last executing test programs: 24.338379714s ago: executing program 3 (id=1847): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, r2, 0x10, 0x70bd25, 0x7, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x347}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcd8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8f28}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3c46}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4008000}, 0x4001) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010300000000000000001100000008000300", @ANYRES32=r7], 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r8, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1000}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffffe}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000c800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0) (async) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x40012063, 0x0) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x10}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)={r13, 0x90, 0x1, [0x4]}, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 23.951316868s ago: executing program 3 (id=1851): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0xac, 0x24, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xe, 0xfff2}, {0xb, 0xf}, {0xd, 0x4}}, [@q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2b}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x44084}, 0x4000004) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0xd, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xffff}}, 0x0, 0x0, 0x19, 0x0, "84750422c8aca9cf970f1e05df9f6a25d3a3fd52fc37705d3b0c0fb9444c81a478db09df64e5f78bd0d64bbcd7842587bdb29535fb211ab3b64e73224354bc34434a3810fbb67a9ee8921270fb2a9789"}, 0xd8) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@newtclass={0x78, 0x28, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0xb}, {0x1, 0x7}, {0xfff1, 0xe}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xa1e}}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x401}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6f04}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x3}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xd}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040081}, 0x48095) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000004c0)) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x47, 0x0, "3143ddb1c8186e924df8477478451b817ba16ca81d5665485594f82f0d80513658447f85c3542bae1674f56a916b6cac22952b72d1a774cc7e74e139aed1c24b376bdbc49c9bbe39871463f388c2978d"}, 0xd8) sendmsg$nl_route(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2310}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@ipv4_newrule={0x48, 0x20, 0x300, 0x70bd25, 0x25dfdbfb, {0x2, 0x20, 0xb86a473b88c7ea80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x10000}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x2}, @FRA_FLOW={0x8, 0xb, 0x9}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'macvlan1\x00'}, @FRA_FLOW={0x8, 0xb, 0xd76}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x13410a0}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}}, 0x4008804) r4 = socket$netlink(0x10, 0x3, 0xe) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000880), r4) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r6, 0x89fc, &(0x7f0000000980)="9fe876c84d5243ef569ffd363b705042572081c8a7824ba821bd6850f0e5f3140f6751361e92de08c639c8606b309640aac53b6c13d8600d8439fbe2d758c8d6a986ccf62ec58e2a770e10911ccbac5fbdbd980834d6de09667dfc82375adddf98061ca0e0d7ae34d10cd7da46a0610ff445dc1882d1f9fcd7d1ee0b17ed8f37e0e7d06671f7b0fda041b255bd5c2a3ada3a916e29dd8c479b8d10ce462521108bcf0829df8f983b24094da7e97c5cd9c45049dd5254764af4b01f4de79d0c9d97c904b6e07ab66bccccd9b73bcd46deac1a9798b0645d95b4b64e63d35956b8c7af69927b24ed8ba148feae8d971749bec8381b31c14633b8ad2b62ecac49f54420497ede47f0c15a65c83d57e504c09b96b66c8b05cdc36311351496a257b139b988ba388db7707e6af9a485c529ca2a019a22888d59f0af636d4c09fa02f67e7dd971b4fe3c525b7e115d80f52c84af4c6f07ec4f59aac062a940c9960517610b6158fade2f2585ec452fa00964ae4a8f6466d9fd574616078b2d5a05afed3cb11bccd59dc855871133559bb194bf8589b87103f8c9275a2796f3d2007dcccdf35fad0e005f582f0de49f7679e4eecc21e353d880a7e6bcfc49a88e1a618fdc0d4a3627909e9e9530f04cc352c5019bb5cdb53584ae4620a98da91a20c0a9d446fc040cfd7565226bf9f65604fd595230a6caf9736c451030c3e9bc6e14f31b56ff0b16d9494e36af2e7f19f54ae3ed7aaf8cdc059536d7bd74e76dc19bb4c6c9da6da78b8e12401e6fc2ecda88cd6cfa71617059523cd290395733ba20fe7a839bce1634ed6d5a6eb676269f93e9335ea84680b28bf72ee752d0c34b6fcb6c2515bc5a303faf49be99e4b01ad95d37e3d308db458750e2ed3d3614941d74169cc683f9b7061e7fdf67f65ef0465ab3781e2fa436aa4d8f82f30bae64883d45517fe737912241356ab9b2be7f5f3b8966fc9483ed09c5d62c901bfa53597cf5e8c2c32b87b578f393d68f49f02956d5b826cd08208c7670833c083a5389a5e96c1c3eace5824e87d3ff4a06445a9be365b526e2984411f3323a401c771488295b5a855a91af904e5ed8ad661847d8446433525f8c233eff56fd161d2593e2acf231900792716202b074b0b4b3a048ce5e618bd2042142c98e82421b42934f7cd58cec865de4f484d03ec6ef4b04dfc6b29ecd905c68a51a86d1a2227095d8097ddd878e7073e55df724a9b5c70c0b622391a0c128f4a2c17fd22f8708cb1216c09d0c9592b605bbdb92c2fb3d5f4875b0bf4e1052a7b582ed2c70f160e7c4d88cead32de18806cca0e07401dae83789b4596c37903be3a4dfab8248c496c146ebbef673b3138fb21c5c30245e02a30c594f9cc183cecb807ec13195f8dd6608f085fc6ad1761487a4d9d8bace120e2ea2de1f36760cdc761dc7d24b8411288e4312c42641f1741fd7d2b0b90066e0aa0caf330601786b8c970767c7c7a823e68e9b5ae3fe2bb96ff0a2c068e2272f9779a76614b5d8910b905a8fd0755d748fcb636e89476a43adc384d846189ce58022a08660f2a2f52548b9fb34043e1f35c6beb4a7daab9e544906ea986d538352b90ab98c23a74ba3d1df926b517bd3d43d91392c4f3a34c13041be0a10d5380c87210e65e8ce8896f433c67d1b3cdacb117fd583fdbf022438645210844a1b2280d36a85b8d8b7ee1e70a3bf71a5555c9f71b39d764085a13dc35b9c2221cea41af3993cfa04f67def5270c542d31840d2dd4853c8a14eabe7751f21db5390df26202a32151f05977bb0873c420b5860ae8a15b159b842462fcf8551aabf9b8f8ad796b23007c8a1aff3cc03137c5bc96dd0dababb7a6bff63275057f11d7ddc0d5ba47b70759b3dacf9dc13f188109bb3b8544c960360650adb60d42b1041d944f14506cd595d75e704a04f5aa0c541daa8fb170f83f154fdf620147bdd828469191d41cb19abf4515f230f2b4f00758349114cfd86aafc188293460b994a3135c9633d4d9104c243725d019d60520e9974a86c4adc5359d5ba231182fb028d6adf1032eca3da88f5db86c2a55c5498ff0861dbf89e35af13c8266acc7c0878ee4032db91190104746c4b646834378e4226892cf2ffbfd20fb24dae248a49c9ff21ed9bfb7d243cd758668009a02b1dc9f94d0bbb1ceba577f0b1612479950db91bc1a6ec3c5c21f1b11849e76c05864d814a49c5bfb9e4fde0172b06b689b51809925d8986faeac094bc493557256e6109c676f284fd3f1684b3ab2600b6b37ad3efcb5873797d2cdc26e4e5549e85eb091886f84278354897bda0b63b4bd2f00daefc8f7b0f895b65bee7bd9fc4101fc4fc1c6c84889c9712c705375ae6791dea5ec6258f913a56a75309a47f281695a452aaa7913fc7471bb9759d83e074ae1fd49a0f3f019c13d0ef274fa231c94b1f86eade8af7238edf73f41628af0da3b99585834441078ea53377e69f50450a276c8116c5da314633765b3aa041bfaf518c71fa7b96b305d63069eafe565a48d5a4eb5afda25ca02a68ebca24c2acf0347e06e4730a09161aaf22077ad6357e6db837e672de99e54d4e3a6bb5111f7ae7bd454dbb3da9366da55afe1ef75b92615c5affd731e15fe0b6989cc5364c8e8c3bdc95f71b79ef9dc0f5b77e60653d8f8448839bb9a84db12ed1a381e3295d82bb488dc0e32828149bd11d1104b8a2cbc76976fb7a73b0abbcaf053b7cd16cc4406c9107c134957426b98e48f69a327236f5c985f49c16b67b7e19e5596d08daab1f04050726cbe76b141662c4ba1da937e41d0093ff9233e56b05d2269ae2686051038a7f4982b1ef9f43169e3356b405920b2d40598922eb3f1131d1860e6d65ba131a881ea4a33414bb8caeda3457bdd74d4ed56b6e29e7b265ed8bc0395908918f3485973827ec0e471ebdc2b4521077a419221ed13c857c9f0ff3c575b0494951e776530531b2b76ea24454460313af450d8d4c5b841ccae447e8f67c80fc57d823130939c660bf38c7e3ff45db97f7f8809d9369a1fee56f4d8b1a80fe357185dfbdab5a65fb153ea90831aaa8cb800847a4e0084040a187a6c71dc1352951f071e53b086df4f1072ba9ddda333a32f18f47d7b948204cb944fb706d223d8f68430220783c9b61d3b86b45762061a3627c3b4fbe8988214f6134b5c7cba6c75f2d89ef64511ba20ac9e3465fdf85cdd68c26175c49b726fa2a90bc1db57a2a229d689601dc2b90bf3947662a60180d4b52e2cf3a5e19d2979b015dfa08f2cc174feae83c5d50375496b6d7e0c043e71c86571377ac1b0337f62b607c49d793bce621b1c305b46c1bef54fdede232600f2c19bd867c8cec57b062f3a5d3750e2bdbc192238bee06c83ba231cc216c57557a80b333a2b12be3fb74d434c4e27b6a0389b4ae19c406604682098738361ce36478a2f8a9a067cb4fc8821868ed193b45f0db4ead9a3ec07f01597e1e9029282152451bbe0691b73d773869160fcf290d0837757a3ed7cb1aaa3900f16bc02a22eb50d2a60e3ee2b7e2c8c73268ee6445a464645a5aa533531ad7818f341dc2daa13a9a200020dd869a4f0b9f4b16d597c1bb8b8203456ef0c5c22e54aa44af17397e4d7c5b457519a74f40d5801c125379aeb6a6722f345c551f0732ed10cdab4e7d1c22c856097b31993f411247719bd0dac5664b5e19d529821481dce2c1fc40abd3af45c59dec76636b529d457b974abe60bb904879068b964b63aac35c004730bc0a3e53f454fcdc8ad4b2fb8bda12b9da20b0f849a0be2826443c86958d215bf133956315530bf8bad18287045ab77ed3aa600f090fa40e862c183227c9924c606b787f86a8757ed97a76694d3b2a8c0b7c7e3e589b3dbd14010d084fc7a071d87460ae2456342a373663f0a0e7cd46b6cebc4ce7ebe88d7093b370360926ada4a4fbe24cfa71dc0dabe0248ea815a9a78f12074c8764748345d23ca51c6f7a04abcfbc8a6a6132e46ce31387b238b2bbe8de2ffee05e1e70a179e2994ea238373fc7c29169121deaadf94d3e569ab2ce37c4d31fecc29078c40ee8d397b32c247c8d4589a99247388facff802a934188ff3f05ffe553a1c3835fe9985d66851c798d28e37b63869f3e2fc11247e9848e0c4293eaab2bdc9ccebbce81e3ee8965f523e7ef75013a72fdd8f86db63ee461a5a0b0536a51f8dbec3191b31d173efb6097b7bf6b0349e2fb3a430ee85cb5d84f7140ba28da429f45d1cbe4cdef5e2fbca7613acd6f7182f67c780bd97b4e8a9c7ac0f4a760bc636e524655198ac5ef5635889cb06e01f55eadeeb626e4755b3fe2bc614e54effa9dd40846e1ee3067ae20ca45c4bfce8b9214fc49ae53e4f442839ad734a362244f2d0e3573030a59ca27c1e6e1a92650d890dd283eb2069292e4fb16ac4093ac1fcbbc27df9135d3cf58a25aba3ccd30c4dbe48094533faf27c1fc364e6cc09be2d45c16b9a9e1bee445b51ea634937744a0723c120b1d2b8fa9c184399a6bb88c4efd6c60c405a757634b0e1b446b1dae152d6a52beb3f0b0543cbd19f815bb4ee099f4ae621294a66b3d9dcacdbc4b7832ac29fedc77f98ca810be4a014fad8cbe9744561918c016a36695b605641652415da6f687ca7edfb5f102f8f595b6be7d12052c356c821f00901400a01a8ee5f656a00d975e704f653f9840bff42e0d91d4b7487245e0d3bf6865d7cc2e6a71062144716df9ade5ed79658381d4cf989b64c3ea1f2c5854f1a8f10c5edb988740cdf602bab9d916160faccf6e19ba0349c6e64feb57aa8e7531f587884d3e8c4459653c8939c5e5d7a529bf2ebf1202018101ef0f57eb7fe44b669781502d7ef55c0e4e6b65c99c1344967dc4a535f02639c0de4a435cf3513a2a97578419b1d98d540613933d6b2a8237d1acbd302c96e9c41d7fe22f7df5dde64f6030a5684e60c388efea12d4ab6a22f06b9140ab61cb0a8f83f9f186b48c8c22d0a18ddd4ed1df2ddba72502a98d11c192a132d220c3419480ecc0a1c7a467033268928eb7ebc94311961222d053fb65f97b07bf77aa74b84b93bf070724ab9c8aa1f069519fbd14fd4b94521479913f196c743c3cebef33cf9db655472746d4f504ca4c10a63d3e38aac9d315e55051c8c249eace95e680c8a90f0e9fb2bf1ad1637867f2ffedcbc446968d4bd7804a7683eb13958b3a536df0e7e6b01c69e98dba5227fe4b2f54d4039a6e1abb800af9a6a05a8c2bcf1159c42ff15df9253fa3157dc6ce4f7772e5ddd641ee67e66b2b03a4e46e016ce53ce762960e853c739edd810c10177e185d2e0af1792b2b5210fb1379c4641a6d69aece5789c9115784e2d5e11d9ede16acaf899a4839c6268d892ddcdaba32a43282fe884db8a9562cb05048ff8b150047709c14de84bd5f19eeb67328ac992b56a63c7d5f6d1dc82244f4396ca0a85030441f6818c56fadec372dae0095f6d72cbd6138b8a93096a430beb59ae3e276fd4e7c6b464a203c69abc2485f15d372abbbc9c96329e6f06c56a840406ea27edf38f9744d37f37e0eff71093caa476011a51a56f6b0ae4c78e1f4f234d9fca84c1ad6d45f159feabd5d52ed8cc2354f812d588b170bc7dfe5912de127822d89cb32db45000ac993595e18c78cb59e63ca8f6c4b72e4ef6fb96a90e83dd33df51e01cd393b37446b33b1e0828d11068d6f48adee3de0c3aca33d7a09d5d3b385d2334ae29c2047d5fcbad3fc1ade7c295a09a2dad573d01daba63a07692ec146376fee290b85895514") (async) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000001b80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b40)={&(0x7f00000019c0)={0x17c, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfff}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_NAT={0xd4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$AUDIT_TRIM(r4, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x10, 0x3f6, 0x300, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc0}, 0x4) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000001cc0)={'erspan0\x00', {0x2, 0x4e24, @loopback}}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)=@newtclass={0x54, 0x28, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0x4}, {0x8, 0xfff3}, {0x10, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @tclass_kind_options=@c_mq={0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0xc090) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001e40)={0x0, 0xc4, "35f5516f51c71422bf37c092c5939dec9d269860444e5a556918062e21bf66c4811513b7b3faefc05078fe03fcfcae4af43acac92e491b70503bc217a37b43c3576afc5719948c21fdc90b067e63b86f884e7b2b0331d34d4668065d30c22736c53efe685a7192089d836e2ce888866a5f32012c84fe7354853801f2879b5799f992641874d60d3d677535dcd6ed7b8b7e67d9dc082fa27106320858073631013dffcb7d9cce8e58618a819f40e5d73f4c8c100e0987d74ea07c0f299eb0a4971e3de3d8"}, &(0x7f0000001f40)=0xcc) (async) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x44, 0xd, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x4}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000021c0)={&(0x7f0000002100)={0x8c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x825c, 0x53}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000002240)={0x1, 0xa8b}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000002400)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x70, r7, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9df, 0x6a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r4) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000025c0)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002580)={&(0x7f00000024c0)={0x9c, r9, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x50, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "1d475b3b1528beb2b7a128772f"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "abf29bcd2e"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "9bda9753"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "cb0ba653"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x18) 23.450385108s ago: executing program 3 (id=1856): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xfffffffffffffcf9, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0xffffffffffffffff, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x20}}, 0x44) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r9 = accept(r1, &(0x7f0000000580)=@sco={0x1f, @fixed}, &(0x7f0000000240)=0x80) setsockopt$inet6_buf(r9, 0x29, 0x15, &(0x7f0000001180)="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", 0x1000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x50}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r12, 0xc08ba000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000006, 0x12, r12, 0xe93f6000) getsockopt$PNPIPE_IFINDEX(r12, 0x113, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendto(r12, &(0x7f00000002c0)="503fc3179501be2593cddbca0c37c6b963ffc8002dad419569b38e414c1540f9e80b6c2d30ebaf427f160864cc62b6afc42ee1e490bf5993a049b0fe6285c25be51c87c3d398726fc4a96c90383fa964b8bb6fda2ec571319c5e20", 0x5b, 0x21, &(0x7f0000000380)=@in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x80) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRESDEC=r0, @ANYRESHEX=r11], 0x48}}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB="040000000100"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 22.744746047s ago: executing program 4 (id=1864): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x78}}, 0x0) (async) r0 = socket$kcm(0x29, 0x5, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r0, r1, 0x0, 0xffffffff000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'batadv_slave_1\x00', @random="471e93083a0e"}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) 22.487167931s ago: executing program 4 (id=1867): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r1, 0x53f63307afa5bb95, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200000c1}, 0x880) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='ext4_ext_convert_to_initialized_fastpath\x00', r4, 0x0, 0x9}, 0x18) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x500, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0xfffe, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 22.470050594s ago: executing program 2 (id=1868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="00000000aaa2aaaaaa09aaaaaaaaaa1b88a80d008100660086dd67ea503902b80601fc020000000000000000000000000000000001000000000000000000000000010c000bd1680000000101000000000000c2040100000501020000000000000000ff0005316400000000000000000000000001000000000000000a010800000000fe880000000000000000000000000001fe8000000000000000000000000000bbfc000000000000000000000000000000ff020000000000000000000000000001ff02000000000000"], 0x2fa) 22.172091149s ago: executing program 3 (id=1871): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r2, 0x2b5}, 0x8) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="50f92593a3b8ba82be3964d7d0b9d66942df", 0x12}], 0x1}}], 0x2, 0x40000000) 21.984364003s ago: executing program 4 (id=1872): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r0, &(0x7f00000003c0)="31144fabdb8f0669c5a5c81a7c723fc9550233949ca0e00d5e6016ceb0988d26e2ec20a2a58931e51ea55d320c4dbe6c73f1b15b8304e894b585216e5074c2e85c01982c3791a29d01bbac72ca34debd46191697b36b7b97994bb3368eafd97bfc7b6233a0fe38e393b11336906b047a4f29bf6ac38aad41185577adf03ca48680ad3ccc3444c80440efb068de90e06e201e577d36a8e8013ad772d0b9c18dd0bf47d39cee01bd19b35f248505321e3227", 0xb1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x3, 0x0, r5}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r5, 0x100}, 0x8) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x7c4d2537, 0x0, 0xfffffffc}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@remote, 0x4, 0x0, 0x1}, 0x20) close(0x3) 21.940323807s ago: executing program 3 (id=1875): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'wlan1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e00000010000655800189078060000000000000086ddff6200000093022a"], 0xfdef) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe00000100000001140012001100b6acfae118e269f936c1910c3378"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 21.805326975s ago: executing program 4 (id=1876): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @private}}}], 0x20}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f00000001c0)=""/194, 0xc2}, {&(0x7f00000002c0)=""/238, 0xee}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/234, 0xea}], 0x6, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x60002103) 21.624666774s ago: executing program 4 (id=1879): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) preadv(r2, &(0x7f0000000780)=[{&(0x7f0000000480)=""/1, 0x1}], 0x1, 0xa4, 0x7) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800837d73ec300000008000600000000000800050000000000240007800800050000230000000005000000000061ff0500000000000800050000000000040007"], 0xd0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) (async) preadv(r2, &(0x7f0000000780)=[{&(0x7f0000000480)=""/1, 0x1}], 0x1, 0xa4, 0x7) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800837d73ec300000008000600000000000800050000000000240007800800050000230000000005000000000061ff0500000000000800050000000000040007"], 0xd0}}, 0x0) (async) 21.564126654s ago: executing program 1 (id=1880): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) recvmsg(r1, &(0x7f0000000200)={&(0x7f0000000100)=@phonet, 0x80, &(0x7f0000000700)=[{&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000440)=""/147, 0x93}, {&(0x7f0000000500)=""/213, 0xd5}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/219, 0xdb}], 0x7, &(0x7f00000017c0)=""/186, 0xba}, 0x160) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x2a, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xb8, 0x24, 0x200, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x94, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xfe, 0xcc4, 0x7fff, 0x0, 0x3, 0x0, 0x1}}, {0x6, 0x2, [0x884]}}, {{0x1c, 0x1, {0xfb, 0xe6, 0x3, 0x4c4, 0x1, 0x5, 0x4, 0x1}}, {0x6, 0x2, [0xfffe]}}, {{0x1c, 0x1, {0x7, 0x5, 0x6, 0x3, 0x2, 0x8, 0xfff, 0x2}}, {0x8, 0x2, [0x2, 0x4df]}}, {{0x1c, 0x1, {0x84, 0x80, 0xe, 0x9, 0x2, 0x4, 0x0, 0x1}}, {0x6, 0x2, [0x3]}}]}]}, 0xb8}}, 0x0) 21.442707839s ago: executing program 2 (id=1882): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@gettfilter={0x44, 0x2e, 0x4, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9, 0x4}, {0xd, 0x9}, {0x3, 0xfffa}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x3b6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8}]}, 0x44}}, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000002b40)={0x25e0, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xc, 0x7, 0x1, 0x0, "004177e2f8935946"}, @NFTA_RULE_EXPRESSIONS={0x25a0, 0x4, 0x0, 0x1, [{0x2544, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2534, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x26}, @NFTA_INNER_EXPR={0x24c4, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x24b0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x108, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x39, 0x1, "24fd83c11ff91b8c344a57572bbc57c66c277af197b5575521f1a177adfb4271db812068f82062fdcb6da1347312f8eebece62bda4"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_IMMEDIATE_DATA={0x2204, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x53, 0x1, "409e4a20b99f9f3c3f031f22785ea9fec39b7111998941799fe3d2735ffa938ed6aa67ee8289a064cfb8ea44e7dd0389e22f1131361e97228d34b323820409bcafb88f786406c80ae575dc09559077"}, @NFTA_DATA_VALUE={0xfc4, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "18c49eac95a47e131ab3b119691e337bbb464b448f78dc57a6fcb31006102eac0c473b2ac329539c8d08a08c515712a37d53df2e699c38931260577f900f93ace1ed4215c5159c2e0841c6185346217bebec4ecd99ff7c18ce7b61da3428c5ee728be641a728e623d2218dfcc954416e326d43f6755f349e480e5cad141b70eb15162946660f01bfd967324b0dbe633ff2e9e3d59eed8478758c8a72fef4df9c736a526ad27d8f7e3e63da60967a458351055962b42ca3036fecb3dec36704fc08657656b1b0783db82ef0ff5caf08b1abdde6f68fb52ddfbd95419f53ae945f34d2e17257668803c194e4aefbaa36735c"}, @NFTA_DATA_VALUE={0x6f, 0x1, "efcdcbf5430131c91fd0b9e44cea748376d44664783c0a35b1cccca5b441712b8059771198d407f58b16c65b88a557cd492643fb7dd71dbccc0b73632230b0b10bfbf00c1508d475fb18fb1a51789ec48f3d390312dc5c0bc3e509c8fbbba73956697f8f119984d3a5baec"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_IMMEDIATE_DATA={0x198, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "5050908f23c771"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x85, 0x1, "759c25c2d6c98a400aae4f2c9f9a863863b330d3e34274cba3637192196f4733b298d312733e72485d4cff8edd58a10f4d9f965abf2356f747d941127e9d11b44def4981b917cef8466f77912f02f1598fd18f9655609a80901c41c5f6b86c10ece0c19f26369fe69531719e45898088d5c3028c152b136101488fed9fe6123e79"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xa5, 0x1, "2ce90454c1a467621448a4fd4ca24225f2329730f148f9e08dbc40ff41f57096b1ab4079354533ab3a3d801b22800498823e76b5a54cd6cdd2ba97551383c428b795a189db52f562217b78de7fbf7d55fe79102e6d3f0c69dcbd0159f6d1d23398458c7984b8c7d8c55ffe1ada281e877639c0fff43f5acb25704519e303682f28600efb6160b81f1072a7108c561aab30f35b608f25842de78c4626da6e987e66"}, @NFTA_DATA_VALUE={0x1a, 0x1, "f52a20107bf0e26ea5bbd57f4576e4935ff4897acaa1"}]}]}}}, @NFTA_INNER_EXPR={0x54, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x400e}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_META_SREG={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x24, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}]}, 0x25e0}, 0x1, 0x0, 0x0, 0x4008040}, 0x880) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056128ff16b2a141a2288e717", 0x2c) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0xa, &(0x7f0000005380), 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000006300000085000000760000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r11, 0x1, 0x3c, 0x0, &(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) 21.432493015s ago: executing program 1 (id=1883): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000330603000000fdffffffffffffff0000000000000000000000006401010100000000000000000000000000000000000000000200806000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026bd7000000000000a"], 0x138}}, 0x4000000) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000330603000000fdffffffffffffff0000000000000000000000006401010100000000000000000000000000000000000000000200806000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026bd7000000000000a"], 0x138}}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0xa, 0x0, 0xff, 0x1e, 0x2, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010a838caad4848f07800000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0x40}}, 0x44) syz_emit_ethernet(0x22, &(0x7f00000014c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x88fb, @generic={{0x5, 0x4, 0x0, 0x4, 0x14, 0x64, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @remote}}}}}, 0x0) 21.372031791s ago: executing program 3 (id=1884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r2, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) write$nci(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="710505cd02028201010603046cb60780040fddb30473642ecc"], 0x19) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x25dfdbfe, {{}, {0x0, 0x6}, {0x14, 0x19, {0x3e, 0x4, 0x4d, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 21.228076871s ago: executing program 1 (id=1886): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) unshare(0x22020600) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000040)=0xffffff01, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000100)={0x14, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000001c0)={0x7, &(0x7f0000000000)=[{0x4, 0x0, 0x3, 0x400}, {0x1, 0x3d, 0xf, 0x6}, {0x4, 0x1, 0x1, 0xfff}, {0x3, 0x5, 0x8, 0x8}, {0x2, 0x6, 0x4, 0x7fffffff}, {0x4, 0x6, 0x6, 0x4}, {0x8, 0x3, 0x6e, 0x6}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000001f0a0007000000000000000000"], 0x28}}, 0x0) 21.12441461s ago: executing program 4 (id=1887): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [0x7fffffff, 0x1, 0x1, 0x8, 0x0, 0x2], 0x5, &(0x7f0000000000)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x2d, "9c4ee5a77558f7b0244bfe3937a5efb024d9a37d05f4151be87c737c26124ed2e1f464aca53c40436a7f27c709"}, &(0x7f0000000180)=0x35) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x7c4}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x7, 0x260571a4f1cdf9cd, 0x8, 0xff, r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x24000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r5 = accept(r3, &(0x7f0000000380)=@can, &(0x7f0000000400)=0x80) recvfrom$l2tp6(r5, &(0x7f0000000440)=""/237, 0xed, 0x21, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000540), &(0x7f0000000580)=0x4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = accept4$tipc(r5, &(0x7f0000000600), &(0x7f0000000640)=0x10, 0x800) sendfile(r6, r7, &(0x7f0000000680)=0xffffffffffffffff, 0xfffffffffffffffa) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r5) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x218, r8, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x10c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa4c}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4800}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x56}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc2c}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x340}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd41}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe9ea}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x14}, @NL80211_ATTR_REG_RULES={0xe8, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x82}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc00}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4e5f9fee}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7f}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xe}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x20040800}, 0x4841) sendmsg$802154_dgram(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000b40)={&(0x7f0000000a40)="691255aab4a0020e385a85092307a794648d8092d743fd156b05734c140d79b6264da120c5902aed88820c04637b29ebbfb54f78695703338b2ffcc1ffd8e979cdffee0229c1595802a8189ff7cc49f6a63f8a931800456c28a28f17ffa3f7585ab13ac410ccc562ea335725cc752a2cfa26a98e2deedcde947475853479fac0e6479f5113605f6b802f75234a9e56d7d13335454b83e39ddc17ddc72a569b1b64fbeb8a14a9708103ef80ab2ae1c55212dd34f954f18337d7c17169a9ec410f23ce1466e4a09f8085ae930439eaf227859787066500b0925a953b2b907b416cbdef3cbccc95c9b34eeff9c631a40bd19db0", 0xf2}, 0x1, 0x0, 0x0, 0x4000}, 0x40883) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000bc0)={0x0, 'veth0_macvtap\x00', {0x3}, 0x5}) clock_gettime(0x0, &(0x7f0000000c40)={0x0, 0x0}) ppoll(&(0x7f0000000c00)=[{r0, 0x400}], 0x1, &(0x7f0000000c80)={r9, r10+60000000}, &(0x7f0000000cc0)={[0x6]}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000d00)=@assoc_value={r2, 0x1}, &(0x7f0000000d40)=0x8) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000d80)={0x48, 0x8}, 0x2) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000dc0)={0x1, 0x5}, 0x2) pselect6(0x40, &(0x7f0000000e00)={0x6f, 0x5, 0x7, 0x100000000, 0x9, 0x3ff, 0x4, 0x4}, &(0x7f0000000e40)={0x100000000, 0xfffffffffffffffd, 0x5, 0x1, 0x8, 0xfffffffffffffff2, 0x1000, 0x3ff}, &(0x7f0000000e80)={0x7, 0x7, 0x200, 0x400, 0x80000000, 0x4, 0xe921, 0x3}, &(0x7f0000000ec0), &(0x7f0000000f40)={&(0x7f0000000f00)={[0x20000000]}, 0x8}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=0x0) sendmsg$sock(r3, &(0x7f0000001200)={&(0x7f0000000fc0)=@nfc={0x27, r12, 0x0, 0x6}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001040)="78b5ec34504b35b01db50857a44769b388d48a240e52cd9cbbc9ec37a71780f1892bda66b245245956f1cb6beeb0400cbdd8b49a0ef4e9f1865f06513e9960577eb4e276ba6583ea26b01c9feccbe0363889d1cf7a44d6", 0x57}, {&(0x7f00000010c0)="4d6ca2319511bfa60525fe1cb6ad7c56b8754f64444219bcfa7c82d2f5b02dc8bb614fc07c2f1bf4b17d2789a9b5f4906e8386086eea0b02e5c8215128e65e19d440f5b0d17cdc4888268f849217c7c137564e4d899f9fa7fc9cbf042b4cc4cd95cffa63980144843707deb34c2b8cd8f991581fcec5b37c728335fdce8338afc4fa7b4dfcf57588f75f6c6a46fec3d933ac30c8f962a2d15bb28470fd81178196c5020aae8fc85472ab3d833c4949b5edaad0b4ddd24b62c3da5c288a35360bd23c8e0deeeb273c2094ca984df7af9058abc78da9f9baeb9c37afc741fcfc0d9bcba9512fa345e8f43e10052148930e5f6b6c", 0xf3}], 0x2}, 0x20000016) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000001240)={0xc01, 0x8008, 0x7ff, 0x0, r11}, 0x10) sendmsg$nl_route(r5, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)=@ipv4_newroute={0x34, 0x18, 0x200, 0x70bd29, 0x25dfdbfe, {0x2, 0x10, 0x10, 0x40, 0xfe, 0x4, 0xfd, 0x9, 0x2200}, [@RTA_PRIORITY={0x8, 0x6, 0xffffff44}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_DPORT={0x6, 0x1d, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x48020}, 0x4040800) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000013c0)='tasks\x00', 0x2, 0x0) 20.909678824s ago: executing program 1 (id=1890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 20.831408738s ago: executing program 1 (id=1891): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80003, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1}, 0x80, 0x0}}], 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, r1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000002060101000000000000850defa9a2c095e4078005001400d900000005008400020000000900020073797a32000000000c000300686173683a6970000500010007000000a63024e48d007fb1d92bacb01d6c2afc303f78dfcd497d35d914948c26b33f61ed88e250cbd13e6d2b30460b10c82e22d6ec0525852710072a218b9a2ba72c75fd15ce7a29abed73096ea4c1d3b2fa06000000000000004de2a912e428e5631619a1fb378fc03ff574366a028c348126d1c08bb08e3576ec4419324f61faef289a636d0cfb3dd0cf9e8f933d077df3e376"], 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x4e24, @private=0xa010100}}) 20.824515884s ago: executing program 0 (id=1892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="00000000aaa2aaaaaa09aaaaaaaaaa1b88a80d008100660086dd67ea503902b80601fc020000000000000000000000000000000002000000000000000000000000010c000bd1680000000101000000000000c2040100000501020000000000000000ff0005316400000000000000000000000001000000000000000a010800000000fe880000000000000000000000000001fe8000000000000000000000000000bbfc000000000000000000000000000000ff020000000000000000000000000001ff02000000000000"], 0x2fa) 20.611359077s ago: executing program 1 (id=1893): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000004c0)=0x1000) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x400, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x1f, 0x0, &(0x7f0000001040)) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x1, @none, 0x2ef}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080), 0x4) listen(r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x8, @empty, 0x7ff}}, [0x49, 0x8, 0x1000, 0xffffffff, 0x21dc, 0x200, 0x51b, 0x7ff, 0x0, 0x7, 0x9, 0x1, 0x8000000000, 0x5, 0x8000000000000000]}, &(0x7f0000000240)=0x100) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="fbffff7f", @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000000000000c4100000003001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={r6, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, &(0x7f0000000400)) r9 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f0000e1f6a43de4215c6000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000040)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0x8, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d0000004000000000ffc09e474062a82e68020000000000000500000000060015000300000014001680100008800c0003800500010081000000"], 0x38}}, 0x0) 20.51719288s ago: executing program 2 (id=1894): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x10001) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001280), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3}, 0x20) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x2, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3f66d6361dbb7d553b4e92155", 0x39}], 0x1}, 0x0) 20.440831904s ago: executing program 0 (id=1895): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14, 0x80000) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x101, 0xc, 0x6, 0x5}]}, 0x10) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) r5 = socket(0x1, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r5}, 0x20) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r8 = socket(0x1, 0x803, 0x0) sendto$unix(r8, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9100", @ANYRES16=r4, @ANYBLOB="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"], 0x290}, 0x1, 0x0, 0x0, 0x1}, 0x4044001) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1919e40104040000040000000900d16aff795d94463d36249d8b85b0f19f383f3aeca80e20070000a7000100fcc9429f1597fef699775e2c", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000fdffffff00"/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x7a, 0x0, &(0x7f00000000c0)) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000580)={0x0, @multicast2}, &(0x7f00000005c0)=0xc) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r11, 0x6, 0x19, &(0x7f0000000ec0), 0x4) sendmsg$inet(r11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30004084) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x1, &(0x7f0000000800)=""/178, &(0x7f0000000500)=0xb2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ac00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 20.256435276s ago: executing program 2 (id=1896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtclass={0x70, 0x28, 0x10, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x4, 0xfff2}, {0xb, 0xfff3}, {0x9, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x5}}, @TCA_RATE={0x6, 0x5, {0x7, 0x3}}, @tclass_kind_options=@c_qfq={{0x8}, {0x2c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0xfffffff9}, @TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffff}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xff}}]}, 0x70}}, 0x20040054) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtclass={0x70, 0x28, 0x10, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x4, 0xfff2}, {0xb, 0xfff3}, {0x9, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x5}}, @TCA_RATE={0x6, 0x5, {0x7, 0x3}}, @tclass_kind_options=@c_qfq={{0x8}, {0x2c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0xfffffff9}, @TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffff}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xff}}]}, 0x70}}, 0x20040054) (async) 19.952821731s ago: executing program 0 (id=1897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000700000001"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x700, 0x7800, 0x1, 0x8000, {{0x6, 0x4, 0x1, 0x1c, 0x18, 0x64, 0x0, 0x7, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'syztnl0\x00', r2, 0x80, 0x1, 0x9, 0xf064, {{0x9, 0x4, 0x0, 0x2, 0x24, 0x67, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast2, {[@rr={0x7, 0xf, 0x2f, [@loopback, @loopback, @broadcast]}, @noop]}}}}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000002100)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, [{0x5, 0x0, "9dc8"}]}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000002100)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, [{0x5, 0x0, "9dc8"}]}}}}}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg(r5, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2001, 0x0) (async) recvmmsg(r5, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2001, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 19.944469674s ago: executing program 2 (id=1898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x3, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="50f92593a3b8ba82be3964d7d0b9d66942df", 0x12}], 0x1}}], 0x2, 0x40000000) 19.784291304s ago: executing program 2 (id=1899): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffff000008004500007000f1ffffff01907864010101ac1414aa5f725af398bca9f72e8b0303907803000000450000000066000a00704100ac141437ac1414bb01443cf473e00000022c00b61dac14e4aa1c000400e000000100000006ac140007fffffffffffffc01e000000100000000000000000000800100000000000000"], 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0xf) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x541001, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) sendmmsg$inet(r4, &(0x7f0000000b00)=[{{&(0x7f0000000980)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x1, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4008001}, 0x44894) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x0, @bcast, @bpq0, 0x9, 'syz0\x00', @default, 0x1, 0x1, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000014000100000000000000000008001300", @ANYRES32=r3, @ANYBLOB="efff0180fbc032c4"], 0x20}], 0x1, 0x0, 0x16}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000c00000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 18.059607639s ago: executing program 0 (id=1900): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r3, r1}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @loopback}]}, 0x24}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x22, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 15.651435916s ago: executing program 0 (id=1901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 15.513855103s ago: executing program 0 (id=1902): ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8080) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r5, 0xb0fe12b999fd9953, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x4000040) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0xbc, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x20801) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) r7 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r7, &(0x7f0000000080)={0x23, 0x0, 0x10, 0x7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f3ff000000000000000000fcffffffffffefff006c6200000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r0, 0x1, 0x0, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0) 6.028359464s ago: executing program 32 (id=1884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r2, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) write$nci(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="710505cd02028201010603046cb60780040fddb30473642ecc"], 0x19) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x25dfdbfe, {{}, {0x0, 0x6}, {0x14, 0x19, {0x3e, 0x4, 0x4d, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 5.961925793s ago: executing program 33 (id=1887): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [0x7fffffff, 0x1, 0x1, 0x8, 0x0, 0x2], 0x5, &(0x7f0000000000)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x2d, "9c4ee5a77558f7b0244bfe3937a5efb024d9a37d05f4151be87c737c26124ed2e1f464aca53c40436a7f27c709"}, &(0x7f0000000180)=0x35) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x7c4}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x7, 0x260571a4f1cdf9cd, 0x8, 0xff, r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x24000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r5 = accept(r3, &(0x7f0000000380)=@can, &(0x7f0000000400)=0x80) recvfrom$l2tp6(r5, &(0x7f0000000440)=""/237, 0xed, 0x21, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000540), &(0x7f0000000580)=0x4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = accept4$tipc(r5, &(0x7f0000000600), &(0x7f0000000640)=0x10, 0x800) sendfile(r6, r7, &(0x7f0000000680)=0xffffffffffffffff, 0xfffffffffffffffa) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r5) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x218, r8, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x10c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa4c}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4800}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x56}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc2c}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x340}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd41}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe9ea}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x14}, @NL80211_ATTR_REG_RULES={0xe8, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x82}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc00}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4e5f9fee}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7f}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xe}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x20040800}, 0x4841) sendmsg$802154_dgram(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000b40)={&(0x7f0000000a40)="691255aab4a0020e385a85092307a794648d8092d743fd156b05734c140d79b6264da120c5902aed88820c04637b29ebbfb54f78695703338b2ffcc1ffd8e979cdffee0229c1595802a8189ff7cc49f6a63f8a931800456c28a28f17ffa3f7585ab13ac410ccc562ea335725cc752a2cfa26a98e2deedcde947475853479fac0e6479f5113605f6b802f75234a9e56d7d13335454b83e39ddc17ddc72a569b1b64fbeb8a14a9708103ef80ab2ae1c55212dd34f954f18337d7c17169a9ec410f23ce1466e4a09f8085ae930439eaf227859787066500b0925a953b2b907b416cbdef3cbccc95c9b34eeff9c631a40bd19db0", 0xf2}, 0x1, 0x0, 0x0, 0x4000}, 0x40883) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000bc0)={0x0, 'veth0_macvtap\x00', {0x3}, 0x5}) clock_gettime(0x0, &(0x7f0000000c40)={0x0, 0x0}) ppoll(&(0x7f0000000c00)=[{r0, 0x400}], 0x1, &(0x7f0000000c80)={r9, r10+60000000}, &(0x7f0000000cc0)={[0x6]}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000d00)=@assoc_value={r2, 0x1}, &(0x7f0000000d40)=0x8) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000d80)={0x48, 0x8}, 0x2) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000dc0)={0x1, 0x5}, 0x2) pselect6(0x40, &(0x7f0000000e00)={0x6f, 0x5, 0x7, 0x100000000, 0x9, 0x3ff, 0x4, 0x4}, &(0x7f0000000e40)={0x100000000, 0xfffffffffffffffd, 0x5, 0x1, 0x8, 0xfffffffffffffff2, 0x1000, 0x3ff}, &(0x7f0000000e80)={0x7, 0x7, 0x200, 0x400, 0x80000000, 0x4, 0xe921, 0x3}, &(0x7f0000000ec0), &(0x7f0000000f40)={&(0x7f0000000f00)={[0x20000000]}, 0x8}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=0x0) sendmsg$sock(r3, &(0x7f0000001200)={&(0x7f0000000fc0)=@nfc={0x27, r12, 0x0, 0x6}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001040)="78b5ec34504b35b01db50857a44769b388d48a240e52cd9cbbc9ec37a71780f1892bda66b245245956f1cb6beeb0400cbdd8b49a0ef4e9f1865f06513e9960577eb4e276ba6583ea26b01c9feccbe0363889d1cf7a44d6", 0x57}, {&(0x7f00000010c0)="4d6ca2319511bfa60525fe1cb6ad7c56b8754f64444219bcfa7c82d2f5b02dc8bb614fc07c2f1bf4b17d2789a9b5f4906e8386086eea0b02e5c8215128e65e19d440f5b0d17cdc4888268f849217c7c137564e4d899f9fa7fc9cbf042b4cc4cd95cffa63980144843707deb34c2b8cd8f991581fcec5b37c728335fdce8338afc4fa7b4dfcf57588f75f6c6a46fec3d933ac30c8f962a2d15bb28470fd81178196c5020aae8fc85472ab3d833c4949b5edaad0b4ddd24b62c3da5c288a35360bd23c8e0deeeb273c2094ca984df7af9058abc78da9f9baeb9c37afc741fcfc0d9bcba9512fa345e8f43e10052148930e5f6b6c", 0xf3}], 0x2}, 0x20000016) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000001240)={0xc01, 0x8008, 0x7ff, 0x0, r11}, 0x10) sendmsg$nl_route(r5, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)=@ipv4_newroute={0x34, 0x18, 0x200, 0x70bd29, 0x25dfdbfe, {0x2, 0x10, 0x10, 0x40, 0xfe, 0x4, 0xfd, 0x9, 0x2200}, [@RTA_PRIORITY={0x8, 0x6, 0xffffff44}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_DPORT={0x6, 0x1d, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x48020}, 0x4040800) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000013c0)='tasks\x00', 0x2, 0x0) 4.861675714s ago: executing program 34 (id=1893): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000004c0)=0x1000) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x400, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x1f, 0x0, &(0x7f0000001040)) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x1, @none, 0x2ef}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080), 0x4) listen(r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x8, @empty, 0x7ff}}, [0x49, 0x8, 0x1000, 0xffffffff, 0x21dc, 0x200, 0x51b, 0x7ff, 0x0, 0x7, 0x9, 0x1, 0x8000000000, 0x5, 0x8000000000000000]}, &(0x7f0000000240)=0x100) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="fbffff7f", @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000000000000c4100000003001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={r6, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, &(0x7f0000000400)) r9 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f0000e1f6a43de4215c6000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000040)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0x8, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d0000004000000000ffc09e474062a82e68020000000000000500000000060015000300000014001680100008800c0003800500010081000000"], 0x38}}, 0x0) 3.750146918s ago: executing program 35 (id=1899): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffff000008004500007000f1ffffff01907864010101ac1414aa5f725af398bca9f72e8b0303907803000000450000000066000a00704100ac141437ac1414bb01443cf473e00000022c00b61dac14e4aa1c000400e000000100000006ac140007fffffffffffffc01e000000100000000000000000000800100000000000000"], 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0xf) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x541001, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) sendmmsg$inet(r4, &(0x7f0000000b00)=[{{&(0x7f0000000980)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x1, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4008001}, 0x44894) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x0, @bcast, @bpq0, 0x9, 'syz0\x00', @default, 0x1, 0x1, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000014000100000000000000000008001300", @ANYRES32=r3, @ANYBLOB="efff0180fbc032c4"], 0x20}], 0x1, 0x0, 0x16}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000c00000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 0s ago: executing program 36 (id=1902): ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8080) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r5, 