last executing test programs: 22.347689765s ago: executing program 4 (id=2182): unshare(0x28000600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000006c0)={r1, &(0x7f0000000500)}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0xc6aa2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe79, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb392) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x4, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x140}}, 0x844) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r9, 0x4000, 0x0}, 0x10) r10 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r10, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="200000000000000084000000020000000800480002000000feffffff", @ANYRES32=0x0, @ANYBLOB="30000000000000008400000001"], 0x50, 0x40488c2}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r11, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r11, 0x10e, 0x8, &(0x7f0000000100)=0x80000000, 0x4) 22.338995842s ago: executing program 3 (id=2183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f0000000880)='%-5lx \x00'}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)={0x264, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x6}, @nested={0x240, 0x1, 0x0, 0x1, [@nested={0x23c, 0xf9, 0x0, 0x1, [@nested={0x227, 0xd6, 0x0, 0x1, [@generic="b94b196a55be9dfe1335411632e67752b096ecf9bf1dabcd72ea960758fcaa9d3d41dfa461b075adc7e75a67195c8abe0308830a94e9b8d749d7a5bd91174727189471f75aacf4236dbfb68837ad7d878ccad98a09bc77df237559a488db0fdfdf8822dbde0474fe83ac5badf40e65b7fc19f81e82191c89d5e8575e29f8586d934627f0a08705b2d8668ac0e59c9562f566324ea85fc3a8818ba6860c32b5756f1ac5f868054ef7f56fa76097b2e106d79e01fb859208249fda3ef5f61c85547c017156d3bf347de65562bedd66f74136d111c801469dfb59559e1f8a06ba148cb0fe493a5788a77095d2479d039035863ad3dca8ee716ceebb", @nested={0x4, 0x96}, @nested={0x4, 0x11}, @generic="20368a5834a5aae0beecb28d2bb65bc27dc542d31197c87d1c1ec8260de6a4acd1d48f02acc21b665d80e7a9eac4ca9d3a5ee11badd8aa6f1d42d58e9ec5db2386bfcdbb74cc52028d527e82a348cbfab1dd1b05a311e818527c70a878449ad5e0b21070cbda442a9ba9a1820e2bd588a53615ecb31dca59573e48f2e2591eb26dd597f649eb9abc433ceeedf1eac77f0c73cada46c970dc09ba594258c6ac1fcb00436e1fe6ce5594", @typed={0x8, 0x10, 0x0, 0x0, @fd=r1}, @typed={0x8, 0xfd, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="430f902038f332db08e47635a0c584c9e02eeef554a7c0370cdb3a501026e87b893ab040e13cfd5c0be134602ef38416a8b3e0c63052141073337591bbc017d87adf790b9cf81aeb41c5d9f3faa985b51f96c47e16bef98f1ec960e2a31e2028f513be279080dd57"]}, @typed={0x4, 0x65}, @typed={0x4, 0x12e}, @typed={0x8, 0xee, 0x0, 0x0, @ipv4=@remote}]}]}, @nested={0x4, 0x4}]}, 0x264}, 0x1, 0x0, 0x0, 0x20008880}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x8000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100000fe539633f4eb2fae0000400000", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008001e0000000000"], 0x5e}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000e3", @ANYRES16=r8, @ANYBLOB="10002dbd7000fddbdf250100000005000500000000001400010000000000000000000000ffffac141429050006000600000005000600f8000000"], 0x40}, 0x1, 0x0, 0x0, 0x40002}, 0x20) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {0xffff, 0xb}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xffffffffffffffe0, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) 21.361277377s ago: executing program 4 (id=2189): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x4000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x9039}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x2a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x2d, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x4d, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5472f800"], 0x54}}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0xfc0, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r8, 0x10e, 0x8, &(0x7f00000002c0)=0x1, 0x4) r9 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r10}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[@ANYBLOB], 0x4d4}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 21.195935843s ago: executing program 2 (id=2191): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}}, 0x20008040) 19.138924258s ago: executing program 4 (id=2192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf250c000000200005"], 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8084) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000003f40)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x2000200a}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10ef2b3307796d82}, 0x4004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c000780080012400000000505000500020000000500040001000000110003"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r9) ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) sendmsg$kcm(r7, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) socket$tipc(0x1e, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) readv(r7, &(0x7f0000000540)=[{&(0x7f0000000180)=""/234, 0xea}, {0x0}], 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$netlink(0x10, 0x3, 0xc) 19.126163525s ago: executing program 0 (id=2193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000240)={'ip6gre0\x00', @random="2b01c80080c6"}) 19.079272265s ago: executing program 3 (id=2194): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x5, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r1], 0x38}}, 0x0) 19.041779721s ago: executing program 2 (id=2196): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0xf6, &(0x7f0000000940)={@broadcast, @remote, @void, {@ipv4={0x800, @gre={{0x29, 0x4, 0x2, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast, {[@noop, @lsrr={0x83, 0x13, 0x1b, [@private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @empty]}, @rr={0x7, 0xb, 0x88, [@rand_addr=0x64010102, @loopback]}, @timestamp_prespec={0x44, 0x34, 0xde, 0x3, 0x2, [{@local, 0x3}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x9}, {@broadcast, 0x6}, {@empty, 0x5}, {@multicast2, 0x3}]}, @ssrr={0x89, 0x7, 0x61, [@rand_addr=0xc]}, @noop, @rr={0x7, 0xb, 0xe4, [@local, @local]}, @end, @timestamp={0x44, 0x24, 0x2c, 0x0, 0x6, [0x5, 0x8, 0x80000000, 0x1, 0x6, 0x10001, 0x9, 0xd81]}, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "001004", 0x0, 0x2b, 0x1, @remote, @mcast2}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x400c095}, 0x44) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x11, 0x0}, @private=0xa010101}}}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x144}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000140)) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000007c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x800) 18.928020403s ago: executing program 0 (id=2197): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x6, @loopback, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x18}, 0x0) 18.895449881s ago: executing program 1 (id=2198): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000c60700000000000000010000a50000001700000018410000fcffffff000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7a, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e0, 0xffffffff, 0x0, 0xf0, 0x1e0, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xfee, 0xae6, 0x9f, 0x6, 0x3, 0x5, 0x8, 0x80]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) unshare(0x28000600) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r2, 0x0, 0x0, 0x32, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000000001010400000000000000000200000024000180140001"], 0x84}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.894870559s ago: executing program 3 (id=2199): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x5, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x6) (async) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x5, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) (async) 18.870408121s ago: executing program 2 (id=2200): r0 = socket(0x10, 0x803, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="865eaf8863b956a462385ad8c173f1af2f60026e39db4521af4421a7805c617c6bcb7f234b6526f548e7cbe5f9e7b1630f1959e2ba6981336bfc8ed185b48c9ed5e4feba0ef4a25ea0b9990fdbe9af56c80f1cfa16032e77a71074fed778f33be680f412cde273e2d0116509", 0x6c}, {&(0x7f0000000400)="1497cc5995e6f889c9e16077ade3a12a23eda317cc4c245235fd38bf325d2c7d3b161da52e1087d5b87d6eb794404005c4d6b0123264ef96a0aaed6713614991", 0x40}, {&(0x7f0000000540)="be2e20d3683500b38105094c2886ec5379725574303581894c66f5f893d184218002f06f18a4a4b8bb60509b2f1b7b622b6ea35b285b4b6599667f751801119c57", 0x41}], 0x3, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}], 0x80}, 0x4804) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'syztnl2\x00', r1, 0x0, 0x10, 0x4, 0x9, 0x2, @empty, @empty, 0x10, 0x8, 0x6, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'ip6_vti0\x00', r1, 0x2f, 0x0, 0x2, 0xf41, 0x20, @mcast1, @mcast2, 0x1, 0x7800, 0x4e, 0x2}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000009c0)={'wg0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000c40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={0x188, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3a8f591771d17e0f}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}]}, 0x188}, 0x1, 0x0, 0x0, 0x20004004}, 0x8050) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x80, r10}) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="980300001000030425bdb22034326913f59b310400", @ANYRES32=0x0, @ANYBLOB="00130000000000007000128009000100766c616e00000000600002800600010002000000280003800cffff0000000000060000000c00010000020000090000000c0001000000000001000100100004800c00010001000000010400001c0004800c0001000d000000020000000c0001007f0000000500000008000500", @ANYRES32=r12], 0x98}, 0x1, 0x0, 0x0, 0x4008081}, 0x40000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lld, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r13 = socket$netlink(0x10, 0x3, 0xa) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'wg0\x00', 0x2}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r14) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='X', @ANYRES16=r15, @ANYBLOB="010027bd7000fcdbdf251700000008000300", @ANYRES32=r16, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4054) (async) sendmsg$NL80211_CMD_ASSOCIATE(r13, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xec, 0x0, 0x100, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x20, 0x1, 0x4, 0x0, {0x6, 0x216, 0x0, 0x40, 0x0, 0x1, 0x1, 0x3}, 0x1, 0xe}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x3, 0x1, 0x0, {0xfffffffffffffdc1, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x710, 0x8}}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@device_b}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_FILS_KEK={0x1c, 0xf2, "5a85ac8f3c77a3b587bc8209b80cc5e05eafc10819f1efe1"}]}, 0xec}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c000) 18.808339004s ago: executing program 0 (id=2201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x34, r1, 0x629, 0x170bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040140}, 0x4004) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x69359182, 0x0, 0x0, 0x0, 0x8}, [@generic={0x8, 0x7, 0x4, 0x1, 0x57f8}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x56, 0xf0, 0x800, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8000, 0x8, 0xc}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@bridge_getlink={0x2c, 0x12, 0x2, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x100, 0x625}, [@IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000006}, 0x8000) 18.67396459s ago: executing program 0 (id=2202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0x95, 0x7, 0x1, 0x0, "baedeca5538db27d0d3026a752cd4dfc15356841ca3530ee42070de1bec66b327d556c771670476ab3ad29b09213906b7b662318601cb87e2e76119af1f677df685c725241e4d89277fd4fd5cc49f1b37198a129d90e2c3a4e8d6247323d3eb1e7b54e34fec3858e4b68fbd725b24930ff3f1a8620cc1ea6a923f1a19dd5c13b8b50c9d9ceaf48dc9197e922ed3bfc5a72"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xec}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 18.668907738s ago: executing program 2 (id=2203): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000008800000095"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000016c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@ptr={0xa, 0x0, 0x0, 0x2, 0x4}, @fwd={0x10}]}, {0x0, [0x30, 0x30, 0x30, 0x0, 0x0]}}, &(0x7f00000006c0)=""/4096, 0x37, 0x1000, 0x1, 0x3a8}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001700)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r3, 0x1, 0x5, 0x1}, 0x50) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x34, r5, 0x1, 0x70bd2c, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc094}, 0x20000000) 18.596413966s ago: executing program 3 (id=2204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x33c13, 0x2009}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x24e4}, @IFLA_GROUP={0x8, 0x1b, 0x87}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) pread64(r2, &(0x7f0000000040)=""/80, 0x50, 0x3) 18.542726777s ago: executing program 2 (id=2205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000040)={'veth0_to_bond\x00', @random="013501320400"}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00d326dcaaa930143e995d99177ee025f222c44b8e259e012b70e13800f0626fd7c9d0e6bcf55132991f57be053bb2a048018a3a2b6ff1ed56bc2aeb5bbdcb15a4ee5c36fac44d7405154b8b60d9ab58db5e21e64461311d23cae64ccf03f3143dd8ea74966e75fdbd5fc6bf5e5b6a271584a957af7e695900d67542179f05000000409c19a3309ac9b86f97c56e2ec6db23a41737f0b0ed28e3033f5a9f6fe1f3371c3502f43797f83856e6e19c83ba230ee0248cfa1e47ef31cc99ac9e98cbf857cb747dacca66", @ANYRESHEX=r2, @ANYRES32=r7], 0x44}}, 0x2000800) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fcdbdf25170000005400068014000300322e73352ed5955d482ee5364c4323843c004cdb919163040067636d2861657329000000000000000000000000000000000000000000000000140000009ea2d328893918792a5ca222a6ad61"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r12, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r11, 0x100000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r7) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000440)={r9, &(0x7f0000000240)='/dev/rfkill\x00', 0x0, &(0x7f0000000340)={@_ha_fsid={[0x2]}, {0x5, 0x23b, 0x4, 