last executing test programs: 20.384902897s ago: executing program 3 (id=5677): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000030000000c000000000000100c0000000300000002000085e8ffffff0800000001000000020000000300000004000000001000000000002cb840267a324a854f393505535158532475205518fbbc54e24a5cbb95dd26fe427398d02b9105b72b9b6aa2e59401ad6b419a7e2d3413e0b152c2f9d4c5d81aaecbf72d9d030a68791a8a75fbc19d85b956ecbcbc0ec40e778ab737e03bc95f1ff58403a2981ad2f70a22411f"], &(0x7f0000000240)=""/43, 0x4b, 0x2b, 0x1, 0x8}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x6}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000004000000", @ANYRES32=0x1, @ANYBLOB="ffffff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000400"/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRES16=r2, @ANYBLOB], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r4, &(0x7f0000000000)='\x00', &(0x7f0000000600)=@udp=r5, 0x2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f0000000280)=r6}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r8, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r8, r9, 0x0, 0xffffffff000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "000400", "e2b768b4bb9e0d9b"}, 0x28) setsockopt$inet6_tcp_int(r10, 0x11a, 0x5, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r9, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000ed", @ANYRES16=r11, @ANYBLOB="00012abd7000ffdbdf255c00000008000300"], 0x24}}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x4, 0x18}, 0xc) 19.849763962s ago: executing program 0 (id=5681): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) socket(0x1d, 0x2, 0x6) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x5, 0x9, 0x80, 0x518}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r2, 0x8, 0x1, [0x3]}, 0xa) 19.624721354s ago: executing program 0 (id=5683): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x50bd2e, 0x25dfdbfe, {0x2, 0x0, 0x0, r3, 0x4, 0x10, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x3c}}, 0x20024090) 19.380607347s ago: executing program 0 (id=5684): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x3a0, 0xe4, 0x0, 0x0, 0x2a4, 0x2a4, 0x2a4, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe0, 0x9a}}}, {{@arp={@multicast2, @private=0xa010100, 0xffffff00, 0xffffffff, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, {[0xff, 0x0, 0xff]}}, 0x2, 0x4, 0xff, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8001}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x1, 0x9, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/65, 0x41}], 0x1, 0xea, 0x10000001) 19.32938284s ago: executing program 1 (id=5685): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3, 0x0, 0x0, @void, @value=0xbc0}, 0x50) 19.23857972s ago: executing program 3 (id=5686): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x4, @local, 'geneve0\x00'}}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}, 0x60}, 0x80, 0x0}}], 0x2, 0x40480d0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r3, 0x4004743a, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008080100ac1414aa08000200ac1e00010c80028005080100000000000800074000000001100005800900010073797a3100"/116], 0x74}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtaction={0xec, 0x30, 0x1, 0x0, 0x800000, {}, [{0xd8, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x88, 0x2, 0x0, 0x0, {{0xa}, {0xffffffffffffff28}, {0x5a, 0x6, "37924aae4170e50e888b352b2f2cd5c2a8a2f619a636b0be232f595d2ab166429e10674c2b80ab86d43a038509e8259ed0939f1da30cd13fc869bb95f87bf2debcc142d13aa608bba402ce32a8d2a1811f8dd8fe7300"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0xec}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0xff96, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7f000000060a010400000000000000000a0000050900010073797a3100000000500004802c000180090001006d617371000000001c00028008000340000000010800034000000001080001400000003020000180080001006475700014000280080002400000000808000240000000120c0003400000000000000005140000001100010000000000000000000000000a"], 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000940)="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", 0x221}], 0x1}}], 0x1, 0x20002090) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 19.208482724s ago: executing program 1 (id=5688): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x24}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x40}, @TCA_CAKE_INGRESS={0xe}]}}]}, 0x6c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getpolicy={0x80, 0x15, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in6=@local, @in=@rand_addr=0x64010100, 0x4e21, 0x4cf, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x88, r3, r4}, 0x0, 0x2}, [@proto={0x5, 0x19, 0x3c}, @sec_ctx={0x19, 0x8, {0x15, 0x8, 0x1, 0x80, 0xd, "c04ea75410e4e1ee5d46653dd8"}}, @offload={0xc, 0x1c, {r6, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000840}, 0x810) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x40}], 0x15, 0x10040, 0x0) 18.904936179s ago: executing program 0 (id=5690): unshare(0x20000400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x204, 0x18}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl2\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0xe2, 0x1, 0x8001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x1, 0x7b7, 0xf8, 0x6}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x1e, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000001000000180b0000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000004d12f4ff040000005f30ffff180000005d48fcff00000000184a0000000000000000000000000000d535000000000000d5281800ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x8, 0x71, &(0x7f00000007c0)=""/113, 0x41100, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0x4, 0x6, 0x29}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000940)=[{0x5, 0x2, 0xb, 0x6}, {0x3, 0x2, 0x4, 0xe}, {0x2, 0x5, 0x1, 0x8}], 0x10, 0x200}, 0x94) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0x8001, 0x8}, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000b80)={r0, &(0x7f0000000a80)='-.&\'*$/*/\x00', 0x8000, &(0x7f0000000ac0)={@_ha_fsid={[0x8, 0x4]}, {0x7f, 0x9, 0x100, 0x4}}, 0x0, &(0x7f0000000b00)={@_ha_fsid}, &(0x7f0000000b40)=0x1ff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) writev(r11, &(0x7f0000003500)=[{&(0x7f0000001440)="34325a3ec95335e2316325bc217474e55486f13461aa6d72f8ad90ba36f13758495616c22692c9888acd74c8141f760b360d963b2ea9defa4e0d04a1b08b1e9bca95a6fef2e1e2e3bcdf3fe633f09f44363b28eec64030d7269c6024f118efe0eaeda4ce2ffd74748748ea9e1f264a4efc5eb41bc90831fc6d70a3bb367f094dd21b1165959e0a48e43d1e01976a1b9b430e28acd780f7ea7bb157a161644979b927f6c7109538395a73f29cfbc4b79f775dc80ac55ec12ebf839793e3a665921c15820a20298addeb88eddabce5fcef43cc3e81dd4aa8a5f84a0f9f996f3705c0e88146b1e19b21aee9d4143adf57e60a482507714ac4d52d2d2160cdf2809ec84ec9d77d208fd5f432ec3b99343b90e4acc82033da76f34a63a14afae361533e1fcfa6af0a79632c6c794fc1ec142eac90249a1a805b5ed73226f01b33f95f41fbdc2e25e8dc53cc7ac7ba242d904c7899c839d4c5d9d919e67aa15d9ae4f4da9b080bc0b124af94583cecfb08dcebbe5fe70f2a73d727e5c1e7c402e82497e1596c92fecce9b0f83c7e99bafd08c953529186c98acd728b4885c70664b516100cc7dccbb3b2cb72889564dbe9e8bb4df5ec61b60215a8b0093a47f45be324de9ce13e2cdb02e70945d0bb9931061f0c559b4137e04f6b7d94795a11242565485ca654ccdec9dabfd5a344652dfc9a74fd89fd578408671e2745062713d7fc50486abe3c226b139058f2f9c1cdf0301bbcc388a4ac6ed2ad38f54fe1e4d88e316c15ac1039281b1a74ed890174d4c80a28ce29b05a223e07ad8c4a378a2b44ce349bc74ae73af2852130f7ad525c3853e2328fa12ff7b8444c1ec39a46b1c47ed2d7918d09a70b3d3ea39c16d17f397bccd069b62e231c5d251373de33602641d4220da1f3fb62f55989fbe379f35aa578949a3cdcc638befddd2e24d898d25ef9508467ac6d8952cb2fb9b7a5a9eb5238fb8e1cfc8bd967d2ad877ccbcad2a8f1c41b5e2b779df09ba8596ea37ed93a1dba30df412834a89b9510c42dbd697470087dd4c3c8458b177705a9aea6b5c26ac5999290bd63fa10c441cbdeb24f5918522f1cfd512b9627ecd59f275f0c469dc6e3b12e8a5a5a9a13b134ddd31b5a6feef3f6b9df2165291487f9397a95b18c6e800a4c7bd127dbc2c62a8f70368cf43b0d120fbc681fa781fde92df025871dbab0af3104eceb3187b7f7d5d7957047f30b6b03fdf26ede899d807725bd584a7380732f915089d775d45ff2620db6656e3c8efd52d3951b4aa52fddd9355581a6ba83192f93b285b7025bb524106c2633254a41868770cd6c8c539b9a83875a43bc4040ab1f31a4bfa99059b689318f01ee8e36525c5ed85fab4192d68c39f025b6762f0ed0acd647bb04436cd12bcba484baadb4b47c2e629b757943cf753c4cd330878f3bcd217b52ef916af4abaecb7c9ca7386e6c3458b89cae0391ec3b567e0a1ee45b7167e38507a5466b61e1defec4019a07efd4f524d55a431b7701c3bad1c0939ef7096e7ab4f5d4ee933a89c60413d299f96ce2e9da028cc17ef7b278307e224dc011a043cad95e0ce14aa55e5c1e03b224e081689cd064080286f30344941f17675c688b11544030e6277423da966e99fe1522ad5f8b37314113f8f78c152d18881148e97bd174dfd04951490c7aa3e344b8c02ff14cc3c61369825ed3d5155057c3f9ea645d094545179ddcf17ff75e549da3e28a9848b6e7d4432535ed7b04cd8b61933d68cccd8a056b949c16cbcb7b500c302837067face71a411e65950771ca68cfbb60f70d7aa9f81db96413e56fc92aa714452909158dc7f7478e8623a4e59ddce28e3c08726e1e28857f80891c12be40ec3543a384e5b95194c3b78c7f7f987e9a051fb56e0e17285bab975858d41b56c176ccaabdadadc88d51e5d9d126cf5581a9b975ade73f6b2ae6a4a9a72d568de6795e4d3791b64670ebbf78f17ae9bd24b684417be361c48ce9f1bc55a77e6f55689575c0dc4d3dd0c2c4257d5f3fc8e0300f7f76c3fd26e8b19c4ad239c179ee67bca56788412721a2ebead64f24c42ce4bba250b1e9fa84912d60c3d737297cb4e6e0bb1976903efe355dcc902ba0355d2e64018d0320fe6a43fdab880e7ac3d01a52848d6020b9ac83f1fea19a4db6afa7d3eb383ab6dba2edef4b2d0ba97bdb929bcc233951d44396a3e65e5860fa71a30168c0cf59ced3c776495b5ccdeab23a124f2e72629457aa4c2ea0cc6bf4a1b17105205b33956439f3d853af200ed5d24031c1fda9934f564524d571c38e2fe30103764a5bcb1e3d21305031ee5add1b205832eee5b196478688a6f25727ee6832425c6710898c62c13bac4ba951c2ad8eaff59856997a7c2b451bab9242ef610257a9b64fc99141bbd8f590bdeb2ef12020ba8ed784f492e6ef3195df7da08c9d27cf24118c29a571deda94b8e3434b170adbc33e3ab47755d4e7b1ce9716b2fc03687902c7703f888a86b4f38f0d52f477f98590352c82cc0ff4718a4c37b0ea9bd6d66d9b5c8fc7aabfd08c9a7a75bb3d6e970e8bf1f344b344186f078521d7b26a002bd1cba1ea408941e2f943278bd5abe504474ad89501aaee9935b77fc417bbc20e795f22259c3ad0f5a2fb205e581f617a992a6baabe41226b8005e34de92adfb70da635c60f4e7c8509b739f88eca6e91ea5142e107ce2c147c96e68d8e775a7464321f639846e7de8c6a91ed18fcaefbd44118e240d42ae6af70781c9dc71ef30230d3d50061716d080e9a1faf057243a0af6b12e1a76a1267a5a39e085f25b8bd289e3a140d266b46be7c59dbeec32edd1695fc4ba196ebc797b86e6885c6fb6ba04f282b71ccfc535707362c8b73d850a549c48b95bde8ca4f95249e8cc9b7751f6d42d2765505d06e5ff208dd1772ddfdf81086476516ce83fc70551cc66d27691c9fb951b71ceb6e9424ee66dcf129fa3f2906296e7b6b2a764027a72818d9cce46f8b47841d1024b16a5009045178dc7cbbfc5121c6378887a449cf0c9793d53c1d861ab7d7c9eb9e4713a0b071237cb3faa44a1c2567af77f6acb9a1b95e243c65b1c88b3c639b17c6b6a936bc01d9efcb0e7e4e0465b1dc7f3edb970d733043600d34f135f0f439bb82b1aade9a70b1435976f8aa7125009dec0f9d96fa613d62ddd09c621396c4ef82c5fbd1f745d64e05ae27e1069ee66bc10e301f95eda0215f0cdd423771e97b1cf634bc93c239caa557b7e7a8e599f7973ee31d8e9f6fdb05466eb278883bc315bfac83464ca462d5b966879bafeb007ea505e797ee8921b6f82540aa876740bc6d26a13065a3d0160e269ecdb905aad6eac3ee330fa9055f66b4f4305fb983931c1e229d6a0210f25756788e9a70e91a3aa5da28e677d84ac3fbe097c322011a050d7b2ea1612d10cbcdfcef38f22369eb531a724e4d7f9b8e8aa6664aa8ba1e378e4d9e626b863d46c9352bfdd0cf467bc1f17f0f534fee341b88d55a53d7a09d34b76eeec96dccb8f332585c753e9fd09ad4bd527e58781f854627f72eb8d6e59e68048c4b8ea4bfd76a8f27125bd51054732c6ca9096e69476dc8e52b51fdae262dcd91c2e23a414cb16d1d2159f33993fbda87c46a9e7b58195916eea891b7dee88fd23f1e461728161d8af0e067b4c80ca8fe0acd010fcdad461708c7ee41d4e2fd2cebd5c34de4edd763f6cfc583689141808ecf42e20b79f6d5ef323649c2b9ebb4ef4d4526767e44c58358105cd394410bacd486475c26e7ee8d79c731ad82d820f7fd20b0daca649334771ee07234e44b401a7fc7e7b86a845ce18946dc7c14b17854a80a0af5d0dc8bd0614650681982d2f6cec264da5add6720d84bcd3acefbca4fa00ffb53105cfe9da7ac34c88dab0b50878390bc1ef6a388df4f41be51714d22a29544edf59feedb71789efd8c40f1fd572ffc3b05a7eec9040ccd554c1b37b888bc6dac1fa4656a2c95bc9a5d10f2d0162b773ca6a6d9a30a9e172e6c8cca1de09626ca3e59b4dbb82f4dd949cc341deee27a0800e17a73a56386c0527f4d0f7c28f1d44b2c83cad51f616ad09e4e4ae2a1901b5fc0de12c5f93ffb547b4b3326f9cab45f8fcc8761196751585a8ff493b3d9ef077f899918bde019e0e66e818dedcff7d6d2ee0b1fcc1845716242adf546f08551cbd4f0e44482a39a871c5729a566b5726f2f33cbf28b47a7d661e2e35cfe3a548a5f1eec8069eed21c92c44e253bf275cbc7825b7e26f52145d415139cf09216335e19a3b4276269eed91c1b557f80f4101a0d733269b40d9ef0e9b12d3baa379e5a0c1300c63c5ff8c72f4420652838d6763544c6fd4c65a06a26eda3454206727c0507614c2a88277ebe880a5ecf981be57873a573d481eae5433d65dc4dc16d118bc057975265945bd9ddc64c0a63be3d5083fad6b22cfc89bc78c395b9ba767d8079fc4c2ffc9280888c2f53fd39801ad24b59f51a8318e5e9af7e1223cb4d385e3e4001f6249878d60cbcc9f67af75ff04de1ca8918eab36f915b9a150fdf99dc4df4af16715d3706fbd934c8e8479a99734dd6c32328565e3a351f5c8a61a2657d8dac76fb9623a6095adb4200d8e3707bc015aaf97ff0190caa4b22e102458fb40901fe161943f4c6ed6654264baa7dfa15e80cadaa0959e4030ee90451f1a35350ae7e6686f399f3bb230b87c36ebb536369e0bf32ee95f1a8fbbf05a0f74e801200cc4730ef0b35e9f6559f051023b23b29dad69477064118c67cc63ca3c4c8b564c446ce0d88d98252d2edb04983045e5424935791b208d90152b15287425c514f23ce64b41178e66fb55e1fe0aa153596a940ee6297b4046cf9a413232570638861a74e36c57fd548517d8028f18e8c194bc259b667b886f875d8f46a0554d3a11c0866fa2f988230e54192a96ffbae5f7fb5c0a71aa88bf59389c75a6093b3482a3f6e5c7d5704e97eec57e8037fe4df05d18b8bb75ae249e2c28a71fb2d5cdaf59168007e07dba122f5cf0d645bcd4e736159c6393bb772b820fb3c8fc17cb88393c90233fe4ab880593384bd96de985655c768d6f6f2f67896e7e15b3cbc513bfc52f63cba2c9b708bcc2252cda70822111c4503a7257c0d89fe1eb3d7d99e93c9b0b0935bc198bb8ce04917f73269716337b7bfb5142d8a7147bd5c84ca9bb41c5a86d5d36efc61d0d787cc085a9db5c3388aa2b4bd287627da24e70b62601fd0beaceba112d305148a8c97cae338094c8d92732b5c220abf8e0ce94826de7fe01e32932d05905c341545eeff2a86cd18912272f32e3cea5cbf13236b48de5b1235483449fb892f14a499a6ba89cdcc4224580bfc6a28b5cc25b6274381da039e4961977423d9c3d9217bbfddf7e5f2e044d892daa1f0b1018fac5a590be3bfd0995fc2126f805b00bb95afdd9740dcacea283c681da742e2fb99014b435593ed796e7230d135f65079575d1b51674bbaec6c02e7064f7c72d05bd65ccfa61e3b55110cf00e7aa359347b19c8c0e54c3ed30995966ad8e186314f5d852cd31ccfaa9d0c7e849d68a6b0cff756d0ab7ad920b44de00310c0edaa5ae60bf0787ece2e07da207608de0926e5e5b344bf8bab13c87b38fdd623353c37b448c5ee03678e9941b84f544c2ea87ed759156bf67e2e0fba081210479c4a71d671d03b6d2f5841aebc57a13f4f4d5432cda29b5962e39a093c69285902f11e4a75cdfd38b5f52e4238c90a0942ea741a79ead7e044bca535f51644b35dcc9d5d54b11a1e6c000000000000000000dc539a783a8e75a1fea31936bb9a09c88d55cf1771a67092228c231f39d79c28d1a9c544ce80546e4b8a5b924b6ef436d97eb77a1c8c300d6d775fdc61f3303b00cff340d8ea575b8136ea5efc84786fb76f3fc61b5ce797cb281aeac5acb5e63a33412ce27c", 0x1064}, {&(0x7f0000000f00)="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", 0x141}, {0x0}, {&(0x7f0000001240)="e1d2670000", 0x5}, {0x0}, {&(0x7f0000000300)="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", 0xb3b}, {0x0}, {0x0}, {0x0}], 0x9) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)}, 0x20) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x18, 0x1c, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3eabaf05}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0x7, 0xb, 0x5, 0xffffffffffffffc0, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x7f, 0xc0, &(0x7f0000000400)=""/192, 0x40f00, 0x60, '\x00', r5, @fallback=0x20, r6, 0x8, &(0x7f0000000640)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x0, &(0x7f0000000fc0)=[r8, r9, r10, r11, r12, r13, r14, r15, r16, r17], 0x0, 0x10, 0x9b}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x10000, @value=r0}, 0x28) r19 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) r20 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0xd, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r19}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x26}}, @jmp={0x5, 0x0, 0x0, 0x7, 0x3, 0x6, 0xfffffffffffffff0}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(r18, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r20, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.903601864s ago: executing program 1 (id=5691): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 18.747862991s ago: executing program 1 (id=5693): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="474d107a", 0x4}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x880) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100), 0x4) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000001}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d08000000f5c405c0ff3eaf643001000000000000008263d71e03000000000000006df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f868bf9dedd199199fb0291b61c733b7d6a7b043013f8eba4ee08eb785264d1770fc39693a50b4feb28c9b542d94346888bcc8e45a12295c42e4011a59c4d3837f7b90c3ce93fe5f4ef64", 0xe1}, {&(0x7f0000000000)="c4fa570ba429c3abd0cea6d05d2bc3ea74da81274351a199a457b0fa13fb8fed64b7681698116b7921a2f12bf8d0c83e376b127783de91c6796b83c35f9e3237f54812348e0a67b654e74fb78893390f1e1e85b923529a9455627c3be9bf96690791986464b7d177f663b35fafb34df480a35e4c9b9343cfe093a603ec554b99973a2f4051edf5ba9315159de6c19bda8b8956c9fcab324ab4000dcd9809d6654bcdffb26326da960536520d0eddd8e2ccd071cd1d03b99408460a534fc81e5d41385af451cb56199ff803b680198f5f47f69f1655891328f79a310ce4b0c3e2d6fbb250e187", 0xe6}, {&(0x7f0000001a40)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6e3f35d859ffc0b699be4052995533be91880029387cc372d965ba8f6627c90f3bcb1b83416f46f97d57bc175eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98558d14a4850ac4b92e1b41a06dee6198c74c72607a032c3c7ef5abd0ba4a7f9f5dfebd75457b2ec358e951ade2375ad6524eb4263d6ef72e05901da983aac2b31a5e2631e39301a6dd04c128aabcea9134ec99685df1068506541f1265c77c85300497abfebce6ed768d9922ba3699dc6cc1863c0aa9321170b9e63a74986c1996d0fa1a5886e7023836ddbe64bea33edfe6fc1cb64784da18c2d4930eb481930b9298b57c7939189df401aed6a586f0103fccf70f92a53666d5afd3dd0b12273e5c1f2ddee89ed9a280c10df8e55ed24dcf9d631b693cd38006da4629a6b4a599de94a5b8ba6bccffdaa9d3fe0970623c118ba7e811d534915e4c63fa40df1e5a37ad9e5827ff65b2e4d8480a3f66576a3a52c0c80606098c0cb0b203f20d4f7b614652e4d8eb595d29ad1a4ce2c97aa30328c9987e1f1d8b7954ff54ddb69d5c3d2225bdd84e93b19edc2d33116373b0b5be8eea62d84896d2412edf5d321f75811360f89fe6ca8ac6545ec1c9f86ab285d1b5ba00c269514dab7a076c01cbfecaaff336d116481b16e434262de851a70ff0", 0x220}, {&(0x7f00000016c0)="b107c09a5026de51ce3e8640af1a8b2d1e67f16405c3458fe41dc04ef234718d683aa3a998fa994306007c6d7505b0cec633f763303666604cbb6aa4c0f995a9454dc81b079dc93b0162ac3d1a8a1b72ce18d493594b3b24bad58801007a7b1d8ab9b50c5dbef8311b2502a124913259abadf354fea31d1ce0fed5c7ac577690164d1a72748723d3eb92e3e73e3a2b7cdfaa442d9e9f8e1a711d5b988215f0f80a2eeade5a078256a41973b0b029278c20a2818628dc256a0742896c3def6e825fdf64fd33d5f584ca908c272dc04d0693decdad028feec7f76221378c185027e8695c9b07506ed46d4f8bb90883c08e85e058ece62cd797d2c01e6285c77430eec435ac9df6256e121859d8aea507ff8a9dd0694681649d44fbb937398edecbe06096df2e443af0c3f0950301e1128727ba88a063e88f90206dd5f099a1c333114b97e0e1b55106a9755e208651a8f281173d1ed31e62433a766a28c8496f00ad1086359b0000000000007ffb658dd61a6efa4bfa379945659c0ebbeca3f56215413802975d89f0c0131c71169084851cddd8b367738f069955b2d3fcf7ed5c41fdb6eddf227ddb9fac4706eb62bc6540a91014cce6987ee604c5f398ae4fef3f501ebad02ba122d7769b603eaddb5f9b", 0x1d1}, {&(0x7f0000000240)="7b2f715d821cac40000000009c2165993364", 0x12}, {&(0x7f0000000500)="13850542a5db2c11ac6d11f22aa55c14f2f2e226320fa5cff946d79a7817cbcc5719da849dc65ef0a93f78491af06d6051f5eab02c23f315ea54cdb66a6fa2645e79cbf7c271b33f060b15581af6ba2b9e9507b54a1068da5febc6e90306a0de7d5e86fddb07fd3f32dda463d38b16877dd11597610dfa50861ea5b4112f958c8b1ac5be60cd271fef2a3b2b33f9a1a80fac85266f341a9b546fe9749eb336b864467160c0ae12b5b29733278c980aaf26af5be6c6e33a560d4c6d2de18ad7eb2d753434552bab58f70f0853361fba972590e10ddc096053c05c1b01d856938a71c5b1161bef2cb5ddabee", 0xeb}], 0x6, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x17, 0x9d, [@local, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, @broadcast]}]}}}], 0x48}, 0x0) 18.719360187s ago: executing program 0 (id=5694): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3f, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x40, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r7, 0x701, 0x10000, 0xffdffffc, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x24044841}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x1d0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x270, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x2}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'morus640-generic\x00'}, 0x0, 0x80}}, @migrate={0x134, 0x11, [{@in6=@mcast1, @in=@empty, @in=@local, @in=@broadcast, 0x32, 0x1, 0x0, 0x3500, 0xa, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010102, @in=@private=0xa010104, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x3c, 0x4, 0x0, 0x3500, 0xa, 0xa}, {@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x14}, @in=@empty, @in6=@private2, 0x32, 0x1, 0x0, 0x0, 0xa, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1, 0x33, 0x4, 0x0, 0x3501, 0xa, 0xa}]}]}, 0x270}}, 0x0) 18.550498525s ago: executing program 1 (id=5695): unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r1, r0, 0x0, 0x10000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0xa, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000040)=0x26d, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000140)=0x21c5, 0x4) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000040)=0xfffffffb, 0x4) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @local, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12141, 0x0) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r6, &(0x7f0000000300)=""/74, 0x4a) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(r4) socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r2, 0x0, 0xf03a0005) 18.144083088s ago: executing program 3 (id=5699): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) readv(r1, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/50, 0x32}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000ffffdaf400eafbdbdf2500000000", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x16, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 17.953984573s ago: executing program 3 (id=5701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, &(0x7f0000000080)=0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r3, &(0x7f0000000080)="0b000300010001", 0x7) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f003", 0x0, 0x200020fe, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x7c}], 0x1}, 0x0) 17.711139457s ago: executing program 0 (id=5703): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '))-#+.'