last executing test programs: 8m38.884626245s ago: executing program 0 (id=8343): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r4, @ANYBLOB="01980000050002002000128008000100677265001400028008000700ac1414bb08000100", @ANYRES32=r4], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4000000010003904000000000300000000000000", @ANYRES32=r4, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x685, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200)=r7, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32, @ANYBLOB="120000000800000004000000ff00000000000000"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x4}, {0xb, 0x4}, {0xb}]}, @func={0x8, 0x0, 0x0, 0xc, 0x4}, @struct={0x8, 0x3, 0x0, 0x4, 0x1, 0x7, [{0x200000c, 0x1, 0x7}, {0xe, 0x1, 0x2}, {0x8, 0x0, 0x4}]}, @enum64={0x3, 0xa, 0x0, 0x13, 0x1, 0x1, [{0x10, 0xb22, 0x2}, {0x3, 0xff}, {0x1, 0x100, 0x3ff}, {0xf, 0x8, 0x1}, {0x5, 0xc, 0x6}, {0x10, 0x7, 0x8ba}, {0xa, 0x10001, 0x8}, {0xe, 0x437, 0xd24}, {0xc, 0xffff, 0x5}, {0x7, 0x3, 0x760}]}]}, {0x0, [0x61, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000600)=""/8, 0x102, 0x8, 0x1, 0x3ff}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, r11}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x1, 0x70bd25, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000040) (async) sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m38.643453247s ago: executing program 0 (id=8348): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x44, 0x400, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 8m38.508513012s ago: executing program 0 (id=8354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x2c, 0x36, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='Z'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x2c, 0x36, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='Z'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) (async) 8m38.283079897s ago: executing program 0 (id=8358): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x4) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r3 = getpid() write$cgroup_pid(r2, &(0x7f0000000880)=r3, 0x12) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r3) 8m38.161364237s ago: executing program 0 (id=8359): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000c0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x64, r3, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x7fc3}, {0x8, 0x13, 0x1}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x884}, 0x4000000) 8m38.066565852s ago: executing program 0 (id=8362): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000001f000000610200000200720000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000001f000000610200000200720000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000440), &(0x7f0000000080)=@tcp, 0x3}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0a00060008021100000000000500130101000000"], 0x30}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r6}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0009"], 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x44000) socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) bind$alg(r8, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r9 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$inet(0x10, 0x3, 0x0) (async) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x6], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendto$packet(r9, &(0x7f0000000540)="b4652fa43f17c968768922a31bf83566e26696206a1a73461292dfb388f1d4f9aab236ba33fab7ced7c271703808274855cd3054f40ad6f90a7044a324fd42d69a9cbd46c200f8a2d121491e040cdf22e02e889046d6a24d43969f086b1a29ac8a681d20b9c1e8fb6e249c4e18245318eda33b0aa9609dbdb78952df94432f20fd3336d1fe7cd2c19eb9dfdaed24fad84e57698492bba2fb8747942ae64591f6741a31cb205e54ac91434b531fa1224600179ef12d9756c20f689ada6107d17e9cf7e035416e19588deb", 0xca, 0x404c000, &(0x7f0000000640)={0x11, 0xef, r11, 0x1, 0x3, 0x6, @local}, 0x14) (async) sendto$packet(r9, &(0x7f0000000540)="b4652fa43f17c968768922a31bf83566e26696206a1a73461292dfb388f1d4f9aab236ba33fab7ced7c271703808274855cd3054f40ad6f90a7044a324fd42d69a9cbd46c200f8a2d121491e040cdf22e02e889046d6a24d43969f086b1a29ac8a681d20b9c1e8fb6e249c4e18245318eda33b0aa9609dbdb78952df94432f20fd3336d1fe7cd2c19eb9dfdaed24fad84e57698492bba2fb8747942ae64591f6741a31cb205e54ac91434b531fa1224600179ef12d9756c20f689ada6107d17e9cf7e035416e19588deb", 0xca, 0x404c000, &(0x7f0000000640)={0x11, 0xef, r11, 0x1, 0x3, 0x6, @local}, 0x14) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) sendmsg$NL80211_CMD_UPDATE_FT_IES(r9, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x13c, r13, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7d8}, @NL80211_ATTR_IE={0x61, 0x2a, [@random={0x1, 0x41, "75908bacfc78f0ba77eeef886833268143781e447c1744625f95b57c846a734ccd1f290ebd1df717b754140b3bb20c8f3edcb96ddf971d3b24f00fcfa947e99bde"}, @peer_mgmt={0x75, 0x18, {0x0, 0xd9, @val=0x9, @val=0x15, @val="445952daaff0f7149056551b15ba6020"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x40}, @NL80211_ATTR_IE={0xa9, 0x2a, [@perr={0x84, 0x9d, {0xe5, 0xb, [{{}, @device_b, 0xfffffff9}, {{}, @broadcast, 0x28027dc6, @void, 0xb}, {{}, @broadcast, 0x2c, @void, 0x3}, {{}, @device_a, 0x3, @void, 0x1c}, {{}, @broadcast, 0x200, @void, 0x23}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x2f}, {{}, @device_b, 0x2, @void, 0x30}, {{}, @device_a, 0x5, @void, 0xc}, {{}, @device_b, 0x6a, @void, 0xd}, {{}, @device_a, 0x10001, @void, 0x14}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0xd}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x2c, 0x1}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7a}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8m22.944724162s ago: executing program 32 (id=8362): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000001f000000610200000200720000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000001f000000610200000200720000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000440), &(0x7f0000000080)=@tcp, 0x3}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0a00060008021100000000000500130101000000"], 0x30}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r6}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0009"], 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x44000) socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) bind$alg(r8, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r9 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$inet(0x10, 0x3, 0x0) (async) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x6], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendto$packet(r9, &(0x7f0000000540)="b4652fa43f17c968768922a31bf83566e26696206a1a73461292dfb388f1d4f9aab236ba33fab7ced7c271703808274855cd3054f40ad6f90a7044a324fd42d69a9cbd46c200f8a2d121491e040cdf22e02e889046d6a24d43969f086b1a29ac8a681d20b9c1e8fb6e249c4e18245318eda33b0aa9609dbdb78952df94432f20fd3336d1fe7cd2c19eb9dfdaed24fad84e57698492bba2fb8747942ae64591f6741a31cb205e54ac91434b531fa1224600179ef12d9756c20f689ada6107d17e9cf7e035416e19588deb", 0xca, 0x404c000, &(0x7f0000000640)={0x11, 0xef, r11, 0x1, 0x3, 0x6, @local}, 0x14) (async) sendto$packet(r9, &(0x7f0000000540)="b4652fa43f17c968768922a31bf83566e26696206a1a73461292dfb388f1d4f9aab236ba33fab7ced7c271703808274855cd3054f40ad6f90a7044a324fd42d69a9cbd46c200f8a2d121491e040cdf22e02e889046d6a24d43969f086b1a29ac8a681d20b9c1e8fb6e249c4e18245318eda33b0aa9609dbdb78952df94432f20fd3336d1fe7cd2c19eb9dfdaed24fad84e57698492bba2fb8747942ae64591f6741a31cb205e54ac91434b531fa1224600179ef12d9756c20f689ada6107d17e9cf7e035416e19588deb", 0xca, 0x404c000, &(0x7f0000000640)={0x11, 0xef, r11, 0x1, 0x3, 0x6, @local}, 0x14) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) sendmsg$NL80211_CMD_UPDATE_FT_IES(r9, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x13c, r13, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7d8}, @NL80211_ATTR_IE={0x61, 0x2a, [@random={0x1, 0x41, "75908bacfc78f0ba77eeef886833268143781e447c1744625f95b57c846a734ccd1f290ebd1df717b754140b3bb20c8f3edcb96ddf971d3b24f00fcfa947e99bde"}, @peer_mgmt={0x75, 0x18, {0x0, 0xd9, @val=0x9, @val=0x15, @val="445952daaff0f7149056551b15ba6020"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x40}, @NL80211_ATTR_IE={0xa9, 0x2a, [@perr={0x84, 0x9d, {0xe5, 0xb, [{{}, @device_b, 0xfffffff9}, {{}, @broadcast, 0x28027dc6, @void, 0xb}, {{}, @broadcast, 0x2c, @void, 0x3}, {{}, @device_a, 0x3, @void, 0x1c}, {{}, @broadcast, 0x200, @void, 0x23}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x2f}, {{}, @device_b, 0x2, @void, 0x30}, {{}, @device_a, 0x5, @void, 0xc}, {{}, @device_b, 0x6a, @void, 0xd}, {{}, @device_a, 0x10001, @void, 0x14}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0xd}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x2c, 0x1}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7a}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 17.792044481s ago: executing program 5 (id=13966): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xfffffffc}, 0x1c) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002e00)=[{{&(0x7f0000000640)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14375e403f000000000000002900000034000000ff01000000000000"], 0x18}}], 0x1, 0x40000) 17.556251078s ago: executing program 5 (id=13970): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000008000e000"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r2, @ANYBLOB="00ad00"/24], &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bpf$ENABLE_STATS(0x20, &(0x7f0000001880), 0x4) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3}, 0x18) socket$inet6(0xa, 0x1, 0x4) (async) r4 = socket$inet6(0xa, 0x1, 0x4) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000140)="89cb4c14216adbe2dde37819211126f8683c28ea770a398509fce60e324d41cfcc8ea2ad5fe96a7d549409f7823c8fbe9054527be9c11e68ff696934c206ec880789420934fc15db2a17702e1d074589aeac44b2794faed23c9722eb2bc1506df0", 0x61}, {&(0x7f00000001c0)="b2d614696048f1cc8714d394ac86ff206c3d9f4c3310eb0b56b1cf34d8fdf400cbfb04010b74e062445e7bb9b03e886b480f80df36ffac378144c52bfcb266652bf443f3904d42fa30bf8563a84b2eaefb0f2c6a0bfdbbaf45e33d909543482bfc9862438def67e694d656574a447bad7bb685633879cec566327c95bd862790c57e362b85dbe8de8447285e0263359a237cdc4b2ed6395f62457938b7d3320321418a5e8bd225a9133726c36423ee013525cd034f350f6ddb538d54c00b897525f01f9470d5bd0955b24f6107a2c6519c120f321d36c0322a12386f34", 0xdd}, {&(0x7f00000002c0)="abfdeb31079f7c40584bfe1508f5ed66e61ca1e2592af60b0420510a5253da1571a26d3dfec1a3a36766345a6efd5d112cabb66e34bee1b13e874bf41cdabe7584ccdc59b08de964292e11bea3240268ab80532b4dbd866fbdfffb73f4492f31f23d9bd8a45711ca154596f0f973162ab867fa038f52a2040ec9cbc134f55f82b0fb329f945927bf280a4878004622", 0x8f}, {&(0x7f0000000380)="3f1ef560690e753456a7abccc7b6429c0d2b69ea833483a0e4f7dd8acdf739bb1b0334e32f294040bda4b278d589085e25050e982da9e970ef453133d72291e8e67ebfa6c3cf3e061eac31e1b12a61f39f93a3a67153dd0e91cb14b12426dbf6", 0x60}, {&(0x7f0000000400)="83cdc08645812eb01c33c2a3bd20", 0xe}], 0x5) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0xf0}}, 0x18) sendmmsg(r0, &(0x7f000000a2c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002940)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0x80000001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x80, 0x0, 0x0, 0x0, 0xfffffec7}}], 0x2, 0x40f5) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) socket$nl_crypto(0x10, 0x3, 0x15) (async) r6 = socket$nl_crypto(0x10, 0x3, 0x15) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$nl_crypto(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="f0000000120003", @ANYBLOB="22e2cf8975608d18d91a17cb3776054e081dabffa7f6d27fde1ce1430ce08e97c0b5b8f7c62feaf4d6a382197b0c779680ea688b149c8f8f0743684688243db3cbf65e6217f0aec537"], 0xf0}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r5, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) (async) recvfrom(r5, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r5, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007", 0x4}], 0x1) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) socket$rxrpc(0x21, 0x2, 0x2) (async) r9 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r9, 0x1, 0x20, &(0x7f0000002900)=0xfffffffa, 0x4) 17.456058273s ago: executing program 3 (id=13971): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@dev, 0x0}, &(0x7f0000000140)=0x14) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x1, 0x7fffffff, 0x9, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x10, 0x3, 0x76}}) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="680000001800200025bd7009ffdbdf250a1014000004fd020000000008000300", @ANYRES32=r1, @ANYBLOB="060015000700000014000500ff010000000000000000000000000001140005002001000000000000000000000000000006001500030000000c0009000000020b", @ANYRES32=r2, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_getnetconf={0x1c, 0x52, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NETCONFA_PROXY_NEIGH={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x34008854}, 0x4000) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe0400010000002008001e00020065344f11dc88bc3cb3e826fa5a0000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@ipv6_deladdrlabel={0x54, 0x49, 0x200, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x1, 0x0, r2, 0x2e9a}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 17.416191402s ago: executing program 2 (id=13972): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@delneigh={0x34, 0x1d, 0x2, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x0, r3, 0x2, 0x44, 0x1}, [@NDA_PROBES={0x8}, @NDA_LINK_NETNSID={0x8, 0xa, 0x101}, @NDA_PROBES={0x8, 0x4, 0x3}]}, 0x34}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 17.255899193s ago: executing program 5 (id=13973): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001180)={{0xffffffffffffffff, &(0x7f0000000000)=')*\'!\x00', 0x40100, &(0x7f0000000040)={@_ha_fsid={[0xfffffbff, 0x1]}, {0x4, 0xd, 0x81, 0x9800000000000000}}, 0x0, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x1516}, 0x1, &(0x7f0000001140)=[{0x2, 0x3, &(0x7f0000000100)='^\x00', &(0x7f0000000140)="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", 0x1000}]}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x40010, r0, 0xad2a5000) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000001200)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001240)={r0, 0xffffffffffffffff}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000002740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002700)={&(0x7f0000001300)={0x13c4, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "b11f954fde0770708085246a27ad9e3838a820d2"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2e}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff1436}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5742a65}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x755}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4fd4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4d}, @TIPC_NLA_NODE_ID={0xa7, 0x3, "3bad118b5cfa9c0cb26e264ee4af059889896626067bad74fbae4b1f37c651fce73a4fe00315a0a8ee877cc542a47bdc1d524c47b048644ac33f53ccb4d3dc315d3db78cc654b80cf5dc882e5ea5d62ae6f4be76066962a9c73072908a54837af51730f89d45715de1b7f28021436f88f3020984f6e42eb1bb8ddebf20ec4788de9fe15218a004189af916cfd518c9323ff06fe5e9effdbe407b253ce2ad88096377a1"}, @TIPC_NLA_NODE_ID={0xdc, 0x3, "d2b9ba57bff968f6352a449097ed2fe57d5149eec88c7db45521e2ac01452005ef3dbb75ace5c117b8a120bdc4e259df2a2391474a648c8f6edffa3eda2f0cf41798ad2309219ea55d2b4c09db45185f646ab87e4e3d904b1796b0753de030a074a57812f010176f4388215c639fafaf141ab4c2968efd2afb82b3c7cd778016a22404d0cab465e52431ff79cfc6bf3e3d658336b32500008879f9e6e8800d6a961dcdd241d00f7748835bf48483129aeb48abab42ad44d3683f87c8b3eab67f86fa9c79b516d9b80c54c162bda75fa08032224a7f73d3af"}, @TIPC_NLA_NODE_ID={0xd, 0x3, "906d5a04b84287c301"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x10ac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "5996f6dab87be6e22a22a10a5b89c6e0ef51d5a0ae"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb8}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "91441924dd9f63783e6e17e65775bac9f51c2cd931f8cc1d5fe518ab6b1d626037149a"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}]}, 0x13c4}, 0x1, 0x0, 0x0, 0x10040008}, 0x19) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f0000002780)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002800), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000002980)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x8200800}, 0xc, &(0x7f0000002940)={&(0x7f0000002840)={0xcc, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x962}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000029c0)={0x8, 0x7, {0xc77, @struct={0x400, 0xff}, 0x0, 0xd0, 0x4, 0x9, 0xf, 0x9, 0xf, @usage=0xfffffffffffffffe, 0x3ff, 0xa6, [0x7, 0x3, 0x0, 0xe9a, 0x8, 0x3bc6]}, {0x3, @struct={0x401, 0x91c1}, 0x0, 0x7, 0x200, 0x0, 0xfffffffffffffff5, 0xa43, 0xc0, @struct={0x401, 0x1}, 0x80000000, 0x10000, [0x7, 0x1, 0x7fff, 0x0, 0xff2c32a]}, {0x5, @usage, 0x0, 0xab5, 0x80000000, 0x9, 0xb4ed, 0xffffffff, 0x20, @usage=0x2, 0x83eb, 0x1, [0xcc1, 0x10001, 0x96, 0x8, 0xff, 0x82]}, {0xa, 0x2, 0x7}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000002dc0)={r5, 0x0, 0x7fffffffffffffff}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000031c0)=0xffffffffffffffff) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000003240), r0) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x38, r6, 0x60c, 0x5, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000880}, 0x40040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003380), r2) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x28, r7, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x40000) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000003480)=0x5, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000003580)={&(0x7f00000034c0), 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x30, 0x140e, 0x100, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000035c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000003600)={'wg1\x00', 0x0}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000003700)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20601100}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x40040) connect$bt_sco(r0, &(0x7f0000003740), 0x8) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000037c0)=@generic={&(0x7f0000003780)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000003c00)={r9, &(0x7f0000003b00)='\'&\x00', 0x183000, &(0x7f0000003b40)={@align=0x3, {0x9, 0xc, 0x3, 0x3ff}}, 0x1f, &(0x7f0000003b80), &(0x7f0000003bc0)=0x8}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003c40)={&(0x7f0000003800)="2822fbf7c49a0eb4a63146376a2ff0d7c1383427f95ea87f0af733ad33868db751a77e394d8074e19a27ac58877fbe5f645b3ba6f7b240c9674ea84640846504d0603d50545ec47e4287bb9817230743f9ed99c5332f3d9c7e09df490a070e39aa74dbe7326fae001774a0", &(0x7f0000003880)=""/249, &(0x7f0000003980)="5d2491504686bb28c7a3cbf3b4f9486be6a4f20156b8f0809946e44291a58cd003e7a6d5004561f638855ad6583e4b3abfea07388b1c384769de72811e8c5dbdb0e4e9e2a19dfd5c92646e6158a652c4355ea52ecdeb9571ec1d0f4214b0026c1d6496f39cdfe59d4f0c697f564eb982c08bee7daf12dc4d30edb63719fff497f4fbe4dbcf804bd2467dc04dc05d77ff08e0da3d42c986d3812412a0a452fb4c2d8c02244f4ad4db96ec702c71b3d8fed534ba48add6e549b5f350ac7add07db9f9f1124294dd0c0be8f7ff3fa6248", &(0x7f0000003a80)="4adb871d4a3d92f01662d1f241029091f7348e7ecb9e3e0c8c3ee33051003ec5f0b9a62e877739b3b05e3973badf02963442fd5a3699f0bc48ee466ebac28fdb4665e1e893937bbb365d5ea68ae7688299", 0x80, r10, 0x4}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003c80)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x38b6, '\x00', 0x0, r0, 0x1, 0x5, 0x2}, 0x50) shutdown(r1, 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f0000003dc0)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d40)={0x28, 0x1412, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20040881) sendmsg$nl_route(r10, &(0x7f0000003f40)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003f00)={&(0x7f0000003e40)=@ipv4_newnexthop={0xb0, 0x68, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x3, 0x0, 0x10}, [@NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x2}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x4}}, @NHA_ID={0x8, 0x1, 0x800}, @NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x401}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xfeff}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_OIF={0x8, 0x5, r8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_BLACKHOLE={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) 17.064138212s ago: executing program 3 (id=13976): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007919a80000000000950000b200000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) (async) mmap(&(0x7f0000778000/0x2000)=nil, 0x2000, 0x3000000, 0x10, 0xffffffffffffffff, 0x22897000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000013000100010000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000004101000014001a80100004800c000180"], 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800bf400000000000003400000034007b47e98addd56141fdfa00000200000000000200000000090300000000000000000000010500007f0e64524d84b5f0000000000300000000020000000200000000000000"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x0, 0x1}, 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x10000, 0x4, 0x1009, 0x14514, r1, 0x3, '\x00', r7, r8, 0x1, 0x4, 0x4, 0x3, @void, @value, @value=r1}, 0x50) ioctl$F2FS_IOC_RESIZE_FS(r9, 0x4008f510, &(0x7f00000002c0)=0x100000001) (async) write$tun(r5, &(0x7f0000000080)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x2e) (async) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000140)=0x4) 17.063521772s ago: executing program 5 (id=13977): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@getsa={0x54, 0x12, 0x100, 0x70bd26, 0x25dfdbfe, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x2, 0x6c}, [@srcaddr={0x14, 0xd, @in=@empty}, @offload={0xc, 0x1c, {0x0, 0x1}}, @policy_type={0xa, 0x10, {0xedc95ca6860d4665}}]}, 0x54}}, 0x0) r3 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x1}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000140)="1140679a", 0x4}], 0x1}, 0x40810) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080040"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@getsa={0x54, 0x12, 0x100, 0x70bd26, 0x25dfdbfe, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x2, 0x6c}, [@srcaddr={0x14, 0xd, @in=@empty}, @offload={0xc, 0x1c, {0x0, 0x1}}, @policy_type={0xa, 0x10, {0xedc95ca6860d4665}}]}, 0x54}}, 0x0) (async) socket$kcm(0xa, 0x3, 0x87) (async) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x1}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000140)="1140679a", 0x4}], 0x1}, 0x40810) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080040"], 0x3c}}, 0x0) (async) 17.063308026s ago: executing program 2 (id=13978): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @local, @multicast1, @multicast, @rand_addr=0x64010100}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0xd00, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 16.988896847s ago: executing program 4 (id=13979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x200040c4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r0, &(0x7f0000000140)='TIPCv2\x00', 0x18000, &(0x7f0000000180)={@align=0x800, {0x4, 0xfffd, 0x7, 0x5054}}, 0x3, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0xa}) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3a}}}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x48044) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e23, 0x7fffffff, @remote, 0x3}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0xfb, 0x97ef, 0x20, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x1, 0x7, 0x10001}}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f0000001880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001840)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x1024, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xfcc, 0x3, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf3, 