0x5}}, 0x7, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x2f}) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000200}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r13, @ANYBLOB="000428bd7000fddbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0001000000080001007063690011000200303030303a30303a31302e300000000008008c0000000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r14, @ANYBLOB="78cc5dd3ffa3402609447ace6fb609daacbd6d41588cbce4adaf13d5ec458e331970656100faaf9b1ba3cce9d776ae4bf0630ebb855d4e36c70b7c21927a9bd7c1d80fc94f2b57f31d8c86897b4676fa62220b"], 0x84}, 0x1, 0x0, 0x0, 0x4c084}, 0x20040000) close(r9) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r15 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r15, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$qrtr(0x2a, 0x2, 0x0) 18.097885394s ago: executing program 4 (id=2206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000110000007b8af0ff00000000b70800000d0000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000000), &(0x7f0000000340)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000000), &(0x7f0000000340)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5}, 0xc) 18.032248996s ago: executing program 0 (id=2207): bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xff82, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r6, r7, 0x25, 0x19, @val=@target_btf_id=r8}, 0x14) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "ff"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, 0x80ffffff}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @mcast2, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x4008000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x17, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000140)={@local, @empty}, 0xc) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x5) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r11, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) sendto$inet6(r11, &(0x7f0000000240)='.', 0xfef4, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r11) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', r4}, 0x18) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg$unix(r1, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="14dd0000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x8001}}], 0x2, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 17.943215594s ago: executing program 1 (id=2208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000100000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008590000b704000000000000850000000300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) (async, rerun: 32) r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001800dd8d03900d00ffffffff020000000008000600000020060015000400000018001680140003"], 0x3c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0xac, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x8}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a2, 0xd5}}, @TCA_U32_ACT={0x60, 0x7, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xa29}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x100000, 0x6, 0x2, 0x6, 0xb}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xe0}}]}, 0xac}}, 0x800) (async) sendmmsg(r1, &(0x7f0000009200)=[{{&(0x7f0000000540)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x8800) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000002480)="040fb2ce8664563ef12e299bd3ad51dc", 0x10}], 0x2}, 0x8084) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r11, 0x0) (async) recvmmsg(r11, &(0x7f0000000080), 0x72a, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x60780, 0x21, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.869192727s ago: executing program 3 (id=2209): socket$inet6_mptcp(0xa, 0x1, 0x106) 17.751916318s ago: executing program 4 (id=2210): r0 = socket(0x15, 0x5, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, 0x0, 0x8044) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'gre0\x00'}}, 0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400c600"/20, @ANYRES32=r6, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c0002800800040088"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r13 = socket(0x2b, 0x1, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3d0ee4db1058e138c2bd1567f84ad1e3088fd5cb229694c7638ec5d4d626f9abd8d9ab3f8ab633e2fa7f35ce7f5a5d00b2eb3a1b10f989d47a5dd70da767e67610317425ccdf92f2960a063e1adad2861cd8d7a771e8adb12fa04b77fea48d8542a66fc834b2475e4cd61d7756af006734ed78e0b27eb1cd162223218597d98efc55ac42c616b9d056eaa089e6e936337a6e29c017928f", @ANYRESHEX=r15, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRESOCT=r0, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20) socket(0x6, 0x800, 0x76) 17.681902707s ago: executing program 3 (id=2211): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0xb9, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x50, r4, 0x9, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004420}, 0x24000004) sendmsg$sock(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="5a2da37db6ca5eeef1d5341d1b711db42ce2a65b475877f01e502cb5bd0c5b90e2492a42c548861b2df169bf9f1e4265e163685a1487ea836ec57de0c53e54cea7", 0x41}], 0x1}, 0x400c1) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}], 0x1, 0x20000000) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0xb9, 0x0, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x50, r4, 0x9, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004420}, 0x24000004) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="5a2da37db6ca5eeef1d5341d1b711db42ce2a65b475877f01e502cb5bd0c5b90e2492a42c548861b2df169bf9f1e4265e163685a1487ea836ec57de0c53e54cea7", 0x41}], 0x1}, 0x400c1) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r7, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}], 0x1, 0x20000000) (async) shutdown(r7, 0x1) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) (async) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) (async) 17.161891986s ago: executing program 1 (id=2212): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl(r0, 0x123fb6f3, &(0x7f00000001c0)="11e3704f08a7b1d1cf79f742a303a8ebb2573aa59bb3b08dfcc3") write$6lowpan_enable(r0, &(0x7f0000000080)='1', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x8, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYRES8=r1, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYBLOB="ee159dcf754442a849a82c4f31ac045bddf463ae4aa85bdaba3811da9f9f7188e8ced412e4181362e9b7130dc59d8ebbedb0205483758365ee99a75dc17ca8fcad82f33aeea50e92ab67bf75d7be490f98080d7092c9e9837e8d974b124d77983c5285ac5af4c0ba88c7d39b11657fcea70594a87312b4caf7e1e37d3f45900148d1f9127282a01902e526258a8fc4d650fdc009e3a2de7d76b43ead9d7d6589f6c5e5e9be01d5696d9ed26450ca6eee9647b6c009e63f78fbabda1c6e47d87c50891dcc16df1147a812874ecbcd20220dc590bdfedc", @ANYBLOB="664187061c12bd303ba9693e38963baa45719e350a2a28511f3980425b3e971b7209229ce114c1f7b126467606093787df563a221f9b00000000000900"/70, @ANYRES64=0x0], 0x20) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0xc) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x2000c0c2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x400, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) clock_gettime(0xc, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_group_source_req(r8, 0x29, 0x6, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x3e000000, @private1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet_int(r7, 0x0, 0xd, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xf03a0005) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020400020c00000000000000fedbdf250200080008000000fd0000000000000003000600000000000200ebbc9bcfc9374000ac141400000000000000000002000100000000000000009e9f6d7a176e00000000200300050000000000020000000000ffe50000000000000000"], 0x60}, 0x1, 0x7}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 16.991522283s ago: executing program 0 (id=2213): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009201100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r3) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfe72) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRES64=0x0, @ANYBLOB="01000000000000001c001200000000000c000200080001000600000000000000009e137101690bc1f4d5c000c16298c7fb0926474106ef8b3d0de5fda9bef09ff0d5d6352ca96184eb805b7bc7b463f93a5b473690661bb120c16e3018bb13ceb6049216c8fea17c9ff6ef7c3053bfb2f210345f72bf60d19bfa097766d7c44097396a5ce3e99c546926e09e93f712919666be6e107129a1bc801596e0ce5975966f35a804c980b1c4a90ae5e902d4414f1473f1d8138026f4890ef77fc1ca2a2374c08d2124198c5cfcd467ef0bf6166cb722835b431afb1d08314fdfe722f2bfb5cc", @ANYBLOB="3c0000201000850600"/20], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYRES32=r8, @ANYRESOCT=r2, @ANYRES32=r7, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac"], 0x3c}, 0x1, 0x0, 0x0, 0x40006000}, 0x8000) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYRES16=r7, @ANYRES32=r10, @ANYBLOB="c5d2079b5ad67da7d890bb19c2f55cceacb9ca70fb687165"], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x20008010) sendmsg$NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640004ff4082d20510b8d3066e1cd624df97fddf88c241ddf15c790dfed515c76c08f09b68b2e3a8a7b709cac19e09aa9dfce2b05ebe3cbe005e19c11638ccdbd371b57c7d8066c3361f0783a8a6e0f1c2d58001b90000000000", @ANYRES16=r10, @ANYBLOB="000827bd7000fcdbdf2505000000080004000000000008000100", @ANYRES32=r11, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYRES64=r4], 0xb8}}, 0x0) 16.889261248s ago: executing program 1 (id=2214): r0 = socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x10, {0x0, 0x0, 0x4a00, 0x0, 0x8020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r5, 0x100000000) r6 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xa}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket(0x1, 0x803, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='pimreg0\x00', 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$SIOCX25SCALLUSERDATA(r7, 0x89e5, &(0x7f0000000380)={0x5, "9b2bfd996c0be5abb43cb3b0dbe99f3a7926b4b8e032ee19cb719817a88a825ea1816942b4e9322bc95288a463141e5ac63db6b8a145be31b7616743ed728bb8f3bae936e132cf4d5bf66ad646ff4ccef51ec743af93382a56162bbefd23448915341fcaf41f1d0862316ab3dd7d1de6f02814ca5f5c03d29189749fef86a658"}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) 16.8798783s ago: executing program 4 (id=2215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000180)={'pimreg0\x00', {0x2, 0x0, @broadcast}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 75:', @ANYRESDEC=r2], 0xc) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "e35059f50cea42ae3ce65eb94eb5e2a0"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x0) splice(r6, 0x0, r9, 0x0, 0x80000025a5, 0x0) close(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x2, 0x2b0, 0xffffffff, 0x168, 0x98, 0x168, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3}}}, {{@ip={@local, @empty, 0x0, 0x0, 'wlan1\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xfffd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {0x0, [0x0, 0x0, 0x7, 0x0, 0x1], 0x6}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "ca0300cb54a6f53d9bcc7790fe75e5dfab93e913be79e494d8af7b27c459"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) close(0x4) socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r12) 15.891868971s ago: executing program 2 (id=2216): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000001940), r0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYBLOB="01000008000100"/18, @ANYRES32=0x0, @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x4040840}, 0x480c4) 15.786472595s ago: executing program 1 (id=2217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRESOCT=r0, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e80050001a3"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 15.687536827s ago: executing program 1 (id=2218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0x11}}, 0x14}}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r4) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000b00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x110, 0x1, 0xa, 0xb00, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x85, 0x6, "87afe9f11ad07dca45e5b301c3ea2ea28a8ccfe17fede510ede83c6ee300496217d1e74bf245f4fe39653985e55c257cd297d4569e6ab5007340a8e8d11fe8db8156c82e570cc7b08f92ec51bb71afec8f02c905d5f4d5c32aaa2e1d8e390d3f866842c78575a11d86f3545b2da09787e33dbc418cf23a26cccc7eaaa32dc6403f"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x62, 0x6, "acf5c4b660526d8002b6052a89a5b04ed76e6ab5f3ff54808b34e20be3a3c4feadd73edab287b11d105af423406ca0b37a77fe82614490b6f1a7ab31d692132809fb5da2066494664330da43946097ef6de9be71bed8a0ec1e8902373baa"}]}, 0x110}, 0x1, 0x0, 0x0, 0x8c0}, 0x800) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}, 0x7}, 0x1c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea80cba3c", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf256200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000280000000600b400e40c00000600b400770700000600b300000000000600b30000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0) 2.560280922s ago: executing program 32 (id=2211): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0xb9, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x50, r4, 0x9, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004420}, 0x24000004) sendmsg$sock(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="5a2da37db6ca5eeef1d5341d1b711db42ce2a65b475877f01e502cb5bd0c5b90e2492a42c548861b2df169bf9f1e4265e163685a1487ea836ec57de0c53e54cea7", 0x41}], 0x1}, 0x400c1) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}], 0x1, 0x20000000) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0xb9, 0x0, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x50, r4, 0x9, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004420}, 0x24000004) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="5a2da37db6ca5eeef1d5341d1b711db42ce2a65b475877f01e502cb5bd0c5b90e2492a42c548861b2df169bf9f1e4265e163685a1487ea836ec57de0c53e54cea7", 0x41}], 0x1}, 0x400c1) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r7, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}], 0x1, 0x20000000) (async) shutdown(r7, 0x1) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) (async) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) (async) 