: cannot match TCP bits for non-tcp packets [ 629.760795][T26060] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 629.789620][T24550] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 630.032465][T26078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5083'. [ 630.060860][T26084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5083'. [ 630.221546][T26063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5081'. [ 630.434328][T26095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5087'. [ 630.610765][T26102] ip6gretap1: entered allmulticast mode [ 630.614421][T26102] batman_adv: batadv0: Adding interface: ip6gretap1 [ 630.614439][T26102] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.614467][T26102] batman_adv: batadv0: Interface activated: ip6gretap1 [ 630.614524][T26107] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5089'. [ 630.652978][T26106] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5088'. [ 630.751533][T26109] netlink: 'syz.4.5092': attribute type 1 has an invalid length. [ 630.816295][T26118] geneve4: entered promiscuous mode [ 630.831358][T25412] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.831414][T25412] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.831454][T25412] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.831488][T25412] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.846241][T26118] netlink: 'syz.0.5095': attribute type 1 has an invalid length. [ 630.892467][T26123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5096'. [ 630.892579][T26123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5096'. [ 630.892699][T26123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5096'. [ 631.005148][T26128] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 631.005172][T26128] syzkaller1: Linktype set failed because interface is up [ 631.010825][T24550] syzkaller1: tun_net_xmit 90 [ 631.029600][T26138] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 631.029805][T26139] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 631.029826][T26139] syzkaller1: Linktype set failed because interface is up [ 631.316456][T25412] IPVS: starting estimator thread 0... [ 631.400555][T26160] IPVS: using max 31 ests per chain, 74400 per kthread [ 631.685097][ T30] audit: type=1800 audit(1792775791.211:49): pid=26150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5099" name="memory.events" dev="tmpfs" ino=2384 res=0 errno=-22 [ 632.851029][T26241] bond9: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 632.854602][T26241] bond9 (unregistering): Released all slaves [ 633.046013][T26247] sit1: entered promiscuous mode [ 633.371279][T26260] netlink: 'syz.1.5124': attribute type 1 has an invalid length. [ 633.539261][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 634.277549][T26306] netlink: Conntrack attr has 8 unknown bytes [ 634.277592][T26306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.445333][T26322] __nla_validate_parse: 38 callbacks suppressed [ 634.445357][T26322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5141'. [ 634.445373][T26322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5141'. [ 634.445398][T26322] netlink: 'syz.0.5141': attribute type 12 has an invalid length. [ 634.445412][T26322] netlink: 'syz.0.5141': attribute type 11 has an invalid length. [ 634.544610][T26327] openvswitch: netlink: Multiple metadata blocks provided [ 634.550833][T26327] netlink: 'syz.4.5143': attribute type 4 has an invalid length. [ 634.570263][T26332] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 634.614736][T26329] netlink: 'syz.4.5143': attribute type 21 has an invalid length. [ 634.698666][T26340] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5145'. [ 634.928210][T26344] netlink: 'syz.0.5147': attribute type 21 has an invalid length. [ 634.928235][T26344] netlink: 'syz.0.5147': attribute type 20 has an invalid length. [ 634.935004][T26345] netlink: 'syz.0.5147': attribute type 21 has an invalid length. [ 634.935028][T26345] netlink: 'syz.0.5147': attribute type 20 has an invalid length. [ 635.100077][T26354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5151'. [ 635.107695][T26352] ip6gre1: entered promiscuous mode [ 635.107719][T26352] ip6gre1: entered allmulticast mode [ 635.148674][T26355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5148'. [ 635.608190][T26376] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 635.962527][T26402] bond9: (slave 04±ÿ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 635.967532][T26402] bond9: (slave 04±ÿ): Enslaving as an active interface with an up link [ 635.967727][T26402] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 635.999954][T26403] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 636.110687][T26411] xt_TCPMSS: Only works on TCP SYN packets [ 636.224619][T26418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5170'. [ 636.224642][T26418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5170'. [ 636.375278][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5171'. [ 636.672966][T26440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5173'. [ 636.833237][T26446] ªªªªªª: renamed from vlan0 [ 637.194900][T26463] syzkaller0: create flow: hash 190914589 index 0 [ 637.231814][T26475] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 637.355767][T26480] syzkaller1: entered promiscuous mode [ 637.355791][T26480] syzkaller1: entered allmulticast mode [ 637.436965][T26481] lo speed is unknown, defaulting to 1000 [ 637.483246][T26488] rdma_rxe: rxe_newlink: failed to add lo [ 637.505405][T26481] lo speed is unknown, defaulting to 1000 [ 637.507483][T26481] lo speed is unknown, defaulting to 1000 [ 637.605690][T26492] netlink: 'syz.4.5185': attribute type 10 has an invalid length. [ 637.748843][T26492] team0 (unregistering): Port device team_slave_0 removed [ 637.773349][T26481] infiniband syz0: set down [ 637.773431][T26481] infiniband syz0: added lo [ 637.814501][T26481] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 637.814541][T26481] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 637.814587][T26481] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 637.938777][T26481] RDS/IB: syz0: added [ 637.943696][T26481] smc: adding ib device syz0 with port count 1 [ 637.944062][T26481] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 638.112207][T26492] team0 (unregistering): Port device 76žÿ removed [ 638.151615][T26492] team0 (unregistering): Port device bridge1 removed [ 638.171615][ T29] lo speed is unknown, defaulting to 1000 [ 638.231355][T24550] lo speed is unknown, defaulting to 1000 [ 638.391430][T26513] nbd: socks must be embedded in a SOCK_ITEM attr [ 638.413151][T26481] lo speed is unknown, defaulting to 1000 [ 640.637977][T26481] lo speed is unknown, defaulting to 1000 [ 640.638557][T26524] syzkaller0: entered promiscuous mode [ 640.638579][T26524] syzkaller0: entered allmulticast mode [ 640.670934][T26456] syzkaller0 (unregistered): delete flow: hash 190914589 index 0 [ 640.816876][T26534] ip_tables: iptables: counters copy to user failed while replacing table [ 640.868209][T26536] bond9: option mode: unable to set because the bond device has slaves [ 641.061140][T26545] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 641.192748][T26481] lo speed is unknown, defaulting to 1000 [ 641.214396][T26547] netlink: 'syz.3.5196': attribute type 49 has an invalid length. [ 641.228149][T26547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5196'. [ 641.445498][T26555] bond11: entered promiscuous mode [ 641.447147][T26555] bond11: entered allmulticast mode [ 641.447563][T26555] 8021q: adding VLAN 0 to HW filter on device bond11 [ 641.580822][T26481] lo speed is unknown, defaulting to 1000 [ 641.742815][T26570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5203'. [ 641.776350][T26570] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5203'. [ 641.776376][T26570] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5203'. [ 641.871438][T26481] lo speed is unknown, defaulting to 1000 [ 641.891130][T26575] netlink: Conntrack attr has 4 unknown bytes [ 641.891168][T26575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.196866][T26481] lo speed is unknown, defaulting to 1000 [ 642.333512][T26594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5211'. [ 642.838764][T26609] netlink: 'syz.2.5216': attribute type 1 has an invalid length. [ 642.916931][T26617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5215'. [ 642.968170][T26621] netlink: 2716 bytes leftover after parsing attributes in process `syz.2.5219'. [ 643.059223][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 643.238742][T26630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5221'. [ 643.238772][T26630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5221'. [ 643.238840][T26631] syzkaller0: entered promiscuous mode [ 643.238859][T26631] syzkaller0: entered allmulticast mode [ 643.239515][T26630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5221'. [ 643.699174][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.200170][T26663] netlink: 'syz.1.5229': attribute type 1 has an invalid length. [ 644.393464][T26668] ip6tnl3: entered promiscuous mode [ 644.393486][T26668] ip6tnl3: entered allmulticast mode [ 645.301510][T26691] batadv_slave_1: entered promiscuous mode [ 645.924300][T26720] Set syz1 is full, maxelem 1029 reached [ 646.382946][T26732] netlink: 'syz.2.5246': attribute type 30 has an invalid length. [ 646.448249][T26732] bond1: option arp_missed_max: invalid value (0) [ 646.448272][T26732] bond1: option arp_missed_max: allowed values 1 - 255 [ 646.452047][T26732] bond1 (unregistering): Released all slaves [ 646.683323][T26741] syzkaller0: entered promiscuous mode [ 646.683349][T26741] syzkaller0: entered allmulticast mode [ 647.454488][T26782] netlink: 'syz.2.5254': attribute type 2 has an invalid length. [ 647.601914][T26759] __nla_validate_parse: 3 callbacks suppressed [ 647.601936][T26759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5251'. [ 648.830603][ T2010] block nbd0: Possible stuck request ffff8880286f5080: control (read@0,4096B). Runtime 90 seconds [ 650.194522][T26791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5255'. [ 650.626234][T26804] netlink: 'syz.4.5259': attribute type 9 has an invalid length. [ 650.626332][T26804] netlink: 'syz.4.5259': attribute type 4 has an invalid length. [ 651.504683][T26782] ´: entered promiscuous mode [ 651.519465][T26805] netlink: 'syz.4.5259': attribute type 4 has an invalid length. [ 651.904819][T26820] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 652.063079][T26825] rxe_eth0 speed is unknown, defaulting to 1000 [ 652.768455][T26825] lo speed is unknown, defaulting to 1000 [ 652.829829][T26867] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5275'. [ 653.041420][T26880] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5277'. [ 653.157289][T26876] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 653.317554][T26876] can: request_module (can-proto-0) failed. [ 653.362033][T26836] siw: device registration error -23 [ 653.441795][T26886] pimreg: entered allmulticast mode [ 653.661842][T26891] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5281'. [ 653.814930][T26901] netlink: 'syz.1.5282': attribute type 19 has an invalid length. [ 653.814952][T26901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5282'. [ 654.095328][T26901] netlink: 'syz.1.5282': attribute type 19 has an invalid length. [ 654.095352][T26901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5282'. [ 654.103467][T21372] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.119145][ T3793] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.119197][ T3793] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.119234][ T3793] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.132028][T26917] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1460) ! [ 654.241526][T26915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5284'. [ 654.870536][ T3282] IPVS: starting estimator thread 0... [ 654.931970][T26941] v: renamed from vlan1 [ 654.961346][T26956] IPVS: using max 30 ests per chain, 72000 per kthread [ 654.975322][T26941] ipt_REJECT: ECHOREPLY no longer supported. [ 655.672313][T27005] syzkaller0: left promiscuous mode [ 655.672337][T27005] syzkaller0: left allmulticast mode [ 655.675743][T27006] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5306'. [ 655.707038][T27004] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5306'. [ 655.894087][T27023] netlink: 'syz.4.5309': attribute type 1 has an invalid length. [ 655.971817][T27017] bond12: (slave veth7): Enslaving as an active interface with a down link [ 655.993021][T27017] bond12: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 656.035969][T27030] syzkaller0: entered promiscuous mode [ 656.035995][T27030] syzkaller0: entered allmulticast mode [ 656.117398][T26981] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 656.464120][T27041] vti0: entered promiscuous mode [ 656.487453][T27043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5316'. [ 656.489746][T27041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5316'. [ 656.993601][T27064] netlink: 'syz.1.5319': attribute type 7 has an invalid length. [ 657.845593][T27076] __nla_validate_parse: 12 callbacks suppressed [ 657.845615][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5322'. [ 657.845731][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5322'. [ 657.845835][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5322'. [ 657.845930][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5322'. [ 657.846033][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5322'. [ 657.846146][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5322'. [ 