0x6, 0x1, 0x0, "1c0b76490bf4f9321be6d967711ecda5c07d038b8d694854a287c4e7cde4331503e08336c3875979737cba9294880db3e66c2c5dd9774c38c3889ecd9e00992a74a98f79e97148f66d46039dc0adcea5cd32712efacff464f8c72421d5f8d562ade78e1c9c6a5744880fa7a9f4ac3cd2411c98a29d1ccbc03f1fd6cf4ea8c6d81af6f04677b0340f873e13c4d5061cbab2c40af2a2b13ae1c933dee51032d386cae6f099e0fecce5a0522a675f6edf1f1a472be522659610fa0f77fb113dc676333a24715f1411a55d8f4b8b30067c3ee6fb91c564c917fec667ff0523ba1ec795ae16811f9fcacc302bb7f9d7a139"}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x1b}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xd4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x76}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}]}, {0x8a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x76, 0x6, 0x1, 0x0, "f518b20f79a1e9c5b5b125d62ec9c890a29f964652a2c5e041eaa8a9c612707727cc2127ab86000f6098a4a4ea60edf3de8672da4f99d60150559bdacf1b87a6da5f1ae0fadc5456ea2bc48448741e1d499b31236ae888287baa8a2d8acc25727dc6534e807bdd2d22a341ee63d1ee9c2f78"}, @NFTA_SET_ELEM_DATA={0x54, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4d, 0x1, "57f0e722310fdab47be8759132c9b186f3b2fe887701b5719443215f5daf1b1e424c93b268f7550684e2636dd18b7ee5a4f465f0411b572e4987a5c49bf36c28b7cb55ef493a3b741d"}]}, @NFTA_SET_ELEM_DATA={0x35c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "7be298ff1381e7919a52770195293770c1bade7137c52a7752e5b821c224ad3d9d005b4c1ce5152005f533f07690f4701d6c6d6b14fe9f194e1c03d9d53e41c5a1f4c8f77bfbf321b75bef3b414cbf566e820977be0d75ce307fa894adfe8823deb8bccab1ab587d86d2ce69dda4f16023afd54d9a5e110573ff923765fba0995de5d0ca3d8e6cdd836580"}, @NFTA_DATA_VALUE={0xe8, 0x1, "39293aa03f988e8f14bac3702b86b92e3bb32388ff4a140e81ce83ea69f986695279c0b1d6b12f7536738a45fc59f5a6e62463de4b0033095b3fe623c891fffe6a39364bfb9dd05fa274c38767481f975a77b3cae3f96122127f1945f63bf10c4de46b56615bfc47050267e7b6c2edc1501ba39b3ce4bb6a6245b959ab08e84010fff3964c06b4710ac878d6797a5d0fdfc98dd5234f48cea74ea0962a832d0081f70d4eaa893ec14c7a52878f19a97b9bccf3d0d09df63e541d912c8d345a77b06e69e040b0a5468e8ab904d2ee5fecb5d4ab3d9f4f6077da45ba0425255544056342cb"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xab, 0x1, "fc8726bc59c75e257d0393418c9994fb16bb12ab35272b7ebc4fa379bee4845561df0516776f5a604e6a3b94f3a8064acd83b4125bf2b121f2360b80cefe717e1a055aa5698befc746d3f9dd3339eb98dccf096122e76e589a9dc4cb977ada56da9aa545d287d7b358bac7ba563437006c3deea0a7c34725c55d124a251e1be6c61e1697380430b219af3d10b082ebc8d24bf7be8f20e33b42af19ca260b716816a2462ffb08de"}, @NFTA_DATA_VALUE={0x56, 0x1, "8027e0e111e5541c33be4a41a0e44169146dc4b6fd82a427a4eb00d177f47b365ba813b631f49143ef40b9afbd8e728062203998ebc2c1514c8472058705c9476dd95932a8c02466c24462e7bc21e3d48652"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xb36b3141af911849}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x380, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x60, 0x1, "5091b0389a5ac03d0447cef17c4456c037659a5d99518fe358fc2fc0b0e44995cf913262df63444daea02bb01ea35e5fa7a4c3d8f4bc3cb0343ae40abaf452a03654311f5b492863e5179c59b8fdbf7e4a47c12e189c72621dbd016f"}, @NFTA_DATA_VALUE={0x5a, 0x1, "71aac84a8d690b132ee54953d47d53bd93c7dababa2052f822017c59a3c9c65c90665ca173d4ee792ebe9a26879a9b92ef1adac56ae1cf40f69370a2636e535989fcff456746859efc05bdc06d45730be972c6f43ea7"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "50280b051aabb62002b7bfb3bd142493ba78cc7ce0f8fb532cf66316b0c69fe4b9b06c401e077b2c5f3e7505fcd6eae74059f60c9337f476efe0abc086a579a7a5be35fa5e1d265d32520a5b552a1b1da6448a1da61e9b82e5a098ee0d430523eec98835060761cf4f20ab29d18c8aa467064acf9859d9e5d0df6fa4b0bb4f9f2d8303dd3266986e8e251812e13ec1105a08d46d1eebdfe932f30ff72fa8f0b11108d467be"}, @NFTA_DATA_VALUE={0xdd, 0x1, "fffffeca6db15d61de501caa30968de4ef8eb7ca89dc4c9fd76837ea44f0798e7e3263b4bbd8cb8e83050eafb35ef72eae7ee5d307b86ed02fe7d7122df96f10b6ac18475c4db5e3fa0dca83132a7bd9c6e57e794f2db90f33c11802f7a4d604f11448584ef80260f6907148fc04d2212f1491ae866d0e5f8438944da0d2e470a6d0d86440d3c4c8055e4eeb2775d1f09a659562773ac1203a4ac74c74ab7749e73204ca23f65c3566f29a9c87bb070a08087a8a339bb9e9ef2552444818789d4c32ff4b949df8dc10e335f422294fc3dbaa2ddd1c549fa0a4"}, @NFTA_DATA_VALUE={0xc5, 0x1, "5cb3fa70f2b4398b1c556c15bf959e4fd5fc5b760e5342bce837b26c998015e312b2558f509474e9fc91a46f305e19cb77cd519f341f9fd1b8aa07b301c1cdef46e2af0d02124b0a653b49cb55a7465f149d443bdf0b2d8293d9106f19c2e144408282fc38909a7f488be9082a0b50fbeb695975dea3ecb412846ee2b8fd42e816ff4e801a0c3f4793d49da3e843ed3746a654839cb1d7f402a55ed6f6e6f90a8fe29c5904ba6fdfd453c3e03ca6f833977050a994bd3598dd502ed833647bbcca"}]}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_KEY_END={0xa4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x51, 0x1, "015f81e259741898736e857b739373f1e8a8ab2b277793b497cdd98f554dee7f20add21ff65bb23f5efd1f0398063e807ec4f4485adb449b25eaa15004e098d1a13c94f79dfeac30954fe898a2"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x308, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0xd0, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x5}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_LOG_PREFIX={0xb, 0x2, 0x1, 0x0, 'TIPCv2\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x1c}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x108, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x102, 0x1, "7b07213495018b76b86b56b53ef74b8b9c438262b9f89a16a3dae03fd00987b2ba2a5501be1a68c861302e38d01afbb4e9146bf7103f8877cecf6b991eaa3b090100fb3c70ccf8c455e15e31017242b9683af196859e02cdd3ae2e47f655d1316000ae6b990ddcaa7c06f970129a3c53aad9fe97205156c8b7419ec9014346285d85235b275fb04f9cdcb9abec207208ba34474fa65e3e717d670293ef19b4d94c61355a2312460b901ee7ed8110178d913ee31156f8e720d0af5aa9b3b9cde1b3f65698a44ca61f870ad582850c0cd602463459723625619ae18a07240152328a546de5e7fa6bb672b002ab14df4a0380282654412d18e821536081dfce"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0xf4, 0x6, 0x1, 0x0, "e89aecb1bb661e53999992b438ea1aaa875126cf37696c040afd7aaf747c1dd3c8a7865febc0a5e956bc4b0245fd8caac5f6020022296de8c20378d01a865dd58ed6aeb74b996a237754060140a9882cecda679cf93b3f29e8401ae02339561f9b0ce93b57598c8a9619649255c376278ba446911f56640f280663530c1fc6820e0bb6881aad646ae48a865dd3f2c19430a9090d9da861e39279ef5ddb475716a05fa84870666e992ba60a17c9e9dbd4511e3fb5345b8f0948b942c59020ba53821198942e48628514abdce1ff5f84a5e43384e7b80f41690a8028e77106dc41de56673eda32036adef794af69754df2"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x87, 0x6, 0x1, 0x0, "dbdb01f3a12c56d127bb1c082cbb48fd881e69722ffb3630607cfc08790e6330373944a7724a3e051ec3db79a0e87731e05b8e1826a68ae061e93f4a4e01668d52b6d87f2e6bafed0c7258f5e77f777776ab1f5bf537c3fee3f5c1620a5fa74ec714905817a6f35e7b94c08d949022408e5bfd1667a498a0d433bea53d71be180cb784"}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @lookup={{0xb}, @void}}, @NFTA_SET_ELEM_USERDATA={0x6d, 0x6, 0x1, 0x0, "f5b8a3c873345616b1e987b39756f65d0a5557ab7ea072c611d914d75df9000bff75262a46c7b2c0bfeef6345b965a5c22dc09220f5a65d752b76b0845242c2e0d7b88dd8b4e5a2a67eca3107ea81c595866b1605f99e8a063272672235d596e6bbc307f4debe8b235"}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0xb7, 0x6, 0x1, 0x0, "ae5871de36d2062dadb2d536416e633e61c0924d375a872540b0846afe29a71071efb91c7bcc476ccf5850ee7a958569aa1f104531df0e3f860a803d5d1640ff4070d8e242d9b9d10d170283669695da6878d48760871b5635e76f18daa4e7c3647ca22adc3009503389cb1cf3544bbcc21baa5c3f7c4e21fa8b6190ea481997d9d9d6401c97559e01132fe1ce81bdbb01509c722b477b490a8c070eaabb7f549ea4f8184c821d980a5573a84cc66b9bcff693"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x88, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x23, 0x8, "a9b233fed6bc7244bcf62322e09b9a491608b7e0e94d56fd2a247e209d9017"}, @NFTA_OBJ_USERDATA={0x28, 0x8, "d0a8663565fb14ec03681647f8ef2f5d4457e1cc128a98e93ceb4462be5782f009ccefd8"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x44, 0xb, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x11a8}, 0x1, 0x0, 0x0, 0x20000094}, 0x1) pipe(&(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000001900)=@assoc_value={0x0}, &(0x7f0000001940)=0x8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000001980)={{0x0, 0xb, 0x8, 0x0, 0x4, 0xfffffffffffffff8, 0x6fef, 0x1, 0x7, 0x7, 0x4, 0x81, 0x6, 0x2869}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001a40)={'wlan0\x00'}) sendmsg$NFT_BATCH(r6, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x6d, 0x6, "d73226d8cc306c7b2ddb4b1f37601681dfd238b540edcefec6e05cd2752608c183b4310a02c52ee0c9fe9c6df9c63c6c0e65e8632623f84ba58ec4a4ee4504798e8cab752a1a9c5ca0bc419e286c5d3d9b7406ed61760d263bd2acb63af50acb8f5ed7eef081e24464"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x4002000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000001c00)={r8, @in6={{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}}, 0x3, 0x80}, 0x90) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x1c, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfc7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008880) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) pipe(&(0x7f0000001e40)={0xffffffffffffffff}) setsockopt$inet_int(r9, 0x0, 0x0, &(0x7f0000001e80)=0x8, 0x4) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000001f00)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001f40)={r8, 0x3}, 0x8) syz_emit_ethernet(0x1011, &(0x7f0000001f80)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@x25={0x805, {0x3, 0x6, 0x1f, "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"}}}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003000)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r11, &(0x7f0000003180)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x76035252c04beb8}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x58, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x81) 16.864422613s ago: executing program 5 (id=13981): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) pwritev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="1832", 0x2}], 0x1, 0xa, 0x10) read(r0, 0x0, 0x300) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000480)=""/179, 0xbe}], 0x1, &(0x7f00000000c0)=[@fadd={0x58, 0x114, 0x6, {{0x200, 0x1ff}, &(0x7f0000000000)=0x2, &(0x7f0000000080)=0x9, 0x7fffffff, 0xfffffff000000000, 0x5, 0x80000000, 0x4}}], 0xfffffffffffffcdd, 0x40014}, 0x0) sendmsg$sock(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x4, 0x0, {0xa, 0x4e23, 0x2, @mcast2, 0x7fffffff}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)="3dfce4467f30d805a4cc81c2c9f47274f1ad8715b513846528ca6578ba580fd34f76b41edfb97754ffbdc7af31d308da1d9bf354a6b9ae8a4b377728d943f03f573a3d25dff73371516cd4697e08392a9d978b97739ac333a416186cbae235adc86cc4b6929eb821be225e3824382bcdccaa2eb720c5525b3aa1e20a611bd2094e205232d9d19dede0359fca42063d8289a43f10be2442b9dcc58e3561968d05ce5382", 0xa3}], 0x1, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x1f3f}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @mark={{0x14, 0x1, 0x24, 0x10001}}], 0x48}, 0x20008001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000400)) 16.759188779s ago: executing program 4 (id=13982): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0), 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f0000000000)="9e", &(0x7f0000000940)=""/4096, &(0x7f0000000100), &(0x7f00000001c0), 0x1, r1}, 0x38) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x0, 0x9, 0x78, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r4, 0x1b}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d40)='J', 0x1}], 0x1}, 0x20000015) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x6, 0x4) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b685fc0657f5a18a5202beb92193b4e8b4824bff2a0759fd4d817ead03fe1f9ee34d6ee1d113"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0), 0x48) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f0000000000)="9e", &(0x7f0000000940)=""/4096, &(0x7f0000000100), &(0x7f00000001c0), 0x1, r1}, 0x38) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x0, 0x9, 0x78, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r4, 0x1b}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d40)='J', 0x1}], 0x1}, 0x20000015) (async) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x6, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b685fc0657f5a18a5202beb92193b4e8b4824bff2a0759fd4d817ead03fe1f9ee34d6ee1d113"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) (async) 16.717316763s ago: executing program 3 (id=13983): r0 = socket(0x10, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8004800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a0002000000836b00000000ac"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) accept4(r0, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80, 0x80000) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x6d, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_FLAGS={0x0, 0x3, 0x1, 0x0, 0x140}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x36}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x13}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x44840}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xd, 0x1, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000180)=""/198, 0x32, 0xc6, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180), 0x10}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0009000d0000000005000000", 0x29}], 0x1) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000150a0102000000000000000000000001090001"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x2004880c) 16.572299997s ago: executing program 5 (id=13984): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f0000000580)={&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/132, 0x84}], 0x3}, 0x40) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000fddbdf250d00000008000d000000000008000c00010000000800010000000000080001000200000008000c00020000000c000600020000000200000008000300", @ANYRES32=r4, @ANYBLOB="dad86ceecfb2de6b24026031b3"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x44840) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x4040000) 16.559326242s ago: executing program 3 (id=13985): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 16.455505412s ago: executing program 3 (id=13986): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000003c0)={0x14ae4701}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000063119d000000000007000000200000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 16.388780674s ago: executing program 4 (id=13987): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.369176333s ago: executing program 3 (id=13988): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bcf117e905b15ac42f7caf0400", '\x00', "3d30fa05fdffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000200)=""/21, &(0x7f0000000240)=0x15) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) openat$tun(0xffffffffffffff9c, 0x0, 0x13f640, 0x0) r4 = socket(0x8, 0x3, 0x3) accept$inet(r4, 0x0, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d2190e8a0e000000edfffff0de00", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x2, 0x23, 0x0) sendto$inet6(r2, &(0x7f0000000140)="d067", 0x2, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 16.334521668s ago: executing program 2 (id=13989): socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70390ffffff00008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 16.272409539s ago: executing program 4 (id=13990): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x1070bd2c, 0x4, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) 16.26467838s ago: executing program 2 (id=13991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000001780)={{0x0, 0x6}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}, 0x1, 0x0, 0x0, 0x24008810}, 0x0) 16.256365612s ago: executing program 4 (id=13992): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061106d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x868f7c6e}, 0x24000040) 16.153776638s ago: executing program 4 (id=13993): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x20, 0x40, 0x4, 0x7f, {{0x8, 0x4, 0x2, 0x3, 0x20, 0x68, 0x0, 0x7, 0x73, 0x0, @multicast2, @private=0xa010102, {[@lsrr={0x83, 0xb, 0x32, [@loopback, @local]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xac, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x19}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0xfff8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4e65bde497addfb3}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048010}, 0x40000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000041000701feffffffffdbdf25107c0000040042800c00018006000600800a000004000280195b0c03dd1120b4bf583125304215a800df32ec72ba23694c90ea91ea9f330b462227eaba67b65c449daeb260169fdfdab643ddc70ee2e290d646b1adfe0c572e8d1dd2aec328f7ad74f46057930e958f331ea1d46b60cf3b838aadb7fbecb3b4519b7bb3762d6bfa2affc0d1def31505fa816fcf40208ffeee67fc5ab22c93ad"], 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0xc000) 16.152495176s ago: executing program 2 (id=13994): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0) (async) readv(r1, &(0x7f0000001740)=[{&(0x7f00000011c0)=""/253, 0xfd}], 0x1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 16.093886168s ago: executing program 2 (id=13995): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_flash={0x33, 0x5}}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x800) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a0001000000000000009c39c743"], 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000008900000008000300", @ANYRES64=0x0, @ANYBLOB="180006"], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x200400c0) socket$inet_mptcp(0x2, 0x1, 0x106) 15.988093378s ago: executing program 1 (id=13996): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2c, 0x3, 0x40) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0xfffc, @empty}}}, 0x88) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f00000004c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000000c0)={r2, r3, 0x4, 0x0, 0x0, 0xe, 0x0, 0x5f, 0x1, 0x81, 0x1, 0x2, 'syz0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e24, @broadcast}, 0x11, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)='lo\x00', 0x6, 0x4, 0x401}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) 15.86431813s ago: executing program 1 (id=13997): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x800, 0x4) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 15.817360564s ago: executing program 1 (id=13998): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f00000001c000108feffffff00010000ff0200", @ANYRES32=0x0], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x40000) 15.73744915s ago: executing program 1 (id=13999): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @local, @multicast1, @multicast, @rand_addr=0x64010100}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0xe00, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 15.324427151s ago: executing program 1 (id=14000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000280)={{r0, &(0x7f0000000000)='syz1\x00', 0x10000, &(0x7f0000000080)={@_ha_fsid={[0x80000000, 0x3]}, {0x1, 0x7, 0xe, 0xd8f}}, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x3}, {[0xe11, 0xfffffff3, 0x200, 0x3]}, 0x1, 0xa8, &(0x7f0000000140)=""/168}) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x4}, {0x6}]}, 0x10) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xd, 'bond_slave_0\x00'}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 15.279712975s ago: executing program 1 (id=14001): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0xa, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x34}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0xa}, [], [0x0, 0x0, 0xffffff00], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x6, 0xf7fe, 0x4, 'snmp\x00', 'syz1\x00', {0xe8ea}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2, @ANYBLOB="b5b208619644852a0187ce1a5fee1fa6cdec6b723dffbadbf10f0e78ec9700"/51, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES8=r2, @ANYBLOB="f47cffd22f2820d463a09b"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000100)=0x1fffff, 0x4) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/162, 0xa2}], 0x2, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x10020) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @loopback, 0xf}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket(0x2, 0x80805, 0x0) pipe(&(0x7f0000000140)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000540)={r7}, &(0x7f0000000640)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="18850001006e0000000500000000000000"], &(0x7f0000001600)='syzkaller\x00'}, 0x90) 1.186015568s ago: executing program 33 (id=13984): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61123000000000006113640000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f0000000580)={&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/132, 0x84}], 0x3}, 0x40) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000fddbdf250d00000008000d000000000008000c00010000000800010000000000080001000200000008000c00020000000c000600020000000200000008000300", @ANYRES32=r4, @ANYBLOB="dad86ceecfb2de6b24026031b3"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x44840) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x4040000) 1.155180817s ago: executing program 34 (id=13988): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bcf117e905b15ac42f7caf0400", '\x00', "3d30fa05fdffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000200)=""/21, &(0x7f0000000240)=0x15) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) openat$tun(0xffffffffffffff9c, 0x0, 0x13f640, 0x0) r4 = socket(0x8, 0x3, 0x3) accept$inet(r4, 0x0, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d2190e8a0e000000edfffff0de00", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x2, 0x23, 0x0) sendto$inet6(r2, &(0x7f0000000140)="d067", 0x2, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 126.780473ms ago: executing program 35 (id=14001): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0xa, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x34}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0xa}, [], [0x0, 0x0, 0xffffff00], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x6, 0xf7fe, 0x4, 'snmp\x00', 'syz1\x00', {0xe8ea}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2, @ANYBLOB="b5b208619644852a0187ce1a5fee1fa6cdec6b723dffbadbf10f0e78ec9700"/51, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES8=r2, @ANYBLOB="f47cffd22f2820d463a09b"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000100)=0x1fffff, 0x4) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/162, 0xa2}], 0x2, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x10020) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @loopback, 0xf}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket(0x2, 0x80805, 0x0) pipe(&(0x7f0000000140)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000540)={r7}, &(0x7f0000000640)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="18850001006e0000000500000000000000"], &(0x7f0000001600)='syzkaller\x00'}, 0x90) 85.651748ms ago: executing program 36 (id=13995): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_flash={0x33, 0x5}}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x800) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a0001000000000000009c39c743"], 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000008900000008000300", @ANYRES64=0x0, @ANYBLOB="180006"], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x200400c0) socket$inet_mptcp(0x2, 0x1, 0x106) 0s ago: executing program 37 (id=13993): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x20, 0x40, 0x4, 0x7f, {{0x8, 0x4, 0x2, 0x3, 0x20, 0x68, 0x0, 0x7, 0x73, 0x0, @multicast2, @private=0xa010102, {[@lsrr={0x83, 0xb, 0x32, [@loopback, @local]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xac, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x19}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0xfff8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4e65bde497addfb3}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048010}, 0x40000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000041000701feffffffffdbdf25107c0000040042800c00018006000600800a000004000280195b0c03dd1120b4bf583125304215a800df32ec72ba23694c90ea91ea9f330b462227eaba67b65c449daeb260169fdfdab643ddc70ee2e290d646b1adfe0c572e8d1dd2aec328f7ad74f46057930e958f331ea1d46b60cf3b838aadb7fbecb3b4519b7bb3762d6bfa2affc0d1def31505fa816fcf40208ffeee67fc5ab22c93ad"], 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0xc000) kernel console output (not intermixed with test programs): uld be set when creating new route [ 1208.972015][T18227] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1209.088543][T18241] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1209.135635][T18241] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1209.152422][T18241] gretap1: entered promiscuous mode [ 1209.167078][T18241] gretap1: entered allmulticast mode [ 1209.242291][T18244] syzkaller0: entered promiscuous mode [ 1209.249743][T18244] syzkaller0: entered allmulticast mode [ 1209.410143][T18255] __nla_validate_parse: 21 callbacks suppressed [ 1209.410162][T18255] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12816'. [ 1209.425924][T18259] veth1_to_bond: entered allmulticast mode [ 1209.426282][T18259] veth1_to_bond: entered promiscuous mode [ 1209.426842][T18259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12817'. [ 1209.450907][T18259] veth1_to_bond (unregistering): left allmulticast mode [ 1209.458906][T18259] veth1_to_bond (unregistering): left promiscuous mode [ 1209.476209][T18259] .