1.544685242s ago: executing program 33 (id=2213): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009201100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r3) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfe72) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRES64=0x0, @ANYBLOB="01000000000000001c001200000000000c000200080001000600000000000000009e137101690bc1f4d5c000c16298c7fb0926474106ef8b3d0de5fda9bef09ff0d5d6352ca96184eb805b7bc7b463f93a5b473690661bb120c16e3018bb13ceb6049216c8fea17c9ff6ef7c3053bfb2f210345f72bf60d19bfa097766d7c44097396a5ce3e99c546926e09e93f712919666be6e107129a1bc801596e0ce5975966f35a804c980b1c4a90ae5e902d4414f1473f1d8138026f4890ef77fc1ca2a2374c08d2124198c5cfcd467ef0bf6166cb722835b431afb1d08314fdfe722f2bfb5cc", @ANYBLOB="3c0000201000850600"/20], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYRES32=r8, @ANYRESOCT=r2, @ANYRES32=r7, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac"], 0x3c}, 0x1, 0x0, 0x0, 0x40006000}, 0x8000) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYRES16=r7, @ANYRES32=r10, @ANYBLOB="c5d2079b5ad67da7d890bb19c2f55cceacb9ca70fb687165"], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x20008010) sendmsg$NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640004ff4082d20510b8d3066e1cd624df97fddf88c241ddf15c790dfed515c76c08f09b68b2e3a8a7b709cac19e09aa9dfce2b05ebe3cbe005e19c11638ccdbd371b57c7d8066c3361f0783a8a6e0f1c2d58001b90000000000", @ANYRES16=r10, @ANYBLOB="000827bd7000fcdbdf2505000000080004000000000008000100", @ANYRES32=r11, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYRES64=r4], 0xb8}}, 0x0) 1.499551717s ago: executing program 34 (id=2215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000180)={'pimreg0\x00', {0x2, 0x0, @broadcast}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 75:', @ANYRESDEC=r2], 0xc) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "e35059f50cea42ae3ce65eb94eb5e2a0"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x0) splice(r6, 0x0, r9, 0x0, 0x80000025a5, 0x0) close(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x2, 0x2b0, 0xffffffff, 0x168, 0x98, 0x168, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3}}}, {{@ip={@local, @empty, 0x0, 0x0, 'wlan1\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xfffd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {0x0, [0x0, 0x0, 0x7, 0x0, 0x1], 0x6}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "ca0300cb54a6f53d9bcc7790fe75e5dfab93e913be79e494d8af7b27c459"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) close(0x4) socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r12) 32.094231ms ago: executing program 35 (id=2218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0x11}}, 0x14}}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r4) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000b00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x110, 0x1, 0xa, 0xb00, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x85, 0x6, "87afe9f11ad07dca45e5b301c3ea2ea28a8ccfe17fede510ede83c6ee300496217d1e74bf245f4fe39653985e55c257cd297d4569e6ab5007340a8e8d11fe8db8156c82e570cc7b08f92ec51bb71afec8f02c905d5f4d5c32aaa2e1d8e390d3f866842c78575a11d86f3545b2da09787e33dbc418cf23a26cccc7eaaa32dc6403f"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x62, 0x6, "acf5c4b660526d8002b6052a89a5b04ed76e6ab5f3ff54808b34e20be3a3c4feadd73edab287b11d105af423406ca0b37a77fe82614490b6f1a7ab31d692132809fb5da2066494664330da43946097ef6de9be71bed8a0ec1e8902373baa"}]}, 0x110}, 0x1, 0x0, 0x0, 0x8c0}, 0x800) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}, 0x7}, 0x1c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea80cba3c", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf256200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000280000000600b400e40c00000600b400770700000600b300000000000600b30000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0) 0s ago: executing program 36 (id=2216): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000001940), r0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYBLOB="01000008000100"/18, @ANYRES32=0x0, @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x4040840}, 0x480c4) kernel console output (not intermixed with test programs): ink: 292 bytes leftover after parsing attributes in process `syz.1.1262'. [ 248.044456][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 248.097769][T10862] bond5: (slave geneve0): Releasing active interface [ 248.251312][T10866] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 248.366189][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1264'. [ 248.434052][T10867] 8021q: VLANs not supported on nlmon0 [ 248.487317][T10874] syzkaller0: entered promiscuous mode [ 248.497320][T10874] syzkaller0: entered allmulticast mode [ 249.042585][T10893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.255478][T10898] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1275'. [ 249.268185][T10896] xt_recent: hitcount (4294967288) is larger than allowed maximum (65535) [ 249.287545][T10899] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1275'. [ 249.504197][T10904] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1276'. [ 250.323010][T10933] lo speed is unknown, defaulting to 1000 [ 250.522449][T10947] __nla_validate_parse: 4 callbacks suppressed [ 250.522471][T10947] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1289'. [ 250.691404][T10957] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1290'. [ 250.855399][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1290'. [ 250.957814][T10967] Cannot find add_set index 2 as target [ 251.257667][T10944] tipc: Resetting bearer [ 251.267717][T10992] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1297'. [ 251.308320][T10944] tipc: Resetting bearer [ 251.570233][T11002] netlink: 'syz.4.1300': attribute type 1 has an invalid length. [ 251.801427][T10998] lo speed is unknown, defaulting to 1000 [ 251.996231][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 252.351215][T11019] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 252.359971][T11019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.641210][ T1657] block nbd3: Possible stuck request ffff888027c60380: control (read@0,1024B). Runtime 30 seconds [ 252.653467][ T1657] block nbd3: Possible stuck request ffff888027c60540: control (read@1024,1024B). Runtime 30 seconds [ 252.664625][ T1657] block nbd3: Possible stuck request ffff888027c60700: control (read@2048,1024B). Runtime 30 seconds [ 252.676937][ T1657] block nbd3: Possible stuck request ffff888027c608c0: control (read@3072,1024B). Runtime 30 seconds [ 252.858268][T11031] tipc: Resetting bearer [ 254.099676][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 254.108937][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 254.160490][T11036] netlink: 'syz.1.1307': attribute type 111 has an invalid length. [ 254.907987][T11006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.843366][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.192796][T11099] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 256.217302][T11099] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1325'. [ 256.407553][T11103] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 256.440213][T11103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.487768][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1327'. [ 256.516495][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1327'. [ 256.543265][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1327'. [ 256.556350][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 256.575464][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 256.597453][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 256.615865][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 256.656874][T11110] 8021q: VLANs not supported on wg2 [ 256.675518][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 257.115054][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 257.376883][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1337'. [ 257.755673][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 258.012665][T11149] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 258.056903][T11149] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 258.209778][T11149] sit1: left promiscuous mode [ 258.319174][T11152] batadv1: entered allmulticast mode [ 258.564481][T11165] lo speed is unknown, defaulting to 1000 [ 258.926615][T11168] dvmrp0: entered allmulticast mode [ 259.080492][T11189] netlink: 'syz.2.1347': attribute type 5 has an invalid length. [ 259.596292][ T5642] Bluetooth: hci4: command 0x0405 tx timeout [ 259.631138][T11199] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 259.644018][T11199] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 259.771801][T11203] netlink: 'syz.1.1352': attribute type 3 has an invalid length. [ 260.025661][T11211] tipc: Can't bind to reserved service type 0 [ 260.184114][T11217] netlink: 'syz.1.1358': attribute type 4 has an invalid length. [ 260.217501][T11217] netlink: 'syz.1.1358': attribute type 4 has an invalid length. [ 260.336564][T11220] bond0: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 260.357108][T11220] bond0: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 260.626012][T11236] pim6reg: entered allmulticast mode [ 260.698474][T11244] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 261.278506][T11259] lo speed is unknown, defaulting to 1000 [ 261.711481][T11265] lo speed is unknown, defaulting to 1000 [ 261.843430][T11272] __nla_validate_parse: 8 callbacks suppressed [ 261.843451][T11272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1371'. [ 262.486394][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 262.528743][T11293] netlink: 'syz.3.1376': attribute type 1 has an invalid length. [ 262.546886][T11293] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1376'. [ 262.574230][T11293] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1376'. [ 262.666527][T11287] lo speed is unknown, defaulting to 1000 [ 262.675559][T11293] netlink: 'syz.3.1376': attribute type 18 has an invalid length. [ 262.689148][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'. [ 262.714101][T11293] netlink: 'syz.3.1376': attribute type 18 has an invalid length. [ 262.733729][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'. [ 262.875210][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 263.072413][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1375'. [ 263.308286][T11317] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1382'. [ 263.397828][T11306] dummy0: entered allmulticast mode [ 263.517222][T11323] netlink: 'syz.3.1383': attribute type 1 has an invalid length. [ 263.526251][T11323] netlink: 'syz.3.1383': attribute type 2 has an invalid length. [ 263.776780][T11334] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1386'. [ 263.828523][T11334] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1386'. [ 264.467704][T11361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.584175][T11356] team1: entered promiscuous mode [ 264.589762][T11356] team1: entered allmulticast mode [ 264.595546][T11356] 8021q: adding VLAN 0 to HW filter on device team1 [ 264.603992][ T5741] lo speed is unknown, defaulting to 1000 [ 264.623939][ T5741] syz2: Port: 1 Link DOWN [ 264.683066][T11362] team2: entered promiscuous mode [ 264.688937][T11362] team2: entered allmulticast mode [ 264.694555][T11362] 8021q: adding VLAN 0 to HW filter on device team2 [ 266.063622][T11416] ipip0: entered promiscuous mode [ 266.290697][T11420] netlink: 'syz.0.1410': attribute type 7 has an invalid length. [ 266.299018][T11420] netlink: 'syz.0.1410': attribute type 8 has an invalid length. [ 266.314540][T11420] team_slave_1: entered promiscuous mode [ 266.322331][T11420] erspan0: entered promiscuous mode [ 266.328599][T11420] team_slave_1: left promiscuous mode [ 266.337178][T11420] erspan0: left promiscuous mode [ 267.355398][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 267.411496][T11373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.626835][T11443] __nla_validate_parse: 10 callbacks suppressed [ 267.626858][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1415'. [ 267.727286][T11451] FAULT_INJECTION: forcing a failure. [ 267.727286][T11451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.750200][T11451] CPU: 1 UID: 0 PID: 11451 Comm: syz.4.1416 Not tainted syzkaller #0 PREEMPT(full) [ 267.750227][T11451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.750240][T11451] Call Trace: [ 267.750248][T11451] [ 267.750255][T11451] dump_stack_lvl+0xe8/0x150 [ 267.750283][T11451] should_fail_ex+0x412/0x560 [ 267.750309][T11451] _copy_from_iter+0x1d3/0x1670 [ 267.750332][T11451] ? rcu_is_watching+0x15/0xb0 [ 267.750361][T11451] ? __pfx__copy_from_iter+0x10/0x10 [ 267.750389][T11451] ? netlink_sendmsg+0x650/0xb40 [ 267.750409][T11451] ? skb_put+0x11b/0x210 [ 267.750431][T11451] netlink_sendmsg+0x6c0/0xb40 [ 267.750462][T11451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.750486][T11451] ? aa_sock_msg_perm+0xf1/0x1b0 [ 267.750516][T11451] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.750545][T11451] ____sys_sendmsg+0x972/0x9f0 [ 267.750567][T11451] ? __might_fault+0xaf/0x130 [ 267.750597][T11451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.750628][T11451] ? import_iovec+0x73/0xa0 [ 267.750653][T11451] ___sys_sendmsg+0x2a5/0x360 [ 267.750673][T11451] ? __lock_acquire+0x6b5/0x2cf0 [ 267.750697][T11451] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.750764][T11451] ? __fget_files+0x2a/0x420 [ 267.750787][T11451] ? __fget_files+0x3a0/0x420 [ 267.750819][T11451] __x64_sys_sendmsg+0x1bd/0x2a0 [ 267.750843][T11451] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.750874][T11451] ? __pfx_ksys_write+0x10/0x10 [ 267.750909][T11451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.750929][T11451] do_syscall_64+0x174/0x580 [ 267.750948][T11451] ? trace_irq_disable+0x3b/0x140 [ 267.750976][T11451] ? clear_bhb_loop+0x40/0x90 [ 267.750998][T11451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.751016][T11451] RIP: 0033:0x7f7e8119ce59 [ 267.751035][T11451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.751051][T11451] RSP: 