0xb0fe12b999fd9953, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x4000040) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0xbc, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x20801) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) r7 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r7, &(0x7f0000000080)={0x23, 0x0, 0x10, 0x7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f3ff000000000000000000fcffffffffffefff006c6200000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r0, 0x1, 0x0, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): files+0x3a0/0x420 [ 180.880713][ T9226] __x64_sys_sendmsg+0x19b/0x260 [ 180.880737][ T9226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.880770][ T9226] ? __pfx_ksys_write+0x10/0x10 [ 180.880791][ T9226] ? rcu_is_watching+0x15/0xb0 [ 180.880817][ T9226] ? do_syscall_64+0xbe/0x3b0 [ 180.880838][ T9226] do_syscall_64+0xfa/0x3b0 [ 180.880853][ T9226] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.880878][ T9226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.880897][ T9226] ? clear_bhb_loop+0x60/0xb0 [ 180.880921][ T9226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.880938][ T9226] RIP: 0033:0x7f6360b8ebe9 [ 180.880955][ T9226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.880969][ T9226] RSP: 002b:00007f6361a7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.880989][ T9226] RAX: ffffffffffffffda RBX: 00007f6360dc5fa0 RCX: 00007f6360b8ebe9 [ 180.881002][ T9226] RDX: 0000000020005000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 180.881014][ T9226] RBP: 00007f6361a7e090 R08: 0000000000000000 R09: 0000000000000000 [ 180.881024][ T9226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.881034][ T9226] R13: 00007f6360dc6038 R14: 00007f6360dc5fa0 R15: 00007ffdd674fde8 [ 180.881068][ T9226] [ 181.576862][ T9237] netlink: 256 bytes leftover after parsing attributes in process `syz.3.919'. [ 181.737975][ T9242] netlink: 256 bytes leftover after parsing attributes in process `syz.2.920'. [ 182.056675][ T9245] netlink: 'syz.4.922': attribute type 1 has an invalid length. [ 182.066870][ T9245] netlink: 232 bytes leftover after parsing attributes in process `syz.4.922'. [ 182.078562][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.925'. [ 182.321174][ T9265] netlink: 'syz.4.928': attribute type 11 has an invalid length. [ 182.366376][ T9265] netlink: 224 bytes leftover after parsing attributes in process `syz.4.928'. [ 182.394618][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 182.424799][ T9269] bridge_slave_1: left allmulticast mode [ 182.443819][ T9269] bridge_slave_1: left promiscuous mode [ 182.460185][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.534207][ T9269] bridge_slave_0: left allmulticast mode [ 182.543965][ T9269] bridge_slave_0: left promiscuous mode [ 182.581257][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.603853][ T9277] FAULT_INJECTION: forcing a failure. [ 182.603853][ T9277] name failslab, interval 1, probability 0, space 0, times 0 [ 182.636377][ T9277] CPU: 1 UID: 0 PID: 9277 Comm: syz.0.930 Not tainted syzkaller #0 PREEMPT(full) [ 182.636407][ T9277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.636418][ T9277] Call Trace: [ 182.636426][ T9277] [ 182.636435][ T9277] dump_stack_lvl+0x189/0x250 [ 182.636465][ T9277] ? __pfx____ratelimit+0x10/0x10 [ 182.636494][ T9277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.636517][ T9277] ? __pfx__printk+0x10/0x10 [ 182.636551][ T9277] ? __pfx___might_resched+0x10/0x10 [ 182.636576][ T9277] should_fail_ex+0x414/0x560 [ 182.636613][ T9277] should_failslab+0xa8/0x100 [ 182.636641][ T9277] __kmalloc_cache_noprof+0x70/0x3d0 [ 182.636664][ T9277] ? ioam6_genl_dumpns_start+0xfe/0x150 [ 182.636692][ T9277] ioam6_genl_dumpns_start+0xfe/0x150 [ 182.636716][ T9277] genl_start+0x4c3/0x6c0 [ 182.636751][ T9277] __netlink_dump_start+0x469/0x7e0 [ 182.636789][ T9277] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 182.636817][ T9277] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 182.636849][ T9277] ? __pfx_genl_start+0x10/0x10 [ 182.636868][ T9277] ? __pfx_genl_dumpit+0x10/0x10 [ 182.636888][ T9277] ? __pfx_genl_done+0x10/0x10 [ 182.636915][ T9277] ? bpf_lsm_capable+0x9/0x20 [ 182.636939][ T9277] ? security_capable+0x7e/0x2e0 [ 182.636983][ T9277] genl_rcv_msg+0x5da/0x790 [ 182.637014][ T9277] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.637034][ T9277] ? __pfx_ioam6_genl_dumpns_start+0x10/0x10 [ 182.637053][ T9277] ? __pfx_ioam6_genl_dumpns+0x10/0x10 [ 182.637072][ T9277] ? __pfx_ioam6_genl_dumpns_done+0x10/0x10 [ 182.637112][ T9277] netlink_rcv_skb+0x205/0x470 [ 182.637137][ T9277] ? __lock_acquire+0xab9/0xd20 [ 182.637165][ T9277] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.637189][ T9277] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.637240][ T9277] ? down_read+0x1ad/0x2e0 [ 182.637263][ T9277] genl_rcv+0x28/0x40 [ 182.637283][ T9277] netlink_unicast+0x82c/0x9e0 [ 182.637320][ T9277] ? __pfx_netlink_unicast+0x10/0x10 [ 182.637348][ T9277] ? netlink_sendmsg+0x642/0xb30 [ 182.637363][ T9277] ? skb_put+0x11b/0x210 [ 182.637387][ T9277] netlink_sendmsg+0x805/0xb30 [ 182.637417][ T9277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.637439][ T9277] ? aa_sock_msg_perm+0xf1/0x1d0 [ 182.637461][ T9277] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 182.637480][ T9277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.637499][ T9277] __sock_sendmsg+0x219/0x270 [ 182.637528][ T9277] ____sys_sendmsg+0x505/0x830 [ 182.637557][ T9277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.637590][ T9277] ? import_iovec+0x74/0xa0 [ 182.637616][ T9277] ___sys_sendmsg+0x21f/0x2a0 [ 182.637640][ T9277] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.637707][ T9277] ? __fget_files+0x2a/0x420 [ 182.637732][ T9277] ? __fget_files+0x3a0/0x420 [ 182.637769][ T9277] __x64_sys_sendmsg+0x19b/0x260 [ 182.637789][ T9277] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.637817][ T9277] ? __pfx_ksys_write+0x10/0x10 [ 182.637836][ T9277] ? rcu_is_watching+0x15/0xb0 [ 182.637863][ T9277] ? do_syscall_64+0xbe/0x3b0 [ 182.637886][ T9277] do_syscall_64+0xfa/0x3b0 [ 182.637901][ T9277] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.637924][ T9277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.637941][ T9277] ? clear_bhb_loop+0x60/0xb0 [ 182.637974][ T9277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.637991][ T9277] RIP: 0033:0x7fd4d958ebe9 [ 182.638009][ T9277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.638024][ T9277] RSP: 002b:00007fd4da35e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.638045][ T9277] RAX: ffffffffffffffda RBX: 00007fd4d97c5fa0 RCX: 00007fd4d958ebe9 [ 182.638057][ T9277] RDX: 0000000020005000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 182.638068][ T9277] RBP: 00007fd4da35e090 R08: 0000000000000000 R09: 0000000000000000 [ 182.638080][ T9277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.638090][ T9277] R13: 00007fd4d97c6038 R14: 00007fd4d97c5fa0 R15: 00007fff867c2fc8 [ 182.638124][ T9277] [ 183.386275][ T9284] netlink: 256 bytes leftover after parsing attributes in process `syz.2.932'. [ 183.846015][ T9305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.938'. [ 183.860894][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.937'. [ 183.870168][ T9308] netlink: 'syz.1.937': attribute type 20 has an invalid length. [ 183.919514][ T9310] netlink: 256 bytes leftover after parsing attributes in process `syz.0.940'. [ 183.995813][ T9320] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20000 [ 184.007490][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.089704][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.251424][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.263565][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.274932][ T9330] netlink: 'syz.1.942': attribute type 13 has an invalid length. [ 184.282962][ T9330] netlink: 'syz.1.942': attribute type 58 has an invalid length. [ 184.414460][ T9336] FAULT_INJECTION: forcing a failure. [ 184.414460][ T9336] name failslab, interval 1, probability 0, space 0, times 0 [ 184.490848][ T9336] CPU: 1 UID: 0 PID: 9336 Comm: syz.3.943 Not tainted syzkaller #0 PREEMPT(full) [ 184.490876][ T9336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.490887][ T9336] Call Trace: [ 184.490895][ T9336] [ 184.490904][ T9336] dump_stack_lvl+0x189/0x250 [ 184.490933][ T9336] ? __pfx____ratelimit+0x10/0x10 [ 184.490961][ T9336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.490983][ T9336] ? __pfx__printk+0x10/0x10 [ 184.491016][ T9336] ? __pfx___might_resched+0x10/0x10 [ 184.491041][ T9336] should_fail_ex+0x414/0x560 [ 184.491072][ T9336] should_failslab+0xa8/0x100 [ 184.491101][ T9336] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 184.491136][ T9336] ? __alloc_skb+0x112/0x2d0 [ 184.491158][ T9336] __alloc_skb+0x112/0x2d0 [ 184.491180][ T9336] netlink_sendmsg+0x5c6/0xb30 [ 184.491210][ T9336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.491231][ T9336] ? aa_sock_msg_perm+0xf1/0x1d0 [ 184.491251][ T9336] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.491270][ T9336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.491288][ T9336] __sock_sendmsg+0x219/0x270 [ 184.491314][ T9336] __sys_sendto+0x3bd/0x520 [ 184.491334][ T9336] ? __pfx___sys_sendto+0x10/0x10 [ 184.491362][ T9336] ? count_memcg_event_mm+0x21/0x260 [ 184.491396][ T9336] ? exc_page_fault+0x76/0xf0 [ 184.491425][ T9336] ? do_user_addr_fault+0xc8a/0x1390 [ 184.491458][ T9336] __x64_sys_sendto+0xde/0x100 [ 184.491479][ T9336] do_syscall_64+0xfa/0x3b0 [ 184.491495][ T9336] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.491520][ T9336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.491538][ T9336] ? clear_bhb_loop+0x60/0xb0 [ 184.491560][ T9336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.491577][ T9336] RIP: 0033:0x7f6360b90a7c [ 184.491594][ T9336] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 184.491609][ T9336] RSP: 002b:00007f6361a3aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 184.491630][ T9336] RAX: ffffffffffffffda RBX: 00007f6361a3afc0 RCX: 00007f6360b90a7c [ 184.491642][ T9336] RDX: 0000000000000020 RSI: 00007f6361a3b010 RDI: 0000000000000003 [ 184.491654][ T9336] RBP: 0000000000000000 R08: 00007f6361a3af14 R09: 000000000000000c [ 184.491664][ T9336] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 184.491675][ T9336] R13: 00007f6361a3af68 R14: 00007f6361a3b010 R15: 0000000000000000 [ 184.491704][ T9336] [ 185.298834][ T9369] netlink: 'syz.1.952': attribute type 10 has an invalid length. [ 185.357572][ T9369] bridge0: port 4(team0) entered blocking state [ 185.389220][ T9369] bridge0: port 4(team0) entered disabled state [ 185.395823][ T9369] team0: entered allmulticast mode [ 185.456969][ T9369] team_slave_0: entered allmulticast mode [ 185.463380][ T9369] team_slave_1: entered allmulticast mode [ 185.529532][ T9369] team0: entered promiscuous mode [ 185.554959][ T9369] team_slave_0: entered promiscuous mode [ 185.577094][ T9369] team_slave_1: entered promiscuous mode [ 186.746223][ T9411] netlink: 'syz.4.964': attribute type 4 has an invalid length. [ 186.852581][ T9427] FAULT_INJECTION: forcing a failure. [ 186.852581][ T9427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.902346][ T9427] CPU: 0 UID: 0 PID: 9427 Comm: syz.3.969 Not tainted syzkaller #0 PREEMPT(full) [ 186.902374][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.902385][ T9427] Call Trace: [ 186.902393][ T9427] [ 186.902401][ T9427] dump_stack_lvl+0x189/0x250 [ 186.902431][ T9427] ? __pfx____ratelimit+0x10/0x10 [ 186.902457][ T9427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.902481][ T9427] ? __pfx__printk+0x10/0x10 [ 186.902520][ T9427] should_fail_ex+0x414/0x560 [ 186.902551][ T9427] _copy_to_user+0x31/0xb0 [ 186.902574][ T9427] simple_read_from_buffer+0xe1/0x170 [ 186.902608][ T9427] proc_fail_nth_read+0x1b3/0x220 [ 186.902642][ T9427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.902676][ T9427] ? rw_verify_area+0x2a6/0x4d0 [ 186.902697][ T9427] ? __lock_acquire+0xab9/0xd20 [ 186.902722][ T9427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.902744][ T9427] vfs_read+0x1fd/0xa30 [ 186.902767][ T9427] ? fdget_pos+0x247/0x320 [ 186.902788][ T9427] ? __pfx___mutex_lock+0x10/0x10 [ 186.902816][ T9427] ? __pfx_vfs_read+0x10/0x10 [ 186.902842][ T9427] ? __fget_files+0x2a/0x420 [ 186.902873][ T9427] ? __fget_files+0x3a0/0x420 [ 186.902907][ T9427] ? __fget_files+0x2a/0x420 [ 186.902944][ T9427] ksys_read+0x145/0x250 [ 186.902970][ T9427] ? __pfx_ksys_read+0x10/0x10 [ 186.902991][ T9427] ? rcu_is_watching+0x15/0xb0 [ 186.903015][ T9427] ? do_syscall_64+0xbe/0x3b0 [ 186.903037][ T9427] do_syscall_64+0xfa/0x3b0 [ 186.903052][ T9427] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.903077][ T9427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.903095][ T9427] ? clear_bhb_loop+0x60/0xb0 [ 186.903118][ T9427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.903135][ T9427] RIP: 0033:0x7f6360b8d5fc [ 186.903152][ T9427] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 186.903167][ T9427] RSP: 002b:00007f6361a7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.903188][ T9427] RAX: ffffffffffffffda RBX: 00007f6360dc5fa0 RCX: 00007f6360b8d5fc [ 186.903201][ T9427] RDX: 000000000000000f RSI: 00007f6361a7e0a0 RDI: 0000000000000003 [ 186.903212][ T9427] RBP: 00007f6361a7e090 R08: 0000000000000000 R09: 0000000000000000 [ 186.903224][ T9427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.903234][ T9427] R13: 00007f6360dc6038 R14: 00007f6360dc5fa0 R15: 00007ffdd674fde8 [ 186.903267][ T9427] [ 186.922559][ T9429] __nla_validate_parse: 7 callbacks suppressed [ 186.922578][ T9429] netlink: 256 bytes leftover after parsing attributes in process `syz.2.968'. [ 188.036001][ T9465] netlink: 256 bytes leftover after parsing attributes in process `syz.0.977'. [ 188.172965][ T9474] FAULT_INJECTION: forcing a failure. [ 188.172965][ T9474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.292560][ T9474] CPU: 1 UID: 0 PID: 9474 Comm: syz.0.977 Not tainted syzkaller #0 PREEMPT(full) [ 188.292588][ T9474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.292598][ T9474] Call Trace: [ 188.292606][ T9474] [ 188.292614][ T9474] dump_stack_lvl+0x189/0x250 [ 188.292643][ T9474] ? __pfx____ratelimit+0x10/0x10 [ 188.292670][ T9474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.292693][ T9474] ? __pfx__printk+0x10/0x10 [ 188.292719][ T9474] ? __might_fault+0xb0/0x130 [ 188.292757][ T9474] should_fail_ex+0x414/0x560 [ 188.292788][ T9474] _copy_from_iter+0x1de/0x1790 [ 188.292825][ T9474] ? rcu_is_watching+0x15/0xb0 [ 188.292847][ T9474] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 188.292874][ T9474] ? __pfx__copy_from_iter+0x10/0x10 [ 188.292896][ T9474] ? __build_skb_around+0x257/0x3e0 [ 188.292930][ T9474] ? netlink_sendmsg+0x642/0xb30 [ 188.292945][ T9474] ? skb_put+0x11b/0x210 [ 188.292968][ T9474] netlink_sendmsg+0x6b2/0xb30 [ 188.293002][ T9474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.293024][ T9474] ? aa_sock_msg_perm+0xf1/0x1d0 [ 188.293044][ T9474] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.293063][ T9474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.293082][ T9474] __sock_sendmsg+0x219/0x270 [ 188.293111][ T9474] __sys_sendto+0x3bd/0x520 [ 188.293132][ T9474] ? __pfx___sys_sendto+0x10/0x10 [ 188.293163][ T9474] ? count_memcg_event_mm+0x21/0x260 [ 188.293200][ T9474] ? exc_page_fault+0x76/0xf0 [ 188.293231][ T9474] ? do_user_addr_fault+0xc8a/0x1390 [ 188.293265][ T9474] __x64_sys_sendto+0xde/0x100 [ 188.293287][ T9474] do_syscall_64+0xfa/0x3b0 [ 188.293303][ T9474] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.293328][ T9474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.293347][ T9474] ? clear_bhb_loop+0x60/0xb0 [ 188.293370][ T9474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.293387][ T9474] RIP: 0033:0x7fd4d9590a7c [ 188.293404][ T9474] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 188.293419][ T9474] RSP: 002b:00007fd4d77f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 188.293440][ T9474] RAX: ffffffffffffffda RBX: 00007fd4d77f4fc0 RCX: 00007fd4d9590a7c [ 188.293454][ T9474] RDX: 0000000000000020 RSI: 00007fd4d77f5010 RDI: 0000000000000003 [ 188.293465][ T9474] RBP: 0000000000000000 R08: 00007fd4d77f4f14 R09: 000000000000000c [ 188.293477][ T9474] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 188.293487][ T9474] R13: 00007fd4d77f4f68 R14: 00007fd4d77f5010 R15: 0000000000000000 [ 188.293518][ T9474] [ 188.821089][ T9478] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 188.880632][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.982'. [ 188.924496][ T9489] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.982'. [ 188.968475][ T9489] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 189.028968][ T9498] netlink: 256 bytes leftover after parsing attributes in process `syz.1.985'. [ 189.801822][ T9529] netlink: 256 bytes leftover after parsing attributes in process `syz.2.994'. [ 189.932265][ T9537] FAULT_INJECTION: forcing a failure. [ 189.932265][ T9537] name failslab, interval 1, probability 0, space 0, times 0 [ 189.971280][ T9537] CPU: 0 UID: 0 PID: 9537 Comm: syz.2.994 Not tainted syzkaller #0 PREEMPT(full) [ 189.971304][ T9537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.971314][ T9537] Call Trace: [ 189.971322][ T9537] [ 189.971330][ T9537] dump_stack_lvl+0x189/0x250 [ 189.971359][ T9537] ? __pfx____ratelimit+0x10/0x10 [ 189.971383][ T9537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.971405][ T9537] ? __pfx__printk+0x10/0x10 [ 189.971432][ T9537] ? __lock_acquire+0xab9/0xd20 [ 189.971470][ T9537] should_fail_ex+0x414/0x560 [ 189.971501][ T9537] should_failslab+0xa8/0x100 [ 189.971529][ T9537] kmem_cache_alloc_noprof+0x73/0x3c0 [ 189.971553][ T9537] ? skb_clone+0x212/0x3a0 [ 189.971580][ T9537] skb_clone+0x212/0x3a0 [ 189.971606][ T9537] __netlink_deliver_tap+0x404/0x850 [ 189.971651][ T9537] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.971681][ T9537] netlink_deliver_tap+0x19c/0x1b0 [ 189.971710][ T9537] netlink_unicast+0x7fa/0x9e0 [ 189.971747][ T9537] ? __pfx_netlink_unicast+0x10/0x10 [ 189.971776][ T9537] ? netlink_sendmsg+0x642/0xb30 [ 189.971791][ T9537] ? skb_put+0x11b/0x210 [ 189.971815][ T9537] netlink_sendmsg+0x805/0xb30 [ 189.971854][ T9537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.971876][ T9537] ? aa_sock_msg_perm+0xf1/0x1d0 [ 189.971897][ T9537] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 189.971918][ T9537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.971937][ T9537] __sock_sendmsg+0x219/0x270 [ 189.971967][ T9537] __sys_sendto+0x3bd/0x520 [ 189.971989][ T9537] ? __pfx___sys_sendto+0x10/0x10 [ 189.972021][ T9537] ? count_memcg_event_mm+0x21/0x260 [ 189.972060][ T9537] ? exc_page_fault+0x76/0xf0 [ 189.972090][ T9537] ? do_user_addr_fault+0xc8a/0x1390 [ 189.972125][ T9537] __x64_sys_sendto+0xde/0x100 [ 189.972149][ T9537] do_syscall_64+0xfa/0x3b0 [ 189.972165][ T9537] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.972191][ T9537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.972210][ T9537] ? clear_bhb_loop+0x60/0xb0 [ 189.972235][ T9537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.972253][ T9537] RIP: 0033:0x7f9602390a7c [ 189.972276][ T9537] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 189.972292][ T9537] RSP: 002b:00007f9603289ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 189.972314][ T9537] RAX: ffffffffffffffda RBX: 00007f9603289fc0 RCX: 00007f9602390a7c [ 189.972327][ T9537] RDX: 0000000000000020 RSI: 00007f960328a010 RDI: 0000000000000003 [ 189.972339][ T9537] RBP: 0000000000000000 R08: 00007f9603289f14 R09: 000000000000000c [ 189.972350][ T9537] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 189.972362][ T9537] R13: 00007f9603289f68 R14: 00007f960328a010 R15: 0000000000000000 [ 189.972395][ T9537] [ 190.081996][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 190.174478][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 190.401505][ T9548] netlink: 'syz.3.999': attribute type 11 has an invalid length. [ 190.437113][ T9548] netlink: 'syz.3.999': attribute type 4 has an invalid length. [ 190.445551][ T9548] netlink: 224 bytes leftover after parsing attributes in process `syz.3.999'. [ 190.771573][ T9564] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1003'. [ 191.381301][ T9597] openvswitch: netlink: Flow actions attr not present in new flow. [ 191.432212][ T9596] FAULT_INJECTION: forcing a failure. [ 191.432212][ T9596] name failslab, interval 1, probability 0, space 0, times 0 [ 191.511220][ T9596] CPU: 0 UID: 0 PID: 9596 Comm: syz.2.1011 Not tainted syzkaller #0 PREEMPT(full) [ 191.511248][ T9596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.511259][ T9596] Call Trace: [ 191.511267][ T9596] [ 191.511276][ T9596] dump_stack_lvl+0x189/0x250 [ 191.511306][ T9596] ? __pfx____ratelimit+0x10/0x10 [ 191.511331][ T9596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.511354][ T9596] ? __pfx__printk+0x10/0x10 [ 191.511383][ T9596] ? __pfx___might_resched+0x10/0x10 [ 191.511402][ T9596] ? fs_reclaim_acquire+0x7d/0x100 [ 191.511436][ T9596] should_fail_ex+0x414/0x560 [ 191.511467][ T9596] should_failslab+0xa8/0x100 [ 191.511495][ T9596] __kmalloc_noprof+0xcb/0x4f0 [ 191.511518][ T9596] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 191.511547][ T9596] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 191.511578][ T9596] genl_family_rcv_msg_doit+0xb8/0x300 [ 191.511608][ T9596] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 191.511634][ T9596] ? __pfx_genl_get_cmd+0x10/0x10 [ 191.511676][ T9596] genl_rcv_msg+0x60e/0x790 [ 191.511706][ T9596] ? __pfx_genl_rcv_msg+0x10/0x10 [ 191.511728][ T9596] ? __pfx_ctrl_getfamily+0x10/0x10 [ 191.511750][ T9596] ? __asan_memcpy+0x40/0x70 [ 191.511770][ T9596] ? __pfx_ref_tracker_free+0x10/0x10 [ 191.511822][ T9596] netlink_rcv_skb+0x205/0x470 [ 191.511847][ T9596] ? __lock_acquire+0xab9/0xd20 [ 191.511874][ T9596] ? __pfx_genl_rcv_msg+0x10/0x10 [ 191.511898][ T9596] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.511956][ T9596] ? down_read+0x1ad/0x2e0 [ 191.511979][ T9596] genl_rcv+0x28/0x40 [ 191.511999][ T9596] netlink_unicast+0x82c/0x9e0 [ 191.512034][ T9596] ? __pfx_netlink_unicast+0x10/0x10 [ 191.512062][ T9596] ? netlink_sendmsg+0x642/0xb30 [ 191.512077][ T9596] ? skb_put+0x11b/0x210 [ 191.512101][ T9596] netlink_sendmsg+0x805/0xb30 [ 191.512130][ T9596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.512153][ T9596] ? aa_sock_msg_perm+0xf1/0x1d0 [ 191.512174][ T9596] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.512194][ T9596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.512213][ T9596] __sock_sendmsg+0x219/0x270 [ 191.512243][ T9596] __sys_sendto+0x3bd/0x520 [ 191.512265][ T9596] ? __pfx___sys_sendto+0x10/0x10 [ 191.512297][ T9596] ? count_memcg_event_mm+0x21/0x260 [ 191.512335][ T9596] ? exc_page_fault+0x76/0xf0 [ 191.512367][ T9596] ? do_user_addr_fault+0xc8a/0x1390 [ 191.512402][ T9596] __x64_sys_sendto+0xde/0x100 [ 191.512426][ T9596] do_syscall_64+0xfa/0x3b0 [ 191.512441][ T9596] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.512467][ T9596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.512486][ T9596] ? clear_bhb_loop+0x60/0xb0 [ 191.512510][ T9596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.512528][ T9596] RIP: 0033:0x7f9602390a7c [ 191.512546][ T9596] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 191.512562][ T9596] RSP: 002b:00007f9603289ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 191.512583][ T9596] RAX: ffffffffffffffda RBX: 00007f9603289fc0 RCX: 00007f9602390a7c [ 191.512596][ T9596] RDX: 0000000000000020 RSI: 00007f960328a010 RDI: 0000000000000003 [ 191.512608][ T9596] RBP: 0000000000000000 R08: 00007f9603289f14 R09: 000000000000000c [ 191.512620][ T9596] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 191.512630][ T9596] R13: 00007f9603289f68 