`: (slave bond_slave_1): Releasing backup interface [ 1209.491454][T18260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12817'. [ 1209.569105][T18262] netlink: 'syz.1.12818': attribute type 27 has an invalid length. [ 1209.587850][T18265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12819'. [ 1209.592101][T18262] netlink: 'syz.1.12818': attribute type 4 has an invalid length. [ 1209.605997][T18259] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12817'. [ 1209.623292][T18262] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12818'. [ 1209.646386][T18267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12820'. [ 1209.884396][T18286] syzkaller0: entered promiscuous mode [ 1209.893213][T18286] syzkaller0: entered allmulticast mode [ 1210.123310][ T6488] net_ratelimit: 3 callbacks suppressed [ 1210.123328][ T6488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.304309][T18308] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12831'. [ 1210.314702][T18308] openvswitch: netlink: Flow actions attr not present in new flow. [ 1210.516694][T18318] gretap0: entered promiscuous mode [ 1210.545205][T18318] vlan2: entered promiscuous mode [ 1210.724800][T18333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12838'. [ 1210.791259][T18338] openvswitch: netlink: Message has 12 unknown bytes. [ 1210.798413][T18338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1211.164860][ T6488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.644113][T19231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.124723][T19231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.203449][ T6488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.242968][ T6488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.508135][T18322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1213.684144][T18360] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1213.845461][T18372] veth0: entered promiscuous mode [ 1213.850750][T18368] validate_nla: 1 callbacks suppressed [ 1213.850766][T18368] netlink: 'syz.3.12849': attribute type 11 has an invalid length. [ 1213.873313][T18370] veth0: left promiscuous mode [ 1213.994314][T18378] syzkaller0: entered promiscuous mode [ 1214.011021][T18378] syzkaller0: entered allmulticast mode [ 1214.021479][T18381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12853'. [ 1214.266653][T18401] ip6gre2: entered allmulticast mode [ 1214.535732][T18422] __nla_validate_parse: 1 callbacks suppressed [ 1214.535747][T18422] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12864'. [ 1214.647924][T18428] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.12865'. [ 1214.664320][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12865'. [ 1215.173174][T19231] net_ratelimit: 2 callbacks suppressed [ 1215.173194][T19231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.323000][ T6491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.124709][T19229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.363278][ T6488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.763651][T19235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.145183][T18395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1217.398349][T18442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.408811][T18442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.417366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.427128][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.045136][T18488] vlan1: entered promiscuous mode [ 1218.051470][T18488] hsr0: entered promiscuous mode [ 1218.063958][T18488] vlan1: entered allmulticast mode [ 1218.069133][T18488] hsr0: entered allmulticast mode [ 1218.075015][T18488] hsr_slave_0: entered allmulticast mode [ 1218.082484][T18488] hsr_slave_1: entered allmulticast mode [ 1218.246236][T18497] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12881'. [ 1218.408828][T18513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12886'. [ 1218.445776][ T6491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.567868][ T6491] IPVS: starting estimator thread 0... [ 1218.635211][T18527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12890'. [ 1218.662171][T18524] IPVS: using max 35 ests per chain, 84000 per kthread [ 1218.677320][T18530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12890'. [ 1218.754332][T18535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12892'. [ 1218.982094][T18545] xt_hashlimit: size too large, truncated to 1048576 [ 1219.014348][T18549] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12894'. [ 1219.036357][T18550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12897'. [ 1219.238752][T18563] lo speed is unknown, defaulting to 1000 [ 1219.255626][T18563] lo speed is unknown, defaulting to 1000 [ 1219.268491][T18563] lo speed is unknown, defaulting to 1000 [ 1219.293028][T18563] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1219.313179][T18567] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1219.327083][T18563] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1219.396700][T18563] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1219.447680][T18563] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 1219.481270][T18567] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1219.517429][T18563] lo speed is unknown, defaulting to 1000 [ 1219.549038][T18563] lo speed is unknown, defaulting to 1000 [ 1219.588620][T18563] lo speed is unknown, defaulting to 1000 [ 1219.619469][T18563] lo speed is unknown, defaulting to 1000 [ 1219.634600][T18563] lo speed is unknown, defaulting to 1000 [ 1219.649759][T18583] netlink: 'syz.4.12907': attribute type 12 has an invalid length. [ 1219.655246][T18563] lo speed is unknown, defaulting to 1000 [ 1219.698333][T18563] lo speed is unknown, defaulting to 1000 [ 1219.708627][T18563] lo speed is unknown, defaulting to 1000 [ 1219.815869][T18563] lo speed is unknown, defaulting to 1000 [ 1219.840710][T18563] lo speed is unknown, defaulting to 1000 [ 1219.849019][T18563] lo speed is unknown, defaulting to 1000 [ 1219.859551][T18563] lo speed is unknown, defaulting to 1000 [ 1219.900266][T18593] x_tables: unsorted entry at hook 2 [ 1220.056753][T18600] __nla_validate_parse: 1 callbacks suppressed [ 1220.056774][T18600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12911'. [ 1220.075407][T18606] netlink: 936 bytes leftover after parsing attributes in process `syz.3.12914'. [ 1220.116450][T18600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12911'. [ 1220.124810][T18606] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12914'. [ 1220.329991][T18618] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12915'. [ 1220.356266][T18618] net_ratelimit: 3 callbacks suppressed [ 1220.356285][T18618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.374774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.478010][T18618] netlink: 'syz.3.12915': attribute type 1 has an invalid length. [ 1220.523660][ T6488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.535524][T18621] syzkaller0: entered promiscuous mode [ 1220.541079][T18621] syzkaller0: entered allmulticast mode [ 1220.644228][T18634] ipt_REJECT: ECHOREPLY no longer supported. [ 1220.711754][T18639] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 1220.976562][T18645] netlink: 'syz.1.12924': attribute type 83 has an invalid length. [ 1221.001655][T18647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12923'. [ 1221.254729][T19229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.340080][T18665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12930'. [ 1221.371152][T18665] ip6gre1: entered promiscuous mode [ 1221.393576][T18665] ip6gre1: entered allmulticast mode [ 1221.426009][T18668] netlink: 'syz.3.12930': attribute type 6 has an invalid length. [ 1221.443748][T18668] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12930'. [ 1221.458451][T18657] netlink: 'syz.3.12930': attribute type 6 has an invalid length. [ 1221.471685][T18657] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12930'. [ 1221.485615][T18673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12931'. [ 1221.564317][ T6488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.671104][T18678] ip6gre1: entered allmulticast mode [ 1221.696534][T18681] netlink: 'syz.2.12937': attribute type 39 has an invalid length. [ 1221.877376][T18690] bond6: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1221.907515][T18690] bond6 (unregistering): Released all slaves [ 1221.939265][T18700] netlink: 'syz.1.12938': attribute type 1 has an invalid length. [ 1222.049423][T18703] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1222.156230][T18700] macvlan2: entered promiscuous mode [ 1222.167321][T18709] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input11 [ 1222.177970][T18700] macvlan2: entered allmulticast mode [ 1222.188584][T18700] bond1: entered promiscuous mode [ 1222.195641][T18700] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1222.208141][T18700] bond1: left promiscuous mode [ 1222.294545][T18719] tipc: Enabled bearer , priority 0 [ 1222.473864][T18706] tipc: Disabling bearer [ 1222.605748][ T6488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.621298][T18747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1222.702257][T18755] netlink: 'syz.3.12952': attribute type 1 has an invalid length. [ 1222.710896][T18754] netlink: 'syz.2.12953': attribute type 1 has an invalid length. [ 1222.721817][T18756] netlink: 'syz.4.12951': attribute type 10 has an invalid length. [ 1222.749595][T18755] bond1: entered promiscuous mode [ 1222.756554][T18755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1222.790097][T18754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1222.826637][T18759] bond2: (slave geneve2): making interface the new active one [ 1222.836131][T18759] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1222.848430][T19231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.944862][T18755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1222.953340][T18755] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1222.964504][T18755] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1222.978413][T18755] bond1: (slave vti0): making interface the new active one [ 1222.987020][T18755] vti0: entered promiscuous mode [ 1223.005897][T18755] bond1: (slave vti0): Enslaving as an active interface with an up link [ 1223.360122][T18783] syzkaller0: entered promiscuous mode [ 1223.370514][T18783] syzkaller0: entered allmulticast mode [ 1223.405008][T18783] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1223.449662][T18783] openvswitch: netlink: Flow actions attr not present in new flow. [ 1223.627354][T18809] gretap2: entered promiscuous mode [ 1223.641364][T18809] batman_adv: batadv0: Adding interface: gretap2 [ 1223.649324][T18809] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.688328][T18809] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1225.250696][T18900] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 1225.268762][T18900] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 1225.368029][T18897] bridge1: port 1(erspan0) entered disabled state [ 1225.382508][T18897] erspan0: left allmulticast mode [ 1225.388448][T18897] bridge1: port 1(erspan0) entered disabled state [ 1225.432394][T18906] __nla_validate_parse: 9 callbacks suppressed [ 1225.432412][T18906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12994'. [ 1225.496048][T18907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12993'. [ 1225.809567][T19115] net_ratelimit: 4 callbacks suppressed [ 1225.809584][T19115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.834372][T18897] bond0: (slave team0): Releasing backup interface [ 1225.884843][T19235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.171498][T18897] bridge_slave_0: left allmulticast mode [ 1226.185922][T18897] bridge_slave_0: left promiscuous mode [ 1226.199219][T18897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.260936][T18897] bridge_slave_1: left allmulticast mode [ 1226.277481][T18897] bridge_slave_1: left promiscuous mode [ 1226.289989][T18897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.328925][T18897] bond0: (slave bond_slave_0): Releasing backup interface [ 1226.387743][T18897] bond0: (slave bond_slave_1): Releasing backup interface [ 1226.440314][T18897] team0: Port device team_slave_0 removed [ 1226.505497][T18897] team0: Port device team_slave_1 removed [ 1226.527524][T18897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1226.572635][T18897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1226.673993][T18897] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1226.845152][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.921730][T18927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1227.007326][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.108288][T18935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1227.157979][T18937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13000'. [ 1227.197633][T18937] netlink: 'syz.5.13000': attribute type 7 has an invalid length. [ 1227.202755][T18935] syzkaller1: entered promiscuous mode [ 1227.216439][T18935] syzkaller1: entered allmulticast mode [ 1227.234807][T18937] netlink: 'syz.5.13000': attribute type 8 has an invalid length. [ 1227.305441][T18945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13005'. [ 1227.449290][T18947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1227.882292][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.890763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.059654][T18978] syzkaller0: entered promiscuous mode [ 1228.079333][T18978] syzkaller0: entered allmulticast mode [ 1230.510905][T19008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13021'. [ 1230.672164][T19009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13020'. [ 1230.696423][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13025'. [ 1230.805428][T19009] bond2: entered promiscuous mode [ 1230.829290][T19009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1230.864473][T19019] bond0: entered promiscuous mode [ 1230.886452][T19019] batadv0: entered promiscuous mode [ 1230.912543][T19019] debugfs: 'hsr1' already exists in 'hsr' [ 1230.936900][T19019] Cannot create hsr debugfs directory [ 1230.948875][T19019] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1230.975954][T19033] ipt_ECN: cannot use operation on non-tcp rule [ 1230.984244][T19019] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1231.011010][T19019] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1231.021058][T19019] bond0: left promiscuous mode [ 1231.029463][T19019] batadv0: left promiscuous mode [ 1231.062706][T19031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13028'. [ 1231.122581][ T6488] lo speed is unknown, defaulting to 1000 [ 1231.135106][ T6488] syú2: Port: 1 Link ACTIVE [ 1231.156715][T19043] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input12 [ 1231.413059][T19053] netlink: 'syz.3.13034': attribute type 1 has an invalid length. [ 1231.477944][T19053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1231.626514][T19070] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13036'. [ 1231.688789][T19076] net_ratelimit: 9 callbacks suppressed [ 1231.688807][T19076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1231.955968][T19091] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1231.971619][T19092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.027300][T19095] tipc: Started in network mode [ 1232.032499][T19095] tipc: Node identity ac14140f, cluster identity 4711 [ 1232.046759][T19095] tipc: New replicast peer: 255.255.255.255 [ 1232.057847][T19095] tipc: Enabled bearer , priority 10 [ 1232.071142][T19092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.099925][T19092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.129652][T19092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.129867][ T25] block nbd5: Possible stuck request ffff88802794e000: control (read@0,1024B). Runtime 30 seconds [ 1232.164973][T19092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.327296][T19108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13051'. [ 1232.429909][T19126] netlink: 'syz.4.13053': attribute type 8 has an invalid length. [ 1232.525765][T19111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13052'. [ 1232.537234][T19111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13052'. [ 1232.548937][T19111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13052'. [ 1232.652453][T19139] syzkaller0: entered promiscuous mode [ 1232.658115][T19139] syzkaller0: entered allmulticast mode [ 1232.747764][T19138] netlink: get zone limit has 4 unknown bytes [ 1233.015297][T19159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13067'. [ 1233.172076][ T5360] tipc: Node number set to 2886997007 [ 1233.780400][T19200] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1233.871207][T19207] erspan0: entered promiscuous mode [ 1233.888004][T19209] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1233.945522][T19212] bridge_slave_1: left promiscuous mode [ 1233.974080][T19212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.069701][T19212] bond1: (slave veth0_to_bond): Releasing active interface [ 1234.089601][T19216] netlink: 'syz.1.13083': attribute type 1 has an invalid length. [ 1234.096565][T19212] veth0_to_bond: left allmulticast mode [ 1234.134761][T19212] bond0: (slave bond_slave_0): Releasing backup interface [ 1234.189262][T19212] bond0: (slave bond_slave_1): Releasing backup interface [ 1234.262902][T19212] team0: Port device team_slave_1 removed [ 1234.279640][T19212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.287774][T19212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.300776][T19212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.308997][T19212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.323501][T19212] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1234.501796][T19246] netlink: 'syz.5.13091': attribute type 2 has an invalid length. [ 1234.518190][T19247] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1234.539267][T19252] netlink: 'syz.3.13088': attribute type 1 has an invalid length. [ 1234.596140][T19252] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1234.839287][T19275] nbd: must specify a device to reconfigure [ 1235.577040][T19313] nbd: must specify a device to reconfigure [ 1235.786685][T19318] 8021q: adding VLAN 0 to HW filter on device .` [ 1236.246315][T19337] __nla_validate_parse: 8 callbacks suppressed [ 1236.246336][T19337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13117'. [ 1236.354354][T19340] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13118'. [ 1236.422866][T19348] nbd: must specify a device to reconfigure [ 1236.437928][T19344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13120'. [ 1236.596881][T19352] netlink: 'syz.5.13122': attribute type 5 has an invalid length. [ 1236.629685][T19352] syzkaller0: entered promiscuous mode [ 1236.650881][T19352] syzkaller0: entered allmulticast mode [ 1236.827717][T19361] netlink: 80 bytes leftover after parsing attributes in process `syz.4.13126'. [ 1237.179206][T19375] nbd: couldn't find a device at index 2 [ 1237.845829][T19409] netlink: 'syz.2.13143': attribute type 2 has an invalid length. [ 1237.863355][T19409] netlink: 244 bytes leftover after parsing attributes in process `syz.2.13143'. [ 1237.980466][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13144'. [ 1238.051075][T19408] netlink: 'syz.4.13144': attribute type 14 has an invalid length. [ 1238.094961][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13144'. [ 1238.120388][T19408] netlink: 'syz.4.13144': attribute type 14 has an invalid length. [ 1238.152132][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13144'. [ 1238.361692][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13150'. [ 1238.374546][T19302] syz.3.13105 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1238.422077][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13150'. [ 1238.433690][T19302] CPU: 1 UID: 0 PID: 19302 Comm: syz.3.13105 Not tainted syzkaller #0 PREEMPT(full) [ 1238.433721][T19302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1238.433736][T19302] Call Trace: [ 1238.433746][T19302] [ 1238.433756][T19302] dump_stack_lvl+0xe8/0x150 [ 1238.433799][T19302] dump_header+0xd3/0x4b0 [ 1238.433833][T19302] oom_kill_process+0x3ab/0x970 [ 1238.433863][T19302] out_of_memory+0x1064/0x1480 [ 1238.433884][T19302] ? try_charge_memcg+0xbca/0x1590 [ 1238.433932][T19302] ? __pfx_out_of_memory+0x10/0x10 [ 1238.433959][T19302] ? do_raw_spin_unlock+0xf5/0x210 [ 1238.433998][T19302] try_charge_memcg+0xc74/0x1590 [ 1238.434051][T19302] ? __pfx_try_charge_memcg+0x10/0x10 [ 1238.434080][T19302] ? percpu_ref_tryget+0x15/0x180 [ 1238.434139][T19302] ? charge_memcg+0x20/0x2b0 [ 1238.434174][T19302] charge_memcg+0x19c/0x2b0 [ 1238.434207][T19302] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 1238.434239][T19302] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 1238.434276][T19302] swap_cache_alloc_folio+0x4de/0x990 [ 1238.434334][T19302] swap_cache_read_folio+0x44/0x120 [ 1238.434375][T19302] swap_cluster_readahead+0x3a0/0x640 [ 1238.434407][T19302] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1238.434445][T19302] ? get_vma_policy+0x27b/0x3c0 [ 1238.434480][T19302] swapin_readahead+0x19a/0xc10 [ 1238.434507][T19302] ? swap_table_get+0x1e/0x260 [ 1238.434529][T19302] ? swap_table_get+0x1e/0x260 [ 1238.434552][T19302] ? __pfx_swapin_readahead+0x10/0x10 [ 1238.434577][T19302] ? swap_table_get+0x1e/0x260 [ 1238.434597][T19302] ? swap_table_get+0x1e/0x260 [ 1238.434615][T19302] ? swap_table_get+0x1e/0x260 [ 1238.434637][T19302] ? swap_table_get+0x216/0x260 [ 1238.434660][T19302] ? swap_cache_get_folio+0x2e7/0x2f0 [ 1238.434689][T19302] do_swap_page+0x455/0x5060 [ 1238.434737][T19302] ? __pte_offset_map+0x29/0x240 [ 1238.434768][T19302] ? __lock_acquire+0x683/0x2cf0 [ 1238.434794][T19302] ? do_swap_page+0x124/0x5060 [ 1238.434828][T19302] ? __pfx_do_swap_page+0x10/0x10 [ 1238.434864][T19302] ? __pte_offset_map+0x1ae/0x240 [ 1238.434891][T19302] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1238.434937][T19302] handle_mm_fault+0x124c/0x3080 [ 1238.434985][T19302] ? handle_mm_fault+0xec/0x3080 [ 1238.435021][T19302] ? __pfx_handle_mm_fault+0x10/0x10 [ 1238.435043][T19302] ? lock_vma_under_rcu+0x45a/0x500 [ 1238.435104][T19302] do_user_addr_fault+0xa4d/0x1340 [ 