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 17.426616659s ago: executing program 2 (id=5706): epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x400) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x81000, 0x200000004, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x200000003, 0x9}, {0x2, 0xfffffffffffffffc}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x3502, 0x4, 0x8, 0x0, 0x9075, 0xef, 0x9}}, 0xe8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x15, 0x8001, 0x3, 0xfffffffe, 0x10000}, 0x14) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002200)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0xcc, 0x3, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x6d, 0xc, "1a47757c55fc540a3d785b5f72f92df549f5824dee1311ebf456dc1722d162a0a9a0877494c390dfab70f9a1e3763cf6f357b023b150f5dc6d18b3c05999eb503cd39471ef182cbd70658752f8433362744f5fd4d12923f14d19b3e3674e663a08afaefbde6c07d2cb"}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x62a5ba42}]}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2e5f754f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5c4377212e9c32e3}]}]}, @NFT_MSG_NEWFLOWTABLE={0x130, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x10c, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x65, 0x8, "6c06cea0b8e8c796d97e93f26c0189bd689ba5ea763d1b43d35ab6a2fd39bc4fcbe9fb4d63cc4bf92c84fa704ccc797edfb6d69c28e5003afdeea18dd147ce92d8a1861a8f8e1ae1b6f008c3227a15fcdf7cee7fc93b9e277442da0ca8ef1ae15e"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_OBJ_USERDATA={0x45, 0x8, "9c01754f75ae994e8800a628c1bcf30e1cc5e9eccf378f2fca3a3a07100658d2d5cda3380b42828802f7ff73912d54ede259073f93d5d75dd06c8d965d7b0d62a2"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x9d4, 0xe, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x98c, 0x3, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x100, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x11}]}}}, {0x1c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x58, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "9edcdeafec24fbcef4c6e3a572ffcf6683d28df4421ce2d766a223d67450640aa4bdfb06553a1f265607a8a146910be898ec6926b18267644686cd3a1bcb304dc927adc2e0b7a56ea33102bd08"}]}]}, {0x504, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5b, 0x6, 0x1, 0x0, "9c0d0a22064ed93cb11d06569d2e5e17395ff22d40f23b368902068401d1a5a43619d337a9caac09212541f8f0fecd97ec779aaebef7d22dfcda327441fafb683d0cf11ff71650779905dffe439843e25dfa8323901ae3"}, @NFTA_SET_ELEM_KEY_END={0x208, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x2b, 0x1, "c38af96fe6d767d85da32891d1747974442ad672c48ddbd0e27f8534c7cab0c67f04c09ff4fda5"}, @NFTA_DATA_VALUE={0xa, 0x1, "2015355d059a"}, @NFTA_DATA_VALUE={0xa8, 0x1, "70279b9bac7ab525f68225c4c0fa3df93fbf8f5fb9ae1d7e13c9645ce550965ae5f2d551398a23627ae980b5f7d77b2da26f88f726e32941ea2dc840224aa6d71646bc572be5e864038c6aa2db32b9edf6ccef0265ba5933b8b194a4b0de6a3aca2a597681f681ce1ad551f33271238db77878207834e0a9ad013c579a5c32c43adf213759d6a54069f1551f7859035524414238ced7a9a647fe1c361263a5ca150d6f00"}, @NFTA_DATA_VALUE={0x17, 0x1, "ce5a600fd1a0b197621d9b6a9fb421228abb39"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x87, 0x1, "60ff6c9d5bf35a47e865b21be81a72fff65f28af03296f242676bdf8f6c528255a4b93dae61dc79027023b6c5ad050570af203643fb6eebb4c5068604be0c0d58e0b4679a0505aa2cb78149cb40f45c87f606dc55c07481c450e699b6bcc24d4b1f7c3741eb0888725e41187c28d2ae67bba265a2ef14e644c39350148086a3adb2c96"}]}, @NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x1e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x29, 0x1, "a4d6c14dea43b1f6e7d7a1b60870408b065376b0eed0edfed68ff3c94d1c9b6946ba244111"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xd9, 0x1, "cd127c03966d00ac8f745b4198f4981805b66077b832ff6fa1a66d2889b90daa36df89eae319ffc5939d63367cea54b6b863691c555335ff06478a0011fa077e756ce3c150018e52594a36a50e04811bd27088b433682070ea093a4db69efe09476049137e6b9d4d9cee977cd30296592f271d68bde033ac7ec7e517b435887270d5e7554d3bbb2f283e3960458035c3efbe112d371833f72153956d555504045c8b443ad5f194d9260844776aa77b7c529572aa0ab660caf8a6709e07d32882263a71aa53e2bedb9d76f24987014e2d54b5effc9d"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x44, 0x1, "1935593a08f90e0a90bdbd8a638c5bd735e7909e8030ac7c56706c6018da571bed0be2b423d17c9c51f7b2a42bf67a9d10c89572c1e256ffe0350d9e19801636"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x54, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x7c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2c, 0x1, "03686cc7a177e1793ede2a8824ca36a827150a4fc5e0aa6f0a8a6da2f2aea554f0ba1d5fb7b93e7d"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff4}]}, {0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x138, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x3d, 0x1, "e45d9be767ce43b051d704feae9dd8874f33280b8ea466fa0c0024cca73952028421053ef6acbcde186c7529b0a91bad08f90c9d5bef215358"}, @NFTA_DATA_VALUE={0x5a, 0x1, "3aec479708d8990edc8dcb503e6817a94f954f2ca5999a82f711911a3e80dcb3883f9f72675d91f3b9e5d1f1fe0708b39c0a8adfe437acff4eb073c732ebb90dd4ecf8797ea7f21f79998e6f51c7b90e088146bcba80"}, @NFTA_DATA_VALUE={0x5e, 0x1, "c20d5dcced8aeb7e9ec9b73872b76abb02fd8b1b2e68b2bbc65153b85dd0734010714bb176c513fb2fc8633449a7085be61bba641a3c26998e863476da03aae162a55469247d5975652ac70a6c0e4f703b23b6a8d66e1409a151"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x118, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x100, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "d15371d6c134f5229f51d4a9b3e5320e49064004513d009be0be2d"}, @NFTA_DATA_VALUE={0x72, 0x1, "37d8ae6e4262e7be3d1fa7ae383ef9a15291c6b2dab385f21ce3eb4018e3a2b70cf192e17bb9c6f15aed7228269e2af88e08a1d8619b050db0d082ea30e92beaadb6ce82ed1a061a52096aebedaf346d2d93fa1bbc3f92b44078dcea78332007dc88163208f53530f2f08a388f06"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x50, 0x1, "506dff82aefe19bcf42743ed9348b5f2b1bd133986c24e7ca0e85ea43b62aa9bd4871ac63d634568bb1e2a535fd25347b034fe99f9f95578a801d4b159b502c003c48ac76a13615b20d38235"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x6d}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0x1a8, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x7d, 0x6, "44defb481c6a801e4c686a2976a71ac232553a3a60e71f22c2630774954128a26c72f46a136b51e7d771365268cab0059e21e9139a53089849a4fa276f8628a4e0432871b9f145e21005103158d1964c7ea5ce165dec8c63b3cc94bd7f8bc87cd70aa37cbdffd2a4f3c5c206242bf92b61739c47be1a16c1d9"}, @NFTA_TABLE_USERDATA={0xe9, 0x6, "807048bfb4d1b4bac84cee4c3ac565783358e71bce2660df48c22ef3dd41c8500775ba1a92c5ecb1c9074039658327be67d99f49527217be1d664e879d717c8a52a713ffe3b6adce8786f141b95856826e3c9b998d39504a9f02bb96442529961b68a88e3ec0d554f6ff43cff5e92deedef447d1723894e0f7ea4345b9361481676c8dc9bf37431759e5a46fad0d9b8b0d318d30b549fd7b3909a7fcddb61ff7acaa885a413c703554ca593ca48831b3dbfc787bc20c37e3e2f57ff4be1ba03b78ef49dfb4ad22780c8d419973bff427278e42412dae1889d0a34ec5230a8eaa8605671d93"}, @NFTA_TABLE_USERDATA={0x19, 0x6, "595412e342146ee8e5781efcf85397154ed460f7c5"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xf1c}, 0x1, 0x0, 0x0, 0xc050}, 0x20040000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "000000000b0b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$kcm(r2, &(0x7f0000003c40)={&(0x7f0000000180)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f00000037c0)=[{&(0x7f00000008c0)="b138a52bc0fe81267f36452fcdf017e3f472b0bde9bc96c9c421cd97d81a09bb8fef1e89a0be8ef3e595c70924adecf5c4fb1f4fa8e54b9ba42f13709b1c0adb0a61daae196f962e048f7da9d841ff2dab9f98368d4d3ef32947fd466867132e9c51822723cf9655334748518febe99fb1eb10996e06d0850c3c26330326a379250e761840cb3de1382195c2c7317b47fc2629bba3ae6c513a45c9d4e9c0e9abba1cd1a34e907727d6443c", 0xab}, {&(0x7f0000002280)="df4e2b1fa5511fb63dea9658d7693df3f39fbd98d6ee56e1c21b54d5c72c4c6e0d89528be5d0d394e4ad0b9a0926620a53398ffdb58c8727ceeb790e2c71d897995f815a651dc47e7cc7d4f4d3d517578f647bff5e7b9dab47d00602553af683b351165a1f5403fc4433572e0e975dd9a783223cbe58d03e6d64dc1bfc8ee91b9529ae4243ab053d90eeaedc05bcc4d04fab5a1f9e6319e19ae10d010f994053e2cdf1fba7a4a1f90a72a33c4bea01ecc9", 0xb1}, {&(0x7f0000002340)="1b61c46fa592bbf12d7a00a9615b7dd909c124896c306540d2c13251e5d10805e2f8d1baefd74366fdc22e55c89e2ab39d3e13dfc2e049dc235e1bbdf3dd4bd85e594a895cbc33a2e32065762ea9afd9d8cda94737644d4aac1fa1d5908f75d52b65", 0x62}, {&(0x7f0000002480)="93f11dc94f24b97ed60fbb6e4af16a8999576a2e3b66db6945481f2837eaaf3a24a148998fdc24f3389f9ba4975aadea32b73ca4ee6a13d40e2de66330450fa66fe0a43ad1c70c0ad587124250d9476c67b286c10c23e5b507dd7aeb2b6889b71806d8554d76dd40e5936d13c76ff54f2aae3ae5c2b0915f6d985e7e8927f7954de7", 0x82}, {&(0x7f0000002540)="e4bba8c2096799fc7b68eff2f51f78c81697fe9305972767a3231f89a8e96c18da19d0be27d520051d5a3869b3898905940964f04a9b63a97fb27c52c62c4af76e1f47aacd28558bdd1c56930757d698df3930d2000461b7aea90dc770c786fba01bea9e7de30feca7897d850330e84b8879a5cafb3201fb9d3f9d6aab95", 0x7e}, {&(0x7f00000025c0)="8b74427b866e996c47be", 0xa}, {&(0x7f0000002600)="50cd75c733a4e485d3af162f4cc1baec2df56ce223666b", 0x17}, {&(0x7f0000002640)="e65701746a6b1c834fc6d0ae55713ef228d1d4c177f4019da04961ff2ed33782e682fa3cc8b80d78c5baacc76e5e0098329b62c03d7ab20d7a316e0793c24abebf4c37c2b310ffb858ca16d0e248f99aef3ee1c839dbacbe5949f1e0c8fd7c4207a4be6942bbc8b8d5732024c168e236a7c239f5f44a5a6e4cc9e815ee24eb2a64e75676b7b680c9f2829cf2fae52df0448bbf1585af1772212a3213328d4768e70fa12b2ecce90fc7becaa1c96b8b6e6d78fd639416f017ebc10622cea8a903b1b81bb003bbb187e869d00f", 0xcc}, {&(0x7f0000002740)="d35c4c1b387731abe8f4e9d422a404f325840a7002ab7e57cf8df05d7c475d7f3f535b1e01f4ccda7f223d665d5882c4e78ed910969edd4b49b260bf6e3fcacc24564213", 0x44}, {&(0x7f00000027c0)="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", 0x1000}], 0xa, &(0x7f0000003880)=[{0x100, 0x119, 0xff, "0b4071f3d012ffb2eb04c14d4ccd7f2445881b400d0a091970cd1adca7536134c475c46644dcae01ce4a134daa077d57d39a825c2c9524dfb6f96c9607ba3bfbc6826ad7aad214d83eed6b55918c21986be511aa04242e9fdc5eb9178c4113e2a30637f5ba147cee468aad4f7ebaab6e705beed08ab70f5e23999ae4f0a25b4b39ac2a1c57a2848efd342fcdc730d57e1c520b728bd87955f98b92d48a560ba667665e1915c48ea011a018ba69a2da5aceb768db6b995f5cf2f94755b96a969f6076edda5df7c7ca96e547e278f3476ce8896b8ad32937c4d03119a488a528d15f25f71bc1388aa6f6c2"}, {0xb0, 0x88, 0x0, "281a94b5cb420e20b1621434e8c628380dc65c373d47fe438e032ad69debbe5559f79de7bb8b5a51d2fe5ae98aee35f9b3868abf8e8114a03e06396c30eeafa246d0a3b719952dd4d96f4c5e70c66c30b304ae5d41eb123b1f87ca47e67d8fccdc50b67383262a25885dd1551da5ec4d2a006d885e61fb3b5582231dbed50d48f80dc7018fdfba76f2ce87fd97652ac7cf544ae211df86a438"}, {0x28, 0x117, 0x7, "01c9e9ff66dfbab647fd2ed9083f7ccfeb10dd59f4"}, {0x38, 0x118, 0x4d52cad8, "a3a94ca1dd8c77d03985c340a8443b221fcb73d5c42d347e8edd6dd80c8b4e3a3ddf3a"}, {0x80, 0x29, 0x1, "1fb48665673fe63fd9ba17d51c67e6953b7c65a39ad4463147862cbb0ebec9587629e7020da91e0da154ca0e0b7dc2a235802f1c0c5a9ce936f451c2fc07906ac98532e7a77781daa8c0a3af8ea8b2f8cbe6803a2f87a4b59af83b0da57baa226bed5303a2978586f6b0b28c09"}, {0x40, 0x116, 0x5, "c83c3ab7908f7fc85477c0cff3a949cde6ec952bb0f6669ace876505b55c6f19f8e88402b1bc4ac657da"}, {0xb8, 0x84, 0xffffff00, "864db779199ac1a0ff648b25fb499254760881565b7521ff4b9fc7f2015208a81bdb89029c1f6dd609a87970fa959f59e3dcd93766de4e17bdfccc5c028749e3e6da42292cc47b17ac81ef498b21136b6b0c3b59166b135d56d9ac4f4fb231bdf67c00f33fdd700da74d9df2cfdb64bc7986adf6e5077df4a3fd9923f1c61b6bb0c2a0cce35199ad0995fb7bb2c1d5d614a7e917f8236378432654c1c87af9c1d8c1836e0dd70f"}], 0x388}, 0x440c1) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet(0x2, 0xa, 0x4) socket$kcm(0x2, 0xa, 0x73) close(0x3) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x7, 0x7) syz_extract_tcp_res(&(0x7f0000000380)={0x41424344, 0x41424344}, 0x1, 0x9) syz_extract_tcp_res(&(0x7f00000003c0)={0x41424344, 0x41424344}, 0xa, 0x40) syz_emit_ethernet(0x10d, &(0x7f0000000640)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x19, 0x4, 0x2, 0x28, 0xff, 0x67, 0x0, 0x9, 0x6, 0x0, @private=0xa010101, @private=0xa010100, {[@timestamp_prespec={0x44, 0x24, 0xb5, 0x3, 0xb, [{@private=0xa010102, 0x3}, {@private=0xa010102, 0x7}, {@empty, 0x80000001}, {@local, 0x6}]}, @timestamp={0x44, 0xc, 0xdd, 0x0, 0x8, [0xffffff01, 0x7ff]}, @noop, @rr={0x7, 0x1b, 0xe9, [@remote, @private=0xa010102, @remote, @multicast2, @multicast2, @multicast2]}, @generic={0x7, 0x4, "0ee8"}]}}, {{0x4e22, 0x4e23, r7, r8, 0x0, 0x0, 0x16, 0x40, 0x2, 0x0, 0xfa68, {[@md5sig={0x13, 0x12, "8e73bb6513ad4d9e1d849d5a4f08c776"}, @generic={0x13, 0xe, "473bd3b563d1081f9558d7ba"}, @sack_perm={0x4, 0x2}, @generic={0x13, 0x12, "0ea569363ea953c816a12531cafe45de"}, @window={0x3, 0x3, 0x8}, @mptcp=@syn={0x1e, 0xc, 0x8, 0x1, 0xc, 0xfca0, 0xff9}]}}, {"939b9d6dbab312a12749142d553eeca758a932d2bb70aaf043ee38f151b0146644356b14190b5c4c046353254c99542a622668a56492e84c43ec693383fa1df2748bb8"}}}}}}, &(0x7f0000000780)={0x1, 0x4, [0xa2a, 0x553, 0xb3b, 0xf8d]}) syz_emit_ethernet(0x1d5, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv4={0x800, @esp={{0x2d, 0x4, 0x1, 0x6, 0x1c7, 0x65, 0x0, 0x0, 0x32, 0x0, @remote, @broadcast, {[@noop, @end, @noop, @timestamp={0x44, 0x28, 0x10, 0x0, 0x6, [0x4, 0x81, 0x3ff, 0x401, 0xd, 0x4, 0xffff, 0xffff, 0x1]}, @lsrr={0x83, 0x1b, 0x34, [@remote, @multicast1, @multicast2, @local, @multicast1, @rand_addr=0x64010101]}, @end, @timestamp_prespec={0x44, 0xc, 0x2e, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0xb}]}, @timestamp_addr={0x44, 0x34, 0xff, 0x1, 0x9, [{@broadcast, 0x6}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x33d}, {@rand_addr=0x64010100, 0x3}, {@remote, 0x2}, {@multicast1, 0xca3f}]}, @ssrr={0x89, 0x17, 0x8b, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {0x4d5, 0x1, @basic={0x0, 0x0, 0x6, [@ipv6=@tcp={0xf, 0x6, "aaf027", 0xd9, 0x6, 0x1, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@fragment={0x5c, 0x0, 0x10, 0x1, 0x0, 0xc, 0x65}, @routing={0x73, 0x2, 0x0, 0xa, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0x99, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}], {{0x4e20, 0x4e21, r6, r8, 0x0, 0x0, 0x16, 0x4, 0x3, 0x0, 0x3, {[@exp_smc={0xfe, 0x6}, @nop, @generic={0x13, 0x7, "c9e57a7e88"}, @mss={0x2, 0x4, 0x4}, @mptcp=@synack={0x1e, 0x10, 0x6, 0x2, 0x8, 0x4, 0xd2}, @nop, @sack_perm={0x4, 0x2}, @nop, @md5sig={0x13, 0x12, "d34921f4a95a3c77b6bfe500e7ae1f44"}, @mptcp=@capable={0x1e, 0xc, 0x3, 0x8, 0x3, 0xffffffffffff846f}]}}, {"9cfe1451660c18a5c97d5e8a5ae9396e66652aa54b5fb3bc3ddcfe44f901e95198fbfc6da5adb593e44f0e311dd2af8867842199d3b36c99b44eeb162381155b00"}}}}]}, "4390919a", 0x4}}}}}, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='gretap0\x00'}) 17.254723817s ago: executing program 1 (id=5708): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f00000002c0)=0x7, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x1}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x2000000000000205) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0x196c10ef2dde263, 0x2004c09b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010025bd7000f9dbdf2500008006", @ANYRES32=0x0, @ANYBLOB="1588040003010400"], 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x40880) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x15c}, 0x1, 0x0, 0x0, 0x400c811}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001a000400feffffff0088f66c010000ff010010000400000000000000000001fc010000000000000000000000000001000107174e2300050a0000203a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ffffffff000000000000000000000000fe0000000000000092010000000000100800000000000000f9ffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000801f00000000000000fefffffffffffffffefffffff9030000000000007e00000000000000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}}, 0x20000844) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000b80)=ANY=[], 0x290) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 17.224644754s ago: executing program 2 (id=5709): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000b400000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r0, &(0x7f00000002c0), &(0x7f0000000840)=""/165}, 0x20) 17.185925121s ago: executing program 2 (id=5710): socket$xdp(0x2c, 0x3, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) poll(&(0x7f0000000000)=[{r0, 0x402}], 0x1, 0xeb) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000000000008500000044000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000000000008500000044000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123) 17.037390388s ago: executing program 3 (id=5712): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x14}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) getsockopt$sock_buf(r2, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r5, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="5b1a033f2511aaaaaaaaaabb0800452000b00000000000119078000000000000000000002000009c907801000000030000004c63f9582ec6ebfce48d36c78ce77710b133bde1df85bc73978f2f4aec40c19470d6c2587618d1b42c91fa6831c033fb78364fdaa0fbcc6a6baaaa840246a49f416602f4dcc3a04dd5c7a07fdf09c64fede3564d1d17ce5a164ac20243eded6d185a2e98f592b0dc8ac466ef01b180f476eb3f5add8e6a77aec169a43fc1108de770c584d8b98340ef06e4b8"], 0x0) 16.862008748s ago: executing program 2 (id=5714): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000705000000b415697aad85b6bb4d3f69352c8c36bf784594329cccdd1c", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r3, @ANYBLOB="0000000002000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x95, 0x0, 0xfffffffe}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="4f00000010003904dbdf25000000000000000000", @ANYRES32=r5, @ANYBLOB="01990000419a0400300012800b000100697036746e6c00002000028014000300fe8000000000000000000000000000aa080008002e000000"], 0x50}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) 16.778838712s ago: executing program 3 (id=5716): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pselect6(0xdc, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000380), &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200), 0x8}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 16.730359615s ago: executing program 2 (id=5717): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f00000000c0)=0x1000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) 16.582575273s ago: executing program 2 (id=5719): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x963, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x4b, &(0x7f0000000640)=""/75, 0x41100, 0x4, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xd, 0x8}, 0x10, 0x2a916, 0xffffffffffffffff, 0x1, &(0x7f0000000740), &(0x7f0000000780)=[{0x80000000, 0x3, 0xc, 0xb}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0x1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%ps \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000940)={r0, r1}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x1410, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x80) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000e01000700000000000000000000ffff0000000200000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x2bea0b92b4f18163, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x100, &(0x7f0000000400)=""/256, 0xb6df4c32c1d5c814}, 0x94) 16.582164526s ago: executing program 4 (id=5720): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 16.57652707s ago: executing program 4 (id=5721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x68, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x1}, {0x7, 0x9}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001a0000022bbd7000fcdbdf250a2004080000fe0600140000100016800c000380050002000000000008000400", @ANYRES32=r3, @ANYBLOB="14000500fe80000000000000000000000000003208001900", @ANYRES32=r4, @ANYBLOB="8877f5357d7c3adceb595d77eca48fac2b16b1f2e07e48ad23479638c489a3b0f4054116f3399cf07583ec371980a29b27a0917c3853c491b9f9ec7dc6cc"], 0x50}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000070000850000002a00000095000000000000009500a50500000000d37e6ea242e34c5bf0f5bdea43aa79857f3f27f2ff37d5033f4d4a1bbdf23437e66f498493f49d1d6563a70cfe02012a4554692c96fb843a42f88d91fac37a5fa9ad"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 16.451100127s ago: executing program 4 (id=5722): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="2800000041000701fefeffff00000000011be106d288a60c0000000000000000", @ANYRES32=r2, @ANYBLOB="04000280"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) r5 = socket(0x11, 0x80a, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) unshare(0x28000600) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r11, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r10, @ANYRES32=r13, @ANYRESOCT=r0, @ANYBLOB="5645b505c1cd8c00b0082df25d9a1651f2b189d144fe3b409820475e580455daaf23885a12f67ac2e994b10eeb7801cf499dfb999ffdf799d573887a602010db1af2ea7df28c1df3b8cdf21124805921fc0e361e34ddfe67252c23450d59c34ddd39250c94bc114534396dcafdf3a244609b1b55d3d2c6e5f1eb4efa38c81016cbdf4f03e9ed594c4b993e517426aa47bdee06fbebc362d1dc4ea336d876c3ff67d443f82f2415d827eaac3c4d37", @ANYRESHEX=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r14, 0x2000000, 0x4, 0x0, &(0x7f0000000040)="30868000", 0x0, 0x40cf05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x40, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xfffd}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x41}}, {0x8, 0x2, @remote}}}]}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2cc54}, 0x0) 15.534096594s ago: executing program 4 (id=5723): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1, 0x5}}]}}]}, 0x44}}, 0xb54ee99665a95132) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00 \x00'}]}}]}, 0x170}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001c003704000100000000000024e5f441b46a7f2ae113012ea8bd3360b6552fd3cfcd658547f43f", @ANYRES32=r3, @ANYBLOB="83040500000000002800128008000100677265001c00028008000600ac1414bb06000e000200000006000f00b74b0000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r7 = socket$unix(0x1, 0x1, 0x0) r8 = epoll_create1(0x0) r9 = socket$unix(0x1, 0x1, 0x0) close(r9) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x8002a000}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="18020000740400000000000000000000850000004100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f00000011c0)="495b52d7fc5bbcbdcd34e80d461a", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000480)=@newtaction={0xd8, 0x30, 0x2, 0x70bd25, 0x25dfdbfe, {}, [{0xc4, 0x1, [@m_gact={0xc0, 0x8, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1d46, 0x4}}]}, {0x88, 0x6, "d74266c910425702c87ccedbda9d4a96fba1916317122a4e453de9a978750483ccbc842ab0a0e4f20817b015136a529973e03aa69fb77c2a41953b483a6ab561574d1c89b7ff3b9d01cdead62fb22168a97932b7065295fbc11b9d94b98a2b1881ff7ad6295ad2666ac6024fa468b9cf9fc5c5195d4a4d08fb18143e91dfef582b4f3dd3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x50}, 0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r12, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x6, 0xc}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1e7}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x800}, {0x200, 0x0, 0x2}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x3, 0x4, 0x9}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 15.453443545s ago: executing program 4 (id=5724): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000401101000095000000000010000000005b3500000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 15.418334408s ago: executing program 4 (id=5725): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a31000000000900010073797a3000004100090003"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xffff, 0x96, 0x7}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000804) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xffff, 0x96, 0x7}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000804) accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c, 0x0) (async) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) 2.188951357s ago: executing program 32 (id=5703): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '))-#+.'