R14: 00007f960328a010 R15: 0000000000000000 [ 191.512662][ T9596] [ 192.159565][ T9613] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 192.166064][ T9613] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 192.859053][ T9626] lo speed is unknown, defaulting to 1000 [ 193.169518][ T9644] __nla_validate_parse: 4 callbacks suppressed [ 193.169539][ T9644] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1028'. [ 193.397867][ T9650] FAULT_INJECTION: forcing a failure. [ 193.397867][ T9650] name failslab, interval 1, probability 0, space 0, times 0 [ 193.461824][ T9650] CPU: 0 UID: 0 PID: 9650 Comm: syz.2.1028 Not tainted syzkaller #0 PREEMPT(full) [ 193.461853][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.461864][ T9650] Call Trace: [ 193.461871][ T9650] [ 193.461880][ T9650] dump_stack_lvl+0x189/0x250 [ 193.461909][ T9650] ? __pfx____ratelimit+0x10/0x10 [ 193.461934][ T9650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.461955][ T9650] ? __pfx__printk+0x10/0x10 [ 193.461986][ T9650] ? __pfx___might_resched+0x10/0x10 [ 193.462018][ T9650] should_fail_ex+0x414/0x560 [ 193.462047][ T9650] should_failslab+0xa8/0x100 [ 193.462076][ T9650] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 193.462102][ T9650] ? __alloc_skb+0x112/0x2d0 [ 193.462123][ T9650] __alloc_skb+0x112/0x2d0 [ 193.462145][ T9650] ctrl_getfamily+0x3a1/0x590 [ 193.462170][ T9650] ? __pfx_ctrl_getfamily+0x10/0x10 [ 193.462191][ T9650] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 193.462223][ T9650] genl_family_rcv_msg_doit+0x215/0x300 [ 193.462251][ T9650] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 193.462301][ T9650] genl_rcv_msg+0x60e/0x790 [ 193.462331][ T9650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.462352][ T9650] ? __pfx_ctrl_getfamily+0x10/0x10 [ 193.462372][ T9650] ? __asan_memcpy+0x40/0x70 [ 193.462391][ T9650] ? __pfx_ref_tracker_free+0x10/0x10 [ 193.462425][ T9650] netlink_rcv_skb+0x205/0x470 [ 193.462448][ T9650] ? __lock_acquire+0xab9/0xd20 [ 193.462473][ T9650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.462494][ T9650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.462543][ T9650] ? down_read+0x1ad/0x2e0 [ 193.462564][ T9650] genl_rcv+0x28/0x40 [ 193.462582][ T9650] netlink_unicast+0x82c/0x9e0 [ 193.462616][ T9650] ? __pfx_netlink_unicast+0x10/0x10 [ 193.462643][ T9650] ? netlink_sendmsg+0x642/0xb30 [ 193.462657][ T9650] ? skb_put+0x11b/0x210 [ 193.462680][ T9650] netlink_sendmsg+0x805/0xb30 [ 193.462709][ T9650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.462731][ T9650] ? aa_sock_msg_perm+0xf1/0x1d0 [ 193.462750][ T9650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 193.462771][ T9650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.462789][ T9650] __sock_sendmsg+0x219/0x270 [ 193.462819][ T9650] __sys_sendto+0x3bd/0x520 [ 193.462841][ T9650] ? __pfx___sys_sendto+0x10/0x10 [ 193.462874][ T9650] ? count_memcg_event_mm+0x21/0x260 [ 193.462924][ T9650] ? rcu_is_watching+0x15/0xb0 [ 193.462947][ T9650] __x64_sys_sendto+0xde/0x100 [ 193.462971][ T9650] do_syscall_64+0xfa/0x3b0 [ 193.462987][ T9650] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.463021][ T9650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.463040][ T9650] ? clear_bhb_loop+0x60/0xb0 [ 193.463064][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.463083][ T9650] RIP: 0033:0x7f9602390a7c [ 193.463101][ T9650] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 193.463116][ T9650] RSP: 002b:00007f9603289ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 193.463137][ T9650] RAX: ffffffffffffffda RBX: 00007f9603289fc0 RCX: 00007f9602390a7c [ 193.463151][ T9650] RDX: 0000000000000020 RSI: 00007f960328a010 RDI: 0000000000000003 [ 193.463163][ T9650] RBP: 0000000000000000 R08: 00007f9603289f14 R09: 000000000000000c [ 193.463174][ T9650] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 193.463185][ T9650] R13: 00007f9603289f68 R14: 00007f960328a010 R15: 0000000000000000 [ 193.463219][ T9650] [ 193.889604][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 194.298168][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 194.377580][ T9670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1033'. [ 194.463751][ T9662] team0: Port device dummy0 removed [ 194.491705][ T9662] batman_adv: batadv0: Adding interface: dummy0 [ 194.501851][ T9662] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.592331][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.611185][ T9662] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 194.957186][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 194.985087][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'. [ 194.985160][ T9683] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1040'. [ 195.031988][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 195.076283][ T9682] netlink: 'syz.2.1039': attribute type 8 has an invalid length. [ 195.269292][ T9694] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1044'. [ 195.923363][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1051'. [ 195.938243][ T9715] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 195.960601][ T9715] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 196.348135][ T9728] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001 [ 196.460359][ T9729] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 196.513599][ T9740] netlink: 'syz.3.1057': attribute type 1 has an invalid length. [ 196.725700][ T9747] FAULT_INJECTION: forcing a failure. [ 196.725700][ T9747] name failslab, interval 1, probability 0, space 0, times 0 [ 196.750317][ T9747] CPU: 1 UID: 0 PID: 9747 Comm: syz.1.1058 Not tainted syzkaller #0 PREEMPT(full) [ 196.750345][ T9747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.750356][ T9747] Call Trace: [ 196.750363][ T9747] [ 196.750371][ T9747] dump_stack_lvl+0x189/0x250 [ 196.750400][ T9747] ? __pfx____ratelimit+0x10/0x10 [ 196.750426][ T9747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.750447][ T9747] ? __pfx__printk+0x10/0x10 [ 196.750489][ T9747] should_fail_ex+0x414/0x560 [ 196.750518][ T9747] should_failslab+0xa8/0x100 [ 196.750548][ T9747] kmem_cache_alloc_noprof+0x73/0x3c0 [ 196.750572][ T9747] ? skb_clone+0x212/0x3a0 [ 196.750598][ T9747] skb_clone+0x212/0x3a0 [ 196.750623][ T9747] __netlink_deliver_tap+0x404/0x850 [ 196.750664][ T9747] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.750694][ T9747] netlink_deliver_tap+0x19c/0x1b0 [ 196.750719][ T9747] netlink_sendskb+0x68/0x140 [ 196.750745][ T9747] netlink_unicast+0x397/0x9e0 [ 196.750766][ T9747] ? auto_movable_can_online_movable+0x14/0x7d0 [ 196.750800][ T9747] ? __pfx_netlink_unicast+0x10/0x10 [ 196.750830][ T9747] ? __alloc_skb+0x1bc/0x2d0 [ 196.750854][ T9747] ctrl_getfamily+0x499/0x590 [ 196.750879][ T9747] ? __pfx_ctrl_getfamily+0x10/0x10 [ 196.750898][ T9747] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 196.750930][ T9747] genl_family_rcv_msg_doit+0x215/0x300 [ 196.750961][ T9747] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 196.751023][ T9747] genl_rcv_msg+0x60e/0x790 [ 196.751055][ T9747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 196.751076][ T9747] ? __pfx_ctrl_getfamily+0x10/0x10 [ 196.751100][ T9747] ? __asan_memcpy+0x40/0x70 [ 196.751120][ T9747] ? __pfx_ref_tracker_free+0x10/0x10 [ 196.751157][ T9747] netlink_rcv_skb+0x205/0x470 [ 196.751180][ T9747] ? __lock_acquire+0xab9/0xd20 [ 196.751207][ T9747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 196.751231][ T9747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.751280][ T9747] ? down_read+0x1ad/0x2e0 [ 196.751304][ T9747] genl_rcv+0x28/0x40 [ 196.751322][ T9747] netlink_unicast+0x82c/0x9e0 [ 196.751363][ T9747] ? __pfx_netlink_unicast+0x10/0x10 [ 196.751391][ T9747] ? netlink_sendmsg+0x642/0xb30 [ 196.751405][ T9747] ? skb_put+0x11b/0x210 [ 196.751428][ T9747] netlink_sendmsg+0x805/0xb30 [ 196.751457][ T9747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.751478][ T9747] ? aa_sock_msg_perm+0xf1/0x1d0 [ 196.751498][ T9747] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.751518][ T9747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.751536][ T9747] __sock_sendmsg+0x219/0x270 [ 196.751565][ T9747] __sys_sendto+0x3bd/0x520 [ 196.751586][ T9747] ? __pfx___sys_sendto+0x10/0x10 [ 196.751618][ T9747] ? count_memcg_event_mm+0x21/0x260 [ 196.751658][ T9747] ? exc_page_fault+0x76/0xf0 [ 196.751690][ T9747] ? do_user_addr_fault+0xc8a/0x1390 [ 196.751723][ T9747] __x64_sys_sendto+0xde/0x100 [ 196.751745][ T9747] do_syscall_64+0xfa/0x3b0 [ 196.751760][ T9747] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.751786][ T9747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.751805][ T9747] ? clear_bhb_loop+0x60/0xb0 [ 196.751829][ T9747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.751846][ T9747] RIP: 0033:0x7f3285b90a7c [ 196.751864][ T9747] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 196.751880][ T9747] RSP: 002b:00007f32869f6ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 196.751901][ T9747] RAX: ffffffffffffffda RBX: 00007f32869f6fc0 RCX: 00007f3285b90a7c [ 196.751914][ T9747] RDX: 0000000000000020 RSI: 00007f32869f7010 RDI: 0000000000000003 [ 196.751926][ T9747] RBP: 0000000000000000 R08: 00007f32869f6f14 R09: 000000000000000c [ 196.751937][ T9747] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 196.751948][ T9747] R13: 00007f32869f6f68 R14: 00007f32869f7010 R15: 0000000000000000 [ 196.751990][ T9747] [ 197.360832][ T9761] netlink: 'syz.4.1063': attribute type 1 has an invalid length. [ 197.369195][ T9761] netlink: 'syz.4.1063': attribute type 3 has an invalid length. [ 197.970464][ T1153] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 198.864393][ T9811] __nla_validate_parse: 14 callbacks suppressed [ 198.864415][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1075'. [ 199.126182][ T9819] netlink: 'syz.2.1077': attribute type 5 has an invalid length. [ 199.472563][ T9834] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1083'. [ 199.569514][ T9834] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1083'. [ 200.238468][ T9868] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.349515][ T9872] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1097'. [ 200.399315][ T9873] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1096'. [ 201.396141][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1110'. [ 201.597728][ T9916] syzkaller1: entered promiscuous mode [ 201.603358][ T9916] syzkaller1: entered allmulticast mode [ 201.624892][ T9935] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1113'. [ 201.818250][ T9928] bond7: entered promiscuous mode [ 201.823375][ T9928] bond7: entered allmulticast mode [ 201.834009][ T9928] 8021q: adding VLAN 0 to HW filter on device bond7 [ 201.889281][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1117'. [ 202.089178][ T9947] bond0: entered promiscuous mode [ 202.094280][ T9947] bond_slave_0: entered promiscuous mode [ 202.130834][ T9947] bond_slave_1: entered promiscuous mode [ 202.188317][ T9947] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 202.222663][ T9947] bond0: left promiscuous mode [ 202.228083][ T9947] bond_slave_0: left promiscuous mode [ 202.234831][ T9954] netlink: del zone limit has 4 unknown bytes [ 202.252983][ T9947] bond_slave_1: left promiscuous mode [ 202.263342][ T9947] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 202.297416][ T9952] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1118'. [ 202.549816][ T9967] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1123'. [ 202.847825][ T9982] netlink: 'syz.4.1126': attribute type 1 has an invalid length. [ 202.968467][ T9984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.838020][ T979] IPVS: starting estimator thread 0... [ 203.879145][T10020] __nla_validate_parse: 4 callbacks suppressed [ 203.879165][T10020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1136'. [ 203.956728][T10023] IPVS: using max 24 ests per chain, 57600 per kthread [ 204.003949][T10029] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1137'. [ 204.576811][T10056] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1143'. [ 204.667199][T10060] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 205.148810][T10088] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 205.230335][T10095] bond0: (slave gre0): Error: Device type is different from other slaves [ 205.398591][T10104] openvswitch: netlink: Actions may not be safe on all matching packets [ 205.530933][T10107] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 205.568302][T10107] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 205.588741][T10107] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 205.603653][T10107] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 205.643630][T10107] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 205.691476][T10107] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 205.719768][T10107] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 205.742974][T10107] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 205.766285][T10107] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 205.780246][T10107] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 205.799665][T10107] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 205.811183][T10107] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 205.871241][T10107] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 205.936738][T10107] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 206.009166][T10107] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 206.066913][T10107] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 206.081291][T10107] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 206.092512][T10107] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 206.120731][T10129] Unsupported ieee802154 address type: 0 [ 206.132209][T10124] dvmrp0: entered allmulticast mode [ 206.140291][T10107] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 206.153840][T10107] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 206.167876][T10121] dvmrp0: left allmulticast mode [ 206.284726][T10128] nbd: must specify a size in bytes for the device [ 206.296218][T10130] nbd: must specify a size in bytes for the device [ 206.299469][T10107] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 206.353912][T10107] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 206.506943][T10139] netlink: 'syz.4.1167': attribute type 1 has an invalid length. [ 206.514837][T10139] netlink: 'syz.4.1167': attribute type 1 has an invalid length. [ 206.658256][T10143] block nbd2: not configured, cannot reconfigure [ 207.262109][T10169] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1177'. [ 207.721798][T10187] gre1: entered promiscuous mode [ 207.758554][T10187] gre1: entered allmulticast mode [ 208.028014][T10205] netlink: 'syz.4.1187': attribute type 2 has an invalid length. [ 208.215445][T10209] veth0: entered promiscuous mode [ 208.236356][T10210] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1189'. [ 208.260676][T10207] veth0: left promiscuous mode [ 208.488925][T10217] IPVS: set_ctl: invalid protocol: 33 172.30.0.3:20002 [ 208.517824][T10215] IPVS: set_ctl: invalid protocol: 33 172.30.0.3:20002 [ 208.802422][T10234] macvlan2: entered allmulticast mode [ 208.836108][T10234] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 208.960302][T10245] netlink: 'syz.3.1200': attribute type 14 has an invalid length. [ 209.196913][T10249] syzkaller0: create flow: hash 218554012 index 1 [ 209.212111][T10257] sctp: [Deprecated]: syz.4.1202 (pid 10257) Use of int in maxseg socket option. [ 209.212111][T10257] Use struct sctp_assoc_value instead [ 209.271290][T10252] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 209.572969][T10264] syzkaller0: delete flow: hash 218554012 index 1 [ 212.029975][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 212.031300][ T5878] Bluetooth: hci1: command 0x0406 tx timeout [ 212.044529][ T5183] Bluetooth: hci0: command 0x0406 tx timeout [ 212.067725][T10283] netlink: 'syz.3.1209': attribute type 7 has an invalid length. [ 212.232697][T10287] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1211'. [ 212.281239][T10295] netlink: 'syz.0.1212': attribute type 10 has an invalid length. [ 212.325740][T10298] openvswitch: netlink: Missing key (keys=40, expected=100) [ 212.342933][T10295] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.374940][T10300] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1215'. [ 212.390372][T10295] bridge_slave_1: left allmulticast mode [ 212.403266][T10295] bridge_slave_1: left promiscuous mode [ 212.422156][T10302] netlink: 'syz.2.1215': attribute type 1 has an invalid length. [ 212.430770][T10295] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.439064][T10302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1215'. [ 212.479200][T10295] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 212.571633][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 212.723220][T10309] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1219'. [ 212.763023][T10315] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1216'. [ 212.779339][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1216'. [ 212.898745][T10304] hsr_slave_1 (unregistering): left promiscuous mode [ 213.236994][T10339] nbd: must specify at least one socket [ 213.296935][T10344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1226'. [ 213.343440][T10344] wg1: entered promiscuous mode [ 213.359849][T10349] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1227'. [ 213.365796][T10339] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 213.437181][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1225'. [ 214.424179][T10374] netlink: 'syz.3.1237': attribute type 11 has an invalid length. [ 215.037521][T10399] netlink: 'syz.3.1243': attribute type 1 has an invalid length. [ 215.240143][T10404] netlink: 'syz.0.1245': attribute type 8 has an invalid length. [ 215.285558][T10406] gtp0: entered promiscuous mode [ 215.310915][T10406] gtp0: entered allmulticast mode [ 215.828184][T10427] tipc: Enabled bearer , priority 0 [ 215.836108][T10428] syzkaller0: entered promiscuous mode [ 215.865701][T10428] syzkaller0: entered allmulticast mode [ 215.889224][T10431] bond0: (slave gre0): Error: Device type is different from other slaves [ 215.952275][T10428] tipc: Resetting bearer [ 216.019796][T10426] tipc: Resetting bearer [ 216.060646][T10426] tipc: Disabling bearer [ 216.075150][T10434] lo speed is unknown, defaulting to 1000 [ 216.081876][T10442] bond0: (slave gre0): Error: Device type is different from other slaves [ 216.296505][T10445] tipc: Enabled bearer , priority 0 [ 216.339149][T10439] tipc: Resetting bearer [ 216.677583][T10455] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20002 [ 217.293793][T10469] can: request_module (can-proto-0) failed. [ 217.346756][ T1212] tipc: Node number set to 2916370103 [ 219.294968][T10439] tipc: Disabling bearer [ 219.674697][T10478] tunl0: entered promiscuous mode [ 219.982549][T10490] netlink: 'syz.0.1271': attribute type 1 has an invalid length. [ 220.019272][T10490] netlink: 'syz.0.1271': attribute type 2 has an invalid length. [ 220.090405][T10490] netlink: 'syz.0.1271': attribute type 1 has an invalid length. [ 220.129036][T10490] __nla_validate_parse: 12 callbacks suppressed [ 220.129055][T10490] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1271'. [ 220.210228][T10490] netlink: 'syz.0.1271': attribute type 2 has an invalid length. [ 220.248543][T10490] netlink: 'syz.0.1271': attribute type 1 has an invalid length. [ 220.253929][T10499] bond0: (slave gre0): Error: Device type is different from other slaves [ 220.402498][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1276'. [ 221.253321][T10533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1284'. [ 221.328520][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1285'. [ 221.433415][T10548] netlink: 'syz.1.1287': attribute type 4 has an invalid length. [ 221.445027][T10548] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1287'. [ 221.459025][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 221.509229][T10550] netlink: 'syz.0.1288': attribute type 21 has an invalid length. [ 221.532655][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 221.539180][T10550] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1288'. [ 221.554514][T10548] `: renamed from bond0 (while UP) [ 221.615895][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'. [ 221.652463][T10550] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1288'. [ 221.668321][T10559] netlink: 'syz.2.1289': attribute type 13 has an invalid length. [ 221.882899][T10559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.922187][ T44] lo speed is unknown, defaulting to 1000 [ 222.385630][T10594] netlink: 'syz.4.1302': attribute type 1 has an invalid length. [ 222.691350][T10601] netlink: zone id is out of range [ 222.717767][T10601] netlink: zone id is out of range [ 222.722951][T10601] netlink: zone id is out of range [ 222.766830][T10601] netlink: zone id is out of range [ 222.795042][T10601] netlink: zone id is out of range [ 222.797469][T10603] netlink: 'syz.3.1304': attribute type 32 has an invalid length. [ 222.830576][T10601] netlink: zone id is out of range [ 222.848107][T10601] netlink: zone id is out of range [ 222.863554][T10601] netlink: zone id is out of range [ 222.886945][T10601] netlink: zone id is out of range [ 222.905971][T10603] (unnamed net_device) (uninitialized): option coupled_control: invalid value (16) [ 224.869702][T10671] tipc: Enabled bearer , priority 0 [ 224.895444][T10666] tipc: Resetting bearer [ 225.344606][T10702] validate_nla: 1 callbacks suppressed [ 225.344625][T10702] netlink: 'syz.4.1333': attribute type 4 has an invalid length. [ 225.416297][T10703] netlink: 'syz.4.1333': attribute type 4 has an invalid length. [ 227.509654][T10666] tipc: Disabling bearer [ 227.743120][T10710] __nla_validate_parse: 6 callbacks suppressed [ 227.743140][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 227.815126][T10714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'. [ 228.156010][T10727] netlink: 'syz.3.1341': attribute type 2 has an invalid length. [ 228.233155][T10735] sctp: [Deprecated]: syz.0.1343 (pid 10735) Use of int in max_burst socket option. [ 228.233155][T10735] Use struct sctp_assoc_value instead [ 228.516433][T10742] net_ratelimit: 17 callbacks suppressed [ 228.516454][T10742] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 228.543998][T10742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1346'. [ 229.186542][T10771] vlan2: entered promiscuous mode [ 229.204742][T10771] vlan2: entered allmulticast mode [ 229.221001][T10771] hsr_slave_1: entered allmulticast mode [ 229.298311][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'. [ 229.389849][T10781] netlink: 'syz.3.1355': attribute type 32 has an invalid length. [ 229.413389][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1355'. [ 229.485809][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1354'. [ 229.704982][T10776] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.216422][T10776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.252524][T10776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.637913][T10781] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 230.657285][T10781] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 230.660078][T10794] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 230.817153][ T42] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.858727][ T42] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.883493][ T42] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.922483][ T42] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.012548][ T36] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.024724][T10807] IPVS: persistence engine module ip_vs_pe_€ not found [ 231.076736][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.216643][ T36] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.258807][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.567174][T10867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1364'. [ 232.121240][T10886] netlink: 'syz.0.1366': attribute type 11 has an invalid length. [ 232.531905][T10905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1369'. [ 233.257912][T10929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1377'. [ 233.287728][T10930] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1378'. [ 233.593208][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1381'. [ 233.624532][T10938] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1380'. [ 233.635841][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1381'. [ 233.890778][T10949] veth1_to_bond: entered allmulticast mode [ 233.919008][T10950] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 234.005555][T10945] veth1_to_bond: left allmulticast mode [ 234.836856][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 235.607773][T11012] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1402'. [ 235.649668][T11012] xt_socket: unknown flags 0xd0 [ 235.683872][T11017] tipc: Enabling of bearer rejected, failed to enable media [ 235.715121][T11019] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 235.728632][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'. [ 235.748438][T11015] netlink: 'syz.2.1404': attribute type 5 has an invalid length. [ 235.776109][T11015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1404'. [ 235.813627][T11019] tls_set_device_offload_rx: netdev not found [ 235.927473][ T5869] block nbd0: Receive control failed (result -32) [ 235.933429][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 236.113408][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 236.443057][ T5869] block nbd1: Receive control failed (result -32) [ 236.473739][T11049] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 236.733938][T11056] vxcan3: entered allmulticast mode [ 236.824612][T11049] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.587173][T11083] netlink: 'syz.2.1419': attribute type 8 has an invalid length. [ 238.000015][T11099] netlink: 'syz.1.1423': attribute type 3 has an invalid length. [ 238.055304][T11098] netlink: 'syz.0.1422': attribute type 10 has an invalid length. [ 238.909961][T11130] openvswitch: netlink: EtherType 0 is less than min 600 [ 238.954562][T11130] __nla_validate_parse: 5 callbacks suppressed [ 238.954585][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1430'. [ 239.128793][T11135] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (62) [ 239.460055][T11142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1433'. [ 239.745029][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1437'. [ 239.764089][T11152] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1437'. [ 240.356474][T11155] bond0: (slave wlan1): Releasing backup interface [ 240.395635][T11155] batman_adv: batadv0: Adding interface: wlan1 [ 240.402264][T11155] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.455602][T11155] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 240.783224][T11169] netlink: 'syz.4.1443': attribute type 1 has an invalid length. [ 241.152914][T11181] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1447'. [ 241.191085][T11183] : entered promiscuous mode [ 241.209614][T11185] bond0: (slave gre0): Error: Device type is different from other slaves [ 241.345076][T11189] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1449'. [ 241.475112][T11189] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.483139][T11189] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.021637][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'. [ 242.289927][T11219] netlink: 'syz.0.1458': attribute type 10 has an invalid length. [ 242.350001][T11222] netlink: 'syz.0.1458': attribute type 10 has an invalid length. [ 242.380248][T11219] team0: Port device dummy0 added [ 242.445843][T11222] team0: Port device dummy0 removed [ 242.492502][T11222] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 242.545361][T11228] netlink: 'syz.4.1460': attribute type 4 has an invalid length. [ 242.606669][T11228] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1460'. [ 242.675984][T11228] `: renamed from bond0 (while UP) [ 242.932562][T11239] netlink: 'syz.0.1462': attribute type 3 has an invalid length. [ 242.966876][T11239] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1462'. [ 243.257148][T11247] unsupported nla_type 52263 [ 243.456153][T11251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1467'. [ 244.451834][T11275] __nla_validate_parse: 2 callbacks suppressed [ 244.451854][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 244.602149][T11279] netlink: 'syz.1.1475': attribute type 1 has an invalid length. [ 244.612326][T11279] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1475'. [ 244.663468][T11280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1476'. [ 245.654188][T11306] tipc: Enabled bearer , priority 0 [ 245.680948][T11306] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 245.721623][T11306] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 245.842040][T11306] tipc: Resetting bearer [ 246.127885][T11325] FAULT_INJECTION: forcing a failure. [ 246.127885][T11325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.182957][T11325] CPU: 1 UID: 0 PID: 11325 Comm: syz.1.1488 Not tainted syzkaller #0 PREEMPT(full) [ 246.182987][T11325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.182998][T11325] Call Trace: [ 246.183006][T11325] [ 246.183015][T11325] dump_stack_lvl+0x189/0x250 [ 246.183046][T11325] ? __pfx____ratelimit+0x10/0x10 [ 246.183073][T11325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.183096][T11325] ? __pfx__printk+0x10/0x10 [ 246.183120][T11325] ? __might_fault+0xb0/0x130 [ 246.183160][T11325] should_fail_ex+0x414/0x560 [ 246.183192][T11325] _copy_from_user+0x2d/0xb0 [ 246.183214][T11325] ___sys_sendmsg+0x158/0x2a0 [ 246.183240][T11325] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.183301][T11325] ? __fget_files+0x2a/0x420 [ 246.183339][T11325] ? __fget_files+0x3a0/0x420 [ 246.183377][T11325] __sys_sendmmsg+0x227/0x430 [ 246.183404][T11325] ? __pfx___sys_sendmmsg+0x10/0x10 [ 246.183420][T11325] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 246.183475][T11325] ? ksys_write+0x22a/0x250 [ 246.183503][T11325] ? __pfx_ksys_write+0x10/0x10 [ 246.183523][T11325] ? rcu_is_watching+0x15/0xb0 [ 246.183551][T11325] __x64_sys_sendmmsg+0xa0/0xc0 [ 246.183573][T11325] do_syscall_64+0xfa/0x3b0 [ 246.183588][T11325] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.183613][T11325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.183633][T11325] ? clear_bhb_loop+0x60/0xb0 [ 246.183657][T11325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.183674][T11325] RIP: 0033:0x7f3285b8ebe9 [ 246.183692][T11325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.183709][T11325] RSP: 002b:00007f3286a3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 246.183731][T11325] RAX: ffffffffffffffda RBX: 00007f3285dc5fa0 RCX: 00007f3285b8ebe9 [ 246.183744][T11325] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000003 [ 246.183757][T11325] RBP: 00007f3286a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 246.183768][T11325] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.183780][T11325] R13: 00007f3285dc6038 R14: 00007f3285dc5fa0 R15: 00007ffc5d41c598 [ 246.183812][T11325] [ 246.790609][T11338] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1492'. [ 246.841639][T11340] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1493'. [ 246.842033][T11341] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1493'. [ 247.192520][T11353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1496'. [ 247.870533][T11087] Set syz1 is full, maxelem 65536 reached [ 247.987526][T11379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1502'. [ 248.042738][T11377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1501'. [ 248.073513][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 248.960069][T11405] netlink: 'syz.4.1509': attribute type 10 has an invalid length. [ 248.979059][T11405] batman_adv: batadv0: Removing interface: dummy0 [ 249.005576][T11405] team0: Port device dummy0 added [ 249.047053][T11409] netlink: 'syz.4.1509': attribute type 10 has an invalid length. [ 249.153050][T11409] team0: Port device dummy0 removed [ 249.186530][T11409] `: (slave dummy0): Enslaving as an active interface with an up link [ 249.483931][T11419] netlink: 'syz.4.1512': attribute type 6 has an invalid length. [ 249.783412][T11430] netlink: 'syz.0.1513': attribute type 11 has an invalid length. [ 249.968278][T11438] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 250.072707][T11419] lo speed is unknown, defaulting to 1000 [ 250.807246][T11462] __nla_validate_parse: 2 callbacks suppressed [ 250.807270][T11462] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1522'. [ 250.948078][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 250.983503][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 251.002315][T11468] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1524'. [ 251.046297][T11472] netlink: 'syz.0.1525': attribute type 49 has an invalid length. [ 251.075525][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 251.337435][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1526'. [ 251.570417][T11483] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 251.638331][T11482] lo speed is unknown, defaulting to 1000 [ 251.645012][T11487] delete_channel: no stack [ 251.888424][T11498] netlink: 'syz.2.1532': attribute type 1 has an invalid length. [ 254.761797][T11509] netlink: 'syz.3.1534': attribute type 1 has an invalid length. [ 254.969989][T11518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1534'. [ 255.045036][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1536'. [ 255.057069][T11513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1536'. [ 255.066255][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1536'. [ 255.271404][T11516] 8021q: adding VLAN 0 to HW filter on device bond10 [ 255.305381][T11516] bond9: (slave bond10): making interface the new active one [ 255.355173][T11516] bond9: (slave bond10): Enslaving as an active interface with an up link [ 255.396421][T11518] bond9: entered promiscuous mode [ 255.404538][T11518] bond10: entered promiscuous mode [ 255.418867][T11518] bond9: entered allmulticast mode [ 255.469248][T11518] bond10: entered allmulticast mode [ 255.476214][T11518] 8021q: adding VLAN 0 to HW filter on device bond9 [ 255.873744][T11541] __nla_validate_parse: 3 callbacks suppressed [ 255.873764][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1542'. [ 256.029456][T11550] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 256.088977][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 256.147059][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 256.170523][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 256.203273][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 256.267952][T11541] macvtap1: entered promiscuous mode [ 256.273467][T11541] vlan0: entered promiscuous mode [ 256.284250][T11541] macvtap1: entered allmulticast mode [ 256.290108][T11541] vlan0: entered allmulticast mode [ 256.302147][T11550] netlink: 'syz.2.1545': attribute type 3 has an invalid length. [ 256.512102][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1547'. [ 256.612147][ T64] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.614281][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1548'. [ 256.648109][ T64] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.975806][T11580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1551'. [ 256.990155][ T64] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.025657][T11582] team0: No ports can be present during mode change [ 257.067190][ T64] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.429115][T11596] netlink: 'syz.3.1558': attribute type 10 has an invalid length. [ 257.493302][T11597] netlink: 'syz.3.1558': attribute type 10 has an invalid length. [ 257.552500][T11596] team0: Port device dummy0 added [ 257.614951][T11601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1559'. [ 257.732957][T11597] team0: Port device dummy0 removed [ 257.763169][T11597] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 258.003370][T11604] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 258.158118][T11620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1565'. [ 258.175288][T11618] netlink: 'syz.4.1564': attribute type 1 has an invalid length. [ 258.197799][T11617] netlink: 'syz.3.1574': attribute type 3 has an invalid length. [ 258.601884][T11627] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.658520][T11627] bond0: (slave bond5): making interface the new active one [ 258.683551][T11627] bond0: (slave bond5): Enslaving as an active interface with an up link [ 258.744539][T11631] bond0: entered promiscuous mode [ 258.792632][T11631] bond5: entered promiscuous mode [ 258.807464][T11631] bond0: entered allmulticast mode [ 258.817624][T11631] bond5: entered allmulticast mode [ 258.824260][T11631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.882636][T11634] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 258.902472][T11634] bond0: (slave vcan1): Error -95 calling set_mac_address [ 259.768674][T11689] netlink: 'syz.2.1583': attribute type 3 has an invalid length. [ 260.725280][T11711] netlink: 'syz.3.1591': attribute type 1 has an invalid length. [ 260.742699][T11713] sctp: [Deprecated]: syz.1.1592 (pid 11713) Use of int in max_burst socket option deprecated. [ 260.742699][T11713] Use struct sctp_assoc_value instead [ 260.848610][T11713] sctp: [Deprecated]: syz.1.1592 (pid 11713) Use of int in max_burst socket option deprecated. [ 260.848610][T11713] Use struct sctp_assoc_value instead [ 260.924600][T11711] bond11: entered promiscuous mode [ 260.949098][T11727] __nla_validate_parse: 3 callbacks suppressed [ 260.949120][T11727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1594'. [ 260.997369][T11711] 8021q: adding VLAN 0 to HW filter on device bond11 [ 261.220866][T11738] netlink: 'syz.1.1596': attribute type 1 has an invalid length. [ 261.234751][T11718] 8021q: adding VLAN 0 to HW filter on device bond12 [ 261.249879][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1596'. [ 261.275309][T11741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1596'. [ 261.300991][T11718] bond11: (slave bond12): making interface the new active one [ 261.339718][T11718] bond12: entered promiscuous mode [ 261.376456][T11718] bond11: (slave bond12): Enslaving as an active interface with an up link [ 261.452352][T11726] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 261.692268][T11750] netlink: 'syz.4.1601': attribute type 2 has an invalid length. [ 261.719593][T11751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1603'. [ 261.729964][T11748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1600'. [ 261.796143][T11748] tipc: Enabling of bearer rejected, already enabled [ 261.870775][T11758] netlink: 'syz.3.1604': attribute type 1 has an invalid length. [ 261.908555][T11758] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1604'. [ 261.996023][T11758] netlink: 'syz.3.1604': attribute type 1 has an invalid length. [ 262.102603][T11758] netlink: 'syz.3.1604': attribute type 2 has an invalid length. [ 262.456681][T11788] netlink: 'syz.0.1610': attribute type 4 has an invalid length. [ 262.832355][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1613'. [ 263.075060][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1616'. [ 263.469568][T11829] netlink: 'syz.3.1621': attribute type 1 has an invalid length. [ 263.505183][T11829] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1621'. [ 263.818850][T11832] tc_dump_action: action bad kind [ 264.658240][T11874] netlink: 'syz.1.1634': attribute type 1 has an invalid length. [ 264.912264][T11874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1634'. [ 264.924850][T11880] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.935833][T11880] bond3: (slave bond4): making interface the new active one [ 264.953991][T11880] bond3: (slave bond4): Enslaving as an active interface with an up link [ 264.963785][T11872] syzkaller1: entered promiscuous mode [ 264.973149][T11872] syzkaller1: entered allmulticast mode [ 264.981984][T11878] sch_fq: defrate 0 ignored. [ 265.049943][T11885] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 265.093291][T11874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.362823][T11902] vlan2: entered promiscuous mode [ 265.674553][T11907] lo speed is unknown, defaulting to 1000 [ 266.001972][T11922] __nla_validate_parse: 3 callbacks suppressed [ 266.001997][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1646'. [ 266.749807][T11933] netlink: 'syz.2.1650': attribute type 4 has an invalid length. [ 266.922912][T11933] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 266.941729][T11944] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1652'. [ 268.053442][T11979] IPv6: sit3: Disabled Multicast RS [ 268.309918][T11985] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1662'. [ 268.356166][T11985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1662'. [ 268.534813][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1662'. [ 268.627313][T11994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1662'. [ 268.813228][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1667'. [ 269.061721][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1669'. [ 269.550924][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033a20c00: rx timeout, send abort [ 269.663831][T12015] tipc: Cannot configure node identity twice [ 270.060298][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033a20c00: abort rx timeout. Force session deactivation [ 270.570510][T12055] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 270.601783][T12055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1683'. [ 270.895034][T12064] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1685'. [ 271.079271][T12067] macsec1: entered promiscuous mode [ 271.096393][T12067] bridge0: entered promiscuous mode [ 271.112694][T12067] bridge0: port 5(macsec1) entered blocking state [ 271.136972][T12067] bridge0: port 5(macsec1) entered disabled state [ 271.150739][T12067] macsec1: entered allmulticast mode [ 271.163878][T12067] bridge0: entered allmulticast mode [ 271.185601][T12067] macsec1: left allmulticast mode [ 271.194448][T12067] bridge0: left allmulticast mode [ 271.239053][T12067] bridge0: left promiscuous mode [ 271.456858][T12075] 8021q: VLANs not supported on lo [ 272.030047][T12108] tipc: Started in network mode [ 272.041667][T12108] tipc: Node identity ea9ccc08d765, cluster identity 4711 [ 272.065928][T12108] tipc: Enabled bearer , priority 0 [ 272.100148][T12108] syzkaller0: entered promiscuous mode [ 272.116761][T12108] syzkaller0: entered allmulticast mode [ 272.224392][T12108] tipc: Resetting bearer [ 272.255565][T12112] netlink: 'syz.0.1698': attribute type 4 has an invalid length. [ 272.306333][T12106] tipc: Resetting bearer [ 272.467965][T12106] tipc: Disabling bearer [ 272.537076][T12132] veth0_to_team: entered promiscuous mode [ 272.566735][T12132] veth0_to_team: entered allmulticast mode [ 272.644792][T12134] netlink: 'syz.1.1704': attribute type 1 has an invalid length. [ 272.888507][T12145] netlink: 'syz.3.1707': attribute type 1 has an invalid length. [ 272.889000][T12138] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 272.998140][T12138] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 273.119764][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1710'. [ 273.131880][T12141] gretap2: entered promiscuous mode [ 273.164087][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1710'. [ 273.185212][T12141] bond5: (slave gretap2): making interface the new active one [ 273.220627][T12156] sctp: [Deprecated]: syz.4.1711 (pid 12156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.220627][T12156] Use struct sctp_sack_info instead [ 273.254915][T12141] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 273.300872][T12156] netlink: 'syz.4.1711': attribute type 1 has an invalid length. [ 273.326354][T12134] macvlan3: entered promiscuous mode [ 273.334279][T12156] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1711'. [ 273.337821][T12134] macvlan3: entered allmulticast mode [ 273.388833][T12134] bond5: entered promiscuous mode [ 273.428688][T12134] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 273.474126][T12134] bond5: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 273.527810][T12134] bond5: left promiscuous mode [ 274.501020][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 274.516491][T12211] netlink: 'syz.4.1728': attribute type 2 has an invalid length. [ 274.529840][T12211] netlink: 'syz.4.1728': attribute type 8 has an invalid length. [ 274.541293][T12202] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1726'. [ 274.566518][T12211] netlink: 1148 bytes leftover after parsing attributes in process `syz.4.1728'. [ 275.385549][T12236] netlink: 'syz.3.1737': attribute type 1 has an invalid length. [ 275.631619][T12247] 8021q: VLANs not supported on wg2 [ 275.807845][T12256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.240639][T12276] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1747'. [ 276.310296][T12272] lo speed is unknown, defaulting to 1000 [ 276.614510][T12290] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 276.696102][T12294] team0: Device vti0 is of different type [ 276.854278][T12296] tipc: Enabling of bearer rejected, failed to enable media [ 277.126963][T12312] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1754'. [ 277.316332][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1754'. [ 277.358670][T12308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1754'. [ 278.129381][T12340] __nla_validate_parse: 2 callbacks suppressed [ 278.129402][T12340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1762'. [ 278.451671][T12348] IPVS: Error connecting to the multicast addr [ 298.849614][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 298.931222][T10811] IPVS: starting estimator thread 0... [ 299.047970][T12414] IPVS: using max 26 ests per chain, 62400 per kthread [ 320.342194][T12447] netlink: 'syz.2.1779': attribute type 1 has an invalid length. [ 320.377162][T12447] netlink: 'syz.2.1779': attribute type 3 has an invalid length. [ 320.410619][T12447] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1779'. [ 320.455616][T12455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.097012][T12467] netlink: 'syz.3.1785': attribute type 49 has an invalid length. [ 321.304140][T12474] tipc: Failed to remove unknown binding: 66,1,1/2916370103:228107631/228107633 [ 321.358871][T12477] netlink: 'syz.2.1790': attribute type 1 has an invalid length. [ 321.373543][T12474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1787'. [ 321.385864][T12479] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1790'. [ 321.467725][T12471] syzkaller1: entered promiscuous mode [ 321.473429][T12471] syzkaller1: entered allmulticast mode [ 321.554433][T12477] bond4: entered promiscuous mode [ 321.564261][T12477] 8021q: adding VLAN 0 to HW filter on device bond4 [ 321.574739][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1788'. [ 321.932414][T12494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1793'. [ 322.240779][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1796'. [ 322.258573][T12502] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1796'. [ 322.269260][T12502] netlink: 'syz.0.1796': attribute type 5 has an invalid length. [ 322.345400][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1799'. [ 322.897304][T12523] macvlan0: entered promiscuous mode [ 322.915737][T12523] macvlan0: entered allmulticast mode [ 