1238.435151][T19302] ? trace_page_fault_user+0x84/0x1e0 [ 1238.435188][T19302] exc_page_fault+0x6a/0xc0 [ 1238.435226][T19302] asm_exc_page_fault+0x26/0x30 [ 1238.435249][T19302] RIP: 0033:0x7fa4a8b9deab [ 1238.435272][T19302] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 1238.435293][T19302] RSP: 002b:00007fa4a9b21028 EFLAGS: 00010217 [ 1238.435315][T19302] RAX: 000000000000000c RBX: 00007fa4a8e25fa0 RCX: ffffffffffffffe8 [ 1238.435332][T19302] RDX: 0000000000000048 RSI: 0000200000000640 RDI: 0000000000000000 [ 1238.435347][T19302] RBP: 00007fa4a8c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1238.435362][T19302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1238.435376][T19302] R13: 00007fa4a8e26038 R14: 00007fa4a8e25fa0 R15: 00007fff0530b4f8 [ 1238.435416][T19302] [ 1238.438992][T19302] memory: usage 307200kB, limit 307200kB, failcnt 962 [ 1238.797486][T19302] memory+swap: usage 304248kB, limit 9007199254740988kB, failcnt 0 [ 1238.856755][T19302] kmem: usage 289504kB, limit 9007199254740988kB, failcnt 0 [ 1238.913144][T19302] Memory cgroup stats for /syz3: [ 1238.913478][T19302] cache 0 [ 1238.962201][T19302] rss 0 [ 1238.977892][T19302] rss_huge 0 [ 1238.999659][T19302] shmem 0 [ 1239.010683][T19302] mapped_file 0 [ 1239.024940][T19302] dirty 0 [ 1239.041475][T19302] writeback 0 [ 1239.059288][T19302] workingset_refault_anon 9 [ 1239.079436][T19302] workingset_refault_file 17 [ 1239.102664][T19302] swap 172032 [ 1239.115169][T19302] swapcached 233472 [ 1239.126687][T19302] pgpgin 257245 [ 1239.140507][T19302] pgpgout 257239 [ 1239.147994][T19302] pgfault 461577 [ 1239.160897][T19302] pgmajfault 13 [ 1239.174837][T19302] inactive_anon 8192 [ 1239.198616][T19302] active_anon 16384 [ 1239.226526][T19302] inactive_file 0 [ 1239.241190][T19445] netlink: 'syz.4.13156': attribute type 21 has an invalid length. [ 1239.260447][T19302] active_file 0 [ 1239.276187][T19302] unevictable 0 [ 1239.294316][T19302] hierarchical_memory_limit 314572800 [ 1239.312911][T19302] hierarchical_memsw_limit 9223372036854771712 [ 1239.335844][T19302] total_cache 0 [ 1239.350262][T19302] total_rss 0 [ 1239.369069][T19302] total_rss_huge 0 [ 1239.388878][T19302] total_shmem 0 [ 1239.401269][T19302] total_mapped_file 0 [ 1239.414333][T19302] total_dirty 0 [ 1239.427277][T19302] total_writeback 0 [ 1239.438652][T19302] total_workingset_refault_anon 9 [ 1239.458560][T19302] total_workingset_refault_file 17 [ 1239.472862][T19455] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1239.485107][T19302] total_swap 172032 [ 1239.494871][T19302] total_swapcached 233472 [ 1239.502196][T19454] nbd: couldn't find a device at index 2 [ 1239.509963][T19302] total_pgpgin 257245 [ 1239.523222][T19302] total_pgpgout 257239 [ 1239.536528][T19302] total_pgfault 461577 [ 1239.547200][T19455] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1239.550676][T19302] total_pgmajfault 13 [ 1239.591240][T19302] total_inactive_anon 8192 [ 1239.602080][T19302] total_active_anon 16384 [ 1239.611823][T19302] total_inactive_file 0 [ 1239.623314][T19302] total_active_file 0 [ 1239.636667][T19302] total_unevictable 0 [ 1239.663071][T19302] anon_cost 0 [ 1239.675152][T19302] file_cost 0 [ 1239.685587][T19302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.13105,pid=19300,uid=0 [ 1239.719984][T19302] Memory cgroup out of memory: Killed process 19300 (syz.3.13105) total-vm:102304kB, anon-rss:1248kB, file-rss:22924kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1240.023227][T19474] xt_hashlimit: size too large, truncated to 1048576 [ 1240.118361][T19480] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1240.161028][ T5360] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1240.746061][T19504] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1240.775759][T19516] xt_NFQUEUE: number of total queues is 0 [ 1240.800172][T19516] openvswitch: netlink: Missing valid actions attribute. [ 1240.826481][T19516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1240.855634][T19514] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1241.308201][T19542] netlink: 'syz.2.13188': attribute type 1 has an invalid length. [ 1241.448183][T19542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1241.478857][T19542] __nla_validate_parse: 8 callbacks suppressed [ 1241.478888][T19542] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13188'. [ 1241.663577][T19550] bond3: (slave geneve3): making interface the new active one [ 1241.689005][T19550] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1241.709871][T19551] netlink: 404 bytes leftover after parsing attributes in process `syz.3.13189'. [ 1241.739643][T19551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13189'. [ 1241.763950][T19551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13189'. [ 1241.774142][T19551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13189'. [ 1242.047285][T19582] bond0: option ad_select: unable to set because the bond device is up [ 1242.078936][T19578] xt_TCPMSS: Only works on TCP SYN packets [ 1242.097619][T19578] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1242.178927][T19581] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 1242.194111][T19592] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13200'. [ 1242.224802][T19593] nbd: must specify a device to reconfigure [ 1242.233284][T19581] bond3: option packets_per_slave: allowed values 0 - 65535 [ 1242.246704][T19581] bond3 (unregistering): Released all slaves [ 1242.551100][T19615] netlink: 'syz.3.13207': attribute type 9 has an invalid length. [ 1242.779323][T19624] netlink: 'syz.1.13210': attribute type 1 has an invalid length. [ 1242.803166][T19624] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13210'. [ 1242.823647][T19624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13210'. [ 1242.863773][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13210'. [ 1243.018814][T19637] netlink: 'syz.2.13212': attribute type 1 has an invalid length. [ 1243.071570][T19637] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13212'. [ 1243.195173][T19648] netlink: 'syz.4.13215': attribute type 15 has an invalid length. [ 1243.526607][T19674] syzkaller0: entered promiscuous mode [ 1243.532485][T19674] syzkaller0: entered allmulticast mode [ 1243.992510][T19648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1244.200088][T19693] nbd: must specify a device to reconfigure [ 1244.355330][T19709] syzkaller0: entered promiscuous mode [ 1244.371982][T19709] syzkaller0: entered allmulticast mode [ 1244.705807][T19737] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1245.114461][T19730] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1245.354162][T19764] syzkaller0: entered promiscuous mode [ 1245.372560][T19764] syzkaller0: entered allmulticast mode [ 1245.441272][T19764] vlan2: entered promiscuous mode [ 1245.450305][T19764] hsr0: entered promiscuous mode [ 1245.457682][T19764] vlan2: entered allmulticast mode [ 1245.463225][T19764] hsr0: entered allmulticast mode [ 1245.468380][T19764] hsr_slave_0: entered allmulticast mode [ 1245.477106][T19764] hsr_slave_1: entered allmulticast mode [ 1245.554864][T19767] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 1245.590991][T19767] bond3 (unregistering): Released all slaves [ 1245.942746][T19787] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1246.303982][T19806] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1246.313525][T19806] bond5: (slave macvlan2): Enslaving as a backup interface with a down link [ 1246.569509][T19827] __nla_validate_parse: 10 callbacks suppressed [ 1246.569527][T19827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13266'. [ 1246.717619][T19835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13269'. [ 1247.182396][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13278'. [ 1247.232611][T19865] netlink: 'syz.4.13282': attribute type 12 has an invalid length. [ 1247.318193][T18223] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1247.346789][T18223] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1247.374210][T19877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13283'. [ 1247.388231][T18223] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1247.414023][T18223] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1247.901760][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13295'. [ 1247.926483][T19911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13295'. [ 1247.947233][T19913] openvswitch: netlink: Multiple metadata blocks provided [ 1247.956596][T19911] netlink: 244 bytes leftover after parsing attributes in process `syz.4.13295'. [ 1247.988962][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13294'. [ 1248.115534][T19920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1248.219142][T19925] atomic_op ffff88803448f198 conn xmit_atomic 0000000000000000 [ 1248.248029][T19926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13300'. [ 1248.276769][T19926] netlink: 'syz.3.13300': attribute type 7 has an invalid length. [ 1248.283500][T19932] netlink: 'syz.2.13303': attribute type 64 has an invalid length. [ 1248.311261][T19229] lo speed is unknown, defaulting to 1000 [ 1248.318424][T19926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13300'. [ 1248.320255][T19229] syú2: Port: 1 Link DOWN [ 1248.531086][T19945] bridge0: port 1(ipvlan3) entered blocking state [ 1248.541361][T19945] bridge0: port 1(ipvlan3) entered disabled state [ 1248.548672][T19945] ipvlan3: entered allmulticast mode [ 1248.555573][T19945] bridge0: entered allmulticast mode [ 1248.564327][T19945] ipvlan3: left allmulticast mode [ 1248.576620][T19945] bridge0: left allmulticast mode [ 1248.783359][T19965] syzkaller0: entered promiscuous mode [ 1248.789119][T19965] syzkaller0: entered allmulticast mode [ 1249.039738][T19979] nbd: must specify a size in bytes for the device [ 1249.081158][T19981] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1249.194478][T19988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1249.861691][T20033] FAULT_INJECTION: forcing a failure. [ 1249.861691][T20033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1249.892970][T20033] CPU: 0 UID: 0 PID: 20033 Comm: syz.3.13334 Not tainted syzkaller #0 PREEMPT(full) [ 1249.892993][T20033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1249.893003][T20033] Call Trace: [ 1249.893010][T20033] [ 1249.893017][T20033] dump_stack_lvl+0xe8/0x150 [ 1249.893049][T20033] should_fail_ex+0x40c/0x560 [ 1249.893073][T20033] _copy_from_user+0x2d/0xb0 [ 1249.893100][T20033] ___sys_sendmsg+0x1c6/0x360 [ 1249.893115][T20033] ? __lock_acquire+0x683/0x2cf0 [ 1249.893142][T20033] ? __pfx____sys_sendmsg+0x10/0x10 [ 1249.893188][T20033] ? __fget_files+0x2a/0x420 [ 1249.893209][T20033] ? __fget_files+0x3a2/0x420 [ 1249.893238][T20033] __x64_sys_sendmsg+0x1b1/0x290 [ 1249.893257][T20033] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1249.893293][T20033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.893314][T20033] do_syscall_64+0x174/0x580 [ 1249.893332][T20033] ? trace_irq_disable+0x3b/0x140 [ 1249.893356][T20033] ? clear_bhb_loop+0x40/0x90 [ 1249.893377][T20033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.893394][T20033] RIP: 0033:0x7fa4a8b9de99 [ 1249.893410][T20033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.893425][T20033] RSP: 002b:00007fa4a9b21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1249.893452][T20033] RAX: ffffffffffffffda RBX: 00007fa4a8e25fa0 RCX: 00007fa4a8b9de99 [ 1249.893465][T20033] RDX: 0000000004000004 RSI: 0000200000000380 RDI: 0000000000000004 [ 1249.893475][T20033] RBP: 00007fa4a9b21090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.893485][T20033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.893495][T20033] R13: 00007fa4a8e26038 R14: 00007fa4a8e25fa0 R15: 00007fff0530b4f8 [ 1249.893523][T20033] [ 1249.971618][T20036] netlink: 'syz.1.13335': attribute type 1 has an invalid length. [ 1250.221791][T20043] netlink: 'syz.3.13337': attribute type 1 has an invalid length. [ 1250.301343][T20043] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1250.835467][T20071] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1250.842012][T20071] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1250.890476][T20080] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1250.897040][T20080] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1251.884566][T20136] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1251.996260][T20143] syzkaller0: entered promiscuous mode [ 1252.025016][T20143] syzkaller0: entered allmulticast mode [ 1252.076270][T20150] netlink: 'syz.1.13359': attribute type 1 has an invalid length. [ 1252.165621][T20156] __nla_validate_parse: 4 callbacks suppressed [ 1252.165639][T20156] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13362'. [ 1252.204040][T20155] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13362'. [ 1252.290490][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13364'. [ 1252.321815][T20161] netlink: 'syz.4.13364': attribute type 6 has an invalid length. [ 1252.358661][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13364'. [ 1252.398054][T20161] netlink: 'syz.4.13364': attribute type 6 has an invalid length. [ 1252.505152][T20163] ip6t_srh: unknown srh match flags 4000 [ 1252.648283][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13370'. [ 1252.657969][T20185] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13370'. [ 1252.803226][T20194] netlink: 'syz.1.13372': attribute type 1 has an invalid length. [ 1252.813066][T20197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13371'. [ 1252.835220][T20191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13371'. [ 1252.913273][T20194] bond3: entered promiscuous mode [ 1252.933095][T20194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1252.949347][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13375'. [ 1253.013298][T20203] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1253.030165][T20203] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1253.045395][T20203] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1253.076546][T20203] bond3: (slave ip6gre2): making interface the new active one [ 1253.093816][T20203] ip6gre2: entered promiscuous mode [ 1253.107041][T20203] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 1253.172151][T20210] tipc: Started in network mode [ 1253.198257][T20210] tipc: Node identity b2e9f55405bb, cluster identity 4711 [ 1253.242612][T20210] tipc: Enabled bearer , priority 0 [ 1253.316812][T20225] netlink: 'syz.1.13381': attribute type 1 has an invalid length. [ 1253.381546][T20213] syzkaller0: entered promiscuous mode [ 1253.388003][T20213] syzkaller0: entered allmulticast mode [ 1253.399872][T20213] tipc: Resetting bearer [ 1253.501366][T20225] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1253.548567][T20227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.574726][T20227] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1253.629565][T20227] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 1253.852515][T18223] tipc: Resetting bearer [ 1253.869470][T20201] tipc: Resetting bearer [ 1256.451266][T20201] tipc: Disabling bearer [ 1256.485340][ T5360] tipc: Node number set to 3075667284 [ 1256.672898][T20260] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13390'. [ 1257.295076][T20306] syzkaller0: entered promiscuous mode [ 1257.311140][T20306] syzkaller0: entered allmulticast mode [ 1257.514308][T20321] __nla_validate_parse: 5 callbacks suppressed [ 1257.514328][T20321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13411'. [ 1257.559809][T20321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13411'. [ 1257.700630][T20328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13414'. [ 1257.751791][T20328] netlink: 'syz.4.13414': attribute type 1 has an invalid length. [ 1257.799715][T20328] bond6: entered promiscuous mode [ 1257.809513][T20328] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1257.916928][T20328] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1257.953322][T20328] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1258.003041][T20328] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1258.063988][T20328] bond6: (slave ip6gre1): making interface the new active one [ 1258.091955][T20328] ip6gre1: entered promiscuous mode [ 1258.114428][T20328] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 1258.556812][T20362] bond5: invalid ARP target 0.0.0.0 specified for addition [ 1258.572098][T20362] bond5: option arp_ip_target: invalid value (0) [ 1258.587140][T20362] bond5 (unregistering): Released all slaves [ 1258.948850][T20394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13430'. [ 1258.984815][T20403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13433'. [ 1259.394706][T20415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13437'. [ 1259.434672][T20422] nbd: must specify a device to reconfigure [ 1259.607595][T20433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1259.678634][T20438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13444'. [ 1259.786705][T20448] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13444'. [ 1259.799751][T20448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13444'. [ 1259.950063][T20457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13452'. [ 1260.260477][T20480] sock: sock_timestamping_bind_phc: sock not bind to device [ 1260.372049][T20487] netlink: 'syz.3.13460': attribute type 1 has an invalid length. [ 1260.800040][T20508] netlink: 'syz.2.13467': attribute type 10 has an invalid length. [ 1260.873018][T20513] hsr_slave_1 (unregistering): left promiscuous mode [ 1260.887399][T20518] netlink: 'syz.2.13467': attribute type 10 has an invalid length. [ 1260.939675][T20508] team0: Port device dummy0 added [ 1260.981072][T20518] team0: Port device dummy0 removed [ 1261.111171][T20522] netlink: 'syz.1.13473': attribute type 27 has an invalid length. [ 1261.143111][T20532] netlink: 'syz.4.13476': attribute type 2 has an invalid length. [ 1261.157440][T20532] netlink: 'syz.4.13476': attribute type 1 has an invalid length. [ 1261.898551][T20560] tipc: Failed to remove unknown binding: 66,1,1/3075667284:2498805958/2498805960 [ 1261.974205][T20532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1262.216715][ T25] block nbd5: Possible stuck request ffff88802794e000: control (read@0,1024B). Runtime 60 seconds [ 1262.294120][T20587] tipc: Enabling of bearer rejected, failed to enable media [ 1262.425655][T20592] netlink: 'syz.4.13492': attribute type 7 has an invalid length. [ 1262.452447][T20592] netlink: 'syz.4.13492': attribute type 8 has an invalid length. [ 1262.558473][T20597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1262.694656][T20609] __nla_validate_parse: 12 callbacks suppressed [ 1262.694678][T20609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13500'. [ 1263.007981][T20630] netlink: 256 bytes leftover after parsing attributes in process `syz.3.13507'. [ 1263.230289][T20640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13511'. [ 1263.548841][T20662] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 1263.956977][T20697] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1263.961631][T20696] netlink: 'syz.5.13527': attribute type 12 has an invalid length. [ 1263.963455][T20697] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1265.763371][T20783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13549'. [ 1266.108711][T20808] bond0: Device is already in use. [ 1266.189675][T20815] netlink: 'syz.2.13556': attribute type 1 has an invalid length. [ 1266.204643][T20816] xt_hashlimit: size too large, truncated to 1048576 [ 1266.209720][T20815] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13556'. [ 1266.399825][T20826] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13560'. [ 1266.617286][T20833] gretap0: entered allmulticast mode [ 1266.766554][T20834] wlan1 speed is unknown, defaulting to 1000 [ 1267.057194][T20860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13568'. [ 1267.235882][T20866] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13570'. [ 1267.448435][T20834] lo speed is unknown, defaulting to 1000 [ 1267.571084][T20881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13572'. [ 1267.600007][T20881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13572'. [ 1267.655925][T20881] sctp: [Deprecated]: syz.4.13572 (pid 20881) Use of int in maxseg socket option. [ 1267.655925][T20881] Use struct sctp_assoc_value instead [ 1267.788798][T20888] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13575'. [ 1267.819113][T20888] netlink: 'syz.5.13575': attribute type 1 has an invalid length. [ 1267.829707][T20888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13575'. [ 1267.853014][T20888] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13575'. [ 1267.928865][T20895] netlink: 92 bytes leftover after parsing attributes in process `syz.4.13574'. [ 1268.156663][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13578'. [ 1268.931462][T20950] netlink: 27 bytes leftover after parsing attributes in process `syz.2.13590'. [ 1268.988228][T20956] netlink: 'syz.5.13592': attribute type 1 has an invalid length. [ 1269.123559][T20956] bond6: entered promiscuous mode [ 1269.133012][T20969] netlink: 'syz.2.13596': attribute type 1 has an invalid length. [ 1269.142904][T20956] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1269.214022][T20966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13597'. [ 1269.219273][T20967] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1269.232000][T20966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1269.244854][T20974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13598'. [ 1269.255576][T20967] bond6: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 1269.267232][T20967] bond6: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 1269.280590][T20967] bond6: (slave ip6gre3): making interface the new active one [ 1269.288781][T20967] ip6gre3: entered promiscuous mode [ 1269.297026][T20967] bond6: (slave ip6gre3): Enslaving as an active interface with an up link [ 1269.309041][T20972] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 1269.524699][T20987] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13601'. [ 1269.807062][T21000] IPVS: set_ctl: invalid protocol: 108 100.1.1.2:20004 [ 1269.843878][T21003] syzkaller0: entered promiscuous mode [ 1269.864382][T21003] syzkaller0: entered allmulticast mode [ 1270.169256][T21017] x_tables: duplicate underflow at hook 2 [ 1270.202175][T21019] block nbd6: server does not support multiple connections per device. [ 1270.227360][T21019] block nbd6: shutting down sockets [ 1270.447472][T21046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13622'. [ 1270.472202][T21046] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1270.927713][T21075] 8021q: VLANs not supported on ip6_vti0 [ 1271.870148][T21143] netlink: 'syz.1.13648': attribute type 29 has an invalid length. [ 1271.884716][T21143] xt_connbytes: Forcing CT accounting to be enabled [ 1272.020703][T21144] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.100745][T18223] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.112988][T21151] FAULT_INJECTION: forcing a failure. [ 1272.112988][T21151] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.137464][T21151] CPU: 0 UID: 0 PID: 21151 Comm: syz.2.13649 Not tainted syzkaller #0 PREEMPT(full) [ 1272.137495][T21151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1272.137510][T21151] Call Trace: [ 1272.137519][T21151] [ 1272.137529][T21151] dump_stack_lvl+0xe8/0x150 [ 1272.137567][T21151] should_fail_ex+0x40c/0x560 [ 1272.137599][T21151] should_failslab+0xa8/0x100 [ 1272.137633][T21151] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1272.137659][T21151] ? local_lock_release+0x9c/0x160 [ 1272.137718][T21151] ? __alloc_skb+0x1d7/0x7a0 [ 1272.137763][T21151] ? __alloc_skb+0x1d7/0x7a0 [ 1272.137800][T21151] __alloc_skb+0x1d7/0x7a0 [ 1272.137836][T21151] netlink_sendmsg+0x5d4/0xb40 [ 1272.137871][T21151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1272.137899][T21151] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1272.137928][T21151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1272.137950][T21151] sock_sendmsg_nosec+0x13a/0x180 [ 1272.137982][T21151] ____sys_sendmsg+0x54e/0x850 [ 1272.138010][T21151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1272.138043][T21151] ? import_iovec+0x73/0xa0 [ 1272.138078][T21151] ___sys_sendmsg+0x2a5/0x360 [ 1272.138099][T21151] ? __lock_acquire+0x683/0x2cf0 [ 1272.138134][T21151] ? __pfx____sys_sendmsg+0x10/0x10 [ 1272.138197][T21151] ? __fget_files+0x2a/0x420 [ 1272.138224][T21151] ? __fget_files+0x3a2/0x420 [ 1272.138265][T21151] __x64_sys_sendmsg+0x1b1/0x290 [ 1272.138291][T21151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1272.138334][T21151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.138359][T21151] do_syscall_64+0x174/0x580 [ 1272.138381][T21151] ? trace_irq_disable+0x3b/0x140 [ 1272.138409][T21151] ? clear_bhb_loop+0x40/0x90 [ 1272.138436][T21151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.138465][T21151] RIP: 0033:0x7fb52699de99 [ 1272.138487][T21151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.138506][T21151] RSP: 002b:00007fb527951028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1272.138531][T21151] RAX: ffffffffffffffda RBX: 00007fb526c25fa0 RCX: 00007fb52699de99 [ 1272.138548][T21151] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1272.138563][T21151] RBP: 00007fb527951090 R08: 0000000000000000 R09: 0000000000000000 [ 1272.138577][T21151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1272.138591][T21151] R13: 00007fb526c26038 R14: 00007fb526c25fa0 R15: 00007ffdade902b8 [ 1272.138628][T21151] [ 1272.680461][T21166] xt_recent: Unsupported userspace flags (000000b1) [ 1272.716781][T21166] tunl0: entered promiscuous mode [ 1272.743043][T21166] netlink: 'syz.2.13657': attribute type 3 has an invalid length. [ 1272.874445][T21183] __nla_validate_parse: 11 callbacks suppressed [ 1272.874464][T21183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13660'. [ 1273.019910][T21183] bond5: (slave macvlan3): Error -98 calling set_mac_address [ 1273.150749][T21196] xt_TCPMSS: Only works on TCP SYN packets [ 1273.169665][T21198] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1273.180484][T21193] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1273.335509][T21208] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 1273.579883][T21232] syzkaller0: entered promiscuous mode [ 1273.627692][T21232] syzkaller0: entered allmulticast mode [ 1273.641480][T21236] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13673'. [ 1273.793168][ T5289] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1273.806268][T21237] netlink: 180 bytes leftover after parsing attributes in process `syz.3.13674'. [ 1273.831761][T21242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13675'. [ 1273.923648][T21244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1273.996159][T21249] netlink: 256 bytes leftover after parsing attributes in process `syz.5.13678'. [ 1274.005531][T21249] netlink: 'syz.5.13678': attribute type 9 has an invalid length. [ 1274.014852][T21249] openvswitch: netlink: IP tunnel dst address not specified [ 1274.023484][T21249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1274.060839][T21247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13677'. [ 1274.166693][T21256] FAULT_INJECTION: forcing a failure. [ 1274.166693][T21256] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.180116][T21257] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13680'. [ 1274.195167][T21256] CPU: 1 UID: 0 PID: 21256 Comm: syz.1.13682 Not tainted syzkaller #0 PREEMPT(full) [ 1274.195194][T21256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1274.195209][T21256] Call Trace: [ 1274.195218][T21256] [ 1274.195228][T21256] dump_stack_lvl+0xe8/0x150 [ 1274.195266][T21256] should_fail_ex+0x40c/0x560 [ 1274.195299][T21256] should_failslab+0xa8/0x100 [ 1274.195334][T21256] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1274.195361][T21256] ? skb_clone+0x212/0x3a0 [ 1274.195384][T21256] ? skb_clone+0x212/0x3a0 [ 1274.195413][T21256] skb_clone+0x212/0x3a0 [ 1274.195439][T21256] __netlink_deliver_tap+0x413/0x860 [ 1274.195472][T21256] ? netlink_deliver_tap+0x2e/0x1b0 [ 1274.195494][T21256] netlink_deliver_tap+0x19c/0x1b0 [ 1274.195517][T21256] netlink_unicast+0x77f/0x940 [ 1274.195558][T21256] netlink_sendmsg+0x813/0xb40 [ 1274.195589][T21256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1274.195615][T21256] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1274.195642][T21256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1274.195662][T21256] sock_sendmsg_nosec+0x13a/0x180 [ 1274.195691][T21256] ____sys_sendmsg+0x54e/0x850 [ 1274.195716][T21256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1274.195747][T21256] ? import_iovec+0x73/0xa0 [ 1274.195791][T21256] ___sys_sendmsg+0x2a5/0x360 [ 1274.195812][T21256] ? __lock_acquire+0x683/0x2cf0 [ 1274.195848][T21256] ? __pfx____sys_sendmsg+0x10/0x10 [ 1274.195912][T21256] ? __fget_files+0x2a/0x420 [ 1274.195941][T21256] ? __fget_files+0x3a2/0x420 [ 1274.195982][T21256] __x64_sys_sendmsg+0x1b1/0x290 [ 1274.196008][T21256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1274.196050][T21256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.196075][T21256] do_syscall_64+0x174/0x580 [ 1274.196096][T21256] ? trace_irq_disable+0x3b/0x140 [ 1274.196124][T21256] ? clear_bhb_loop+0x40/0x90 [ 1274.196163][T21256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.196182][T21256] RIP: 0033:0x7fb52639de99 [ 1274.196201][T21256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1274.196218][T21256] RSP: 002b:00007fb527244028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1274.196238][T21256] RAX: ffffffffffffffda RBX: 00007fb526625fa0 RCX: 00007fb52639de99 [ 1274.196252][T21256] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1274.196267][T21256] RBP: 00007fb527244090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.196278][T21256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.196288][T21256] R13: 00007fb526626038 R14: 00007fb526625fa0 R15: 00007fff20ca90d8 [ 1274.196319][T21256] [ 1274.196366][T21256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13682'. [ 1274.229055][T21258] netlink: 244 bytes leftover after parsing attributes in process `syz.2.13681'. [ 1274.906078][T21294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13690'. [ 1275.080164][T21305] netlink: 'syz.5.13693': attribute type 39 has an invalid length. [ 1275.570991][T21282] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1275.575397][T21321] FAULT_INJECTION: forcing a failure. [ 1275.575397][T21321] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.628041][T21305] hsr_slave_0: left promiscuous mode [ 1275.634070][T21321] CPU: 0 UID: 0 PID: 21321 Comm: syz.4.13694 Not tainted syzkaller #0 PREEMPT(full) [ 1275.634096][T21321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1275.634110][T21321] Call Trace: [ 1275.634119][T21321] [ 1275.634128][T21321] dump_stack_lvl+0xe8/0x150 [ 1275.634165][T21321] should_fail_ex+0x40c/0x560 [ 1275.634196][T21321] should_failslab+0xa8/0x100 [ 1275.634230][T21321] __kmalloc_noprof+0xfe/0x720 [ 1275.634256][T21321] ? is_bpf_text_address+0x26/0x2b0 [ 1275.634286][T21321] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1275.634315][T21321] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1275.634352][T21321] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1275.634395][T21321] genl_family_rcv_msg_doit+0xda/0x340 [ 1275.634431][T21321] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1275.634469][T21321] ? apparmor_capable+0x126/0x170 [ 1275.634499][T21321] ? bpf_lsm_capable+0x9/0x20 [ 1275.634525][T21321] ? security_capable+0x7e/0x2c0 [ 1275.634563][T21321] genl_rcv_msg+0x614/0x7a0 [ 1275.634597][T21321] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1275.634622][T21321] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1275.634656][T21321] ? __pfx_nl80211_connect+0x10/0x10 [ 1275.634686][T21321] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1275.634727][T21321] netlink_rcv_skb+0x226/0x4a0 [ 1275.634750][T21321] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1275.634779][T21321] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1275.634817][T21321] ? down_read+0x2be/0x330 [ 1275.634846][T21321] genl_rcv+0x28/0x40 [ 1275.634870][T21321] netlink_unicast+0x7bb/0x940 [ 1275.634918][T21321] netlink_sendmsg+0x813/0xb40 [ 1275.634967][T21321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.634996][T21321] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1275.635025][T21321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.635047][T21321] sock_sendmsg_nosec+0x13a/0x180 [ 1275.635078][T21321] ____sys_sendmsg+0x54e/0x850 [ 1275.635103][T21321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1275.635134][T21321] ? import_iovec+0x73/0xa0 [ 1275.635168][T21321] ___sys_sendmsg+0x2a5/0x360 [ 1275.635186][T21321] ? __lock_acquire+0x683/0x2cf0 [ 1275.635220][T21321] ? __pfx____sys_sendmsg+0x10/0x10 [ 1275.635283][T21321] ? __fget_files+0x2a/0x420 [ 1275.635312][T21321] ? __fget_files+0x3a2/0x420 [ 1275.635353][T21321] __x64_sys_sendmsg+0x1b1/0x290 [ 1275.635379][T21321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1275.635423][T21321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.635447][T21321] do_syscall_64+0x174/0x580 [ 1275.635470][T21321] ? clear_bhb_loop+0x40/0x90 [ 1275.635498][T21321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.635521][T21321] RIP: 0033:0x7f914ad9de99 [ 1275.635542][T21321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.635561][T21321] RSP: 002b:00007f914bc85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1275.635584][T21321] RAX: ffffffffffffffda RBX: 00007f914b025fa0 RCX: 00007f914ad9de99 [ 1275.635601][T21321] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1275.635615][T21321] RBP: 00007f914bc85090 R08: 0000000000000000 R09: 0000000000000000 [ 1275.635629][T21321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1275.635642][T21321] R13: 00007f914b026038 R14: 00007f914b025fa0 R15: 00007ffc5de79ae8 [ 1275.635686][T21321] [ 1275.637416][T21305] hsr_slave_1: left promiscuous mode [ 1276.522908][ T4944] Bluetooth: hci1: command 0x0406 tx timeout [ 1278.703213][T21343] bond6: entered allmulticast mode [ 1278.708466][T21343] ip6gre3: entered allmulticast mode [ 1278.784131][T21343] bond6: left allmulticast mode [ 1278.811301][T21343] ip6gre3: left allmulticast mode [ 1278.944551][T21363] __nla_validate_parse: 1 callbacks suppressed [ 1278.944570][T21363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13705'. [ 1279.009396][T21368] netlink: 232 bytes leftover after parsing attributes in process `syz.5.13706'. [ 1279.195260][T21379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1279.341297][T21385] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1279.487740][ T4994] udevd[4994]: worker [17921] /devices/virtual/block/nbd5 is taking a long time [ 1279.883114][T21425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13730'. [ 1280.023785][T21437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13733'. [ 1280.089350][T21439] netlink: 'syz.1.13734': attribute type 1 has an invalid length. [ 1280.136696][T21439] bond5: entered promiscuous mode [ 1280.142691][T21439] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1280.159764][T21443] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1280.174847][T21443] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1280.185387][T21443] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1280.234392][T21439] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1280.246937][T21439] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1280.286443][T21449] bond0: entered promiscuous mode [ 1280.293546][T21449] batadv0: entered promiscuous mode [ 1280.300148][T21449] debugfs: 'hsr1' already exists in 'hsr' [ 1280.307364][T21449] Cannot create hsr debugfs directory [ 1280.315805][T21449] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1280.334989][T21449] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1280.343531][T21449] bond0: left promiscuous mode [ 1280.349313][T21449] batadv0: left promiscuous mode [ 1280.924400][T21474] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1281.076340][T21481] syzkaller0: entered allmulticast mode [ 1281.126608][T21481] 8021q: VLANs not supported on ipvlan1 [ 1281.272339][T21493] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1281.298883][T21490] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13748'. [ 1281.439353][T21502] netlink: 'syz.4.13750': attribute type 1 has an invalid length. [ 1281.994540][T21536] bridge0: port 1(gretap0) entered blocking state [ 1282.001378][T21536] bridge0: port 1(gretap0) entered disabled state [ 1282.008634][T21536] gretap0: entered allmulticast mode [ 1282.017819][T21536] gretap0: entered promiscuous mode [ 1282.038720][T21536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13760'. [ 1282.057298][T21536] vlan3: entered promiscuous mode [ 1282.063019][T21536] bond0: entered promiscuous mode [ 1282.263893][T21543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13762'. [ 1282.268529][T21551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13764'. [ 1282.284538][T21543] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13762'. [ 1282.284718][T21547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13762'. [ 1282.306875][T21551] netlink: 'syz.5.13764': attribute type 1 has an invalid length. [ 1282.314907][T21551] netlink: 'syz.5.13764': attribute type 2 has an invalid length. [ 1282.501473][T21559] xfrm1: entered promiscuous mode [ 1282.510600][T21559] xfrm1: entered allmulticast mode [ 1282.626127][T21573] netlink: 'syz.2.13771': attribute type 16 has an invalid length. [ 1282.876849][T21586] syzkaller0: entered promiscuous mode [ 1282.882614][T21586] syzkaller0: entered allmulticast mode [ 1283.216544][T21604] netlink: 'syz.5.13780': attribute type 6 has an invalid length. [ 1283.443180][T21608] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.471723][T21614] FAULT_INJECTION: forcing a failure. [ 1283.471723][T21614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1283.499885][T21614] CPU: 0 UID: 0 PID: 21614 Comm: syz.3.13783 Not tainted syzkaller #0 PREEMPT(full) [ 1283.499909][T21614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1283.499921][T21614] Call Trace: [ 1283.499929][T21614] [ 1283.499936][T21614] dump_stack_lvl+0xe8/0x150 [ 1283.499970][T21614] should_fail_ex+0x40c/0x560 [ 1283.499996][T21614] _copy_from_user+0x2d/0xb0 [ 1283.500043][T21614] ___sys_sendmsg+0x1c6/0x360 [ 1283.500062][T21614] ? __lock_acquire+0x683/0x2cf0 [ 1283.500094][T21614] ? __pfx____sys_sendmsg+0x10/0x10 [ 1283.500152][T21614] ? __fget_files+0x2a/0x420 [ 1283.500178][T21614] ? __fget_files+0x3a2/0x420 [ 1283.500218][T21614] __x64_sys_sendmsg+0x1b1/0x290 [ 1283.500241][T21614] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1283.500280][T21614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.500302][T21614] do_syscall_64+0x174/0x580 [ 1283.500321][T21614] ? trace_irq_disable+0x3b/0x140 [ 1283.500347][T21614] ? clear_bhb_loop+0x40/0x90 [ 1283.500372][T21614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.500392][T21614] RIP: 0033:0x7fa4a8b9de99 [ 1283.500411][T21614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.500429][T21614] RSP: 002b:00007fa4a9b21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1283.500458][T21614] RAX: ffffffffffffffda RBX: 00007fa4a8e25fa0 RCX: 00007fa4a8b9de99 [ 1283.500473][T21614] RDX: 0000000004000004 RSI: 0000200000000380 RDI: 0000000000000004 [ 1283.500499][T21614] RBP: 00007fa4a9b21090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.500511][T21614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.500522][T21614] R13: 00007fa4a8e26038 R14: 00007fa4a8e25fa0 R15: 00007fff0530b4f8 [ 1283.500553][T21614] [ 1283.840813][T21608] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.954513][T21608] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.084537][T21636] bond6: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1284.105180][T21608] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.148057][T21623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1284.160435][T21629] __nla_validate_parse: 12 callbacks suppressed [ 1284.160451][T21629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13786'. [ 1284.180902][T21629] nbd: couldn't find a device at index -1 [ 1284.307332][T21645] netlink: 100 bytes leftover after parsing attributes in process `syz.2.13791'. [ 1284.318067][T21645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13791'. [ 1284.349947][T21643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13790'. [ 1284.441260][T18223] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.500297][T21656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13794'. [ 1284.528712][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.599319][T21661] atomic_op ffff888029f8c198 conn xmit_atomic 0000000000000000 [ 1284.624524][T18223] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.644588][T21663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13797'. [ 1284.666754][T18223] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.712577][T21668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13798'. [ 1284.841184][T21677] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1284.871454][T21677] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1284.905064][T21677] veth1_to_bridge: entered allmulticast mode [ 1284.916228][T21677] veth1_to_bridge: entered promiscuous mode [ 1284.923636][T21677] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 1284.961077][T21677] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1284.968397][T21677] bridge0: port 3(veth1_to_bridge) entered listening state [ 1285.101670][T21696] netlink: 'syz.5.13807': attribute type 19 has an invalid length. [ 1285.126373][T21696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13807'. [ 1285.188021][T21700] netlink: 'syz.3.13808': attribute type 58 has an invalid length. [ 1285.201391][T18223] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1285.206935][T21700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13808'. [ 1285.229137][T18223] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1285.247098][T18223] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1285.297996][T18223] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1285.644609][ C0] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1285.906913][T21735] veth0: entered promiscuous mode [ 1285.998177][T21734] veth0: left promiscuous mode [ 1286.049208][T21742] FAULT_INJECTION: forcing a failure. [ 1286.049208][T21742] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.065489][T21742] CPU: 1 UID: 0 PID: 21742 Comm: syz.3.13823 Not tainted syzkaller #0 PREEMPT(full) [ 1286.065517][T21742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1286.065531][T21742] Call Trace: [ 1286.065541][T21742] [ 1286.065550][T21742] dump_stack_lvl+0xe8/0x150 [ 1286.065588][T21742] should_fail_ex+0x40c/0x560 [ 1286.065621][T21742] should_failslab+0xa8/0x100 [ 1286.065655][T21742] __kmalloc_noprof+0xfe/0x720 [ 1286.065686][T21742] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1286.065725][T21742] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1286.065765][T21742] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1286.065806][T21742] genl_family_rcv_msg_doit+0xda/0x340 [ 1286.065843][T21742] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1286.065878][T21742] ? __pfx_genl_get_cmd+0x10/0x10 [ 1286.065903][T21742] ? stack_trace_save+0xa9/0x100 [ 1286.065928][T21742] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1286.065965][T21742] ? __lock_acquire+0x683/0x2cf0 [ 1286.066006][T21742] genl_rcv_msg+0x614/0x7a0 [ 1286.066054][T21742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1286.066092][T21742] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1286.066134][T21742] netlink_rcv_skb+0x226/0x4a0 [ 1286.066154][T21742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1286.066180][T21742] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1286.066215][T21742] ? down_read+0x2be/0x330 [ 1286.066239][T21742] genl_rcv+0x28/0x40 [ 1286.066260][T21742] netlink_unicast+0x7bb/0x940 [ 1286.066299][T21742] netlink_sendmsg+0x813/0xb40 [ 1286.066328][T21742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1286.066351][T21742] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1286.066376][T21742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1286.066396][T21742] sock_sendmsg_nosec+0x13a/0x180 [ 1286.066423][T21742] ____sys_sendmsg+0x54e/0x850 [ 1286.066449][T21742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1286.066477][T21742] ? import_iovec+0x73/0xa0 [ 1286.066508][T21742] ___sys_sendmsg+0x2a5/0x360 [ 1286.066526][T21742] ? __lock_acquire+0x683/0x2cf0 [ 1286.066556][T21742] ? __pfx____sys_sendmsg+0x10/0x10 [ 1286.066611][T21742] ? __fget_files+0x2a/0x420 [ 1286.066635][T21742] ? __fget_files+0x3a2/0x420 [ 1286.066671][T21742] __x64_sys_sendmsg+0x1b1/0x290 [ 1286.066693][T21742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1286.066738][T21742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.066760][T21742] do_syscall_64+0x174/0x580 [ 1286.066778][T21742] ? trace_irq_disable+0x3b/0x140 [ 1286.066802][T21742] ? clear_bhb_loop+0x40/0x90 [ 1286.066826][T21742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.066845][T21742] RIP: 0033:0x7fa4a8b9de99 [ 1286.066863][T21742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.066880][T21742] RSP: 002b:00007fa4a9b21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1286.066900][T21742] RAX: ffffffffffffffda RBX: 00007fa4a8e25fa0 RCX: 00007fa4a8b9de99 [ 1286.066914][T21742] RDX: 0000000004000004 RSI: 0000200000000380 RDI: 0000000000000004 [ 1286.066927][T21742] RBP: 00007fa4a9b21090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.066938][T21742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.066949][T21742] R13: 00007fa4a8e26038 R14: 00007fa4a8e25fa0 R15: 00007fff0530b4f8 [ 1286.066981][T21742] [ 1286.403266][T21744] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13824'. [ 1286.750158][T21767] netlink: 'syz.4.13831': attribute type 1 has an invalid length. [ 1286.793355][T21776] netlink: 'syz.3.13834': attribute type 1 has an invalid length. [ 1286.930157][T21776] bond7: entered promiscuous mode [ 1286.939347][T21776] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1286.952662][T21777] macvtap0: entered allmulticast mode [ 1286.963761][T21777] veth0_macvtap: entered allmulticast mode [ 1287.194025][T21801] netlink: 'syz.4.13839': attribute type 3 has an invalid length. [ 1287.395468][T21820] x_tables: duplicate underflow at hook 1 [ 1288.466583][T21892] bond7: option fail_over_mac: invalid value (16) [ 1288.485818][T21892] bond7 (unregistering): Released all slaves [ 1288.777065][T21915] netlink: 'syz.4.13878': attribute type 1 has an invalid length. [ 1288.864094][T21915] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1288.938906][T21915] netlink: 'syz.4.13878': attribute type 10 has an invalid length. [ 1289.008346][T21915] dummy0: entered promiscuous mode [ 1289.022419][T21935] xt_cgroup: path and classid specified [ 1289.197319][T21939] __nla_validate_parse: 46 callbacks suppressed [ 1289.197339][T21939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13885'. [ 1289.750202][T21974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13896'. [ 1289.774754][T21977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13898'. [ 1289.900390][T13899] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 1290.101741][T21999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13903'. [ 1290.120701][T22007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13904'. [ 1290.132904][T21999] netlink: 