last executing test programs: 23.269339163s ago: executing program 2 (id=2394): socket(0x2b, 0x1, 0x1) (async) r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x3) (async) listen(r0, 0x3) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) sendto$inet(r0, &(0x7f0000000040)="53d9a194ffb1c47bad324b86d9fcc64e955019151fd86c9bbcc0180f91cd3c2bbfb40b6cd5456db04fc72de531ebd103f44530cd92b2e695b1a4b487360b83d51eca92440d428f941c0d446d3310f46aeb4ed61a840f0e8787738e06ff863901183a6ddf0351bb48560594fb33cb0c9e93f4bdc2f5043d6e8f6fc3982c7e5fbb708a9f0af33be560f5cf8095b583e588d9c1a38e29299450a57ec590afe28146a79d72b1d410846111b291f3859c7802b7830120915f00d013819c", 0xbb, 0x20042080, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) (async) sendto$inet(r0, &(0x7f0000000040)="53d9a194ffb1c47bad324b86d9fcc64e955019151fd86c9bbcc0180f91cd3c2bbfb40b6cd5456db04fc72de531ebd103f44530cd92b2e695b1a4b487360b83d51eca92440d428f941c0d446d3310f46aeb4ed61a840f0e8787738e06ff863901183a6ddf0351bb48560594fb33cb0c9e93f4bdc2f5043d6e8f6fc3982c7e5fbb708a9f0af33be560f5cf8095b583e588d9c1a38e29299450a57ec590afe28146a79d72b1d410846111b291f3859c7802b7830120915f00d013819c", 0xbb, 0x20042080, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, 0x0, 0x2b) (async) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, 0x0, 0x2b) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@base={0x2, 0x4, 0x6, 0xb, 0x8}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@base={0x2, 0x4, 0x6, 0xb, 0x8}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) pread64(r7, &(0x7f0000003880)=""/4112, 0x1010, 0x1) readv(r6, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000003c0)={r2, 0x6, 0x3, 0x401}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000003c0)={r2, 0x6, 0x3, 0x401}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000000000)=""/88, 0x58}, {&(0x7f0000000280)=""/67, 0x43}, {&(0x7f0000003800)=""/4102, 0x1006}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x8}}], 0x1, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000000000)=""/88, 0x58}, {&(0x7f0000000280)=""/67, 0x43}, {&(0x7f0000003800)=""/4102, 0x1006}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x8}}], 0x1, 0x0, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$inet(r10, 0x0, 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r11, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930121c575963f88", 0x11}, {&(0x7f0000000140)="fb49b8a4b02d81", 0x7}], 0x2) 23.191296361s ago: executing program 3 (id=2396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb080045000043fffe0000002f9078ac1e0001e0000001000086dd002f90782104000196e3c7f96837a34000eec6bb218b4fe44f0847df6a3b5c5274fcaff1c7a195f93c7c"], 0x55) 22.500037201s ago: executing program 2 (id=2405): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 22.362245797s ago: executing program 3 (id=2406): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 22.351586601s ago: executing program 2 (id=2408): socket(0x1e, 0x4, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000100)="0300126929ff582c1815f2c0141043ea", 0x10, 0x0, &(0x7f0000000340), 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000780), 0x12) write(r2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xfd, &(0x7f0000000140)={@broadcast, @empty, @void, {@llc_tr={0x11, {@llc={0x7e, 0x7e, 'I', "01d39cad5843bd94127ed6f1d53fadb6fd2937bccce921586cc7a015321e6a9b7f48bd5515b64f3aa04cbb19f0b4910e22895f15acabda9d81804e69f5d8f3e347b25cac7b69dc66810a5bb70a429c8b3ef6204b1d153a5ec6e3b74463dde962465efb4446c81174f4917833b4c7fe6d0ccc83ec192bb0171df5f6ccb18b633333cce1d164735b76be4cf823492ad0accf9227e76f826b74dfe8cc698dca44eac48f817045ba1e7fa76db69d410d69671b0813c164c9ce38d850ead9f1aefb6a336f620ce2c1d26a13ea6b0626e3c9d31cbb5a8c3fc3fa6e68cb77c0a28d2a9f94ea7c4252ad015b6f8ef57c"}}}}}, 0x0) 22.157552168s ago: executing program 2 (id=2410): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001800010a00000000ffffffff021000100000fe0800000000080005000000000008"], 0x2c}}, 0x4040818) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8002}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000200)="0bbb00000000000000000000000000000000210d0000aaa8fa8f87b41e32a58a99bfd9463df683019600ba93050040fe2d11a477b30de8129d081de447dab0ecba989e84b1cccbec93ffdd9dca178d1fd0b62a399bbc6a2c0289c2", 0x5b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) unshare(0x22020600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 22.120487258s ago: executing program 2 (id=2411): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x5f) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x5f) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xcf8, 0x46, 0xc, 0x8100, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x400000006, @value=r1}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000006840)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)=""/238, 0xee}, {&(0x7f0000000580)=""/124, 0x7c}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/8, 0x8}, {&(0x7f0000000740)=""/8, 0x8}, {&(0x7f00000007c0)=""/20, 0x14}], 0x6, &(0x7f0000000880)=""/159, 0x9f}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000a00)=""/192, 0xc0}, {&(0x7f0000000ac0)=""/60, 0x3c}, {&(0x7f0000000b00)=""/206, 0xce}, {&(0x7f0000000c00)=""/81, 0x51}, {&(0x7f0000000c80)=""/210, 0xd2}, {&(0x7f0000000d80)=""/27, 0x1b}, {&(0x7f0000000dc0)=""/137, 0x89}, {&(0x7f0000000e80)=""/66, 0x42}, {&(0x7f0000000f00)=""/101, 0x65}], 0x9, &(0x7f0000001040)=""/40, 0x28}, 0x52b4}, {{&(0x7f0000001080)=@qipcrtr, 0x80, &(0x7f0000002340)=[{&(0x7f0000001100)=""/244, 0xf4}, {&(0x7f0000001200)=""/168, 0xa8}, {&(0x7f00000012c0)=""/101, 0x65}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f0000002380)=""/23, 0x17}, 0x2}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000023c0)=""/119, 0x77}, {&(0x7f0000002440)=""/26, 0x1a}, {&(0x7f0000002480)=""/167, 0xa7}, {&(0x7f0000002540)=""/192, 0xc0}], 0x4, &(0x7f0000002640)=""/19, 0x13}, 0x2}, {{&(0x7f0000002680)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002700)=""/29, 0x1d}, {&(0x7f0000002740)=""/45, 0x2d}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/157, 0x9d}, {&(0x7f0000003840)=""/195, 0xc3}, {&(0x7f0000003940)=""/229, 0xe5}, {&(0x7f0000003a40)=""/78, 0x4e}, {&(0x7f0000003ac0)=""/186, 0xba}], 0x8, &(0x7f0000003c00)=""/156, 0x9c}, 0x80000000}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000003cc0)=""/132, 0x84}, {&(0x7f0000003d80)=""/27, 0x1b}, {&(0x7f0000003dc0)=""/232, 0xe8}], 0x3}, 0xef}, {{&(0x7f0000003f00)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000005400)=[{&(0x7f0000003f80)=""/161, 0xa1}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/96, 0x60}, {&(0x7f00000050c0)=""/91, 0x5b}, {&(0x7f0000005140)=""/234, 0xea}, {&(0x7f0000005240)=""/60, 0x3c}, {&(0x7f0000005280)=""/207, 0xcf}, {&(0x7f0000005380)=""/125, 0x7d}], 0x8, &(0x7f0000005480)=""/84, 0x54}, 0x3}, {{0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/86, 0x56}, {&(0x7f0000006580)=""/27, 0x1b}, {&(0x7f00000065c0)=""/219, 0xdb}, {&(0x7f00000066c0)=""/119, 0x77}], 0x5, &(0x7f00000067c0)=""/82, 0x52}, 0x2}], 0x8, 0x100, &(0x7f0000006a40)) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfc, {0x2, 0x10, 0x20, 0x0, 0x0, 0x4, 0xfe, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000000800010001"], 0x20}}, 0x4000000) syz_genetlink_get_family_id$l2tp(0x0, r2) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 18.687514165s ago: executing program 4 (id=2433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x8000000000000000, 0x9) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES16=r2, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="000000001800"/28], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) socket(0x23, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[], 0xffdd) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000005000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000ce7488830000000000000000000039f6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, 0x0, &(0x7f0000000180)) close(r2) 17.920223106s ago: executing program 4 (id=2439): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x1003, r2}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000844) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(r3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000a40)="9ad93d72f2c02c8d80b768", &(0x7f0000000b00)=@udp6, 0x2}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x1c, 0x0, 0x801, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4860d81b696a87ac}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r6, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_PBSS={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_PRIVACY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) socket$key(0xf, 0x3, 0x2) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x184, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in=@dev={0xac, 0x14, 0x14, 0x34}, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x0, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x23c}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000063180300480012800b000100697036746e6c00003800028008000100", @ANYRES32=r11, @ANYBLOB="14000300200100000000000000000000000000010400130014000200fea8"], 0x68}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x6e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) listen(r1, 0x5) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) 17.650929837s ago: executing program 3 (id=2440): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0xa}, {0x0, 0x10}, {0xfff1, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004844}, 0x2000c8d1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000340)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6c", 0x2d}], 0x2}], 0x1, 0x40800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7901}) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r7, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x6b, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f0000000100)=0x10001, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) close(r0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 17.644076305s ago: executing program 1 (id=2441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000200025a727bd7000fdcbdf250a0000ccff0000010200010008000600000000001400110062"], 0x38}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1}}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7a9e}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x401}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFQA_EXP={0x28, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000200025a727bd7000fdcbdf250a0000ccff0000010200010008000600000000001400110062"], 0x38}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1}}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7a9e}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x401}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFQA_EXP={0x28, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async) 17.513203052s ago: executing program 4 (id=2442): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0xd5, 0x7, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x10, 0x8000, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x40, 0x7800, 0x65, 0x1, {{0x14, 0x4, 0x2, 0x3a, 0x50, 0x65, 0x0, 0x1, 0x2f, 0x0, @local, @broadcast, {[@timestamp={0x44, 0x8, 0xff, 0x0, 0x0, [0x6af0000]}, @lsrr={0x83, 0x13, 0x55, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x47, 0x0, 0x8, [0x5, 0x43c, 0x3, 0x81, 0x380000, 0x3]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x2, 0x0, 0xfb, 0x7f, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, 0x700, 0x40, 0x80000001, 0x800}}) getpeername$packet(r2, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a40)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)=@newlink={0x118, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, 0x0, 0x60046, 0x8}, [@IFLA_LINKINFO={0xf0, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0xe0, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x14, 0x4, @remote}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}, @IFLA_VTI_LINK={0x8, 0x1, r4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x2ba1}, @IFLA_VTI_LINK={0x8, 0x1, r5}, @IFLA_VTI_OKEY={0x8, 0x3, 0x1}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}, @IFLA_VTI_LINK={0x8, 0x1, r6}, @IFLA_VTI_IKEY={0x8, 0x2, 0x6105}, @IFLA_VTI_LINK={0x8}], @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x23fc}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x400}, @IFLA_VTI_OKEY={0x8, 0x3, 0x9}], @IFLA_VTI_REMOTE={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x8001}, @IFLA_VTI_OKEY={0x8}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xe444}], @IFLA_VTI_REMOTE={0x14, 0x5, @mcast1}, @IFLA_VTI_LOCAL={0x14, 0x4, @mcast1}, @IFLA_VTI_LOCAL={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x118}, 0x1, 0x0, 0x0, 0x40040}, 0x4000c090) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) unshare(0x26020480) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x8, 0x0, 0x0}}, 0x10) r8 = accept4(r7, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x222}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000e00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x14, 0xb, 0x6, 0x801, 0x0, 0x0, {0x9, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x20004081) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r10, @ANYBLOB="fe000011000000001c0012000c000100626f6e6400"], 0x3c}}, 0x800) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r12, @ANYBLOB="c5a006d4d152c1e0053eb3c5de9444fe78e921d87e8ab7ee731b987a6d1c3332a9b3107ad5f536086f2842ae7aac79f0a023e277d98eda3842a49c6a5a7e0f0a3de17fef3737a0fe52651d35382027a676f19f32313c2c0ade3844ac56b32f29762ef104fdafc4123a462e456550720068757732494c2313aa87b18438d8877d0897b6d38825d8a5f2a9f28833e4d5d71740cfaaa2a39616ab"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x5) 17.51115986s ago: executing program 1 (id=2443): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x5411, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) recvfrom(r0, 0x0, 0x0, 0x160, &(0x7f0000002600)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0x1}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002000000090000000000000100000003000038020000"], 0x0, 0x2a, 0x0, 0xffffffff, 0x2}, 0x28) (async) r1 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000140)={'syzkaller1\x00', {0x2, 0x0, @remote}}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async) close(0x3) r3 = socket(0x11, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r5, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)={@cgroup, 0xffffffffffffffff, 0x3, 0x2019}, 0x20) (async) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0) 17.288219058s ago: executing program 1 (id=2445): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) (async, rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x7f) listen(r0, 0x0) (async, rerun: 64) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async, rerun: 64) r3 = socket(0x15, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40080) (async) close(r2) 17.0528792s ago: executing program 1 (id=2446): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(r1, 0x0, 0x4) (async) syz_emit_ethernet(0x46, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x67, 0x48, 0x0, 0x11, 0x0, @multicast1}, "341517c1b7df60c7"}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="0100800014000104fe8000000000000000000000000000bb"], 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x804) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, @void}, 0x10) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x17, 0x4}, 0x20) (async, rerun: 32) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) (async) ioctl(r2, 0x8b2c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x120, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) (async) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, 0x13) 16.795074187s ago: executing program 4 (id=2447): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xe}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x4890) unshare(0xc040480) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0x3ff, 0x1}) openat$cgroup_pressure(r3, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3c9ac5001a00010000000000000000007f000001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000000000000000000000330000002001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000030000000200000000000000000000004c0014006d64352d67656e6572696300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e000000c0000000"], 0x13c}}, 0x0) bind$pptp(r4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00009200000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = socket(0x2, 0x80805, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24040814) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a0000000800ce8004000173"], 0x1c}}, 0x0) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x10400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 16.729652382s ago: executing program 3 (id=2449): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x48, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6e13b62b}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}]}, 0x48}}, 0x8004) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x54, r5, 0x409, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x5}}, {0x8}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x550}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c0}, 0x40) 16.687655893s ago: executing program 4 (id=2450): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000000101010200000000000000000a0000000c001980080001008d070000440001802c00018014000300fc01000000000000000000000000000114000400fc0000000000000000000000000000040c0002"], 0x64}, 0x1, 0x0, 0x0, 0x8000000}, 0x24008850) 16.552589709s ago: executing program 4 (id=2451): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000140)=[{0x0, 0x2}], 0x110, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket(0x1d, 0x2, 0x6) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x4) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="00214717a70700000000030600710a5e31163ceb950471200400f32a6036b8000500000000000000ffff03425d4d50e7182ce0", 0x33}], 0x1, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0xb8, r3, 0x9, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24004420}, 0x24000004) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x20000840) 16.522065914s ago: executing program 3 (id=2453): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x14, 0x14, 0x211, 0x0, 0x0, {0x28}}, 0x14}}, 0x0) (async) r0 = epoll_create(0x9) close(r0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/20, 0x14}, {&(0x7f00000002c0)=""/61, 0x3d}], 0x2}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b16000000000000000002000408300004802c000180090001007866726d000000001c000280080001400000001005000300010000000800024000000003090001009fecb917bfd731410900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 16.218888272s ago: executing program 0 (id=2455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x5a7d}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x91}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x24048014}, 0x20040040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000400), &(0x7f0000000480)=0x6e, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{0x0, 0x1c}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, &(0x7f0000000180)={r4, r5}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd00000d0000080000000060ec9700007e2c00fe8000000400000000000000000000aaff0200000000000000000000000000013a00000000000000030090780800000060aabc2b00028401fe8000000000000000000000000000aafc020000000000000000000000000000a5e3713f4901c67439c56bec1c0c656992d138d12cf561ca767dc56cc12d3d5374995fdbc9ad30dc77e171051b1e9ddacc59d4d35f4829d577b76871311806ae784ec497bc97"], 0xb4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 16.093657596s ago: executing program 1 (id=2456): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r1}, &(0x7f0000000640), &(0x7f0000000680)='%pS \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001580)=[{{&(0x7f0000001140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{&(0x7f0000001500)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x240400d4}}, {{&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000640)="52add215825ff5d2833b39c599c1e5f856077cfff4c1453980000132148dbd87d73e3608747b124215c8236e53a3ecad487ae3468d915c342030fd441b00ce2a0362b2fbce134c7d0cf4e4c98516897d20f910a6c37154b28fe39faf71db33380205629dc2ff2eb466cb90a74a41c028d39ad38b7338bb29e65c9e51a6ca07662b7e0b13b8ce15deb2f161867e82d88af8ce66840b19c3482c76bb7f1d8e53887e1758ec5f630994eece6d165a3897ab48b03a3b070af905c4b433f1fc1296c89ea8ccba7814bd364eeb5a237b27efead415c7ec5a5f885ed75cc527131371012611b6d2b2a56a8244047e46", 0xec}, {&(0x7f0000000740)="8cc99e7c7c252c21502742fe4beeaf9725645fe3323c5f35f5dcab9f281bbd49584f423230115b9bcdb3ec4bd77136797b5d85f0048b891bea69fdf4ef1fa65b8593bf6f463fa2e348ebf2d23e5dc8266d878d33047f613e42073cf09ab9b85ccc514e6f2a9e4dbe40a7a70cee988a36ed21", 0x72}, {&(0x7f00000007c0)="9e9b8cfed89a2c35bee65a99d3481620087e27bc0d4aa4eb0ed6a4682df3f3bd8b546afde85b2998138bba48aa070f698108b67b1dc745af6e", 0x39}], 0x3, 0x0, 0x0, 0x400c0f0}}, {{&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000008c0)="4c5c6ebd65ed89caf47f1f356842f12b2fcd5ed536d370e4d92f069b42616bbfe2c4542816ab1029716685e3847f44aaa759a58f5e7b8ed3cf07f896fe40ffc7f232591ab925016730541f2fd27423f0c662f71ffe9ab121116fd64d033693aa169f61ab731815a7dbca8c13fef2e5ce660b1ec3eca7a5ae7a2464f28a9420427ce16ca6af7e838df59d19a8fae3d40cfed9cc41c27b6e32d70a508b9b1bc03d8431b8f8", 0xa4}, {&(0x7f0000000980)="ece21139814ee8888b2de6a04599e1b5bdab5c02dd7ccd86c26f0291cac5f88ea528cc5fe679be0a629217485ab73d284fe534d642dae654d357745f4af78b1b21b2e47758226319b0299ba3a72c6745aef50035286e7ae226f61847849a4ddb9702b322b9c5e6937b1a08dc8c4cb97608e24c6b7e9972d7e0fa9db894136a", 0x7f}], 0x2, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120, 0x884}}, {{&(0x7f0000000f00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000f80)="557623f2b55fb96702dd3ed486713a46d7d2a72f5b03d6e0fff5b78ee1ed9a85a07f94e547ed2dea923dfa01ee000b34ae3bfde2b1d5dd11c15bc6a72db76db7d7b164489d3fb45510dae295fbdf04705fedc4b223502933a1e43375", 