323.010551][T12528] veth1_to_bond: entered allmulticast mode [ 323.028001][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1800'. [ 323.111099][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'. [ 323.174172][T12525] veth1_to_bond: left allmulticast mode [ 323.630340][T12551] netlink: 'syz.0.1814': attribute type 1 has an invalid length. [ 323.725431][T12551] bond4: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 323.738944][T12551] bond4: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 323.750181][T12551] bond4: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode [ 323.843279][T12561] bond4: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 323.863112][T12561] bond4: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 324.103357][T12564] syzkaller1: entered promiscuous mode [ 324.125042][T12564] syzkaller1: entered allmulticast mode [ 324.490595][T12577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.674213][T12584] netlink: 'syz.2.1825': attribute type 10 has an invalid length. [ 324.738633][T12584] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.785759][T12584] bond0: (slave team0): Enslaving as an active interface with an up link [ 324.807650][T12589] netlink: 'syz.2.1825': attribute type 10 has an invalid length. [ 324.902282][T12589] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 325.111293][T12584] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.272912][T12589] bond_slave_1: entered promiscuous mode [ 325.278957][T12589] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 325.287317][T12589] team_slave_0: entered promiscuous mode [ 325.293215][T12589] team_slave_1: entered promiscuous mode [ 325.298954][T12589] syz_tun: entered promiscuous mode [ 325.318683][T12589] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 325.329735][T12589] bond5: (slave macvlan1): unknown ethtool speed (30000) for port 1 (set it to 0) [ 325.348596][T12589] bond5: (slave macvlan1): speed changed to 0 on port 1 [ 325.370799][T12613] netlink: 'syz.1.1830': attribute type 3 has an invalid length. [ 325.382850][T12613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.394998][T12589] bond5: (slave macvlan1): Enslaving as a backup interface with an up link [ 325.433959][T12591] pim6reg1: entered promiscuous mode [ 325.447121][T12591] pim6reg1: entered allmulticast mode [ 325.685785][T12615] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 325.694890][T12619] sctp: [Deprecated]: syz.4.1833 (pid 12619) Use of int in max_burst socket option. [ 325.694890][T12619] Use struct sctp_assoc_value instead [ 325.986319][T12627] __nla_validate_parse: 7 callbacks suppressed [ 325.986402][T12627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1837'. [ 326.083768][T12627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1837'. [ 326.118689][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 326.147774][T12629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1838'. [ 326.449589][T12640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.774868][T12654] netlink: 'syz.1.1849': attribute type 1 has an invalid length. [ 327.002564][T12654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1849'. [ 327.005602][T12664] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 327.030750][T12663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1850'. [ 327.256024][T12666] veth7: entered promiscuous mode [ 327.286451][T12666] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 327.339699][T12654] 8021q: adding VLAN 0 to HW filter on device bond6 [ 327.348421][T10890] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 327.480603][T10890] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 327.556998][T12684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1854'. [ 327.603015][T12684] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1854'. [ 327.646072][T12687] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1856'. [ 327.677769][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1857'. [ 327.714524][T12694] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 327.722539][T12694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.830355][T12697] netlink: 'syz.2.1860': attribute type 10 has an invalid length. [ 328.064206][T12705] veth9: entered allmulticast mode [ 329.512357][T12761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.572890][T12771] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 329.740130][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 329.814216][T12789] netlink: 'syz.1.1886': attribute type 3 has an invalid length. [ 329.844704][T12790] netlink: 'syz.1.1886': attribute type 3 has an invalid length. [ 329.951215][T12795] sctp: [Deprecated]: syz.4.1887 (pid 12795) Use of int in max_burst socket option. [ 329.951215][T12795] Use struct sctp_assoc_value instead [ 331.232449][T12830] netlink: ct family unspecified [ 331.238639][T12830] openvswitch: netlink: Actions may not be safe on all matching packets [ 332.975636][T12833] lo speed is unknown, defaulting to 1000 [ 333.954090][T12835] __nla_validate_parse: 16 callbacks suppressed [ 333.954114][T12835] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1900'. [ 335.554669][T12842] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1902'. [ 345.635698][ T5183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.658322][ T5183] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.667727][ T5183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.677819][ T5183] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.685582][ T5183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.767313][ T5869] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.775947][ T5869] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.787860][ T5869] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.796170][ T5869] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.804919][ T5869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.874973][T12847] lo speed is unknown, defaulting to 1000 [ 346.527105][T12849] lo speed is unknown, defaulting to 1000 [ 346.797646][ T5869] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 346.807125][ T5869] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 346.815311][ T5869] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 346.825101][ T5869] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 346.845138][ T5869] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 347.249903][T12852] lo speed is unknown, defaulting to 1000 [ 347.544473][T12847] chnl_net:caif_netlink_parms(): no params data found [ 347.787066][ T5869] Bluetooth: hci5: command tx timeout [ 347.866754][ T5869] Bluetooth: hci6: command tx timeout [ 348.518966][T12847] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.536112][T12847] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.560906][T12847] bridge_slave_0: entered allmulticast mode [ 348.579841][ T5183] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 348.591421][ T5183] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 348.600053][ T5183] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 348.608273][ T5183] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 348.616091][ T5183] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 348.635222][T12847] bridge_slave_0: entered promiscuous mode [ 348.691232][T12849] chnl_net:caif_netlink_parms(): no params data found [ 348.747113][T12847] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.754389][T12847] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.789669][T12847] bridge_slave_1: entered allmulticast mode [ 348.814469][T12847] bridge_slave_1: entered promiscuous mode [ 348.907029][ T5869] Bluetooth: hci7: command tx timeout [ 348.994428][T12847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.155507][T12847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.188468][T12864] lo speed is unknown, defaulting to 1000 [ 349.375614][T12847] team0: Port device team_slave_0 added [ 349.470403][T12847] team0: Port device team_slave_1 added [ 349.779680][T12847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.796764][T12847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.864272][T12847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.866797][ T5869] Bluetooth: hci5: command tx timeout [ 349.899030][T12847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.906038][T12847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.947127][ T5869] Bluetooth: hci6: command tx timeout [ 350.007128][T12847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.072213][T12849] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.086964][T12849] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.094331][T12849] bridge_slave_0: entered allmulticast mode [ 350.119031][T12849] bridge_slave_0: entered promiscuous mode [ 350.139106][T12849] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.146446][T12849] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.178356][T12849] bridge_slave_1: entered allmulticast mode [ 350.206851][T12849] bridge_slave_1: entered promiscuous mode [ 350.567995][T12847] hsr_slave_0: entered promiscuous mode [ 350.587155][T12847] hsr_slave_1: entered promiscuous mode [ 350.594102][T12847] debugfs: 'hsr0' already exists in 'hsr' [ 350.633424][T12847] Cannot create hsr debugfs directory [ 350.667038][ T5869] Bluetooth: hci8: command tx timeout [ 350.724378][T12849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.943792][T12849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.987300][ T5869] Bluetooth: hci7: command tx timeout [ 351.211440][T12849] team0: Port device team_slave_0 added [ 351.248877][T12849] team0: Port device team_slave_1 added [ 351.255267][T12852] chnl_net:caif_netlink_parms(): no params data found [ 351.650331][T12849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.676612][T12849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.797294][T12849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.836895][T12849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.843979][T12849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.917427][ T5183] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 351.925606][T12849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.938556][ T5183] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 351.947184][ T5874] Bluetooth: hci5: command tx timeout [ 351.953022][ T5183] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 351.961312][ T5183] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 351.971063][ T5183] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 352.027217][ T5183] Bluetooth: hci6: command tx timeout [ 352.747052][ T5183] Bluetooth: hci8: command tx timeout [ 352.788685][T12852] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.796365][T12852] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.854245][T12852] bridge_slave_0: entered allmulticast mode [ 352.877230][T12852] bridge_slave_0: entered promiscuous mode [ 352.893421][T12849] hsr_slave_0: entered promiscuous mode [ 352.910074][T12849] hsr_slave_1: entered promiscuous mode [ 352.926858][T12849] debugfs: 'hsr0' already exists in 'hsr' [ 352.932855][T12849] Cannot create hsr debugfs directory [ 353.030296][T12874] lo speed is unknown, defaulting to 1000 [ 353.045345][T12864] chnl_net:caif_netlink_parms(): no params data found [ 353.067663][ T5183] Bluetooth: hci7: command tx timeout [ 353.116831][T12852] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.124370][T12852] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.157114][T12852] bridge_slave_1: entered allmulticast mode [ 353.165538][T12852] bridge_slave_1: entered promiscuous mode [ 353.308043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.562051][T12852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.695775][T12852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.943838][T12852] team0: Port device team_slave_0 added [ 354.026781][ T5183] Bluetooth: hci9: command tx timeout [ 354.026972][ T5869] Bluetooth: hci5: command tx timeout [ 354.066350][T12852] team0: Port device team_slave_1 added [ 354.106837][ T5869] Bluetooth: hci6: command tx timeout [ 354.312091][T12852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.320335][T12852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.405062][T12852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.462519][T12852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.495702][T12852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.533837][T12852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.816282][T12864] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.825699][T12864] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.833150][ T5869] Bluetooth: hci8: command tx timeout [ 354.877293][T12864] bridge_slave_0: entered allmulticast mode [ 354.907140][T12864] bridge_slave_0: entered promiscuous mode [ 355.029254][T12864] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.047031][T12864] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.054354][T12864] bridge_slave_1: entered allmulticast mode [ 355.097584][T12864] bridge_slave_1: entered promiscuous mode [ 355.146977][ T5869] Bluetooth: hci7: command tx timeout [ 355.319183][T12852] hsr_slave_0: entered promiscuous mode [ 355.326211][T12852] hsr_slave_1: entered promiscuous mode [ 355.347632][T12852] debugfs: 'hsr0' already exists in 'hsr' [ 355.353481][T12852] Cannot create hsr debugfs directory [ 355.498599][T12864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.530519][T12864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.849252][T12864] team0: Port device team_slave_0 added [ 355.999722][T12864] team0: Port device team_slave_1 added [ 356.116862][ T5869] Bluetooth: hci9: command tx timeout [ 356.309705][T12864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.328289][T12864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.387099][T12864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.409510][T12864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.416506][T12864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.477060][T12864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.634165][T12874] chnl_net:caif_netlink_parms(): no params data found [ 356.906677][ T5869] Bluetooth: hci8: command tx timeout [ 356.957871][T12864] hsr_slave_0: entered promiscuous mode [ 356.965111][T12864] hsr_slave_1: entered promiscuous mode [ 357.007691][T12864] debugfs: 'hsr0' already exists in 'hsr' [ 357.013657][T12864] Cannot create hsr debugfs directory [ 357.651632][T12874] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.669721][T12874] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.687218][T12874] bridge_slave_0: entered allmulticast mode [ 357.695480][T12874] bridge_slave_0: entered promiscuous mode [ 357.750819][T12874] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.758362][T12874] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.765898][T12874] bridge_slave_1: entered allmulticast mode [ 357.789230][T12874] bridge_slave_1: entered promiscuous mode [ 357.934031][T12874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.981242][T12874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.169479][T12874] team0: Port device team_slave_0 added [ 358.187471][ T5869] Bluetooth: hci9: command tx timeout [ 358.199977][T12874] team0: Port device team_slave_1 added [ 358.352648][T12874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.386587][T12874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.467283][T12874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.500823][T12874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.515143][T12874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.543632][T12874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.704773][T12874] hsr_slave_0: entered promiscuous mode [ 358.748783][T12874] hsr_slave_1: entered promiscuous mode [ 358.777213][T12874] debugfs: 'hsr0' already exists in 'hsr' [ 358.782999][T12874] Cannot create hsr debugfs directory [ 360.269245][ T5869] Bluetooth: hci9: command tx timeout [ 396.347629][ T5183] Bluetooth: hci4: command 0x0405 tx timeout [ 405.707823][ T5183] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 405.718712][ T5183] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 405.729481][ T5183] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 405.739059][ T5183] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 405.758107][ T5183] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 405.820102][T12900] lo speed is unknown, defaulting to 1000 [ 407.106187][T12900] chnl_net:caif_netlink_parms(): no params data found [ 407.258262][ T5869] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 407.269216][ T5869] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 407.277718][ T5869] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 407.286079][ T5869] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 407.295483][ T5869] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 407.514961][T12907] lo speed is unknown, defaulting to 1000 [ 407.821391][T12900] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.847038][T12900] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.854409][T12900] bridge_slave_0: entered allmulticast mode [ 407.866987][ T5183] Bluetooth: hci10: command tx timeout [ 407.959250][T12900] bridge_slave_0: entered promiscuous mode [ 407.969729][T12900] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.006792][T12900] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.014126][T12900] bridge_slave_1: entered allmulticast mode [ 408.080069][T12900] bridge_slave_1: entered promiscuous mode [ 408.289394][ T5869] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 408.299126][ T5869] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 408.307888][ T5869] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 408.319099][ T5869] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 408.323399][T12900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.360889][ T5869] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 408.390804][T12900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.660381][T12900] team0: Port device team_slave_0 added [ 408.720755][T12900] team0: Port device team_slave_1 added [ 408.853831][T12913] lo speed is unknown, defaulting to 1000 [ 408.930051][T12900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.962959][T12900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.016614][T12900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.077893][T12900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.085168][T12900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.166921][T12900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.386756][ T5183] Bluetooth: hci11: command tx timeout [ 409.480297][ T5869] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 409.497980][ T5869] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 409.512956][ T5869] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 409.523470][ T5869] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 409.537112][ T5869] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 409.614270][T12900] hsr_slave_0: entered promiscuous mode [ 409.658816][T12900] hsr_slave_1: entered promiscuous mode [ 409.665362][T12900] debugfs: 'hsr0' already exists in 'hsr' [ 409.696569][T12900] Cannot create hsr debugfs directory [ 409.946882][ T5183] Bluetooth: hci10: command tx timeout [ 410.039031][T12916] lo speed is unknown, defaulting to 1000 [ 410.427419][ T5183] Bluetooth: hci12: command tx timeout [ 410.723164][T12907] chnl_net:caif_netlink_parms(): no params data found [ 411.469065][ T5183] Bluetooth: hci11: command tx timeout [ 411.517483][T12913] chnl_net:caif_netlink_parms(): no params data found [ 411.627063][ T5183] Bluetooth: hci13: command tx timeout [ 411.819622][T12907] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.846715][T12907] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.854139][T12907] bridge_slave_0: entered allmulticast mode [ 411.889433][T12907] bridge_slave_0: entered promiscuous mode [ 411.920425][T12907] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.947541][T12907] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.954907][T12907] bridge_slave_1: entered allmulticast mode [ 411.989821][T12907] bridge_slave_1: entered promiscuous mode [ 412.036709][ T5183] Bluetooth: hci10: command tx timeout [ 412.185169][T12907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.393071][T12907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.440434][ T5869] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 412.458234][ T5869] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 412.466623][ T5869] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 412.478701][ T5869] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 412.502298][ T5869] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 412.517058][ T5874] Bluetooth: hci12: command tx timeout [ 412.753663][T12907] team0: Port device team_slave_0 added [ 413.005217][T12907] team0: Port device team_slave_1 added [ 413.331520][T12907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.346680][T12907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.397081][T12907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.418039][T12929] lo speed is unknown, defaulting to 1000 [ 413.427201][T12913] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.434786][T12913] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.487474][T12913] bridge_slave_0: entered allmulticast mode [ 413.495816][T12913] bridge_slave_0: entered promiscuous mode [ 413.529878][T12913] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.547384][ T5183] Bluetooth: hci11: command tx timeout [ 413.556773][T12913] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.564450][T12913] bridge_slave_1: entered allmulticast mode [ 413.589211][T12913] bridge_slave_1: entered promiscuous mode [ 413.673478][T12907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.686660][T12907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.716575][ T5183] Bluetooth: hci13: command tx timeout [ 413.746555][T12907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.107119][ T5183] Bluetooth: hci10: command tx timeout [ 414.299861][T12907] hsr_slave_0: entered promiscuous mode [ 414.327926][T12907] hsr_slave_1: entered promiscuous mode [ 414.336123][T12907] debugfs: 'hsr0' already exists in 'hsr' [ 414.356912][T12907] Cannot create hsr debugfs directory [ 414.386885][T12913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.396292][T12916] chnl_net:caif_netlink_parms(): no params data found [ 414.509330][T12913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.588398][ T5183] Bluetooth: hci12: command tx timeout [ 414.594038][ T5183] Bluetooth: hci14: command tx timeout [ 415.029103][T12913] team0: Port device team_slave_0 added [ 415.169636][T12913] team0: Port device team_slave_1 added [ 415.496867][T12913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.503866][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.576592][T12913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.626861][T12916] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.634147][T12916] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.642091][ T5183] Bluetooth: hci11: command tx timeout [ 415.677072][T12916] bridge_slave_0: entered allmulticast mode [ 415.707090][T12916] bridge_slave_0: entered promiscuous mode [ 415.737827][T12913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.744902][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.786778][ T5183] Bluetooth: hci13: command tx timeout [ 415.807921][T12913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.912083][T12916] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.926770][T12916] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.935147][T12916] bridge_slave_1: entered allmulticast mode [ 415.949444][T12916] bridge_slave_1: entered promiscuous mode [ 