002b:00007f7e82071028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.751070][T11451] RAX: ffffffffffffffda RBX: 00007f7e81416090 RCX: 00007f7e8119ce59 [ 267.751083][T11451] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 267.751094][T11451] RBP: 00007f7e82071090 R08: 0000000000000000 R09: 0000000000000000 [ 267.751105][T11451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.751135][T11451] R13: 00007f7e81416128 R14: 00007f7e81416090 R15: 00007ffc6906e2f8 [ 267.751170][T11451] [ 268.017812][T11452] hsr0: entered promiscuous mode [ 268.098044][T11443] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1415'. [ 268.139269][T11443] hsr_slave_1: left promiscuous mode [ 268.152063][T11443] hsr0 (unregistering): left promiscuous mode [ 268.279038][T11466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1422'. [ 268.315501][T11466] netlink: 'syz.0.1422': attribute type 6 has an invalid length. [ 268.417803][T11470] bond15: entered promiscuous mode [ 268.425417][T11470] 8021q: adding VLAN 0 to HW filter on device bond15 [ 268.527405][T11478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1426'. [ 268.682351][T11487] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 268.737190][T11491] FAULT_INJECTION: forcing a failure. [ 268.737190][T11491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.750911][T11491] CPU: 0 UID: 0 PID: 11491 Comm: syz.3.1431 Not tainted syzkaller #0 PREEMPT(full) [ 268.750939][T11491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 268.750952][T11491] Call Trace: [ 268.750960][T11491] [ 268.750967][T11491] dump_stack_lvl+0xe8/0x150 [ 268.750994][T11491] should_fail_ex+0x412/0x560 [ 268.751022][T11491] _copy_from_iter+0x1d3/0x1670 [ 268.751068][T11491] ? rcu_is_watching+0x15/0xb0 [ 268.751100][T11491] ? __pfx__copy_from_iter+0x10/0x10 [ 268.751131][T11491] ? netlink_sendmsg+0x650/0xb40 [ 268.751153][T11491] ? skb_put+0x11b/0x210 [ 268.751179][T11491] netlink_sendmsg+0x6c0/0xb40 [ 268.751211][T11491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.751239][T11491] ? aa_sock_msg_perm+0xf1/0x1b0 [ 268.751271][T11491] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.751301][T11491] ____sys_sendmsg+0x972/0x9f0 [ 268.751324][T11491] ? __might_fault+0xaf/0x130 [ 268.751358][T11491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.751390][T11491] ? import_iovec+0x73/0xa0 [ 268.751418][T11491] ___sys_sendmsg+0x2a5/0x360 [ 268.751439][T11491] ? __lock_acquire+0x6b5/0x2cf0 [ 268.751465][T11491] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.751527][T11491] ? __fget_files+0x2a/0x420 [ 268.751551][T11491] ? __fget_files+0x3a0/0x420 [ 268.751589][T11491] __x64_sys_sendmsg+0x1bd/0x2a0 [ 268.751614][T11491] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.751648][T11491] ? __pfx_ksys_write+0x10/0x10 [ 268.751695][T11491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.751719][T11491] do_syscall_64+0x174/0x580 [ 268.751740][T11491] ? trace_irq_disable+0x3b/0x140 [ 268.751770][T11491] ? clear_bhb_loop+0x40/0x90 [ 268.751796][T11491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.751816][T11491] RIP: 0033:0x7fddb2b9ce59 [ 268.751834][T11491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.751854][T11491] RSP: 002b:00007fddb3ac2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.751876][T11491] RAX: ffffffffffffffda RBX: 00007fddb2e15fa0 RCX: 00007fddb2b9ce59 [ 268.751891][T11491] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 268.751904][T11491] RBP: 00007fddb3ac2090 R08: 0000000000000000 R09: 0000000000000000 [ 268.751916][T11491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.751927][T11491] R13: 00007fddb2e16038 R14: 00007fddb2e15fa0 R15: 00007ffe1c571678 [ 268.751961][T11491] [ 269.018648][T11495] netlink: 'syz.2.1432': attribute type 12 has an invalid length. [ 269.025617][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'. [ 269.115431][ T1164] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.133615][ T1164] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.173740][ T1164] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.221979][ T1164] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.284373][T11503] ip6erspan0: entered allmulticast mode [ 269.408384][T11516] sch_tbf: peakrate 67108864 is lower than or equals to rate 4294966145 ! [ 269.505908][T11518] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1439'. [ 269.697107][T11526] netlink: 'syz.0.1441': attribute type 96 has an invalid length. [ 269.719204][T11526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1441'. [ 269.735686][T11528] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 269.769136][T11526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1441'. [ 269.809548][T11526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1441'. [ 269.840507][T11526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1441'. [ 269.888596][T11532] IPVS: Error connecting to the multicast addr [ 270.158917][T11550] sctp: [Deprecated]: syz.3.1445 (pid 11550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.158917][T11550] Use struct sctp_sack_info instead [ 270.642396][T11564] syzkaller0: entered promiscuous mode [ 270.662156][T11564] syzkaller0: entered allmulticast mode [ 270.687387][T11568] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 271.423954][T11585] netlink: 'syz.3.1454': attribute type 2 has an invalid length. [ 272.756550][T11638] __nla_validate_parse: 141 callbacks suppressed [ 272.756571][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'. [ 272.795830][T11638] netlink: 'syz.3.1472': attribute type 16 has an invalid length. [ 272.809778][T11638] netlink: 'syz.3.1472': attribute type 17 has an invalid length. [ 272.847154][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1472'. [ 272.878365][T11638] syzkaller1: entered promiscuous mode [ 272.883955][T11638] syzkaller1: entered allmulticast mode [ 273.094234][T11643] syzkaller1: entered promiscuous mode [ 273.101747][T11643] syzkaller1: entered allmulticast mode [ 273.293547][T11645] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 273.681203][T11649] sctp: [Deprecated]: syz.3.1475 (pid 11649) Use of int in maxseg socket option. [ 273.681203][T11649] Use struct sctp_assoc_value instead [ 274.419683][T11596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.671774][T11666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1477'. [ 274.781408][T11671] pimreg: entered allmulticast mode [ 274.935583][T11681] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1482'. [ 274.953133][T11681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.973243][T11682] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1481'. [ 274.983529][T11676] lo speed is unknown, defaulting to 1000 [ 274.993105][T11681] nbd: socks must be embedded in a SOCK_ITEM attr [ 275.051054][T11681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1482'. [ 275.249840][T11693] netlink: 'syz.2.1484': attribute type 29 has an invalid length. [ 275.264331][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 275.406889][T11699] hsr0: entered promiscuous mode [ 275.635015][T11700] syzkaller1: entered promiscuous mode [ 275.648092][T11700] syzkaller1: entered allmulticast mode [ 275.683699][T11709] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 275.755360][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 275.964596][T11722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1493'. [ 275.999697][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 276.302656][T11739] xt_recent: hitcount (4294967288) is larger than allowed maximum (65535) [ 276.524142][T11752] netlink: 'syz.3.1501': attribute type 21 has an invalid length. [ 276.558366][T11752] netlink: 'syz.3.1501': attribute type 4 has an invalid length. [ 277.434218][T11791] xt_recent: hitcount (4294967288) is larger than allowed maximum (65535) [ 277.569085][T11793] syzkaller0: entered promiscuous mode [ 277.603278][T11793] syzkaller0: entered allmulticast mode [ 277.633495][T11797] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 278.016350][T11816] __nla_validate_parse: 5 callbacks suppressed [ 278.016371][T11816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1516'. [ 278.035423][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1513'. [ 278.057786][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 278.247626][T11820] syzkaller0: entered promiscuous mode [ 278.275886][T11820] syzkaller0: entered allmulticast mode [ 278.344974][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1518'. [ 278.370125][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 278.661091][T11820] team0: Port device team_slave_0 removed [ 278.681650][T11849] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1522'. [ 278.698568][T11842] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 280.179206][T11886] syzkaller0: entered promiscuous mode [ 280.194886][T11886] syzkaller0: entered allmulticast mode [ 281.426983][T11833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.643338][T11941] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 281.688219][T11944] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1532'. [ 282.043877][T11964] syzkaller0: entered promiscuous mode [ 282.073388][T11964] syzkaller0: entered allmulticast mode [ 282.126899][T11962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1535'. [ 282.161154][T11962] netlink: 'syz.4.1535': attribute type 7 has an invalid length. [ 282.185193][T11962] netlink: 'syz.4.1535': attribute type 8 has an invalid length. [ 282.212140][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1535'. [ 282.304188][T11962] bond0: entered promiscuous mode [ 282.318970][T11962] bond_slave_0: entered promiscuous mode [ 282.355746][T11962] bond_slave_1: entered promiscuous mode [ 282.364125][T11962] geneve1: entered promiscuous mode [ 282.374316][T11962] bridge0: entered promiscuous mode [ 282.383921][T11962] erspan0: entered promiscuous mode [ 282.646016][T11991] FAULT_INJECTION: forcing a failure. [ 282.646016][T11991] name failslab, interval 1, probability 0, space 0, times 0 [ 282.690667][T11991] CPU: 0 UID: 0 PID: 11991 Comm: syz.3.1541 Not tainted syzkaller #0 PREEMPT(full) [ 282.690697][T11991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 282.690711][T11991] Call Trace: [ 282.690719][T11991] [ 282.690728][T11991] dump_stack_lvl+0xe8/0x150 [ 282.690759][T11991] should_fail_ex+0x412/0x560 [ 282.690787][T11991] should_failslab+0xa8/0x100 [ 282.690810][T11991] __kvmalloc_node_noprof+0x178/0x8a0 [ 282.690840][T11991] ? xt_alloc_table_info+0x40/0xb0 [ 282.690869][T11991] ? do_ip6t_set_ctl+0x96b/0xe20 [ 282.690891][T11991] ? translate_table+0x191/0x20b0 [ 282.690924][T11991] translate_table+0x191/0x20b0 [ 282.690972][T11991] ? __pfx_translate_table+0x10/0x10 [ 282.690994][T11991] ? __might_fault+0xaf/0x130 [ 282.691023][T11991] ? __might_fault+0xaf/0x130 [ 282.691071][T11991] ? _copy_from_user+0x94/0xb0 [ 282.691102][T11991] do_ip6t_set_ctl+0xa59/0xe20 [ 282.691130][T11991] ? __pfx___mutex_trylock_common+0x10/0x10 [ 282.691171][T11991] ? rcu_is_watching+0x15/0xb0 [ 282.691197][T11991] ? trace_contention_end+0x3d/0x140 [ 282.691226][T11991] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 282.691272][T11991] ? __pfx___mutex_lock+0x10/0x10 [ 282.691297][T11991] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 282.691329][T11991] ? __pfx_aa_sk_perm+0x10/0x10 [ 282.691366][T11991] nf_setsockopt+0x26f/0x290 [ 282.691399][T11991] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 282.691432][T11991] do_sock_setsockopt+0x17c/0x1b0 [ 282.691461][T11991] __x64_sys_setsockopt+0x13d/0x1b0 [ 282.691487][T11991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.691510][T11991] do_syscall_64+0x174/0x580 [ 282.691531][T11991] ? trace_irq_disable+0x3b/0x140 [ 282.691562][T11991] ? clear_bhb_loop+0x40/0x90 [ 282.691587][T11991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.691608][T11991] RIP: 0033:0x7fddb2b9ce59 [ 282.691629][T11991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.691646][T11991] RSP: 002b:00007fddb3ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 282.691669][T11991] RAX: ffffffffffffffda RBX: 00007fddb2e15fa0 RCX: 00007fddb2b9ce59 [ 282.691685][T11991] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 282.691697][T11991] RBP: 00007fddb3ac2090 R08: 0000000000000500 R09: 0000000000000000 [ 282.691710][T11991] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.691723][T11991] R13: 00007fddb2e16038 R14: 00007fddb2e15fa0 R15: 00007ffe1c571678 [ 282.691757][T11991] [ 282.717138][T11988] netlink: 'syz.4.1540': attribute type 84 has an invalid length. [ 282.968077][ T1657] block nbd3: Possible stuck request ffff888027c60380: control (read@0,1024B). Runtime 60 seconds [ 282.983122][ T1657] block nbd3: Possible stuck request ffff888027c60540: control (read@1024,1024B). Runtime 60 seconds [ 282.994153][ T1657] block nbd3: Possible stuck request ffff888027c60700: control (read@2048,1024B). Runtime 60 seconds [ 283.007587][ T1657] block nbd3: Possible stuck request ffff888027c608c0: control (read@3072,1024B). Runtime 60 seconds [ 283.139927][T11998] netlink: 'syz.1.1542': attribute type 10 has an invalid length. [ 283.301758][T12006] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1543'. [ 283.413204][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 283.713181][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1547'. [ 283.754263][T12019] block nbd1: Unsupported socket: should be TCP or UNIX. [ 284.042979][T12019] bridge1: entered promiscuous mode [ 284.096639][T12019] bridge1: entered allmulticast mode [ 284.230053][T12039] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 284.877772][T12059] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1556'. [ 284.899937][T12059] openvswitch: netlink: Flow actions attr not present in new flow. [ 285.262057][T12072] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1558'. [ 285.322423][T12074] netlink: 7900 bytes leftover after parsing attributes in process `syz.1.1559'. [ 285.423790][T12075] netlink: 'syz.0.1558': attribute type 13 has an invalid length. [ 285.442157][T12084] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1560'. [ 285.482243][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1560'. [ 