0x5c}, {&(0x7f0000001000)="b06a80280eef03b077bbc01025535a3fa86cd383bde1b652c4be1bbebeae47392b9458d3c4a4fe8d155af1d43256", 0x2e}, {&(0x7f0000001040)="8a95a6a602d2077f1bd3b5c4215d395d355c4c22fa68d16919ce332a9e07ae771daf4de2c0e4c1f27d4544a71adc9fd1a69f686e683ec0c42fdbbbb0eb8c4b5fe6e629c5c751ea9222eb0ff4bd54e56a745a3b94f73f618b8702c86a42ecb3f64e00ba723ec8aca3ed2426fecb13c292e814ae293ff63544e373d75cf01f36b8c49ce8a8d8676ca6191b7758f5257e0ae3a61384250067adec0692b6aadca13bc65f", 0xa2}], 0x1000000000000272, &(0x7f0000001400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8, 0x80}}], 0x5, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r7, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac"], 0x3c}}, 0x8000) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 15.966822871s ago: executing program 0 (id=2457): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @random="af23eb8c44a1", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x1, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r5) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="05"], 0x10) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa4ed833370d8cb02b03a600003297baf7e2b5586a50d56bdd00"/49], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r12}, &(0x7f0000000000), &(0x7f00000000c0)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000022c0)={{r12}, &(0x7f0000002240), &(0x7f0000002280)=r8}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 15.921339627s ago: executing program 2 (id=2458): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r1], 0x27) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c0004"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@local, 0x0, 0x0, 0x40, 0x0, [{@multicast2}, {@dev}, {@remote}, {@private}]}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', r4, 0x40, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r4, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 15.731544345s ago: executing program 1 (id=2459): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) unshare(0x20000400) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)={0x50, 0x0, 0x1, 0x70bd2c, 0xfffffc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1e}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x50}, 0x1, 0xff07}, 0x2000000) 15.643989622s ago: executing program 0 (id=2460): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) socket(0x8, 0x6, 0x40000006) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) (async) sendmsg$nl_route(r2, 0x0, 0x8000002) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24048044) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) (async) r5 = socket$inet(0x10, 0x80000, 0xd6) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) (async) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000000)) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f34001280200001800e000100636f6e6e6c696d69740000000c00028008000140000007ff10000000000001006c6173740000000008000340000001"], 0xc0}}, 0x20050800) 15.581522754s ago: executing program 3 (id=2461): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r4, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5f5e0ff}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x18, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x805) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="0500"], 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x44, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40080) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="55ad", 0x2}], 0x1}, 0x4c03) 15.577757467s ago: executing program 0 (id=2462): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8935, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f2000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0x0, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x4) (async, rerun: 64) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) (rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc4, r4, 0xa2e, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x68}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x94, 0xbe, "dd3047db7664eb02b50c61ca8137d8d1be06325752f1f7420e779db1bcb51223c3009cd200e2e18d2cb76f9e3bc8f67686a787bdf05d4d0e05b40eb963f19dc670d1a69a7b55ceba11c50e569622f7d8cfeb0e5ff91c1eee70ec37a210c6b070c884b18d4fd496b39a9af69e1c88a5201ed71ab00c6b4f3e554b931f058773f68f047d0c7a8b27b0e5a82c722e52a721"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x40000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r6 = socket$igmp6(0xa, 0x3, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async, rerun: 32) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000c81e0100000000000095"], &(0x7f0000000040)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x24}, 0x94) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="06ac0f0001ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (rerun: 32) 15.34357277s ago: executing program 0 (id=2463): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000100)={{@align=0x2, {0xf801, 0x5, 0xfffffffe, 0x6}}, {{[0x9, 0xfffeffff, 0x1, 0x5]}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{{@_ha_fsid={[0x80000000, 0x300]}, {0x7ff, 0x40, 0x3c, 0x9}}, 0x8001, 0x0, 'bridge\x00'}]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x92}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x44}}, 0x0) 15.304985947s ago: executing program 0 (id=2464): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400122a0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x48002, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r7 = socket(0x1, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) shutdown(r7, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r7}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r7}, 0x20) recvmsg(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) (async) recvmsg(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003ac0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x50}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 1.356535315s ago: executing program 32 (id=2451): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000140)=[{0x0, 0x2}], 0x110, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket(0x1d, 0x2, 0x6) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x4) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="00214717a70700000000030600710a5e31163ceb950471200400f32a6036b8000500000000000000ffff03425d4d50e7182ce0", 0x33}], 0x1, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0xb8, r3, 0x9, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24004420}, 0x24000004) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x20000840) 238.456599ms ago: executing program 33 (id=2464): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400122a0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x48002, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r7 = socket(0x1, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) shutdown(r7, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r7}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r7}, 0x20) recvmsg(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) (async) recvmsg(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003ac0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x50}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 197.943204ms ago: executing program 34 (id=2459): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) unshare(0x20000400) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)={0x50, 0x0, 0x1, 0x70bd2c, 0xfffffc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1e}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x50}, 0x1, 0xff07}, 0x2000000) 127.217358ms ago: executing program 35 (id=2458): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r1], 0x27) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c0004"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@local, 0x0, 0x0, 0x40, 0x0, [{@multicast2}, {@dev}, {@remote}, {@private}]}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', r4, 0x40, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r4, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 0s ago: executing program 36 (id=2461): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r4, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5f5e0ff}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x18, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x805) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="0500"], 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x44, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40080) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="55ad", 0x2}], 0x1}, 0x4c03) kernel console output (not intermixed with test programs): scall_64+0x174/0x580 [ 325.194541][T12624] ? trace_irq_disable+0x3b/0x140 [ 325.194638][T12624] ? clear_bhb_loop+0x40/0x90 [ 325.194711][T12624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.194765][T12624] RIP: 0033:0x7f1e5c59ce59 [ 325.194816][T12624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.194869][T12624] RSP: 002b:00007f1e5d42d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.194933][T12624] RAX: ffffffffffffffda RBX: 00007f1e5c815fa0 RCX: 00007f1e5c59ce59 [ 325.194969][T12624] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 325.195002][T12624] RBP: 00007f1e5d42d090 R08: 0000000000000000 R09: 0000000000000000 [ 325.195035][T12624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.195066][T12624] R13: 00007f1e5c816038 R14: 00007f1e5c815fa0 R15: 00007fffce4a92f8 [ 325.195157][T12624] [ 325.500869][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 325.541650][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 325.577545][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 325.610925][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 325.642473][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 325.659864][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 325.674002][T12635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1626'. [ 325.685506][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 325.715016][T12612] A link change request failed with some changes committed already. Interface bridge4 may have been left with an inconsistent configuration, please check. [ 325.848026][ T181] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 52985 - 0 [ 325.872879][ T181] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 52985 - 0 [ 325.893922][ T181] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 52985 - 0 [ 326.444953][T12659] netlink: 'syz.2.1633': attribute type 1 has an invalid length. [ 326.464943][T12659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.511106][ T808] lo speed is unknown, defaulting to 1000 [ 326.532898][ T808] syz0: Port: 1 Link DOWN [ 326.545847][ T808] lo speed is unknown, defaulting to 1000 [ 326.830876][T12673] netlink: 'syz.0.1636': attribute type 9 has an invalid length. [ 326.847728][T12673] netlink: 'syz.0.1636': attribute type 6 has an invalid length. [ 326.867154][T12673] netlink: 'syz.0.1636': attribute type 7 has an invalid length. [ 326.875174][T12673] netlink: 'syz.0.1636': attribute type 8 has an invalid length. [ 326.937507][T12683] sock: sock_set_timeout: `syz.3.1640' (pid 12683) tries to set negative timeout [ 327.094350][T12693] netlink: 'syz.3.1643': attribute type 23 has an invalid length. [ 327.182164][T12695] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 327.444465][T12708] tipc: Started in network mode [ 327.449883][T12708] tipc: Node identity ac14140f, cluster identity 4711 [ 327.466893][T12708] tipc: New replicast peer: 255.255.255.255 [ 327.475119][T12708] tipc: Enabled bearer , priority 5 [ 327.497360][T12708] netlink: 'syz.1.1647': attribute type 1 has an invalid length. [ 327.653720][T12708] bond8: entered promiscuous mode [ 327.661805][T12708] 8021q: adding VLAN 0 to HW filter on device bond8 [ 327.680892][T12714] bond8: entered allmulticast mode [ 327.753287][T12723] geneve5: entered promiscuous mode [ 327.814440][T12708] bond8: (slave bridge4): making interface the new active one [ 327.831475][T12708] bridge4: entered promiscuous mode [ 327.847402][T12708] bridge4: entered allmulticast mode [ 327.857770][T12708] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 327.903953][ T7605] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 34039 - 0 [ 327.931693][ T7605] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 34039 - 0 [ 327.962360][ T7605] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 34039 - 0 [ 328.002042][ T7605] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 34039 - 0 [ 328.026053][T12739] syz_tun: left promiscuous mode [ 328.172990][T12742] netlink: 'syz.0.1655': attribute type 3 has an invalid length. [ 328.484977][T12768] sctp: [Deprecated]: syz.2.1659 (pid 12768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.484977][T12768] Use struct sctp_sack_info instead [ 328.589751][T11381] tipc: Node number set to 2886997007 [ 328.738117][T12781] netlink: 'syz.0.1663': attribute type 1 has an invalid length. [ 328.932987][T12781] 8021q: adding VLAN 0 to HW filter on device bond9 [ 329.129698][T12786] bond9: (slave gretap1): making interface the new active one [ 329.143389][T12786] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 329.325755][T12807] : renamed from bond0 [ 329.497583][T12807] team1: entered promiscuous mode [ 329.510920][T12807] team1: entered allmulticast mode [ 329.528501][T12807] 8021q: adding VLAN 0 to HW filter on device team1 [ 330.002207][T12840] Cannot find add_set index 4 as target [ 330.180381][T12857] __nla_validate_parse: 83 callbacks suppressed [ 330.180400][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 330.223358][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 330.264756][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 330.280980][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 330.494876][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'. [ 330.532667][T12874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1687'. [ 330.858515][T12897] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1691'. [ 330.973144][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1695'. [ 331.083662][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1696'. [ 331.128419][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1696'. [ 331.360709][T12915] tipc: Enabled bearer , priority 0 [ 331.635588][T12935] netlink: 'syz.2.1701': attribute type 1 has an invalid length. [ 331.949999][T12937] lo speed is unknown, defaulting to 1000 [ 332.574219][T12961] netlink: 'syz.1.1709': attribute type 5 has an invalid length. [ 332.619997][T12961] tipc: Enabling of bearer rejected, already enabled [ 332.733458][T12961] syzkaller0: mtu less than device minimum [ 333.091012][T12975] netlink: 'syz.1.1714': attribute type 1 has an invalid length. [ 333.567487][T12981] bond9: (slave gretap1): making interface the new active one [ 333.581993][T12981] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 333.848304][T12999] tipc: Enabled bearer , priority 0 [ 333.880583][T12999] syzkaller0: entered promiscuous mode [ 333.922202][T12999] syzkaller0: entered allmulticast mode [ 334.096916][ T29] audit: type=1804 audit(1780910812.432:6): pid=13014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1722" name="/newroot/364/cgroup.controllers" dev="tmpfs" ino=1876 res=1 errno=0 [ 334.189356][ T29] audit: type=1800 audit(1780910812.432:7): pid=13014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1722" name="cgroup.controllers" dev="tmpfs" ino=1876 res=0 errno=0 [ 336.725569][T12998] tipc: Resetting bearer [ 336.910824][T12998] tipc: Disabling bearer [ 336.972310][ T9] tipc: Node number set to 2157726033 [ 337.462598][T13039] bond7: Removing last arp target with arp_interval on [ 337.644507][T13056] ip6gre2: entered promiscuous mode [ 337.672628][T13056] ip6gre2: entered allmulticast mode [ 337.696060][ T5641] block nbd2: Receive control failed (result -32) [ 338.045539][T13070] netlink: 'syz.1.1735': attribute type 3 has an invalid length. [ 338.075046][T13070] __nla_validate_parse: 5 callbacks suppressed [ 338.075065][T13070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1735'. [ 338.145215][T13070] netlink: 1432 bytes leftover after parsing attributes in process `syz.1.1735'. [ 338.324481][T13083] veth0: entered promiscuous mode [ 338.429561][T13086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1740'. [ 338.449752][T13090] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1741'. [ 338.637485][T13082] veth0: left promiscuous mode [ 339.349050][T13125] netlink: 'syz.4.1749': attribute type 1 has an invalid length. [ 339.404767][T13126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1749'. [ 339.630416][T13125] 8021q: adding VLAN 0 to HW filter on device bond8 [ 339.852443][T13136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1752'. [ 340.217909][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1756'. [ 340.410785][T13145] bond9: entered promiscuous mode [ 340.425466][T13158] netlink: 'syz.2.1755': attribute type 1 has an invalid length. [ 340.465166][T13145] 8021q: adding VLAN 0 to HW filter on device bond9 [ 340.540167][T13147] lo speed is unknown, defaulting to 1000 [ 340.549823][T13158] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 340.795482][T13170] ipt_ECN: cannot use operation on non-tcp rule [ 341.026902][T13180] netlink: 'syz.1.1764': attribute type 3 has an invalid length. [ 341.076407][T13179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1765'. [ 341.141785][T13183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1763'. [ 341.272896][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 341.509556][T13195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.592454][ T5641] block nbd3: Receive control failed (result -32) [ 341.602882][ T5633] block nbd3: Receive control failed (result -32) [ 342.100150][T13209] veth5: entered promiscuous mode [ 342.239884][T13217] bridge0: port 1(team0) entered blocking state [ 342.278013][T13217] bridge0: port 1(team0) entered disabled state [ 342.355791][T13217] team0: entered allmulticast mode [ 342.386888][T13225] netlink: 'syz.2.1775': attribute type 10 has an invalid length. [ 342.453215][T13217] team0: left allmulticast mode [ 342.692004][T13230] bond10: option tlb_dynamic_lb: invalid value (115) [ 342.720059][T13230] bond10 (unregistering): Released all slaves [ 343.028506][T13242] set match dimension is over the limit! [ 343.092430][T13244] __nla_validate_parse: 3 callbacks suppressed [ 343.092451][T13244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1781'. [ 343.311650][T13249] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1782'. [ 343.507070][T13253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.547222][T13257] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 343.580656][T13257] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 343.755638][T13265] macvtap1: entered promiscuous mode [ 343.788779][T13265] bridge0: entered promiscuous mode [ 343.807994][T13265] bridge0: port 3(macvtap1) entered blocking state [ 343.836192][T13265] bridge0: port 3(macvtap1) entered disabled state [ 343.862275][T13265] macvtap1: entered allmulticast mode [ 343.875985][T13265] macvtap1: left allmulticast mode [ 343.892442][T13265] bridge0: left promiscuous mode [ 344.017504][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1790'. [ 344.240540][T13290] bridge6: entered promiscuous mode [ 344.245859][T13290] bridge6: entered allmulticast mode [ 344.262828][T13290] team0: Port device bridge6 added [ 344.397805][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1794'. [ 344.418425][T13295] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1794'. [ 344.442978][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1794'. [ 344.462933][T13295] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1794'. [ 344.476089][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1794'. [ 344.921829][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1798'. [ 344.936480][T13315] nbd: must specify a size in bytes for the device [ 345.113658][T13327] gretap0: entered promiscuous mode [ 345.128175][T13327] macvlan0: entered promiscuous mode [ 345.156420][T13327] gretap0: left promiscuous mode [ 345.190226][T13333] netlink: 'syz.2.1804': attribute type 1 has an invalid length. [ 345.238939][T13333] bond6: entered promiscuous mode [ 345.252958][T13333] 8021q: adding VLAN 0 to HW filter on device bond6 [ 345.275738][T13337] netlink: 'syz.3.1805': attribute type 3 has an invalid length. [ 345.297106][T13337] netlink: 'syz.3.1805': attribute type 3 has an invalid length. [ 345.346610][T13337] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1805'. [ 345.413611][T13333] 8021q: adding VLAN 0 to HW filter on device bond6 [ 345.422730][T13333] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 345.433697][T13333] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 345.447276][T13333] bond6: (slave gre1): making interface the new active one [ 345.457107][T13333] gre1: entered promiscuous mode [ 345.467886][T13333] bond6: (slave gre1): Enslaving as an active interface with an up link [ 345.711975][T13352] syzkaller0: entered promiscuous mode [ 345.718194][T13352] syzkaller0: entered allmulticast mode [ 345.749091][T13352] netlink: 'syz.3.1808': attribute type 21 has an invalid length. [ 345.769078][T13352] netlink: 'syz.3.1808': attribute type 22 has an invalid length. [ 345.778347][T13352] netlink: 'syz.3.1808': attribute type 23 has an invalid length. [ 345.788309][T13352] netlink: 'syz.3.1808': attribute type 25 has an invalid length. [ 347.117862][T13384] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 347.223703][T13397] nbd: couldn't find a device at index 0 [ 347.250504][T13397] netlink: 'syz.2.1819': attribute type 1 has an invalid length. [ 347.348015][T13397] 8021q: adding VLAN 0 to HW filter on device bond7 [ 347.531744][T13402] bond7: (slave veth7): Enslaving as an active interface with a down link [ 347.626697][T13401] lo speed is unknown, defaulting to 1000 [ 347.746796][T13415] ÿ: renamed from bond_slave_0 [ 