416.472381][T12916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.501152][T12916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.571930][T12913] hsr_slave_0: entered promiscuous mode [ 416.598072][T12913] hsr_slave_1: entered promiscuous mode [ 416.617683][T12913] debugfs: 'hsr0' already exists in 'hsr' [ 416.623464][T12913] Cannot create hsr debugfs directory [ 416.667497][ T5183] Bluetooth: hci12: command tx timeout [ 416.673059][ T5183] Bluetooth: hci14: command tx timeout [ 416.950545][T12916] team0: Port device team_slave_0 added [ 416.970732][T12916] team0: Port device team_slave_1 added [ 417.216296][T12929] chnl_net:caif_netlink_parms(): no params data found [ 417.277111][T12916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.284200][T12916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.387294][T12916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.419641][T12916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.438525][T12916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.465739][T12916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.868916][ T5183] Bluetooth: hci13: command tx timeout [ 418.115145][T12916] hsr_slave_0: entered promiscuous mode [ 418.124110][T12916] hsr_slave_1: entered promiscuous mode [ 418.158079][T12916] debugfs: 'hsr0' already exists in 'hsr' [ 418.163957][T12916] Cannot create hsr debugfs directory [ 418.485495][T12929] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.493537][T12929] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.524063][T12929] bridge_slave_0: entered allmulticast mode [ 418.542803][T12929] bridge_slave_0: entered promiscuous mode [ 418.694069][T12929] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.706932][T12929] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.714265][T12929] bridge_slave_1: entered allmulticast mode [ 418.747302][ T5183] Bluetooth: hci14: command tx timeout [ 418.759223][T12929] bridge_slave_1: entered promiscuous mode [ 418.993262][T12929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.041232][T12929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.243695][T12929] team0: Port device team_slave_0 added [ 419.342272][T12929] team0: Port device team_slave_1 added [ 419.562533][T12929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.587535][T12929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.636675][T12929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.743978][T12929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.766912][T12929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.837055][T12929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.030409][T12929] hsr_slave_0: entered promiscuous mode [ 420.048603][T12929] hsr_slave_1: entered promiscuous mode [ 420.067662][T12929] debugfs: 'hsr0' already exists in 'hsr' [ 420.073438][T12929] Cannot create hsr debugfs directory [ 420.827653][ T5183] Bluetooth: hci14: command tx timeout [ 466.139575][ T5874] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 466.162682][ T5874] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 466.171855][ T5874] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 466.180246][ T5874] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 466.188993][ T5874] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 466.339284][T12954] lo speed is unknown, defaulting to 1000 [ 467.584466][T12954] chnl_net:caif_netlink_parms(): no params data found [ 467.618567][ T5874] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 467.629821][ T5874] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 467.647647][ T5874] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 467.679027][ T5874] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 467.687046][ T5874] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 467.913897][T12961] lo speed is unknown, defaulting to 1000 [ 468.027503][ T5864] Bluetooth: hci6: command 0x0406 tx timeout [ 468.030970][ T5874] Bluetooth: hci5: command 0x0406 tx timeout [ 468.267269][ T5183] Bluetooth: hci15: command tx timeout [ 468.269082][T12954] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.336965][T12954] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.344350][T12954] bridge_slave_0: entered allmulticast mode [ 468.389549][T12954] bridge_slave_0: entered promiscuous mode [ 468.409474][T12954] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.426961][T12954] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.434380][T12954] bridge_slave_1: entered allmulticast mode [ 468.469216][T12954] bridge_slave_1: entered promiscuous mode [ 468.732169][T12954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.777769][ T5869] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 468.781006][T12954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.797834][ T5869] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 468.827192][ T5869] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 468.877673][ T5869] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 468.887147][ T5869] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 469.079656][T12954] team0: Port device team_slave_0 added [ 469.128908][T12954] team0: Port device team_slave_1 added [ 469.335156][T12954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.367008][T12954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.436555][T12954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.510198][T12954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.537029][T12954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.602824][ T5869] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 469.612698][ T5869] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 469.622156][T12954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.633717][ T5869] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 469.642575][ T5869] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 469.651556][ T5869] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 469.714530][ T5183] Bluetooth: hci16: command tx timeout [ 469.880121][T12967] lo speed is unknown, defaulting to 1000 [ 469.930627][T12954] hsr_slave_0: entered promiscuous mode [ 469.948139][T12954] hsr_slave_1: entered promiscuous mode [ 469.976777][T12954] debugfs: 'hsr0' already exists in 'hsr' [ 469.982564][T12954] Cannot create hsr debugfs directory [ 470.347263][ T5183] Bluetooth: hci15: command tx timeout [ 470.791129][T12969] lo speed is unknown, defaulting to 1000 [ 470.987377][ T5183] Bluetooth: hci17: command tx timeout [ 471.042923][T12961] chnl_net:caif_netlink_parms(): no params data found [ 471.706768][ T5864] Bluetooth: hci18: command tx timeout [ 471.796653][ T5864] Bluetooth: hci16: command tx timeout [ 472.191411][T12961] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.216840][T12961] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.224464][T12961] bridge_slave_0: entered allmulticast mode [ 472.259044][T12961] bridge_slave_0: entered promiscuous mode [ 472.347475][T12961] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.354863][T12961] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.397197][T12961] bridge_slave_1: entered allmulticast mode [ 472.405783][T12961] bridge_slave_1: entered promiscuous mode [ 472.426712][ T5864] Bluetooth: hci15: command tx timeout [ 472.594280][T12967] chnl_net:caif_netlink_parms(): no params data found [ 472.713829][T12961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.810961][T12961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.926126][ T5874] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 472.935893][ T5874] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 472.945190][ T5874] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 472.967475][ T5874] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 472.976279][ T5874] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 473.078331][ T5864] Bluetooth: hci17: command tx timeout [ 473.158290][ T5864] Bluetooth: hci8: command 0x0406 tx timeout [ 473.158592][ T5874] Bluetooth: hci7: command 0x0406 tx timeout [ 473.293025][T12961] team0: Port device team_slave_0 added [ 473.323978][T12961] team0: Port device team_slave_1 added [ 473.786796][ T5183] Bluetooth: hci18: command tx timeout [ 473.813246][T12961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.827043][T12961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.883337][ T5183] Bluetooth: hci16: command tx timeout [ 473.917375][T12961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.950985][T12961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.966839][T12961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.994038][T12961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.005760][T12982] lo speed is unknown, defaulting to 1000 [ 474.006661][T12967] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.020216][T12967] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.028258][T12967] bridge_slave_0: entered allmulticast mode [ 474.036946][T12967] bridge_slave_0: entered promiscuous mode [ 474.240114][T12967] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.271519][T12967] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.286952][T12967] bridge_slave_1: entered allmulticast mode [ 474.295353][T12967] bridge_slave_1: entered promiscuous mode [ 474.507141][ T5183] Bluetooth: hci15: command tx timeout [ 474.628907][T12961] hsr_slave_0: entered promiscuous mode [ 474.658761][T12961] hsr_slave_1: entered promiscuous mode [ 474.665399][T12961] debugfs: 'hsr0' already exists in 'hsr' [ 474.700511][T12961] Cannot create hsr debugfs directory [ 474.769132][T12967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.875763][T12969] chnl_net:caif_netlink_parms(): no params data found [ 474.910794][T12967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.066734][ T5183] Bluetooth: hci19: command tx timeout [ 475.147212][ T5183] Bluetooth: hci17: command tx timeout [ 475.312980][T12967] team0: Port device team_slave_0 added [ 475.341101][T12967] team0: Port device team_slave_1 added [ 475.557935][T12967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.587507][T12967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.663297][T12967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.788883][T12967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.795945][T12967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.870173][ T5183] Bluetooth: hci18: command tx timeout [ 475.896624][T12967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.953876][ T5183] Bluetooth: hci16: command tx timeout [ 476.326304][T12969] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.347479][T12969] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.355015][T12969] bridge_slave_0: entered allmulticast mode [ 476.387096][T12969] bridge_slave_0: entered promiscuous mode [ 476.509054][T12967] hsr_slave_0: entered promiscuous mode [ 476.532297][T12967] hsr_slave_1: entered promiscuous mode [ 476.539751][T12967] debugfs: 'hsr0' already exists in 'hsr' [ 476.545526][T12967] Cannot create hsr debugfs directory [ 476.576239][T12969] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.584320][T12969] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.616204][T12969] bridge_slave_1: entered allmulticast mode [ 476.625199][T12969] bridge_slave_1: entered promiscuous mode [ 476.870280][T12969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.051074][T12969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.147604][ T5869] Bluetooth: hci19: command tx timeout [ 477.227200][ T5869] Bluetooth: hci17: command tx timeout [ 477.442189][T12969] team0: Port device team_slave_0 added [ 477.600005][T12969] team0: Port device team_slave_1 added [ 477.810287][T12969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.826620][T12969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.886990][T12969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.909424][T12969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.926719][T12969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.966678][ T5869] Bluetooth: hci18: command tx timeout [ 478.006909][T12969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.035935][T12982] chnl_net:caif_netlink_parms(): no params data found [ 478.266838][ T5869] Bluetooth: hci9: command 0x0406 tx timeout [ 478.624796][T12969] hsr_slave_0: entered promiscuous mode [ 478.667709][T12969] hsr_slave_1: entered promiscuous mode [ 478.697431][T12969] debugfs: 'hsr0' already exists in 'hsr' [ 478.703212][T12969] Cannot create hsr debugfs directory [ 478.917889][T12982] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.925055][T12982] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.947134][T12982] bridge_slave_0: entered allmulticast mode [ 478.967401][T12982] bridge_slave_0: entered promiscuous mode [ 478.998774][T12982] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.006051][T12982] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.027031][T12982] bridge_slave_1: entered allmulticast mode [ 479.035362][T12982] bridge_slave_1: entered promiscuous mode [ 479.228802][ T5183] Bluetooth: hci19: command tx timeout [ 479.364080][T12982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.422543][T12982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.598667][T12982] team0: Port device team_slave_0 added [ 479.660062][T12982] team0: Port device team_slave_1 added [ 479.949845][T12982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.967027][T12982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.016941][T12982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.132390][T12982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.146636][T12982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.206646][T12982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.438999][T12982] hsr_slave_0: entered promiscuous mode [ 480.446108][T12982] hsr_slave_1: entered promiscuous mode [ 480.468038][T12982] debugfs: 'hsr0' already exists in 'hsr' [ 480.473816][T12982] Cannot create hsr debugfs directory [ 481.308281][ T5183] Bluetooth: hci19: command tx timeout [ 492.829414][ T31] INFO: task syz.4.1887:12793 blocked for more than 143 seconds. [ 492.837322][ T31] Not tainted syzkaller #0 [ 492.842275][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 492.896899][ T31] task:syz.4.1887 state:D stack:28360 pid:12793 tgid:12791 ppid:5868 task_flags:0x400040 flags:0x00004004 [ 492.956613][ T31] Call Trace: [ 492.959965][ T31] [ 492.962927][ T31] __schedule+0x1798/0x4cc0 [ 493.007247][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.028314][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.033260][ T31] ? __pfx___schedule+0x10/0x10 [ 493.066846][ T31] ? schedule+0x91/0x360 [ 493.071612][ T31] schedule+0x165/0x360 [ 493.075815][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.087451][ T31] __mutex_lock+0x7e6/0x1350 [ 493.092256][ T31] ? __mutex_lock+0x5bb/0x1350 [ 493.097134][ T31] ? genl_rcv_msg+0x10d/0x790 [ 493.101874][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.126691][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 493.131995][ T31] ? radix_tree_lookup+0x240/0x290 [ 493.148445][ T31] genl_rcv_msg+0x10d/0x790 [ 493.153020][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.166604][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 493.171701][ T31] ? __asan_memcpy+0x40/0x70 [ 493.186588][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 493.192040][ T31] netlink_rcv_skb+0x205/0x470 [ 493.207055][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.211996][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.226694][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.232077][ T31] ? down_read+0x1ad/0x2e0 [ 493.257441][ T31] genl_rcv+0x28/0x40 [ 493.261500][ T31] netlink_unicast+0x82c/0x9e0 [ 493.266311][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 493.286610][ T31] ? netlink_sendmsg+0x642/0xb30 [ 493.291963][ T31] ? skb_put+0x11b/0x210 [ 493.296241][ T31] netlink_sendmsg+0x805/0xb30 [ 493.316668][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.322020][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 493.336549][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.341906][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.367350][ T31] __sock_sendmsg+0x219/0x270 [ 493.372098][ T31] __sys_sendto+0x3bd/0x520 [ 493.387215][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 493.392324][ T31] ? count_memcg_event_mm+0x21/0x260 [ 493.406647][ T31] ? exc_page_fault+0x76/0xf0 [ 493.411411][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 493.426589][ T31] __x64_sys_sendto+0xde/0x100 [ 493.431420][ T31] do_syscall_64+0xfa/0x3b0 [ 493.436141][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.457866][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.464000][ T31] ? clear_bhb_loop+0x60/0xb0 [ 493.486641][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.492604][ T31] RIP: 0033:0x7fe0c0f90a7c [ 493.507082][ T31] RSP: 002b:00007fe0c1d4aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 493.515557][ T31] RAX: ffffffffffffffda RBX: 00007fe0c1d4afc0 RCX: 00007fe0c0f90a7c [ 493.536994][ T31] RDX: 0000000000000020 RSI: 00007fe0c1d4b010 RDI: 0000000000000006 [ 493.545042][ T31] RBP: 0000000000000000 R08: 00007fe0c1d4af14 R09: 000000000000000c [ 493.576942][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 493.585585][ T31] R13: 00007fe0c1d4af68 R14: 00007fe0c1d4b010 R15: 0000000000000000 [ 493.606628][ T31] [ 493.609793][ T31] INFO: task syz.4.1887:12795 blocked for more than 144 seconds. [ 493.633855][ T31] Not tainted syzkaller #0 [ 493.656700][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.665436][ T31] task:syz.4.1887 state:D stack:27016 pid:12795 tgid:12791 ppid:5868 task_flags:0x400140 flags:0x00004004 [ 493.707039][ T31] Call Trace: [ 493.710389][ T31] [ 493.713361][ T31] __schedule+0x1798/0x4cc0 [ 493.726572][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.731605][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.746590][ T31] ? __pfx___schedule+0x10/0x10 [ 493.751537][ T31] ? schedule+0x91/0x360 [ 493.755848][ T31] schedule+0x165/0x360 [ 493.776623][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.782523][ T31] __mutex_lock+0x7e6/0x1350 [ 493.797437][ T31] ? __mutex_lock+0x5bb/0x1350 [ 493.802312][ T31] ? genl_rcv_msg+0x10d/0x790 [ 493.816627][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.821717][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 493.836698][ T31] ? radix_tree_lookup+0x240/0x290 [ 493.841875][ T31] genl_rcv_msg+0x10d/0x790 [ 493.857114][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.862199][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 493.887060][ T31] ? __asan_memcpy+0x40/0x70 [ 493.892278][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 493.906667][ T31] netlink_rcv_skb+0x205/0x470 [ 493.911665][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.926549][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.931727][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.947031][ T31] ? down_read+0x1ad/0x2e0 [ 493.951515][ T31] genl_rcv+0x28/0x40 [ 493.955552][ T31] netlink_unicast+0x82c/0x9e0 [ 493.977075][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 493.982435][ T31] ? netlink_sendmsg+0x642/0xb30 [ 493.996688][ T31] ? skb_put+0x11b/0x210 [ 494.001001][ T31] netlink_sendmsg+0x805/0xb30 [ 494.005811][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.028749][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.033756][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.056604][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.061955][ T31] __sock_sendmsg+0x219/0x270 [ 494.076726][ T31] __sys_sendto+0x3bd/0x520 [ 494.081307][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 494.086417][ T31] ? fd_install+0x97/0x540 [ 494.101513][ T31] ? fd_install+0x30d/0x540 [ 494.106072][ T31] __x64_sys_sendto+0xde/0x100 [ 494.127113][ T31] do_syscall_64+0xfa/0x3b0 [ 494.131688][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.137080][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.143233][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.166544][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.172518][ T31] RIP: 0033:0x7fe0c0f90a7c [ 494.187463][ T31] RSP: 002b:00007fe0c1d29ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 494.195949][ T31] RAX: ffffffffffffffda RBX: 00007fe0c1d29fc0 RCX: 00007fe0c0f90a7c [ 494.217082][ T31] RDX: 0000000000000020 RSI: 00007fe0c1d2a010 RDI: 0000000000000007 [ 494.225115][ T31] RBP: 0000000000000000 R08: 00007fe0c1d29f14 R09: 000000000000000c [ 494.257393][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 494.265429][ T31] R13: 00007fe0c1d29f68 R14: 00007fe0c1d2a010 R15: 0000000000000000 [ 494.286622][ T31] [ 494.296657][ T31] INFO: task syz.1.1893:12808 blocked for more than 144 seconds. [ 494.314511][ T31] Not tainted syzkaller #0 [ 494.326606][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.335346][ T31] task:syz.1.1893 state:D stack:27592 pid:12808 tgid:12807 ppid:5860 task_flags:0x400140 flags:0x00004004 [ 494.366719][ T31] Call Trace: [ 494.370343][ T31] [ 494.373350][ T31] __schedule+0x1798/0x4cc0 [ 494.396658][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.402141][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.417086][ T31] ? __pfx___schedule+0x10/0x10 [ 494.422284][ T31] ? schedule+0x91/0x360 [ 494.436671][ T31] schedule+0x165/0x360 [ 494.441074][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.456797][ T31] __mutex_lock+0x7e6/0x1350 [ 494.461473][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.466300][ T31] ? genl_rcv_msg+0x10d/0x790 [ 494.486684][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.491785][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 494.504700][ T31] ? radix_tree_lookup+0x240/0x290 [ 494.517158][ T31] genl_rcv_msg+0x10d/0x790 [ 494.521730][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.536842][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 494.541938][ T31] ? __asan_memcpy+0x40/0x70 [ 494.556833][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 494.562371][ T31] netlink_rcv_skb+0x205/0x470 [ 494.586918][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.591847][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.606891][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.612299][ T31] ? down_read+0x1ad/0x2e0 [ 494.627400][ T31] genl_rcv+0x28/0x40 [ 494.631453][ T31] netlink_unicast+0x82c/0x9e0 [ 494.636346][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 494.646645][ T31] ? netlink_sendmsg+0x642/0xb30 [ 494.651637][ T31] ? skb_put+0x11b/0x210 [ 494.655910][ T31] netlink_sendmsg+0x805/0xb30 [ 494.676780][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.682167][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.699857][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.705305][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.726647][ T31] __sock_sendmsg+0x219/0x270 [ 494.731408][ T31] __sys_sendto+0x3bd/0x520 [ 494.736032][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 494.776996][ T31] ? count_memcg_event_mm+0x21/0x260 [ 494.782811][ T31] ? exc_page_fault+0x76/0xf0 [ 494.811916][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 494.826733][ T31] __x64_sys_sendto+0xde/0x100 [ 494.831572][ T31] do_syscall_64+0xfa/0x3b0 [ 494.836106][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.856747][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.862957][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.877015][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.882961][ T31] RIP: 0033:0x7f3285b90a7c [ 494.927039][ T31] RSP: 002b:00007f3286a38ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 494.935520][ T31] RAX: ffffffffffffffda RBX: 00007f3286a38fc0 RCX: 00007f3285b90a7c [ 494.956818][ T31] RDX: 0000000000000020 RSI: 00007f3286a39010 RDI: 000000000000000b [ 494.964845][ T31] RBP: 0000000000000000 R08: 00007f3286a38f14 R09: 000000000000000c [ 