285.868331][T12100] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1563'. [ 286.035162][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'. [ 286.101427][T12096] smc: adding net device hsr0 with user defined pnetid SYZ2 [ 286.191921][T12096] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 286.284309][T12117] netlink: 'syz.0.1567': attribute type 5 has an invalid length. [ 286.330042][T12117] lo: Caught tx_queue_len zero misconfig [ 286.442337][T12121] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 286.558818][T12124] tipc: Enabled bearer , priority 0 [ 286.581994][T12124] syzkaller0: entered promiscuous mode [ 286.602970][T12124] syzkaller0: entered allmulticast mode [ 286.634282][T12124] tipc: Resetting bearer [ 287.149278][T12123] tipc: Resetting bearer [ 287.251940][T12123] tipc: Disabling bearer [ 287.552527][T12145] ipvlan0: entered promiscuous mode [ 287.697911][T12149] veth1_to_team: entered promiscuous mode [ 287.721646][T12149] dummy0: entered promiscuous mode [ 287.751547][T12149] debugfs: 'hsr1' already exists in 'hsr' [ 287.775287][T12149] Cannot create hsr debugfs directory [ 287.791078][T12149] hsr1: entered promiscuous mode [ 287.829145][T12154] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 287.896020][T12163] ieee802154 phy1 wpan1: encryption failed: -22 [ 288.191379][T12178] IPv6: NLM_F_CREATE should be specified when creating new route [ 288.392438][T12188] __nla_validate_parse: 7 callbacks suppressed [ 288.392459][T12188] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1585'. [ 288.457749][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1585'. [ 288.474365][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1586'. [ 288.512090][T12191] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1586'. [ 288.552447][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1586'. [ 288.752650][T12197] pimreg: entered allmulticast mode [ 288.770640][T12197] pimreg: left allmulticast mode [ 288.832153][T12198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1587'. [ 289.255376][T12220] xt_recent: hitcount (4294967288) is larger than allowed maximum (65535) [ 289.303881][T12219] IPv6: sit2: Disabled Multicast RS [ 289.343033][T12219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1593'. [ 289.343446][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1592'. [ 289.404627][T12216] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1592'. [ 289.573372][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 289.892135][T12242] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 289.913855][T12242] netlink: 'syz.0.1600': attribute type 1 has an invalid length. [ 290.068324][T12246] bond7: (slave bridge2): making interface the new active one [ 290.085364][T12246] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 290.134681][T12242] SET target dimension over the limit! [ 290.140817][T12248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.148121][T12248] IPv6: NLM_F_CREATE should be set when creating new route [ 290.155469][T12248] IPv6: NLM_F_CREATE should be set when creating new route [ 290.212353][T12242] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 290.488915][T12264] dummy0: entered allmulticast mode [ 290.574969][T12269] lo speed is unknown, defaulting to 1000 [ 290.724228][T12275] xt_recent: hitcount (4294967288) is larger than allowed maximum (65535) [ 291.450470][T12295] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.482334][T12295] block nbd2: not configured, cannot reconfigure [ 291.672552][T12303] netlink: 'syz.1.1619': attribute type 21 has an invalid length. [ 291.705932][T12303] netlink: 'syz.1.1619': attribute type 4 has an invalid length. [ 291.725121][T12303] netlink: 'syz.1.1619': attribute type 3 has an invalid length. [ 291.853773][T12310] netlink: 'syz.2.1620': attribute type 1 has an invalid length. [ 292.001845][T12310] bond9: entered promiscuous mode [ 292.032256][T12310] 8021q: adding VLAN 0 to HW filter on device bond9 [ 292.227890][T12325] sctp: [Deprecated]: syz.1.1624 (pid 12325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.227890][T12325] Use struct sctp_sack_info instead [ 292.251195][T12319] 8021q: adding VLAN 0 to HW filter on device bond8 [ 292.334662][T12324] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 292.659477][T12355] ip6tnl0: Caught tx_queue_len zero misconfig [ 292.888469][T12368] xt_recent: hitcount (4294967288) is larger than allowed maximum (65535) [ 293.560327][T12400] __nla_validate_parse: 15 callbacks suppressed [ 293.560349][T12400] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1645'. [ 293.640916][T12400] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 293.704652][T12411] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 293.771348][T12411] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1649'. [ 293.835329][T12411] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1649'. [ 293.871025][T12411] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 294.473665][T12452] IPVS: nq: FWM 3 0x00000003 - no destination available [ 294.923035][T12469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1662'. [ 294.952358][T12469] netlink: 'syz.2.1662': attribute type 7 has an invalid length. [ 294.961616][T12469] netlink: 'syz.2.1662': attribute type 8 has an invalid length. [ 294.971624][T12472] xt_recent: hitcount (4294967288) is larger than allowed maximum (65535) [ 294.971986][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 295.621082][T12501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1668'. [ 295.627342][T12505] netlink: 'syz.2.1670': attribute type 1 has an invalid length. [ 295.639026][T12501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1668'. [ 295.932876][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1672'. [ 296.086950][T12527] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1674'. [ 296.403838][T12544] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1678'. [ 297.036424][T12574] xt_recent: hitcount (4294967288) is larger than allowed maximum (65535) [ 297.115946][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 297.434999][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 297.698553][T12606] netlink: 'syz.0.1693': attribute type 1 has an invalid length. [ 297.811654][T12606] 8021q: adding VLAN 0 to HW filter on device bond9 [ 297.860656][T12610] netlink: 'syz.2.1694': attribute type 12 has an invalid length. [ 297.946068][T12615] bond5: invalid ARP target 0.0.0.0 specified for addition [ 297.953370][T12615] bond5: option arp_ip_target: invalid value (0) [ 297.974617][T12615] bond5 (unregistering): Released all slaves [ 298.109205][T12612] vlan0: entered promiscuous mode [ 298.143773][T12612] bond9: entered promiscuous mode [ 298.178425][T12612] vlan0: entered allmulticast mode [ 298.205581][T12633] block nbd1: server does not support multiple connections per device. [ 298.209089][T12612] bond9: entered allmulticast mode [ 298.246435][T12633] block nbd1: shutting down sockets [ 298.308147][T12634] sit0: entered promiscuous mode [ 298.332089][T12634] netlink: 'syz.2.1694': attribute type 1 has an invalid length. [ 298.579071][T12649] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 298.762869][T12656] __nla_validate_parse: 7 callbacks suppressed [ 298.762888][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1703'. [ 298.935692][T12651] lo speed is unknown, defaulting to 1000 [ 299.172224][T12664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1707'. [ 299.267023][T12668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1707'. [ 299.658467][T12681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1713'. [ 299.667755][T12681] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1713'. [ 299.677454][T12681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1713'. [ 299.687020][T12681] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1713'. [ 299.718403][T12676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1711'. [ 299.743896][T12681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1713'. [ 299.767300][T12681] bond0: ARP target 170.170.170.170 is already present [ 299.793299][T12686] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 299.801614][T12681] bond0: option arp_ip_target: invalid value (2863311530) [ 300.380673][T12710] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1718'. [ 301.091109][T12735] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.101584][T12735] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.211538][T12735] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.228783][T12735] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.261172][T12750] tipc: Enabled bearer , priority 0 [ 301.337383][T12735] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.370237][T12735] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.434532][T12737] tipc: Disabling bearer [ 301.490234][T12761] netlink: 'syz.2.1731': attribute type 1 has an invalid length. [ 301.525540][T12735] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.551995][T12735] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.702819][T12766] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 301.836476][T12768] bond10: entered promiscuous mode [ 301.858125][T12768] 8021q: adding VLAN 0 to HW filter on device bond10 [ 301.900167][T12783] syz.4.1737: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 301.919120][T12783] CPU: 1 UID: 0 PID: 12783 Comm: syz.4.1737 Not tainted syzkaller #0 PREEMPT(full) [ 301.919148][T12783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 301.919161][T12783] Call Trace: [ 301.919169][T12783] [ 301.919178][T12783] dump_stack_lvl+0xe8/0x150 [ 301.919209][T12783] warn_alloc+0x249/0x340 [ 301.919242][T12783] ? stack_trace_save+0xa9/0x100 [ 301.919276][T12783] ? __pfx_warn_alloc+0x10/0x10 [ 301.919314][T12783] ? kasan_save_track+0x4f/0x80 [ 301.919340][T12783] ? kasan_save_track+0x3e/0x80 [ 301.919376][T12783] ? __kasan_kmalloc+0x93/0xb0 [ 301.919404][T12783] ? __kmalloc_cache_noprof+0x31c/0x660 [ 301.919432][T12783] ? xskq_create+0x56/0x170 [ 301.919461][T12783] ? xsk_setsockopt+0x54c/0x990 [ 301.919487][T12783] ? do_sock_setsockopt+0x17c/0x1b0 [ 301.919508][T12783] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 301.919528][T12783] ? do_syscall_64+0x174/0x580 [ 301.919555][T12783] __vmalloc_node_range_noprof+0x132/0x1750 [ 301.919618][T12783] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 301.919656][T12783] ? __kasan_kmalloc+0x93/0xb0 [ 301.919692][T12783] vmalloc_user_noprof+0xad/0xe0 [ 301.919722][T12783] ? xskq_create+0xbf/0x170 [ 301.919752][T12783] xskq_create+0xbf/0x170 [ 301.919786][T12783] xsk_init_queue+0x8a/0xe0 [ 301.919817][T12783] xsk_setsockopt+0x54c/0x990 [ 301.919850][T12783] ? __pfx_xsk_setsockopt+0x10/0x10 [ 301.919875][T12783] ? __pfx_aa_sk_perm+0x10/0x10 [ 301.919907][T12783] ? aa_sock_opt_perm+0xff/0x1a0 [ 301.919940][T12783] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 301.919967][T12783] ? __pfx_xsk_setsockopt+0x10/0x10 [ 301.919999][T12783] do_sock_setsockopt+0x17c/0x1b0 [ 301.920027][T12783] __x64_sys_setsockopt+0x13d/0x1b0 [ 301.920053][T12783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.920076][T12783] do_syscall_64+0x174/0x580 [ 301.920097][T12783] ? trace_irq_disable+0x3b/0x140 [ 301.920129][T12783] ? clear_bhb_loop+0x40/0x90 [ 301.920155][T12783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.920175][T12783] RIP: 0033:0x7f7e8119ce59 [ 301.920194][T12783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.920211][T12783] RSP: 002b:00007f7e82092028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 301.920232][T12783] RAX: ffffffffffffffda RBX: 00007f7e81415fa0 RCX: 00007f7e8119ce59 [ 301.920247][T12783] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 301.920259][T12783] RBP: 00007f7e81232d6f R08: 0000000000000004 R09: 0000000000000000 [ 301.920272][T12783] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.920284][T12783] R13: 00007f7e81416038 R14: 00007f7e81415fa0 R15: 00007ffc6906e2f8 [ 301.920319][T12783] [ 301.920474][T12783] Mem-Info: [ 302.220623][T12783] active_anon:5734 inactive_anon:0 isolated_anon:0 [ 302.220623][T12783] active_file:3146 inactive_file:40044 isolated_file:0 [ 302.220623][T12783] unevictable:768 dirty:261 writeback:0 [ 302.220623][T12783] slab_reclaimable:10916 slab_unreclaimable:104676 [ 302.220623][T12783] mapped:35038 shmem:1288 pagetables:1318 [ 302.220623][T12783] sec_pagetables:0 bounce:0 [ 302.220623][T12783] kernel_misc_reclaimable:0 [ 302.220623][T12783] free:1312720 free_pcp:17132 free_cma:0 [ 302.275275][T12783] Node 0 active_anon:22936kB inactive_anon:0kB active_file:12584kB inactive_file:159976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146752kB dirty:1044kB writeback:0kB shmem:3616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14328kB pagetables:5108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 302.310885][T12783] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 302.345470][T12783] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 302.379496][T12783] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 302.396319][T12783] Node 0 DMA32 free:1293336kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23036kB inactive_anon:0kB active_file:12584kB inactive_file:159976kB unevictable:1536kB writepending:1044kB zspages:0kB present:3129332kB managed:2552596kB mlocked:0kB bounce:0kB free_pcp:67320kB local_pcp:47072kB free_cma:0kB [ 302.436046][T12796] netlink: 'syz.4.1737': attribute type 10 has an invalid length. [ 302.444961][T12783] lowmem_reserve[]: 0 0 0 0 0 [ 302.449851][T12783] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 302.482208][T12783] lowmem_reserve[]: 0 0 0 0 0 [ 302.498124][T12783] Node 1 Normal free:3942184kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:0kB free_cma:0kB [ 302.534201][T12783] lowmem_reserve[]: 0 0 0 0 0 [ 302.539425][T12783] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 302.553957][T12783] Node 0 DMA32: 3694*4kB (UME) 2784*8kB (UME) 1502*16kB (UME) 1100*32kB (UME) 364*64kB (UME) 130*128kB (UME) 42*256kB (UME) 71*512kB (UME) 46*1024kB (UM) 31*2048kB (UM) 244*4096kB (UM) = 1293336kB [ 302.577153][T12783] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 