349.054851][T13462] netlink: 'syz.4.1834': attribute type 1 has an invalid length. [ 349.084539][T13462] __nla_validate_parse: 6 callbacks suppressed [ 349.084559][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1834'. [ 349.121879][T13462] netlink: 'syz.4.1834': attribute type 1 has an invalid length. [ 349.329184][T13456] lo speed is unknown, defaulting to 1000 [ 349.583980][T13462] syzkaller1: entered promiscuous mode [ 349.611998][T13462] syzkaller1: entered allmulticast mode [ 349.676802][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'. [ 349.881806][T13489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.928326][T13481] bond8: entered promiscuous mode [ 349.952683][T13481] 8021q: adding VLAN 0 to HW filter on device bond8 [ 350.195183][ T7608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.295726][ T7608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.689640][ T5633] Bluetooth: hci4: command 0x0405 tx timeout [ 350.895677][T13524] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1843'. [ 351.074589][T13525] validate_nla: 2 callbacks suppressed [ 351.074609][T13525] netlink: 'syz.0.1843': attribute type 10 has an invalid length. [ 351.519533][T13549] nicvf0: tun_chr_ioctl cmd 21731 [ 351.902287][T13560] netlink: 'syz.1.1852': attribute type 7 has an invalid length. [ 352.002060][T13563] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.027502][T13563] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 34039 - 0 [ 352.114331][T13568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1853'. [ 352.185158][T13559] lo speed is unknown, defaulting to 1000 [ 352.252739][T13563] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.287894][T13563] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 34039 - 0 [ 352.364001][T13563] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.389628][T13563] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 34039 - 0 [ 352.452250][T13563] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.462852][T13563] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 34039 - 0 [ 355.443817][T13586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1861'. [ 355.734332][ T7606] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 34039 - 0 [ 355.761962][ T7606] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 355.784159][T13603] tap0: tun_chr_ioctl cmd 1074025681 [ 355.854892][T13609] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1866'. [ 355.895887][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'. [ 355.935188][ T7604] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 34039 - 0 [ 355.960999][ T7604] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 355.976163][T13612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1867'. [ 356.007248][T13602] netlink: 'syz.1.1863': attribute type 10 has an invalid length. [ 356.033047][T13602] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1863'. [ 356.147979][T13597] tap0: tun_chr_ioctl cmd 1074025677 [ 356.158089][T13597] tap0: linktype set to 823 [ 356.266671][T13619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1868'. [ 356.294330][T13617] nbd4: detected capacity change from 0 to 63 [ 356.308447][T13619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1868'. [ 356.433977][ T5641] block nbd4: Receive control failed (result -104) [ 361.340989][ T6363] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 34039 - 0 [ 361.349576][ T6363] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 361.404163][ T181] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 34039 - 0 [ 361.438953][ T181] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 361.502538][T13647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1874'. [ 361.512920][T13646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1875'. [ 361.690223][T13653] bridge0: port 3(erspan0) entered blocking state [ 361.706364][T13653] bridge0: port 3(erspan0) entered disabled state [ 361.714875][T13662] netlink: 'syz.2.1879': attribute type 2 has an invalid length. [ 361.715603][T13653] erspan0: entered allmulticast mode [ 361.735423][T13662] netlink: 'syz.2.1879': attribute type 1 has an invalid length. [ 361.737147][T13653] erspan0: entered promiscuous mode [ 361.757792][T13662] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1879'. [ 361.840696][T13653] erspan0: left allmulticast mode [ 361.861326][T13653] erspan0: left promiscuous mode [ 361.879719][T13653] bridge0: port 3(erspan0) entered disabled state [ 361.899003][T13674] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1876'. [ 361.921301][T13674] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1876'. [ 362.771414][T13687] tipc: Enabling of bearer rejected, failed to enable media [ 362.815117][T13693] netlink: 'syz.1.1887': attribute type 61 has an invalid length. [ 362.834337][T13694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1888'. [ 362.923274][T13698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1885'. [ 363.245739][T13708] tipc: Enabling of bearer rejected, already enabled [ 363.546766][T13722] tipc: Enabled bearer , priority 0 [ 363.704312][T13718] tipc: Resetting bearer [ 363.723349][T13710] syzkaller0: entered promiscuous mode [ 363.740877][T13710] syzkaller0: entered allmulticast mode [ 363.752427][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1893'. [ 363.892275][T13732] syzkaller1: entered promiscuous mode [ 363.910022][T13732] syzkaller1: entered allmulticast mode [ 363.934280][T13702] tipc: Resetting bearer [ 364.017554][T13702] tipc: Disabling bearer [ 364.365314][T13746] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 364.480648][T13751] lo speed is unknown, defaulting to 1000 [ 364.643358][T13752] dvmrp0: entered allmulticast mode [ 364.752215][T13763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1900'. [ 365.533889][T13790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1907'. [ 366.364455][T13814] SET target dimension over the limit! [ 366.476726][T13819] No such timeout policy "syz0" [ 366.618987][T13816] __nla_validate_parse: 2 callbacks suppressed [ 366.619010][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 366.804993][T13826] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1916'. [ 366.981240][T13832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1918'. [ 366.990647][T13832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1918'. [ 367.140314][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1920'. [ 367.254093][T13840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1922'. [ 367.277751][T13840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1922'. [ 367.317983][T13840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.388809][T13842] tipc: Enabled bearer , priority 0 [ 367.462203][T13842] syzkaller0: entered promiscuous mode [ 367.476973][T13842] syzkaller0: entered allmulticast mode [ 367.525819][T13845] netlink: 'syz.2.1925': attribute type 1 has an invalid length. [ 367.539028][T13846] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 367.607805][T13845] 8021q: adding VLAN 0 to HW filter on device bond9 [ 367.766199][T13855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1925'. [ 367.805947][T13849] bond9: (slave veth13): Enslaving as an active interface with a down link [ 367.826034][T13842] tipc: Resetting bearer [ 367.856073][T13845] bond9: entered allmulticast mode [ 367.887575][T13855] batadv_slave_1: entered promiscuous mode [ 367.895642][T13861] Set syz1 is full, maxelem 0 reached [ 367.903750][T13841] tipc: Resetting bearer [ 367.942619][T13841] tipc: Disabling bearer [ 367.966896][T13843] batadv_slave_1: left promiscuous mode [ 368.135562][T13863] sctp: [Deprecated]: syz.4.1930 (pid 13863) Use of int in maxseg socket option. [ 368.135562][T13863] Use struct sctp_assoc_value instead [ 368.322338][T13877] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1934'. [ 368.385680][T13866] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.409607][T13866] batadv0: left promiscuous mode [ 368.423336][T13866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.521043][T13866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.546022][T13866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.575391][T13866] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.587427][T13866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.608515][T13866] hsr0: left promiscuous mode [ 368.615148][T13866] veth1_macvtap: left promiscuous mode [ 368.630738][T13866] veth0_macvtap: left promiscuous mode [ 368.638451][T13866] veth0_macvtap: entered promiscuous mode [ 368.647458][T13866] veth1_macvtap: entered promiscuous mode [ 368.688701][T13866] macsec1: left promiscuous mode [ 368.701054][T13866] gtp1: left promiscuous mode [ 368.705848][T13866] gtp1: left allmulticast mode [ 368.714161][T13866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.767627][T13866] geneve2: left promiscuous mode [ 368.773837][T13866] geneve2: left allmulticast mode [ 368.786055][T13866] bond0: left promiscuous mode [ 368.791499][T13866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.801440][T13866] bond2: left promiscuous mode [ 368.806389][T13866] bond2: left allmulticast mode [ 368.812458][T13866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.820510][T13866] erspan1: left allmulticast mode [ 368.828216][T13866] 8021q: adding VLAN 0 to HW filter on device bond3 [ 368.838449][T13866] geneve3: left promiscuous mode [ 368.844220][T13866] bond4: left promiscuous mode [ 368.849060][T13866] ip6gre1: left promiscuous mode [ 368.862104][T13866] 8021q: adding VLAN 0 to HW filter on device bond5 [ 368.876194][T13866] geneve4: left promiscuous mode [ 368.891056][T13866] ip6gre2: left promiscuous mode [ 368.896266][T13866] ip6gre2: left allmulticast mode [ 368.902200][T13866] geneve5: left promiscuous mode [ 368.911353][T13866] veth5: left promiscuous mode [ 368.918021][T13866] bond6: left promiscuous mode [ 368.923019][T13866] gre1: left promiscuous mode [ 368.933542][T13866] bond8: left promiscuous mode [ 368.942202][T13866] 8021q: adding VLAN 0 to HW filter on device eth0 [ 368.951791][T13866] 8021q: adding VLAN 0 to HW filter on device eth1 [ 368.963244][T13866] 8021q: adding VLAN 0 to HW filter on device eth2 [ 368.973239][T13866] 8021q: adding VLAN 0 to HW filter on device eth3 [ 368.988535][T13866] bond9: left allmulticast mode [ 368.994189][T13866] 8021q: adding VLAN 0 to HW filter on device bond9 [ 369.006450][ T6407] lo speed is unknown, defaulting to 1000 [ 369.017071][ T7604] bond7: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 369.026728][ T6407] syz0: Port: 1 Link ACTIVE [ 369.043890][ T7604] bond7: (slave veth7): making interface the new active one [ 369.068077][ T7604] bond7: active interface up! [ 369.196793][ T48] bond9: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 369.212713][ T48] bond9: (slave veth13): making interface the new active one [ 369.287390][ T48] bond9: active interface up! [ 369.317188][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 369.348372][ T1158] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 369.377284][T13901] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 369.391664][ T1158] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 369.474965][ T6407] lo speed is unknown, defaulting to 1000 [ 369.568423][ T1158] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 369.645186][ T7607] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 369.824261][T13917] netlink: 'syz.4.1942': attribute type 1 has an invalid length. [ 370.009189][T13919] 8021q: adding VLAN 0 to HW filter on device bond10 [ 370.939120][T13956] FAULT_INJECTION: forcing a failure. [ 370.939120][T13956] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 370.977212][T13956] CPU: 0 UID: 0 PID: 13956 Comm: syz.4.1950 Not tainted syzkaller #0 PREEMPT(full) [ 370.977256][T13956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 370.977274][T13956] Call Trace: [ 370.977287][T13956] [ 370.977296][T13956] dump_stack_lvl+0xe8/0x150 [ 370.977468][T13956] should_fail_ex+0x412/0x560 [ 370.977568][T13956] prepare_alloc_pages+0x22a/0x650 [ 370.977719][T13956] __alloc_frozen_pages_noprof+0x12f/0x380 [ 370.977746][T13956] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 370.977794][T13956] ? __pfx_policy_nodemask+0x10/0x10 [ 370.977825][T13956] ? __folio_batch_add_and_move+0x11a/0xc50 [ 370.977876][T13956] ? lock_acquire+0x106/0x350 [ 370.977928][T13956] alloc_pages_mpol+0x235/0x490 [ 370.977957][T13956] folio_alloc_mpol_noprof+0x39/0x160 [ 370.977982][T13956] vma_alloc_folio_noprof+0xe1/0x1e0 [ 370.978008][T13956] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 370.978043][T13956] do_wp_page+0x118a/0x4cc0 [ 370.978083][T13956] ? __pte_offset_map+0x29/0x240 [ 370.978123][T13956] ? __pfx_do_wp_page+0x10/0x10 [ 370.978165][T13956] ? do_raw_spin_lock+0x12b/0x2f0 [ 370.978200][T13956] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 370.978244][T13956] handle_mm_fault+0x1698/0x3170 [ 370.978289][T13956] ? handle_mm_fault+0xf1/0x3170 [ 370.978326][T13956] ? __pfx_handle_mm_fault+0x10/0x10 [ 370.978356][T13956] ? follow_page_pte+0xbd1/0xe60 [ 370.978395][T13956] ? __pfx_follow_page_pte+0x10/0x10 [ 370.978436][T13956] __get_user_pages+0x167f/0x2730 [ 370.978500][T13956] __gup_longterm_locked+0xdcf/0x1630 [ 370.978534][T13956] ? lock_acquire+0x106/0x350 [ 370.978563][T13956] ? sanity_check_pinned_pages+0x7a8/0x870 [ 370.978599][T13956] gup_fast_fallback+0x1d84/0x20d0 [ 370.978663][T13956] ? __pfx_gup_fast_fallback+0x10/0x10 [ 370.978698][T13956] ? pin_user_pages_fast+0x4d/0xb0 [ 370.978728][T13956] iov_iter_extract_pages+0x37b/0x5f0 [ 370.978826][T13956] extract_iter_to_sg+0xefb/0x25d0 [ 370.978866][T13956] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 370.978905][T13956] ? rcu_is_watching+0x15/0xb0 [ 370.978941][T13956] ? __asan_memset+0x22/0x50 [ 370.978973][T13956] af_alg_get_rsgl+0x4b6/0x8e0 [ 370.979064][T13956] skcipher_recvmsg+0x392/0x1140 [ 370.979137][T13956] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 370.979161][T13956] ? __lock_acquire+0x6b5/0x2cf0 [ 370.979184][T13956] ? aa_sock_msg_perm+0xf1/0x1b0 [ 370.979278][T13956] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 370.979314][T13956] ? security_socket_recvmsg+0x7e/0x2c0 [ 370.979381][T13956] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 370.979408][T13956] sock_recvmsg+0x172/0x1b0 [ 370.979481][T13956] ____sys_recvmsg+0x1e6/0x4a0 [ 370.979518][T13956] ? __pfx_____sys_recvmsg+0x10/0x10 [ 370.979560][T13956] ? import_iovec+0x73/0xa0 [ 370.979591][T13956] ___sys_recvmsg+0x215/0x590 [ 370.979625][T13956] ? __pfx____sys_recvmsg+0x10/0x10 [ 370.979657][T13956] ? __fget_files+0x2a/0x420 [ 370.979718][T13956] ? __fget_files+0x3a0/0x420 [ 370.979764][T13956] __x64_sys_recvmsg+0x1ba/0x2a0 [ 370.979796][T13956] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 370.979835][T13956] ? __pfx_ksys_write+0x10/0x10 [ 370.979884][T13956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.979924][T13956] do_syscall_64+0x174/0x580 [ 370.979989][T13956] ? clear_bhb_loop+0x40/0x90 [ 370.980017][T13956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.980039][T13956] RIP: 0033:0x7f718cd9ce59 [ 370.980060][T13956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.980079][T13956] RSP: 002b:00007f718dc8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 370.980103][T13956] RAX: ffffffffffffffda RBX: 00007f718d015fa0 RCX: 00007f718cd9ce59 [ 370.980119][T13956] RDX: 0000000000010150 RSI: 00002000000000c0 RDI: 0000000000000004 [ 370.980134][T13956] RBP: 00007f718dc8b090 R08: 0000000000000000 R09: 0000000000000000 [ 370.980147][T13956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.980160][T13956] R13: 00007f718d016038 R14: 00007f718d015fa0 R15: 00007ffff83bd418 [ 370.980197][T13956] [ 371.859631][T13969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.940495][T13962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.050500][T13966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.093092][T13982] __nla_validate_parse: 1 callbacks suppressed [ 372.093114][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1955'. [ 372.647747][T14004] FAULT_INJECTION: forcing a failure. [ 372.647747][T14004] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 372.662317][T14004] CPU: 0 UID: 0 PID: 14004 Comm: syz.3.1962 Not tainted syzkaller #0 PREEMPT(full) [ 372.662345][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 372.662358][T14004] Call Trace: [ 372.662366][T14004] [ 372.662375][T14004] dump_stack_lvl+0xe8/0x150 [ 372.662406][T14004] should_fail_ex+0x412/0x560 [ 372.662437][T14004] prepare_alloc_pages+0x22a/0x650 [ 372.662479][T14004] __alloc_frozen_pages_noprof+0x12f/0x380 [ 372.662516][T14004] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 372.662555][T14004] ? __pfx_policy_nodemask+0x10/0x10 [ 372.662577][T14004] ? __folio_batch_add_and_move+0x11a/0xc50 [ 372.662608][T14004] ? lock_acquire+0x106/0x350 [ 372.662640][T14004] alloc_pages_mpol+0x235/0x490 [ 372.662668][T14004] folio_alloc_mpol_noprof+0x39/0x160 [ 372.662693][T14004] vma_alloc_folio_noprof+0xe1/0x1e0 [ 372.662718][T14004] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 372.662752][T14004] do_wp_page+0x118a/0x4cc0 [ 372.662786][T14004] ? __pte_offset_map+0x29/0x240 [ 372.662824][T14004] ? __pfx_do_wp_page+0x10/0x10 [ 372.662847][T14004] ? do_raw_spin_lock+0x12b/0x2f0 [ 372.662881][T14004] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 372.662925][T14004] handle_mm_fault+0x1698/0x3170 [ 372.662969][T14004] ? handle_mm_fault+0xf1/0x3170 [ 372.663004][T14004] ? __pfx_handle_mm_fault+0x10/0x10 [ 372.663033][T14004] ? follow_page_pte+0xbd1/0xe60 [ 372.663071][T14004] ? __pfx_follow_page_pte+0x10/0x10 [ 372.663112][T14004] __get_user_pages+0x167f/0x2730 [ 372.663174][T14004] __gup_longterm_locked+0xdcf/0x1630 [ 372.663208][T14004] ? lock_acquire+0x106/0x350 [ 372.663235][T14004] ? sanity_check_pinned_pages+0x7a8/0x870 [ 372.663270][T14004] gup_fast_fallback+0x1d84/0x20d0 [ 372.663332][T14004] ? __pfx_gup_fast_fallback+0x10/0x10 [ 372.663367][T14004] ? pin_user_pages_fast+0x4d/0xb0 [ 372.663397][T14004] iov_iter_extract_pages+0x37b/0x5f0 [ 372.663434][T14004] extract_iter_to_sg+0xefb/0x25d0 [ 372.663475][T14004] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 372.663522][T14004] ? rcu_is_watching+0x15/0xb0 [ 372.663551][T14004] ? __asan_memset+0x22/0x50 [ 372.663583][T14004] af_alg_get_rsgl+0x4b6/0x8e0 [ 372.663626][T14004] skcipher_recvmsg+0x392/0x1140 [ 372.663674][T14004] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 372.663699][T14004] ? __lock_acquire+0x6b5/0x2cf0 [ 372.663720][T14004] ? aa_sock_msg_perm+0xf1/0x1b0 [ 372.663755][T14004] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 372.663783][T14004] ? security_socket_recvmsg+0x7e/0x2c0 [ 372.663807][T14004] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 372.663833][T14004] sock_recvmsg+0x172/0x1b0 [ 372.663870][T14004] ____sys_recvmsg+0x1e6/0x4a0 [ 372.663907][T14004] ? __pfx_____sys_recvmsg+0x10/0x10 [ 372.663951][T14004] ? import_iovec+0x73/0xa0 [ 372.663982][T14004] ___sys_recvmsg+0x215/0x590 [ 372.664007][T14004] ? get_pid_task+0x20/0x1f0 [ 372.664084][T14004] ? __pfx____sys_recvmsg+0x10/0x10 [ 372.664117][T14004] ? __fget_files+0x2a/0x420 [ 372.664165][T14004] ? __fget_files+0x3a0/0x420 [ 372.664204][T14004] __x64_sys_recvmsg+0x1ba/0x2a0 [ 372.664235][T14004] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 372.664273][T14004] ? __pfx_ksys_write+0x10/0x10 [ 372.664316][T14004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.664340][T14004] do_syscall_64+0x174/0x580 [ 372.664365][T14004] ? trace_irq_disable+0x3b/0x140 [ 372.664409][T14004] ? clear_bhb_loop+0x40/0x90 [ 372.664436][T14004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.664458][T14004] RIP: 0033:0x7f994ed9ce59 [ 372.664479][T14004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.664499][T14004] RSP: 002b:00007f994fcd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 372.664529][T14004] RAX: ffffffffffffffda RBX: 00007f994f015fa0 RCX: 00007f994ed9ce59 [ 372.664545][T14004] RDX: 0000000000010150 RSI: 00002000000000c0 RDI: 0000000000000004 [ 372.664559][T14004] RBP: 00007f994fcd9090 R08: 0000000000000000 R09: 0000000000000000 [ 372.664573][T14004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 372.664586][T14004] R13: 00007f994f016038 R14: 00007f994f015fa0 R15: 00007ffc82caa058 [ 372.664623][T14004] [ 373.464593][T14027] netlink: 'syz.1.1969': attribute type 10 has an invalid length. [ 373.487611][T14029] netlink: 'syz.2.1970': attribute type 1 has an invalid length. [ 373.526958][T14027] team0: Failed to send options change via netlink (err -105) [ 373.539590][T14027] team0: Port device dummy0 added [ 374.166742][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 374.175784][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 374.697027][T14105] tap0: tun_chr_ioctl cmd 1074025677 [ 374.702564][T14105] tap0: linktype set to 2 [ 375.122223][T14108] team0: Port device dummy0 removed [ 375.133928][T14108] bridge_slave_0: left allmulticast mode [ 375.140284][T14108] bridge_slave_0: left promiscuous mode [ 375.156750][T14108] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.175452][T14108] bridge_slave_1: left allmulticast mode [ 375.181433][T14108] bridge_slave_1: left promiscuous mode [ 375.187406][T14108] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.225607][T14108] : (slave bond_slave_0): Releasing backup interface [ 375.236189][T14124] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 375.245160][T14108] bond_slave_0: left allmulticast mode [ 375.260568][T14108] : (slave bond_slave_1): Releasing backup interface [ 375.270812][T14108] bond_slave_1: left allmulticast mode [ 375.278997][T14108] team0: Port device team_slave_1 removed [ 375.570232][T14108] team0: Port device batadv2 removed [ 375.673753][T14108] bond9: (slave gretap1): Releasing active interface [ 375.755207][ T7607] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.839455][ T7607] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.848710][ T7607] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.899746][T14141] syzkaller0: entered promiscuous