657.846247][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5322'. [ 657.846345][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5322'. [ 657.846446][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5322'. [ 657.846547][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5322'. [ 658.027397][T27081] : renamed from bond0 [ 658.526969][T27098] netlink: 'syz.2.5327': attribute type 10 has an invalid length. [ 658.546547][T27098] netlink: 'syz.2.5327': attribute type 10 has an invalid length. [ 658.968492][T27116] xt_hashlimit: size too large, truncated to 1048576 [ 659.807475][T27167] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 660.392925][T27179] tipc: Enabled bearer , priority 0 [ 660.404357][T27191] tipc: Resetting bearer [ 660.634305][T27209] netlink: 'syz.4.5346': attribute type 1 has an invalid length. [ 660.768796][T27209] bond13: option mode: invalid value (12) [ 660.783084][T27209] bond13 (unregistering): Released all slaves [ 661.841760][T27257] netlink: 'syz.2.5354': attribute type 1 has an invalid length. [ 661.995013][T27257] bond3: entered promiscuous mode [ 662.011103][T27257] 8021q: adding VLAN 0 to HW filter on device bond3 [ 662.026890][T27266] sctp: [Deprecated]: syz.1.5356 (pid 27266) Use of int in max_burst socket option. [ 662.026890][T27266] Use struct sctp_assoc_value instead [ 662.085746][T27264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 662.112592][T27264] bond3: (slave gre2): The slave device specified does not support setting the MAC address [ 662.112621][T27264] bond3: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 662.146957][T27264] bond3: (slave gre2): making interface the new active one [ 662.146985][T27264] gre2: entered promiscuous mode [ 662.163989][T27264] bond3: (slave gre2): Enslaving as an active interface with an up link [ 662.167218][T27270] netlink: 'syz.1.5356': attribute type 7 has an invalid length. [ 662.167239][T27270] netlink: 'syz.1.5356': attribute type 8 has an invalid length. [ 662.259358][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 662.369764][T27273] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000 [ 662.524296][T22096] IPVS: starting estimator thread 0... [ 662.528238][T27282] IPVS: ip_vs_add_dest(): tunnel port is zero [ 662.610815][T27284] IPVS: using max 30 ests per chain, 72000 per kthread [ 662.666044][T27287] batadv0: entered promiscuous mode [ 662.672112][T27287] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 663.466399][T27312] __nla_validate_parse: 32 callbacks suppressed [ 663.466421][T27312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5366'. [ 663.560477][T27321] netlink: 'syz.4.5367': attribute type 11 has an invalid length. [ 663.727487][T27321] rxe_eth0 speed is unknown, defaulting to 1000 [ 663.769243][T27331] netlink: 'syz.4.5367': attribute type 1 has an invalid length. [ 663.794929][T27332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5370'. [ 663.884938][T27331] 8021q: adding VLAN 0 to HW filter on device bond13 [ 663.952343][T27336] netlink: 'syz.3.5371': attribute type 1 has an invalid length. [ 664.043683][T27336] 8021q: adding VLAN 0 to HW filter on device bond12 [ 664.137329][T27340] bond12: (slave veth7): Enslaving as a backup interface with a down link [ 664.171169][ T3793] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 664.174585][T27336] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 664.205411][T27321] lo speed is unknown, defaulting to 1000 [ 664.279295][T21372] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 664.303370][T27339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5372'. [ 664.751472][T27356] openvswitch: netlink: IPv4 tun info is not correct [ 664.985581][T27369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5378'. [ 665.057961][T27369] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5378'. [ 665.361682][T27373] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5379'. [ 666.323092][T27406] bond0: (slave ip6tnl0): refused to change device type [ 666.333768][T27409] netlink: 'syz.0.5387': attribute type 1 has an invalid length. [ 666.366373][T27409] 8021q: adding VLAN 0 to HW filter on device bond10 [ 666.403639][T27409] bond10: (slave geneve5): making interface the new active one [ 666.405164][T27409] bond10: (slave geneve5): Enslaving as an active interface with an up link [ 666.679963][T27420] syzkaller1: entered promiscuous mode [ 666.679988][T27420] syzkaller1: entered allmulticast mode [ 666.956644][T27430] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5394'. [ 667.605832][T27451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5402'. [ 667.618021][T27449] syzkaller0: entered promiscuous mode [ 667.618043][T27449] syzkaller0: entered allmulticast mode [ 667.631519][T27449] openvswitch: netlink: EtherType 0 is less than min 600 [ 667.638126][T27451] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5402'. [ 667.943994][T27465] netlink: 'syz.2.5406': attribute type 33 has an invalid length. [ 667.944017][T27465] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5406'. [ 667.966072][T27467] netlink: 'syz.1.5407': attribute type 9 has an invalid length. [ 667.972577][T27470] netlink: 'syz.1.5407': attribute type 9 has an invalid length. [ 668.009624][T27474] netlink: 'syz.2.5406': attribute type 33 has an invalid length. [ 668.311458][T27493] sctp: [Deprecated]: syz.2.5411 (pid 27493) Use of int in maxseg socket option. [ 668.311458][T27493] Use struct sctp_assoc_value instead [ 668.911529][T27504] __nla_validate_parse: 9 callbacks suppressed [ 668.911550][T27504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5415'. [ 668.919844][T27504] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5415'. [ 669.508002][T27513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5417'. [ 669.837540][T27534] xt_bpf: check failed: parse error [ 670.202848][T27545] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5425'. [ 670.302198][T27549] syzkaller0: entered promiscuous mode [ 670.302223][T27549] syzkaller0: entered allmulticast mode [ 670.437570][T27564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5431'. [ 673.123168][ T12] bond12: (slave dummy0): link status up again after 0 ms [ 673.141423][ T12] bond12: (slave dummy0): failed to get link speed/duplex [ 673.249124][ T12] bond12: (slave dummy0): failed to get link speed/duplex [ 673.256218][T27588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5439'. [ 673.285446][T27593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5439'. [ 673.362977][ T62] bond12: (slave dummy0): failed to get link speed/duplex [ 673.463724][T27599] vlan0: entered promiscuous mode [ 673.463746][T27599] bond0: entered promiscuous mode [ 673.482472][T27603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5443'. [ 673.521255][T27603] tap0: tun_chr_ioctl cmd 1074025677 [ 673.521374][T27603] tap0: linktype set to 805 [ 673.529580][T22096] bond12: (slave dummy0): failed to get link speed/duplex [ 673.562038][T27599] vlan0: entered promiscuous mode [ 673.577956][T27603] tap0: tun_chr_ioctl cmd 0 [ 673.628673][T27599] vlan0: entered promiscuous mode [ 673.663960][T27616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5445'. [ 673.664002][T27616] netlink: 'syz.0.5445': attribute type 7 has an invalid length. [ 673.664017][T27616] netlink: 'syz.0.5445': attribute type 8 has an invalid length. [ 673.664031][T27616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5445'. [ 673.680534][T27620] netlink: zone id is out of range [ 673.680551][T27620] netlink: zone id is out of range [ 673.680560][T27620] netlink: zone id is out of range [ 673.680568][T27620] netlink: zone id is out of range [ 673.680577][T27620] netlink: zone id is out of range [ 673.695728][T27616] netlink: 'syz.0.5445': attribute type 7 has an invalid length. [ 673.695751][T27616] netlink: 'syz.0.5445': attribute type 8 has an invalid length. [ 673.705665][T27599] vlan0: entered promiscuous mode [ 673.808418][T27599] vlan0: entered promiscuous mode [ 673.861383][T27599] vlan0: entered promiscuous mode [ 673.932724][T27599] vlan0: entered promiscuous mode [ 673.998819][T27599] vlan0: entered promiscuous mode [ 674.069741][T27599] vlan0: entered promiscuous mode [ 674.131719][T27599] vlan0: entered promiscuous mode [ 674.221386][T27599] vlan0: entered promiscuous mode [ 674.322006][T27634] syzkaller1: entered promiscuous mode [ 674.322030][T27634] syzkaller1: entered allmulticast mode [ 674.516394][T27658] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20001 [ 674.613009][T27664] __nla_validate_parse: 4 callbacks suppressed [ 674.613028][T27664] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5454'. [ 674.776231][T27665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5454'. [ 674.817587][T27665] bridge10: entered allmulticast mode [ 675.174305][T27683] macvlan0: entered promiscuous mode [ 675.174340][T27683] macvlan0: entered allmulticast mode [ 675.174608][T27683] geneve1: entered allmulticast mode [ 675.182826][T27683] team0: Port device macvlan0 added [ 675.372275][T27692] team0: entered promiscuous mode [ 675.372543][T27692] team0: entered allmulticast mode [ 675.374649][T27692] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.375147][T27692] team0: Cannot enslave team device to itself [ 675.380617][T27692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5462'. [ 676.038192][T27704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5464'. [ 676.918031][T27725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5471'. [ 676.933256][T27725] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5471'. [ 677.374795][T27753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5477'. [ 677.457351][T27746] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5478'. [ 677.482241][T27756] bond11: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 677.486982][T27756] bond11 (unregistering): Released all slaves [ 677.648398][T27759] syzkaller1: entered promiscuous mode [ 677.648424][T27759] syzkaller1: entered allmulticast mode [ 677.763367][ T30] audit: type=1800 audit(1792775837.291:50): pid=27770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5483" name=CB dev="tmpfs" ino=2370 res=0 errno=-22 [ 677.766081][ T30] audit: type=1800 audit(1792775837.291:51): pid=27771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5483" name=CB dev="tmpfs" ino=2370 res=0 errno=-22 [ 677.919808][T27782] netpci0: tun_chr_ioctl cmd 1074025678 [ 677.919832][T27782] netpci0: group set to 0 [ 678.140919][ T3282] net_ratelimit: 32 callbacks suppressed [ 678.140942][ T3282] bond12: (slave dummy0): failed to get link speed/duplex [ 678.315925][ T62] bond12: (slave dummy0): failed to get link speed/duplex [ 678.459020][ T3793] bond12: (slave dummy0): failed to get link speed/duplex [ 678.609064][T21372] bond12: (slave dummy0): failed to get link speed/duplex [ 678.702064][T27824] netlink: 'syz.3.5492': attribute type 1 has an invalid length. [ 678.749013][T21372] bond12: (slave dummy0): failed to get link speed/duplex [ 678.859090][ T3793] bond12: (slave dummy0): failed to get link speed/duplex [ 678.860773][T27828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5493'. [ 678.877240][ T3793] IPVS: starting estimator thread 0... [ 678.900832][ T2010] block nbd0: Possible stuck request ffff8880286f5080: control (read@0,4096B). Runtime 120 seconds [ 678.962981][T27832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5493'. [ 678.981422][T27829] IPVS: using max 31 ests per chain, 74400 per kthread [ 679.539128][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 679.682416][T21372] bond12: (slave dummy0): failed to get link speed/duplex [ 679.793295][ T12] bond12: (slave dummy0): failed to get link speed/duplex [ 679.899837][ T62] bond12: (slave dummy0): failed to get link speed/duplex [ 680.014183][T21372] bond12: (slave dummy0): failed to get link speed/duplex [ 680.442784][T27860] netlink: 'syz.1.5502': attribute type 62 has an invalid length. [ 680.790295][T27877] bridge0: port 1(veth0) entered disabled state [ 680.791204][T27877] bridge0: entered allmulticast mode [ 680.836076][T27877] veth0: left allmulticast mode [ 680.836101][T27877] veth0: left promiscuous mode [ 680.836309][T27877] bridge0: port 1(veth0) entered disabled state [ 681.091527][T27883] __nla_validate_parse: 3 callbacks suppressed [ 681.091550][T27883] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5508'. [ 681.462851][T27900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5512'. [ 681.528777][T27900] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5512'. [ 681.583728][T27902] netlink: 'syz.4.5513': attribute type 1 has an invalid length. [ 681.920371][T27926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5519'. [ 681.945716][T27926] netlink: 'syz.4.5519': attribute type 27 has an invalid length. [ 682.136516][T27935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5523'. [ 682.136660][T27935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.241879][T27935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.330163][T27940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5525'. [ 682.333730][T27940] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5525'. [ 682.664068][T27956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5528'. [ 682.738101][T27950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5528'. [ 682.763852][T27950] lo speed is unknown, defaulting to 1000 [ 682.763916][T27950] lo speed is unknown, defaulting to 1000 [ 682.765281][T27950] lo speed is unknown, defaulting to 1000 [ 682.767873][T27950] smbdirect: ib_dev[!!0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 682.767909][T27950] smbdirect: ib_dev[!!0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 682.767950][T27950] smbdirect: ib_dev[!!0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 682.858651][T27950] lo speed is unknown, defaulting to 1000 [ 682.866793][T27950] lo speed is unknown, defaulting to 1000 [ 682.868633][T27950] lo speed is unknown, defaulting to 1000 [ 682.885607][T27950] lo speed is unknown, defaulting to 1000 [ 682.887589][T27950] lo speed is unknown, defaulting to 1000 [ 682.903082][T27950] lo speed is unknown, defaulting to 1000 [ 683.179294][ T3793] net_ratelimit: 27 callbacks suppressed [ 683.179316][ T3793] bond12: (slave dummy0): failed to get link speed/duplex [ 683.181805][T27979] xt_TCPMSS: Only works on TCP SYN packets [ 683.289129][ T12] bond12: (slave dummy0): failed to get link speed/duplex [ 683.399763][T21372] bond12: (slave dummy0): failed to get link speed/duplex [ 683.465881][T27996] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 683.510916][ T3793] bond12: (slave dummy0): failed to get link speed/duplex [ 683.619720][T22096] bond12: (slave dummy0): failed to get link speed/duplex [ 683.717978][T28001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.743076][T28001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.744310][T28001] bond0 (unregistering): Released all slaves [ 683.789103][T22096] bond12: (slave dummy0): failed to get link speed/duplex [ 683.797574][T28009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5540'. [ 683.919130][T22096] bond12: (slave dummy0): failed to get link speed/duplex [ 684.029082][T22096] bond12: (slave dummy0): failed to get link speed/duplex [ 684.139080][ T12] bond12: (slave dummy0): failed to get link speed/duplex [ 684.249152][ T3793] bond12: (slave dummy0): failed to get link speed/duplex [ 684.393841][T28031] bond12: (slave dummy0): Removing an active aggregator [ 684.409525][T28031] bond12: (slave dummy0): Releasing backup interface [ 684.454332][T28031] bond7: (slave veth0_to_bond): Releasing active interface [ 684.509923][T28031] bond0: (slave bond_slave_0): Releasing backup interface [ 684.531337][T28031] bond0: (slave bond_slave_1): Releasing backup interface [ 684.563406][T28031] team0: Port device team_slave_0 removed [ 684.578143][T28031] team0: Port device team_slave_1 removed [ 684.578542][T28031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.593782][T28031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.722700][T28047] 8021q: VLANs not supported on ip_vti0 [ 684.799892][T28055] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 685.985793][T28119] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 686.126210][T28129] __nla_validate_parse: 11 callbacks suppressed [ 686.126233][T28129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5574'. [ 686.435544][T28148] tipc: Enabling of bearer rejected, already enabled [ 686.435939][T28148] syzkaller0: entered promiscuous mode [ 686.435957][T28148] syzkaller0: entered allmulticast mode [ 686.915886][T28169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5587'. [ 687.069051][T28176] netlink: 'syz.2.5589': attribute type 1 has an invalid length. [ 687.158119][ T5717] lo speed is unknown, defaulting to 1000 [ 687.468137][T28184] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5593'. [ 687.490685][T28193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5595'. [ 687.524392][T28193] netlink: 'syz.2.5595': attribute type 1 has an invalid length. [ 687.524416][T28193] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5595'. [ 687.525715][T28193] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5595'. [ 687.986949][T28208] bond0: entered promiscuous mode [ 688.072986][T28215] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5602'. [ 688.149664][T28219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5604'. [ 688.167412][T28222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5604'. [ 688.336833][T28230] netlink: 820 bytes leftover after parsing attributes in process `syz.4.5607'. [ 688.560884][T28243] x_tables: duplicate underflow at hook 3 [ 688.561756][T28243] xt_hashlimit: size too large, truncated to 1048576 [ 688.853847][T28254] IPVS: stopping backup sync thread 21738 ... [ 689.610779][T28275] netlink: 'syz.1.5623': attribute type 14 has an invalid length. [ 689.662853][T28278] tipc: Enabling of bearer rejected, failed to enable media [ 689.664661][T28279] tipc: Enabling of bearer rejected, failed to enable media [ 689.775564][T28288] net_ratelimit: 10 callbacks suppressed [ 689.775584][T28288] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 689.990457][T28292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.998745][T28292] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.010093][T28292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.220050][T28292] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 690.220080][T28292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 690.229584][T28292] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 690.978866][T28344] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 690.997906][T28344] ip_tables: iptables: counters copy to user failed while replacing table [ 691.171209][T28349] __nla_validate_parse: 11 callbacks suppressed [ 691.171231][T28349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5642'. [ 691.261425][T28349] geneve1: entered promiscuous mode [ 691.261550][T28349] geneve1: entered allmulticast mode [ 691.547672][T28370] netlink: 'syz.0.5647': attribute type 1 has an invalid length. [ 691.653167][T28373] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 691.656114][T28373] bond0 (unregistering): Released all slaves [ 691.936177][T28383] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5653'. [ 691.971637][T28390] netlink: 'syz.0.5654': attribute type 1 has an invalid length. [ 691.987775][T28384] lo: entered promiscuous mode [ 692.000023][T28384] tunl0: entered promiscuous mode [ 692.002512][T28384] gre0: entered promiscuous mode [ 692.021311][T28384] gretap0: entered promiscuous mode [ 692.029653][T28384] erspan0: entered promiscuous mode [ 692.032382][T28384] ip_vti0: entered promiscuous mode [ 692.035568][T28384] ip6_vti0: entered promiscuous mode [ 692.036152][T28384] sit0: entered promiscuous mode [ 692.051892][T28384] ip6tnl0: entered promiscuous mode [ 692.053957][T28384] ip6gre0: entered promiscuous mode [ 692.076783][T28384] syz_tun: entered promiscuous mode [ 692.086482][T28384] ip6gretap0: entered promiscuous mode [ 692.090767][T28384] vcan0: entered promiscuous mode [ 692.110342][T28384] bond0: entered promiscuous mode [ 692.126230][T28384] team0: entered promiscuous mode [ 692.127263][T28384] dummy0: entered promiscuous mode [ 692.168436][T28384] nlmon0: entered promiscuous mode [ 692.181714][T28384] batadv0: entered promiscuous mode [ 692.190765][T28384] vxcan0: entered promiscuous mode [ 692.198471][T28384] vxcan1: entered promiscuous mode [ 692.220961][T28384] veth0: entered promiscuous mode [ 692.229849][T28384] veth1: entered promiscuous mode [ 692.247066][T28384] wg0: entered promiscuous mode [ 692.254575][T28384] wg1: entered promiscuous mode [ 692.296620][T28384] wg2: entered promiscuous mode [ 692.297597][T28384] veth0_to_bridge: entered promiscuous mode [ 692.315927][T28384] veth1_to_bridge: entered promiscuous mode [ 692.325692][T28384] bridge_slave_1: entered promiscuous mode [ 692.327384][T28384] veth0_to_bond: entered promiscuous mode [ 692.346848][T28384] bond_slave_0: entered promiscuous mode [ 692.361057][T28384] veth1_to_bond: entered promiscuous mode [ 692.364479][T28384] bond_slave_1: entered promiscuous mode [ 692.387309][T28384] veth0_to_team: entered promiscuous mode [ 692.388627][T28384] team_slave_0: entered promiscuous mode [ 692.425895][T28384] veth1_to_team: entered promiscuous mode [ 692.436137][T28384] team_slave_1: entered promiscuous mode [ 692.445688][T28384] veth0_to_batadv: entered promiscuous mode [ 692.456748][T28384] batadv_slave_0: entered promiscuous mode [ 692.474921][T28384] veth1_to_batadv: entered promiscuous mode [ 692.494251][T28384] batadv_slave_1: entered promiscuous mode [ 692.502154][T28384] xfrm0: entered promiscuous mode [ 692.517003][T28384] veth0_to_hsr: entered promiscuous mode [ 692.545406][T28384] veth1_to_hsr: entered promiscuous mode [ 692.570247][T28384] hsr0: entered promiscuous mode [ 692.571139][T28384] veth1_virt_wifi: entered promiscuous mode [ 692.582428][T28384] veth0_virt_wifi: entered promiscuous mode [ 692.589533][T28384] virt_wifi0: entered promiscuous mode [ 692.589965][T28384] ªªªªªª: entered promiscuous mode [ 692.590360][T28384] vlan1: entered promiscuous mode [ 692.590631][T28384] macvlan0: entered promiscuous mode [ 692.594030][T28384] macvlan1: entered promiscuous mode [ 692.594225][T28384] ipvlan0: entered promiscuous mode [ 692.594368][T28384] ipvlan1: entered promiscuous mode [ 692.594755][T28384] macvtap0: entered promiscuous mode [ 692.594899][T28384] macsec0: entered promiscuous mode [ 692.595005][T28384] geneve0: entered promiscuous mode [ 692.595150][T28384] geneve1: entered promiscuous mode [ 692.595321][T28384] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 692.595443][T28384] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 692.598794][T28384] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 692.602217][T28384] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 692.602348][T28384] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 692.602495][T28384] bond1: entered promiscuous mode [ 692.602615][T28384] bond2: entered promiscuous mode [ 692.602728][T28384] geneve2: entered promiscuous mode [ 692.602934][T28384] vti0: entered promiscuous mode [ 692.631443][T28384] ip6tnl1: entered promiscuous mode [ 692.641385][T28384] bond5: entered promiscuous mode [ 692.654238][T28384] veth2: entered promiscuous mode [ 692.672711][T28384] bond7: entered promiscuous mode [ 692.672862][T28384] veth4: entered promiscuous mode [ 692.676288][T28384] veth5: entered promiscuous mode [ 692.679322][T28384] bridge1: entered promiscuous mode [ 692.679466][T28384] bond8: entered promiscuous mode [ 692.679720][T28384] bond9: entered promiscuous mode [ 692.679830][T28384] bond10: entered promiscuous mode [ 692.734405][T28384] bond12: entered promiscuous mode [ 692.734437][T28384] veth7: entered promiscuous mode [ 692.746177][T28384] veth6: entered promiscuous mode [ 692.753177][T28384] bridge5: entered promiscuous mode [ 692.981322][T28423] netlink: 'syz.2.5661': attribute type 1 has an invalid length. [ 693.045944][T28423] 8021q: adding VLAN 0 to HW filter on device bond4 [ 693.121081][T28436] SET target dimension over the limit! [ 693.452442][T28464] sctp: [Deprecated]: syz.2.5667 (pid 28464) Use of int in max_burst socket option. [ 693.452442][T28464] Use struct sctp_assoc_value instead [ 693.453781][T28464] syzkaller0: left promiscuous mode [ 693.453801][T28464] syzkaller0: left allmulticast mode [ 694.291083][T28496] netlink: Only one type of NAT may be specified [ 694.291114][T28496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.363597][T28499] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002 [ 694.505406][T28508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5675'. [ 694.543425][T28508] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5675'. [ 694.637508][T28512] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 694.788310][T28522] block nbd2: server does not support multiple connections per device. [ 694.799147][T28522] block nbd2: shutting down sockets [ 695.010160][T28535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5681'. [ 695.028698][T28535] vlan0: entered promiscuous mode [ 695.028721][T28535] bridge0: entered promiscuous mode [ 695.063399][T28542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5681'. [ 695.288046][T28548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5688'. [ 695.300714][T28559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5686'. [ 695.356398][T28569] sctp: [Deprecated]: syz.3.5687 (pid 28569) Use of int in max_burst socket option deprecated. [ 695.356398][T28569] Use struct sctp_assoc_value instead [ 695.444173][T28553] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 695.465298][T28553] bond13 (unregistering): Released all slaves [ 695.826417][T28574] syzkaller1: entered promiscuous mode [ 695.826441][T28574] syzkaller1: entered allmulticast mode [ 695.827019][T28588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5690'. [ 695.827049][T28588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5690'. [ 696.340362][T28613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5693'. [ 696.897120][T28637] nbd3: detected capacity change from 0 to 63 [ 696.906200][T28637] block nbd3: NBD_DISCONNECT [ 696.916444][T28637] block nbd3: Disconnected due to user request. [ 696.929715][ T2010] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 696.929874][ T2010] Buffer I/O error on dev nbd3, logical block 1, async page read [ 696.929916][ T2010] Buffer I/O error on dev nbd3, logical block 2, async page read [ 696.929931][ T2010] Buffer I/O error on dev nbd3, logical block 3, async page read [ 696.930432][T28637] block nbd3: shutting down sockets [ 697.019026][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.019160][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 697.080436][T28642] netlink: 'syz.3.5697': attribute type 219 has an invalid length. [ 697.086098][ T1985] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 697.086134][ T1985] Buffer I/O error on dev nbd3, logical block 0, async page read [ 697.086153][ T1985] Buffer I/O error on dev nbd3, logical block 1, async page read [ 697.086169][ T1985] Buffer I/O error on dev nbd3, logical block 2, async page read [ 697.086185][ T1985] Buffer I/O error on dev nbd3, logical block 3, async page read [ 697.094846][ T1985] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 697.094880][ T1985] Buffer I/O error on dev nbd3, logical block 0, async page read [ 697.094899][ T1985] Buffer I/O error on dev nbd3, logical block 1, async page read [ 697.096701][ T1985] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 697.097140][ T1985] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 697.097817][ T1985] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 697.098063][ T1985] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 697.098262][ T1985] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 697.099982][T23648] ldm_validate_partition_table(): Disk read failed. [ 697.100149][ T1985] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 697.103727][T23648] Dev nbd3: unable to read RDB block 0 [ 697.108575][T23648] nbd3: unable to read partition table [ 697.281964][T23648] ldm_validate_partition_table(): Disk read failed. [ 697.287545][T23648] Dev nbd3: unable to read RDB block 0 [ 697.293692][T23648] nbd3: unable to read partition table [ 697.429793][T28653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5701'. [ 697.429819][T28653] netlink: 11 bytes leftover after parsing attributes in process `syz.3.5701'. [ 697.429835][T28653] netlink: 11 bytes leftover after parsing attributes in process `syz.3.5701'. [ 697.429850][T28653] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5701'. [ 698.088565][T28687] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 698.143050][T28690] netlink: 'syz.1.5704': attribute type 1 has an invalid length. [ 698.228111][T28695] gretap1: entered allmulticast mode [ 698.246601][T28695] bond13: (slave gretap1): making interface the new active one [ 698.258175][T28695] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 698.623693][T28714] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5710'. [ 698.893593][T28731] macvlan2: entered allmulticast mode [ 698.893618][T28731] bridge0: entered allmulticast mode [ 698.894931][T28717] netlink: 'syz.2.5711': attribute type 12 has an invalid length. [ 698.894951][T28717] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5711'. [ 698.948287][T28733] macvlan3: entered allmulticast mode [ 699.169188][T28743] netlink: 'syz.1.5716': attribute type 21 has an invalid length. [ 699.169188][T28742] netlink: 'syz.1.5716': attribute type 21 has an invalid length. [ 699.169213][T28742] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5716'. [ 699.169237][T28743] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5716'. [ 699.169262][T28742] netlink: 'syz.1.5716': attribute type 4 has an invalid length. [ 699.169274][T28742] netlink: 'syz.1.5716': attribute type 3 has an invalid length. [ 699.169284][T28742] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5716'. [ 699.175180][T28743] netlink: 'syz.1.5716': attribute type 4 has an invalid length. [ 699.175234][T28743] netlink: 'syz.1.5716': attribute type 3 has an invalid length. [ 699.774619][T28757] netlink: 'syz.4.5719': attribute type 21 has an invalid length. [ 700.002653][T28757] netlink: 'syz.4.5719': attribute type 5 has an invalid length. [ 700.140133][T28759] bond14: option ad_select: invalid value (34) [ 700.171349][T28759] bond14 (unregistering): Released all slaves [ 700.240608][T28762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.327997][T28772] bond0: (slave gretap2): making interface the new active one [ 700.329240][T28772] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 700.861272][T28821] block nbd2: Unsupported socket: should be TCP or UNIX. [ 701.939086][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 702.222719][T28880] geneve6: entered promiscuous mode [ 702.293913][T28883] ip_tables: iptables: counters copy to user failed while replacing table [ 703.406194][T28944] __nla_validate_parse: 6 callbacks suppressed [ 703.406246][T28944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5756'. [ 703.732979][T28970] sctp: [Deprecated]: syz.2.5761 (pid 28970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 703.732979][T28970] Use struct sctp_sack_info instead [ 703.734821][T28970] sctp: [Deprecated]: syz.2.5761 (pid 28970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 703.734821][T28970] Use struct sctp_sack_info instead [ 705.775257][T29033] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 708.980458][ T2010] block nbd0: Possible stuck request ffff8880286f5080: control (read@0,4096B). Runtime 150 seconds [ 719.349775][T21118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 719.358632][T21118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 719.366843][T21118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 719.386956][T21118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 719.387651][T21118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 719.419838][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 719.427929][T21118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 719.428856][T21118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 719.433654][T21118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 719.434790][T21118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 719.446945][T21118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 719.447792][T21118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 719.458420][T29044] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 719.486941][T21118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 719.494488][T29045] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 720.058072][T29045] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 720.071558][T29045] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 720.072994][T29045] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 720.073870][T29045] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 720.074444][T29045] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 720.174290][T29045] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 720.184783][T29045] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 720.194984][T29045] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 720.196929][T29045] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 720.197559][T29045] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 720.271386][T29040] rxe_eth0 speed is unknown, defaulting to 1000 [ 720.551789][T29042] rxe_eth0 speed is unknown, defaulting to 1000 [ 720.552859][T29040] lo speed is unknown, defaulting to 1000 [ 720.923822][T29040] lo speed is unknown, defaulting to 1000 [ 720.953836][T29063] rxe_eth0 speed is unknown, defaulting to 1000 [ 720.955349][T29042] lo speed is unknown, defaulting to 1000 [ 721.294425][T29040] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.296069][T29040] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.296237][T29040] bridge_slave_0: entered allmulticast mode [ 721.297984][T29040] bridge_slave_0: entered promiscuous mode [ 721.317130][T29040] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.317269][T29040] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.317418][T29040] bridge_slave_1: entered allmulticast mode [ 721.325153][T29040] bridge_slave_1: entered promiscuous mode [ 721.368427][T29067] rxe_eth0 speed is unknown, defaulting to 1000 [ 721.390284][T29042] lo speed is unknown, defaulting to 1000 [ 721.390356][T29063] lo speed is unknown, defaulting to 1000 [ 721.418070][T29040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.443656][T29040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.521782][T29040] team0: Port device team_slave_0 added [ 721.533364][T29040] team0: Port device team_slave_1 added [ 721.540093][T29045] Bluetooth: hci5: command tx timeout [ 721.620529][T29045] Bluetooth: hci6: command tx timeout [ 721.657003][T29040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.657021][T29040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.657047][T29040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.667843][T29040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.667860][T29040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.667885][T29040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.893179][T29067] lo speed is unknown, defaulting to 1000 [ 721.911556][T29040] hsr_slave_0: entered promiscuous mode [ 721.914397][T29040] hsr_slave_1: entered promiscuous mode [ 721.915665][T29063] lo speed is unknown, defaulting to 1000 [ 721.977242][ T5633] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 722.001714][ T5633] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 722.005742][ T5633] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 722.023762][ T5633] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 722.024442][ T5633] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 722.179159][ T5633] Bluetooth: hci7: command tx timeout [ 722.259039][ T5633] Bluetooth: hci8: command tx timeout [ 722.280846][T29067] lo speed is unknown, defaulting to 1000 [ 722.525518][T29042] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.525670][T29042] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.525824][T29042] bridge_slave_0: entered allmulticast mode [ 722.527881][T29042] bridge_slave_0: entered promiscuous mode [ 722.562351][T29042] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.562454][T29042] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.562598][T29042] bridge_slave_1: entered allmulticast mode [ 722.564543][T29042] bridge_slave_1: entered promiscuous mode [ 722.663528][T29042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.686873][T29042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.770458][T29042] team0: Port device team_slave_0 added [ 722.795236][T29042] team0: Port device team_slave_1 added [ 722.836992][T29095] rxe_eth0 speed is unknown, defaulting to 1000 [ 722.891083][T29042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.891101][T29042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.891128][T29042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.909405][T29042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.909424][T29042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.909455][T29042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.124327][T29042] hsr_slave_0: entered promiscuous mode [ 723.126931][T29042] hsr_slave_1: entered promiscuous mode [ 723.127670][T29042] debugfs: 'hsr0' already exists in 'hsr' [ 723.127691][T29042] Cannot create hsr debugfs directory [ 723.160964][T29095] lo speed is unknown, defaulting to 1000 [ 723.312880][T29063] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.313037][T29063] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.313175][T29063] bridge_slave_0: entered allmulticast mode [ 723.315818][T29063] bridge_slave_0: entered promiscuous mode [ 723.356069][T29095] lo speed is unknown, defaulting to 1000 [ 723.369624][T29063] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.369801][T29063] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.369927][T29063] bridge_slave_1: entered allmulticast mode [ 723.371279][T29063] bridge_slave_1: entered promiscuous mode [ 723.444450][T29063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.471276][T29063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.475367][T29067] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.475490][T29067] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.475568][T29067] bridge_slave_0: entered allmulticast mode [ 723.476544][T29067] bridge_slave_0: entered promiscuous mode [ 723.508044][T29067] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.508146][T29067] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.508581][T29067] bridge_slave_1: entered allmulticast mode [ 723.511665][T29067] bridge_slave_1: entered promiscuous mode [ 723.583385][T29063] team0: Port device team_slave_0 added [ 723.593551][T29067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.614477][T29063] team0: Port device team_slave_1 added [ 723.620931][ T5633] Bluetooth: hci5: command tx timeout [ 723.646226][T29067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.700853][ T5633] Bluetooth: hci6: command tx timeout [ 723.705226][T29063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.705243][T29063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.705265][T29063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.723936][T29067] team0: Port device team_slave_0 added [ 723.725446][T29063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.725462][T29063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.725487][T29063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.743096][T29067] team0: Port device team_slave_1 added [ 723.833601][T29067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.833620][T29067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.833644][T29067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.894234][T29067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.894253][T29067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.894278][T29067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.957805][T29063] hsr_slave_0: entered promiscuous mode [ 723.958852][T29063] hsr_slave_1: entered promiscuous mode [ 723.965460][T29063] debugfs: 'hsr0' already exists in 'hsr' [ 723.965484][T29063] Cannot create hsr debugfs directory [ 724.086777][T29067] hsr_slave_0: entered promiscuous mode [ 724.087444][T29067] hsr_slave_1: entered promiscuous mode [ 724.087876][T29067] debugfs: 'hsr0' already exists in 'hsr' [ 724.087895][T29067] Cannot create hsr debugfs directory [ 724.109408][ T5633] Bluetooth: hci9: command tx timeout [ 724.259523][ T5633] Bluetooth: hci7: command tx timeout [ 724.326346][T29095] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.326500][T29095] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.326589][T29095] bridge_slave_0: entered allmulticast mode [ 724.327598][T29095] bridge_slave_0: entered promiscuous mode [ 724.341219][T29095] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.341322][T29095] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.341463][T29095] bridge_slave_1: entered allmulticast mode [ 724.344144][T29095] bridge_slave_1: entered promiscuous mode [ 724.349577][T29045] Bluetooth: hci8: command tx timeout [ 724.388190][T29095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.399780][T29095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.447512][T29095] team0: Port device team_slave_0 added [ 724.451973][T29095] team0: Port device team_slave_1 added [ 724.496883][T29095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.496900][T29095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.496923][T29095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.549780][T29095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.549799][T29095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.549825][T29095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.651892][T29095] hsr_slave_0: entered promiscuous mode [ 724.652578][T29095] hsr_slave_1: entered promiscuous mode [ 724.653017][T29095] debugfs: 'hsr0' already exists in 'hsr' [ 724.653038][T29095] Cannot create hsr debugfs directory [ 725.699239][ T5633] Bluetooth: hci5: command tx timeout [ 725.789401][ T5633] Bluetooth: hci6: command tx timeout [ 726.189589][ T5633] Bluetooth: hci9: command tx timeout [ 726.339210][ T5633] Bluetooth: hci7: command tx timeout [ 726.419215][ T5633] Bluetooth: hci8: command tx timeout [ 727.779300][ T5633] Bluetooth: hci5: command tx timeout [ 727.859804][ T5633] Bluetooth: hci6: command tx timeout [ 728.259534][ T5633] Bluetooth: hci9: command tx timeout [ 728.419178][ T5633] Bluetooth: hci7: command tx timeout [ 728.499576][ T5633] Bluetooth: hci8: command tx timeout [ 730.339264][ T5633] Bluetooth: hci9: command tx timeout [ 739.059568][ T2010] block nbd0: Possible stuck request ffff8880286f5080: control (read@0,4096B). Runtime 180 seconds [ 739.870904][ T4993] udevd[4993]: worker [23166] /devices/virtual/block/nbd0 timeout; kill it [ 739.872086][ T4993] udevd[4993]: seq 24786 '/devices/virtual/block/nbd0' killed [ 752.509826][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 769.151096][ T2010] block nbd0: Possible stuck request ffff8880286f5080: control (read@0,4096B). Runtime 210 seconds [ 779.459126][T29045] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 779.467592][T29045] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 779.479052][T29045] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 779.483604][T21118] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 779.494158][T21118] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 779.495098][T21118] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 779.495701][T21118] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 779.501311][T21118] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 779.533786][T21118] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 779.534453][T21118] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 780.045058][T29138] rxe_eth0 speed is unknown, defaulting to 1000 [ 780.134599][T21118] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 780.141957][T21118] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 780.148671][T21118] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 780.162774][T21118] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 780.163613][T21118] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 780.306013][T21118] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 780.317315][T21118] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 780.318355][T21118] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 780.336897][T21118] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 780.338691][T21118] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 780.394888][T29137] rxe_eth0 speed is unknown, defaulting to 1000 [ 780.397902][T29138] lo speed is unknown, defaulting to 1000 [ 780.841952][T29138] lo speed is unknown, defaulting to 1000 [ 780.848076][T29137] lo speed is unknown, defaulting to 1000 [ 781.031260][T29159] rxe_eth0 speed is unknown, defaulting to 1000 [ 781.248515][T29137] lo speed is unknown, defaulting to 1000 [ 781.351359][T29159] lo speed is unknown, defaulting to 1000 [ 781.351437][T29162] rxe_eth0 speed is unknown, defaulting to 1000 [ 781.455865][T29138] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.455984][T29138] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.456497][T29138] bridge_slave_0: entered allmulticast mode [ 781.462443][T29138] bridge_slave_0: entered promiscuous mode [ 781.493863][T29138] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.493983][T29138] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.494437][T29138] bridge_slave_1: entered allmulticast mode [ 781.498135][T29138] bridge_slave_1: entered promiscuous mode [ 781.539235][ T4944] Bluetooth: hci10: command tx timeout [ 781.567648][T29138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.581331][T29138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.620051][ T4944] Bluetooth: hci11: command tx timeout [ 781.671432][T29138] team0: Port device team_slave_0 added [ 781.701066][T29138] team0: Port device team_slave_1 added [ 781.736506][T29159] lo speed is unknown, defaulting to 1000 [ 781.755708][T29162] lo speed is unknown, defaulting to 1000 [ 781.776759][T29138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.776778][T29138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.776804][T29138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.835378][T29138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.835397][T29138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.835431][T29138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.003141][T29162] lo speed is unknown, defaulting to 1000 [ 782.015560][T29138] hsr_slave_0: entered promiscuous mode [ 782.016237][T29138] hsr_slave_1: entered promiscuous mode [ 782.018316][T29138] debugfs: 'hsr0' already exists in 'hsr' [ 782.018338][T29138] Cannot create hsr debugfs directory [ 782.243076][T29137] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.243180][T29137] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.243285][T29137] bridge_slave_0: entered allmulticast mode [ 782.244295][T29137] bridge_slave_0: entered promiscuous mode [ 782.261138][ T4944] Bluetooth: hci12: command tx timeout [ 782.283264][T29137] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.283324][T29137] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.283584][T29137] bridge_slave_1: entered allmulticast mode [ 782.284548][T29137] bridge_slave_1: entered promiscuous mode [ 782.405776][T29137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.420594][ T4944] Bluetooth: hci13: command tx timeout [ 782.468033][T29137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.614622][T21118] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 782.636369][T21118] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 782.637203][T21118] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 782.638515][T21118] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 782.646414][T21118] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 782.715908][T29137] team0: Port device team_slave_0 added [ 782.757398][T29137] team0: Port device team_slave_1 added [ 782.840893][T29137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.840910][T29137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.840936][T29137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.894631][T29137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.894650][T29137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.894675][T29137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.896079][T29159] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.896352][T29159] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.896503][T29159] bridge_slave_0: entered allmulticast mode [ 782.898409][T29159] bridge_slave_0: entered promiscuous mode [ 782.976618][T29159] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.976679][T29159] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.976771][T29159] bridge_slave_1: entered allmulticast mode [ 782.977747][T29159] bridge_slave_1: entered promiscuous mode [ 783.114812][T29159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.162669][T29137] hsr_slave_0: entered promiscuous mode [ 783.164305][T29137] hsr_slave_1: entered promiscuous mode [ 783.164784][T29137] debugfs: 'hsr0' already exists in 'hsr' [ 783.164803][T29137] Cannot create hsr debugfs directory [ 783.207410][T29159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.219553][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 783.250827][T29162] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.251002][T29162] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.251142][T29162] bridge_slave_0: entered allmulticast mode [ 783.253091][T29162] bridge_slave_0: entered promiscuous mode [ 783.256508][T29162] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.256608][T29162] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.256807][T29162] bridge_slave_1: entered allmulticast mode [ 783.258558][T29162] bridge_slave_1: entered promiscuous mode [ 783.356809][T29159] team0: Port device team_slave_0 added [ 783.396793][T29159] team0: Port device team_slave_1 added [ 783.450269][T29162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.452851][T29162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.487380][T29159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.487407][T29159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.487432][T29159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.527450][T29159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.527468][T29159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.527495][T29159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.600661][T29201] rxe_eth0 speed is unknown, defaulting to 1000 [ 783.606132][T29162] team0: Port device team_slave_0 added [ 783.619192][ T4944] Bluetooth: hci10: command tx timeout [ 783.674600][T29162] team0: Port device team_slave_1 added [ 783.699584][ T4944] Bluetooth: hci11: command tx timeout [ 783.770192][T29159] hsr_slave_0: entered promiscuous mode [ 783.771687][T29159] hsr_slave_1: entered promiscuous mode [ 783.772440][T29159] debugfs: 'hsr0' already exists in 'hsr' [ 783.772459][T29159] Cannot create hsr debugfs directory [ 783.773337][T29162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.773350][T29162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.773372][T29162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.850357][T29162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.850375][T29162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.850400][T29162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.936793][T29201] lo speed is unknown, defaulting to 1000 [ 783.986879][T29162] hsr_slave_0: entered promiscuous mode [ 783.988012][T29162] hsr_slave_1: entered promiscuous mode [ 783.988800][T29162] debugfs: 'hsr0' already exists in 'hsr' [ 783.988820][T29162] Cannot create hsr debugfs directory [ 784.202487][T29201] lo speed is unknown, defaulting to 1000 [ 784.349311][ T4944] Bluetooth: hci12: command tx timeout [ 784.499916][ T4944] Bluetooth: hci13: command tx timeout [ 784.567732][T29201] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.567839][T29201] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.567976][T29201] bridge_slave_0: entered allmulticast mode [ 784.569313][T29201] bridge_slave_0: entered promiscuous mode [ 784.572358][T29201] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.572530][T29201] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.572989][T29201] bridge_slave_1: entered allmulticast mode [ 784.574758][T29201] bridge_slave_1: entered promiscuous mode [ 784.616361][T29201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.620567][T29201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.657745][T29201] team0: Port device team_slave_0 added [ 784.668481][T29201] team0: Port device team_slave_1 added [ 784.708629][T29201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.708645][T29201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.708665][T29201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.725634][T29201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.725651][T29201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.725677][T29201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.739457][ T4944] Bluetooth: hci14: command tx timeout [ 784.830794][T29201] hsr_slave_0: entered promiscuous mode [ 784.831489][T29201] hsr_slave_1: entered promiscuous mode [ 784.831907][T29201] debugfs: 'hsr0' already exists in 'hsr' [ 784.831926][T29201] Cannot create hsr debugfs directory [ 785.699329][ T4944] Bluetooth: hci10: command tx timeout [ 785.779241][ T4944] Bluetooth: hci11: command tx timeout [ 786.419940][T21118] Bluetooth: hci12: command tx timeout [ 786.579482][ T4944] Bluetooth: hci13: command tx timeout [ 786.819268][ T4944] Bluetooth: hci14: command tx timeout [ 787.789230][ T4944] Bluetooth: hci10: command tx timeout [ 787.859500][ T4944] Bluetooth: hci11: command tx timeout [ 788.499180][ T4944] Bluetooth: hci12: command tx timeout [ 788.659361][ T4944] Bluetooth: hci13: command tx timeout [ 788.899256][ T4944] Bluetooth: hci14: command tx timeout [ 790.979260][ T4944] Bluetooth: hci14: command tx timeout [ 799.229670][ T2010] block nbd0: Possible stuck request ffff8880286f5080: control (read@0,4096B). Runtime 