302.598081][T12783] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3942236kB [ 302.615543][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.626364][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.634708][T12783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 302.648891][T12783] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 302.659226][T12783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 302.689745][T12788] 8021q: adding VLAN 0 to HW filter on device bond10 [ 302.689809][T12783] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 302.703590][T12788] bond10: (slave sit0): The slave device specified does not support setting the MAC address [ 302.718155][T12788] bond10: (slave sit0): Error -95 calling set_mac_address [ 302.749856][T12783] 44474 total pagecache pages [ 302.782292][T12783] 0 pages in swap cache [ 302.801941][T12783] Free swap = 124996kB [ 302.812061][T12783] Total swap = 124996kB [ 302.819913][T12783] 2097051 pages RAM [ 302.823925][T12783] 0 pages HighMem/MovableOnly [ 302.829464][T12783] 427119 pages reserved [ 302.833678][T12783] 0 pages cma reserved [ 302.852269][T12796] team0: Port device dummy0 added [ 302.939514][ T1175] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.949505][ T1175] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.984008][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.998032][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.009477][T12808] netlink: 'syz.0.1739': attribute type 10 has an invalid length. [ 303.169348][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.192065][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.537551][T12807] lo speed is unknown, defaulting to 1000 [ 303.688012][T12838] netlink: 'syz.3.1745': attribute type 11 has an invalid length. [ 303.701068][T12841] netlink: 'syz.1.1746': attribute type 11 has an invalid length. [ 303.711911][T12841] netlink: 'syz.1.1746': attribute type 4 has an invalid length. [ 303.735081][T12838] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 303.742452][T12838] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 303.938460][T12848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.016123][T12850] __nla_validate_parse: 14 callbacks suppressed [ 304.016147][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1748'. [ 304.228583][T12856] netlink: 'syz.1.1750': attribute type 1 has an invalid length. [ 304.235810][T12853] netlink: 'syz.0.1749': attribute type 1 has an invalid length. [ 304.257027][T12856] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1750'. [ 304.348519][T12866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1749'. [ 304.371273][T12853] bond11: entered promiscuous mode [ 304.379343][T12853] 8021q: adding VLAN 0 to HW filter on device bond11 [ 304.499182][T12853] 8021q: adding VLAN 0 to HW filter on device bond11 [ 304.507552][T12853] bond11: (slave vti0): The slave device specified does not support setting the MAC address [ 304.518582][T12853] bond11: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 304.533403][T12853] bond11: (slave vti0): making interface the new active one [ 304.541355][T12853] vti0: entered promiscuous mode [ 304.560762][T12853] bond11: (slave vti0): Enslaving as an active interface with an up link [ 304.886286][T12890] bond0: Caught tx_queue_len zero misconfig [ 304.960501][T12899] netlink: 'syz.3.1761': attribute type 1 has an invalid length. [ 305.016630][T12899] bond5: entered promiscuous mode [ 305.022380][T12899] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.063767][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1761'. [ 305.087337][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1761'. [ 305.104661][T12906] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20000 [ 305.213195][T12899] bond5: (slave bridge4): making interface the new active one [ 305.246834][T12899] bridge4: entered promiscuous mode [ 305.272151][T12899] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 305.300454][T12912] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1764'. [ 305.325396][T12912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.378060][T12918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1765'. [ 305.501472][T12903] netlink: 'syz.2.1762': attribute type 1 has an invalid length. [ 305.517041][T12903] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1762'. [ 305.533626][T12919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.542658][T12903] netlink: 'syz.2.1762': attribute type 1 has an invalid length. [ 305.542685][T12903] netlink: 'syz.2.1762': attribute type 8 has an invalid length. [ 305.542700][T12903] netlink: 606 bytes leftover after parsing attributes in process `syz.2.1762'. [ 305.542717][T12903] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1762'. [ 306.120199][T12955] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 306.361280][T12963] 8021q: adding VLAN 0 to HW filter on device bond10 [ 306.417132][T12969] bond10: (slave veth7): Enslaving as an active interface with a down link [ 306.464519][T12963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.474531][T12963] bond10: (slave batadv0): making interface the new active one [ 306.500310][T12963] batadv0: entered promiscuous mode [ 306.511162][T12963] bond10: (slave batadv0): Enslaving as an active interface with an up link [ 306.639346][T12970] bond16: option miimon: invalid value (18446744073709551607) [ 306.647597][T12970] bond16: option miimon: allowed values 0 - 2147483647 [ 306.660565][T12970] bond16 (unregistering): Released all slaves [ 306.770965][ T5642] block nbd1: Receive control failed (result -32) [ 306.825621][T12963] bond10 (unregistering): (slave veth7): Releasing active interface [ 306.877017][T12963] bond10 (unregistering): (slave batadv0): Releasing active interface [ 306.904490][T12963] bond10 (unregistering): Released all slaves [ 306.978372][T12975] lo speed is unknown, defaulting to 1000 [ 307.149745][T13001] syzkaller1: entered promiscuous mode [ 307.156686][T13001] syzkaller1: entered allmulticast mode [ 307.207165][T13010] syzkaller1: left promiscuous mode [ 307.225353][T13010] syzkaller1: left allmulticast mode [ 307.294701][T13004] tipc: Enabling of bearer rejected, already enabled [ 307.539955][T13020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.557059][T13020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.828500][T13037] validate_nla: 1 callbacks suppressed [ 307.828520][T13037] netlink: 'syz.4.1795': attribute type 4 has an invalid length. [ 307.882630][T13039] netlink: 'syz.4.1795': attribute type 4 has an invalid length. [ 308.739277][T13098] netlink: 'syz.3.1808': attribute type 11 has an invalid length. [ 309.934470][T13127] ipt_REJECT: ECHOREPLY no longer supported. [ 310.135299][T13129] __nla_validate_parse: 7 callbacks suppressed [ 310.135318][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 310.215613][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 310.247133][T13138] tipc: New replicast peer: 255.255.255.255 [ 310.277272][T13138] tipc: Enabled bearer , priority 10 [ 310.286836][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1820'. [ 310.291629][T13138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1819'. [ 310.306428][T13136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1818'. [ 310.327350][T13138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1819'. [ 310.339680][T13138] netlink: 'syz.4.1819': attribute type 4 has an invalid length. [ 310.417125][T13129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.904533][T13155] bond10: ARP target 9.0.0.0 is already present [ 310.950012][T13162] can: request_module (can-proto-4) failed. [ 310.972124][T13155] bond10: option arp_ip_target: invalid value (9) [ 311.006312][T13155] bond10 (unregistering): Released all slaves [ 311.341068][T13172] bridge0: port 1(batadv0) entered blocking state [ 311.395294][T13172] bridge0: port 1(batadv0) entered disabled state [ 311.416903][T13172] batadv0: entered allmulticast mode [ 311.455817][T13172] batadv0: entered promiscuous mode [ 311.497716][ T5650] tipc: Node number set to 2730390509 [ 311.507765][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'. [ 311.542546][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 311.579497][T13184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1828'. [ 311.688991][T13188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1829'. [ 311.825543][T13015] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 311.835808][T13015] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 312.281393][T13209] macsec0: entered promiscuous mode [ 312.297726][T13209] macsec0: entered allmulticast mode [ 312.508464][T13217] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 313.153763][T13236] netlink: 'syz.0.1843': attribute type 11 has an invalid length. [ 313.437962][ T1657] block nbd3: Possible stuck request ffff888027c60380: control (read@0,1024B). Runtime 90 seconds [ 313.451127][ T1657] block nbd3: Possible stuck request ffff888027c60540: control (read@1024,1024B). Runtime 90 seconds [ 313.462824][ T1657] block nbd3: Possible stuck request ffff888027c60700: control (read@2048,1024B). Runtime 90 seconds [ 313.474686][ T1657] block nbd3: Possible stuck request ffff888027c608c0: control (read@3072,1024B). Runtime 90 seconds [ 314.977781][T13316] sctp: [Deprecated]: syz.4.1862 (pid 13316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.977781][T13316] Use struct sctp_sack_info instead [ 315.159663][T13326] __nla_validate_parse: 10 callbacks suppressed [ 315.159685][T13326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1866'. [ 315.492279][T13334] lo speed is unknown, defaulting to 1000 [ 315.731136][T13345] netlink: 'syz.4.1871': attribute type 62 has an invalid length. [ 315.754172][T13343] xfrm1: entered allmulticast mode [ 315.969626][T13351] openvswitch: netlink: IPv4 tun info is not correct [ 316.509190][T13376] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1877'. [ 316.649844][T13362] syzkaller0: entered promiscuous mode [ 316.656298][T13362] syzkaller0: entered allmulticast mode [ 317.033081][T13389] netlink: 'syz.0.1883': attribute type 1 has an invalid length. [ 317.041763][T13389] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1883'. [ 317.094009][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'. [ 317.287246][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.356502][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'. [ 317.365941][T13395] netlink: 'syz.2.1884': attribute type 5 has an invalid length. [ 317.374227][T13395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1884'. [ 319.203086][T13395] geneve0: entered promiscuous mode [ 319.212048][T13395] geneve0: entered allmulticast mode [ 319.223778][ T43] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 319.257659][ T43] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 319.281169][ T43] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 319.313660][ T43] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 319.466976][T13413] batman_adv: batadv0: Adding interface: dummy0 [ 319.473764][T13413] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.500359][T13413] batman_adv: batadv0: Interface activated: dummy0 [ 319.718718][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 319.745050][T13424] syzkaller0: entered promiscuous mode [ 319.751287][T13424] syzkaller0: entered allmulticast mode [ 319.772452][T13423] tipc: Enabled bearer , priority 0 [ 320.140830][T13424] tipc: Resetting bearer [ 320.253712][T13424] tipc: Disabling bearer [ 320.391178][T13433] ip6_vti0: entered promiscuous mode [ 320.425317][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'. [ 320.478133][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1900'. [ 320.506471][T13447] netlink: 'syz.3.1900': attribute type 9 has an invalid length. [ 320.803712][T13470] netlink: 'syz.4.1906': attribute type 1 has an invalid length. [ 320.858411][T13470] bond16: entered promiscuous mode [ 320.867395][T13470] bond16: entered allmulticast mode [ 320.873145][T13470] 8021q: adding VLAN 0 to HW filter on device bond16 [ 320.954275][T13477] netlink: 'syz.3.1907': attribute type 1 has an invalid length. [ 320.962446][T13477] nbd: illegal input index 871591272 [ 320.980889][T13475] erspan2: entered allmulticast mode [ 321.007515][T13475] bond16: (slave erspan2): making interface the new active one [ 321.038288][T13475] erspan2: entered promiscuous mode [ 321.066468][T13475] bond16: (slave erspan2): Enslaving as an active interface with an up link [ 321.247769][T13484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1910'. [ 321.277763][T13484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1910'. [ 321.316249][T13486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1910'. [ 321.342484][T13486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1910'. [ 321.365852][T13486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1910'. [ 321.381047][T13486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1910'. [ 321.613883][T13502] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1915'. [ 321.979814][T13519] bridge6: entered promiscuous mode [ 322.019997][T13519] bridge6: entered allmulticast mode [ 322.396251][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 322.404903][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 322.428700][T13541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1925'. [ 323.579274][T13582] lo speed is unknown, defaulting to 1000 [ 323.593954][T13564] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 323.870436][T13605] netlink: 'syz.0.1949': attribute type 1 has an invalid length. [ 323.980684][T13605] 8021q: adding VLAN 0 to HW filter on device bond12 [ 324.096272][T13613] 8021q: adding VLAN 0 to HW filter on device bond13 [ 324.107569][T13613] 8021q: adding VLAN 0 to HW filter on device bond14 [ 324.690034][T13606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.797825][ T5642] Bluetooth: hci2: command 0x0406 tx timeout [ 324.866951][T13630] lo speed is unknown, defaulting to 1000 [ 324.885694][T13632] xt_l2tp: v2 tid > 0xffff: 37482740 [ 325.440419][T13658] lo speed is unknown, defaulting to 1000 [ 325.642412][T13663] lo speed is unknown, defaulting to 1000 [ 325.957555][T13674] syzkaller0: entered