'syz.2.13903': attribute type 1 has an invalid length. [ 1290.140910][T22007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13904'. [ 1290.163553][T21999] netlink: 'syz.2.13903': attribute type 1 has an invalid length. [ 1290.396195][T22017] SET target dimension over the limit! [ 1290.821088][T22041] SET target dimension over the limit! [ 1291.853154][T22043] veth0_macvtap: left allmulticast mode [ 1291.862312][T22043] macvtap0: left allmulticast mode [ 1291.996823][T22043] gtp0: left promiscuous mode [ 1292.011884][T22043] gtp0: left allmulticast mode [ 1292.063409][T22043] gretap1: left promiscuous mode [ 1292.072432][T22043] gretap1: left allmulticast mode [ 1292.081120][T22043] vlan1: left promiscuous mode [ 1292.092214][T22043] hsr0: left promiscuous mode [ 1292.102532][T22043] vlan1: left allmulticast mode [ 1292.107683][T22043] hsr0: left allmulticast mode [ 1292.113414][T22043] hsr_slave_0: left allmulticast mode [ 1292.118851][T22043] hsr_slave_1: left allmulticast mode [ 1292.134400][T22043] ip6gre1: left allmulticast mode [ 1292.151603][T22043] gretap2: left promiscuous mode [ 1292.157579][T22043] bond2: left promiscuous mode [ 1292.330043][ T25] block nbd5: Possible stuck request ffff88802794e000: control (read@0,1024B). Runtime 90 seconds [ 1292.341537][T22043] bond3: left promiscuous mode [ 1292.352527][T22043] ip6gre2: left promiscuous mode [ 1292.415646][T22043] bond5: left promiscuous mode [ 1292.437189][T22043] vlan3: left promiscuous mode [ 1292.448174][T22043] bond0: left promiscuous mode [ 1292.564256][T18223] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.595667][T18223] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.623062][T18223] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.636266][T18223] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.646362][T18223] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.657830][T18223] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.670251][T18223] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.713451][T18223] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.744709][T22076] xt_hashlimit: overflow, try lower: 3/0 [ 1292.819410][T22072] netlink: 'syz.5.13921': attribute type 1 has an invalid length. [ 1292.927356][T22072] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1292.957230][T22074] bond7: entered promiscuous mode [ 1292.973006][T22074] bond7: entered allmulticast mode [ 1292.994479][T22098] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13928'. [ 1293.010891][T22092] veth13: entered allmulticast mode [ 1293.024531][T22092] bond7: (slave veth13): Enslaving as an active interface with a down link [ 1293.109832][T22100] IPv6: sit1: Disabled Multicast RS [ 1293.116555][T22100] sit1: entered allmulticast mode [ 1293.151734][T22103] IPv6: sit1: Disabled Multicast RS [ 1293.159734][T22103] sit1: entered allmulticast mode [ 1293.286214][T22091] syzkaller0: entered promiscuous mode [ 1293.297255][T22091] syzkaller0: entered allmulticast mode [ 1296.117336][T22168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13942'. [ 1296.456752][T22190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13949'. [ 1296.488334][T22195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13949'. [ 1296.551001][T22195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13949'. [ 1296.565390][T22190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13949'. [ 1296.754001][T22206] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13953'. [ 1296.815947][T22213] netlink: 'syz.4.13955': attribute type 9 has an invalid length. [ 1296.824958][T22215] netlink: 'syz.3.13956': attribute type 6 has an invalid length. [ 1296.846502][T22213] netlink: 'syz.4.13955': attribute type 6 has an invalid length. [ 1297.261902][T22241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13962'. [ 1297.321134][T22240] syzkaller0: entered promiscuous mode [ 1297.336545][T22240] syzkaller0: entered allmulticast mode [ 1297.383233][T22240] netlink: 'syz.2.13964': attribute type 48 has an invalid length. [ 1297.391382][T22240] netlink: 'syz.2.13964': attribute type 4 has an invalid length. [ 1297.408109][T22240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13964'. [ 1297.459950][T22249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13967'. [ 1297.592447][T22256] 8021q: VLANs not supported on ip_vti0 [ 1297.993868][T22281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13974'. [ 1298.443783][T22312] syzkaller0: entered promiscuous mode [ 1298.456975][T22312] syzkaller0: entered allmulticast mode [ 1298.472546][T22312] netlink: 'syz.4.13982': attribute type 49 has an invalid length. [ 1298.481407][T22314] netlink: 'syz.3.13983': attribute type 9 has an invalid length. [ 1299.911611][T22369] xt_CT: No such helper "snmp" [ 1314.069403][ T8455] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1314.086355][ T8455] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1314.097444][ T8455] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1314.113128][ T8455] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1314.121579][ T8455] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1314.143884][T12517] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1314.166285][T22378] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1314.176901][T22378] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1314.185257][T22378] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1314.197399][T22378] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1314.569779][T22374] wlan1 speed is unknown, defaulting to 1000 [ 1314.708067][T22374] lo speed is unknown, defaulting to 1000 [ 1314.708067][T22376] wlan1 speed is unknown, defaulting to 1000 [ 1314.913431][T22376] lo speed is unknown, defaulting to 1000 [ 1315.140531][T22374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.166298][T22374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.182221][T22374] bridge_slave_0: entered allmulticast mode [ 1315.204052][T22374] bridge_slave_0: entered promiscuous mode [ 1315.224924][T22374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.243075][T22374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.262263][T22374] bridge_slave_1: entered allmulticast mode [ 1315.270329][T22374] bridge_slave_1: entered promiscuous mode [ 1315.308454][ T4944] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1315.330093][ T4944] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1315.357620][ T4944] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1315.368829][ T4944] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1315.376837][ T4944] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1315.418420][T22378] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1315.439012][T22378] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1315.447942][T22378] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1315.459259][T22378] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1315.473062][T22378] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1315.558645][ T4944] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1315.575349][ T4944] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1315.584905][ T4944] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1315.599097][ T4944] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1315.607435][ T4944] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1315.693667][T22374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1315.706624][T22374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1315.854293][T22374] team0: Port device team_slave_0 added [ 1315.898434][T22374] team0: Port device team_slave_1 added [ 1316.057270][T22374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.075729][T22374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.123909][T22374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.154193][T22374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.161168][T22374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.200591][T22374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1316.213477][ T4944] Bluetooth: hci4: command tx timeout [ 1316.282624][ T4944] Bluetooth: hci6: command tx timeout [ 1316.470224][T22374] hsr_slave_0: entered promiscuous mode [ 1316.477466][T22374] hsr_slave_1: entered promiscuous mode [ 1316.484071][T22374] debugfs: 'hsr0' already exists in 'hsr' [ 1316.489833][T22374] Cannot create hsr debugfs directory [ 1316.498729][T22376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.506250][T22376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.513703][T22376] bridge_slave_0: entered allmulticast mode [ 1316.521473][T22376] bridge_slave_0: entered promiscuous mode [ 1316.549311][T22376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.559579][T22376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.568837][T22376] bridge_slave_1: entered allmulticast mode [ 1316.578010][T22376] bridge_slave_1: entered promiscuous mode [ 1316.685314][T22406] wlan1 speed is unknown, defaulting to 1000 [ 1316.700505][T22376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.725640][T22376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1316.832596][T22376] team0: Port device team_slave_0 added [ 1316.841471][T22376] team0: Port device team_slave_1 added [ 1316.922867][T22376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.929877][T22376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.957465][T22376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.979494][T22376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.992367][T22376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.019824][T22376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.030945][T22406] lo speed is unknown, defaulting to 1000 [ 1317.045139][T22408] wlan1 speed is unknown, defaulting to 1000 [ 1317.164099][T22376] hsr_slave_0: entered promiscuous mode [ 1317.171161][T22376] hsr_slave_1: entered promiscuous mode [ 1317.178853][T22376] debugfs: 'hsr0' already exists in 'hsr' [ 1317.184792][T22376] Cannot create hsr debugfs directory [ 1317.337595][T22413] wlan1 speed is unknown, defaulting to 1000 [ 1317.351723][T22408] lo speed is unknown, defaulting to 1000 [ 1317.482049][ T4944] Bluetooth: hci7: command tx timeout [ 1317.563675][ T4944] Bluetooth: hci8: command tx timeout [ 1317.590028][T22413] lo speed is unknown, defaulting to 1000 [ 1317.724493][ T4944] Bluetooth: hci9: command tx timeout [ 1317.966847][T22406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.974831][T22406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.982445][T22406] bridge_slave_0: entered allmulticast mode [ 1317.989686][T22406] bridge_slave_0: entered promiscuous mode [ 1318.029176][T22406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.036497][T22406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.044961][T22406] bridge_slave_1: entered allmulticast mode [ 1318.053344][T22406] bridge_slave_1: entered promiscuous mode [ 1318.120028][T22406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.150646][T22406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.216724][T22408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.224225][T22408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.231449][T22408] bridge_slave_0: entered allmulticast mode [ 1318.239680][T22408] bridge_slave_0: entered promiscuous mode [ 1318.252257][T22406] team0: Port device team_slave_0 added [ 1318.264910][T22408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.272252][T22408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.279434][T22408] bridge_slave_1: entered allmulticast mode [ 1318.285635][ T4944] Bluetooth: hci4: command tx timeout [ 1318.292365][T22408] bridge_slave_1: entered promiscuous mode [ 1318.301274][T22406] team0: Port device team_slave_1 added [ 1318.362758][ T4944] Bluetooth: hci6: command tx timeout [ 1318.387072][T22408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.399514][T22408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.409562][T22406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.417323][T22406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.444412][T22406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.457392][T22406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.464480][T22406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.491071][T22406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.570565][T22408] team0: Port device team_slave_0 added [ 1318.586809][T22413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.596002][T22413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.604148][T22413] bridge_slave_0: entered allmulticast mode [ 1318.611333][T22413] bridge_slave_0: entered promiscuous mode [ 1318.623688][T22408] team0: Port device team_slave_1 added [ 1318.640296][T22413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.647621][T22413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.656310][T22413] bridge_slave_1: entered allmulticast mode [ 1318.663867][T22413] bridge_slave_1: entered promiscuous mode [ 1318.688193][T22406] hsr_slave_0: entered promiscuous mode [ 1318.695032][T22406] hsr_slave_1: entered promiscuous mode [ 1318.701196][T22406] debugfs: 'hsr0' already exists in 'hsr' [ 1318.707373][T22406] Cannot create hsr debugfs directory [ 1318.738026][T22408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.745956][T22408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.773205][T22408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.799154][T22413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.809878][T22408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.818290][T22408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.848402][T22408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.873188][T22413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.948298][T22413] team0: Port device team_slave_0 added [ 1318.978438][T22408] hsr_slave_0: entered promiscuous mode [ 1318.985873][T22408] hsr_slave_1: entered promiscuous mode [ 1318.992891][T22408] debugfs: 'hsr0' already exists in 'hsr' [ 1318.998641][T22408] Cannot create hsr debugfs directory [ 1319.007762][T22413] team0: Port device team_slave_1 added [ 1319.071694][T22413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1319.079205][T22413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.106423][T22413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1319.135912][T22413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.144138][T22413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.171958][T22413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.333642][T22413] hsr_slave_0: entered promiscuous mode [ 1319.340271][T22413] hsr_slave_1: entered promiscuous mode [ 1319.347108][T22413] debugfs: 'hsr0' already exists in 'hsr' [ 1319.353025][T22413] Cannot create hsr debugfs directory [ 1319.563129][ T4944] Bluetooth: hci7: command tx timeout [ 1319.658327][ T4944] Bluetooth: hci8: command tx timeout [ 1319.749984][T22413] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.803152][T22378] Bluetooth: hci9: command tx timeout [ 1319.846352][T22413] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.947605][T22413] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.051492][T22413] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.362638][ T4944] Bluetooth: hci4: command tx timeout [ 1320.447441][ T4944] Bluetooth: hci6: command tx timeout [ 1321.642277][ T4944] Bluetooth: hci7: command tx timeout [ 1321.722094][ T4944] Bluetooth: hci8: command tx timeout [ 1321.883598][ T4944] Bluetooth: hci9: command tx timeout [ 1322.369019][ T25] block nbd5: Possible stuck request ffff88802794e000: control (read@0,1024B). Runtime 120 seconds [ 1322.442913][ T4944] Bluetooth: hci4: command tx timeout [ 1322.523115][ T4944] Bluetooth: hci6: command tx timeout [ 1323.723005][ T4944] Bluetooth: hci7: command tx timeout [ 1323.812712][ T4944] Bluetooth: hci8: command tx timeout [ 1323.962082][ T4944] Bluetooth: hci9: command tx timeout [ 1352.443126][ T25] block nbd5: Possible stuck request ffff88802794e000: control (read@0,1024B). Runtime 150 seconds [ 1374.119521][T22378] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1374.136695][T22378] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1374.144825][T22378] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1374.168542][ T9448] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1374.168570][T22378] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1374.186198][ T9448] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1374.196933][ T9448] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1374.205992][ T9448] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1374.216615][ T9448] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1374.224517][ T9448] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1374.638858][T22641] wlan1 speed is unknown, defaulting to 1000 [ 1374.789507][T22643] wlan1 speed is unknown, defaulting to 1000 [ 1374.789507][T22641] lo speed is unknown, defaulting to 1000 [ 1375.000521][T22643] lo speed is unknown, defaulting to 1000 [ 1375.191009][T22641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.198825][T22641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.205127][ T4944] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1375.207090][T22641] bridge_slave_0: entered allmulticast mode [ 1375.222786][T22641] bridge_slave_0: entered promiscuous mode [ 1375.228784][ T4944] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1375.237369][ T4944] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1375.245103][T22641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.245275][T22641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.245455][T22641] bridge_slave_1: entered allmulticast mode [ 1375.250261][T22641] bridge_slave_1: entered promiscuous mode [ 1375.276742][ T4944] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1375.284900][ T4944] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1375.404154][T22641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.427679][T22641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1375.498500][T22641] team0: Port device team_slave_0 added [ 1375.508313][T22641] team0: Port device team_slave_1 added [ 1375.561124][T22641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.569768][T22641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.596671][T22641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.615717][T22641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.622836][T22641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.650686][T22641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.757063][T22641] hsr_slave_0: entered promiscuous mode [ 1375.764358][T22641] hsr_slave_1: entered promiscuous mode [ 1375.770511][T22641] debugfs: 'hsr0' already exists in 'hsr' [ 1375.776894][T22641] Cannot create hsr debugfs directory [ 1375.898977][T22643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.907580][T22643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.918047][T22643] bridge_slave_0: entered allmulticast mode [ 1375.925654][T22643] bridge_slave_0: entered promiscuous mode [ 1375.949806][T22643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.958821][T22643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.966780][T22643] bridge_slave_1: entered allmulticast mode [ 1375.974966][T22643] bridge_slave_1: entered promiscuous mode [ 1376.002162][T22671] wlan1 speed is unknown, defaulting to 1000 [ 1376.045572][T22643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.105169][T22643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.264155][T22643] team0: Port device team_slave_0 added [ 1376.282198][T12517] Bluetooth: hci11: command tx timeout [ 1376.289250][ T4944] Bluetooth: hci10: command tx timeout [ 1376.307981][T22643] team0: Port device team_slave_1 added [ 1376.361437][T12517] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1376.386720][T12517] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1376.397913][T12517] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1376.418431][T12517] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1376.430066][T12517] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1376.499486][ T4944] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1376.516862][ T4944] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1376.525637][ T4944] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1376.533776][ T4944] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1376.554045][ T4944] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1376.653312][T22643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.660315][T22643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.687664][T22643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.698876][T22671] lo speed is unknown, defaulting to 1000 [ 1376.703701][T22643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.711613][T22643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.746276][T22643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.006939][T22643] hsr_slave_0: entered promiscuous mode [ 1377.023555][T22643] hsr_slave_1: entered promiscuous mode [ 1377.030041][T22643] debugfs: 'hsr0' already exists in 'hsr' [ 1377.052839][T22643] Cannot create hsr debugfs directory [ 1377.322047][T12517] Bluetooth: hci12: command tx timeout [ 1377.463436][T22691] wlan1 speed is unknown, defaulting to 1000 [ 1377.786776][T22691] lo speed is unknown, defaulting to 1000 [ 1377.801832][T22689] wlan1 speed is unknown, defaulting to 1000 [ 1377.866814][T22671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.875882][T22671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.884294][T22671] bridge_slave_0: entered allmulticast mode [ 1377.893404][T22671] bridge_slave_0: entered promiscuous mode [ 1377.958682][T22671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.968928][T22671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.985553][T22671] bridge_slave_1: entered allmulticast mode [ 1377.997885][T22671] bridge_slave_1: entered promiscuous mode [ 1378.100296][T22671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.116183][T22671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.174774][T22689] lo speed is unknown, defaulting to 1000 [ 1378.199541][T22671] team0: Port device team_slave_0 added [ 1378.209268][T22671] team0: Port device team_slave_1 added [ 1378.281612][T22671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1378.288882][T22671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.316747][T22671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1378.349801][T22671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1378.357311][T22671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.383673][T12517] Bluetooth: hci10: command tx timeout [ 1378.383721][T12517] Bluetooth: hci11: command tx timeout [ 1378.396756][T22671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1378.522155][ T4944] Bluetooth: hci13: command tx timeout [ 1378.565331][T22671] hsr_slave_0: entered promiscuous mode [ 1378.577185][T22671] hsr_slave_1: entered promiscuous mode [ 1378.586939][T22671] debugfs: 'hsr0' already exists in 'hsr' [ 1378.593728][T22671] Cannot create hsr debugfs directory [ 1378.602418][ T4944] Bluetooth: hci14: command tx timeout [ 1378.813791][T22691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.821022][T22691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.829574][T22691] bridge_slave_0: entered allmulticast mode [ 1378.837294][T22691] bridge_slave_0: entered promiscuous mode [ 1378.871303][T22691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.878586][T22691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.887445][T22691] bridge_slave_1: entered allmulticast mode [ 1378.895596][T22691] bridge_slave_1: entered promiscuous mode [ 1378.967584][T22691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.989865][T22691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.047366][T22691] team0: Port device team_slave_0 