494.987233][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 494.995260][ T31] R13: 00007f3286a38f68 R14: 00007f3286a39010 R15: 0000000000000000 [ 495.016811][ T31] [ 495.019926][ T31] INFO: task syz.2.1899:12829 blocked for more than 145 seconds. [ 495.087031][ T31] Not tainted syzkaller #0 [ 495.092027][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.116619][ T31] task:syz.2.1899 state:D stack:24088 pid:12829 tgid:12828 ppid:5861 task_flags:0x400140 flags:0x00004004 [ 495.147004][ T31] Call Trace: [ 495.150343][ T31] [ 495.153303][ T31] __schedule+0x1798/0x4cc0 [ 495.166981][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.171905][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.186655][ T31] ? __pfx___schedule+0x10/0x10 [ 495.191598][ T31] ? schedule+0x91/0x360 [ 495.195874][ T31] schedule+0x165/0x360 [ 495.216875][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.223008][ T31] __mutex_lock+0x7e6/0x1350 [ 495.236572][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.241421][ T31] ? genl_rcv_msg+0x10d/0x790 [ 495.246141][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.266978][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 495.272175][ T31] ? radix_tree_lookup+0x240/0x290 [ 495.286894][ T31] genl_rcv_msg+0x10d/0x790 [ 495.291459][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.306960][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 495.312046][ T31] ? __asan_memcpy+0x40/0x70 [ 495.326695][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 495.332146][ T31] netlink_rcv_skb+0x205/0x470 [ 495.346908][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.351846][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.366667][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.372089][ T31] ? down_read+0x1ad/0x2e0 [ 495.387198][ T31] genl_rcv+0x28/0x40 [ 495.391280][ T31] netlink_unicast+0x82c/0x9e0 [ 495.396175][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 495.416818][ T31] ? netlink_sendmsg+0x642/0xb30 [ 495.421822][ T31] ? skb_put+0x11b/0x210 [ 495.426451][ T31] netlink_sendmsg+0x805/0xb30 [ 495.442024][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.456702][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 495.461712][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.476883][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.482229][ T31] __sock_sendmsg+0x219/0x270 [ 495.496877][ T31] __sys_sendto+0x3bd/0x520 [ 495.501464][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 495.516681][ T31] ? count_memcg_event_mm+0x21/0x260 [ 495.522073][ T31] ? exc_page_fault+0x76/0xf0 [ 495.546657][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 495.552024][ T31] __x64_sys_sendto+0xde/0x100 [ 495.566917][ T31] do_syscall_64+0xfa/0x3b0 [ 495.571567][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.586924][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.593050][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.606652][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.612854][ T31] RIP: 0033:0x7f9602390a7c [ 495.626667][ T31] RSP: 002b:00007f96032cbec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 495.635590][ T31] RAX: ffffffffffffffda RBX: 00007f96032cbfc0 RCX: 00007f9602390a7c [ 495.675430][ T31] RDX: 0000000000000020 RSI: 00007f96032cc010 RDI: 0000000000000003 [ 495.684423][ T31] RBP: 0000000000000000 R08: 00007f96032cbf14 R09: 000000000000000c [ 495.713925][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 495.726539][ T31] R13: 00007f96032cbf68 R14: 00007f96032cc010 R15: 0000000000000000 [ 495.746620][ T31] [ 495.749810][ T31] INFO: task syz.0.1902:12840 blocked for more than 146 seconds. [ 495.771760][ T31] Not tainted syzkaller #0 [ 495.787504][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.796423][ T31] task:syz.0.1902 state:D stack:28616 pid:12840 tgid:12839 ppid:5871 task_flags:0x400040 flags:0x00004004 [ 495.835914][ T31] Call Trace: [ 495.839639][ T31] [ 495.842611][ T31] __schedule+0x1798/0x4cc0 [ 495.857116][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.862047][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.877014][ T31] ? __pfx___schedule+0x10/0x10 [ 495.881949][ T31] ? schedule+0x91/0x360 [ 495.886254][ T31] schedule+0x165/0x360 [ 495.906691][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.912218][ T31] __mutex_lock+0x7e6/0x1350 [ 495.935562][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.941227][ T31] ? genl_rcv_msg+0x10d/0x790 [ 495.946032][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.966679][ T31] ? stack_trace_save+0x9c/0xe0 [ 495.971595][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 495.992794][ T31] ? radix_tree_lookup+0x240/0x290 [ 496.007193][ T31] genl_rcv_msg+0x10d/0x790 [ 496.011774][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.026621][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.031718][ T31] netlink_rcv_skb+0x205/0x470 [ 496.046571][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.051493][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.071150][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.087229][ T31] ? down_read+0x1ad/0x2e0 [ 496.091847][ T31] genl_rcv+0x28/0x40 [ 496.095851][ T31] netlink_unicast+0x82c/0x9e0 [ 496.116639][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 496.122104][ T31] ? netlink_sendmsg+0x642/0xb30 [ 496.136521][ T31] ? skb_put+0x11b/0x210 [ 496.140833][ T31] netlink_sendmsg+0x805/0xb30 [ 496.157020][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.162379][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 496.180536][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.185881][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.206978][ T31] __sock_sendmsg+0x219/0x270 [ 496.211721][ T31] __sys_sendto+0x3bd/0x520 [ 496.216334][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 496.236635][ T31] ? count_memcg_event_mm+0x21/0x260 [ 496.242104][ T31] ? exc_page_fault+0x76/0xf0 [ 496.265465][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 496.271722][ T31] __x64_sys_sendto+0xde/0x100 [ 496.288728][ T31] do_syscall_64+0xfa/0x3b0 [ 496.293285][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.307337][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.313456][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.326890][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.332921][ T31] RIP: 0033:0x7fd4d9590a7c [ 496.356776][ T31] RSP: 002b:00007fd4da35cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 496.365433][ T31] RAX: ffffffffffffffda RBX: 00007fd4da35cfc0 RCX: 00007fd4d9590a7c [ 496.401058][ T31] RDX: 0000000000000020 RSI: 00007fd4da35d010 RDI: 0000000000000003 [ 496.409580][ T31] RBP: 0000000000000000 R08: 00007fd4da35cf14 R09: 000000000000000c [ 496.427172][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 496.435201][ T31] R13: 00007fd4da35cf68 R14: 00007fd4da35d010 R15: 0000000000000000 [ 496.466732][ T31] [ 496.469849][ T31] INFO: task syz.0.1902:12841 blocked for more than 147 seconds. [ 496.487033][ T31] Not tainted syzkaller #0 [ 496.492016][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.517197][ T31] task:syz.0.1902 state:D stack:28616 pid:12841 tgid:12839 ppid:5871 task_flags:0x400040 flags:0x00004004 [ 496.547270][ T31] Call Trace: [ 496.550621][ T31] [ 496.554514][ T31] __schedule+0x1798/0x4cc0 [ 496.566663][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.571613][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.597118][ T31] ? __pfx___schedule+0x10/0x10 [ 496.602060][ T31] ? schedule+0x91/0x360 [ 496.606361][ T31] schedule+0x165/0x360 [ 496.646933][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.652560][ T31] __mutex_lock+0x7e6/0x1350 [ 496.668976][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.673830][ T31] ? genl_rcv_msg+0x10d/0x790 [ 496.697321][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.702431][ T31] ? stack_trace_save+0x9c/0xe0 [ 496.707983][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 496.713390][ T31] ? radix_tree_lookup+0x240/0x290 [ 496.736817][ T31] genl_rcv_msg+0x10d/0x790 [ 496.741393][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.746274][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.776746][ T31] netlink_rcv_skb+0x205/0x470 [ 496.781585][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.796605][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.801740][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.817501][ T31] ? down_read+0x1ad/0x2e0 [ 496.822160][ T31] genl_rcv+0x28/0x40 [ 496.826269][ T31] netlink_unicast+0x82c/0x9e0 [ 496.856694][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 496.862634][ T31] ? netlink_sendmsg+0x642/0xb30 [ 496.877020][ T31] ? skb_put+0x11b/0x210 [ 496.881323][ T31] netlink_sendmsg+0x805/0xb30 [ 496.886140][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.907256][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 496.912343][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.926936][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.932277][ T31] __sock_sendmsg+0x219/0x270 [ 496.948958][ T31] __sys_sendto+0x3bd/0x520 [ 496.953534][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 496.967065][ T31] ? count_memcg_event_mm+0x21/0x260 [ 496.972430][ T31] ? exc_page_fault+0x76/0xf0 [ 496.988117][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 496.994063][ T31] __x64_sys_sendto+0xde/0x100 [ 497.016734][ T31] do_syscall_64+0xfa/0x3b0 [ 497.021294][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.036659][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.042791][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.059163][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.065586][ T31] RIP: 0033:0x7fd4d9590a7c [ 497.087522][ T31] RSP: 002b:00007fd4da33bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 497.095998][ T31] RAX: ffffffffffffffda RBX: 00007fd4da33bfc0 RCX: 00007fd4d9590a7c [ 497.117020][ T31] RDX: 0000000000000020 RSI: 00007fd4da33c010 RDI: 0000000000000005 [ 497.125047][ T31] RBP: 0000000000000000 R08: 00007fd4da33bf14 R09: 000000000000000c [ 497.149876][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 497.167178][ T31] R13: 00007fd4da33bf68 R14: 00007fd4da33c010 R15: 0000000000000000 [ 497.175248][ T31] [ 497.186543][ T31] INFO: task syz.0.1902:12842 blocked for more than 147 seconds. [ 497.194410][ T31] Not tainted syzkaller #0 [ 497.216721][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.225441][ T31] task:syz.0.1902 state:D stack:25992 pid:12842 tgid:12839 ppid:5871 task_flags:0x400140 flags:0x00004004 [ 497.257092][ T31] Call Trace: [ 497.260461][ T31] [ 497.263430][ T31] __schedule+0x1798/0x4cc0 [ 497.297117][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.302158][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.327308][ T31] ? __pfx___schedule+0x10/0x10 [ 497.332265][ T31] ? schedule+0x91/0x360 [ 497.357332][ T31] schedule+0x165/0x360 [ 497.361565][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.386981][ T31] __mutex_lock+0x7e6/0x1350 [ 497.391838][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.396928][ T31] ? genl_rcv_msg+0x10d/0x790 [ 497.401637][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.416819][ T31] ? stack_trace_save+0x9c/0xe0 [ 497.421757][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 497.436614][ T31] ? radix_tree_lookup+0x240/0x290 [ 497.441892][ T31] genl_rcv_msg+0x10d/0x790 [ 497.446444][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.471843][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.486816][ T31] netlink_rcv_skb+0x205/0x470 [ 497.491661][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.506846][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.511933][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.526717][ T31] ? down_read+0x1ad/0x2e0 [ 497.531206][ T31] genl_rcv+0x28/0x40 [ 497.535238][ T31] netlink_unicast+0x82c/0x9e0 [ 497.556678][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 497.562047][ T31] ? netlink_sendmsg+0x642/0xb30 [ 497.576550][ T31] ? skb_put+0x11b/0x210 [ 497.580857][ T31] netlink_sendmsg+0x805/0xb30 [ 497.585664][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.606663][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 497.611667][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.627332][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.632677][ T31] __sock_sendmsg+0x219/0x270 [ 497.646817][ T31] __sys_sendto+0x3bd/0x520 [ 497.651381][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 497.666784][ T31] ? fd_install+0x97/0x540 [ 497.671313][ T31] ? fd_install+0x30d/0x540 [ 497.675865][ T31] __x64_sys_sendto+0xde/0x100 [ 497.696557][ T31] do_syscall_64+0xfa/0x3b0 [ 497.701120][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.716883][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.723004][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.736845][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.742792][ T31] RIP: 0033:0x7fd4d9590a7c [ 497.756680][ T31] RSP: 002b:00007fd4d77f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 497.765398][ T31] RAX: ffffffffffffffda RBX: 00007fd4d77f4fc0 RCX: 00007fd4d9590a7c [ 497.787130][ T31] RDX: 0000000000000020 RSI: 00007fd4d77f5010 RDI: 0000000000000007 [ 497.795249][ T31] RBP: 0000000000000000 R08: 00007fd4d77f4f14 R09: 000000000000000c [ 497.816546][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 497.824829][ T31] R13: 00007fd4d77f4f68 R14: 00007fd4d77f5010 R15: 0000000000000000 [ 497.856974][ T31] [ 497.860169][ T31] [ 497.860169][ T31] Showing all locks held in the system: [ 497.976526][ T31] 1 lock held by khungtaskd/31: [ 497.981458][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 498.026705][ T31] 7 locks held by kworker/u8:3/42: [ 498.031909][ T31] 2 locks held by getty/5622: [ 498.046967][ T31] #0: ffff88814d4cd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 498.066699][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 498.086791][ T31] 3 locks held by kworker/0:17/10818: [ 498.096538][ T31] 6 locks held by syz.3.1884/12786: [ 498.101894][ T31] 2 locks held by syz.4.1887/12793: [ 498.116670][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.125020][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 498.156935][ T31] 2 locks held by syz.4.1887/12795: [ 498.162183][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.176619][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 498.185654][ T31] 2 locks held by syz.1.1893/12808: [ 498.216556][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.224821][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 498.257039][ T31] 2 locks held by syz.2.1899/12829: [ 498.262371][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.286756][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 498.296166][ T31] 2 locks held by syz.0.1902/12840: [ 498.316834][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.325114][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 498.346840][ T31] 2 locks held by syz.0.1902/12841: [ 498.352188][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.376962][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 498.386023][ T31] 2 locks held by syz.0.1902/12842: [ 498.406882][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.415357][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 498.446558][ T31] 2 locks held by syz-executor/12847: [ 498.451980][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.466830][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 498.475898][ T31] 2 locks held by syz-executor/12849: [ 498.497234][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.516624][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 498.525942][ T31] 2 locks held by syz-executor/12852: [ 498.546718][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.554988][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 498.587786][ T31] 2 locks held by syz-executor/12864: [ 498.593221][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.636886][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 498.645932][ T31] 2 locks held by syz-executor/12874: [ 498.666576][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.674843][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 498.696675][ T31] 2 locks held by syz-executor/12900: [ 498.702139][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.726775][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 498.735826][ T31] 2 locks held by syz-executor/12907: [ 498.776566][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.784845][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 498.816639][ T31] 2 locks held by syz-executor/12913: [ 498.822101][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.866627][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 498.875951][ T31] 2 locks held by syz-executor/12916: [ 498.896542][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.904984][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 498.946798][ T31] 2 locks held by syz-executor/12929: [ 498.952311][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.996563][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 499.005741][ T31] 2 locks held by syz-executor/12954: [ 499.030536][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 499.047251][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 499.056310][ T31] 2 locks held by syz-executor/12961: [ 499.076723][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 499.084983][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 499.112799][ T31] 2 locks held by syz-executor/12967: [ 499.127071][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 499.135589][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 499.166655][ T31] 2 locks held by syz-executor/12969: [ 499.172078][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 499.187172][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 499.196221][ T31] 2 locks held by syz-executor/12982: [ 499.229133][ T31] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 499.237544][ T31] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 499.277050][ T31] [ 499.279428][ T31] ============================================= [ 499.279428][ T31] [ 499.317435][ T31] NMI backtrace for cpu 1 [ 499.317470][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 499.317492][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 499.317503][ T31] Call Trace: [ 499.317511][ T31] [ 499.317519][ T31] dump_stack_lvl+0x189/0x250 [ 499.317552][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.317575][ T31] ? __pfx__printk+0x10/0x10 [ 499.317616][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 499.317645][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 499.317671][ T31] ? __pfx__printk+0x10/0x10 [ 499.317700][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 499.317731][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 499.317756][ T31] watchdog+0xf93/0xfe0 [ 499.317787][ T31] ? watchdog+0x1de/0xfe0 [ 499.317818][ T31] kthread+0x70e/0x8a0 [ 499.317844][ T31] ? __pfx_watchdog+0x10/0x10 [ 499.317868][ T31] ? __pfx_kthread+0x10/0x10 [ 499.317893][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 499.317918][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.317942][ T31] ? __pfx_kthread+0x10/0x10 [ 499.317966][ T31] ret_from_fork+0x3f9/0x770 [ 499.317989][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 499.318016][ T31] ? __switch_to_asm+0x39/0x70 [ 499.318038][ T31] ? __switch_to_asm+0x33/0x70 [ 499.318060][ T31] ? __pfx_kthread+0x10/0x10 [ 499.318085][ T31] ret_from_fork_asm+0x1a/0x30 [ 499.318126][ T31] [ 499.318133][ T31] Sending NMI from CPU 1 to CPUs 0: [ 499.469659][ C0] NMI backtrace for cpu 0 [ 499.469677][ C0] CPU: 0 UID: 0 PID: 10890 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 499.469695][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 499.469705][ C0] Workqueue: bat_events batadv_nc_worker [ 499.469730][ C0] RIP: 0010:mark_lock+0x3c/0x190 [ 499.469747][ C0] Code: 00 03 00 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 c4 b8 0a 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 10 43 49 93 eb 48 83 3d 2b 48 [ 499.469760][ C0] RSP: 0018:ffffc900040bf868 EFLAGS: 00000007 [ 499.469773][ C0] RAX: 0000000000000772 RBX: 0000000000000006 RCX: 0000000000000006 [ 499.469783][ C0] RDX: 0000000000000006 RSI: ffff88803008a8f0 RDI: ffff888030089e00 [ 499.469793][ C0] RBP: 0000000000000040 R08: ffffffff8fa38e37 R09: 1ffffffff1f471c6 [ 499.469804][ C0] R10: dffffc0000000000 R11: fffffbfff1f471c7 R12: ffff88803008a940 [ 499.469814][ C0] R13: dffffc0000000000 R14: ffff88803008a8f0 R15: 0000000000000000 [ 499.469825][ C0] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 499.469837][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.469848][ C0] CR2: 00007ffe12e81c78 CR3: 000000000df36000 CR4: 00000000003526f0 [ 499.469863][ C0] Call Trace: [ 499.469869][ C0] [ 499.469879][ C0] lockdep_hardirqs_on_prepare+0x191/0x2a0 [ 499.469900][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 499.469919][ C0] trace_hardirqs_on+0x28/0x40 [ 499.469937][ C0] __local_bh_enable_ip+0x12d/0x1c0 [ 499.469952][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 499.469968][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 499.469984][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 499.470008][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 499.470028][ C0] batadv_nc_purge_paths+0x318/0x3b0 [ 499.470052][ C0] batadv_nc_worker+0x369/0x610 [ 499.470070][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 499.470085][ C0] process_scheduled_works+0xae1/0x17b0 [ 499.470109][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 499.470129][ C0] worker_thread+0x8a0/0xda0 [ 499.470153][ C0] kthread+0x70e/0x8a0 [ 499.470170][ C0] ? __pfx_worker_thread+0x10/0x10 [ 499.470184][ C0] ? __pfx_kthread+0x10/0x10 [ 499.470201][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 499.470219][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.470238][ C0] ? __pfx_kthread+0x10/0x10 [ 499.470254][ C0] ret_from_fork+0x3f9/0x770 [ 499.470270][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 499.470287][ C0] ? __switch_to_asm+0x39/0x70 [ 499.470305][ C0] ? __switch_to_asm+0x33/0x70 [ 499.470322][ C0] ? __pfx_kthread+0x10/0x10 [ 499.470339][ C0] ret_from_fork_asm+0x1a/0x30 [ 499.470363][ C0] [ 499.470743][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 499.744610][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 499.753781][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 499.763838][ T31] Call Trace: [ 499.767129][ T31] [ 499.770063][ T31] dump_stack_lvl+0x99/0x250 [ 499.774664][ T31] ? __asan_memcpy+0x40/0x70 [ 499.779282][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.784573][ T31] ? __pfx__printk+0x10/0x10 [ 499.789180][ T31] vpanic+0x281/0x750 [ 499.793169][ T31] ? __pfx_vpanic+0x10/0x10 [ 499.797672][ T31] ? preempt_schedule+0xae/0xc0 [ 499.802531][ T31] ? preempt_schedule_common+0x83/0xd0 [ 499.808000][ T31] panic+0xb9/0xc0 [ 499.811724][ T31] ? __pfx_panic+0x10/0x10 [ 499.816235][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 499.821628][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 499.827789][ T31] watchdog+0xfd2/0xfe0 [ 499.831955][ T31] ? watchdog+0x1de/0xfe0 [ 499.836298][ T31] kthread+0x70e/0x8a0 [ 499.840438][ T31] ? __pfx_watchdog+0x10/0x10 [ 499.845163][ T31] ? __pfx_kthread+0x10/0x10 [ 499.849775][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 499.854987][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.860205][ T31] ? __pfx_kthread+0x10/0x10 [ 499.864797][ T31] ret_from_fork+0x3f9/0x770 [ 499.869395][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 499.874601][ T31] ? __switch_to_asm+0x39/0x70 [ 499.879369][ T31] ? __switch_to_asm+0x33/0x70 [ 499.884138][ T31] ? __pfx_kthread+0x10/0x10 [ 499.888754][ T31] ret_from_fork_asm+0x1a/0x30 [ 499.893543][ T31] [ 499.896799][ T31] Kernel Offset: disabled [ 499.901464][ T31] Rebooting in 86400 seconds..