240 seconds [ 829.300994][ T2010] block nbd0: Possible stuck request ffff8880286f5080: control (read@0,4096B). Runtime 270 seconds [ 839.585430][T21118] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 839.611901][T29044] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 839.613119][T29044] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 839.617773][T29044] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 839.618738][T29044] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 839.626912][T29044] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 839.630906][T29044] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 839.632234][T29044] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 839.632577][T29044] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 839.633437][T29044] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 840.072114][T29234] rxe_eth0 speed is unknown, defaulting to 1000 [ 840.187962][T29234] lo speed is unknown, defaulting to 1000 [ 840.188070][T29232] rxe_eth0 speed is unknown, defaulting to 1000 [ 840.396184][T29234] lo speed is unknown, defaulting to 1000 [ 840.396231][T29232] lo speed is unknown, defaulting to 1000 [ 840.715047][T29232] lo speed is unknown, defaulting to 1000 [ 840.767593][T29044] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 840.778662][T29044] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 840.787326][T29044] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 840.797370][T29044] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 840.798013][T29044] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 840.864548][T29044] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 840.879579][T29044] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 840.880735][T29044] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 840.881580][T29044] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 840.882177][T29044] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 841.201790][T29234] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.201957][T29234] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.202145][T29234] bridge_slave_0: entered allmulticast mode [ 841.203846][T29234] bridge_slave_0: entered promiscuous mode [ 841.234825][T29234] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.234996][T29234] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.235147][T29234] bridge_slave_1: entered allmulticast mode [ 841.236862][T29234] bridge_slave_1: entered promiscuous mode [ 841.334749][T29234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.337945][T29234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.389278][T29234] team0: Port device team_slave_0 added [ 841.392293][T29234] team0: Port device team_slave_1 added [ 841.437102][T29234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.437121][T29234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.437143][T29234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.485127][T29234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.485145][T29234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.485171][T29234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.621339][T21118] Bluetooth: hci6: command 0x0406 tx timeout [ 841.621380][T21118] Bluetooth: hci5: command 0x0406 tx timeout [ 841.700617][ T5633] Bluetooth: hci16: command tx timeout [ 841.701166][ T5633] Bluetooth: hci15: command tx timeout [ 841.722958][T29234] hsr_slave_0: entered promiscuous mode [ 841.723896][T29234] hsr_slave_1: entered promiscuous mode [ 841.724383][T29234] debugfs: 'hsr0' already exists in 'hsr' [ 841.724404][T29234] Cannot create hsr debugfs directory [ 841.791147][T29232] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.791253][T29232] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.791459][T29232] bridge_slave_0: entered allmulticast mode [ 841.794794][T29232] bridge_slave_0: entered promiscuous mode [ 841.820140][T29232] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.820309][T29232] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.820482][T29232] bridge_slave_1: entered allmulticast mode [ 841.823700][T29232] bridge_slave_1: entered promiscuous mode [ 841.867647][T29259] rxe_eth0 speed is unknown, defaulting to 1000 [ 841.879143][T29232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.883464][T29232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.970359][T29232] team0: Port device team_slave_0 added [ 841.990654][T29232] team0: Port device team_slave_1 added [ 842.047326][T29232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.047345][T29232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.047370][T29232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.060507][T29232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.060525][T29232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.060550][T29232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.207751][T29232] hsr_slave_0: entered promiscuous mode [ 842.215813][T29232] hsr_slave_1: entered promiscuous mode [ 842.216529][T29232] debugfs: 'hsr0' already exists in 'hsr' [ 842.216548][T29232] Cannot create hsr debugfs directory [ 842.216752][T29261] rxe_eth0 speed is unknown, defaulting to 1000 [ 842.258432][T29259] lo speed is unknown, defaulting to 1000 [ 842.696887][ T5633] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 842.702717][T29259] lo speed is unknown, defaulting to 1000 [ 842.712060][ T5633] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 842.714971][T29261] lo speed is unknown, defaulting to 1000 [ 842.730386][ T5633] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 842.740620][ T5633] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 842.741333][ T5633] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 842.899150][T29045] Bluetooth: hci17: command tx timeout [ 842.979841][T29045] Bluetooth: hci18: command tx timeout [ 843.028294][T29261] lo speed is unknown, defaulting to 1000 [ 843.465237][T29291] rxe_eth0 speed is unknown, defaulting to 1000 [ 843.550616][T29259] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.550713][T29259] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.550871][T29259] bridge_slave_0: entered allmulticast mode [ 843.554710][T29259] bridge_slave_0: entered promiscuous mode [ 843.627421][T29259] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.627589][T29259] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.627762][T29259] bridge_slave_1: entered allmulticast mode [ 843.629704][T29259] bridge_slave_1: entered promiscuous mode [ 843.697365][T29259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.712664][T29259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.763007][T29291] lo speed is unknown, defaulting to 1000 [ 843.779672][ T5633] Bluetooth: hci16: command tx timeout [ 843.779756][T29045] Bluetooth: hci15: command tx timeout [ 843.816231][T29259] team0: Port device team_slave_0 added [ 843.852719][T29259] team0: Port device team_slave_1 added [ 843.908428][T29261] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.908537][T29261] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.908726][T29261] bridge_slave_0: entered allmulticast mode [ 843.910543][T29261] bridge_slave_0: entered promiscuous mode [ 843.929641][T29261] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.929743][T29261] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.929915][T29261] bridge_slave_1: entered allmulticast mode [ 843.944456][T29261] bridge_slave_1: entered promiscuous mode [ 843.950230][T29259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.950248][T29259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.950273][T29259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.017566][T29259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.017585][T29259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.017611][T29259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.094837][T29261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.117965][T29261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.118044][T29291] lo speed is unknown, defaulting to 1000 [ 844.143467][T29259] hsr_slave_0: entered promiscuous mode [ 844.144138][T29259] hsr_slave_1: entered promiscuous mode [ 844.144576][T29259] debugfs: 'hsr0' already exists in 'hsr' [ 844.144596][T29259] Cannot create hsr debugfs directory [ 844.177783][T29261] team0: Port device team_slave_0 added [ 844.202881][T29261] team0: Port device team_slave_1 added [ 844.251118][T29261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.251135][T29261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.251157][T29261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.278712][T29261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.278730][T29261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.278756][T29261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.385257][T29261] hsr_slave_0: entered promiscuous mode [ 844.385936][T29261] hsr_slave_1: entered promiscuous mode [ 844.386408][T29261] debugfs: 'hsr0' already exists in 'hsr' [ 844.386428][T29261] Cannot create hsr debugfs directory [ 844.777004][T29291] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.777174][T29291] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.777640][T29291] bridge_slave_0: entered allmulticast mode [ 844.786265][T29291] bridge_slave_0: entered promiscuous mode [ 844.789601][T29291] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.789759][T29291] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.789924][T29291] bridge_slave_1: entered allmulticast mode [ 844.791646][T29291] bridge_slave_1: entered promiscuous mode [ 844.820757][T29237] Bluetooth: hci19: command tx timeout [ 844.859941][T29291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.864615][T29291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.927820][T29291] team0: Port device team_slave_0 added [ 844.930326][T29291] team0: Port device team_slave_1 added [ 844.951901][T29291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.951919][T29291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.951944][T29291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.953289][T29291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.953303][T29291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.953328][T29291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.992965][T29237] Bluetooth: hci17: command tx timeout [ 844.997248][T29291] hsr_slave_0: entered promiscuous mode [ 844.998645][T29291] hsr_slave_1: entered promiscuous mode [ 845.003103][T29291] debugfs: 'hsr0' already exists in 'hsr' [ 845.003124][T29291] Cannot create hsr debugfs directory [ 845.062460][T29237] Bluetooth: hci18: command tx timeout [ 845.859353][T29044] Bluetooth: hci16: command tx timeout [ 845.859468][T29237] Bluetooth: hci15: command tx timeout [ 846.743530][T29044] Bluetooth: hci9: command 0x0406 tx timeout [ 846.743574][T29044] Bluetooth: hci8: command 0x0406 tx timeout [ 846.743631][T29237] Bluetooth: hci7: command 0x0406 tx timeout [ 846.900782][T21118] Bluetooth: hci19: command tx timeout [ 847.059218][T21118] Bluetooth: hci17: command tx timeout [ 847.141473][T21118] Bluetooth: hci18: command tx timeout [ 847.939176][T21118] Bluetooth: hci15: command tx timeout [ 847.939241][T21118] Bluetooth: hci16: command tx timeout [ 848.979323][T29045] Bluetooth: hci19: command tx timeout [ 849.139330][T29045] Bluetooth: hci17: command tx timeout [ 849.219679][T29045] Bluetooth: hci18: command tx timeout [ 851.059449][T29045] Bluetooth: hci19: command tx timeout [ 859.379820][ T2010] block nbd0: Possible stuck request ffff8880286f5080: control (read@0,4096B). Runtime 300 seconds [ 864.499447][ T32] INFO: task syz.1.5756:28944 blocked for more than 143 seconds. [ 864.499475][ T32] Not tainted syzkaller #0 [ 864.499485][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 864.499562][ T32] task:syz.1.5756 state:D stack:26000 pid:28944 tgid:28943 ppid:18153 task_flags:0x480140 flags:0x00080002 [ 864.499617][ T32] Call Trace: [ 864.499626][ T32] [ 864.499643][ T32] __schedule+0x17dd/0x5820 [ 864.499680][ T32] ? __lock_acquire+0x747/0x2de0 [ 864.499737][ T32] ? __pfx___schedule+0x10/0x10 [ 864.499760][ T32] ? lock_acquire+0x115/0x350 [ 864.499795][ T32] ? schedule+0x90/0x2b0 [ 864.499825][ T32] schedule+0x164/0x2b0 [ 864.499853][ T32] blk_mq_freeze_queue_wait+0xfc/0x180 [ 864.499977][ T32] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 864.500007][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 864.500052][ T32] queue_limits_commit_update_frozen+0x55/0xd0 [ 864.500082][ T32] nbd_set_size+0x4c5/0x7d0 [ 864.500171][ T32] ? __pfx_nbd_set_size+0x10/0x10 [ 864.500220][ T32] ? nla_memcpy+0x5b/0xc0 [ 864.500262][ T32] nbd_genl_reconfigure+0x7e1/0x1040 [ 864.500304][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 864.500336][ T32] ? __kmalloc_noprof+0x387/0x710 [ 864.500367][ T32] ? __nla_parse+0x40/0x60 [ 864.500402][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 864.500442][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 864.500478][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 864.500527][ T32] ? __lock_acquire+0x747/0x2de0 [ 864.500562][ T32] genl_rcv_msg+0x614/0x7a0 [ 864.500663][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.500690][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 864.500735][ T32] netlink_rcv_skb+0x226/0x4a0 [ 864.500758][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.500787][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 864.500827][ T32] ? down_read+0x2b9/0x320 [ 864.500861][ T32] genl_rcv+0x28/0x40 [ 864.500885][ T32] netlink_unicast+0x8ef/0xa80 [ 864.500932][ T32] netlink_sendmsg+0x7f0/0xb20 [ 