mode [ 375.905293][T14141] syzkaller0: entered allmulticast mode [ 375.921926][ T7607] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.938443][T14146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2002'. [ 375.958639][T14146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2002'. [ 375.984122][T14141] tc action pedit offset 4096 out of bounds [ 375.991828][T14147] netlink: 'syz.0.2002': attribute type 1 has an invalid length. [ 375.991884][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2002'. [ 376.033370][T14146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2002'. [ 376.042616][T14146] nbd: must specify a size in bytes for the device [ 376.228138][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880275b3000: rx timeout, send abort [ 376.333505][T14160] netlink: 'syz.4.2006': attribute type 10 has an invalid length. [ 376.354749][T14160] team0: Port device veth1_to_hsr added [ 376.499793][T14167] syzkaller0: entered promiscuous mode [ 376.505308][T14167] syzkaller0: entered allmulticast mode [ 376.606576][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2010'. [ 376.664380][T14173] netlink: 'syz.3.2011': attribute type 287 has an invalid length. [ 376.685270][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056fff000: rx timeout, send abort [ 376.794202][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880275b3000: abort rx timeout. Force session deactivation [ 377.242156][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056fff000: abort rx timeout. Force session deactivation [ 377.280728][T14209] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2021'. [ 377.376703][T14193] netlink: 'syz.2.2019': attribute type 30 has an invalid length. [ 377.384598][T14193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2019'. [ 377.433302][T14193] bond10: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 377.444781][T14193] bond10 (unregistering): Released all slaves [ 377.492498][T14213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2023'. [ 377.501520][T14213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2023'. [ 377.512003][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2023'. [ 377.538531][T14214] bond11: option packets_per_slave: invalid value (1048582) [ 377.546450][T14214] bond11: option packets_per_slave: allowed values 0 - 65535 [ 377.564031][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2023'. [ 377.652430][T14214] bond11 (unregistering): Released all slaves [ 377.704617][T14220] hmó3)óÿ: entered promiscuous mode [ 377.860033][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2025'. [ 378.008940][T14222] bond10 (unregistering): Released all slaves [ 378.350163][T14250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2030'. [ 378.404434][T14250] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2030'. [ 378.726733][T14270] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 378.748533][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.756931][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.886341][T14285] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2039'. [ 378.908641][T14281] openvswitch: netlink: IP tunnel dst address not specified [ 379.024954][T14277] nbd: must specify a device to reconfigure [ 379.060007][T14289] netlink: 'syz.4.2043': attribute type 1 has an invalid length. [ 379.155917][T14291] lo speed is unknown, defaulting to 1000 [ 379.409181][T14308] netlink: 'syz.4.2048': attribute type 2 has an invalid length. [ 379.416994][T14308] netlink: 'syz.4.2048': attribute type 1 has an invalid length. [ 379.495902][T14305] xt_hashlimit: max too large, truncated to 1048576 [ 379.502721][T14305] No such timeout policy "syz1" [ 380.109155][T14328] netlink: 'syz.3.2054': attribute type 1 has an invalid length. [ 380.192017][T14332] ip6tnl0: entered promiscuous mode [ 380.249155][T14331] ip6tnl0: left promiscuous mode [ 380.257467][T14334] syzkaller0: entered promiscuous mode [ 380.263005][T14334] syzkaller0: entered allmulticast mode [ 380.500948][T14348] netlink: 'syz.1.2058': attribute type 21 has an invalid length. [ 380.602332][T14344] Cannot find set identified by id 0 to match [ 381.321134][T14382] syzkaller0: entered promiscuous mode [ 381.326686][T14382] syzkaller0: entered allmulticast mode [ 382.785512][T14464] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 382.822148][T14467] netlink: 'syz.0.2089': attribute type 11 has an invalid length. [ 383.046754][T14471] 8021q: adding VLAN 0 to HW filter on device  [ 383.057116][T14471] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.235576][T14471] veth1_vlan: left promiscuous mode [ 383.242062][T14471] veth0_vlan: left promiscuous mode [ 383.262162][T14471] veth0_vlan: entered promiscuous mode [ 383.304832][T14471] veth1_vlan: entered promiscuous mode [ 383.316472][T14471] veth1_macvtap: left promiscuous mode [ 383.323412][T14471] veth0_macvtap: left promiscuous mode [ 383.331450][T14471] veth0_macvtap: entered promiscuous mode [ 383.340383][T14471] veth1_macvtap: entered promiscuous mode [ 383.354496][T14471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.362922][T14471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.371398][T14471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.379841][T14471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.392132][T14471] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 383.471371][T14471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.505523][T14471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.529750][T14471] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.568098][T14471] 8021q: adding VLAN 0 to HW filter on device bond4 [ 383.588776][T14471] 8021q: adding VLAN 0 to HW filter on device bond5 [ 383.598119][T14471] 8021q: adding VLAN 0 to HW filter on device bond6 [ 383.608551][T14471] 8021q: adding VLAN 0 to HW filter on device bond7 [ 383.623717][T14471] 8021q: adding VLAN 0 to HW filter on device bond8 [ 383.656451][T14471] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 383.693484][T14467] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 383.703012][T14467] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 383.884123][ T7607] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.892908][ T7607] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.901701][T14481] __nla_validate_parse: 9 callbacks suppressed [ 383.901719][T14481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2092'. [ 383.924293][ T7607] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.933056][ T7607] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.060617][ T7604] ip6_tunnel:  xmit: Local address not yet configured! [ 384.103338][ T7604] ip6_tunnel:  xmit: Local address not yet configured! [ 384.113336][T11381] ip6_tunnel:  xmit: Local address not yet configured! [ 384.147005][ T7607] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.155790][ T7607] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.229853][ T7604] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 384.248811][ T7604] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 384.259541][ T6405] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 384.284869][ T7607] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.366391][ T7607] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.389729][T11381] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 384.508279][T11381] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 384.625566][T14515] netlink: 'syz.2.2100': attribute type 1 has an invalid length. [ 384.702639][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'. [ 384.711577][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2100'. [ 384.758829][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'. [ 384.818847][T14515] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 384.835364][T14515] syzkaller1: Refused to change device type [ 384.929677][T11381] ip6_tunnel:  xmit: Local address not yet configured! [ 384.967626][T14538] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2105'. [ 385.042960][T14540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2105'. [ 385.080082][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2106'. [ 385.091454][T11381] ip6_tunnel:  xmit: Local address not yet configured! [ 385.244280][T14537] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.251687][T14537] bridge0: port 1(bridge_slave_0) entered listening state [ 385.382134][T14552] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2107'. [ 385.427032][T14537] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 385.507608][T14547] netlink: 'syz.1.2104': attribute type 13 has an invalid length. [ 385.515558][T14547] netlink: 'syz.1.2104': attribute type 12 has an invalid length. [ 385.524682][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.531869][ T7604] bridge0: port 2(bridge_slave_1) entered listening state [ 385.567196][T14552] vlan0: entered promiscuous mode [ 385.575600][T14556] netlink: 'syz.3.2108': attribute type 1 has an invalid length. [ 385.622885][T14552] geneve1: entered promiscuous mode [ 385.639948][T14552] vlan0: entered allmulticast mode [ 385.668525][T14552] geneve1: entered allmulticast mode [ 385.816082][T14555] gretap1: entered allmulticast mode [ 385.830956][T14555] bond11: (slave gretap1): making interface the new active one [ 385.840526][T14555] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 385.863466][T14559] macvtap1: entered promiscuous mode [ 385.868986][T14559] bridge0: entered promiscuous mode [ 385.875978][T14559] bridge0: port 1(macvtap1) entered blocking state [ 385.883918][T14559] bridge0: port 1(macvtap1) entered disabled state [ 385.891891][T14559] macvtap1: entered allmulticast mode [ 385.897475][T14559] bridge0: entered allmulticast mode [ 385.907135][T14559] macvtap1: left allmulticast mode [ 385.912810][T14559] bridge0: left allmulticast mode [ 386.185402][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2110'. [ 386.204789][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2110'. [ 386.214927][ T6405] bridge0: left promiscuous mode [ 386.379339][ T4964] block nbd4: Possible stuck request ffff888027957000: control (read@0,1024B). Runtime 30 seconds [ 386.394071][ T4964] block nbd4: Possible stuck request ffff8880279571c0: control (read@1024,1024B). Runtime 30 seconds [ 386.405802][ T4964] block nbd4: Possible stuck request ffff888027957380: control (read@2048,1024B). Runtime 30 seconds [ 386.416973][ T4964] block nbd4: Possible stuck request ffff888027957540: control (read@3072,1024B). Runtime 30 seconds [ 386.605343][T14574] pimreg: entered allmulticast mode [ 386.636671][T14574] pimreg: left allmulticast mode [ 387.143351][T14591] netlink: 'syz.1.2117': attribute type 13 has an invalid length. [ 387.151328][T14591] netlink: 'syz.1.2117': attribute type 17 has an invalid length. [ 387.273853][T14591] bridge0: left allmulticast mode [ 387.310960][T14591] veth1_to_batadv: left allmulticast mode [ 387.385756][T14591] macsec0: left allmulticast mode [ 387.392388][T14591] veth1_macvtap: left allmulticast mode [ 387.455625][T14591] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 387.988312][T14608] bond11: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 388.000501][T14608] bond11 (unregistering): Released all slaves [ 388.093975][T14611] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 388.226257][T14617] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 388.304172][T14620] bond0: entered promiscuous mode [ 388.884838][T14644] netlink: 'syz.1.2129': attribute type 1 has an invalid length. [ 388.894902][T14644] netlink: 'syz.1.2129': attribute type 1 has an invalid length. [ 389.244205][T14662] sctp: [Deprecated]: syz.1.2133 (pid 14662) Use of int in max_burst socket option deprecated. [ 389.244205][T14662] Use struct sctp_assoc_value instead [ 389.275605][T14656] syzkaller0: entered promiscuous mode [ 389.281412][T14656] syzkaller0: entered allmulticast mode [ 389.301285][T14660] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 389.360962][T14656] __nla_validate_parse: 7 callbacks suppressed [ 389.361000][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2135'. [ 389.414445][T14656] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 389.443173][T14656] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 389.453321][T14656] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2135'. [ 389.540655][T14672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2138'. [ 389.564582][T14673] sctp: [Deprecated]: syz.0.2138 (pid 14673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.564582][T14673] Use struct sctp_sack_info instead [ 389.599184][T14674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.078260][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 390.367818][T14702] lo speed is unknown, defaulting to 1000 [ 390.701308][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2148'. [ 390.786793][T14709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2148'. [ 391.461687][T14722] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 391.467761][T14722] syzkaller1: linktype set to 786 [ 391.554969][T14739] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2157'. [ 391.600705][T14739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2157'. [ 391.715848][T14743] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2159'. [ 391.879603][T14746] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 392.569646][T14760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2164'. [ 392.669879][T14759] openvswitch: netlink: Geneve option length err (len 14348, max 255). [ 393.334162][T14809] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 393.489903][T14817] xt_hashlimit: size too large, truncated to 1048576 [ 393.508020][T14816] netlink: 'syz.2.2179': attribute type 1 has an invalid length. [ 393.590972][T14816] bond11: entered promiscuous mode [ 393.596230][T14816] bond11: entered allmulticast mode [ 393.601963][T14816] 8021q: adding VLAN 0 to HW filter on device bond11 [ 393.708574][T14823] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.777731][T14826] netlink: 'syz.1.2178': attribute type 1 has an invalid length. [ 393.827320][T14823] bridge_slave_0 (unregistering): left allmulticast mode [ 393.834447][T14823] bridge_slave_0 (unregistering): left promiscuous mode [ 393.841499][T14823] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.257676][T14842] netlink: 'syz.3.2185': attribute type 2 has an invalid length. [ 394.438874][T14843] netlink: 'syz.4.2187': attribute type 1 has an invalid length. [ 394.498657][T14843] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 394.653837][T14845] lo speed is unknown, defaulting to 1000 [ 394.890947][T14868] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 395.329538][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 395.329561][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 395.755126][T14889] __nla_validate_parse: 4 callbacks suppressed [ 395.755148][T14889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2196'. [ 395.809525][T14892] netlink: 41 bytes leftover after parsing attributes in process `syz.0.2197'. [ 395.818643][T14892] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2197'. [ 395.827721][T14892] netlink: 41 bytes leftover after parsing attributes in process `syz.0.2197'. [ 396.177822][T14900] netlink: 'syz.4.2199': attribute type 22 has an invalid length. [ 396.185713][T14900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2199'. [ 396.944241][T14918] bond10: option packets_per_slave: invalid value (1048582) [ 397.008774][T14918] bond10: option packets_per_slave: allowed values 0 - 65535 [ 397.024744][T14918] bond10 (unregistering): Released all slaves [ 397.193704][T14937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2205'. [ 397.616828][T14944] netlink: 'syz.4.2203': attribute type 21 has an invalid length. [ 397.624731][T14944] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2203'. [ 397.634141][T14944] netlink: 'syz.4.2203': attribute type 4 has an invalid length. [ 397.641916][T14944] netlink: 'syz.4.2203': attribute type 5 has an invalid length. [ 397.649673][T14944] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2203'. [ 397.890805][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 398.077248][T14956] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 398.420907][T14971] RDS: rds_bind could not find a transport for 0:b3:0:0:4d00::, load rds_tcp or rds_rdma? [ 398.435159][T14972] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2216'. [ 398.444618][T14973] dvmrp0: left allmulticast mode [ 398.522230][T14963] lo speed is unknown, defaulting to 1000 [ 398.522333][T14972] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2216'. [ 398.593094][T14975] netlink: 'syz.1.2217': attribute type 1 has an invalid length. [ 398.692530][T14975] 8021q: adding VLAN 0 to HW filter on device bond10 [ 398.805403][T14985] netlink: 'syz.2.2218': attribute type 12 has an invalid length. [ 398.822685][T14985] netlink: 'syz.2.2218': attribute type 12 has an invalid length. [ 398.822685][ T7606] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.882697][ T7606] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.914909][ T7606] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.923564][ T7606] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.892280][T15013] geneve4: entered promiscuous mode [ 400.378553][T15041] netlink: 'syz.4.2235': attribute type 1 has an invalid length. [ 400.386382][T15041] netlink: 'syz.4.2235': attribute type 1 has an invalid length. [ 400.419702][T15038] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 400.456151][T15038] bond11 (unregistering): Released all slaves [ 400.586423][T15033] lo speed is unknown, defaulting to 1000 [ 401.445872][T15076] lo speed is unknown, defaulting to 1000 [ 401.496419][T15080] __nla_validate_parse: 13 callbacks suppressed [ 401.496444][T15080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 401.886973][T15097] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 402.091902][T15107] netlink: 'syz.1.2255': attribute type 4 has an invalid length. [ 402.140337][T15101] bond10: entered promiscuous mode [ 402.145952][T15101] 8021q: adding VLAN 0 to HW filter on device bond10 [ 402.205229][T15109] netlink: 'syz.1.2255': attribute type 4 has an invalid length. [ 402.401604][T15115] bridge3: entered promiscuous mode [ 402.438086][T15115] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 402.461456][T15114] lo speed is unknown, defaulting to 1000 [ 402.934050][T15124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2258'. [ 403.330741][T15132] bond11: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 403.370717][T15132] bond11 (unregistering): Released all slaves [ 403.620221][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'. [ 403.920059][T15160] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2266'. [ 404.725071][T15178] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2271'. [ 405.117099][T15188] team0: entered promiscuous mode [ 405.241451][T15190] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2275'. [ 405.298276][T15190] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2275'. [ 405.313630][T15190] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2275'. [ 405.527567][T15199] pimreg: entered allmulticast mode [ 406.014164][T15220] netlink: 'syz.4.2284': attribute type 1 has an invalid length. [ 406.071220][T15220] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 406.117876][T15228] netlink: 'syz.1.2287': attribute type 5 has an invalid length. [ 406.405788][T15240] IPVS: Error connecting to the multicast addr [ 406.426228][T15231] netlink: 'syz.2.2286': attribute type 6 has an invalid length. [ 406.435693][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 406.485168][T15231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2286'. [ 406.494733][T15231] netlink: 'syz.2.2286': attribute type 2 has an invalid length. [ 406.503035][T15231] netlink: 'syz.2.2286': attribute type 1 has an invalid length. [ 406.513814][T15231] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2286'. [ 406.695292][T15231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.069609][T15228] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 407.868761][T15300] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2299'. [ 407.877790][T15300] nbd: couldn't find a device at index 0 [ 408.336391][T15329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2307'. [ 408.807216][T15352] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2315'. [ 408.965267][T15357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2317'. [ 408.980532][T15357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2317'. [ 409.328040][T15372] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2323'. [ 409.366615][T15372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2323'. [ 409.375642][T15372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2323'. [ 409.390145][T15373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2321'. [ 409.974796][T15379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 410.049607][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 412.523309][T15407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2330'. [ 413.133632][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2334'. [ 413.310988][T15430] xt_hashlimit: size too large, truncated to 1048576 [ 413.317762][T15430] xt_hashlimit: max too large, truncated to 1048576 [ 413.409087][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2336'. [ 413.841676][T15450] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2342'. [ 413.855943][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2342'. [ 414.172684][T15464] netlink: 'syz.3.2346': attribute type 1 has an invalid length. [ 414.358958][T15469] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2347'. [ 414.941722][T15484] netlink: 'syz.0.2354': attribute type 32 has an invalid length. [ 414.959222][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'. [ 414.971815][T15486] netlink: 'syz.2.2353': attribute type 1 has an invalid length. [ 415.000775][T15484] bond11: option coupled_control: invalid value (12) [ 415.051400][T15484] bond11 (unregistering): Released all slaves [ 415.187163][T15502] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2352'. [ 415.504173][T15503] team0: Port device team_slave_0 removed [ 415.514491][T15503] team0: Port device team_slave_1 removed [ 415.522752][T15503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.531989][T15503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.541550][T15503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.550541][T15503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.589626][T15503] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 415.618302][T15496] bond12: entered promiscuous mode [ 415.623689][ T6392] lo speed is unknown, defaulting to 1000 [ 415.629463][ T6392] syz0: Port: 1 Link DOWN [ 415.636163][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2357'. [ 415.701115][T15517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2357'. [ 415.729139][ T6392] lo speed is unknown, defaulting to 1000 [ 415.796909][T15485] bond12: left promiscuous mode [ 415.809812][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 415.912342][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 416.145836][T15529] xt_cgroup: xt_cgroup: no path or classid specified [ 416.271209][T15513] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 416.279471][T15513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.402002][T15513] bridge0: port 1(syz_tun) entered blocking state [ 416.410318][T15513] bridge0: port 1(syz_tun) entered disabled state [ 416.423884][T15513] syz_tun: entered allmulticast mode [ 416.431132][T15513] syz_tun: entered promiscuous mode [ 416.456462][ T4964] block nbd4: Possible stuck request ffff888027957000: control (read@0,1024B). Runtime 60 seconds [ 416.470159][ T4964] block nbd4: Possible stuck request ffff8880279571c0: control (read@1024,1024B). Runtime 60 seconds [ 416.481660][ T4964] block nbd4: Possible stuck request ffff888027957380: control (read@2048,1024B). Runtime 60 seconds [ 416.493180][ T4964] block nbd4: Possible stuck request ffff888027957540: control (read@3072,1024B). Runtime 60 seconds [ 416.552399][T15542] lo: left allmulticast mode [ 416.560273][T15542] bond0: left promiscuous mode [ 416.653774][T15542] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 416.755042][T15542] bond2: left promiscuous mode [ 416.794913][T15542] geneve2: left promiscuous mode [ 416.855179][T15542] bond5: left promiscuous mode [ 416.860987][T15542] geneve3: left promiscuous mode [ 416.877779][T15542] bond9: left promiscuous mode [ 416.888955][T15542] geneve4: left promiscuous mode [ 416.905563][ T1095] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.915586][ T1095] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 416.953495][ T1095] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.967187][ T1095] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 52985 - 0 [ 416.976917][ T1095] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.985850][ T1095] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 416.994813][ T1095] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.003716][ T1095] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 52985 - 0 [ 417.013797][ T1095] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.025249][ T1095] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 417.066474][ T1095] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.075391][ T1095] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 52985 - 0 [ 417.092968][ T1095] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.110370][ T1095] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 417.119311][ T1095] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.140454][ T1095] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 52985 - 0 [ 417.509137][T15593] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 417.564470][T15593] xt_TCPMSS: Only works on TCP SYN packets [ 417.874134][T15615] __nla_validate_parse: 2 callbacks suppressed [ 417.874156][T15615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2383'. [ 417.917085][T15617] lo speed is unknown, defaulting to 1000 [ 418.019635][T15579] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 418.186581][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2384'. [ 418.530023][T15617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2382'. [ 419.329351][ T5641] Bluetooth: hci4: command 0x0405 tx timeout [ 420.777212][T15599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.087514][T15665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2395'. [ 421.118840][T15665] xfrm1: entered promiscuous mode [ 421.123979][T15665] xfrm1: entered allmulticast mode [ 421.264077][T15674] netlink: 'syz.3.2396': attribute type 10 has an invalid length. [ 421.304483][T15670] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 421.340705][T15674] syz_tun: left allmulticast mode [ 421.346067][T15674] bridge0: port 1(syz_tun) entered disabled state [ 421.357063][T15677] netlink: 'syz.4.2398': attribute type 1 has an invalid length. [ 421.394098][ T29] audit: type=1800 audit(1780910899.732:8): pid=15681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2399" name="memory.events" dev="tmpfs" ino=2407 res=0 errno=0 [ 421.693505][T15688] x_tables: duplicate underflow at hook 1 [ 422.132775][T15695] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2402'. [ 422.190414][T15720] lo speed is unknown, defaulting to 1000 [ 422.258297][T15722] bridge0: port 1(team0) entered blocking state [ 422.274604][T15722] bridge0: port 1(team0) entered disabled state [ 422.281116][T15722] team0: entered allmulticast mode [ 422.286280][T15722] team_slave_0: entered allmulticast mode [ 422.292045][T15722] team_slave_1: entered allmulticast mode [ 422.298249][T15722] dummy0: entered allmulticast mode [ 422.311478][T15722] team0: entered promiscuous mode [ 422.316578][T15722] team_slave_0: entered promiscuous mode [ 422.347586][T15722] team_slave_1: entered promiscuous mode [ 422.353501][T15722] dummy0: entered promiscuous mode [ 422.359432][T15722] bridge0: port 1(team0) entered blocking state [ 422.365831][T15722] bridge0: port 1(team0) entered listening state [ 422.581978][T15729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2412'. [ 422.628457][T15729] netlink: 'syz.0.2412': attribute type 2 has an invalid length. [ 422.665088][T15729] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2412'. [ 422.807271][ T5641] block nbd5: Receive control failed (result -32) [ 422.888814][T15707] infiniband syz1: set down [ 422.916903][T15707] infiniband syz1: added bond0 [ 422.958644][T15707] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 422.983284][T15707] infiniband syz1: Couldn't open port 1 [ 423.026828][T15707] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 423.044549][T15707] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 423.113919][T15707] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 423.176435][T15707] RDS/IB: syz1: added [ 423.181085][T15707] smc: adding ib device syz1 with port count 1 [ 423.187437][T15707] smc: ib device syz1 port 1 has no pnetid [ 423.539849][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2422'. [ 423.563750][T15758] netlink: 42 bytes leftover after parsing attributes in process `syz.4.2422'. [ 423.591096][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2422'. [ 423.638249][T15758] syzkaller1: entered allmulticast mode [ 423.715525][T15761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2423'. [ 423.734110][T15761] netlink: 'syz.1.2423': attribute type 1 has an invalid length. [ 423.741923][T15761] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2423'. [ 423.750907][T15761] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2423'. [ 423.759978][T15761] netlink: 'syz.1.2423': attribute type 1 has an invalid length. [ 423.767741][T15761] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2423'. [ 423.862385][T15766] syz.1.2425: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 423.923752][T15766] CPU: 0 UID: 0 PID: 15766 Comm: syz.1.2425 Not tainted syzkaller #0 PREEMPT(full) [ 423.923797][T15766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 423.923818][T15766] Call Trace: [ 423.923831][T15766] [ 423.923845][T15766] dump_stack_lvl+0xe8/0x150 [ 423.923880][T15766] warn_alloc+0x249/0x340 [ 423.923916][T15766] ? stack_trace_save+0xa9/0x100 [ 423.923992][T15766] ? __pfx_warn_alloc+0x10/0x10 [ 423.924032][T15766] ? kasan_save_track+0x4f/0x80 [ 423.924062][T15766] ? kasan_save_track+0x3e/0x80 [ 423.924090][T15766] ? __kasan_kmalloc+0x93/0xb0 [ 423.924120][T15766] ? __kmalloc_cache_noprof+0x31c/0x660 [ 423.924150][T15766] ? xskq_create+0x56/0x170 [ 423.924201][T15766] ? xsk_setsockopt+0x54c/0x990 [ 423.924230][T15766] ? do_sock_setsockopt+0x17c/0x1b0 [ 423.924254][T15766] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 423.924276][T15766] ? do_syscall_64+0x174/0x580 [ 423.924304][T15766] __vmalloc_node_range_noprof+0x132/0x1750 [ 423.924370][T15766] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 423.924410][T15766] ? __kasan_kmalloc+0x93/0xb0 [ 423.924449][T15766] vmalloc_user_noprof+0xad/0xe0 [ 423.924480][T15766] ? xskq_create+0xbf/0x170 [ 423.924513][T15766] xskq_create+0xbf/0x170 [ 423.924549][T15766] xsk_init_queue+0x8a/0xe0 [ 423.924581][T15766] xsk_setsockopt+0x54c/0x990 [ 423.924615][T15766] ? __pfx_xsk_setsockopt+0x10/0x10 [ 423.924656][T15766] ? __pfx_aa_sk_perm+0x10/0x10 [ 423.924694][T15766] ? aa_sock_opt_perm+0xff/0x1a0 [ 423.924728][T15766] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 423.924760][T15766] ? __pfx_xsk_setsockopt+0x10/0x10 [ 423.924793][T15766] do_sock_setsockopt+0x17c/0x1b0 [ 423.924824][T15766] __x64_sys_setsockopt+0x13d/0x1b0 [ 423.924852][T15766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.924878][T15766] do_syscall_64+0x174/0x580 [ 423.924901][T15766] ? trace_irq_disable+0x3b/0x140 [ 423.924934][T15766] ? clear_bhb_loop+0x40/0x90 [ 423.924962][T15766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.924984][T15766] RIP: 0033:0x7f4f7cb9ce59 [ 423.925004][T15766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.925022][T15766] RSP: 002b:00007f4f7adf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 423.925046][T15766] RAX: ffffffffffffffda RBX: 00007f4f7ce15fa0 RCX: 00007f4f7cb9ce59 [ 423.925063][T15766] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 423.925076][T15766] RBP: 00007f4f7cc32d6f R08: 0000000000000004 R09: 0000000000000000 [ 423.925089][T15766] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.925103][T15766] R13: 00007f4f7ce16038 R14: 00007f4f7ce15fa0 R15: 00007fff92bed678 [ 423.925138][T15766] [ 423.925156][T15766] Mem-Info: [ 424.235114][T15766] active_anon:5659 inactive_anon:144 isolated_anon:0 [ 424.235114][T15766] active_file:2382 inactive_file:40719 isolated_file:0 [ 424.235114][T15766] unevictable:768 dirty:76 writeback:0 [ 424.235114][T15766] slab_reclaimable:12149 slab_unreclaimable:175794 [ 424.235114][T15766] mapped:29577 shmem:1419 pagetables:3534 [ 424.235114][T15766] sec_pagetables:0 bounce:0 [ 424.235114][T15766] kernel_misc_reclaimable:0 [ 424.235114][T15766] free:1243526 free_pcp:9859 free_cma:0 [ 424.335605][T15766] Node 0 active_anon:22636kB inactive_anon:576kB active_file:9528kB inactive_file:162680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121708kB dirty:300kB writeback:0kB shmem:4140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15032kB pagetables:14012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 424.370270][T15766] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 424.507049][ T29] audit: type=1107 audit(1780910902.752:9): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 424.534164][T15766] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 424.564102][T15766] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 424.569923][T15766] Node 0 DMA32 free:1019904kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22536kB inactive_anon:576kB active_file:9528kB inactive_file:162680kB unevictable:1536kB writepending:300kB zspages:0kB present:3129332kB managed:2552556kB mlocked:0kB bounce:0kB free_pcp:39348kB local_pcp:27164kB free_cma:0kB [ 424.603375][T15766] lowmem_reserve[]: 0 0 0 0 0 [ 424.608160][T15766] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 424.737155][T15766] lowmem_reserve[]: 0 0 0 0 0 [ 424.742449][T15766] Node 1 Normal free:3938000kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 424.778757][T15766] lowmem_reserve[]: 0 0 0 0 0 [ 424.790116][T15766] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 424.808807][T15766] Node 0 DMA32: 4376*4kB (UME) 3660*8kB (UE) 2279*16kB (U) 1622*32kB (UE) 1091*64kB (UME) 854*128kB (UME) 652*256kB (UME) 389*512kB (UME) 195*1024kB (U) 32*2048kB (U) 18*4096kB (UM) = 1019312kB [ 424.830438][T15766] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 424.863483][T15766] Node 1 Normal: 0*4kB 2*8kB (UM) 6*16kB (UM) 7*32kB (UM) 4*64kB (UM) 7*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3938000kB [ 424.904411][T15766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.915073][T15766] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 424.926019][T15766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.936475][T15766] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 424.956242][T15766] 44516 total pagecache pages [ 424.961472][T15766] 0 pages in swap cache [ 424.966917][T15766] Free swap = 124996kB [ 424.972622][T15766] Total swap = 124996kB [ 424.976894][T15766] 2097051 pages RAM [ 424.981570][T15766] 0 pages HighMem/MovableOnly [ 424.986474][T15766] 427129 pages reserved [ 424.991505][T15766] 0 pages cma reserved [ 425.870373][T15807] netlink: 175008 bytes leftover after parsing attributes in process `syz.0.2434'. [ 426.071052][T15811] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2436'. [ 426.081401][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'. [ 426.151466][T15812] netlink: 'syz.0.2435': attribute type 1 has an invalid length. [ 426.221623][T15812] 8021q: adding VLAN 0 to HW filter on device bond11 [ 426.319020][T15812] bond11: (slave ip6gretap2): making interface the new active one [ 426.331732][T15812] bond11: (slave ip6gretap2): Enslaving as an active interface with an up link [ 427.271272][T15844] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 427.554040][T15869] netlink: 'syz.0.2448': attribute type 1 has an invalid length. [ 427.764544][T15886] netlink: 'syz.0.2452': attribute type 1 has an invalid length. [ 427.815401][T15886] netlink: 'syz.0.2452': attribute type 8 has an invalid length. [ 427.860877][T15888] batadv1: entered promiscuous mode [ 427.866193][T15888] batadv1: entered allmulticast mode [ 427.883867][T15890] netlink: 'syz.0.2454': attribute type 5 has an invalid length. [ 428.191597][T15896] netlink: 'syz.1.2456': attribute type 1 has an invalid length. [ 428.215617][T15896] 8021q: adding VLAN 0 to HW filter on device bond11 [ 428.256619][T15896] bond11: (slave veth7): Enslaving as an active interface with a down link [ 428.292695][T15896] dummy0: left promiscuous mode [ 428.297860][T15896] dummy0: left allmulticast mode [ 428.324548][T15896] team0: Port device dummy0 removed [ 428.335929][T15896] bond11: (slave dummy0): making interface the new active one [ 428.365232][T15896] dummy0: entered promiscuous mode [ 428.373050][T15896] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 428.388652][T15899] netlink: 'syz.0.2457': attribute type 1 has an invalid length. [ 428.401797][T15900] bond11: (slave dummy0): Releasing active interface [ 428.408601][T15900] dummy0 (unregistering): left promiscuous mode [ 428.440182][T15899] bond12: entered promiscuous mode [ 428.445691][T15899] 8021q: adding VLAN 0 to HW filter on device bond12 [ 428.481241][T15899] macvtap1: entered allmulticast mode [ 428.525965][T15899] bond12: (slave bridge4): making interface the new active one [ 428.536216][T15899] bridge4: entered promiscuous mode [ 428.543818][T15899] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 431.400133][ T4999] udevd[4999]: worker [10545] /devices/virtual/block/nbd4 is taking a long time [ 440.769511][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 443.004100][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 443.014759][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 443.025409][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 443.033452][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 443.041196][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 443.335562][T15941] lo speed is unknown, defaulting to 1000 [ 443.866206][T15941] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.873754][T15941] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.881085][T15941] bridge_slave_0: entered allmulticast mode [ 443.888428][T15941] bridge_slave_0: entered promiscuous mode [ 443.899806][T15941] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.909047][T15941] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.916746][T15941] bridge_slave_1: entered allmulticast mode [ 443.924237][T15941] bridge_slave_1: entered promiscuous mode [ 443.955204][T15941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.969037][T15941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.034227][T15941] team0: Port device team_slave_0 added [ 444.054660][T15941] team0: Port device team_slave_1 added [ 444.183422][T15941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.200880][T15941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.283119][T15941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.313935][T15941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.338718][T15941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.406066][T15941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.421541][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 444.452625][T10006] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 444.460878][T10006] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 444.471148][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 444.484752][T10006] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 444.494122][T10006] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 444.506170][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 444.517575][T10006] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 444.517985][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 444.533529][ T5641] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 444.617610][ T5636] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 444.628790][ T5636] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 444.636901][ T5636] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 444.645043][ T5636] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 444.702206][ T5636] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 444.786058][T15941] hsr_slave_0: entered promiscuous mode [ 444.792968][T15941] hsr_slave_1: entered promiscuous mode [ 444.799489][T15941] debugfs: 'hsr0' already exists in 'hsr' [ 444.805269][T15941] Cannot create hsr debugfs directory [ 444.812738][ T5636] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 444.828298][ T5636] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 444.836249][ T5636] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 444.864685][ T5636] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 444.872467][ T5636] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 445.103537][ T5633] Bluetooth: hci5: command tx timeout [ 445.595904][T15965] lo speed is unknown, defaulting to 1000 [ 445.909039][T15971] lo speed is unknown, defaulting to 1000 [ 446.187086][T15967] lo speed is unknown, defaulting to 1000 [ 446.539984][ T4964] block nbd4: Possible stuck request ffff888027957000: control (read@0,1024B). Runtime 90 seconds [ 446.555180][ T4964] block nbd4: Possible stuck request ffff8880279571c0: control (read@1024,1024B). Runtime 90 seconds [ 446.568187][ T4964] block nbd4: Possible stuck request ffff888027957380: control (read@2048,1024B). Runtime 90 seconds [ 446.582919][ T4964] block nbd4: Possible stuck request ffff888027957540: control (read@3072,1024B). Runtime 90 seconds [ 446.586988][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.601057][ C0] bridge0: topology change detected, propagating [ 446.620224][ T5633] Bluetooth: hci6: command tx timeout [ 446.620664][ T5636] Bluetooth: hci7: command tx timeout [ 446.643187][T15973] lo speed is unknown, defaulting to 1000 [ 446.769459][ T5636] Bluetooth: hci8: command tx timeout [ 446.887863][T15965] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.897936][T15965] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.905782][T15965] bridge_slave_0: entered allmulticast mode [ 446.924863][T15965] bridge_slave_0: entered promiscuous mode [ 446.951449][T15965] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.958953][T15965] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.966998][T15965] bridge_slave_1: entered allmulticast mode [ 446.976190][T15965] bridge_slave_1: entered promiscuous mode [ 447.033693][ T5636] Bluetooth: hci9: command tx timeout [ 447.115706][T15965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.189861][T15965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.256457][ T5636] Bluetooth: hci5: command tx timeout [ 447.286596][T15965] team0: Port device team_slave_0 added [ 447.295600][T15965] team0: Port device team_slave_1 added [ 447.414945][T15965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.422665][T15965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.456002][T15965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.468975][T15965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.487750][T15965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.514987][T15965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.673914][T15965] hsr_slave_0: entered promiscuous mode [ 447.680632][T15965] hsr_slave_1: entered promiscuous mode [ 447.686937][T15965] debugfs: 'hsr0' already exists in 'hsr' [ 447.693244][T15965] Cannot create hsr debugfs directory [ 447.734632][T15971] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.742019][T15971] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.749537][T15971] bridge_slave_0: entered allmulticast mode [ 447.756950][T15971] bridge_slave_0: entered promiscuous mode [ 447.765407][T15971] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.772567][T15971] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.780020][T15971] bridge_slave_1: entered allmulticast mode [ 447.787455][T15971] bridge_slave_1: entered promiscuous mode [ 447.873839][T15971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.905018][T15971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.044069][T15971] team0: Port device team_slave_0 added [ 448.067871][T15971] team0: Port device team_slave_1 added [ 448.167837][T15971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.177280][T15971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.203764][T15971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.244299][T15971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.251290][T15971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.294686][T15971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.495843][T15971] hsr_slave_0: entered promiscuous mode [ 448.502680][T15971] hsr_slave_1: entered promiscuous mode [ 448.520783][T15971] debugfs: 'hsr0' already exists in 'hsr' [ 448.526546][T15971] Cannot create hsr debugfs directory [ 448.586989][T15967] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.594626][T15967] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.602185][T15967] bridge_slave_0: entered allmulticast mode [ 448.609628][T15967] bridge_slave_0: entered promiscuous mode [ 448.659301][T15967] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.666578][T15967] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.674051][T15967] bridge_slave_1: entered allmulticast mode [ 448.682058][T15967] bridge_slave_1: entered promiscuous mode [ 448.690525][ T5636] Bluetooth: hci7: command tx timeout [ 448.744075][ T5636] Bluetooth: hci6: command tx timeout [ 448.782801][T15967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.796475][T15967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.813120][T15973] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.820672][T15973] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.827904][T15973] bridge_slave_0: entered allmulticast mode [ 448.835265][T15973] bridge_slave_0: entered promiscuous mode [ 448.854519][ T5636] Bluetooth: hci8: command tx timeout [ 448.886332][T15973] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.894108][T15973] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.901561][T15973] bridge_slave_1: entered allmulticast mode [ 448.908876][T15973] bridge_slave_1: entered promiscuous mode [ 448.918009][T15967] team0: Port device team_slave_0 added [ 448.942023][T15967] team0: Port device team_slave_1 added [ 448.997191][T15973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.028582][T15967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.035879][T15967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.072130][T15967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.085989][T15973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.098542][ T5636] Bluetooth: hci9: command tx timeout [ 449.112681][T15967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.119663][T15967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.145570][T15967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.223104][T15973] team0: Port device team_slave_0 added [ 449.232007][T15973] team0: Port device team_slave_1 added [ 449.317518][T15973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.324528][T15973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.329995][ T5636] Bluetooth: hci5: command tx timeout [ 449.350405][T15973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.369811][T15967] hsr_slave_0: entered promiscuous mode [ 449.376522][T15967] hsr_slave_1: entered promiscuous mode [ 449.383590][T15967] debugfs: 'hsr0' already exists in 'hsr' [ 449.399092][T15967] Cannot create hsr debugfs directory [ 449.407306][T15973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.416820][T15973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.442756][T15973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.563171][T15973] hsr_slave_0: entered promiscuous mode [ 449.570217][T15973] hsr_slave_1: entered promiscuous mode [ 449.576636][T15973] debugfs: 'hsr0' already exists in 'hsr' [ 449.582757][T15973] Cannot create hsr debugfs directory [ 449.730160][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 450.803465][ T5636] Bluetooth: hci6: command tx timeout [ 450.804667][ T5633] Bluetooth: hci7: command tx timeout [ 450.929492][ T5636] Bluetooth: hci8: command tx timeout [ 451.170442][ T5636] Bluetooth: hci9: command tx timeout [ 451.409504][ T5636] Bluetooth: hci5: command tx timeout [ 452.849634][ T5636] Bluetooth: hci6: command tx timeout [ 452.859631][ T5636] Bluetooth: hci7: command tx timeout [ 452.942913][ C0] bridge0: port 1(team0) entered learning state [ 453.009928][ T5636] Bluetooth: hci8: command tx timeout [ 453.249971][ T5636] Bluetooth: hci9: command tx timeout [ 476.609624][ T4964] block nbd4: Possible stuck request ffff888027957000: control (read@0,1024B). Runtime 120 seconds [ 476.620756][ T4964] block nbd4: Possible stuck request ffff8880279571c0: control (read@1024,1024B). Runtime 120 seconds [ 476.631967][ T4964] block nbd4: Possible stuck request ffff888027957380: control (read@2048,1024B). Runtime 120 seconds [ 476.643073][ T4964] block nbd4: Possible stuck request ffff888027957540: control (read@3072,1024B). Runtime 120 seconds [ 483.014226][ C0] bridge0: port 1(team0) entered forwarding state [ 483.020750][ C0] bridge0: topology change detected, propagating [ 501.570656][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 503.611034][ T5633] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 503.620620][ T5633] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 503.628898][ T5633] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 503.642815][ T5633] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 503.651858][ T5633] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 503.924961][T16036] lo speed is unknown, defaulting to 1000 [ 504.474333][T16036] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.490025][T16036] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.509105][T16036] bridge_slave_0: entered allmulticast mode [ 504.517764][T16036] bridge_slave_0: entered promiscuous mode [ 504.527855][T16036] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.542458][T16036] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.550955][T16036] bridge_slave_1: entered allmulticast mode [ 504.559005][T16036] bridge_slave_1: entered promiscuous mode [ 504.634059][T16036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.684199][T16036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.854594][T16036] team0: Port device team_slave_0 added [ 504.874787][T16036] team0: Port device team_slave_1 added [ 504.886712][ T5633] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 504.899776][ T5633] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 504.910895][ T5633] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 504.919034][ T5633] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 504.930539][ T5633] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 504.993460][ T5636] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 505.012452][ T5636] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 505.021126][ T5636] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 505.035501][ T5636] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 505.046125][ T5636] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 505.105771][T10006] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 505.127972][ T5641] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 505.139435][ T5633] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 505.154480][ T5633] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 505.169723][T16036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.176775][T16036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.204399][ T5633] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 505.205207][T16036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.211625][ T5633] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 505.235309][ T5633] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 505.239654][T16036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.249280][ T5641] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 505.259565][ T5641] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 505.267752][ T5633] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 505.267753][T16036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.267788][T16036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.441137][T16036] hsr_slave_0: entered promiscuous mode [ 505.448119][T16036] hsr_slave_1: entered promiscuous mode [ 505.455264][T16036] debugfs: 'hsr0' already exists in 'hsr' [ 505.461042][T16036] Cannot create hsr debugfs directory [ 505.736446][ T5633] Bluetooth: hci10: command tx timeout [ 506.082260][T16064] lo speed is unknown, defaulting to 1000 [ 506.433482][T16057] lo speed is unknown, defaulting to 1000 [ 506.699419][ T4964] block nbd4: Possible stuck request ffff888027957000: control (read@0,1024B). Runtime 150 seconds [ 506.711128][ T4964] block nbd4: Possible stuck request ffff8880279571c0: control (read@1024,1024B). Runtime 150 seconds [ 506.727996][ T4964] block nbd4: Possible stuck request ffff888027957380: control (read@2048,1024B). Runtime 150 seconds [ 506.745446][ T4964] block nbd4: Possible stuck request ffff888027957540: control (read@3072,1024B). Runtime 150 seconds [ 506.807983][T16059] lo speed is unknown, defaulting to 1000 [ 507.009618][ T5633] Bluetooth: hci11: command tx timeout [ 507.089779][ T5633] Bluetooth: hci12: command tx timeout [ 507.296362][T16062] lo speed is unknown, defaulting to 1000 [ 507.490578][ T5633] Bluetooth: hci14: command tx timeout [ 507.497675][T10006] Bluetooth: hci13: command tx timeout [ 507.886314][T10006] Bluetooth: hci10: command tx timeout [ 507.898369][T16064] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.906090][T16064] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.914633][T16064] bridge_slave_0: entered allmulticast mode [ 507.925432][T16064] bridge_slave_0: entered promiscuous mode [ 507.950784][T16064] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.958355][T16064] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.965679][T16064] bridge_slave_1: entered allmulticast mode [ 507.973708][T16064] bridge_slave_1: entered promiscuous mode [ 508.089809][T16064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.145357][T16064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.240428][T16064] team0: Port device team_slave_0 added [ 508.262101][T16064] team0: Port device team_slave_1 added [ 508.337230][T16064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.344415][T16064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.373083][T16064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.415104][T16064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.422304][T16064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.461003][T16064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.502811][T16057] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.510094][T16057] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.517412][T16057] bridge_slave_0: entered allmulticast mode [ 508.525547][T16057] bridge_slave_0: entered promiscuous mode [ 508.576155][T16057] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.583936][T16057] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.591284][T16057] bridge_slave_1: entered allmulticast mode [ 508.599283][T16057] bridge_slave_1: entered promiscuous mode [ 508.705090][T16057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.732075][T16064] hsr_slave_0: entered promiscuous mode [ 508.738603][T16064] hsr_slave_1: entered promiscuous mode [ 508.744851][T16064] debugfs: 'hsr0' already exists in 'hsr' [ 508.750608][T16064] Cannot create hsr debugfs directory [ 508.765523][T16057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.859808][T16057] team0: Port device team_slave_0 added [ 508.888308][T16057] team0: Port device team_slave_1 added [ 508.995750][T16057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.003777][T16057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.036715][T16057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.078079][T16057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.085079][T16057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.111106][T16057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.128941][T16059] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.147605][T10006] Bluetooth: hci11: command tx timeout [ 509.153042][T16059] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.160429][T16059] bridge_slave_0: entered allmulticast mode [ 509.168463][T16059] bridge_slave_0: entered promiscuous mode [ 509.169616][T10006] Bluetooth: hci12: command tx timeout [ 509.211170][T16059] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.218398][T16059] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.226248][T16059] bridge_slave_1: entered allmulticast mode [ 509.233923][T16059] bridge_slave_1: entered promiscuous mode [ 509.345470][T16059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.369029][T16062] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.376292][T16062] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.383771][T16062] bridge_slave_0: entered allmulticast mode [ 509.391505][T16062] bridge_slave_0: entered promiscuous mode [ 509.417202][T16059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.433843][T16062] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.441382][T16062] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.448832][T16062] bridge_slave_1: entered allmulticast mode [ 509.456265][T16062] bridge_slave_1: entered promiscuous mode [ 509.481053][T16057] hsr_slave_0: entered promiscuous mode [ 509.487673][T16057] hsr_slave_1: entered promiscuous mode [ 509.494185][T16057] debugfs: 'hsr0' already exists in 'hsr' [ 509.499952][T16057] Cannot create hsr debugfs directory [ 509.570672][ T5633] Bluetooth: hci14: command tx timeout [ 509.576320][T10006] Bluetooth: hci13: command tx timeout [ 509.606744][T16062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.629334][T16059] team0: Port device team_slave_0 added [ 509.663813][T16062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.674980][T16059] team0: Port device team_slave_1 added [ 509.776374][T16059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.783379][T16059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.824181][T16059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.846677][T16062] team0: Port device team_slave_0 added [ 509.853732][T16059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.860774][T16059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.886757][T16059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.941982][T16062] team0: Port device team_slave_1 added [ 510.003002][T16062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.010195][T16062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.046565][T10006] Bluetooth: hci10: command tx timeout [ 510.053032][T16062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.084838][T16062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.091903][T16062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.117824][T16062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.143199][T16059] hsr_slave_0: entered promiscuous mode [ 510.162214][T16059] hsr_slave_1: entered promiscuous mode [ 510.168835][T16059] debugfs: 'hsr0' already exists in 'hsr' [ 510.175620][T16059] Cannot create hsr debugfs directory [ 510.283038][T16062] hsr_slave_0: entered promiscuous mode [ 510.290889][T16062] hsr_slave_1: entered promiscuous mode [ 510.297392][T16062] debugfs: 'hsr0' already exists in 'hsr' [ 510.303150][T16062] Cannot create hsr debugfs directory [ 511.169654][T10006] Bluetooth: hci11: command tx timeout [ 511.256822][T10006] Bluetooth: hci12: command tx timeout [ 511.649368][T10006] Bluetooth: hci13: command tx timeout [ 511.650527][ T5633] Bluetooth: hci14: command tx timeout [ 512.049407][ T5633] Bluetooth: hci10: command tx timeout [ 513.249455][ T5633] Bluetooth: hci11: command tx timeout [ 513.397279][ T5633] Bluetooth: hci12: command tx timeout [ 513.826147][ T5633] Bluetooth: hci14: command tx timeout [ 513.828915][T10006] Bluetooth: hci13: command tx timeout [ 522.050181][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 536.356084][ T4999] udevd[4999]: worker [10545] /devices/virtual/block/nbd4 timeout; kill it [ 536.365593][ T4999] udevd[4999]: seq 19056 '/devices/virtual/block/nbd4' killed [ 536.773826][ T4964] block nbd4: Possible stuck request ffff888027957000: control (read@0,1024B). Runtime 180 seconds [ 536.785120][ T4964] block nbd4: Possible stuck request ffff8880279571c0: control (read@1024,1024B). Runtime 180 seconds [ 536.796529][ T4964] block nbd4: Possible stuck request ffff888027957380: control (read@2048,1024B). Runtime 180 seconds [ 536.807706][ T4964] block nbd4: Possible stuck request ffff888027957540: control (read@3072,1024B). Runtime 180 seconds [ 564.216666][ T5633] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 564.225286][ T5633] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 564.233641][ T5633] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 564.261614][ T5633] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 564.269581][ T5633] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 564.545627][T16134] lo speed is unknown, defaulting to 1000 [ 565.067670][T16134] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.075425][T16134] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.083076][T16134] bridge_slave_0: entered allmulticast mode [ 565.091379][T16134] bridge_slave_0: entered promiscuous mode [ 565.100129][T16134] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.107337][T16134] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.114910][T16134] bridge_slave_1: entered allmulticast mode [ 565.123349][T16134] bridge_slave_1: entered promiscuous mode [ 565.172984][T16134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.203020][T16134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.300381][T16134] team0: Port device team_slave_0 added [ 565.311226][T16134] team0: Port device team_slave_1 added [ 565.394247][ T5633] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 565.406033][ T5633] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 565.417917][ T5633] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 565.426082][ T5633] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 565.433948][ T5633] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 565.460721][T16134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.484821][T16134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.510782][T16134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.524395][T16134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.534481][T16134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.562357][T16134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.714633][T10006] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 565.751431][T16134] hsr_slave_0: entered promiscuous mode [ 565.759206][T16134] hsr_slave_1: entered promiscuous mode [ 565.766222][T16134] debugfs: 'hsr0' already exists in 'hsr' [ 565.772237][T16134] Cannot create hsr debugfs directory [ 565.782425][T10006] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 565.795118][T10006] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 565.804910][T10006] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 565.825392][T10006] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 565.996853][ T5633] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 566.021089][ T5636] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 566.032777][ T5636] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 566.044039][ T5636] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 566.052546][ T5636] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 566.063072][ T5636] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 566.085011][ T5636] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 566.089065][T16169] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 566.133409][ T5633] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 566.146413][T16169] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 566.382506][T16169] Bluetooth: hci15: command tx timeout [ 566.597143][T16153] lo speed is unknown, defaulting to 1000 [ 566.853689][ T4964] block nbd4: Possible stuck request ffff888027957000: control (read@0,1024B). Runtime 210 seconds [ 566.866786][ T4964] block nbd4: Possible stuck request ffff8880279571c0: control (read@1024,1024B). Runtime 210 seconds [ 566.878622][ T4964] block nbd4: Possible stuck request ffff888027957380: control (read@2048,1024B). Runtime 210 seconds [ 566.894686][ T4964] block nbd4: Possible stuck request ffff888027957540: control (read@3072,1024B). Runtime 210 seconds [ 567.066365][T16158] lo speed is unknown, defaulting to 1000 [ 567.410961][T16165] lo speed is unknown, defaulting to 1000 [ 567.569426][T16169] Bluetooth: hci16: command tx timeout [ 567.775188][T16164] lo speed is unknown, defaulting to 1000 [ 567.891147][T16169] Bluetooth: hci17: command tx timeout [ 568.209282][T16205] Bluetooth: hci18: command tx timeout [ 568.209880][T16204] Bluetooth: hci19: command tx timeout [ 568.298413][T16153] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.305846][T16153] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.313255][T16153] bridge_slave_0: entered allmulticast mode [ 568.321735][T16153] bridge_slave_0: entered promiscuous mode [ 568.359638][T16153] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.366992][T16153] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.375546][T16153] bridge_slave_1: entered allmulticast mode [ 568.385092][T16153] bridge_slave_1: entered promiscuous mode [ 568.449232][T16204] Bluetooth: hci15: command tx timeout [ 568.481575][T16153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.521662][T16153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.655484][T16153] team0: Port device team_slave_0 added [ 568.705876][T16153] team0: Port device team_slave_1 added [ 568.806541][T16153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.813558][T16153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.850202][T16153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.863524][T16153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.870509][T16153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.896410][T16153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.985217][T16158] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.992515][T16158] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.000379][T16158] bridge_slave_0: entered allmulticast mode [ 569.008282][T16158] bridge_slave_0: entered promiscuous mode [ 569.036642][T16158] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.044071][T16158] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.051651][T16158] bridge_slave_1: entered allmulticast mode [ 569.061259][T16158] bridge_slave_1: entered promiscuous mode [ 569.141357][T16153] hsr_slave_0: entered promiscuous mode [ 569.148029][T16153] hsr_slave_1: entered promiscuous mode [ 569.157391][T16153] debugfs: 'hsr0' already exists in 'hsr' [ 569.163391][T16153] Cannot create hsr debugfs directory [ 569.193629][T16158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.206350][T16158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.271983][T16158] team0: Port device team_slave_0 added [ 569.316559][T16158] team0: Port device team_slave_1 added [ 569.412692][T16158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.419720][T16158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.445741][T16158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.504819][T16158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.522317][T16158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.548993][T16158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.560478][T16165] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.567665][T16165] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.575082][T16165] bridge_slave_0: entered allmulticast mode [ 569.582676][T16165] bridge_slave_0: entered promiscuous mode [ 569.616393][T16165] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.629827][T16165] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.637276][T16165] bridge_slave_1: entered allmulticast mode [ 569.646237][T16165] bridge_slave_1: entered promiscuous mode [ 569.652429][T16204] Bluetooth: hci16: command tx timeout [ 569.802012][T16165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.817987][T16158] hsr_slave_0: entered promiscuous mode [ 569.824613][T16158] hsr_slave_1: entered promiscuous mode [ 569.831055][T16158] debugfs: 'hsr0' already exists in 'hsr' [ 569.836799][T16158] Cannot create hsr debugfs directory [ 569.870127][T16165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.942083][T16165] team0: Port device team_slave_0 added [ 569.977456][T16204] Bluetooth: hci17: command tx timeout [ 570.008612][T16165] team0: Port device team_slave_1 added [ 570.092742][T16165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.099948][T16165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.125942][T16165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.156683][T16165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.163951][T16165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.200780][T16165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.211701][T16205] Bluetooth: hci6: command 0x0406 tx timeout [ 570.211809][T16205] Bluetooth: hci8: command 0x0406 tx timeout [ 570.228073][T16204] Bluetooth: hci5: command 0x0406 tx timeout [ 570.266843][T16164] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.274030][T16164] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.282441][T16164] bridge_slave_0: entered allmulticast mode [ 570.289762][T16169] Bluetooth: hci19: command tx timeout [ 570.296099][T16164] bridge_slave_0: entered promiscuous mode [ 570.313929][ T5633] Bluetooth: hci7: command 0x0406 tx timeout [ 570.320322][T16169] Bluetooth: hci9: command 0x0406 tx timeout [ 570.320380][T16169] Bluetooth: hci18: command tx timeout [ 570.340067][T16164] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.350293][T16164] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.367765][T16164] bridge_slave_1: entered allmulticast mode [ 570.382381][T16164] bridge_slave_1: entered promiscuous mode [ 570.482773][T16164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.522137][T16165] hsr_slave_0: entered promiscuous mode [ 570.530570][T16165] hsr_slave_1: entered promiscuous mode [ 570.537277][T16165] debugfs: 'hsr0' already exists in 'hsr' [ 570.543581][T16165] Cannot create hsr debugfs directory [ 570.551022][ T5641] Bluetooth: hci15: command tx timeout [ 570.564119][T16164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.633680][T16164] team0: Port device team_slave_0 added [ 570.657524][T16164] team0: Port device team_slave_1 added [ 570.704615][T16164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.711621][T16164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.737529][T16164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.778993][T16164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.786007][T16164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.811932][T16164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.900192][T16164] hsr_slave_0: entered promiscuous mode [ 570.906853][T16164] hsr_slave_1: entered promiscuous mode [ 570.913262][T16164] debugfs: 'hsr0' already exists in 'hsr' [ 570.919012][T16164] Cannot create hsr debugfs directory [ 571.756171][ T5641] Bluetooth: hci16: command tx timeout [ 572.077521][ T5641] Bluetooth: hci17: command tx timeout [ 572.401010][ T5641] Bluetooth: hci18: command tx timeout [ 572.408170][ T5641] Bluetooth: hci19: command tx timeout [ 572.614813][ T5641] Bluetooth: hci15: command tx timeout [ 573.809327][ T5641] Bluetooth: hci16: command tx timeout [ 574.130480][ T5641] Bluetooth: hci17: command tx timeout [ 574.449324][ T5641] Bluetooth: hci19: command tx timeout [ 574.530086][ T30] INFO: task syz.4.2451:15880 blocked for more than 143 seconds. [ 574.537996][ T30] Not tainted syzkaller #0 [ 574.543273][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.552645][ T30] task:syz.4.2451 state:D stack:25272 pid:15880 tgid:15879 ppid:5650 task_flags:0x480140 flags:0x00080002 [ 574.565058][ T30] Call Trace: [ 574.568391][ T30] [ 574.571511][ T30] __schedule+0x1821/0x5740 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 574.576091][ T30] ? __pfx___schedule+0x10/0x10 [ 574.580676][ T5641] Bluetooth: hci18: command tx timeout [ 574.582329][ T30] ? schedule+0x90/0x360 [ 574.598051][ T30] schedule+0x164/0x360 [ 574.602297][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 574.608020][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 574.614153][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 574.620533][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 574.626690][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 574.632908][ T30] nbd_set_size+0x454/0x680 [ 574.637577][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 574.642675][ T30] ? nla_memcpy+0x5b/0xc0 [ 574.647063][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 574.662621][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 574.668456][ T30] ? rcu_is_watching+0x15/0xb0 [ 574.673281][ T30] ? trace_kmalloc+0x2a/0xf0 [ 574.702392][ T30] ? __nla_parse+0x40/0x60 [ 574.706942][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 574.713372][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 574.719768][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 574.725373][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 574.731507][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 574.736499][ T30] genl_rcv_msg+0x61c/0x7a0 [ 574.741072][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.746154][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 574.752627][ T30] netlink_rcv_skb+0x232/0x4b0 [ 574.757446][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.762526][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.767875][ T30] ? down_read+0x270/0x2e0 [ 574.772387][ T30] ? genl_rcv+0xd/0x40 [ 574.776517][ T30] genl_rcv+0x28/0x40 [ 574.780574][ T30] netlink_unicast+0x75c/0x8e0 [ 574.785403][ T30] netlink_sendmsg+0x813/0xb40 [ 574.790227][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.821403][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 574.826478][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.831831][ T30] ____sys_sendmsg+0x972/0x9f0 [ 574.836673][ T30] ? __might_fault+0xaf/0x130 [ 574.841593][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.846937][ T30] ? import_iovec+0x73/0xa0 [ 574.851504][ T30] ___sys_sendmsg+0x2a5/0x360 [ 574.856268][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 574.861274][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.866551][ T30] ? futex_wake+0x4ac/0x580 [ 574.871177][ T30] ? __fget_files+0x2a/0x420 [ 574.875847][ T30] ? __fget_files+0x3a0/0x420 [ 574.880588][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 574.885577][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.891088][ T30] ? rcu_is_watching+0x15/0xb0 [ 574.895881][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.901958][ T30] do_syscall_64+0x174/0x580 [ 574.906561][ T30] ? trace_irq_disable+0x3b/0x140 [ 574.924078][ T30] ? clear_bhb_loop+0x40/0x90 [ 574.928839][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.934760][ T30] RIP: 0033:0x7f718cd9ce59 [ 574.939218][ T30] RSP: 002b:00007f718dc8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.947674][ T30] RAX: ffffffffffffffda RBX: 00007f718d015fa0 RCX: 00007f718cd9ce59 [ 574.955678][ T30] RDX: 0000000024000004 RSI: 00002000000007c0 RDI: 0000000000000006 [ 574.963662][ T30] RBP: 00007f718ce32d6f R08: 0000000000000000 R09: 0000000000000000 [ 574.971647][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.979631][ T30] R13: 00007f718d016038 R14: 00007f718d015fa0 R15: 00007ffff83bd418 [ 574.987715][ T30] [ 574.990768][ T30] INFO: task syz.2.2458:15902 blocked for more than 143 seconds. [ 574.998514][ T30] Not tainted syzkaller #0 [ 575.003455][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.012130][ T30] task:syz.2.2458 state:D stack:26328 pid:15902 tgid:15901 ppid:5637 task_flags:0x400140 flags:0x00080002 [ 575.034811][ T30] Call Trace: [ 575.038935][ T30] [ 575.041921][ T30] __schedule+0x1821/0x5740 [ 575.046469][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 575.051441][ T30] ? __pfx___schedule+0x10/0x10 [ 575.056603][ T30] ? schedule+0x90/0x360 [ 575.060884][ T30] schedule+0x164/0x360 [ 575.065056][ T30] schedule_preempt_disabled+0x13/0x30 [ 575.070528][ T30] __mutex_lock+0x7f7/0x1550 [ 575.075129][ T30] ? kernel_text_address+0xa5/0xe0 [ 575.080277][ T30] ? __mutex_lock+0x608/0x1550 [ 575.085056][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 575.089759][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 575.094834][ T30] ? stack_trace_save+0xa9/0x100 [ 575.099842][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 575.104827][ T30] ? radix_tree_lookup+0x240/0x290 [ 575.109990][ T30] genl_rcv_msg+0x10b/0x7a0 [ 575.114548][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.119637][ T30] netlink_rcv_skb+0x232/0x4b0 [ 575.124445][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.129506][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.146858][ T30] ? down_read+0x270/0x2e0 [ 575.151978][ T30] ? genl_rcv+0xd/0x40 [ 575.156139][ T30] genl_rcv+0x28/0x40 [ 575.160394][ T30] netlink_unicast+0x75c/0x8e0 [ 575.165253][ T30] netlink_sendmsg+0x813/0xb40 [ 575.171631][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.177030][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 575.182493][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 575.187832][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.193245][ T30] __sys_sendto+0x672/0x710 [ 575.197783][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 575.203085][ T30] ? exc_page_fault+0x6a/0xc0 [ 575.207835][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 575.213630][ T30] __x64_sys_sendto+0xde/0x100 [ 575.218458][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.225011][ T30] do_syscall_64+0x174/0x580 [ 575.229655][ T30] ? trace_irq_disable+0x3b/0x140 [ 575.234695][ T30] ? clear_bhb_loop+0x40/0x90 [ 575.239388][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.255406][ T30] RIP: 0033:0x7f1e5c55d68e [ 575.259924][ T30] RSP: 002b:00007f1e5d42be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 575.268393][ T30] RAX: ffffffffffffffda RBX: 00007f1e5d42d6c0 RCX: 00007f1e5c55d68e [ 575.276404][ T30] RDX: 0000000000000020 RSI: 00007f1e5d42c000 RDI: 0000000000000008 [ 575.284454][ T30] RBP: 0000000000000000 R08: 00007f1e5d42bf04 R09: 000000000000000c [ 575.292466][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 575.300487][ T30] R13: 00007f1e5d42bf58 R14: 00007f1e5d42c000 R15: 0000000000000000 [ 575.308523][ T30] [ 575.311598][ T30] INFO: task syz.2.2458:15904 blocked for more than 144 seconds. [ 575.319357][ T30] Not tainted syzkaller #0 [ 575.324321][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.333014][ T30] task:syz.2.2458 state:D stack:28344 pid:15904 tgid:15901 ppid:5637 task_flags:0x400040 flags:0x00080002 [ 575.344996][ T30] Call Trace: [ 575.348309][ T30] [ 575.351281][ T30] __schedule+0x1821/0x5740 [ 575.368081][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 575.373117][ T30] ? __pfx___schedule+0x10/0x10 [ 575.377994][ T30] ? schedule+0x90/0x360 [ 575.382270][ T30] schedule+0x164/0x360 [ 575.386543][ T30] schedule_preempt_disabled+0x13/0x30 [ 575.392011][ T30] __mutex_lock+0x7f7/0x1550 [ 575.396620][ T30] ? kernel_text_address+0xa5/0xe0 [ 575.401751][ T30] ? __mutex_lock+0x608/0x1550 [ 575.406532][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 575.411246][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 575.416322][ T30] ? stack_trace_save+0xa9/0x100 [ 575.421311][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 575.426297][ T30] ? radix_tree_lookup+0x240/0x290 [ 575.431465][ T30] genl_rcv_msg+0x10b/0x7a0 [ 575.436025][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.441124][ T30] netlink_rcv_skb+0x232/0x4b0 [ 575.445972][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.451034][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.456364][ T30] ? down_read+0x270/0x2e0 [ 575.460811][ T30] ? genl_rcv+0xd/0x40 [ 575.464909][ T30] genl_rcv+0x28/0x40 [ 575.480473][ T30] netlink_unicast+0x75c/0x8e0 [ 575.485324][ T30] netlink_sendmsg+0x813/0xb40 [ 575.490128][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.495454][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 575.500452][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 575.505783][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.511083][ T30] __sys_sendto+0x672/0x710 [ 575.515610][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 575.520671][ T30] ? fd_install+0x94/0x3d0 [ 575.525106][ T30] ? fd_install+0x306/0x3d0 [ 575.529652][ T30] __x64_sys_sendto+0xde/0x100 [ 575.534451][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.540539][ T30] do_syscall_64+0x174/0x580 [ 575.545169][ T30] ? trace_irq_disable+0x3b/0x140 [ 575.550233][ T30] ? clear_bhb_loop+0x40/0x90 [ 575.554956][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.560894][ T30] RIP: 0033:0x7f1e5c55d68e [ 575.565348][ T30] RSP: 002b:00007f1e5d40ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 575.573793][ T30] RAX: ffffffffffffffda RBX: 00007f1e5d40c6c0 RCX: 00007f1e5c55d68e [ 575.592519][ T30] RDX: 0000000000000020 RSI: 00007f1e5d40b000 RDI: 0000000000000009 [ 575.600574][ T30] RBP: 0000000000000000 R08: 00007f1e5d40af04 R09: 000000000000000c [ 575.608591][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 575.616613][ T30] R13: 00007f1e5d40af58 R14: 00007f1e5d40b000 R15: 0000000000000000 [ 575.624635][ T30] [ 575.627702][ T30] INFO: task syz.1.2459:15906 blocked for more than 144 seconds. [ 575.635446][ T30] Not tainted syzkaller #0 [ 575.640395][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.649069][ T30] task:syz.1.2459 state:D stack:27592 pid:15906 tgid:15905 ppid:5632 task_flags:0x400140 flags:0x00080002 [ 575.661196][ T30] Call Trace: [ 575.664506][ T30] [ 575.667462][ T30] __schedule+0x1821/0x5740 [ 575.671985][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 575.676983][ T30] ? __pfx___schedule+0x10/0x10 [ 575.681855][ T30] ? schedule+0x90/0x360 [ 575.686113][ T30] schedule+0x164/0x360 [ 575.690288][ T30] schedule_preempt_disabled+0x13/0x30 [ 575.710105][ T30] __mutex_lock+0x7f7/0x1550 [ 575.714780][ T30] ? preempt_schedule_common+0x82/0xd0 [ 575.720271][ T30] ? __mutex_lock+0x608/0x1550 [ 575.725162][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 575.730876][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 575.736149][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 575.741463][ T30] ? radix_tree_lookup+0x240/0x290 [ 575.746690][ T30] genl_rcv_msg+0x10b/0x7a0 [ 575.751780][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.756858][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 575.762606][ T30] netlink_rcv_skb+0x232/0x4b0 [ 575.767437][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.772946][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.778335][ T30] ? down_read+0x270/0x2e0 [ 575.783308][ T30] ? genl_rcv+0xd/0x40 [ 575.787457][ T30] genl_rcv+0x28/0x40 [ 575.791572][ T30] netlink_unicast+0x75c/0x8e0 [ 575.796387][ T30] netlink_sendmsg+0x813/0xb40 [ 575.802339][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.807714][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 575.815868][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 575.821424][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.826793][ T30] __sys_sendto+0x672/0x710 [ 575.831426][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 575.836667][ T30] ? exc_page_fault+0x6a/0xc0 [ 575.842420][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 575.847794][ T30] __x64_sys_sendto+0xde/0x100 [ 575.852870][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.859050][ T30] do_syscall_64+0x174/0x580 [ 575.863950][ T30] ? trace_irq_disable+0x3b/0x140 [ 575.869082][ T30] ? clear_bhb_loop+0x40/0x90 [ 575.874554][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.880799][ T30] RIP: 0033:0x7f4f7cb5d68e [ 575.885326][ T30] RSP: 002b:00007f4f7adf4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 575.894102][ T30] RAX: ffffffffffffffda RBX: 00007f4f7adf66c0 RCX: 00007f4f7cb5d68e [ 575.902553][ T30] RDX: 0000000000000020 RSI: 00007f4f7adf5000 RDI: 0000000000000006 [ 575.910683][ T30] RBP: 0000000000000000 R08: 00007f4f7adf4f04 R09: 000000000000000c [ 575.918684][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 575.927404][ T30] R13: 00007f4f7adf4f58 R14: 00007f4f7adf5000 R15: 0000000000000000 [ 575.935955][ T30] [ 575.939357][ T30] INFO: task syz.1.2459:15908 blocked for more than 144 seconds. [ 575.947138][ T30] Not tainted syzkaller #0 [ 575.952469][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.961652][ T30] task:syz.1.2459 state:D stack:27480 pid:15908 tgid:15905 ppid:5632 task_flags:0x400040 flags:0x00080002 [ 575.977681][ T30] Call Trace: [ 575.981113][ T30] [ 575.984091][ T30] __schedule+0x1821/0x5740 [ 575.988642][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 575.993719][ T30] ? __pfx___schedule+0x10/0x10 [ 575.998608][ T30] ? schedule+0x90/0x360 [ 576.002996][ T30] schedule+0x164/0x360 [ 576.007186][ T30] schedule_preempt_disabled+0x13/0x30 [ 576.012862][ T30] __mutex_lock+0x7f7/0x1550 [ 576.017526][ T30] ? __mutex_lock+0x608/0x1550 [ 576.022732][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 576.027446][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 576.032767][ T30] ? radix_tree_lookup+0x240/0x290 [ 576.037959][ T30] genl_rcv_msg+0x10b/0x7a0 [ 576.042757][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.047834][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 576.054262][ T30] netlink_rcv_skb+0x232/0x4b0 [ 576.059083][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.064380][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 576.069878][ T30] ? down_read+0x270/0x2e0 [ 576.074358][ T30] ? genl_rcv+0xd/0x40 [ 576.078478][ T30] genl_rcv+0x28/0x40 [ 576.083430][ T30] netlink_unicast+0x75c/0x8e0 [ 576.088286][ T30] netlink_sendmsg+0x813/0xb40 [ 576.093272][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.098638][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 576.103924][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 576.112309][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.117677][ T30] __sys_sendto+0x672/0x710 [ 576.122426][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 576.127512][ T30] ? fd_install+0x94/0x3d0 [ 576.132547][ T30] ? fd_install+0x306/0x3d0 [ 576.137132][ T30] __x64_sys_sendto+0xde/0x100 [ 576.142514][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.148619][ T30] do_syscall_64+0x174/0x580 [ 576.153406][ T30] ? trace_irq_disable+0x3b/0x140 [ 576.158513][ T30] ? clear_bhb_loop+0x40/0x90 [ 576.163334][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.169684][ T30] RIP: 0033:0x7f4f7cb5d68e [ 576.174140][ T30] RSP: 002b:00007f4f7add3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 576.182695][ T30] RAX: ffffffffffffffda RBX: 00007f4f7add56c0 RCX: 00007f4f7cb5d68e [ 576.190866][ T30] RDX: 0000000000000024 RSI: 00007f4f7add4000 RDI: 0000000000000006 [ 576.198896][ T30] RBP: 0000000000000000 R08: 00007f4f7add3f04 R09: 000000000000000c [ 576.207320][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 576.215841][ T30] R13: 00007f4f7add3f58 