promiscuous mode [ 325.964655][T13674] syzkaller0: entered allmulticast mode [ 325.979629][T13678] netlink: 'syz.3.1963': attribute type 1 has an invalid length. [ 325.990143][T13682] __nla_validate_parse: 5 callbacks suppressed [ 325.990163][T13682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1964'. [ 327.521306][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 328.089534][T13677] veth1: entered promiscuous mode [ 328.098709][T13677] macsec1: entered promiscuous mode [ 328.104181][T13677] macsec1: entered allmulticast mode [ 328.110192][T13677] veth1: entered allmulticast mode [ 328.117611][T13677] veth1: left allmulticast mode [ 328.122626][T13677] veth1: left promiscuous mode [ 328.154047][T13685] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 328.542935][T13015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.584476][T13015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.759923][T13699] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1971'. [ 328.889694][T13707] nbd: couldn't find a device at index 0 [ 329.037449][T13730] netlink: 'syz.3.1977': attribute type 49 has an invalid length. [ 329.531277][T13761] netlink: 223 bytes leftover after parsing attributes in process `syz.3.1986'. [ 329.555896][T13763] netlink: 'syz.0.1985': attribute type 4 has an invalid length. [ 329.584294][T13763] netlink: 'syz.0.1985': attribute type 4 has an invalid length. [ 329.879977][T13768] syzkaller0: entered promiscuous mode [ 329.895091][T13768] syzkaller0: entered allmulticast mode [ 329.938597][T13771] gtp1: entered promiscuous mode [ 329.951100][T13771] gtp1: entered allmulticast mode [ 329.972764][T13771] team0: Device gtp1 is of different type [ 330.008992][T13775] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 330.034260][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1990'. [ 330.220421][T13784] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1993'. [ 330.278774][T13787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.371871][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 330.396840][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1996'. [ 330.418322][T13798] netlink: 'syz.3.1996': attribute type 11 has an invalid length. [ 331.037560][T13016] wlan1: Trigger new scan to find an IBSS to join [ 332.989471][T13841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2007'. [ 333.063200][T13824] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 333.251314][T13846] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2009'. [ 333.283573][T13848] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2009'. [ 333.318854][T13847] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2008'. [ 333.333153][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2009'. [ 333.358528][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2009'. [ 333.407339][ T43] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.432008][ T43] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.466812][ T43] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.534354][ T43] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.779435][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2014'. [ 333.882496][T13874] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 333.995158][T13014] wlan1: Trigger new scan to find an IBSS to join [ 334.302227][T13895] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2020'. [ 334.362019][T13895] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2020'. [ 334.811738][T13922] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 335.018946][ T6008] bridge0: entered promiscuous mode [ 335.094555][T13936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2032'. [ 335.257054][T13931] lo speed is unknown, defaulting to 1000 [ 336.231136][T13988] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 336.356331][T13990] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 336.567287][T13997] syzkaller1: entered promiscuous mode [ 336.591737][T13997] syzkaller1: entered allmulticast mode [ 336.955803][T13014] wlan1: Trigger new scan to find an IBSS to join [ 337.147186][T14035] netlink: 'syz.4.2054': attribute type 20 has an invalid length. [ 337.449639][T14040] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 337.838508][T14052] syz.2.2063: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 337.871633][T14052] CPU: 0 UID: 0 PID: 14052 Comm: syz.2.2063 Not tainted syzkaller #0 PREEMPT(full) [ 337.871681][T14052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 337.871706][T14052] Call Trace: [ 337.871716][T14052] [ 337.871725][T14052] dump_stack_lvl+0xe8/0x150 [ 337.871756][T14052] warn_alloc+0x249/0x340 [ 337.871790][T14052] ? stack_trace_save+0xa9/0x100 [ 337.871826][T14052] ? __pfx_warn_alloc+0x10/0x10 [ 337.871863][T14052] ? kasan_save_track+0x4f/0x80 [ 337.871891][T14052] ? kasan_save_track+0x3e/0x80 [ 337.871918][T14052] ? __kasan_kmalloc+0x93/0xb0 [ 337.871945][T14052] ? __kmalloc_cache_noprof+0x31c/0x660 [ 337.871973][T14052] ? xskq_create+0x56/0x170 [ 337.872002][T14052] ? xsk_setsockopt+0x54c/0x990 [ 337.872029][T14052] ? do_sock_setsockopt+0x17c/0x1b0 [ 337.872050][T14052] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 337.872071][T14052] ? do_syscall_64+0x174/0x580 [ 337.872097][T14052] __vmalloc_node_range_noprof+0x132/0x1750 [ 337.872164][T14052] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 337.872203][T14052] ? __kasan_kmalloc+0x93/0xb0 [ 337.872241][T14052] vmalloc_user_noprof+0xad/0xe0 [ 337.872270][T14052] ? xskq_create+0xbf/0x170 [ 337.872303][T14052] xskq_create+0xbf/0x170 [ 337.872337][T14052] xsk_init_queue+0x8a/0xe0 [ 337.872371][T14052] xsk_setsockopt+0x54c/0x990 [ 337.872404][T14052] ? __pfx_xsk_setsockopt+0x10/0x10 [ 337.872433][T14052] ? __pfx_aa_sk_perm+0x10/0x10 [ 337.872477][T14052] ? aa_sock_opt_perm+0xff/0x1a0 [ 337.872513][T14052] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 337.872541][T14052] ? __pfx_xsk_setsockopt+0x10/0x10 [ 337.872573][T14052] do_sock_setsockopt+0x17c/0x1b0 [ 337.872602][T14052] __x64_sys_setsockopt+0x13d/0x1b0 [ 337.872629][T14052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.872653][T14052] do_syscall_64+0x174/0x580 [ 337.872673][T14052] ? trace_irq_disable+0x3b/0x140 [ 337.872704][T14052] ? clear_bhb_loop+0x40/0x90 [ 337.872731][T14052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.872752][T14052] RIP: 0033:0x7f7aa0d9ce59 [ 337.872772][T14052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.872789][T14052] RSP: 002b:00007f7aa1d15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 337.872811][T14052] RAX: ffffffffffffffda RBX: 00007f7aa1015fa0 RCX: 00007f7aa0d9ce59 [ 337.872827][T14052] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 337.872840][T14052] RBP: 00007f7aa0e32d6f R08: 0000000000000004 R09: 0000000000000000 [ 337.872854][T14052] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.872867][T14052] R13: 00007f7aa1016038 R14: 00007f7aa1015fa0 R15: 00007fff70c10af8 [ 337.872903][T14052] [ 337.872912][T14052] Mem-Info: [ 338.188873][T14052] active_anon:5791 inactive_anon:0 isolated_anon:0 [ 338.188873][T14052] active_file:3146 inactive_file:40059 isolated_file:0 [ 338.188873][T14052] unevictable:768 dirty:192 writeback:0 [ 338.188873][T14052] slab_reclaimable:11152 slab_unreclaimable:106359 [ 338.188873][T14052] mapped:31614 shmem:1287 pagetables:1406 [ 338.188873][T14052] sec_pagetables:0 bounce:0 [ 338.188873][T14052] kernel_misc_reclaimable:0 [ 338.188873][T14052] free:1319816 free_pcp:7398 free_cma:0 [ 338.253431][T14063] netlink: 'syz.2.2063': attribute type 10 has an invalid length. [ 338.264667][T14052] Node 0 active_anon:23264kB inactive_anon:0kB active_file:12584kB inactive_file:160036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130456kB dirty:768kB writeback:0kB shmem:3612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14652kB pagetables:5560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 338.317404][T14060] __nla_validate_parse: 8 callbacks suppressed [ 338.317445][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2063'. [ 338.333799][T14052] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 338.371325][T14060] openvswitch: netlink: Key 0 has unexpected len 172 expected 0 [ 338.384063][T13015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.435725][T14052] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.436067][T14060] netlink: 'syz.2.2063': attribute type 10 has an invalid length. [ 338.497626][T14052] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 338.504016][T14052] Node 0 DMA32 free:1320416kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23264kB inactive_anon:0kB active_file:12584kB inactive_file:160036kB unevictable:1536kB writepending:768kB zspages:0kB present:3129332kB managed:2552596kB mlocked:0kB bounce:0kB free_pcp:31196kB local_pcp:20152kB free_cma:0kB [ 338.608262][T14052] lowmem_reserve[]: 0 0 0 0 0 [ 338.692829][T14052] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 338.766017][T14052] lowmem_reserve[]: 0 0 0 0 0 [ 338.774345][T14052] Node 1 Normal free:3942988kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.809086][T14052] lowmem_reserve[]: 0 0 0 0 0 [ 338.814026][T14052] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 338.828959][T14052] Node 0 DMA32: 3995*4kB (UM) 3052*8kB (UM) 1957*16kB (UM) 723*32kB (UME) 376*64kB (UME) 230*128kB (UM) 108*256kB (UME) 90*512kB (UME) 64*1024kB (UM) 40*2048kB (UME) 232*4096kB (UM) = 1319804kB [ 338.852818][T14052] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 338.865650][T14052] Node 1 Normal: 1*4kB (M) 11*8kB (UM) 11*16kB (UM) 8*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3942988kB [ 338.885182][T14052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.896928][T14052] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 338.907682][T14052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.918702][T14052] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 338.931502][T14052] 44538 total pagecache pages [ 338.936933][T14052] 0 pages in swap cache [ 338.941149][T14052] Free swap = 124996kB [ 338.946069][T14052] Total swap = 124996kB [ 338.950295][T14052] 2097051 pages RAM [ 338.954124][T14052] 0 pages HighMem/MovableOnly [ 338.960238][T14052] 427119 pages reserved [ 338.964467][T14052] 0 pages cma reserved [ 341.113796][T14063] team0: Port device dummy0 added [ 341.133292][T14060] team0: Port device dummy0 removed [ 341.151137][T14060] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 341.355532][T14083] xt_hashlimit: size too large, truncated to 1048576 [ 341.459783][T14098] netlink: 'syz.0.2068': attribute type 1 has an invalid length. [ 341.503014][T14098] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2068'. [ 341.684079][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 341.882495][T14117] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 341.967593][T14110] veth1_virt_wifi: Device is already in use. [ 341.995900][T14108] lo speed is unknown, defaulting to 1000 [ 342.864641][T14130] geneve1: entered promiscuous mode [ 342.962443][T14148] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 342.989531][T14150] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2081'. [ 343.451503][T14170] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 343.524566][ T1657] block nbd3: Possible stuck request ffff888027c60380: control (read@0,1024B). Runtime 120 seconds [ 343.539044][ T1657] block nbd3: Possible stuck request ffff888027c60540: control (read@1024,1024B). Runtime 120 seconds [ 343.550712][ T1657] block nbd3: Possible stuck request ffff888027c60700: control (read@2048,1024B). Runtime 120 seconds [ 343.562416][ T1657] block nbd3: Possible stuck request ffff888027c608c0: control (read@3072,1024B). Runtime 120 seconds [ 344.367489][T14193] lo speed is unknown, defaulting to 1000 [ 344.539571][T14196] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 344.567544][T14196] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 345.038776][T14209] syzkaller0: entered promiscuous mode [ 345.086245][T14209] syzkaller0: entered allmulticast mode [ 345.134138][T14236] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 345.276806][T14240] netlink: 'syz.1.2105': attribute type 8 has an invalid length. [ 345.741425][T14250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2107'. [ 346.032994][T14256] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2109'. [ 346.075215][T14256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.118683][T14259] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2110'. [ 346.149978][T14259] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2110'. [ 346.319097][T14265] netlink: 63 bytes leftover after parsing attributes in process `syz.0.2112'. [ 346.390760][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 346.416765][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 346.455246][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 346.464406][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 346.623572][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2116'. [ 346.648535][T14273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.819295][T14279] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 346.890097][T14281] syzkaller0: entered promiscuous mode [ 346.908843][T14281] syzkaller0: entered allmulticast mode [ 347.647814][T14298] tipc: Resetting bearer [ 347.682691][T14298] hsr0: left promiscuous mode [ 347.810704][T14303] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 348.301154][T14332] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 348.448937][T14341] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 348.458829][T14337] lo speed is unknown, defaulting to 1000 [ 348.560646][T14347] syzkaller0: entered promiscuous mode [ 348.575482][T14347] syzkaller0: entered allmulticast mode [ 349.324118][T14361] team0: No ports can be present during mode change [ 349.531640][ T5642] block nbd2: Receive control failed (result -1) [ 349.797722][T14392] netlink: 'syz.4.2151': attribute type 12 has an invalid length. [ 349.830339][T14392] netlink: 'syz.4.2151': attribute type 29 has an invalid length. [ 349.860496][T14395] syzkaller0: entered promiscuous mode [ 349.884103][T14395] syzkaller0: entered allmulticast mode [ 