864.500959][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.500984][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 864.501015][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 864.501039][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.501060][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 864.501099][ T32] ____sys_sendmsg+0x54e/0x850 [ 864.501133][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 864.501170][ T32] ? import_iovec+0x73/0xa0 [ 864.501196][ T32] ___sys_sendmsg+0x2a5/0x360 [ 864.501220][ T32] ? __lock_acquire+0x747/0x2de0 [ 864.501246][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.501273][ T32] ? futex_wait+0x2a2/0x390 [ 864.501341][ T32] ? __fget_files+0x3a2/0x420 [ 864.501364][ T32] ? __fget_files+0x2a/0x420 [ 864.501393][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 864.501424][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 864.501474][ T32] do_syscall_64+0x166/0x520 [ 864.501512][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.501535][ T32] ? clear_bhb_loop+0x70/0xc0 [ 864.501562][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.501584][ T32] RIP: 0033:0x7f682fb9f559 [ 864.501604][ T32] RSP: 002b:00007f6830b43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.501628][ T32] RAX: ffffffffffffffda RBX: 00007f682fe25fa0 RCX: 00007f682fb9f559 [ 864.501644][ T32] RDX: 0000000000004004 RSI: 0000200000000040 RDI: 0000000000000005 [ 864.501658][ T32] RBP: 00007f682fc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 864.501671][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.501685][ T32] R13: 00007f682fe26038 R14: 00007f682fe25fa0 R15: 00007ffd871718d8 [ 864.501722][ T32] [ 864.501733][ T32] INFO: task syz.3.5762:28963 blocked for more than 143 seconds. [ 864.501749][ T32] Not tainted syzkaller #0 [ 864.501760][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 864.501770][ T32] task:syz.3.5762 state:D stack:28808 pid:28963 tgid:28962 ppid:23640 task_flags:0x400040 flags:0x00080002 [ 864.501823][ T32] Call Trace: [ 864.501831][ T32] [ 864.501845][ T32] __schedule+0x17dd/0x5820 [ 864.501902][ T32] ? __pfx___schedule+0x10/0x10 [ 864.501936][ T32] ? schedule+0x90/0x2b0 [ 864.501962][ T32] schedule+0x164/0x2b0 [ 864.501988][ T32] schedule_preempt_disabled+0x13/0x30 [ 864.502011][ T32] __mutex_lock+0x7c4/0x15a0 [ 864.502041][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 864.502099][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 864.502127][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 864.502158][ T32] ? __lock_acquire+0x747/0x2de0 [ 864.502183][ T32] ? radix_tree_lookup+0x240/0x290 [ 864.502291][ T32] genl_rcv_msg+0x10b/0x7a0 [ 864.502323][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.502360][ T32] netlink_rcv_skb+0x226/0x4a0 [ 864.502379][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.502404][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 864.502436][ T32] ? down_read+0x2b9/0x320 [ 864.502454][ T32] genl_rcv+0x28/0x40 [ 864.502467][ T32] netlink_unicast+0x8ef/0xa80 [ 864.502500][ T32] netlink_sendmsg+0x7f0/0xb20 [ 864.502516][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.502530][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 864.502547][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 864.502560][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.502571][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 864.502590][ T32] __sys_sendto+0x408/0x5a0 [ 864.502607][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 864.502636][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 864.502661][ T32] __x64_sys_sendto+0xde/0x100 [ 864.502676][ T32] do_syscall_64+0x166/0x520 [ 864.502690][ T32] ? trace_irq_disable+0x3b/0x140 [ 864.502704][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.502716][ T32] ? clear_bhb_loop+0x70/0xc0 [ 864.502730][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.502741][ T32] RIP: 0033:0x7f88a835fd8e [ 864.502751][ T32] RSP: 002b:00007f88a9249e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 864.502764][ T32] RAX: ffffffffffffffda RBX: 00007f88a924b6c0 RCX: 00007f88a835fd8e [ 864.502772][ T32] RDX: 0000000000000020 RSI: 00007f88a924a000 RDI: 0000000000000003 [ 864.502779][ T32] RBP: 0000000000000000 R08: 00007f88a9249f04 R09: 000000000000000c [ 864.502787][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 864.502793][ T32] R13: 00007f88a9249f58 R14: 00007f88a924a000 R15: 0000000000000000 [ 864.502811][ T32] [ 864.502818][ T32] INFO: task syz.3.5762:28969 blocked for more than 143 seconds. [ 864.502827][ T32] Not tainted syzkaller #0 [ 864.502833][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 864.502838][ T32] task:syz.3.5762 state:D stack:28368 pid:28969 tgid:28962 ppid:23640 task_flags:0x400040 flags:0x00080002 [ 864.502870][ T32] Call Trace: [ 864.502874][ T32] [ 864.502881][ T32] __schedule+0x17dd/0x5820 [ 864.502911][ T32] ? __pfx___schedule+0x10/0x10 [ 864.502929][ T32] ? schedule+0x90/0x2b0 [ 864.502943][ T32] schedule+0x164/0x2b0 [ 864.502957][ T32] schedule_preempt_disabled+0x13/0x30 [ 864.502970][ T32] __mutex_lock+0x7c4/0x15a0 [ 864.502987][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 864.503007][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 864.503022][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 864.503039][ T32] ? __lock_acquire+0x747/0x2de0 [ 864.503054][ T32] ? radix_tree_lookup+0x240/0x290 [ 864.503069][ T32] genl_rcv_msg+0x10b/0x7a0 [ 864.503086][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.503110][ T32] netlink_rcv_skb+0x226/0x4a0 [ 864.503122][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.503137][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 864.503157][ T32] ? down_read+0x2b9/0x320 [ 864.503174][ T32] genl_rcv+0x28/0x40 [ 864.503187][ T32] netlink_unicast+0x8ef/0xa80 [ 864.503221][ T32] netlink_sendmsg+0x7f0/0xb20 [ 864.503249][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.503267][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 864.503282][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 864.503295][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.503310][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 864.503328][ T32] __sys_sendto+0x408/0x5a0 [ 864.503344][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 864.503373][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 864.503389][ T32] __x64_sys_sendto+0xde/0x100 [ 864.503404][ T32] do_syscall_64+0x166/0x520 [ 864.503417][ T32] ? trace_irq_disable+0x3b/0x140 [ 864.503429][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.503440][ T32] ? clear_bhb_loop+0x70/0xc0 [ 864.503454][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.503465][ T32] RIP: 0033:0x7f88a835fd8e [ 864.503474][ T32] RSP: 002b:00007f88a9228e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 864.503492][ T32] RAX: ffffffffffffffda RBX: 00007f88a922a6c0 RCX: 00007f88a835fd8e [ 864.503501][ T32] RDX: 0000000000000020 RSI: 00007f88a9229000 RDI: 0000000000000003 [ 864.503508][ T32] RBP: 0000000000000000 R08: 00007f88a9228f04 R09: 000000000000000c [ 864.503514][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 864.503521][ T32] R13: 00007f88a9228f58 R14: 00007f88a9229000 R15: 0000000000000000 [ 864.503539][ T32] [ 864.503545][ T32] INFO: task syz.2.5766:29008 blocked for more than 143 seconds. [ 864.503553][ T32] Not tainted syzkaller #0 [ 864.503558][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 864.503563][ T32] task:syz.2.5766 state:D stack:26576 pid:29008 tgid:29007 ppid:18702 task_flags:0x400140 flags:0x00080002 [ 864.503593][ T32] Call Trace: [ 864.503597][ T32] [ 864.503604][ T32] __schedule+0x17dd/0x5820 [ 864.503633][ T32] ? __pfx___schedule+0x10/0x10 [ 864.503652][ T32] ? schedule+0x90/0x2b0 [ 864.503667][ T32] schedule+0x164/0x2b0 [ 864.503681][ T32] schedule_preempt_disabled+0x13/0x30 [ 864.503694][ T32] __mutex_lock+0x7c4/0x15a0 [ 864.503710][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 864.503726][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 864.503740][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 864.503758][ T32] ? __lock_acquire+0x747/0x2de0 [ 864.503772][ T32] ? radix_tree_lookup+0x240/0x290 [ 864.503787][ T32] genl_rcv_msg+0x10b/0x7a0 [ 864.503804][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.503827][ T32] netlink_rcv_skb+0x226/0x4a0 [ 864.503839][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.503854][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 864.503874][ T32] ? down_read+0x2b9/0x320 [ 864.503891][ T32] genl_rcv+0x28/0x40 [ 864.503903][ T32] netlink_unicast+0x8ef/0xa80 [ 864.503929][ T32] netlink_sendmsg+0x7f0/0xb20 [ 864.503944][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.503958][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 864.503973][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 864.503985][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.504000][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 864.504018][ T32] __sys_sendto+0x408/0x5a0 [ 864.504034][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 864.504063][ T32] ? rcu_is_watching+0x16/0xb0 [ 864.504081][ T32] __x64_sys_sendto+0xde/0x100 [ 864.504096][ T32] do_syscall_64+0x166/0x520 [ 864.504109][ T32] ? trace_irq_disable+0x3b/0x140 [ 864.504121][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.504132][ T32] ? clear_bhb_loop+0x70/0xc0 [ 864.504145][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.504156][ T32] RIP: 0033:0x7f4a43f5fd8e [ 864.504165][ T32] RSP: 002b:00007f4a44ea8e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 864.504176][ T32] RAX: ffffffffffffffda RBX: 00007f4a44eaa6c0 RCX: 00007f4a43f5fd8e [ 864.504184][ T32] RDX: 0000000000000020 RSI: 00007f4a44ea9000 RDI: 0000000000000008 [ 864.504191][ T32] RBP: 0000000000000000 R08: 00007f4a44ea8f04 R09: 000000000000000c [ 864.504198][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 864.504206][ T32] R13: 00007f4a44ea8f58 R14: 00007f4a44ea9000 R15: 0000000000000000 [ 864.504238][ T32] [ 864.504246][ T32] INFO: task syz.4.5767:29010 blocked for more than 143 seconds. [ 864.504259][ T32] Not tainted syzkaller #0 [ 864.504264][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 864.504269][ T32] task:syz.4.5767 state:D stack:24264 pid:29010 tgid:29009 ppid:17030 task_flags:0x400140 flags:0x00080002 [ 864.504298][ T32] Call Trace: [ 864.504302][ T32] [ 864.504309][ T32] __schedule+0x17dd/0x5820 [ 864.504339][ T32] ? __pfx___schedule+0x10/0x10 [ 864.504357][ T32] ? schedule+0x90/0x2b0 [ 864.504372][ T32] schedule+0x164/0x2b0 [ 864.504386][ T32] schedule_preempt_disabled+0x13/0x30 [ 864.504398][ T32] __mutex_lock+0x7c4/0x15a0 [ 864.504415][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 864.504431][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 864.504446][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 864.504463][ T32] ? __lock_acquire+0x747/0x2de0 [ 864.504478][ T32] ? radix_tree_lookup+0x240/0x290 [ 864.504498][ T32] genl_rcv_msg+0x10b/0x7a0 [ 864.504515][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.504539][ T32] netlink_rcv_skb+0x226/0x4a0 [ 864.504550][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.504565][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 864.504585][ T32] ? down_read+0x2b9/0x320 [ 864.504602][ T32] genl_rcv+0x28/0x40 [ 864.504614][ T32] netlink_unicast+0x8ef/0xa80 [ 864.504640][ T32] netlink_sendmsg+0x7f0/0xb20 [ 864.504655][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.504669][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 864.504684][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 864.504697][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.504707][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 864.504725][ T32] __sys_sendto+0x408/0x5a0 [ 864.504741][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 864.504770][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 864.504786][ T32] __x64_sys_sendto+0xde/0x100 [ 864.504801][ T32] do_syscall_64+0x166/0x520 [ 864.504814][ T32] ? trace_irq_disable+0x3b/0x140 [ 864.504826][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.504838][ T32] ? clear_bhb_loop+0x70/0xc0 [ 864.504851][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.504862][ T32] RIP: 0033:0x7f95e515fd8e [ 864.504872][ T32] RSP: 002b:00007f95e6050e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 864.504882][ T32] RAX: ffffffffffffffda RBX: 00007f95e60526c0 RCX: 00007f95e515fd8e [ 864.504890][ T32] RDX: 0000000000000028 RSI: 00007f95e6051000 RDI: 0000000000000007 [ 864.504897][ T32] RBP: 0000000000000000 R08: 00007f95e6050f04 R09: 000000000000000c [ 864.504904][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 864.504911][ T32] R13: 00007f95e6050f58 R14: 00007f95e6051000 R15: 0000000000000000 [ 864.504928][ T32] [ 864.504934][ T32] INFO: task syz.0.5774:29034 blocked for more than 143 seconds. [ 864.504942][ T32] Not tainted syzkaller #0 [ 864.504948][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 864.504952][ T32] task:syz.0.5774 state:D stack:28456 pid:29034 tgid:29032 ppid:17570 task_flags:0x400140 flags:0x00080002 [ 864.504982][ T32] Call Trace: [ 864.504987][ T32] [ 864.504996][ T32] __schedule+0x17dd/0x5820 [ 864.505026][ T32] ? __pfx___schedule+0x10/0x10 [ 864.505044][ T32] ? schedule+0x90/0x2b0 [ 864.505059][ T32] schedule+0x164/0x2b0 [ 864.505072][ T32] schedule_preempt_disabled+0x13/0x30 [ 864.505085][ T32] __mutex_lock+0x7c4/0x15a0 [ 864.505101][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 864.505117][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 864.505132][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 864.505150][ T32] ? __lock_acquire+0x747/0x2de0 [ 864.505164][ T32] ? radix_tree_lookup+0x240/0x290 [ 864.505179][ T32] genl_rcv_msg+0x10b/0x7a0 [ 864.505196][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.505234][ T32] netlink_rcv_skb+0x226/0x4a0 [ 864.505255][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.505270][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 864.505291][ T32] ? down_read+0x2b9/0x320 [ 864.505308][ T32] genl_rcv+0x28/0x40 [ 864.505320][ T32] netlink_unicast+0x8ef/0xa80 [ 864.505345][ T32] netlink_sendmsg+0x7f0/0xb20 [ 864.505360][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.505374][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 864.505389][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 864.505402][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.505413][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 864.505430][ T32] __sys_sendto+0x408/0x5a0 [ 864.505446][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 864.505475][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 864.505496][ T32] __x64_sys_sendto+0xde/0x100 [ 864.505511][ T32] do_syscall_64+0x166/0x520 [ 864.505524][ T32] ? trace_irq_disable+0x3b/0x140 [ 864.505536][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.505547][ T32] ? clear_bhb_loop+0x70/0xc0 [ 864.505560][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.505571][ T32] RIP: 0033:0x7f23d995fd8e [ 864.505580][ T32] RSP: 002b:00007f23da904e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 864.505591][ T32] RAX: ffffffffffffffda RBX: 00007f23da9066c0 RCX: 00007f23d995fd8e [ 864.505599][ T32] RDX: 0000000000000028 RSI: 00007f23da905000 RDI: 000000000000000e [ 864.505606][ T32] RBP: 0000000000000000 R08: 00007f23da904f04 R09: 000000000000000c [ 864.505613][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 864.505620][ T32] R13: 00007f23da904f58 R14: 00007f23da905000 R15: 0000000000000000 [ 864.505638][ T32] [ 864.505642][ T32] INFO: task syz.0.5774:29035 blocked for more than 143 seconds. [ 864.505650][ T32] Not tainted syzkaller #0 [ 864.505656][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 864.505661][ T32] task:syz.0.5774 state:D stack:28456 pid:29035 tgid:29032 ppid:17570 task_flags:0x400040 flags:0x00080002 [ 864.505691][ T32] Call Trace: [ 864.505695][ T32] [ 864.505702][ T32] __schedule+0x17dd/0x5820 [ 864.505731][ T32] ? __pfx___schedule+0x10/0x10 [ 864.505749][ T32] ? schedule+0x90/0x2b0 [ 864.505764][ T32] schedule+0x164/0x2b0 [ 864.505777][ T32] schedule_preempt_disabled+0x13/0x30 [ 864.505790][ T32] __mutex_lock+0x7c4/0x15a0 [ 864.505806][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 864.505822][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 864.505837][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 864.505855][ T32] ? __lock_acquire+0x747/0x2de0 [ 864.505869][ T32] ? radix_tree_lookup+0x240/0x290 [ 864.505884][ T32] genl_rcv_msg+0x10b/0x7a0 [ 864.505901][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.505924][ T32] netlink_rcv_skb+0x226/0x4a0 [ 864.505936][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.505951][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 864.505971][ T32] ? down_read+0x2b9/0x320 [ 864.505990][ T32] genl_rcv+0x28/0x40 [ 864.506002][ T32] netlink_unicast+0x8ef/0xa80 [ 864.506028][ T32] netlink_sendmsg+0x7f0/0xb20 [ 864.506043][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.506057][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 864.506072][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 864.506084][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.506095][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 864.506114][ T32] __sys_sendto+0x408/0x5a0 [ 864.506130][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 864.506157][ T32] ? fd_install+0x95/0x4e0 [ 864.506174][ T32] __x64_sys_sendto+0xde/0x100 [ 864.506189][ T32] do_syscall_64+0x166/0x520 [ 864.506201][ T32] ? trace_irq_disable+0x3b/0x140 [ 864.506223][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.506244][ T32] ? clear_bhb_loop+0x70/0xc0 [ 864.506261][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.506272][ T32] RIP: 0033:0x7f23d995fd8e [ 864.506282][ T32] RSP: 002b:00007f23da8e3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 864.506293][ T32] RAX: ffffffffffffffda RBX: 00007f23da8e56c0 RCX: 00007f23d995fd8e [ 864.506301][ T32] RDX: 0000000000000020 RSI: 00007f23da8e4000 RDI: 000000000000000d [ 864.506308][ T32] RBP: 0000000000000000 R08: 00007f23da8e3f04 R09: 000000000000000c [ 864.506314][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 864.506321][ T32] R13: 00007f23da8e3f58 R14: 00007f23da8e4000 R15: 0000000000000000 [ 864.506339][ T32] [ 864.506384][ T32] [ 864.506384][ T32] Showing all locks held in the system: [ 864.506440][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 864.506531][ T32] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 864.506617][ T32] locks held by getty/5380: 2, on CPU#0: [ 864.506626][ T32] #0: ffff8880373a70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 864.506689][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 864.506765][ T32] locks held by udevd/23166: 1, on CPU#1: [ 864.506773][ T32] #0: ffff888028540350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 864.506835][ T32] locks held by syz.1.5756/28944: 6, on CPU#1: [ 864.506843][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.506870][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.506898][ T32] #2: ffff888028466260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 864.506928][ T32] #3: ffff888023ff47c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 864.506956][ T32] #4: ffff888023ff4190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 864.506990][ T32] #5: ffff888023ff41c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 864.507022][ T32] locks held by syz.3.5762/28963: 2, on CPU#0: [ 864.507031][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.507057][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.507084][ T32] locks held by syz.3.5762/28969: 2, on CPU#0: [ 864.507092][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.507118][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.507146][ T32] locks held by syz.2.5766/29008: 2, on CPU#0: [ 864.507153][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.507180][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.507210][ T32] locks held by syz.4.5767/29010: 2, on CPU#1: [ 864.507222][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.507268][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.507296][ T32] locks held by syz.0.5774/29034: 2, on CPU#0: [ 864.507304][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.507329][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.507357][ T32] locks held by syz.0.5774/29035: 2, on CPU#0: [ 864.507364][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.507391][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.507418][ T32] locks held by syz-executor/29040: 2, on CPU#1: [ 864.507426][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.507452][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.507479][ T32] locks held by syz-executor/29042: 2, on CPU#0: [ 864.507493][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.507520][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.507548][ T32] locks held by syz-executor/29063: 2, on CPU#0: [ 864.507556][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.507582][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.507609][ T32] locks held by syz-executor/29067: 2, on CPU#0: [ 864.507617][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.507643][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.507672][ T32] locks held by syz-executor/29095: 2, on CPU#1: [ 864.507680][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.507706][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.507735][ T32] locks held by syz-executor/29137: 2, on CPU#0: [ 864.507743][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.507775][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.507802][ T32] locks held by syz-executor/29138: 2, on CPU#1: [ 864.507810][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.507836][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.507863][ T32] locks held by syz-executor/29159: 2, on CPU#0: [ 864.507871][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.507897][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.507924][ T32] locks held by syz-executor/29162: 2, on CPU#0: [ 864.507932][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.507958][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.507988][ T32] locks held by syz-executor/29201: 2, on CPU#0: [ 864.507998][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.508024][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.508053][ T32] locks held by syz-executor/29232: 2, on CPU#0: [ 864.508060][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.508086][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.508113][ T32] locks held by syz-executor/29234: 2, on CPU#1: [ 864.508120][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.508146][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.508174][ T32] locks held by syz-executor/29259: 2, on CPU#1: [ 864.508182][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.508213][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.508259][ T32] locks held by syz-executor/29261: 2, on CPU#0: [ 864.508267][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.508293][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.508322][ T32] locks held by syz-executor/29291: 2, on CPU#0: [ 864.508330][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 864.508356][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 864.508385][ T32] [ 864.508388][ T32] ============================================= [ 864.508388][ T32] [ 864.508406][ T32] NMI backtrace for cpu 0 [ 864.508414][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 864.508426][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 864.508433][ T32] Call Trace: [ 864.508439][ T32] [ 864.508444][ T32] dump_stack_lvl+0xe8/0x150 [ 864.508462][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 864.508476][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 864.508503][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 864.508517][ T32] sys_info+0x135/0x170 [ 864.508527][ T32] watchdog+0xfd2/0x1030 [ 864.508549][ T32] ? watchdog+0x1c7/0x1030 [ 864.508565][ T32] kthread+0x38b/0x480 [ 864.508583][ T32] ? __pfx_watchdog+0x10/0x10 [ 864.508595][ T32] ? __pfx_kthread+0x10/0x10 [ 864.508606][ T32] ret_from_fork+0x514/0xb70 [ 864.508626][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 864.508638][ T32] ? __switch_to+0xc78/0x1410 [ 864.508655][ T32] ? __pfx_kthread+0x10/0x10 [ 864.508666][ T32] ret_from_fork_asm+0x1a/0x30 [ 864.508685][ T32] [ 864.508689][ T32] Sending NMI from CPU 0 to CPUs 1: [ 864.508728][ C1] NMI backtrace for cpu 1 [ 864.508744][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 864.508765][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 864.508776][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 864.508803][ C1] Code: fb 7e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 08 12 00 fb f4 bc 0b 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 864.508820][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 864.508837][ C1] RAX: 00000000003ff533 RBX: ffffffff819bfcb0 RCX: 8000000000000001 [ 864.508853][ C1] RDX: 0000000000000001 RSI: ffffffff8e4922e4 RDI: ffffffff8c6e0e80 [ 864.508867][ C1] RBP: ffffc90000197f10 R08: ffff8880b8533d9b R09: 1ffff110170a67b3 [ 864.508882][ C1] R10: dffffc0000000000 R11: ffffed10170a67b4 R12: 0000000000000000 [ 864.508897][ C1] R13: 1ffff11003e5f000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 864.508909][ C1] FS: 0000000000000000(0000) GS:ffff888123b52000(0000) knlGS:0000000000000000 [ 864.508922][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 864.508934][ C1] CR2: 00007f2d1ead307a CR3: 000000000fb48000 CR4: 00000000003526f0 [ 864.508948][ C1] Call Trace: [ 864.508954][ C1] [ 864.508961][ C1] default_idle+0x9/0x20 [ 864.508996][ C1] default_idle_call+0x72/0xb0 [ 864.509024][ C1] do_idle+0x2e0/0x540 [ 864.509045][ C1] ? __pfx_do_idle+0x10/0x10 [ 864.509071][ C1] cpu_startup_entry+0x43/0x60 [ 864.509090][ C1] start_secondary+0x101/0x110 [ 864.509109][ C1] common_startup_64+0x13e/0x157 [ 864.509145][ C1] [ 864.517573][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 867.336829][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 867.345966][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 867.356027][ T32] Call Trace: [ 867.359314][ T32] [ 867.362254][ T32] vpanic+0x56d/0xa60 [ 867.366249][ T32] ? __pfx___schedule+0x10/0x10 [ 867.371186][ T32] ? __pfx_vpanic+0x10/0x10 [ 867.375729][ T32] panic+0xc5/0xd0 [ 867.379476][ T32] ? __pfx_panic+0x10/0x10 [ 867.383914][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 867.389393][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 867.394774][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 867.400942][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 867.407194][ T32] watchdog+0x102b/0x1030 [ 867.411545][ T32] ? watchdog+0x1c7/0x1030 [ 867.415993][ T32] kthread+0x38b/0x480 [ 867.420059][ T32] ? __pfx_watchdog+0x10/0x10 [ 867.424732][ T32] ? __pfx_kthread+0x10/0x10 [ 867.429321][ T32] ret_from_fork+0x514/0xb70 [ 867.433908][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 867.439027][ T32] ? __switch_to+0xc78/0x1410 [ 867.443716][ T32] ? __pfx_kthread+0x10/0x10 [ 867.448334][ T32] ret_from_fork_asm+0x1a/0x30 [ 867.453108][ T32] [ 867.456457][ T32] Kernel Offset: disabled [ 867.460804][ T32] Rebooting in 86400 seconds..