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 2.154673582s ago: executing program 33 (id=5708): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f00000002c0)=0x7, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x1}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x2000000000000205) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0x196c10ef2dde263, 0x2004c09b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010025bd7000f9dbdf2500008006", @ANYRES32=0x0, @ANYBLOB="1588040003010400"], 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x40880) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x15c}, 0x1, 0x0, 0x0, 0x400c811}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001a000400feffffff0088f66c010000ff010010000400000000000000000001fc010000000000000000000000000001000107174e2300050a0000203a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ffffffff000000000000000000000000fe0000000000000092010000000000100800000000000000f9ffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000801f00000000000000fefffffffffffffffefffffff9030000000000007e00000000000000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}}, 0x20000844) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000b80)=ANY=[], 0x290) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 1.118343203s ago: executing program 34 (id=5719): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x963, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x4b, &(0x7f0000000640)=""/75, 0x41100, 0x4, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xd, 0x8}, 0x10, 0x2a916, 0xffffffffffffffff, 0x1, &(0x7f0000000740), &(0x7f0000000780)=[{0x80000000, 0x3, 0xc, 0xb}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0x1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%ps \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000940)={r0, r1}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x1410, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x80) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000e01000700000000000000000000ffff0000000200000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x2bea0b92b4f18163, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x100, &(0x7f0000000400)=""/256, 0xb6df4c32c1d5c814}, 0x94) 1.059775367s ago: executing program 35 (id=5716): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pselect6(0xdc, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000380), &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200), 0x8}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 0s ago: executing program 36 (id=5725): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a31000000000900010073797a3000004100090003"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xffff, 0x96, 0x7}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000804) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xffff, 0x96, 0x7}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000804) accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c, 0x0) (async) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) kernel console output (not intermixed with test programs): amily 0 port 8472 - 0 [ 704.246249][T27112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.390643][T27112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.390703][T27112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.462600][T27145] FAULT_INJECTION: forcing a failure. [ 704.462600][T27145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.481853][T27145] CPU: 1 UID: 0 PID: 27145 Comm: syz.4.5189 Not tainted syzkaller #0 PREEMPT(full) [ 704.481882][T27145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 704.481892][T27145] Call Trace: [ 704.481898][T27145] [ 704.481905][T27145] dump_stack_lvl+0xe8/0x150 [ 704.481932][T27145] should_fail_ex+0x410/0x560 [ 704.481959][T27145] _copy_to_user+0x31/0xb0 [ 704.481976][T27145] simple_read_from_buffer+0xe1/0x170 [ 704.482000][T27145] proc_fail_nth_read+0x1bb/0x230 [ 704.482022][T27145] ? common_file_perm+0x20e/0x2b0 [ 704.482049][T27145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.482074][T27145] ? rw_verify_area+0x24a/0x4c0 [ 704.482097][T27145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.482119][T27145] vfs_read+0x213/0xa80 [ 704.482143][T27145] ? __pfx___mutex_lock+0x10/0x10 [ 704.482166][T27145] ? __pfx_vfs_read+0x10/0x10 [ 704.482188][T27145] ? __fget_files+0x2a/0x420 [ 704.482210][T27145] ? __fget_files+0x3a2/0x420 [ 704.482229][T27145] ? __fget_files+0x2a/0x420 [ 704.482254][T27145] ksys_read+0x150/0x270 [ 704.482277][T27145] ? __pfx_ksys_read+0x10/0x10 [ 704.482311][T27145] do_syscall_64+0x166/0x520 [ 704.482331][T27145] ? trace_irq_disable+0x3b/0x140 [ 704.482346][T27145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.482361][T27145] ? clear_bhb_loop+0x70/0xc0 [ 704.482380][T27145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.482395][T27145] RIP: 0033:0x7fd0eaf5e98e [ 704.482409][T27145] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 704.482422][T27145] RSP: 002b:00007fd0ebe06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 704.482437][T27145] RAX: ffffffffffffffda RBX: 00007fd0ebe076c0 RCX: 00007fd0eaf5e98e [ 704.482449][T27145] RDX: 000000000000000f RSI: 00007fd0ebe070a0 RDI: 0000000000000003 [ 704.482458][T27145] RBP: 00007fd0ebe07090 R08: 0000000000000000 R09: 0000000000000000 [ 704.482468][T27145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.482477][T27145] R13: 00007fd0eb226038 R14: 00007fd0eb225fa0 R15: 00007fff3ebec238 [ 704.482501][T27145] [ 704.732439][T27112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.743034][T27112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.895522][T27157] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5193'. [ 704.960898][T27163] netlink: 'syz.1.5192': attribute type 1 has an invalid length. [ 704.965095][T13379] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.965185][T13379] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.969055][T27163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5192'. [ 704.969133][T27163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5192'. [ 704.993147][T27160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5193'. [ 705.060694][T27157] netlink: 'syz.3.5193': attribute type 5 has an invalid length. [ 705.124640][T27177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.667253][T13379] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.667304][T13379] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.667429][T13379] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.667512][T13379] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.667586][T13379] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.667647][T13379] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.928076][T27206] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5200'. [ 706.726107][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 28 seconds [ 706.727796][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 28 seconds [ 706.728821][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 28 seconds [ 706.729145][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 28 seconds [ 706.798958][T27261] erspan0: entered promiscuous mode [ 706.799001][T27261] erspan0: entered allmulticast mode [ 707.838522][T27329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5234'. [ 707.931393][T27329] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5234'. [ 707.972923][T27332] netlink: 'syz.0.5235': attribute type 2 has an invalid length. [ 707.981308][T27332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5235'. [ 708.241917][T27357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5240'. [ 708.398017][T27357] syzkaller0: entered promiscuous mode [ 708.398148][T27357] syzkaller0: entered allmulticast mode [ 708.701009][T27368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5243'. [ 710.079042][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 30 seconds [ 710.079117][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 30 seconds [ 710.079148][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 30 seconds [ 710.079254][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 30 seconds [ 710.845649][T27368] ipvlan0: entered promiscuous mode [ 710.851197][T27368] ipvlan0: left promiscuous mode [ 711.040505][T27384] netlink: 564 bytes leftover after parsing attributes in process `syz.3.5246'. [ 711.225589][T27397] netlink: 'syz.1.5247': attribute type 4 has an invalid length. [ 711.277927][T27398] netlink: 'syz.1.5247': attribute type 4 has an invalid length. [ 711.318573][T27393] syzkaller0: entered promiscuous mode [ 711.318616][T27393] syzkaller0: entered allmulticast mode [ 711.777654][T27415] x_tables: unsorted entry at hook 2 [ 711.927042][T27417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5255'. [ 712.317090][T27431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5259'. [ 712.334635][T27426] netlink: 'syz.2.5258': attribute type 4 has an invalid length. [ 712.367664][T27432] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5257'. [ 712.458771][T27435] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 712.492996][T27435] netlink: 'syz.4.5260': attribute type 4 has an invalid length. [ 712.587853][T27435] syzkaller1: entered promiscuous mode [ 712.587909][T27435] syzkaller1: entered allmulticast mode [ 712.610017][T27435] §: renamed from sit0 [ 712.644894][T27443] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5262'. [ 712.724834][T27442] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5262'. [ 712.985346][T27464] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5268'. [ 713.065492][T27469] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 713.066105][T27469] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 713.066656][T27469] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 713.090895][T27469] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 713.091513][T27469] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 713.092067][T27469] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 713.112983][T27469] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 713.140482][T27465] tc_dump_action: action bad kind [ 713.167166][T27474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5272'. [ 713.434718][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 32 seconds [ 713.434786][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 32 seconds [ 713.434829][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 32 seconds [ 713.434860][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 32 seconds [ 713.734638][T27499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5281'. [ 713.981784][T27514] tipc: Enabled bearer , priority 0 [ 714.037204][T27514] syzkaller0: entered promiscuous mode [ 714.043779][T27514] syzkaller0: entered allmulticast mode [ 714.050190][T27514] tipc: Resetting bearer [ 714.081295][T27514] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 714.176964][T27528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5288'. [ 714.190905][T27522] netlink: 'syz.3.5287': attribute type 12 has an invalid length. [ 714.348876][ T1368] tipc: Resetting bearer [ 714.370138][T27513] tipc: Resetting bearer [ 715.010908][T27553] netlink: 'syz.1.5292': attribute type 1 has an invalid length. [ 716.795129][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 34 seconds [ 716.795185][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 34 seconds [ 716.795226][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 34 seconds [ 716.795254][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 34 seconds [ 716.935792][T27513] tipc: Disabling bearer [ 716.946774][T27522] __nla_validate_parse: 2 callbacks suppressed [ 716.946828][T27522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5287'. [ 716.946873][T27522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5287'. [ 716.946902][T27522] netlink: 'syz.3.5287': attribute type 12 has an invalid length. [ 716.947086][T27553] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 717.192090][T27567] Bluetooth: hci0: unsupported parameter 5135 [ 717.207029][T27567] Bluetooth: hci0: unsupported parameter 8192 [ 717.213269][T27567] Bluetooth: hci0: unsupported parameter 5135 [ 717.220638][T27567] Bluetooth: hci0: unsupported parameter 8192 [ 717.258994][T27572] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5293'. [ 717.263521][T27571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5294'. [ 717.376584][T27571] bond10: option broadcast_neighbor: invalid value (3) [ 717.385335][T27571] bond10 (unregistering): Released all slaves [ 717.466706][T27576] netlink: 'syz.4.5297': attribute type 4 has an invalid length. [ 717.466754][T27576] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5297'. [ 717.515767][T27576] xt_socket: unknown flags 0x8 [ 717.694825][T27595] netlink: 'syz.4.5302': attribute type 3 has an invalid length. [ 717.850681][T27598] netlink: 'syz.1.5303': attribute type 11 has an invalid length. [ 718.083725][T27602] FAULT_INJECTION: forcing a failure. [ 718.083725][T27602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.083786][T27602] CPU: 1 UID: 0 PID: 27602 Comm: syz.3.5305 Not tainted syzkaller #0 PREEMPT(full) [ 718.083812][T27602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 718.083826][T27602] Call Trace: [ 718.083835][T27602] [ 718.083846][T27602] dump_stack_lvl+0xe8/0x150 [ 718.083883][T27602] should_fail_ex+0x410/0x560 [ 718.083919][T27602] _copy_to_iter+0x1e4/0x1810 [ 718.083957][T27602] ? do_raw_spin_lock+0x12b/0x2f0 [ 718.083993][T27602] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 718.084024][T27602] ? __pfx__copy_to_iter+0x10/0x10 [ 718.084065][T27602] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 718.084201][T27602] tun_do_read+0xdd2/0x28b0 [ 718.084314][T27602] ? aa_file_perm+0x4ed/0x15f0 [ 718.084337][T27602] ? __pfx_tun_do_read+0x10/0x10 [ 718.084372][T27602] ? lock_acquire+0x115/0x350 [ 718.084392][T27602] ? tun_get+0x1c/0x2f0 [ 718.084421][T27602] ? __pfx_default_wake_function+0x10/0x10 [ 718.084461][T27602] ? tun_get+0x1c/0x2f0 [ 718.084488][T27602] ? tun_get+0x1c/0x2f0 [ 718.084522][T27602] tun_chr_read_iter+0x13b/0x260 [ 718.084553][T27602] do_iter_readv_writev+0x612/0x8c0 [ 718.084596][T27602] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 718.084633][T27602] ? bpf_lsm_file_permission+0x9/0x20 [ 718.084666][T27602] ? security_file_permission+0x75/0x260 [ 718.084696][T27602] ? rw_verify_area+0x24a/0x4c0 [ 718.084729][T27602] vfs_readv+0x28d/0x850 [ 718.084761][T27602] ? __pfx_vfs_readv+0x10/0x10 [ 718.084798][T27602] ? __fget_files+0x2a/0x420 [ 718.084830][T27602] ? __fget_files+0x3a2/0x420 [ 718.084856][T27602] ? __fget_files+0x2a/0x420 [ 718.084892][T27602] __x64_sys_preadv+0x19c/0x2b0 [ 718.084926][T27602] ? __pfx___x64_sys_preadv+0x10/0x10 [ 718.084970][T27602] do_syscall_64+0x166/0x520 [ 718.084997][T27602] ? trace_irq_disable+0x3b/0x140 [ 718.085017][T27602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.085039][T27602] ? clear_bhb_loop+0x70/0xc0 [ 718.085065][T27602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.085086][T27602] RIP: 0033:0x7ff2ccf9e159 [ 718.085106][T27602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.085124][T27602] RSP: 002b:00007ff2cdf13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 718.085148][T27602] RAX: ffffffffffffffda RBX: 00007ff2cd225fa0 RCX: 00007ff2ccf9e159 [ 718.085164][T27602] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000003 [ 718.085177][T27602] RBP: 00007ff2cdf13090 R08: 0000000010000001 R09: 0000000000000000 [ 718.085192][T27602] R10: 00000000000000ea R11: 0000000000000246 R12: 0000000000000001 [ 718.085205][T27602] R13: 00007ff2cd226038 R14: 00007ff2cd225fa0 R15: 00007ffc6989a328 [ 718.085238][T27602] [ 718.105156][T27611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.428910][ T32] audit: type=1800 audit(1788446074.512:23): pid=27616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5309" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2374 res=0 errno=0 [ 718.529693][T27614] Bluetooth: hci0: unsupported parameter 5135 [ 718.529737][T27614] Bluetooth: hci0: unsupported parameter 8192 [ 718.529767][T27614] Bluetooth: hci0: unsupported parameter 5135 [ 718.529813][T27614] Bluetooth: hci0: unsupported parameter 8192 [ 718.733410][T27626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.854188][T27640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5317'. [ 718.854230][T27640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5317'. [ 718.880876][T27643] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5314'. [ 718.907250][T27643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5314'. [ 719.141311][T27653] netlink: zone id is out of range [ 719.149858][T27653] netlink: zone id is out of range [ 719.149931][T27653] netlink: zone id is out of range [ 719.150040][T27653] netlink: zone id is out of range [ 719.150053][T27653] netlink: zone id is out of range [ 719.150065][T27653] netlink: zone id is out of range [ 719.150076][T27653] netlink: zone id is out of range [ 719.150119][T27653] netlink: zone id is out of range [ 719.449368][T27670] syzkaller0: entered promiscuous mode [ 719.457567][T27670] syzkaller0: entered allmulticast mode [ 719.675092][T27680] Bluetooth: hci0: unsupported parameter 5135 [ 719.675137][T27680] Bluetooth: hci0: unsupported parameter 8192 [ 719.675153][T27680] Bluetooth: hci0: unsupported parameter 5135 [ 719.675166][T27680] Bluetooth: hci0: unsupported parameter 8192 [ 719.756117][T27683] FAULT_INJECTION: forcing a failure. [ 719.756117][T27683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.769695][T27683] CPU: 0 UID: 0 PID: 27683 Comm: syz.0.5325 Not tainted syzkaller #0 PREEMPT(full) [ 719.769722][T27683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 719.769735][T27683] Call Trace: [ 719.769744][T27683] [ 719.769753][T27683] dump_stack_lvl+0xe8/0x150 [ 719.769790][T27683] should_fail_ex+0x410/0x560 [ 719.769824][T27683] _copy_to_iter+0x1e4/0x1810 [ 719.769861][T27683] ? do_raw_spin_lock+0x12b/0x2f0 [ 719.769893][T27683] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 719.769921][T27683] ? __pfx__copy_to_iter+0x10/0x10 [ 719.769965][T27683] tun_do_read+0x1a9e/0x28b0 [ 719.770014][T27683] ? aa_file_perm+0x4ed/0x15f0 [ 719.770036][T27683] ? __pfx_tun_do_read+0x10/0x10 [ 719.770069][T27683] ? lock_acquire+0x115/0x350 [ 719.770090][T27683] ? tun_get+0x1c/0x2f0 [ 719.770118][T27683] ? __pfx_default_wake_function+0x10/0x10 [ 719.770148][T27683] ? tun_get+0x1c/0x2f0 [ 719.770174][T27683] ? tun_get+0x1c/0x2f0 [ 719.770207][T27683] tun_chr_read_iter+0x13b/0x260 [ 719.770238][T27683] do_iter_readv_writev+0x612/0x8c0 [ 719.770273][T27683] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 719.770309][T27683] ? bpf_lsm_file_permission+0x9/0x20 [ 719.770335][T27683] ? security_file_permission+0x75/0x260 [ 719.770364][T27683] ? rw_verify_area+0x24a/0x4c0 [ 719.770404][T27683] vfs_readv+0x28d/0x850 [ 719.770435][T27683] ? __pfx_vfs_readv+0x10/0x10 [ 719.770472][T27683] ? __fget_files+0x2a/0x420 [ 719.770503][T27683] ? __fget_files+0x3a2/0x420 [ 719.770528][T27683] ? __fget_files+0x2a/0x420 [ 719.770563][T27683] __x64_sys_preadv+0x19c/0x2b0 [ 719.770598][T27683] ? __pfx___x64_sys_preadv+0x10/0x10 [ 719.770642][T27683] do_syscall_64+0x166/0x520 [ 719.770670][T27683] ? trace_irq_disable+0x3b/0x140 [ 719.770690][T27683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.770711][T27683] ? clear_bhb_loop+0x70/0xc0 [ 719.770737][T27683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.770758][T27683] RIP: 0033:0x7f3fb5b9e159 [ 719.770781][T27683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.770800][T27683] RSP: 002b:00007f3fb6a92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 719.770823][T27683] RAX: ffffffffffffffda RBX: 00007f3fb5e25fa0 RCX: 00007f3fb5b9e159 [ 719.770838][T27683] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000003 [ 719.770852][T27683] RBP: 