added [ 1379.066901][T22691] team0: Port device team_slave_1 added [ 1379.138736][T22691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1379.146100][T22691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.175612][T22691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1379.189127][T22691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.197440][T22691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.226433][T22691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1379.356151][T22689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.363835][T22689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.371175][T22689] bridge_slave_0: entered allmulticast mode [ 1379.379946][T22689] bridge_slave_0: entered promiscuous mode [ 1379.388614][T22689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.396194][T22689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.404241][T22689] bridge_slave_1: entered allmulticast mode [ 1379.404423][ T4944] Bluetooth: hci12: command tx timeout [ 1379.413732][T22689] bridge_slave_1: entered promiscuous mode [ 1379.433029][T22691] hsr_slave_0: entered promiscuous mode [ 1379.439603][T22691] hsr_slave_1: entered promiscuous mode [ 1379.446162][T22691] debugfs: 'hsr0' already exists in 'hsr' [ 1379.452712][T22691] Cannot create hsr debugfs directory [ 1379.518281][T22689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.543173][T22689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.599894][T22689] team0: Port device team_slave_0 added [ 1379.615234][T22689] team0: Port device team_slave_1 added [ 1379.695425][T22689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1379.703736][T22689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.730103][T22689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1379.751664][T22689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.759084][T22689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.786369][T22689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1379.870605][T22689] hsr_slave_0: entered promiscuous mode [ 1379.878210][T22689] hsr_slave_1: entered promiscuous mode [ 1379.885114][T22689] debugfs: 'hsr0' already exists in 'hsr' [ 1379.890913][T22689] Cannot create hsr debugfs directory [ 1380.442579][ T4944] Bluetooth: hci11: command tx timeout [ 1380.447983][T12517] Bluetooth: hci10: command tx timeout [ 1380.602979][T12517] Bluetooth: hci13: command tx timeout [ 1380.682346][T12517] Bluetooth: hci14: command tx timeout [ 1381.482031][T12517] Bluetooth: hci12: command tx timeout [ 1382.523057][T12517] Bluetooth: hci10: command tx timeout [ 1382.530553][ T25] block nbd5: Possible stuck request ffff88802794e000: control (read@0,1024B). Runtime 180 seconds [ 1382.541336][T12517] Bluetooth: hci11: command tx timeout [ 1382.683507][ T4944] Bluetooth: hci13: command tx timeout [ 1382.761968][ T4944] Bluetooth: hci14: command tx timeout [ 1383.562631][ T4944] Bluetooth: hci12: command tx timeout [ 1383.664737][ T4994] udevd[4994]: worker [17921] /devices/virtual/block/nbd5 timeout; kill it [ 1383.674742][ T4994] udevd[4994]: seq 51106 '/devices/virtual/block/nbd5' killed [ 1384.763645][ T4944] Bluetooth: hci13: command tx timeout [ 1384.842153][ T4944] Bluetooth: hci14: command tx timeout [ 1407.485798][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 1409.566747][T12517] Bluetooth: hci5: command 0x0406 tx timeout [ 1412.603699][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1412.613997][ T25] block nbd5: Possible stuck request ffff88802794e000: control (read@0,1024B). Runtime 210 seconds [ 1434.210710][T12517] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1434.236383][T12517] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1434.249086][T12517] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1434.251617][T22378] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1434.269141][T12517] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1434.277972][T12517] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1434.294572][T22378] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1434.305289][T22378] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1434.315082][T22378] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1434.323394][T22378] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1434.717343][T22741] wlan1 speed is unknown, defaulting to 1000 [ 1434.857122][T22741] lo speed is unknown, defaulting to 1000 [ 1434.857130][T22739] wlan1 speed is unknown, defaulting to 1000 [ 1435.064530][T22739] lo speed is unknown, defaulting to 1000 [ 1435.265922][ T4944] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1435.279618][ T4944] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1435.288216][ T4944] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1435.304560][ T4944] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1435.315735][ T4944] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1435.330553][T22741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.343179][T22741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.357530][T22741] bridge_slave_0: entered allmulticast mode [ 1435.377172][T22741] bridge_slave_0: entered promiscuous mode [ 1435.394710][T22741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.408305][T22741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.417049][T22741] bridge_slave_1: entered allmulticast mode [ 1435.427305][T22741] bridge_slave_1: entered promiscuous mode [ 1435.501616][T22741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1435.528579][T22741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1435.622786][T22741] team0: Port device team_slave_0 added [ 1435.632937][T22741] team0: Port device team_slave_1 added [ 1435.679463][T22741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1435.690070][T22741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.718044][T22741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1435.731381][T22741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1435.740800][T22741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.770461][T22741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1435.892989][T22741] hsr_slave_0: entered promiscuous mode [ 1435.900202][T22741] hsr_slave_1: entered promiscuous mode [ 1435.907460][T22741] debugfs: 'hsr0' already exists in 'hsr' [ 1435.914331][T22741] Cannot create hsr debugfs directory [ 1435.984999][T22739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.992479][T22739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.999653][T22739] bridge_slave_0: entered allmulticast mode [ 1436.007466][T22739] bridge_slave_0: entered promiscuous mode [ 1436.026800][T22768] wlan1 speed is unknown, defaulting to 1000 [ 1436.027130][T22739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.041735][T22739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.049907][T22739] bridge_slave_1: entered allmulticast mode [ 1436.058272][T22739] bridge_slave_1: entered promiscuous mode [ 1436.155339][T22739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1436.201476][T22739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1436.330204][T22739] team0: Port device team_slave_0 added [ 1436.339617][T22739] team0: Port device team_slave_1 added [ 1436.364027][ T9448] Bluetooth: hci15: command tx timeout [ 1436.373855][ T9448] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1436.391231][ T9448] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1436.401541][ T9448] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1436.409528][ T9448] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1436.417409][ T9448] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1436.445257][T22378] Bluetooth: hci16: command tx timeout [ 1436.509831][T22739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1436.517118][T22739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1436.545621][T22739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1436.559581][T22768] lo speed is unknown, defaulting to 1000 [ 1436.567449][T22739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1436.577403][T22739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1436.611613][T22739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1436.780271][T22739] hsr_slave_0: entered promiscuous mode [ 1436.794890][T22739] hsr_slave_1: entered promiscuous mode [ 1436.801292][T22739] debugfs: 'hsr0' already exists in 'hsr' [ 1436.807150][T22739] Cannot create hsr debugfs directory [ 1437.039835][T22785] wlan1 speed is unknown, defaulting to 1000 [ 1437.395121][T22785] lo speed is unknown, defaulting to 1000 [ 1437.402124][ T9448] Bluetooth: hci17: command tx timeout [ 1437.435853][ T4944] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1437.455596][ T4944] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1437.464941][ T4944] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1437.477089][ T4944] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1437.489356][ T4944] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1437.523530][T22768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.532518][T22768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.539863][T22768] bridge_slave_0: entered allmulticast mode [ 1437.549636][T22768] bridge_slave_0: entered promiscuous mode [ 1437.559453][T22768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.574573][T22768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.582235][T22768] bridge_slave_1: entered allmulticast mode [ 1437.590107][T22768] bridge_slave_1: entered promiscuous mode [ 1437.699943][T22768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1437.720092][T22768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1437.792617][T22768] team0: Port device team_slave_0 added [ 1437.814080][T22768] team0: Port device team_slave_1 added [ 1437.872710][T22768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.880187][T22768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.907597][T22768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1437.951492][T22768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1437.959076][T22768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.987825][T22768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.127209][T22768] hsr_slave_0: entered promiscuous mode [ 1438.136162][T22768] hsr_slave_1: entered promiscuous mode [ 1438.143887][T22768] debugfs: 'hsr0' already exists in 'hsr' [ 1438.149667][T22768] Cannot create hsr debugfs directory [ 1438.195157][T22803] wlan1 speed is unknown, defaulting to 1000 [ 1438.442087][T22817] Bluetooth: hci15: command tx timeout [ 1438.523066][T22817] Bluetooth: hci18: command tx timeout [ 1438.533634][T22817] Bluetooth: hci16: command tx timeout [ 1438.637394][T22803] lo speed is unknown, defaulting to 1000 [ 1438.705950][T22785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.713821][T22785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.721101][T22785] bridge_slave_0: entered allmulticast mode [ 1438.728502][T22785] bridge_slave_0: entered promiscuous mode [ 1438.753485][T22785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.760666][T22785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.769422][T22785] bridge_slave_1: entered allmulticast mode [ 1438.777027][T22785] bridge_slave_1: entered promiscuous mode [ 1438.850416][T22785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1438.865840][T22785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1438.926296][T22785] team0: Port device team_slave_0 added [ 1438.939180][T22785] team0: Port device team_slave_1 added [ 1438.997657][T22785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1439.006095][T22785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1439.034308][T22785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1439.054488][T22785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1439.061639][T22785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1439.088604][T22785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1439.187555][T22785] hsr_slave_0: entered promiscuous mode [ 1439.196535][T22785] hsr_slave_1: entered promiscuous mode [ 1439.204149][T22785] debugfs: 'hsr0' already exists in 'hsr' [ 1439.209898][T22785] Cannot create hsr debugfs directory [ 1439.460510][T22803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.468078][T22803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.475999][T22803] bridge_slave_0: entered allmulticast mode [ 1439.483541][T22819] Bluetooth: hci17: command tx timeout [ 1439.491701][T22803] bridge_slave_0: entered promiscuous mode [ 1439.500363][T22803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.508517][T22803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.515908][T22803] bridge_slave_1: entered allmulticast mode [ 1439.523775][T22803] bridge_slave_1: entered promiscuous mode [ 1439.562594][T22819] Bluetooth: hci19: command tx timeout [ 1439.599424][T22803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1439.615445][T22803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1439.687465][T22803] team0: Port device team_slave_0 added [ 1439.714653][T22803] team0: Port device team_slave_1 added [ 1439.744428][T22803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1439.751368][T22803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1439.778460][T22803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1439.791158][T22803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1439.799980][T22803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1439.826929][T22803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1439.893911][T22803] hsr_slave_0: entered promiscuous mode [ 1439.900417][T22803] hsr_slave_1: entered promiscuous mode [ 1439.906982][T22803] debugfs: 'hsr0' already exists in 'hsr' [ 1439.912920][T22803] Cannot create hsr debugfs directory [ 1440.283051][T22819] Bluetooth: hci6: command 0x0406 tx timeout [ 1440.289158][T22816] Bluetooth: hci8: command 0x0406 tx timeout [ 1440.305253][T22819] Bluetooth: hci9: command 0x0406 tx timeout [ 1440.321003][T22816] Bluetooth: hci4: command 0x0406 tx timeout [ 1440.338227][T22819] Bluetooth: hci7: command 0x0406 tx timeout [ 1440.524746][T22378] Bluetooth: hci15: command tx timeout [ 1440.602367][T22378] Bluetooth: hci16: command tx timeout [ 1440.602390][ T9448] Bluetooth: hci18: command tx timeout [ 1441.562125][ T9448] Bluetooth: hci17: command tx timeout [ 1441.645419][ T9448] Bluetooth: hci19: command tx timeout [ 1442.602938][ T9448] Bluetooth: hci15: command tx timeout [ 1442.683365][ T9448] Bluetooth: hci16: command tx timeout [ 1442.689132][ T25] block nbd5: Possible stuck request ffff88802794e000: control (read@0,1024B). Runtime 240 seconds [ 1442.697695][ T9448] Bluetooth: hci18: command tx timeout [ 1443.645111][ T9448] Bluetooth: hci17: command tx timeout [ 1443.722266][ T9448] Bluetooth: hci19: command tx timeout [ 1444.761978][ T9448] Bluetooth: hci18: command tx timeout [ 1445.802620][ T9448] Bluetooth: hci19: command tx timeout [ 1445.884001][ T31] INFO: task syz.5.13984:22319 blocked for more than 143 seconds. [ 1445.893519][ T31] Not tainted syzkaller #0 [ 1445.898507][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1445.907971][ T31] task:syz.5.13984 state:D stack:25808 pid:22319 tgid:22318 ppid:13231 task_flags:0x480140 flags:0x00080002 [ 1445.920283][ T31] Call Trace: [ 1445.924417][ T31] [ 1445.927505][ T31] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1445.932401][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1445.937551][ T31] ? __pfx___schedule+0x10/0x10 [ 1445.943393][ T31] ? schedule+0x90/0x2b0 [ 1445.947708][ T31] schedule+0x164/0x2b0 [ 1445.952527][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 1445.958180][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1445.964537][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 1445.970960][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1445.977291][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 1445.984084][ T31] nbd_set_size+0x454/0x680 [ 1445.988695][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 1445.994204][ T31] ? nla_memcpy+0x5b/0xc0 [ 1445.998718][ T31] nbd_genl_reconfigure+0x7e9/0x1e80 [ 1446.004629][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1446.010419][ T31] ? rcu_is_watching+0x15/0xb0 [ 1446.016378][ T31] ? trace_kmalloc+0x2a/0xf0 [ 1446.021085][ T31] ? __kmalloc_noprof+0x396/0x720 [ 1446.026542][ T31] ? __nla_parse+0x40/0x60 [ 1446.032084][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1446.046829][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1446.062478][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 1446.073216][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1446.084194][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1446.103737][ T31] genl_rcv_msg+0x614/0x7a0 [ 1446.114387][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1446.130319][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1446.136889][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1446.141695][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1446.147258][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1446.152644][ T31] ? down_read+0x2be/0x330 [ 1446.157150][ T31] genl_rcv+0x28/0x40 [ 1446.161176][ T31] netlink_unicast+0x7bb/0x940 [ 1446.166296][ T31] netlink_sendmsg+0x813/0xb40 [ 1446.171118][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1446.176993][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1446.182091][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1446.187395][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1446.192614][ T31] ____sys_sendmsg+0x54e/0x850 [ 1446.197399][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1446.203630][ T31] ? import_iovec+0x73/0xa0 [ 1446.208271][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1446.213192][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1446.218177][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1446.223478][ T31] ? futex_wake+0x51b/0x5f0 [ 1446.228111][ T31] ? __fget_files+0x2a/0x420 [ 1446.233324][ T31] ? __fget_files+0x3a2/0x420 [ 1446.238015][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1446.243627][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1446.249117][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.255488][ T31] do_syscall_64+0x174/0x580 [ 1446.260176][ T31] ? trace_irq_disable+0x3b/0x140 [ 1446.265866][ T31] ? clear_bhb_loop+0x40/0x90 [ 1446.270608][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.276603][ T31] RIP: 0033:0x7fed9ed9de99 [ 1446.281053][ T31] RSP: 002b:00007fed9fbe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1446.290130][ T31] RAX: ffffffffffffffda RBX: 00007fed9f025fa0 RCX: 00007fed9ed9de99 [ 1446.298749][ T31] RDX: 0000000004040000 RSI: 0000200000000380 RDI: 0000000000000004 [ 1446.306820][ T31] RBP: 00007fed9ee33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1446.314910][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1446.323589][ T31] R13: 00007fed9f026038 R14: 00007fed9f025fa0 R15: 00007ffc11f67ca8 [ 1446.331598][ T31] [ 1446.334712][ T31] INFO: task syz.3.13988:22328 blocked for more than 143 seconds. [ 1446.342857][ T31] Not tainted syzkaller #0 [ 1446.347818][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1446.357052][ T31] task:syz.3.13988 state:D stack:27872 pid:22328 tgid:22327 ppid:17039 task_flags:0x400040 flags:0x00080002 [ 1446.369413][ T31] Call Trace: [ 1446.372824][ T31] [ 1446.375791][ T31] __schedule+0x17d9/0x56c0 [ 1446.380341][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1446.385968][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1446.390943][ T31] ? __pfx___schedule+0x10/0x10 [ 1446.395966][ T31] ? schedule+0x90/0x2b0 [ 1446.400259][ T31] schedule+0x164/0x2b0 [ 1446.404571][ T31] schedule_preempt_disabled+0x13/0x30 [ 1446.410087][ T31] __mutex_lock+0x7bf/0x1550 [ 1446.415326][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1446.420107][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1446.424928][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1446.430024][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 1446.435474][ T31] ? radix_tree_lookup+0x240/0x290 [ 1446.440731][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1446.446105][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1446.451186][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1446.456663][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1446.461453][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1446.466578][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1446.472433][ T31] ? down_read+0x2be/0x330 [ 1446.476858][ T31] genl_rcv+0x28/0x40 [ 1446.480839][ T31] netlink_unicast+0x7bb/0x940 [ 1446.485710][ T31] netlink_sendmsg+0x813/0xb40 [ 1446.490512][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1446.495914][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1446.500884][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1446.506769][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1446.511873][ T31] __sys_sendto+0x408/0x5a0 [ 1446.516473][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1446.521587][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 1446.527369][ T31] __x64_sys_sendto+0xde/0x100 [ 1446.532350][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.538464][ T31] do_syscall_64+0x174/0x580 [ 1446.543973][ T31] ? trace_irq_disable+0x3b/0x140 [ 1446.549046][ T31] ? clear_bhb_loop+0x40/0x90 [ 1446.554063][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.559989][ T31] RIP: 0033:0x7fa4a8b5e6ce [ 1446.564469][ T31] RSP: 002b:00007fa4a9b1fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1446.573435][ T31] RAX: ffffffffffffffda RBX: 00007fa4a9b216c0 RCX: 00007fa4a8b5e6ce [ 1446.581420][ T31] RDX: 0000000000000020 RSI: 00007fa4a9b20000 RDI: 0000000000000004 [ 1446.589512][ T31] RBP: 0000000000000000 R08: 00007fa4a9b1ff04 R09: 000000000000000c [ 1446.597550][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1446.606545][ T31] R13: 00007fa4a9b1ff58 R14: 00007fa4a9b20000 R15: 0000000000000000 [ 1446.614659][ T31] [ 1446.617735][ T31] INFO: task syz.3.13988:22334 blocked for more than 144 seconds. [ 1446.625694][ T31] Not tainted syzkaller #0 [ 1446.630667][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1446.639958][ T31] task:syz.3.13988 state:D stack:26784 pid:22334 tgid:22327 ppid:17039 task_flags:0x400040 flags:0x00080002 [ 1446.653235][ T31] Call Trace: [ 1446.656557][ T31] [ 1446.659487][ T31] __schedule+0x17d9/0x56c0 [ 1446.664670][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1446.669625][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1446.674743][ T31] ? __pfx___schedule+0x10/0x10 [ 1446.679647][ T31] ? schedule+0x90/0x2b0 [ 1446.684335][ T31] schedule+0x164/0x2b0 [ 1446.688561][ T31] schedule_preempt_disabled+0x13/0x30 [ 1446.694794][ T31] __mutex_lock+0x7bf/0x1550 [ 1446.699448][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1446.704350][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1446.709074][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1446.714224][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 1446.719393][ T31] ? radix_tree_lookup+0x240/0x290 [ 1446.725224][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1446.729751][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1446.734889][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1446.740339][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1446.745212][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1446.750272][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1446.756151][ T31] ? down_read+0x2be/0x330 [ 1446.760593][ T31] genl_rcv+0x28/0x40 [ 1446.766699][ T31] netlink_unicast+0x7bb/0x940 [ 1446.771669][ T31] netlink_sendmsg+0x813/0xb40 [ 1446.776590][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1446.782589][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1446.787561][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1446.792918][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1446.797966][ T31] __sys_sendto+0x408/0x5a0 [ 1446.802594][ T31] ? lapic_next_event+0x11/0x20 [ 1446.807543][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1446.813072][ T31] ? errseq_sample+0x40/0x70 [ 1446.817702][ T31] ? irqentry_exit+0x218/0x8f0 [ 1446.822588][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.828698][ T31] __x64_sys_sendto+0xde/0x100 [ 1446.833565][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.839634][ T31] do_syscall_64+0x174/0x580 [ 1446.844885][ T31] ? trace_irq_disable+0x3b/0x140 [ 1446.849975][ T31] ? clear_bhb_loop+0x40/0x90 [ 1446.854809][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.860751][ T31] RIP: 0033:0x7fa4a8b5e6ce [ 1446.865275][ T31] RSP: 002b:00007fa4a9afee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1446.874372][ T31] RAX: ffffffffffffffda RBX: 00007fa4a9b006c0 RCX: 00007fa4a8b5e6ce [ 1446.882496][ T31] RDX: 0000000000000020 RSI: 00007fa4a9aff000 RDI: 0000000000000006 [ 1446.890516][ T31] RBP: 0000000000000000 R08: 00007fa4a9afef04 R09: 000000000000000c [ 1446.898611][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1446.907142][ T31] R13: 00007fa4a9afef58 R14: 00007fa4a9aff000 R15: 0000000000000000 [ 1446.915250][ T31] [ 1446.918326][ T31] INFO: task syz.4.13993:22344 blocked for more than 144 seconds. [ 1446.932885][ T31] Not tainted syzkaller #0 [ 1446.937914][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1446.947180][ T31] task:syz.4.13993 state:D stack:28808 pid:22344 tgid:22343 ppid:14149 task_flags:0x400040 flags:0x00080002 [ 1446.959207][ T31] Call Trace: [ 1446.962573][ T31] [ 1446.965524][ T31] __schedule+0x17d9/0x56c0 [ 1446.970038][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1446.975696][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1446.980687][ T31] ? unwind_next_frame+0x8f/0x2550 [ 1446.986040][ T31] ? __pfx___schedule+0x10/0x10 [ 1446.991001][ T31] ? schedule+0x90/0x2b0 [ 1446.995368][ T31] schedule+0x164/0x2b0 [ 1446.999567][ T31] schedule_preempt_disabled+0x13/0x30 [ 1447.005846][ T31] __mutex_lock+0x7bf/0x1550 [ 1447.010497][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1447.015370][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1447.020097][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1447.025235][ T31] ? stack_trace_save+0xa9/0x100 [ 1447.030317][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1447.035933][ T31] ? radix_tree_lookup+0x240/0x290 [ 1447.041072][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1447.045747][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1447.050825][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1447.055903][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1447.060696][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1447.066367][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1447.071685][ T31] ? down_read+0x2be/0x330 [ 1447.076218][ T31] genl_rcv+0x28/0x40 [ 1447.080236][ T31] netlink_unicast+0x7bb/0x940 [ 1447.085791][ T31] netlink_sendmsg+0x813/0xb40 [ 1447.090680][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1447.096882][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1447.101975][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1447.107280][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1447.112519][ T31] __sys_sendto+0x408/0x5a0 [ 1447.117074][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1447.122855][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 1447.128185][ T31] __x64_sys_sendto+0xde/0x100 [ 1447.133033][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.139122][ T31] do_syscall_64+0x174/0x580 [ 1447.143807][ T31] ? trace_irq_disable+0x3b/0x140 [ 1447.148861][ T31] ? clear_bhb_loop+0x40/0x90 [ 1447.154151][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.160071][ T31] RIP: 0033:0x7f914ad5e6ce [ 1447.165363][ T31] RSP: 002b:00007f914bc83e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1447.173901][ T31] RAX: ffffffffffffffda RBX: 00007f914bc856c0 RCX: 00007f914ad5e6ce [ 1447.182554][ T31] RDX: 0000000000000024 RSI: 00007f914bc84000 RDI: 0000000000000003 [ 1447.190555][ T31] RBP: 0000000000000000 R08: 00007f914bc83f04 R09: 000000000000000c [ 1447.198611][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1447.206741][ T31] R13: 00007f914bc83f58 R14: 00007f914bc84000 R15: 0000000000000000 [ 1447.215460][ T31] [ 1447.218531][ T31] INFO: task syz.2.13995:22352 blocked for more than 144 seconds. [ 1447.226457][ T31] Not tainted syzkaller #0 [ 1447.231429][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1447.240218][ T31] task:syz.2.13995 state:D stack:26784 pid:22352 tgid:22351 ppid:16066 task_flags:0x400140 flags:0x00080002 [ 1447.252746][ T31] Call Trace: [ 1447.256198][ T31] [ 1447.259174][ T31] __schedule+0x17d9/0x56c0 [ 1447.263779][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1447.268754][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1447.273804][ T31] ? __pfx___schedule+0x10/0x10 [ 1447.278701][ T31] ? schedule+0x90/0x2b0 [ 1447.283787][ T31] schedule+0x164/0x2b0 [ 1447.287957][ T31] schedule_preempt_disabled+0x13/0x30 [ 1447.293519][ T31] __mutex_lock+0x7bf/0x1550 [ 1447.298134][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1447.302996][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1447.307712][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1447.313553][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 1447.318716][ T31] ? radix_tree_lookup+0x240/0x290 [ 1447.324363][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1447.328925][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1447.334051][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1447.339455][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1447.344747][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1447.349780][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1447.355202][ T31] ? down_read+0x2be/0x330 [ 1447.359652][ T31] genl_rcv+0x28/0x40 [ 1447.363724][ T31] netlink_unicast+0x7bb/0x940 [ 1447.368530][ T31] netlink_sendmsg+0x813/0xb40 [ 1447.373897][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1447.379190][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1447.384195][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1447.389502][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1447.394616][ T31] __sys_sendto+0x408/0x5a0 [ 1447.399149][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1447.405014][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 1447.410361][ T31] __x64_sys_sendto+0xde/0x100 [ 1447.415193][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.421291][ T31] do_syscall_64+0x174/0x580 [ 1447.426188][ T31] ? trace_irq_disable+0x3b/0x140 [ 1447.431265][ T31] ? clear_bhb_loop+0x40/0x90 [ 1447.436534][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.442516][ T31] RIP: 0033:0x7fb52695e6ce [ 1447.446953][ T31] RSP: 002b:00007fb52794fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1447.455509][ T31] RAX: ffffffffffffffda RBX: 00007fb5279516c0 RCX: 00007fb52695e6ce [ 1447.463964][ T31] RDX: 0000000000000020 RSI: 00007fb527950000 RDI: 0000000000000006 [ 1447.472735][ T31] RBP: 0000000000000000 R08: 00007fb52794ff04 R09: 000000000000000c [ 1447.480708][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1447.488822][ T31] R13: 00007fb52794ff58 R14: 00007fb527950000 R15: 0000000000000000 [ 1447.497245][ T31] [ 1447.500290][ T31] INFO: task syz.1.14001:22369 blocked for more than 144 seconds. [ 1447.508203][ T31] Not tainted syzkaller #0 [ 1447.513316][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1447.522593][ T31] task:syz.1.14001 state:D stack:24968 pid:22369 tgid:22368 ppid:16778 task_flags:0x400140 flags:0x00080002 [ 1447.534729][ T31] Call Trace: [ 1447.538037][ T31] [ 1447.540990][ T31] __schedule+0x17d9/0x56c0 [ 1447.545615][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1447.550588][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1447.556105][ T31] ? unwind_next_frame+0x8f/0x2550 [ 1447.561245][ T31] ? __pfx___schedule+0x10/0x10 [ 1447.566258][ T31] ? schedule+0x90/0x2b0 [ 1447.570541][ T31] schedule+0x164/0x2b0 [ 1447.574776][ T31] schedule_preempt_disabled+0x13/0x30 [ 1447.580265][ T31] __mutex_lock+0x7bf/0x1550 [ 1447.585454][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1447.590234][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1447.595055][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1447.600125][ T31] ? stack_trace_save+0xa9/0x100 [ 1447.605204][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1447.610199][ T31] ? radix_tree_lookup+0x240/0x290 [ 1447.615890][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1447.620418][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1447.625546][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1447.630529][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1447.635425][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1447.640494][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1447.651016][ T31] ? down_read+0x2be/0x330 [ 1447.656827][ T31] genl_rcv+0x28/0x40 [ 1447.660913][ T31] netlink_unicast+0x7bb/0x940 [ 1447.667661][ T31] netlink_sendmsg+0x813/0xb40 [ 1447.673062][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1447.678403][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1447.684185][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1447.689532][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1447.695806][ T31] __sys_sendto+0x408/0x5a0 [ 1447.700450][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1447.705870][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 1447.711227][ T31] __x64_sys_sendto+0xde/0x100 [ 1447.716561][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.724058][ T31] do_syscall_64+0x174/0x580 [ 1447.728700][ T31] ? trace_irq_disable+0x3b/0x140 [ 1447.733825][ T31] ? clear_bhb_loop+0x40/0x90 [ 1447.738532][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.744520][ T31] RIP: 0033:0x7fb52635e6ce [ 1447.748958][ T31] RSP: 002b:00007fb527242e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1447.758780][ T31] RAX: ffffffffffffffda RBX: 00007fb5272446c0 RCX: 00007fb52635e6ce [ 1447.766934][ T31] RDX: 0000000000000020 RSI: 00007fb527243000 RDI: 0000000000000007 [ 1447.775397][ T31] RBP: 0000000000000000 R08: 00007fb527242f04 R09: 000000000000000c [ 1447.784469][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1447.793130][ T31] R13: 00007fb527242f58 R14: 00007fb527243000 R15: 0000000000000000 [ 1447.801133][ T31] [ 1447.806350][ T31] [ 1447.806350][ T31] Showing all locks held in the system: [ 1447.814475][ T31] 1 lock held by khungtaskd/31: [ 1447.819365][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1447.829932][ T31] 2 locks held by kworker/u9:0/50: [ 1447.835449][ T31] #0: ffff888026360940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1447.846850][ T31] #1: ffffc90000ba7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1447.859016][ T31] 2 locks held by getty/5386: [ 1447.864236][ T31] #0: ffff8880363110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1447.875580][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1447.886312][ T31] 2 locks held by kworker/u9:2/5630: [ 1447.891628][ T31] #0: ffff888026360940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1447.904096][ T31] #1: ffffc90003e8fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1447.916303][ T31] 2 locks held by kworker/u9:3/4781: [ 1447.921618][ T31] #0: ffff8880203df940 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1447.934385][ T31] #1: ffffc9000431fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1447.946280][ T31] 2 locks held by kworker/u9:4/5125: [ 1447.951595][ T31] #0: ffff8880203df940 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1447.963905][ T31] #1: ffffc900056ffc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1447.976115][ T31] 2 locks held by kworker/u9:5/6162: [ 1447.981458][ T31] #0: ffff888026264940 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1447.993666][ T31] #1: ffffc90005257c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1448.005586][ T31] 2 locks held by kworker/u9:6/7284: [ 1448.010893][ T31] #0: ffff888026264940 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1448.023137][ T31] #1: ffffc9000de0fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1448.034986][ T31] 1 lock held by udevd/17921: [ 1448.039762][ T31] #0: ffff88802628b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1448.049587][ T31] 4 locks held by kworker/u8:8/18232: [ 1448.056153][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1448.066245][ T31] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1448.075285][ T31] #2: ffff8880b8626058 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x904/0xed0 [ 1448.085276][ T31] #3: ffffffff9a973c58 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xb7/0x420 [ 1448.095769][ T31] 6 locks held by syz.5.13984/22319: [ 1448.101073][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.109361][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.119116][ T31] #2: ffff88802776e260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 1448.130669][ T31] #3: ffff8880262a9938 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 1448.140196][ T31] #4: ffff8880262a9300 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1448.153311][ T31] #5: ffff8880262a9338 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1448.165729][ T31] 2 locks held by syz.3.13988/22328: [ 1448.171039][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.179595][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.189352][ T31] 2 locks held by syz.3.13988/22334: [ 1448.194702][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.203358][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.213497][ T31] 2 locks held by syz.4.13993/22344: [ 1448.218804][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.227132][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.236216][ T31] 2 locks held by syz.2.13995/22352: [ 1448.241521][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.250611][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.259663][ T31] 2 locks held by syz.1.14001/22369: [ 1448.265188][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.274268][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.283560][ T31] 2 locks held by syz-executor/22374: [ 1448.288979][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.297260][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.307111][ T31] 2 locks held by syz-executor/22376: [ 1448.312593][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.320810][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.329915][ T31] 2 locks held by syz-executor/22406: [ 1448.336180][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.344451][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.353543][ T31] 2 locks held by syz-executor/22408: [ 1448.358922][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.368199][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.377626][ T31] 2 locks held by syz-executor/22413: [ 1448.383077][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.391310][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.401180][ T31] 2 locks held by syz-executor/22641: [ 1448.406636][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.414959][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.425036][ T31] 2 locks held by syz-executor/22643: [ 1448.430414][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.438684][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.449507][ T31] 2 locks held by syz-executor/22671: [ 1448.459183][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.467457][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.476507][ T31] 2 locks held by syz-executor/22689: [ 1448.483336][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.491601][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.500639][ T31] 2 locks held by syz-executor/22691: [ 1448.506094][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.515261][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.524543][ T31] 2 locks held by syz-executor/22739: [ 1448.529937][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.538201][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.548017][ T31] 2 locks held by syz-executor/22741: [ 1448.553458][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.561683][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.570736][ T31] 2 locks held by syz-executor/22768: [ 1448.577005][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.585304][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.594536][ T31] 2 locks held by syz-executor/22785: [ 1448.599925][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.609180][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.618259][ T31] 2 locks held by syz-executor/22803: [ 1448.623709][ T31] #0: ffffffff9009d568 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1448.633003][ T31] #1: ffffffff9009d3a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1448.642062][ T31] [ 1448.644436][ T31] ============================================= [ 1448.644436][ T31] [ 1448.653238][ T31] NMI backtrace for cpu 1 [ 1448.653297][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1448.653316][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1448.653325][ T31] Call Trace: [ 1448.653331][ T31] [ 1448.653336][ T31] dump_stack_lvl+0xe8/0x150 [ 1448.653402][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1448.653421][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1448.653463][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1448.653483][ T31] sys_info+0x135/0x170 [ 1448.653499][ T31] watchdog+0xfd7/0x1030 [ 1448.653540][ T31] ? watchdog+0x1c7/0x1030 [ 1448.653560][ T31] kthread+0x388/0x470 [ 1448.653594][ T31] ? __pfx_watchdog+0x10/0x10 [ 1448.653609][ T31] ? __pfx_kthread+0x10/0x10 [ 1448.653629][ T31] ret_from_fork+0x514/0xb70 [ 1448.653685][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1448.653704][ T31] ? __switch_to+0xc89/0x1420 [ 1448.653776][ T31] ? __pfx_kthread+0x10/0x10 [ 1448.653796][ T31] ret_from_fork_asm+0x1a/0x30 [ 1448.653821][ T31] [ 1448.653827][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1448.767578][ C0] NMI backtrace for cpu 0 [ 1448.767592][ C0] CPU: 0 UID: 0 PID: 18230 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 1448.767611][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1448.767622][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1448.767774][ C0] RIP: 0010:unwind_next_frame+0x4f8/0x2550 [ 1448.767793][ C0] Code: f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 47 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 <48> 63 03 48 01 d8 48 8d 4b 04 48 39 e8 4c 0f 46 f9 48 8d 43 fc 4c [ 1448.767814][ C0] RSP: 0018:ffffc900060d7140 EFLAGS: 00000246 [ 1448.767827][ C0] RAX: 0000000000000000 RBX: ffffffff90dfea70 RCX: dffffc0000000000 [ 1448.767839][ C0] RDX: ffffffff90dfea70 RSI: ffffffff91954e06 RDI: ffffffff8c4bda20 [ 1448.767851][ C0] RBP: ffffffff8b965ab0 R08: 0000000000000001 R09: 0000000000000000 [ 1448.767862][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffffff90dfea70 [ 1448.767873][ C0] R13: ffffffff90dfea70 R14: ffffc900060d71e8 R15: ffffffff90dfea70 [ 1448.767885][ C0] FS: 0000000000000000(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 1448.767898][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1448.767909][ C0] CR2: 00007fd160eee674 CR3: 000000000e946000 CR4: 00000000003526f0 [ 1448.767924][ C0] Call Trace: [ 1448.767930][ C0] [ 1448.767939][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x571/0x790 [ 1448.767964][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1448.767982][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1448.768002][ C0] arch_stack_walk+0x11b/0x150 [ 1448.768046][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x571/0x790 [ 1448.768074][ C0] stack_trace_save+0xa9/0x100 [ 1448.768093][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1448.768111][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1448.768138][ C0] save_stack+0x122/0x230 [ 1448.768201][ C0] ? __pfx_save_stack+0x10/0x10 [ 1448.768221][ C0] ? post_alloc_hook+0x1f9/0x250 [ 1448.768257][ C0] ? get_page_from_freelist+0x21fa/0x2270 [ 1448.768295][ C0] ? __alloc_frozen_pages_noprof+0x18d/0x380 [ 1448.768317][ C0] ? allocate_slab+0x79/0x5e0 [ 1448.768366][ C0] ? refill_objects+0x2d5/0x350 [ 1448.768382][ C0] ? __pcs_replace_empty_main+0x2bf/0x6b0 [ 1448.768408][ C0] ? kmem_cache_alloc_noprof+0x382/0x5f0 [ 1448.768426][ C0] ? skb_clone+0x212/0x3a0 [ 1448.768463][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x571/0x790 [ 1448.768499][ C0] __set_page_owner+0x8d/0x4c0 [ 1448.768522][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1448.768543][ C0] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 1448.768562][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1448.768588][ C0] ? bad_range+0x8e/0x2a0 [ 1448.768612][ C0] post_alloc_hook+0x1f9/0x250 [ 1448.768632][ C0] get_page_from_freelist+0x21fa/0x2270 [ 1448.768662][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1448.768720][ C0] ? prepare_alloc_pages+0x230/0x650 [ 1448.768745][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1448.768769][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1448.768790][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1448.768820][ C0] ? __refill_objects_node+0x253/0x600 [ 1448.768842][ C0] allocate_slab+0x79/0x5e0 [ 1448.768859][ C0] refill_objects+0x2d5/0x350 [ 1448.768879][ C0] __pcs_replace_empty_main+0x2bf/0x6b0 [ 1448.768907][ C0] kmem_cache_alloc_noprof+0x382/0x5f0 [ 1448.768925][ C0] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 1448.768942][ C0] ? skb_clone+0x212/0x3a0 [ 1448.768957][ C0] ? skb_clone+0x212/0x3a0 [ 1448.768975][ C0] skb_clone+0x212/0x3a0 [ 1448.768992][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x571/0x790 [ 1448.769023][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1448.769041][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1448.769072][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1448.769093][ C0] ? assign_work+0x3cf/0x5d0 [ 1448.769112][ C0] worker_thread+0xa47/0xfb0 [ 1448.769143][ C0] kthread+0x388/0x470 [ 1448.769166][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1448.769182][ C0] ? __pfx_kthread+0x10/0x10 [ 1448.769205][ C0] ret_from_fork+0x514/0xb70 [ 1448.769228][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1448.769250][ C0] ? __switch_to+0xc89/0x1420 [ 1448.769270][ C0] ? __pfx_kthread+0x10/0x10 [ 1448.769292][ C0] ret_from_fork_asm+0x1a/0x30 [ 1448.769317][ C0] [ 1449.203396][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1449.210272][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1449.219396][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1449.229458][ T31] Call Trace: [ 1449.232767][ T31] [ 1449.235708][ T31] vpanic+0x56c/0xa60 [ 1449.239711][ T31] ? __pfx___schedule+0x10/0x10 [ 1449.244567][ T31] ? __pfx_vpanic+0x10/0x10 [ 1449.249091][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1449.255259][ T31] panic+0xc5/0xd0 [ 1449.259004][ T31] ? __pfx_panic+0x10/0x10 [ 1449.263422][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1449.268882][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1449.274268][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1449.280443][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1449.286607][ T31] watchdog+0x1030/0x1030 [ 1449.290952][ T31] ? watchdog+0x1c7/0x1030 [ 1449.295383][ T31] kthread+0x388/0x470 [ 1449.299462][ T31] ? __pfx_watchdog+0x10/0x10 [ 1449.304140][ T31] ? __pfx_kthread+0x10/0x10 [ 1449.308749][ T31] ret_from_fork+0x514/0xb70 [ 1449.313344][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1449.318455][ T31] ? __switch_to+0xc89/0x1420 [ 1449.323151][ T31] ? __pfx_kthread+0x10/0x10 [ 1449.327782][ T31] ret_from_fork_asm+0x1a/0x30 [ 1449.332558][ T31] [ 1449.336203][ T31] Kernel Offset: disabled [ 1449.340537][ T31] Rebooting in 86400 seconds..