R14: 00007f4f7add4000 R15: 0000000000000000 [ 576.224887][ T30] [ 576.227951][ T30] INFO: task syz.3.2461:15917 blocked for more than 145 seconds. [ 576.236174][ T30] Not tainted syzkaller #0 [ 576.241256][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.250262][ T30] task:syz.3.2461 state:D stack:28344 pid:15917 tgid:15916 ppid:5647 task_flags:0x400140 flags:0x00080002 [ 576.262557][ T30] Call Trace: [ 576.265879][ T30] [ 576.268823][ T30] __schedule+0x1821/0x5740 [ 576.273611][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 576.278658][ T30] ? __pfx___schedule+0x10/0x10 [ 576.283845][ T30] ? schedule+0x90/0x360 [ 576.288177][ T30] schedule+0x164/0x360 [ 576.293226][ T30] schedule_preempt_disabled+0x13/0x30 [ 576.298770][ T30] __mutex_lock+0x7f7/0x1550 [ 576.303649][ T30] ? kernel_text_address+0xa5/0xe0 [ 576.308847][ T30] ? __mutex_lock+0x608/0x1550 [ 576.313858][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 576.318614][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 576.324209][ T30] ? stack_trace_save+0xa9/0x100 [ 576.329358][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 576.334376][ T30] ? radix_tree_lookup+0x240/0x290 [ 576.339636][ T30] genl_rcv_msg+0x10b/0x7a0 [ 576.344196][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.349938][ T30] netlink_rcv_skb+0x232/0x4b0 [ 576.354778][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.360045][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 576.365413][ T30] ? down_read+0x270/0x2e0 [ 576.370080][ T30] ? genl_rcv+0xd/0x40 [ 576.374238][ T30] genl_rcv+0x28/0x40 [ 576.378277][ T30] netlink_unicast+0x75c/0x8e0 [ 576.383506][ T30] netlink_sendmsg+0x813/0xb40 [ 576.388335][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.393898][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 576.398913][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 576.404349][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.410064][ T30] __sys_sendto+0x672/0x710 [ 576.414603][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 576.420137][ T30] ? exc_page_fault+0x6a/0xc0 [ 576.424854][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 576.430540][ T30] __x64_sys_sendto+0xde/0x100 [ 576.435353][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.441876][ T30] do_syscall_64+0x174/0x580 [ 576.446519][ T30] ? trace_irq_disable+0x3b/0x140 [ 576.452084][ T30] ? clear_bhb_loop+0x40/0x90 [ 576.456864][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.462882][ T30] RIP: 0033:0x7f994ed5d68e [ 576.467346][ T30] RSP: 002b:00007f994fcd7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 576.476455][ T30] RAX: ffffffffffffffda RBX: 00007f994fcd96c0 RCX: 00007f994ed5d68e [ 576.484702][ T30] RDX: 0000000000000020 RSI: 00007f994fcd8000 RDI: 0000000000000007 [ 576.492915][ T30] RBP: 0000000000000000 R08: 00007f994fcd7f04 R09: 000000000000000c [ 576.501462][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 576.509669][ T30] R13: 00007f994fcd7f58 R14: 00007f994fcd8000 R15: 0000000000000000 [ 576.517750][ T30] [ 576.521001][ T30] INFO: task syz.3.2461:15925 blocked for more than 145 seconds. [ 576.528799][ T30] Not tainted syzkaller #0 [ 576.535123][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.544229][ T30] task:syz.3.2461 state:D stack:26880 pid:15925 tgid:15916 ppid:5647 task_flags:0x400140 flags:0x00080002 [ 576.556539][ T30] Call Trace: [ 576.560156][ T30] [ 576.563102][ T30] __schedule+0x1821/0x5740 [ 576.567623][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 576.572890][ T30] ? __pfx___schedule+0x10/0x10 [ 576.577813][ T30] ? schedule+0x90/0x360 [ 576.582310][ T30] schedule+0x164/0x360 [ 576.586544][ T30] schedule_preempt_disabled+0x13/0x30 [ 576.592532][ T30] __mutex_lock+0x7f7/0x1550 [ 576.597181][ T30] ? kernel_text_address+0xa5/0xe0 [ 576.602430][ T30] ? __mutex_lock+0x608/0x1550 [ 576.607239][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 576.612425][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 576.617523][ T30] ? stack_trace_save+0xa9/0x100 [ 576.622936][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 576.627933][ T30] ? radix_tree_lookup+0x240/0x290 [ 576.633326][ T30] genl_rcv_msg+0x10b/0x7a0 [ 576.637958][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.643143][ T30] netlink_rcv_skb+0x232/0x4b0 [ 576.647971][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.653840][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 576.659456][ T30] ? down_read+0x270/0x2e0 [ 576.663937][ T30] ? genl_rcv+0xd/0x40 [ 576.668045][ T30] genl_rcv+0x28/0x40 [ 576.672322][ T30] netlink_unicast+0x75c/0x8e0 [ 576.677160][ T30] netlink_sendmsg+0x813/0xb40 [ 576.682344][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.687678][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 576.693042][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 576.698417][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.703804][ T30] __sys_sendto+0x672/0x710 [ 576.708355][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 576.713919][ T30] ? fd_install+0x94/0x3d0 [ 576.718379][ T30] ? fd_install+0x306/0x3d0 [ 576.723194][ T30] __x64_sys_sendto+0xde/0x100 [ 576.728025][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.734327][ T30] do_syscall_64+0x174/0x580 [ 576.738985][ T30] ? trace_irq_disable+0x3b/0x140 [ 576.744614][ T30] ? clear_bhb_loop+0x40/0x90 [ 576.749495][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.755450][ T30] RIP: 0033:0x7f994ed5d68e [ 576.760357][ T30] RSP: 002b:00007f994fcb6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 576.768855][ T30] RAX: ffffffffffffffda RBX: 00007f994fcb86c0 RCX: 00007f994ed5d68e [ 576.777486][ T30] RDX: 0000000000000020 RSI: 00007f994fcb7000 RDI: 000000000000000b [ 576.785626][ T30] RBP: 0000000000000000 R08: 00007f994fcb6f04 R09: 000000000000000c [ 576.793826][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 576.802288][ T30] R13: 00007f994fcb6f58 R14: 00007f994fcb7000 R15: 0000000000000000 [ 576.810498][ T30] [ 576.813607][ T30] INFO: task syz.0.2464:15930 blocked for more than 145 seconds. [ 576.821718][ T30] Not tainted syzkaller #0 [ 576.826687][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.835900][ T30] task:syz.0.2464 state:D stack:27784 pid:15930 tgid:15929 ppid:5638 task_flags:0x400140 flags:0x00080002 [ 576.848031][ T30] Call Trace: [ 576.851582][ T30] [ 576.854666][ T30] __schedule+0x1821/0x5740 [ 576.859727][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 576.864731][ T30] ? __pfx___schedule+0x10/0x10 [ 576.870021][ T30] ? schedule+0x90/0x360 [ 576.874349][ T30] schedule+0x164/0x360 [ 576.878544][ T30] schedule_preempt_disabled+0x13/0x30 [ 576.884149][ T30] __mutex_lock+0x7f7/0x1550 [ 576.888790][ T30] ? __mutex_lock+0x608/0x1550 [ 576.894075][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 576.898839][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 576.904016][ T30] ? radix_tree_lookup+0x240/0x290 [ 576.909393][ T30] genl_rcv_msg+0x10b/0x7a0 [ 576.913998][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.919085][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 576.924949][ T30] netlink_rcv_skb+0x232/0x4b0 [ 576.930169][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.935330][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 576.940869][ T30] ? down_read+0x270/0x2e0 [ 576.945390][ T30] ? genl_rcv+0xd/0x40 [ 576.949924][ T30] genl_rcv+0x28/0x40 [ 576.953947][ T30] netlink_unicast+0x75c/0x8e0 [ 576.958729][ T30] netlink_sendmsg+0x813/0xb40 [ 576.963844][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.969323][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 576.974363][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 576.980454][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.985898][ T30] __sys_sendto+0x672/0x710 [ 576.990618][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 576.995787][ T30] ? exc_page_fault+0x6a/0xc0 [ 577.000593][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 577.006025][ T30] __x64_sys_sendto+0xde/0x100 [ 577.016899][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.023200][ T30] do_syscall_64+0x174/0x580 [ 577.027884][ T30] ? trace_irq_disable+0x3b/0x140 [ 577.033138][ T30] ? clear_bhb_loop+0x40/0x90 [ 577.037890][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.044203][ T30] RIP: 0033:0x7f26ce35d68e [ 577.048641][ T30] RSP: 002b:00007f26cf1a1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 577.057351][ T30] RAX: ffffffffffffffda RBX: 00007f26cf1a36c0 RCX: 00007f26ce35d68e [ 577.065544][ T30] RDX: 0000000000000020 RSI: 00007f26cf1a2000 RDI: 0000000000000007 [ 577.074021][ T30] RBP: 0000000000000000 R08: 00007f26cf1a1f04 R09: 000000000000000c [ 577.082244][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 577.091531][ T30] R13: 00007f26cf1a1f58 R14: 00007f26cf1a2000 R15: 0000000000000000 [ 577.099999][ T30] [ 577.103071][ T30] INFO: task syz.0.2464:15932 blocked for more than 145 seconds. [ 577.111086][ T30] Not tainted syzkaller #0 [ 577.116073][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.124860][ T30] task:syz.0.2464 state:D stack:27360 pid:15932 tgid:15929 ppid:5638 task_flags:0x400140 flags:0x00080002 [ 577.137373][ T30] Call Trace: [ 577.140768][ T30] [ 577.143734][ T30] __schedule+0x1821/0x5740 [ 577.148281][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 577.153420][ T30] ? __pfx___schedule+0x10/0x10 [ 577.158358][ T30] ? schedule+0x90/0x360 [ 577.163153][ T30] schedule+0x164/0x360 [ 577.167525][ T30] schedule_preempt_disabled+0x13/0x30 [ 577.173247][ T30] __mutex_lock+0x7f7/0x1550 [ 577.177937][ T30] ? __mutex_lock+0x608/0x1550 [ 577.182868][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 577.187602][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 577.193137][ T30] ? radix_tree_lookup+0x240/0x290 [ 577.198302][ T30] genl_rcv_msg+0x10b/0x7a0 [ 577.203139][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.208272][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 577.213866][ T30] netlink_rcv_skb+0x232/0x4b0 [ 577.218696][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.224144][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.229684][ T30] ? down_read+0x270/0x2e0 [ 577.234161][ T30] ? genl_rcv+0xd/0x40 [ 577.238246][ T30] genl_rcv+0x28/0x40 [ 577.242452][ T30] netlink_unicast+0x75c/0x8e0 [ 577.247297][ T30] netlink_sendmsg+0x813/0xb40 [ 577.252718][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.258109][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 577.263187][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 577.268672][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.274221][ T30] __sys_sendto+0x672/0x710 [ 577.278790][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 577.284328][ T30] ? exc_page_fault+0x6a/0xc0 [ 577.289057][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 577.294634][ T30] __x64_sys_sendto+0xde/0x100 [ 577.299573][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.305687][ T30] do_syscall_64+0x174/0x580 [ 577.310958][ T30] ? trace_irq_disable+0x3b/0x140 [ 577.316084][ T30] ? clear_bhb_loop+0x40/0x90 [ 577.320905][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.326834][ T30] RIP: 0033:0x7f26ce35d68e [ 577.331554][ T30] RSP: 002b:00007f26cf180e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 577.340396][ T30] RAX: ffffffffffffffda RBX: 00007f26cf1826c0 RCX: 00007f26ce35d68e [ 577.348404][ T30] RDX: 0000000000000020 RSI: 00007f26cf181000 RDI: 0000000000000007 [ 577.356646][ T30] RBP: 0000000000000000 R08: 00007f26cf180f04 R09: 000000000000000c [ 577.364697][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 577.373287][ T30] R13: 00007f26cf180f58 R14: 00007f26cf181000 R15: 0000000000000000 [ 577.381542][ T30] [ 577.384706][ T30] [ 577.384706][ T30] Showing all locks held in the system: [ 577.392922][ T30] 1 lock held by khungtaskd/30: [ 577.397827][ T30] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 577.408264][ T30] 2 locks held by getty/5387: [ 577.413143][ T30] #0: ffff88803656a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 577.423369][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 577.434417][ T30] 7 locks held by kworker/u8:11/6364: [ 577.440004][ T30] 1 lock held by udevd/10545: [ 577.444724][ T30] #0: ffff88802784e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 577.454431][ T30] 6 locks held by syz.4.2451/15880: [ 577.460188][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.468480][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.477882][ T30] #2: ffff88802780fa60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 577.488456][ T30] #3: ffff888027762288 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 577.498510][ T30] #4: ffff888027761c50 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 577.510890][ T30] #5: ffff888027761c88 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 577.523939][ T30] 2 locks held by syz.2.2458/15902: [ 577.529540][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.537844][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.546968][ T30] 2 locks held by syz.2.2458/15904: [ 577.552666][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.561039][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.570487][ T30] 2 locks held by syz.1.2459/15906: [ 577.575811][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.584470][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.593729][ T30] 2 locks held by syz.1.2459/15908: [ 577.598983][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.607475][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.617041][ T30] 2 locks held by syz.3.2461/15917: [ 577.622450][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.630896][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.640483][ T30] 2 locks held by syz.3.2461/15925: [ 577.645718][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.654341][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.663501][ T30] 2 locks held by syz.0.2464/15930: [ 577.668744][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.677474][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.686858][ T30] 2 locks held by syz.0.2464/15932: [ 577.692240][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.700936][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.710283][ T30] 2 locks held by syz-executor/15941: [ 577.715708][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.724155][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.733784][ T30] 2 locks held by syz-executor/15965: [ 577.739258][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.747519][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.756925][ T30] 2 locks held by syz-executor/15967: [ 577.762419][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.770842][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.780105][ T30] 2 locks held by syz-executor/15971: [ 577.785523][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.794281][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.803541][ T30] 2 locks held by syz-executor/15973: [ 577.808963][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.817494][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.827125][ T30] 2 locks held by syz-executor/16036: [ 577.832628][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.841047][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.850561][ T30] 2 locks held by syz-executor/16057: [ 577.855945][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.864513][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.873697][ T30] 2 locks held by syz-executor/16059: [ 577.879094][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.887887][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.897127][ T30] 2 locks held by syz-executor/16062: [ 577.902705][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.911342][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.920543][ T30] 2 locks held by syz-executor/16064: [ 577.925985][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.934466][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.944067][ T30] 2 locks held by syz-executor/16134: [ 577.949660][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.957956][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.967224][ T30] 2 locks held by syz-executor/16153: [ 577.973389][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.981795][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.991020][ T30] 2 locks held by syz-executor/16158: [ 577.996426][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.005125][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.014344][ T30] 2 locks held by syz-executor/16164: [ 578.019903][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.028134][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.037585][ T30] 2 locks held by syz-executor/16165: [ 578.043230][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.057103][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.066691][ T30] [ 578.069070][ T30] ============================================= [ 578.069070][ T30] [ 578.077616][ T30] NMI backtrace for cpu 1 [ 578.077636][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 578.077660][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 578.077674][ T30] Call Trace: [ 578.077682][ T30] [ 578.077691][ T30] dump_stack_lvl+0xe8/0x150 [ 578.077722][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 578.077755][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 578.077808][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 578.077843][ T30] sys_info+0x135/0x170 [ 578.077869][ T30] watchdog+0xfd3/0x1030 [ 578.077917][ T30] ? watchdog+0x1c9/0x1030 [ 578.077956][ T30] kthread+0x389/0x470 [ 578.077984][ T30] ? __pfx_watchdog+0x10/0x10 [ 578.078011][ T30] ? __pfx_kthread+0x10/0x10 [ 578.078039][ T30] ret_from_fork+0x514/0xb70 [ 578.078076][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 578.078099][ T30] ? __switch_to+0xc79/0x1410 [ 578.078131][ T30] ? __pfx_kthread+0x10/0x10 [ 578.078160][ T30] ret_from_fork_asm+0x1a/0x30 [ 578.078203][ T30] [ 578.078211][ T30] Sending NMI from CPU 1 to CPUs 0: [ 578.191945][ C0] NMI backtrace for cpu 0 [ 578.191964][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 578.191984][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 578.191995][ C0] RIP: 0010:lock_is_held_type+0xe4/0x150 [ 578.192022][ C0] Code: 74 12 31 c0 f6 43 22 03 0f 95 c0 31 db 39 c5 0f 94 c3 eb 05 bb 01 00 00 00 48 c7 c7 f3 39 22 8e e8 b1 1a 00 00 b8 ff ff ff ff <65> 0f c1 05 64 dd 8f 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 [ 578.192038][ C0] RSP: 0018:ffffc90000007d58 EFLAGS: 00000002 [ 578.192054][ C0] RAX: 00000000ffffffff RBX: 0000000000000001 RCX: 0000000080010002 [ 578.192066][ C0] RDX: ffffffff8e692ec0 RSI: ffffffff8e2239f3 RDI: ffffffff8c28b9e0 [ 578.192080][ C0] RBP: 00000000ffffffff R08: ffffffff9a65fc53 R09: 1ffffffff34cbf8a [ 578.192093][ C0] R10: dffffc0000000000 R11: fffffbfff34cbf8b R12: 0000000000000046 [ 578.192105][ C0] R13: ffffffff8e692ec0 R14: ffff8880b8628298 R15: 0000000000000000 [ 578.192118][ C0] FS: 0000000000000000(0000) GS:ffff88812528b000(0000) knlGS:0000000000000000 [ 578.192133][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.192145][ C0] CR2: 000056432505e168 CR3: 000000007e194000 CR4: 00000000003526f0 [ 578.192160][ C0] Call Trace: [ 578.192167][ C0] [ 578.192177][ C0] __remove_hrtimer+0x82/0x3e0 [ 578.192207][ C0] __hrtimer_run_queues+0x299/0xa20 [ 578.192239][ C0] hrtimer_interrupt+0x44b/0x950 [ 578.192274][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 578.192299][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 578.192323][ C0] [ 578.192329][ C0] [ 578.192335][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 578.192355][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 578.192373][ C0] Code: fb 7c 02 e9 c3 f8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 b1 1f 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 578.192388][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242 [ 578.192402][ C0] RAX: 0000000000c68ca1 RBX: ffffffff819a845a RCX: 0000000080000001 [ 578.192415][ C0] RDX: 0000000000000001 RSI: ffffffff8dfafc25 RDI: ffffffff8c28b9e0 [ 578.192427][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 578.192441][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 578.192453][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 578.192468][ C0] ? do_idle+0x36a/0x5f0 [ 578.192493][ C0] default_idle+0x9/0x20 [ 578.192514][ C0] default_idle_call+0x72/0xb0 [ 578.192536][ C0] do_idle+0x36a/0x5f0 [ 578.192558][ C0] ? __pfx_do_idle+0x10/0x10 [ 578.192582][ C0] cpu_startup_entry+0x43/0x60 [ 578.192602][ C0] rest_init+0x2de/0x300 [ 578.192626][ C0] start_kernel+0x38a/0x3e0 [ 578.192798][ C0] x86_64_start_reservations+0x24/0x30 [ 578.192847][ C0] x86_64_start_kernel+0x143/0x1c0 [ 578.192869][ C0] common_startup_64+0x13e/0x147 [ 578.192902][ C0] [ 578.487474][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 578.494368][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 578.503505][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 578.513589][ T30] Call Trace: [ 578.516896][ T30] [ 578.519854][ T30] vpanic+0x56c/0xa60 [ 578.523889][ T30] ? __pfx___schedule+0x10/0x10 [ 578.528787][ T30] ? __pfx_vpanic+0x10/0x10 [ 578.533339][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 578.539556][ T30] panic+0xc5/0xd0 [ 578.543335][ T30] ? __pfx_panic+0x10/0x10 [ 578.547802][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 578.553232][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 578.559435][ T30] watchdog+0x102c/0x1030 [ 578.563830][ T30] ? watchdog+0x1c9/0x1030 [ 578.568303][ T30] kthread+0x389/0x470 [ 578.572409][ T30] ? __pfx_watchdog+0x10/0x10 [ 578.577123][ T30] ? __pfx_kthread+0x10/0x10 [ 578.581759][ T30] ret_from_fork+0x514/0xb70 [ 578.586395][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 578.591546][ T30] ? __switch_to+0xc79/0x1410 [ 578.596271][ T30] ? __pfx_kthread+0x10/0x10 [ 578.600910][ T30] ret_from_fork_asm+0x1a/0x30 [ 578.605726][ T30] [ 578.610246][ T30] Kernel Offset: disabled [ 578.614956][ T30] Rebooting in 86400 seconds..