00007f3fb6a92090 R08: 0000000010000001 R09: 0000000000000000 [ 719.770866][T27683] R10: 00000000000000ea R11: 0000000000000246 R12: 0000000000000001 [ 719.770878][T27683] R13: 00007f3fb5e26038 R14: 00007f3fb5e25fa0 R15: 00007ffde7e37018 [ 719.770911][T27683] [ 720.048912][T27686] FAULT_INJECTION: forcing a failure. [ 720.048912][T27686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.064008][T27686] CPU: 0 UID: 0 PID: 27686 Comm: syz.4.5327 Not tainted syzkaller #0 PREEMPT(full) [ 720.064049][T27686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 720.064062][T27686] Call Trace: [ 720.064071][T27686] [ 720.064081][T27686] dump_stack_lvl+0xe8/0x150 [ 720.064135][T27686] should_fail_ex+0x410/0x560 [ 720.064172][T27686] _copy_from_user+0x2d/0xb0 [ 720.064195][T27686] ___sys_sendmsg+0x1c6/0x360 [ 720.064219][T27686] ? __lock_acquire+0x6df/0x2e50 [ 720.064246][T27686] ? __pfx____sys_sendmsg+0x10/0x10 [ 720.064304][T27686] ? __fget_files+0x2a/0x420 [ 720.064331][T27686] ? __fget_files+0x3a2/0x420 [ 720.064385][T27686] __x64_sys_sendmsg+0x1b1/0x290 [ 720.064409][T27686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 720.064454][T27686] do_syscall_64+0x166/0x520 [ 720.064484][T27686] ? trace_irq_disable+0x3b/0x140 [ 720.064505][T27686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.064528][T27686] ? clear_bhb_loop+0x70/0xc0 [ 720.064556][T27686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.064578][T27686] RIP: 0033:0x7fd0eaf9e159 [ 720.064600][T27686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.064618][T27686] RSP: 002b:00007fd0ebe07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.064642][T27686] RAX: ffffffffffffffda RBX: 00007fd0eb225fa0 RCX: 00007fd0eaf9e159 [ 720.064659][T27686] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 720.064673][T27686] RBP: 00007fd0ebe07090 R08: 0000000000000000 R09: 0000000000000000 [ 720.064687][T27686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.064701][T27686] R13: 00007fd0eb226038 R14: 00007fd0eb225fa0 R15: 00007fff3ebec238 [ 720.064735][T27686] [ 720.159707][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 36 seconds [ 720.159747][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 36 seconds [ 720.159773][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 36 seconds [ 720.159797][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 36 seconds [ 720.370038][T27687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5326'. [ 720.470308][T27687] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 720.493358][T27694] syzkaller0 speed is unknown, defaulting to 1000 [ 720.683009][T27702] vlan1: entered allmulticast mode [ 720.683054][T27702] bridge_slave_0: entered allmulticast mode [ 720.710747][T27702] bridge0: port 2(vlan1) entered blocking state [ 720.719948][T27702] bridge0: port 2(vlan1) entered disabled state [ 720.730507][T27702] vlan1: entered promiscuous mode [ 720.730548][T27702] bridge_slave_0: entered promiscuous mode [ 721.425059][T27733] Bluetooth: hci0: unsupported parameter 5135 [ 721.425109][T27733] Bluetooth: hci0: unsupported parameter 8192 [ 721.425138][T27733] Bluetooth: hci0: unsupported parameter 5135 [ 721.425156][T27733] Bluetooth: hci0: unsupported parameter 8192 [ 721.834563][T27753] xt_l2tp: unknown flags: 51 [ 722.325319][T27784] tipc: Enabling of bearer rejected, failed to enable media [ 722.892448][T27816] Bluetooth: hci0: unsupported parameter 5135 [ 722.892496][T27816] Bluetooth: hci0: unsupported parameter 8192 [ 722.893113][T27816] Bluetooth: hci0: unsupported parameter 5135 [ 722.893163][T27816] Bluetooth: hci0: unsupported parameter 8192 [ 723.230389][T27836] net_ratelimit: 81 callbacks suppressed [ 723.230446][T27836] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 723.340110][T27837] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 723.408434][T27844] bond7: (slave veth0_to_bond): Releasing active interface [ 723.429527][T27847] __nla_validate_parse: 4 callbacks suppressed [ 723.436375][T27847] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5365'. [ 723.513856][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 38 seconds [ 723.513905][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 38 seconds [ 723.513945][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 38 seconds [ 723.513974][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 38 seconds [ 723.889585][T27844] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 723.903977][T27848] vlan0: entered promiscuous mode [ 723.904044][T27848] bond8: entered promiscuous mode [ 723.904085][T27848] geneve2: entered promiscuous mode [ 723.960011][T27848] team0: Port device vlan0 added [ 723.987075][T27859] tipc: Enabled bearer , priority 0 [ 724.097917][T27869] syzkaller0: entered promiscuous mode [ 724.103805][T27869] syzkaller0: entered allmulticast mode [ 724.111629][T27875] Bluetooth: hci0: unsupported parameter 5135 [ 724.111665][T27875] Bluetooth: hci0: unsupported parameter 8192 [ 724.111679][T27875] Bluetooth: hci0: unsupported parameter 5135 [ 724.111693][T27875] Bluetooth: hci0: unsupported parameter 8192 [ 724.416141][T27885] syzkaller0: entered promiscuous mode [ 724.416187][T27885] syzkaller0: entered allmulticast mode [ 724.600789][T27892] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.5373'. [ 724.940387][T27903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5374'. [ 724.983427][T27912] syzkaller0 speed is unknown, defaulting to 1000 [ 725.091031][T27922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5378'. [ 725.289080][T27942] netlink: 'syz.3.5379': attribute type 13 has an invalid length. [ 725.289128][T27942] netlink: 'syz.3.5379': attribute type 58 has an invalid length. [ 725.289160][T27942] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5379'. [ 725.326285][T16474] tipc: Node number set to 2130706433 [ 725.723425][T27963] syzkaller0: left promiscuous mode [ 725.723473][T27963] syzkaller0: left allmulticast mode [ 725.933250][T27968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5385'. [ 725.947991][T27977] bridge3: entered promiscuous mode [ 725.948304][T27977] bridge3: entered allmulticast mode [ 725.959752][T27977] team0: Port device bridge3 added [ 725.985592][T27978] netlink: 'syz.3.5385': attribute type 1 has an invalid length. [ 726.041624][T27978] bond10: entered promiscuous mode [ 726.052150][T27978] 8021q: adding VLAN 0 to HW filter on device bond10 [ 726.076696][T27983] block nbd4: server does not support multiple connections per device. [ 726.077699][T27983] block nbd4: shutting down sockets [ 726.115367][T27980] 8021q: adding VLAN 0 to HW filter on device bond10 [ 726.122919][T27980] bond10: (slave ipip0): The slave device specified does not support setting the MAC address [ 726.134159][T27980] bond10: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 726.147812][T27980] bond10: (slave ipip0): making interface the new active one [ 726.155384][T27980] ipip0: entered promiscuous mode [ 726.156700][T27980] bond10: (slave ipip0): Enslaving as an active interface with an up link [ 726.246401][T27984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5388'. [ 726.370753][T27992] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20003 [ 726.378862][T27992] netlink: 324 bytes leftover after parsing attributes in process `syz.3.5392'. [ 726.522359][T27994] bond0: (slave ip6gretap0): making interface the new active one [ 726.536850][T27994] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 726.560629][T27994] bond0 (unregistering): (slave ip6gretap0): Releasing active interface [ 726.573220][T27994] bond0 (unregistering): Released all slaves [ 726.605318][T27995] netlink: 'syz.4.5395': attribute type 2 has an invalid length. [ 726.655719][T28003] x_tables: unsorted entry at hook 2 [ 726.874006][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 40 seconds [ 726.874060][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 40 seconds [ 726.874102][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 40 seconds [ 726.874133][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 40 seconds [ 727.961141][T28046] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 730.234222][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 42 seconds [ 730.234277][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 42 seconds [ 730.234334][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 42 seconds [ 730.234363][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 42 seconds [ 730.287160][T28107] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5422'. [ 730.312836][T28108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5424'. [ 730.312890][T28108] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5424'. [ 730.314311][T28108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5424'. [ 730.314367][T28108] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5424'. [ 730.399350][T28110] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 730.468822][T28116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5427'. [ 730.469618][T28115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5427'. [ 730.529567][T28121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5429'. [ 730.542087][T28121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5429'. [ 730.606088][T28124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5430'. [ 730.733282][T28126] syzkaller0 speed is unknown, defaulting to 1000 [ 730.749453][T28131] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 731.142128][T28149] nbd: must specify a size in bytes for the device [ 731.568911][T28178] Bluetooth: hci0: invalid length 0, exp 2 for type 29 [ 731.577828][T28178] netlink: 'syz.4.5442': attribute type 1 has an invalid length. [ 731.619090][T28178] bond4: entered promiscuous mode [ 731.625009][T28178] 8021q: adding VLAN 0 to HW filter on device bond4 [ 731.660400][T28178] 8021q: adding VLAN 0 to HW filter on device bond4 [ 731.661386][T28178] bond4: (slave ipip0): The slave device specified does not support setting the MAC address [ 731.661444][T28178] bond4: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 731.691485][T28178] bond4: (slave ipip0): making interface the new active one [ 731.691520][T28178] ipip0: entered promiscuous mode [ 731.708532][T28178] bond4: (slave ipip0): Enslaving as an active interface with an up link [ 731.871577][T28193] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 731.930223][T28197] block nbd4: server does not support multiple connections per device. [ 731.939277][T28197] block nbd4: shutting down sockets [ 732.044899][T28202] Bluetooth: hci0: unsupported parameter 5135 [ 732.051364][T28202] Bluetooth: hci0: unsupported parameter 8192 [ 732.057838][T28202] Bluetooth: hci0: unsupported parameter 5135 [ 732.064630][T28202] Bluetooth: hci0: unsupported parameter 8192 [ 732.208990][T28209] netlink: 'syz.4.5449': attribute type 1 has an invalid length. [ 732.258201][T28209] bond5: entered promiscuous mode [ 732.259430][T28209] 8021q: adding VLAN 0 to HW filter on device bond5 [ 732.290645][T28209] bond5: (slave bridge4): making interface the new active one [ 732.290685][T28209] bridge4: entered promiscuous mode [ 732.298328][T28209] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 732.418104][T28216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.933283][T28246] Bluetooth: hci0: unsupported parameter 5135 [ 732.933346][T28246] Bluetooth: hci0: unsupported parameter 8192 [ 732.933382][T28246] Bluetooth: hci0: unsupported parameter 5135 [ 732.933402][T28246] Bluetooth: hci0: unsupported parameter 8192 [ 733.252812][T28266] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 733.253182][T28266] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 733.376808][T28271] FAULT_INJECTION: forcing a failure. [ 733.376808][T28271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.391006][T28271] CPU: 0 UID: 0 PID: 28271 Comm: syz.0.5464 Not tainted syzkaller #0 PREEMPT(full) [ 733.391032][T28271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 733.391044][T28271] Call Trace: [ 733.391052][T28271] [ 733.391060][T28271] dump_stack_lvl+0xe8/0x150 [ 733.391093][T28271] should_fail_ex+0x410/0x560 [ 733.391135][T28271] _copy_from_user+0x2d/0xb0 [ 733.391156][T28271] ___sys_sendmsg+0x1c6/0x360 [ 733.391175][T28271] ? __lock_acquire+0x6df/0x2e50 [ 733.391200][T28271] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.391252][T28271] ? __fget_files+0x2a/0x420 [ 733.391277][T28271] ? __fget_files+0x3a2/0x420 [ 733.391313][T28271] __x64_sys_sendmsg+0x1b1/0x290 [ 733.391335][T28271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 733.391375][T28271] do_syscall_64+0x166/0x520 [ 733.391401][T28271] ? trace_irq_disable+0x3b/0x140 [ 733.391421][T28271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.391441][T28271] ? clear_bhb_loop+0x70/0xc0 [ 733.391468][T28271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.391489][T28271] RIP: 0033:0x7f3fb5b9e159 [ 733.391508][T28271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.391524][T28271] RSP: 002b:00007f3fb6a92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.391546][T28271] RAX: ffffffffffffffda RBX: 00007f3fb5e25fa0 RCX: 00007f3fb5b9e159 [ 733.391560][T28271] RDX: 0000000004008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 733.391573][T28271] RBP: 00007f3fb6a92090 R08: 0000000000000000 R09: 0000000000000000 [ 733.391586][T28271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.391597][T28271] R13: 00007f3fb5e26038 R14: 00007f3fb5e25fa0 R15: 00007ffde7e37018 [ 733.391627][T28271] [ 733.594227][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 44 seconds [ 733.594279][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 44 seconds [ 733.594322][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 44 seconds [ 733.594351][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 44 seconds [ 733.808225][T28279] macsec0: entered promiscuous mode [ 733.814556][T28279] hsr0: entered promiscuous mode [ 733.826871][T28279] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 733.840142][T28279] hsr0: left promiscuous mode [ 734.361441][T28305] xt_hashlimit: size too large, truncated to 1048576 [ 734.416569][T28302] Bluetooth: hci0: unsupported parameter 5135 [ 734.416613][T28302] Bluetooth: hci0: unsupported parameter 8192 [ 734.416627][T28302] Bluetooth: hci0: unsupported parameter 5135 [ 734.416641][T28302] Bluetooth: hci0: unsupported parameter 8192 [ 734.820995][T28319] bond0: (slave gretap0): Error: Device is in use and cannot be enslaved [ 735.284561][T28327] syzkaller0: entered promiscuous mode [ 735.284610][T28327] syzkaller0: entered allmulticast mode [ 735.337363][T28329] netlink: 'syz.1.5479': attribute type 20 has an invalid length. [ 735.337408][T28329] __nla_validate_parse: 13 callbacks suppressed [ 735.337435][T28329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5479'. [ 735.422331][T13341] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.422388][T13341] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.422435][T13341] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.422471][T13341] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.463098][T28329] netlink: 'syz.1.5479': attribute type 20 has an invalid length. [ 735.471388][T28329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5479'. [ 735.570603][T28329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5479'. [ 735.625203][T28335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5480'. [ 736.199325][T28356] Bluetooth: hci0: unsupported parameter 5135 [ 736.206067][T28356] Bluetooth: hci0: unsupported parameter 8192 [ 736.212314][T28356] Bluetooth: hci0: unsupported parameter 5135 [ 736.218730][T28356] Bluetooth: hci0: unsupported parameter 8192 [ 736.284219][T28358] Bluetooth: hci0: unsupported parameter 5135 [ 736.284252][T28358] Bluetooth: hci0: unsupported parameter 8192 [ 736.284280][T28358] Bluetooth: hci0: unsupported parameter 5135 [ 736.284295][T28358] Bluetooth: hci0: unsupported parameter 8192 [ 736.766711][T28386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5493'. [ 736.777649][T28386] block nbd4: server does not support multiple connections per device. [ 736.805316][T28386] block nbd4: shutting down sockets [ 736.957060][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 46 seconds [ 736.957118][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 46 seconds [ 736.957166][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 46 seconds [ 736.957198][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 46 seconds [ 737.196902][T28399] netlink: 'syz.4.5497': attribute type 40 has an invalid length. [ 737.473823][T28418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5501'. [ 737.473872][T28418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5501'. [ 737.994651][T28442] macsec1: entered promiscuous mode [ 738.227505][T28457] batadv_slave_1: entered promiscuous mode [ 738.235611][T28465] netlink: 'syz.3.5510': attribute type 1 has an invalid length. [ 738.308981][T28465] 8021q: adding VLAN 0 to HW filter on device bond11 [ 738.311708][T28456] batadv_slave_1: left promiscuous mode [ 738.363054][T28471] bond11: (slave team_slave_0): making interface the new active one [ 738.379086][T28471] bond11: (slave team_slave_0): Enslaving as an active interface with an up link [ 738.411288][T28465] : renamed from dummy0 (while UP) [ 739.080672][T28503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5519'. [ 739.097765][T28503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5519'. [ 739.272727][T28516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5522'. [ 739.368011][T28516] bond6: option lacp_active: invalid value (5) [ 739.378195][T28516] bond6 (unregistering): Released all slaves [ 739.533974][T28526] syzkaller0: entered promiscuous mode [ 739.539565][T28526] syzkaller0: entered allmulticast mode [ 739.547279][T28525] tipc: Enabled bearer , priority 0 [ 739.555704][T28525] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 739.592286][T28526] tipc: Resetting bearer [ 739.601809][T28524] tipc: Resetting bearer [ 739.642237][T28524] tipc: Disabling bearer [ 739.886607][T28535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 739.895808][T28541] syzkaller0: entered promiscuous mode [ 739.895863][T28541] syzkaller0: entered allmulticast mode [ 740.204951][T28559] x_tables: unsorted entry at hook 2 [ 740.313838][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 48 seconds [ 740.313890][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 48 seconds [ 740.313931][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 48 seconds [ 740.313959][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 48 seconds [ 740.527350][T28567] __nla_validate_parse: 5 callbacks suppressed [ 740.528291][T28567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5540'. [ 741.252115][T28574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5543'. [ 741.521791][T28593] lo: entered allmulticast mode [ 741.620280][T28598] ip6gre3: entered promiscuous mode [ 741.631695][T28598] ip6gre3: entered allmulticast mode [ 741.740904][T28614] lo: left allmulticast mode [ 741.861963][T28617] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 741.917078][T28620] debugfs: '!ù' already exists in 'ieee80211' [ 742.043096][T28624] x_tables: unsorted entry at hook 2 [ 742.205775][T28636] ipip1: entered promiscuous mode [ 742.205818][T28636] ipip1: entered allmulticast mode [ 742.510271][T28645] syzkaller0 speed is unknown, defaulting to 1000 [ 742.576581][T28653] ip_tables: iptables: counters copy to user failed while replacing table [ 743.097299][T28676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5567'. [ 743.109439][T28676] Bluetooth: ISO socket layer initialized [ 743.202457][T28680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5568'. [ 743.329769][T28695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5567'. [ 743.390211][T28685] bond11 (unregistering): Released all slaves [ 743.468044][T28697] xt_hashlimit: size too large, truncated to 1048576 [ 743.674645][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 50 seconds [ 743.674727][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 50 seconds [ 743.674770][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 50 seconds [ 743.674801][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 50 seconds [ 743.844129][T28704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5573'. [ 743.932561][T28704] bond14: entered allmulticast mode [ 743.952870][T28697] lo: entered promiscuous mode [ 743.959134][T28697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 743.977867][T28697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5570'. [ 744.044346][T28708] sctp: [Deprecated]: syz.1.5573 (pid 28708) Use of struct sctp_assoc_value in delayed_ack socket option. [ 744.044346][T28708] Use struct sctp_sack_info instead [ 744.166954][T28722] netlink: 'syz.2.5576': attribute type 1 has an invalid length. [ 744.334199][T28728] x_tables: unsorted entry at hook 2 [ 744.339431][T28722] bond11: entered promiscuous mode [ 744.340472][T28722] 8021q: adding VLAN 0 to HW filter on device bond11 [ 744.533006][T28746] v: renamed from vlan0 (while UP) [ 744.595474][T11460] tipc: Resetting bearer [ 744.786827][T28761] FAULT_INJECTION: forcing a failure. [ 744.786827][T28761] name failslab, interval 1, probability 0, space 0, times 0 [ 744.786875][T28761] CPU: 1 UID: 0 PID: 28761 Comm: syz.2.5587 Not tainted syzkaller #0 PREEMPT(full) [ 744.786899][T28761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 744.786911][T28761] Call Trace: [ 744.786919][T28761] [ 744.786928][T28761] dump_stack_lvl+0xe8/0x150 [ 744.786962][T28761] should_fail_ex+0x410/0x560 [ 744.786994][T28761] ? __alloc_skb+0x1db/0x7a0 [ 744.787022][T28761] should_failslab+0xa8/0x100 [ 744.787046][T28761] ? __alloc_skb+0x1db/0x7a0 [ 744.787071][T28761] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 744.787101][T28761] ? __alloc_skb+0x18d/0x7a0 [ 744.787128][T28761] ? __alloc_skb+0x1db/0x7a0 [ 744.787160][T28761] __alloc_skb+0x1db/0x7a0 [ 744.787192][T28761] netlink_ack+0x136/0xb30 [ 744.787213][T28761] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 744.787342][T28761] ? __lock_acquire+0x6df/0x2e50 [ 744.787374][T28761] netlink_rcv_skb+0x2a4/0x4a0 [ 744.787397][T28761] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 744.787430][T28761] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 744.787464][T28761] ? netlink_deliver_tap+0x2e/0x1b0 [ 744.787485][T28761] ? netlink_deliver_tap+0x2e/0x1b0 [ 744.787510][T28761] netlink_unicast+0x7bd/0x940 [ 744.787540][T28761] netlink_sendmsg+0x813/0xb40 [ 744.787571][T28761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.787599][T28761] ? apparmor_socket_sendmsg+0x98/0x360 [ 744.787629][T28761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.787651][T28761] sock_sendmsg_nosec+0x13a/0x180 [ 744.787686][T28761] ____sys_sendmsg+0x54e/0x850 [ 744.787710][T28761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 744.787738][T28761] ? import_iovec+0x73/0xa0 [ 744.787771][T28761] ___sys_sendmsg+0x2a5/0x360 [ 744.787789][T28761] ? __lock_acquire+0x6df/0x2e50 [ 744.787812][T28761] ? __pfx____sys_sendmsg+0x10/0x10 [ 744.787863][T28761] ? __fget_files+0x2a/0x420 [ 744.787888][T28761] ? __fget_files+0x3a2/0x420 [ 744.787922][T28761] __x64_sys_sendmsg+0x1b1/0x290 [ 744.787944][T28761] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 744.787982][T28761] do_syscall_64+0x166/0x520 [ 744.788009][T28761] ? trace_irq_disable+0x3b/0x140 [ 744.788027][T28761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.788048][T28761] ? clear_bhb_loop+0x70/0xc0 [ 744.788071][T28761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.788108][T28761] RIP: 0033:0x7f1e6df9e159 [ 744.788127][T28761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.788145][T28761] RSP: 002b:00007f1e6ede0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.788168][T28761] RAX: ffffffffffffffda RBX: 00007f1e6e226090 RCX: 00007f1e6df9e159 [ 744.788195][T28761] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 744.788208][T28761] RBP: 00007f1e6ede0090 R08: 0000000000000000 R09: 0000000000000000 [ 744.788220][T28761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.788232][T28761] R13: 00007f1e6e226128 R14: 00007f1e6e226090 R15: 00007fffa9147cc8 [ 744.788263][T28761] [ 745.390548][T28769] syzkaller0: entered promiscuous mode [ 745.390589][T28769] syzkaller0: entered allmulticast mode [ 745.405657][T28775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5593'. [ 745.444545][T28781] sctp: [Deprecated]: syz.4.5596 (pid 28781) Use of int in maxseg socket option. [ 745.444545][T28781] Use struct sctp_assoc_value instead [ 745.645908][T28791] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5600'. [ 745.727205][T28793] x_tables: unsorted entry at hook 2 [ 745.911816][T28806] FAULT_INJECTION: forcing a failure. [ 745.911816][T28806] name failslab, interval 1, probability 0, space 0, times 0 [ 745.911872][T28806] CPU: 0 UID: 0 PID: 28806 Comm: syz.3.5605 Not tainted syzkaller #0 PREEMPT(full) [ 745.911900][T28806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 745.911982][T28806] Call Trace: [ 745.911995][T28806] [ 745.912022][T28806] dump_stack_lvl+0xe8/0x150 [ 745.912113][T28806] should_fail_ex+0x410/0x560 [ 745.912203][T28806] ? __alloc_skb+0x1db/0x7a0 [ 745.912267][T28806] should_failslab+0xa8/0x100 [ 745.912322][T28806] ? __alloc_skb+0x1db/0x7a0 [ 745.912385][T28806] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 745.912480][T28806] ? __alloc_skb+0x18d/0x7a0 [ 745.912543][T28806] ? __alloc_skb+0x1db/0x7a0 [ 745.912638][T28806] __alloc_skb+0x1db/0x7a0 [ 745.912736][T28806] netlink_ack+0x136/0xb30 [ 745.912794][T28806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 745.912872][T28806] ? ref_tracker_free+0x689/0x830 [ 745.912955][T28806] ? __pfx_ref_tracker_free+0x10/0x10 [ 745.913062][T28806] netlink_rcv_skb+0x2a4/0x4a0 [ 745.913141][T28806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 745.913223][T28806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 745.913314][T28806] ? netlink_deliver_tap+0x2e/0x1b0 [ 745.913371][T28806] ? netlink_deliver_tap+0x2e/0x1b0 [ 745.913468][T28806] netlink_unicast+0x7bd/0x940 [ 745.913552][T28806] netlink_sendmsg+0x813/0xb40 [ 745.913629][T28806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.913710][T28806] ? apparmor_socket_sendmsg+0x98/0x360 [ 745.913786][T28806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.913851][T28806] sock_sendmsg_nosec+0x13a/0x180 [ 745.913919][T28806] ____sys_sendmsg+0x54e/0x850 [ 745.913984][T28806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.914047][T28806] ? import_iovec+0x73/0xa0 [ 745.914132][T28806] ___sys_sendmsg+0x2a5/0x360 [ 745.914176][T28806] ? __lock_acquire+0x6df/0x2e50 [ 745.914229][T28806] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.914368][T28806] ? __fget_files+0x2a/0x420 [ 745.914430][T28806] ? __fget_files+0x3a2/0x420 [ 745.914527][T28806] __x64_sys_sendmsg+0x1b1/0x290 [ 745.914581][T28806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 745.914671][T28806] do_syscall_64+0x166/0x520 [ 745.914732][T28806] ? trace_irq_disable+0x3b/0x140 [ 745.914779][T28806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.914842][T28806] ? clear_bhb_loop+0x70/0xc0 [ 745.914907][T28806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.914954][T28806] RIP: 0033:0x7ff2ccf9e159 [ 745.914998][T28806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.915041][T28806] RSP: 002b:00007ff2cdef2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.915111][T28806] RAX: ffffffffffffffda RBX: 00007ff2cd226090 RCX: 00007ff2ccf9e159 [ 745.915149][T28806] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 745.915186][T28806] RBP: 00007ff2cdef2090 R08: 0000000000000000 R09: 0000000000000000 [ 745.915216][T28806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.915244][T28806] R13: 00007ff2cd226128 R14: 00007ff2cd226090 R15: 00007ffc6989a328 [ 745.915362][T28806] [ 746.391524][T28805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5602'. [ 746.622695][T28819] syzkaller1: entered promiscuous mode [ 746.628526][T28819] syzkaller1: entered allmulticast mode [ 746.770481][T28828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5611'. [ 746.784102][T28828] netlink: 'syz.3.5611': attribute type 3 has an invalid length. [ 746.834277][T28831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5613'. [ 746.834332][T28831] netlink: 'syz.2.5613': attribute type 1 has an invalid length. [ 746.867135][T28831] geneve1: entered promiscuous mode [ 746.908538][T28838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5616'. [ 746.917811][T28838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.934882][T28838] ip6gre2: entered promiscuous mode [ 746.940359][T28838] ip6gre2: entered allmulticast mode [ 746.947686][T28838] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 746.949160][T11460] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 746.949688][T11460] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 746.974318][ T5758] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 746.974419][T28838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5616'. [ 746.974464][T28838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.021301][T28841] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 747.034209][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 52 seconds [ 747.034259][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 52 seconds [ 747.034300][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 52 seconds [ 747.034362][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 52 seconds [ 747.117237][ C0] ip6_tunnel: »»»»»»ªªªªªª xmit: Local address not yet configured! [ 747.126125][ T5758] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 747.421613][T28854] x_tables: unsorted entry at hook 2 [ 747.585475][T28870] netlink: 'syz.0.5626': attribute type 1 has an invalid length. [ 747.695770][T28870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5626'. [ 747.717639][T28877] bond11: (slave geneve4): making interface the new active one [ 747.730112][T28877] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 747.764242][T28870] 8021q: adding VLAN 0 to HW filter on device bond11 [ 747.834491][ T8327] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 748.054507][T13360] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 748.057188][T13360] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 748.057264][T13360] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 748.057352][T13360] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 748.154401][ T5758] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 748.309792][T28891] netlink: 'syz.2.5631': attribute type 1 has an invalid length. [ 748.309831][T28891] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5631'. [ 748.626320][T28904] Bluetooth: hci0: unsupported parameter 5135 [ 748.635082][T28904] Bluetooth: hci0: unsupported parameter 8192 [ 748.635128][T28904] Bluetooth: hci0: unsupported parameter 5135 [ 748.635146][T28904] Bluetooth: hci0: unsupported parameter 8192 [ 748.679883][T28910] xt_hashlimit: max too large, truncated to 1048576 [ 748.680765][T28910] xt_hashlimit: overflow, try lower: 137438953472/8 [ 749.021343][T28916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5637'. [ 749.032478][T28916] tipc: Enabling of bearer rejected, failed to enable media [ 749.057844][T28917] netlink: 'syz.3.5636': attribute type 10 has an invalid length. [ 749.057881][T28917] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5636'. [ 749.279603][T28927] tunl0: Caught tx_queue_len zero misconfig [ 749.449399][T28935] 8021q: adding VLAN 0 to HW filter on device bond15 [ 749.608881][T28943] ip_tunnel_core: Dead loop on virtual device ipip0 (net 1305), fix it urgently! [ 749.620273][T28943] ip_tunnel_core: Dead loop on virtual device ipip0 (net 1305), fix it urgently! [ 749.627995][T28943] ip_tunnel_core: Dead loop on virtual device ipip0 (net 1305), fix it urgently! [ 749.637024][T28943] ip_tunnel_core: Dead loop on virtual device ipip0 (net 1305), fix it urgently! [ 749.640353][T28943] ip_tunnel_core: Dead loop on virtual device ipip0 (net 1305), fix it urgently! [ 749.647503][T28943] ip_tunnel_core: Dead loop on virtual device ipip0 (net 1305), fix it urgently! [ 749.653859][T28943] ip_tunnel_core: Dead loop on virtual device ipip0 (net 1305), fix it urgently! [ 749.972004][T28956] tipc: Enabled bearer , priority 0 [ 750.023686][T28956] syzkaller0: entered promiscuous mode [ 750.029331][T28956] syzkaller0: entered allmulticast mode [ 750.036894][T28956] tipc: Resetting bearer [ 750.071158][T28956] tipc: Resetting bearer [ 750.394585][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 54 seconds [ 750.394641][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 54 seconds [ 750.394683][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 54 seconds [ 750.394714][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 54 seconds [ 750.876016][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 752.412099][T28956] tipc: Disabling bearer [ 752.427860][T28958] syzkaller1: entered promiscuous mode [ 752.427905][T28958] syzkaller1: entered allmulticast mode [ 752.709347][T28986] ip6t_srh: unknown srh match flags 4000 [ 752.787072][T28986] netlink: 'syz.0.5654': attribute type 1 has an invalid length. [ 752.811205][T28991] __nla_validate_parse: 3 callbacks suppressed [ 752.811251][T28991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5655'. [ 752.903952][T28999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5655'. [ 753.012515][T28990] gretap3: entered allmulticast mode [ 753.084475][ T59] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.084527][ T59] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.084570][ T59] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 753.084638][ T59] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.084668][ T59] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.084698][ T59] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 753.084734][ T59] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.084764][ T59] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.084793][ T59] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 753.084837][ T59] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.084867][ T59] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.084895][ T59] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 753.393006][T29022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.595396][T29031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5667'. [ 753.754525][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 56 seconds [ 753.754584][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 56 seconds [ 753.754628][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 56 seconds [ 753.754663][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 56 seconds [ 753.862746][T29035] syzkaller0 speed is unknown, defaulting to 1000 [ 754.297659][T29060] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 754.507831][T29064] netlink: 'syz.0.5676': attribute type 5 has an invalid length. [ 754.788559][T29073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5679'. [ 755.147702][T29084] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5682'. [ 755.193275][T29075] ovs-s!: entered promiscuous mode [ 755.715767][T29100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5688'. [ 755.805042][T29102] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5686'. [ 755.814906][T29102] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5686'. [ 755.825210][T29102] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5686'. [ 755.990740][T29111] nbd: must specify a device to reconfigure [ 756.159913][T29118] sctp: [Deprecated]: syz.1.5693 (pid 29118) Use of int in maxseg socket option. [ 756.159913][T29118] Use struct sctp_assoc_value instead [ 756.292567][T29124] x_tables: unsorted entry at hook 2 [ 756.737946][T29144] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 756.775286][T29146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5700'. [ 756.787509][T29146] batman_adv: batadv0: Adding interface: veth0 [ 756.794712][T29146] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.817415][T29146] batman_adv: batadv0: Interface activated: veth0 [ 756.864159][T29146] batman_adv: batadv0: Interface deactivated: veth0 [ 756.870911][T29146] batman_adv: batadv0: Removing interface: veth0 [ 757.050117][T29153] ip_tables: iptables: counters copy to user failed while replacing table [ 757.062207][T29153] netlink: 'syz.4.5702': attribute type 12 has an invalid length. [ 757.103486][T29154] netlink: 'syz.3.5701': attribute type 10 has an invalid length. [ 757.120674][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 58 seconds [ 757.120781][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 58 seconds [ 757.120840][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 58 seconds [ 757.120936][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 58 seconds [ 757.194561][T29154] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 757.194646][T29154] bridge0: entered promiscuous mode [ 757.547668][T29166] netlink: 'syz.4.5707': attribute type 4 has an invalid length. [ 758.022111][T29193] __nla_validate_parse: 3 callbacks suppressed [ 758.022782][T29193] netlink: 47 bytes leftover after parsing attributes in process `syz.2.5714'. [ 758.236096][T29208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5721'. [ 758.302285][T29212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5721'. [ 758.365764][T29214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5722'. [ 758.365824][T29214] openvswitch: netlink: Flow key attr not present in new flow. [ 759.236617][T29219] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5723'. [ 759.273779][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 759.446067][T29224] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 759.447934][T29225] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 760.474268][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 60 seconds [ 760.474320][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 60 seconds [ 760.474363][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 60 seconds [ 760.474393][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 60 seconds [ 761.013656][ T4991] udevd[4991]: worker [25632] /devices/virtual/block/nbd0 is taking a long time [ 763.833923][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 62 seconds [ 763.833977][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 62 seconds [ 763.834018][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 62 seconds [ 763.834047][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 62 seconds [ 767.193823][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 64 seconds [ 767.193888][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 64 seconds [ 767.193930][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 64 seconds [ 767.193985][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 64 seconds [ 770.554201][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 66 seconds [ 770.554265][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 66 seconds [ 770.554294][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 66 seconds [ 770.554394][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 66 seconds [ 772.769318][T29231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 772.786367][T29235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 772.803934][T29231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 772.804559][T29235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 772.819619][T29231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 772.820904][T29231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 772.835593][T29231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 772.843273][T29235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 772.851032][T29235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 772.861239][T29235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 772.887526][ T4941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 772.898640][ T4941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 772.905627][T17113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 772.909054][T17113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 772.913024][T17113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 772.916175][T17113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 772.921596][ T4941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 772.922013][T17113] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 772.932320][T17113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 772.936380][T17113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 773.405598][T29232] syzkaller0 speed is unknown, defaulting to 1000 [ 773.468024][T29230] syzkaller0 speed is unknown, defaulting to 1000 [ 773.906012][ T4941] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 773.916562][ T4941] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 773.916982][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 68 seconds [ 773.917025][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 68 seconds [ 773.926653][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 68 seconds [ 773.926795][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 68 seconds [ 773.969132][ T4941] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 773.977788][ T4941] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 773.981707][ T4941] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 774.017468][T29232] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.024811][T29232] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.024960][T29232] bridge_slave_0: entered allmulticast mode [ 774.040036][T29232] bridge_slave_0: entered promiscuous mode [ 774.061582][T29232] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.070466][T29232] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.078327][T29232] bridge_slave_1: entered allmulticast mode [ 774.086853][T29232] bridge_slave_1: entered promiscuous mode [ 774.116393][ T4941] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 774.127266][ T4941] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 774.138902][ T4941] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 774.148284][ T4941] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 774.156599][ T4941] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 774.237311][T29232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.250931][T29232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.257932][T29230] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.258190][T29230] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.258557][T29230] bridge_slave_0: entered allmulticast mode [ 774.273054][T29230] bridge_slave_0: entered promiscuous mode [ 774.320582][T29230] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.320778][T29230] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.321138][T29230] bridge_slave_1: entered allmulticast mode [ 774.346744][T29230] bridge_slave_1: entered promiscuous mode [ 774.423984][T29230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.435741][T29232] team0: Port device team_slave_0 added [ 774.446366][T29230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.458083][T29232] team0: Port device team_slave_1 added [ 774.521926][T29230] team0: Port device team_slave_0 added [ 774.528274][T29232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.536271][T29232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.563199][T29232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.577463][T29230] team0: Port device team_slave_1 added [ 774.592408][T29232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.599773][T29232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.599839][T29232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.637681][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 774.702234][T29230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.702294][T29230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.702324][T29230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.809872][T29230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.809911][T29230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.809939][T29230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.887284][T29232] hsr_slave_0: entered promiscuous mode [ 774.894123][T29232] hsr_slave_1: entered promiscuous mode [ 774.954139][ T4941] Bluetooth: hci4: command tx timeout [ 775.043665][ T4941] Bluetooth: hci6: command tx timeout [ 775.067228][T17113] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 775.087802][T29230] hsr_slave_0: entered promiscuous mode [ 775.087869][T17113] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 775.090937][T29230] hsr_slave_1: entered promiscuous mode [ 775.107081][T17113] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 775.110921][T29230] debugfs: 'hsr0' already exists in 'hsr' [ 775.110975][T29230] Cannot create hsr debugfs directory [ 775.131620][T29270] syzkaller0 speed is unknown, defaulting to 1000 [ 775.143047][T17113] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 775.151849][T17113] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 775.381750][T29274] syzkaller0 speed is unknown, defaulting to 1000 [ 775.667098][T29294] syzkaller0 speed is unknown, defaulting to 1000 [ 776.026592][T29270] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.028138][T29270] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.029062][T29270] bridge_slave_0: entered allmulticast mode [ 776.035703][T29270] bridge_slave_0: entered promiscuous mode [ 776.075670][T17113] Bluetooth: hci7: command tx timeout [ 776.081983][T29270] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.082352][T29270] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.083425][T29270] bridge_slave_1: entered allmulticast mode [ 776.089612][T29270] bridge_slave_1: entered promiscuous mode [ 776.193175][T29270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.202567][T29274] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.208876][T29274] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.209211][T29274] bridge_slave_0: entered allmulticast mode [ 776.218849][T29274] bridge_slave_0: entered promiscuous mode [ 776.234002][T17113] Bluetooth: hci8: command tx timeout [ 776.235337][T29270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.275335][T29274] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.276459][T29274] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.276790][T29274] bridge_slave_1: entered allmulticast mode [ 776.281354][T29274] bridge_slave_1: entered promiscuous mode [ 776.292747][T29270] team0: Port device team_slave_0 added [ 776.338313][T29270] team0: Port device team_slave_1 added [ 776.379747][T29274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.399907][T29270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.400030][T29270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.400118][T29270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.409486][T29274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.462892][T29270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.463001][T29270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.463095][T29270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.527644][T29274] team0: Port device team_slave_0 added [ 776.542280][T29274] team0: Port device team_slave_1 added [ 776.609796][T29294] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.610142][T29294] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.611291][T29294] bridge_slave_0: entered allmulticast mode [ 776.617091][T29294] bridge_slave_0: entered promiscuous mode [ 776.639071][T29270] hsr_slave_0: entered promiscuous mode [ 776.640856][T29270] hsr_slave_1: entered promiscuous mode [ 776.642697][T29270] debugfs: 'hsr0' already exists in 'hsr' [ 776.642747][T29270] Cannot create hsr debugfs directory [ 776.674180][T29274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.681387][T29274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.681456][T29274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.682106][T29294] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.682543][T29294] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.682892][T29294] bridge_slave_1: entered allmulticast mode [ 776.689572][T29294] bridge_slave_1: entered promiscuous mode [ 776.758689][T29274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.758725][T29274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.758762][T29274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.831885][T29294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.857833][T29294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.906767][T29274] hsr_slave_0: entered promiscuous mode [ 776.913246][T29274] hsr_slave_1: entered promiscuous mode [ 776.914182][T29274] debugfs: 'hsr0' already exists in 'hsr' [ 776.914206][T29274] Cannot create hsr debugfs directory [ 776.934477][T29294] team0: Port device team_slave_0 added [ 776.940087][T29294] team0: Port device team_slave_1 added [ 777.006869][T29294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.013838][T29294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.013888][T29294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.035218][T17113] Bluetooth: hci4: command tx timeout [ 777.069731][T29294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.069764][T29294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.069792][T29294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.116515][T17113] Bluetooth: hci6: command tx timeout [ 777.184564][T29294] hsr_slave_0: entered promiscuous mode [ 777.187015][T29294] hsr_slave_1: entered promiscuous mode [ 777.188508][T29294] debugfs: 'hsr0' already exists in 'hsr' [ 777.188552][T29294] Cannot create hsr debugfs directory [ 777.196284][T17113] Bluetooth: hci9: command tx timeout [ 777.294880][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 70 seconds [ 777.294936][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 70 seconds [ 777.294979][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 70 seconds [ 777.295022][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 70 seconds [ 778.153895][T17113] Bluetooth: hci7: command tx timeout [ 778.313819][T17113] Bluetooth: hci8: command tx timeout [ 779.114390][T17113] Bluetooth: hci4: command tx timeout [ 779.194423][T17113] Bluetooth: hci6: command tx timeout [ 779.273845][T17113] Bluetooth: hci9: command tx timeout [ 780.233768][T17113] Bluetooth: hci7: command tx timeout [ 780.394104][T17113] Bluetooth: hci8: command tx timeout [ 780.634604][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 72 seconds [ 780.634670][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 72 seconds [ 780.634717][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 72 seconds [ 780.634749][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 72 seconds [ 781.193801][T17113] Bluetooth: hci4: command tx timeout [ 781.274241][T17113] Bluetooth: hci6: command tx timeout [ 781.355344][T17113] Bluetooth: hci9: command tx timeout [ 782.314213][T17113] Bluetooth: hci7: command tx timeout [ 782.474163][T17113] Bluetooth: hci8: command tx timeout [ 783.433788][T17113] Bluetooth: hci9: command tx timeout [ 783.998107][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 74 seconds [ 783.998176][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 74 seconds [ 783.998208][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 74 seconds [ 783.998311][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 74 seconds [ 787.355532][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 76 seconds [ 787.355599][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 76 seconds [ 787.355627][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 76 seconds [ 787.355735][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 76 seconds [ 788.073839][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 790.714223][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 78 seconds [ 790.714279][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 78 seconds [ 790.714320][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 78 seconds [ 790.714354][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 78 seconds [ 794.074609][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 80 seconds [ 794.074669][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 80 seconds [ 794.074716][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 80 seconds [ 794.074746][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 80 seconds [ 797.434769][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 82 seconds [ 797.434822][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 82 seconds [ 797.434872][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 82 seconds [ 797.434901][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 82 seconds [ 800.795570][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 84 seconds [ 800.795638][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 84 seconds [ 800.795667][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 84 seconds [ 800.795746][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 84 seconds [ 804.154707][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 86 seconds [ 804.154762][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 86 seconds [ 804.154803][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 86 seconds [ 804.154831][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 86 seconds [ 805.993739][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 807.513952][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 88 seconds [ 807.514039][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 88 seconds [ 807.514108][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 88 seconds [ 807.514225][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 88 seconds [ 810.873885][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 90 seconds [ 810.873942][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 90 seconds [ 810.873985][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 90 seconds [ 810.874016][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 90 seconds [ 814.234714][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 92 seconds [ 814.234784][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 92 seconds [ 814.234813][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 92 seconds [ 814.234919][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 92 seconds [ 817.595275][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 94 seconds [ 817.595350][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 94 seconds [ 817.595434][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 94 seconds [ 817.595509][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 94 seconds [ 820.954858][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 96 seconds [ 820.954928][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 96 seconds [ 820.954954][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 96 seconds [ 820.955065][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 96 seconds [ 824.313877][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 98 seconds [ 824.313952][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 98 seconds [ 824.314003][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 98 seconds [ 824.314099][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 98 seconds [ 827.677454][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 100 seconds [ 827.677520][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 100 seconds [ 827.677546][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 100 seconds [ 827.677641][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 100 seconds [ 831.035792][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 102 seconds [ 831.035862][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 102 seconds [ 831.035891][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 102 seconds [ 831.036006][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 102 seconds [ 833.300988][ T4941] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 833.313352][ T4941] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 833.323288][ T4941] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 833.332626][ T4941] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 833.336043][ T4941] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 833.391696][T29231] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 833.416059][T29231] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 833.425186][T29231] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 833.435738][T29231] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 833.444208][T29231] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 833.805893][T29334] syzkaller0 speed is unknown, defaulting to 1000 [ 833.832970][T29336] syzkaller0 speed is unknown, defaulting to 1000 [ 834.152365][T29334] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.152737][T29334] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.153115][T29334] bridge_slave_0: entered allmulticast mode [ 834.159071][T29334] bridge_slave_0: entered promiscuous mode [ 834.198018][T29334] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.198236][T29334] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.198618][T29334] bridge_slave_1: entered allmulticast mode [ 834.205765][T29334] bridge_slave_1: entered promiscuous mode [ 834.379591][T29334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.392976][T29235] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 834.403402][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 104 seconds [ 834.403454][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 104 seconds [ 834.403634][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 104 seconds [ 834.403671][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 104 seconds [ 834.450072][T29235] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 834.459813][T29235] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 834.478953][T29235] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 834.480486][T29235] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 834.550045][T29334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.584728][T29235] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 834.597227][T29235] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 834.608406][T29235] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 834.616783][T29235] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 834.626793][T29235] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 834.729220][T29334] team0: Port device team_slave_0 added [ 834.738300][T29336] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.738491][T29336] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.738647][T29336] bridge_slave_0: entered allmulticast mode [ 834.766865][T29336] bridge_slave_0: entered promiscuous mode [ 834.780821][T29334] team0: Port device team_slave_1 added [ 834.807746][T29336] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.807905][T29336] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.808061][T29336] bridge_slave_1: entered allmulticast mode [ 834.831927][T29336] bridge_slave_1: entered promiscuous mode [ 834.871105][T29334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.878675][T29334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.905834][T29334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.946110][T29334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.946152][T29334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.946179][T29334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.982588][T29336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.031223][T29336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.107524][T29336] team0: Port device team_slave_0 added [ 835.120725][T29334] hsr_slave_0: entered promiscuous mode [ 835.128128][T29334] hsr_slave_1: entered promiscuous mode [ 835.134893][T29334] debugfs: 'hsr0' already exists in 'hsr' [ 835.134932][T29334] Cannot create hsr debugfs directory [ 835.153360][T29336] team0: Port device team_slave_1 added [ 835.313936][T29336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.321013][T29336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.347675][T29336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.350152][T29336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.350167][T29336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.350198][T29336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.434195][T29231] Bluetooth: hci10: command tx timeout [ 835.515856][T29231] Bluetooth: hci11: command tx timeout [ 835.553449][T29336] hsr_slave_0: entered promiscuous mode [ 835.561258][T29336] hsr_slave_1: entered promiscuous mode [ 835.568165][T29336] debugfs: 'hsr0' already exists in 'hsr' [ 835.574890][T29336] Cannot create hsr debugfs directory [ 835.605698][T29370] syzkaller0 speed is unknown, defaulting to 1000 [ 835.678873][T29372] syzkaller0 speed is unknown, defaulting to 1000 [ 835.688546][T29235] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 835.705503][T29235] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 835.713471][T29235] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 835.722060][T29235] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 835.731091][T29235] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 836.260506][T29391] syzkaller0 speed is unknown, defaulting to 1000 [ 836.566734][T29235] Bluetooth: hci12: command tx timeout [ 836.590632][T29370] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.590787][T29370] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.590915][T29370] bridge_slave_0: entered allmulticast mode [ 836.595109][T29370] bridge_slave_0: entered promiscuous mode [ 836.600132][T29372] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.600375][T29372] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.601279][T29372] bridge_slave_0: entered allmulticast mode [ 836.609022][T29372] bridge_slave_0: entered promiscuous mode [ 836.619525][T29372] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.619611][T29372] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.619722][T29372] bridge_slave_1: entered allmulticast mode [ 836.621625][T29372] bridge_slave_1: entered promiscuous mode [ 836.685144][T29370] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.685498][T29370] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.685868][T29370] bridge_slave_1: entered allmulticast mode [ 836.690110][T29370] bridge_slave_1: entered promiscuous mode [ 836.713936][T29235] Bluetooth: hci13: command tx timeout [ 836.800461][T29372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.815063][T29370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.825531][T29372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.863056][T29370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.919678][T29372] team0: Port device team_slave_0 added [ 836.932184][T29370] team0: Port device team_slave_0 added [ 836.947438][T29372] team0: Port device team_slave_1 added [ 836.955845][T29370] team0: Port device team_slave_1 added [ 837.029052][T29370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.029094][T29370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.029123][T29370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.048100][T29372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.048151][T29372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.048226][T29372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.058907][T29372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.058956][T29372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.059028][T29372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.173477][T29370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.173648][T29370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.173680][T29370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.347072][T29370] hsr_slave_0: entered promiscuous mode [ 837.349595][T29370] hsr_slave_1: entered promiscuous mode [ 837.351360][T29370] debugfs: 'hsr0' already exists in 'hsr' [ 837.351408][T29370] Cannot create hsr debugfs directory [ 837.437494][T29372] hsr_slave_0: entered promiscuous mode [ 837.440056][T29372] hsr_slave_1: entered promiscuous mode [ 837.441803][T29372] debugfs: 'hsr0' already exists in 'hsr' [ 837.441850][T29372] Cannot create hsr debugfs directory [ 837.442622][T29391] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.445899][T29391] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.447656][T29391] bridge_slave_0: entered allmulticast mode [ 837.451780][T29391] bridge_slave_0: entered promiscuous mode [ 837.459349][T29391] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.459601][T29391] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.459954][T29391] bridge_slave_1: entered allmulticast mode [ 837.467483][T29391] bridge_slave_1: entered promiscuous mode [ 837.517302][T29235] Bluetooth: hci10: command tx timeout [ 837.580556][T29391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.594277][T29235] Bluetooth: hci11: command tx timeout [ 837.624611][T29391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.707527][T29391] team0: Port device team_slave_0 added [ 837.734880][T29391] team0: Port device team_slave_1 added [ 837.754042][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 106 seconds [ 837.754099][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 106 seconds [ 837.754157][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 106 seconds [ 837.754187][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 106 seconds [ 837.829306][T29391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.836730][T29391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.836773][T29391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.841540][T29235] Bluetooth: hci14: command tx timeout [ 837.887335][T29391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.894490][T29391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.923449][T29391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.037476][T29391] hsr_slave_0: entered promiscuous mode [ 838.044343][T29391] hsr_slave_1: entered promiscuous mode [ 838.050722][T29391] debugfs: 'hsr0' already exists in 'hsr' [ 838.057078][T29391] Cannot create hsr debugfs directory [ 838.635001][T29235] Bluetooth: hci12: command tx timeout [ 838.793927][T29235] Bluetooth: hci13: command tx timeout [ 839.593980][T29235] Bluetooth: hci10: command tx timeout [ 839.674032][T29235] Bluetooth: hci11: command tx timeout [ 839.913743][T29235] Bluetooth: hci14: command tx timeout [ 840.713898][T29235] Bluetooth: hci12: command tx timeout [ 840.873679][T29235] Bluetooth: hci13: command tx timeout [ 841.114805][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 108 seconds [ 841.114863][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 108 seconds [ 841.114908][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 108 seconds [ 841.114995][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 108 seconds [ 841.673923][T29235] Bluetooth: hci10: command tx timeout [ 841.754066][T29235] Bluetooth: hci11: command tx timeout [ 841.805237][ T4991] udevd[4991]: worker [25632] /devices/virtual/block/nbd0 timeout; kill it [ 841.805473][ T4991] udevd[4991]: seq 32358 '/devices/virtual/block/nbd0' killed [ 841.993745][T29235] Bluetooth: hci14: command tx timeout [ 842.793867][T29235] Bluetooth: hci12: command tx timeout [ 842.954592][T29235] Bluetooth: hci13: command tx timeout [ 844.073665][T29235] Bluetooth: hci14: command tx timeout [ 844.474007][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 110 seconds [ 844.474061][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 110 seconds [ 844.474104][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 110 seconds [ 844.474132][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 110 seconds [ 847.834304][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 112 seconds [ 847.834365][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 112 seconds [ 847.834394][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 112 seconds [ 847.834515][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 112 seconds [ 851.193944][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 114 seconds [ 851.193999][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 114 seconds [ 851.194045][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 114 seconds [ 851.194073][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 114 seconds [ 854.555221][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 116 seconds [ 854.555293][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 116 seconds [ 854.555322][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 116 seconds [ 854.555447][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 116 seconds [ 857.915509][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 118 seconds [ 857.915592][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 118 seconds [ 857.924538][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 118 seconds [ 857.924624][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 118 seconds [ 861.273998][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 120 seconds [ 861.274061][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 120 seconds [ 861.274127][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 120 seconds [ 861.274217][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 120 seconds [ 864.635935][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 122 seconds [ 864.636004][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 122 seconds [ 864.636063][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 122 seconds [ 864.636149][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 122 seconds [ 867.993924][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 124 seconds [ 867.993996][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 124 seconds [ 867.994045][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 124 seconds [ 867.994079][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 124 seconds [ 869.995243][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 869.996801][ C0] ip6_tunnel: »»»»»»ªªªªªª xmit: Local address not yet configured! [ 871.358079][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 126 seconds [ 871.358176][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 126 seconds [ 871.358205][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 126 seconds [ 871.358309][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 126 seconds [ 874.714627][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 128 seconds [ 874.714698][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 128 seconds [ 874.714769][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 128 seconds [ 874.714862][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 128 seconds [ 878.075417][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 130 seconds [ 878.075489][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 130 seconds [ 878.075556][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 130 seconds [ 878.075662][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 130 seconds [ 881.433905][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 132 seconds [ 881.433985][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 132 seconds [ 881.434031][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 132 seconds [ 881.434062][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 132 seconds [ 884.794553][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 134 seconds [ 884.794622][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 134 seconds [ 884.794667][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 134 seconds [ 884.794695][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 134 seconds [ 888.154312][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 136 seconds [ 888.154384][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 136 seconds [ 888.154464][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 136 seconds [ 888.154556][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 136 seconds [ 891.514214][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 138 seconds [ 891.514271][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 138 seconds [ 891.514767][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 138 seconds [ 891.514865][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 138 seconds [ 893.446141][T29231] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 893.460026][T29231] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 893.474989][T29231] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 893.483955][T17113] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 893.499643][T17113] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 893.513023][ T4941] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 893.527748][T29235] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 893.529377][T29235] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 893.541978][T29235] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 893.554141][T29235] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 893.949820][T29431] syzkaller0 speed is unknown, defaulting to 1000 [ 894.014808][T29433] syzkaller0 speed is unknown, defaulting to 1000 [ 894.354426][T29431] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.354794][T29431] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.355155][T29431] bridge_slave_0: entered allmulticast mode [ 894.359661][T29431] bridge_slave_0: entered promiscuous mode [ 894.370195][T29431] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.370584][T29431] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.370908][T29431] bridge_slave_1: entered allmulticast mode [ 894.375198][T29431] bridge_slave_1: entered promiscuous mode [ 894.444074][T29431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.451326][T29433] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.451546][T29433] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.451870][T29433] bridge_slave_0: entered allmulticast mode [ 894.459163][T29433] bridge_slave_0: entered promiscuous mode [ 894.480623][T29431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.497662][T29433] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.498010][T29433] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.498319][T29433] bridge_slave_1: entered allmulticast mode [ 894.502378][T29433] bridge_slave_1: entered promiscuous mode [ 894.541517][T29431] team0: Port device team_slave_0 added [ 894.560635][T29431] team0: Port device team_slave_1 added [ 894.578262][T29433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.599175][T29433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.601509][T29431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.601538][T29431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.601609][T29431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.643305][T29431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.643323][T29431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.643369][T29431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.707136][T29433] team0: Port device team_slave_0 added [ 894.715834][T29433] team0: Port device team_slave_1 added [ 894.761950][T29433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.762002][T29433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.762028][T29433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.817355][T29433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.817391][T29433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.817420][T29433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.829958][T29431] hsr_slave_0: entered promiscuous mode [ 894.836180][T29431] hsr_slave_1: entered promiscuous mode [ 894.841179][T29431] debugfs: 'hsr0' already exists in 'hsr' [ 894.841236][T29431] Cannot create hsr debugfs directory [ 894.880870][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 140 seconds [ 894.880970][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 140 seconds [ 894.881037][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 140 seconds [ 894.881104][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 140 seconds [ 895.123392][T29433] hsr_slave_0: entered promiscuous mode [ 895.136934][T29235] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 895.152280][T29433] hsr_slave_1: entered promiscuous mode [ 895.153135][T29433] debugfs: 'hsr0' already exists in 'hsr' [ 895.153154][T29433] Cannot create hsr debugfs directory [ 895.163039][T29235] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 895.192198][T29235] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 895.196481][T17113] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 895.211458][T17113] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 895.221084][T17113] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 895.231131][T17113] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 895.231907][T17113] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 895.240470][T17113] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 895.255069][T17113] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 895.676949][T29481] Bluetooth: hci16: command tx timeout [ 895.677450][T29481] Bluetooth: hci15: command tx timeout [ 895.977485][T29468] syzkaller0 speed is unknown, defaulting to 1000 [ 895.988991][T29467] syzkaller0 speed is unknown, defaulting to 1000 [ 896.061220][T29491] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 896.071362][T29491] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 896.083259][T29491] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 896.095561][T29491] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 896.110116][T29491] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 896.676967][T29490] syzkaller0 speed is unknown, defaulting to 1000 [ 896.794136][T29468] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.802182][T29468] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.809608][T29468] bridge_slave_0: entered allmulticast mode [ 896.812764][T29468] bridge_slave_0: entered promiscuous mode [ 896.838142][T29468] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.838320][T29468] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.838908][T29468] bridge_slave_1: entered allmulticast mode [ 896.845130][T29468] bridge_slave_1: entered promiscuous mode [ 896.905982][T29467] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.906368][T29467] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.906744][T29467] bridge_slave_0: entered allmulticast mode [ 896.911193][T29467] bridge_slave_0: entered promiscuous mode [ 896.942293][T29468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.957164][T29467] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.957277][T29467] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.957421][T29467] bridge_slave_1: entered allmulticast mode [ 896.977832][T29467] bridge_slave_1: entered promiscuous mode [ 896.987377][T29468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.049820][T29468] team0: Port device team_slave_0 added [ 897.061431][T29467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.074475][T29468] team0: Port device team_slave_1 added [ 897.096570][T29467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.161173][T29468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.161216][T29468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.161243][T29468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.169091][T29468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.169132][T29468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.169208][T29468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.274030][T29467] team0: Port device team_slave_0 added [ 897.282023][T29467] team0: Port device team_slave_1 added [ 897.284511][T29491] Bluetooth: hci18: command tx timeout [ 897.353987][T29491] Bluetooth: hci17: command tx timeout [ 897.390463][T29467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.390504][T29467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.391934][T29467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.408668][T29467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.408712][T29467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.408794][T29467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.508706][T29468] hsr_slave_0: entered promiscuous mode [ 897.511442][T29468] hsr_slave_1: entered promiscuous mode [ 897.514692][T29468] debugfs: 'hsr0' already exists in 'hsr' [ 897.514708][T29468] Cannot create hsr debugfs directory [ 897.620421][T29467] hsr_slave_0: entered promiscuous mode [ 897.627744][T29467] hsr_slave_1: entered promiscuous mode [ 897.634862][T29467] debugfs: 'hsr0' already exists in 'hsr' [ 897.640906][T29467] Cannot create hsr debugfs directory [ 897.673708][T29491] Bluetooth: hci7: command 0x0406 tx timeout [ 897.673805][T29491] Bluetooth: hci6: command 0x0406 tx timeout [ 897.673872][T29491] Bluetooth: hci4: command 0x0406 tx timeout [ 897.674108][T29480] Bluetooth: hci9: command 0x0406 tx timeout [ 897.675002][T29491] Bluetooth: hci8: command 0x0406 tx timeout [ 897.764279][T17113] Bluetooth: hci15: command tx timeout [ 897.766798][T29491] Bluetooth: hci16: command tx timeout [ 898.086934][T29490] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.087122][T29490] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.087544][T29490] bridge_slave_0: entered allmulticast mode [ 898.090216][T29490] bridge_slave_0: entered promiscuous mode [ 898.122061][T29490] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.124812][T29490] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.125212][T29490] bridge_slave_1: entered allmulticast mode [ 898.129203][T29490] bridge_slave_1: entered promiscuous mode [ 898.203139][T29490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.229425][T29490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.238965][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 142 seconds [ 898.239007][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 142 seconds [ 898.239038][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 142 seconds [ 898.239067][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 142 seconds [ 898.239141][ T4941] Bluetooth: hci19: command tx timeout [ 898.317518][T29490] team0: Port device team_slave_0 added [ 898.324503][T29490] team0: Port device team_slave_1 added [ 898.354533][T29490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.354566][T29490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.354592][T29490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.360070][T29490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.360108][T29490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.360177][T29490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.472810][T29490] hsr_slave_0: entered promiscuous mode [ 898.477070][T29490] hsr_slave_1: entered promiscuous mode [ 898.478806][T29490] debugfs: 'hsr0' already exists in 'hsr' [ 898.478827][T29490] Cannot create hsr debugfs directory [ 899.354139][ T4941] Bluetooth: hci18: command tx timeout [ 899.435934][ T4941] Bluetooth: hci17: command tx timeout [ 899.834054][ T4941] Bluetooth: hci15: command tx timeout [ 899.834677][T29236] Bluetooth: hci16: command tx timeout [ 900.314017][ T4941] Bluetooth: hci19: command tx timeout [ 901.434140][ T4941] Bluetooth: hci18: command tx timeout [ 901.514099][ T4941] Bluetooth: hci17: command tx timeout [ 901.597563][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 144 seconds [ 901.597633][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 144 seconds [ 901.597664][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 144 seconds [ 901.597774][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 144 seconds [ 901.914416][T29236] Bluetooth: hci16: command tx timeout [ 901.920040][ T4941] Bluetooth: hci15: command tx timeout [ 902.393971][ T4941] Bluetooth: hci19: command tx timeout [ 903.514865][ T4941] Bluetooth: hci18: command tx timeout [ 903.594135][ T4941] Bluetooth: hci17: command tx timeout [ 904.473826][ T4941] Bluetooth: hci19: command tx timeout [ 904.955359][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 146 seconds [ 904.955424][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 146 seconds [ 904.955454][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 146 seconds [ 904.955565][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 146 seconds [ 908.315771][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 148 seconds [ 908.315841][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 148 seconds [ 908.315873][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 148 seconds [ 908.315978][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 148 seconds [ 911.673974][ T11] block nbd0: Possible stuck request ffff88804e287000: control (read@0,1024B). Runtime 150 seconds [ 911.674029][ T11] block nbd0: Possible stuck request ffff88804e2871c0: control (read@1024,1024B). Runtime 150 seconds [ 911.674075][ T11] block nbd0: Possible stuck request ffff88804e287380: control (read@2048,1024B). Runtime 150 seconds [ 911.674132][ T11] block nbd0: Possible stuck request ffff88804e287540: control (read@3072,1024B). Runtime 150 seconds [ 912.235342][ T33] INFO: task syz.0.5703:29157 blocked for more than 143 seconds. [ 912.235390][ T33] Not tainted syzkaller #0 [ 912.235417][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 912.235432][ T33] task:syz.0.5703 state:D stack:26536 pid:29157 tgid:29156 ppid:18170 task_flags:0x480140 flags:0x000 ** replaying previous printk message ** [ 912.235432][ T33] task:syz.0.5703 state:D stack:26536 pid:29157 tgid:29156 ppid:18170 task_flags:0x480140 flags:0x00080002 [ 912.235529][ T33] Call Trace: [ 912.235542][ T33] [ 912.235561][ T33] __schedule+0x17d4/0x5820 [ 912.235610][ T33] ? __lock_acquire+0x6df/0x2e50 [ 912.235667][ T33] ? __pfx___schedule+0x10/0x10 [ 912.235696][ T33] ? lock_acquire+0x115/0x350 [ 912.235734][ T33] ? schedule+0x90/0x2b0 [ 912.235769][ T33] schedule+0x164/0x2b0 [ 912.235838][ T33] blk_mq_freeze_queue_wait+0x101/0x180 [ 912.236021][ T33] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 912.236089][ T33] ? __pfx_autoremove_wake_function+0x10/0x10 [ 912.236211][ T33] queue_limits_commit_update_frozen+0x55/0xd0 [ 912.236343][ T33] nbd_set_size+0x4c5/0x7d0 [ 912.236538][ T33] ? __pfx_nbd_set_size+0x10/0x10 [ 912.236755][ T33] ? nla_memcpy+0x5b/0xc0 [ 912.236846][ T33] nbd_genl_reconfigure+0x7e1/0x1040 [ 912.236964][ T33] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 912.237054][ T33] ? __kmalloc_noprof+0x38c/0x720 [ 912.237159][ T33] ? __nla_parse+0x40/0x60 [ 912.237238][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 912.237373][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 912.237490][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 912.237595][ T33] ? __lock_acquire+0x6df/0x2e50 [ 912.237652][ T33] ? __lock_acquire+0x6df/0x2e50 [ 912.237719][ T33] genl_rcv_msg+0x614/0x7a0 [ 912.237811][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 912.237886][ T33] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 912.238007][ T33] netlink_rcv_skb+0x226/0x4a0 [ 912.238062][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 912.238136][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 912.238242][ T33] ? down_read+0x2be/0x330 [ 912.238326][ T33] genl_rcv+0x28/0x40 [ 912.238396][ T33] netlink_unicast+0x7bd/0x940 [ 912.238471][ T33] netlink_sendmsg+0x813/0xb40 [ 912.238562][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.238657][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 912.238773][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.238841][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 912.238926][ T33] ____sys_sendmsg+0x54e/0x850 [ 912.238998][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 912.239081][ T33] ? import_iovec+0x73/0xa0 [ 912.239174][ T33] ___sys_sendmsg+0x2a5/0x360 [ 912.239227][ T33] ? __lock_acquire+0x6df/0x2e50 [ 912.239299][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 912.239362][ T33] ? futex_wait+0x2a2/0x390 [ 912.239547][ T33] ? __fget_files+0x2a/0x420 [ 912.239618][ T33] ? __fget_files+0x3a2/0x420 [ 912.239732][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 912.239801][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 912.239914][ T33] do_syscall_64+0x166/0x520 [ 912.239995][ T33] ? trace_irq_disable+0x3b/0x140 [ 912.240053][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.240123][ T33] ? clear_bhb_loop+0x70/0xc0 [ 912.240208][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.240269][ T33] RIP: 0033:0x7f3fb5b9e159 [ 912.240320][ T33] RSP: 002b:00007f3fb6a92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.240383][ T33] RAX: ffffffffffffffda RBX: 00007f3fb5e25fa0 RCX: 00007f3fb5b9e159 [ 912.240432][ T33] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 912.240482][ T33] RBP: 00007f3fb5c35024 R08: 0000000000000000 R09: 0000000000000000 [ 912.240520][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.240556][ T33] R13: 00007f3fb5e26038 R14: 00007f3fb5e25fa0 R15: 00007ffde7e37018 [ 912.240642][ T33] [ 912.240670][ T33] INFO: task syz.1.5708:29168 blocked for more than 143 seconds. [ 912.240717][ T33] Not tainted syzkaller #0 [ 912.240745][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 912.240773][ T33] task:syz.1.5708 state:D stack:27872 pid:29168 tgid:29167 ppid:17817 task_flags:0x400040 flags:0x00080002 [ 912.240927][ T33] Call Trace: [ 912.240946][ T33] [ 912.240977][ T33] __schedule+0x17d4/0x5820 [ 912.241117][ T33] ? __pfx___schedule+0x10/0x10 [ 912.241202][ T33] ? schedule+0x90/0x2b0 [ 912.241268][ T33] schedule+0x164/0x2b0 [ 912.241334][ T33] schedule_preempt_disabled+0x13/0x30 [ 912.241399][ T33] __mutex_lock+0x7c1/0x1550 [ 912.241493][ T33] ? __mutex_lock+0x5d4/0x1550 [ 912.241591][ T33] ? genl_rcv_msg+0x10b/0x7a0 [ 912.241663][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 912.241784][ T33] ? __dev_queue_xmit+0x29b/0x3820 [ 912.241866][ T33] ? radix_tree_lookup+0x240/0x290 [ 912.241983][ T33] genl_rcv_msg+0x10b/0x7a0 [ 912.242078][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 912.242173][ T33] ? __pfx_ref_tracker_free+0x10/0x10 [ 912.242291][ T33] netlink_rcv_skb+0x226/0x4a0 [ 912.242355][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 912.242445][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 912.242557][ T33] ? down_read+0x2be/0x330 [ 912.242659][ T33] genl_rcv+0x28/0x40 [ 912.242732][ T33] netlink_unicast+0x7bd/0x940 [ 912.242826][ T33] netlink_sendmsg+0x813/0xb40 [ 912.242944][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.243032][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 912.243107][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.243173][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 912.243251][ T33] __sys_sendto+0x408/0x5a0 [ 912.243368][ T33] ? __pfx___sys_sendto+0x10/0x10 [ 912.243692][ T33] ? do_user_addr_fault+0xc4c/0x1340 [ 912.243739][ T33] __x64_sys_sendto+0xde/0x100 [ 912.243777][ T33] do_syscall_64+0x166/0x520 [ 912.243823][ T33] ? trace_irq_disable+0x3b/0x140 [ 912.243846][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.243883][ T33] ? clear_bhb_loop+0x70/0xc0 [ 912.243911][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.243934][ T33] RIP: 0033:0x7f49b9d5e98e [ 912.243954][ T33] RSP: 002b:00007f49bad20e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 912.243977][ T33] RAX: ffffffffffffffda RBX: 00007f49bad226c0 RCX: 00007f49b9d5e98e [ 912.243994][ T33] RDX: 0000000000000020 RSI: 00007f49bad21000 RDI: 0000000000000004 [ 912.244009][ T33] RBP: 0000000000000000 R08: 00007f49bad20f04 R09: 000000000000000c [ 912.244024][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 912.244038][ T33] R13: 00007f49bad20f58 R14: 00007f49bad21000 R15: 0000000000000000 [ 912.244103][ T33] [ 912.244134][ T33] INFO: task syz.3.5716:29197 blocked for more than 143 seconds. [ 912.244187][ T33] Not tainted syzkaller #0 [ 912.244217][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 912.244245][ T33] task:syz.3.5716 state:D stack:27752 pid:29197 tgid:29196 ppid:18824 task_flags:0x400140 flags:0x00080002 [ 912.244412][ T33] Call Trace: [ 912.244432][ T33] [ 912.244469][ T33] __schedule+0x17d4/0x5820 [ 912.244616][ T33] ? __pfx___schedule+0x10/0x10 [ 912.244706][ T33] ? schedule+0x90/0x2b0 [ 912.244777][ T33] schedule+0x164/0x2b0 [ 912.244855][ T33] schedule_preempt_disabled+0x13/0x30 [ 912.244925][ T33] __mutex_lock+0x7c1/0x1550 [ 912.245007][ T33] ? __mutex_lock+0x5d4/0x1550 [ 912.245154][ T33] ? genl_rcv_msg+0x10b/0x7a0 [ 912.245240][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 912.245337][ T33] ? __dev_queue_xmit+0x29b/0x3820 [ 912.245407][ T33] ? radix_tree_lookup+0x240/0x290 [ 912.245478][ T33] genl_rcv_msg+0x10b/0x7a0 [ 912.245596][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 912.245690][ T33] ? __pfx_ref_tracker_free+0x10/0x10 [ 912.245788][ T33] netlink_rcv_skb+0x226/0x4a0 [ 912.245856][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 912.245935][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 912.246043][ T33] ? down_read+0x2be/0x330 [ 912.246137][ T33] genl_rcv+0x28/0x40 [ 912.246200][ T33] netlink_unicast+0x7bd/0x940 [ 912.246287][ T33] netlink_sendmsg+0x813/0xb40 [ 912.246376][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.246458][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 912.246559][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.246628][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 912.246710][ T33] __sys_sendto+0x408/0x5a0 [ 912.246823][ T33] ? __pfx___sys_sendto+0x10/0x10 [ 912.247009][ T33] ? do_user_addr_fault+0xc4c/0x1340 [ 912.247089][ T33] __x64_sys_sendto+0xde/0x100 [ 912.247179][ T33] do_syscall_64+0x166/0x520 [ 912.247249][ T33] ? trace_irq_disable+0x3b/0x140 [ 912.247307][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.247360][ T33] ? clear_bhb_loop+0x70/0xc0 [ 912.247432][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.247497][ T33] RIP: 0033:0x7ff2ccf5e98e [ 912.247548][ T33] RSP: 002b:00007ff2cdf11e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 912.247618][ T33] RAX: ffffffffffffffda RBX: 00007ff2cdf136c0 RCX: 00007ff2ccf5e98e [ 912.247655][ T33] RDX: 0000000000000024 RSI: 00007ff2cdf12000 RDI: 0000000000000003 [ 912.247692][ T33] RBP: 0000000000000000 R08: 00007ff2cdf11f04 R09: 000000000000000c [ 912.247722][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 912.247757][ T33] R13: 00007ff2cdf11f58 R14: 00007ff2cdf12000 R15: 0000000000000000 [ 912.247834][ T33] [ 912.247854][ T33] INFO: task syz.2.5719:29205 blocked for more than 143 seconds. [ 912.247891][ T33] Not tainted syzkaller #0 [ 912.247918][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 912.247945][ T33] task:syz.2.5719 state:D stack:27976 pid:29205 tgid:29203 ppid:17112 task_flags:0x400140 flags:0x00080002 [ 912.248091][ T33] Call Trace: [ 912.248110][ T33] [ 912.248145][ T33] __schedule+0x17d4/0x5820 [ 912.248248][ T33] ? lock_acquire+0x115/0x350 [ 912.248332][ T33] ? __pfx___schedule+0x10/0x10 [ 912.248417][ T33] ? schedule+0x90/0x2b0 [ 912.248490][ T33] schedule+0x164/0x2b0 [ 912.248575][ T33] schedule_preempt_disabled+0x13/0x30 [ 912.248640][ T33] __mutex_lock+0x7c1/0x1550 [ 912.248729][ T33] ? __mutex_lock+0x5d4/0x1550 [ 912.248817][ T33] ? genl_rcv_msg+0x10b/0x7a0 [ 912.248889][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 912.248961][ T33] ? stack_trace_save+0xa9/0x100 [ 912.249024][ T33] ? __lock_acquire+0x6df/0x2e50 [ 912.249069][ T33] ? __lock_acquire+0x6df/0x2e50 [ 912.249131][ T33] ? radix_tree_lookup+0x240/0x290 [ 912.249226][ T33] genl_rcv_msg+0x10b/0x7a0 [ 912.249305][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 912.249444][ T33] netlink_rcv_skb+0x226/0x4a0 [ 912.249512][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 912.249601][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 912.249709][ T33] ? down_read+0x2be/0x330 [ 912.249803][ T33] genl_rcv+0x28/0x40 [ 912.249867][ T33] netlink_unicast+0x7bd/0x940 [ 912.249957][ T33] netlink_sendmsg+0x813/0xb40 [ 912.250045][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.250161][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 912.250243][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.250305][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 912.250379][ T33] __sys_sendto+0x408/0x5a0 [ 912.250481][ T33] ? __pfx___sys_sendto+0x10/0x10 [ 912.250675][ T33] ? do_user_addr_fault+0xc4c/0x1340 [ 912.250739][ T33] __x64_sys_sendto+0xde/0x100 [ 912.250830][ T33] do_syscall_64+0x166/0x520 [ 912.250903][ T33] ? trace_irq_disable+0x3b/0x140 [ 912.250959][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.251012][ T33] ? clear_bhb_loop+0x70/0xc0 [ 912.251087][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.251151][ T33] RIP: 0033:0x7f1e6df5e98e [ 912.251201][ T33] RSP: 002b:00007f1e6edffe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 912.251252][ T33] RAX: ffffffffffffffda RBX: 00007f1e6ee016c0 RCX: 00007f1e6df5e98e [ 912.251308][ T33] RDX: 000000000000001c RSI: 00007f1e6ee00000 RDI: 0000000000000003 [ 912.251338][ T33] RBP: 0000000000000000 R08: 00007f1e6edfff04 R09: 000000000000000c [ 912.251374][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 912.251409][ T33] R13: 00007f1e6edfff58 R14: 00007f1e6ee00000 R15: 0000000000000000 [ 912.251486][ T33] [ 912.251512][ T33] INFO: task syz.4.5725:29223 blocked for more than 143 seconds. [ 912.251548][ T33] Not tainted syzkaller #0 [ 912.251558][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 912.251584][ T33] task:syz.4.5725 state:D stack:28808 pid:29223 tgid:29222 ppid:18468 task_flags:0x400040 flags:0x00080002 [ 912.251726][ T33] Call Trace: [ 912.251744][ T33] [ 912.251779][ T33] __schedule+0x17d4/0x5820 [ 912.251934][ T33] ? lock_acquire+0x115/0x350 [ 912.252026][ T33] ? __pfx___schedule+0x10/0x10 [ 912.252125][ T33] ? schedule+0x90/0x2b0 [ 912.252196][ T33] schedule+0x164/0x2b0 [ 912.252265][ T33] schedule_preempt_disabled+0x13/0x30 [ 912.252334][ T33] __mutex_lock+0x7c1/0x1550 [ 912.252415][ T33] ? __mutex_lock+0x5d4/0x1550 [ 912.252488][ T33] ? genl_rcv_msg+0x10b/0x7a0 [ 912.252569][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 912.252656][ T33] ? stack_trace_save+0xa9/0x100 [ 912.252760][ T33] ? __lock_acquire+0x6df/0x2e50 [ 912.252821][ T33] ? __lock_acquire+0x6df/0x2e50 [ 912.252881][ T33] ? radix_tree_lookup+0x240/0x290 [ 912.252962][ T33] genl_rcv_msg+0x10b/0x7a0 [ 912.253063][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 912.253199][ T33] netlink_rcv_skb+0x226/0x4a0 [ 912.253266][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 912.253370][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 912.253839][ T33] ? down_read+0x2be/0x330 [ 912.253948][ T33] genl_rcv+0x28/0x40 [ 912.254020][ T33] netlink_unicast+0x7bd/0x940 [ 912.254102][ T33] netlink_sendmsg+0x813/0xb40 [ 912.254179][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.254262][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 912.254337][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.254393][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 912.254467][ T33] __sys_sendto+0x408/0x5a0 [ 912.254558][ T33] ? __pfx___sys_sendto+0x10/0x10 [ 912.254725][ T33] ? do_user_addr_fault+0xc4c/0x1340 [ 912.254795][ T33] __x64_sys_sendto+0xde/0x100 [ 912.254872][ T33] do_syscall_64+0x166/0x520 [ 912.254946][ T33] ? trace_irq_disable+0x3b/0x140 [ 912.254993][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.255074][ T33] ? clear_bhb_loop+0x70/0xc0 [ 912.255142][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.255197][ T33] RIP: 0033:0x7fd0eaf5e98e [ 912.255237][ T33] RSP: 002b:00007fd0ebe05e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 912.255337][ T33] RAX: ffffffffffffffda RBX: 00007fd0ebe076c0 RCX: 00007fd0eaf5e98e [ 912.255375][ T33] RDX: 0000000000000024 RSI: 00007fd0ebe06000 RDI: 0000000000000004 [ 912.255411][ T33] RBP: 0000000000000000 R08: 00007fd0ebe05f04 R09: 000000000000000c [ 912.255442][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 912.255478][ T33] R13: 00007fd0ebe05f58 R14: 00007fd0ebe06000 R15: 0000000000000000 [ 912.255556][ T33] [ 912.255737][ T33] [ 912.255737][ T33] Showing all locks held in the system: [ 912.255811][ T33] locks held by pr/ttyS0/16: 2, last CPU#1: [ 912.255917][ T33] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 912.256098][ T33] #1: ffffffff9ad2aff8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 912.256346][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 912.256384][ T33] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 912.256592][ T33] locks held by getty/5382: 2, on CPU#1: [ 912.256658][ T33] #0: ffff888030d880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 912.256804][ T33] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 912.256984][ T33] locks held by kworker/u8:46/13360: 2, last CPU#1: [ 912.257017][ T33] #0: ffff88803221e940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 912.257196][ T33] #1: ffffc9001c6f7c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 912.257400][ T33] locks held by udevd/25632: 1, on CPU#1: [ 912.257441][ T33] #0: ffff888026e1a350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 912.257693][ T33] locks held by syz.0.5703/29157: 6, on CPU#1: [ 912.257710][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.257770][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.257832][ T33] #2: ffff888026e14a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 912.257896][ T33] #3: ffff888026597658 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 912.257967][ T33] #4: ffff888026597020 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 912.258037][ T33] #5: ffff888026597058 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 912.258718][ T33] locks held by syz.1.5708/29168: 2, on CPU#0: [ 912.258735][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.258795][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.258857][ T33] locks held by syz.3.5716/29197: 2, on CPU#0: [ 912.258874][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.258931][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.258991][ T33] locks held by syz.2.5719/29205: 2, on CPU#0: [ 912.259008][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.259066][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.259127][ T33] locks held by syz.4.5725/29223: 2, on CPU#1: [ 912.259142][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.259202][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.259284][ T33] locks held by syz-executor/29230: 2, on CPU#0: [ 912.259339][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.259533][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.259696][ T33] locks held by syz-executor/29232: 2, on CPU#1: [ 912.259734][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.259884][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.260032][ T33] locks held by syz-executor/29270: 2, on CPU#0: [ 912.260071][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.261409][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.261567][ T33] locks held by syz-executor/29274: 2, on CPU#1: [ 912.261614][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.261757][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.261904][ T33] locks held by syz-executor/29294: 2, on CPU#1: [ 912.261944][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.262091][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.262273][ T33] locks held by syz-executor/29334: 2, on CPU#0: [ 912.262306][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.262459][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.262624][ T33] locks held by syz-executor/29336: 2, on CPU#0: [ 912.262671][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.262918][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.263088][ T33] locks held by syz-executor/29370: 2, on CPU#1: [ 912.263130][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.263288][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.263449][ T33] locks held by syz-executor/29372: 2, on CPU#0: [ 912.264906][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.265139][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.265293][ T33] locks held by syz-executor/29391: 2, on CPU#0: [ 912.265340][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.265485][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.265647][ T33] locks held by syz-executor/29431: 2, on CPU#1: [ 912.265688][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.265840][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.265992][ T33] locks held by syz-executor/29433: 2, on CPU#1: [ 912.266026][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.266171][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.266400][ T33] locks held by syz-executor/29467: 2, on CPU#1: [ 912.266440][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.266602][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.266754][ T33] locks held by syz-executor/29468: 2, on CPU#0: [ 912.266795][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.266938][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.267084][ T33] locks held by syz-executor/29490: 2, on CPU#0: [ 912.267123][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 912.267263][ T33] #1: ffffffff902c0960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 912.267426][ T33] [ 912.267445][ T33] ============================================= [ 912.267445][ T33] [ 912.267476][ T33] NMI backtrace for cpu 0 [ 912.267514][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 912.267590][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 912.267621][ T33] Call Trace: [ 912.267636][ T33] [ 912.267664][ T33] dump_stack_lvl+0xe8/0x150 [ 912.267766][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 912.267837][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 912.267934][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 912.268003][ T33] sys_info+0x135/0x170 [ 912.268058][ T33] watchdog+0xfd7/0x1030 [ 912.268123][ T33] ? watchdog+0x1c7/0x1030 [ 912.268191][ T33] kthread+0x38b/0x480 [ 912.268243][ T33] ? __pfx_watchdog+0x10/0x10 [ 912.268297][ T33] ? __pfx_kthread+0x10/0x10 [ 912.268357][ T33] ret_from_fork+0x514/0xb70 [ 912.268474][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 912.268563][ T33] ? __switch_to+0xc89/0x1420 [ 912.268666][ T33] ? __pfx_kthread+0x10/0x10 [ 912.268727][ T33] ret_from_fork_asm+0x1a/0x30 [ 912.268858][ T33] [ 912.268876][ T33] Sending NMI from CPU 0 to CPUs 1: [ 912.268961][ C1] NMI backtrace for cpu 1 [ 912.268974][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 912.268993][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 912.269004][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 912.269061][ C1] Code: e8 ae 83 56 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7f 4b c6 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 912.269082][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 912.269097][ C1] RAX: 1ffffffff35a5600 RBX: 00000000000003fd RCX: 0000000000000000 [ 912.269109][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 912.269120][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 912.269131][ C1] R10: dffffc0000000000 R11: ffffffff85712fa0 R12: dffffc0000000000 [ 912.269144][ C1] R13: 0000000000000000 R14: ffffffff9ad2b020 R15: 0000000000000000 [ 912.269156][ C1] FS: 0000000000000000(0000) GS:ffff888124de0000(0000) knlGS:0000000000000000 [ 912.269171][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 912.269183][ C1] CR2: 00007febc7e7b6ff CR3: 000000007e83a000 CR4: 00000000003526f0 [ 912.269199][ C1] Call Trace: [ 912.269205][ C1] [ 912.269214][ C1] wait_for_lsr+0x184/0x2f0 [ 912.269240][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 912.269264][ C1] serial8250_console_write+0xaa1/0x1200 [ 912.269287][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 912.269315][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 912.269337][ C1] ? __schedule+0x17ea/0x5820 [ 912.269366][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 912.269393][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 912.269415][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 912.269442][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 912.269465][ C1] nbcon_kthread_func+0x679/0x880 [ 912.269486][ C1] ? nbcon_kthread_func+0x163/0x880 [ 912.269502][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 912.269523][ C1] ? __kthread_parkme+0x71/0x1f0 [ 912.269548][ C1] ? __kthread_parkme+0x199/0x1f0 [ 912.269576][ C1] kthread+0x38b/0x480 [ 912.269593][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 912.269609][ C1] ? __pfx_kthread+0x10/0x10 [ 912.269626][ C1] ret_from_fork+0x514/0xb70 [ 912.269654][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 912.269681][ C1] ? __switch_to+0xc89/0x1420 [ 912.269705][ C1] ? __pfx_kthread+0x10/0x10 [ 912.269722][ C1] ret_from_fork_asm+0x1a/0x30 [ 912.269757][ C1] [ 912.269942][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 914.678576][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 914.687698][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 914.697750][ T33] Call Trace: [ 914.701025][ T33] [ 914.703954][ T33] vpanic+0x56d/0xa60 [ 914.707965][ T33] ? __pfx_vpanic+0x10/0x10 [ 914.712546][ T33] ? console_srcu_read_unlock+0x3a/0x60 [ 914.718117][ T33] panic+0xc5/0xd0 [ 914.721873][ T33] ? __pfx_panic+0x10/0x10 [ 914.726304][ T33] ? wq_watchdog_touch+0xf9/0x160 [ 914.731351][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 914.737526][ T33] watchdog+0x1030/0x1030 [ 914.741874][ T33] ? watchdog+0x1c7/0x1030 [ 914.746308][ T33] kthread+0x38b/0x480 [ 914.750404][ T33] ? __pfx_watchdog+0x10/0x10 [ 914.755087][ T33] ? __pfx_kthread+0x10/0x10 [ 914.759682][ T33] ret_from_fork+0x514/0xb70 [ 914.764284][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 914.769403][ T33] ? __switch_to+0xc89/0x1420 [ 914.774082][ T33] ? __pfx_kthread+0x10/0x10 [ 914.778674][ T33] ret_from_fork_asm+0x1a/0x30 [ 914.783474][ T33] [ 914.787131][ T33] Kernel Offset: disabled [ 914.791465][ T33] Rebooting in 86400 seconds..