349.899525][T14399] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 350.461212][T14407] block nbd0: NBD_DISCONNECT [ 350.507979][T14410] syz.3.2155 (14410) used obsolete PPPIOCDETACH ioctl [ 350.697506][T14420] netlink: 'syz.2.2158': attribute type 1 has an invalid length. [ 350.913893][T14434] __nla_validate_parse: 12 callbacks suppressed [ 350.913917][T14434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2163'. [ 351.137023][T14439] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 351.290168][T14445] syzkaller0: entered promiscuous mode [ 351.304107][T14445] syzkaller0: entered allmulticast mode [ 351.631323][T14465] syzkaller1: left promiscuous mode [ 351.656989][T14465] syzkaller1: left allmulticast mode [ 351.687204][T14468] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2175'. [ 351.697852][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2175'. [ 351.708563][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2175'. [ 351.936603][T14477] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2178'. [ 351.946324][T14478] tc_dump_action: action bad kind [ 352.090808][T14493] netlink: 'syz.3.2183': attribute type 1 has an invalid length. [ 352.100458][T14493] netlink: 'syz.3.2183': attribute type 30 has an invalid length. [ 352.108698][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2183'. [ 352.156484][T14491] netlink: 'syz.4.2182': attribute type 1 has an invalid length. [ 352.164517][T14494] netlink: 'syz.3.2183': attribute type 30 has an invalid length. [ 352.172637][T14491] netlink: 16022 bytes leftover after parsing attributes in process `syz.4.2182'. [ 352.182396][T14494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2183'. [ 352.198391][T14493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2183'. [ 352.221514][T14493] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2183'. [ 352.325906][T14493] syzkaller0: entered promiscuous mode [ 352.333277][T14493] syzkaller0: entered allmulticast mode [ 352.343710][T14497] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 355.208409][T14518] gretap0: entered promiscuous mode [ 355.231352][T14518] macvlan1: entered allmulticast mode [ 355.251419][T14518] gretap0: entered allmulticast mode [ 355.377222][T14525] netlink: 'syz.3.2194': attribute type 15 has an invalid length. [ 355.634418][T14551] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 355.850145][T14564] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 355.863873][T14564] --map-set only usable from mangle table [ 356.082029][ T29] audit: type=1800 audit(1780517321.371:9): pid=14569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2205" name="memory.events" dev="tmpfs" ino=2329 res=0 errno=0 [ 356.408598][T14567] : renamed from veth0_to_bond (while UP) [ 356.439604][T14571] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 356.447084][T14571] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 356.724581][T14594] netlink: 'syz.4.2210': attribute type 1 has an invalid length. [ 356.925777][T14594] 8021q: adding VLAN 0 to HW filter on device bond17 [ 356.938061][T14598] bond17: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 356.953808][T14598] bond17: entered allmulticast mode [ 357.019268][T14600] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.026730][T14600] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.066326][T14600] bridge0: entered allmulticast mode [ 357.191458][T14602] bond17: (slave ip6gretap3): Enslaving as an active interface with an up link [ 357.224912][T14609] bridge_slave_1: left allmulticast mode [ 357.248198][T14609] bridge_slave_1: left promiscuous mode [ 357.288967][T14609] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.317836][T14609] bridge_slave_0: left allmulticast mode [ 357.352385][T14609] bridge_slave_0: left promiscuous mode [ 357.383016][T14609] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.476035][T14625] netlink: 'syz.0.2213': attribute type 21 has an invalid length. [ 357.609255][T14625] __nla_validate_parse: 2 callbacks suppressed [ 357.609275][T14625] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2213'. [ 357.637617][T14633] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 357.650848][T14635] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 357.661564][T14633] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 357.671161][T14635] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 357.753173][T14636] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2213'. [ 357.931624][T14636] dummy0 (unregistering): left allmulticast mode [ 357.947481][T14636] dummy0 (unregistering): left promiscuous mode [ 358.235252][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 358.645163][T14662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2217'. [ 358.657534][T14662] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 358.761595][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2218'. [ 358.829835][T14670] xt_TCPMSS: Only works on TCP SYN packets [ 361.755787][ T5002] udevd[5002]: worker [9862] /devices/virtual/block/nbd3 is taking a long time [ 371.931955][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.943393][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.951989][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.960372][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.969643][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 372.244081][T14760] lo speed is unknown, defaulting to 1000 [ 372.480595][T14760] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.488395][T14760] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.496559][T14760] bridge_slave_0: entered allmulticast mode [ 372.504065][T14760] bridge_slave_0: entered promiscuous mode [ 372.512995][T14760] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.520416][T14760] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.528886][T14760] bridge_slave_1: entered allmulticast mode [ 372.537537][T14760] bridge_slave_1: entered promiscuous mode [ 372.570010][T14760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.582122][T14760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.616011][T14760] team0: Port device team_slave_0 added [ 372.623929][T14760] team0: Port device team_slave_1 added [ 372.652662][T14760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.660786][T14760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.687213][T14760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.699936][T14760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.707038][T14760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.733217][T14760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.779838][T14760] hsr_slave_0: entered promiscuous mode [ 372.786804][T14760] hsr_slave_1: entered promiscuous mode [ 372.792985][T14760] debugfs: 'hsr0' already exists in 'hsr' [ 372.799334][T14760] Cannot create hsr debugfs directory [ 373.082977][ T5642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 373.101573][ T5642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 373.109639][ T5642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 373.117691][ T5642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 373.126939][ T5642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 373.210643][ T5642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 373.228751][ T5642] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 373.239452][ T5642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 373.251313][ T5642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 373.261600][ T5642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 373.602207][ T1657] block nbd3: Possible stuck request ffff888027c60380: control (read@0,1024B). Runtime 150 seconds [ 373.613223][ T1657] block nbd3: Possible stuck request ffff888027c60540: control (read@1024,1024B). Runtime 150 seconds [ 373.628462][ T1657] block nbd3: Possible stuck request ffff888027c60700: control (read@2048,1024B). Runtime 150 seconds [ 373.641385][ T1657] block nbd3: Possible stuck request ffff888027c608c0: control (read@3072,1024B). Runtime 150 seconds [ 373.715111][T14779] lo speed is unknown, defaulting to 1000 [ 373.758145][T14781] lo speed is unknown, defaulting to 1000 [ 373.995493][ T5642] Bluetooth: hci5: command tx timeout [ 374.123313][T14779] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.131871][T14779] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.140425][T14779] bridge_slave_0: entered allmulticast mode [ 374.149928][T14779] bridge_slave_0: entered promiscuous mode [ 374.177662][T14779] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.184932][T14779] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.192153][T14779] bridge_slave_1: entered allmulticast mode [ 374.200010][T14779] bridge_slave_1: entered promiscuous mode [ 374.250338][T14779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.276385][T14779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.309823][T14781] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.319415][T14781] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.328200][T14781] bridge_slave_0: entered allmulticast mode [ 374.340008][T14781] bridge_slave_0: entered promiscuous mode [ 374.398802][T14781] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.426119][T14781] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.434365][T14781] bridge_slave_1: entered allmulticast mode [ 374.459077][T14781] bridge_slave_1: entered promiscuous mode [ 374.480695][T14779] team0: Port device team_slave_0 added [ 374.517180][T14779] team0: Port device team_slave_1 added [ 374.599973][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 374.612740][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 374.622713][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 374.631320][T14779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.646447][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 374.653560][T14779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.653592][T14779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.692460][T14781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.706994][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 374.720249][T14779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.728589][T14779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.775770][T14779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.801175][ T5645] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 374.837255][ T5645] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 374.849342][ T5645] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 374.859330][T14781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.881330][ T5645] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 374.889999][ T5645] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 374.953257][T14781] team0: Port device team_slave_0 added [ 374.981764][T14781] team0: Port device team_slave_1 added [ 374.999085][T14779] hsr_slave_0: entered promiscuous mode [ 375.007160][T14779] hsr_slave_1: entered promiscuous mode [ 375.013814][T14779] debugfs: 'hsr0' already exists in 'hsr' [ 375.020794][T14779] Cannot create hsr debugfs directory [ 375.106955][T14781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.114035][T14781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.142308][T14781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.158777][T14781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.166862][T14781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.194098][T14781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.207782][ T50] Bluetooth: hci6: command tx timeout [ 375.355275][ T50] Bluetooth: hci7: command tx timeout [ 375.403118][T14781] hsr_slave_0: entered promiscuous mode [ 375.412350][T14781] hsr_slave_1: entered promiscuous mode [ 375.420207][T14781] debugfs: 'hsr0' already exists in 'hsr' [ 375.427875][T14781] Cannot create hsr debugfs directory [ 375.718027][T14815] lo speed is unknown, defaulting to 1000 [ 375.789194][T14817] lo speed is unknown, defaulting to 1000 [ 376.074932][ T50] Bluetooth: hci5: command tx timeout [ 376.257556][T14815] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.265792][T14815] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.273038][T14815] bridge_slave_0: entered allmulticast mode [ 376.281231][T14815] bridge_slave_0: entered promiscuous mode [ 376.299849][T14815] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.308125][T14815] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.317038][T14815] bridge_slave_1: entered allmulticast mode [ 376.324457][T14815] bridge_slave_1: entered promiscuous mode [ 376.382540][T14815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.401503][T14815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.459907][T14817] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.467338][T14817] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.475966][T14817] bridge_slave_0: entered allmulticast mode [ 376.483760][T14817] bridge_slave_0: entered promiscuous mode [ 376.497327][T14815] team0: Port device team_slave_0 added [ 376.503168][T14817] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.510715][T14817] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.518984][T14817] bridge_slave_1: entered allmulticast mode [ 376.528277][T14817] bridge_slave_1: entered promiscuous mode [ 376.538270][T14815] team0: Port device team_slave_1 added [ 376.595852][T14817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.607192][T14815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.614192][T14815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.640924][T14815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.657952][T14817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.670242][T14815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.677355][T14815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.703865][T14815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.751390][T14817] team0: Port device team_slave_0 added [ 376.772089][T14817] team0: Port device team_slave_1 added [ 376.811043][T14815] hsr_slave_0: entered promiscuous mode [ 376.817959][T14815] hsr_slave_1: entered promiscuous mode [ 376.824310][T14815] debugfs: 'hsr0' already exists in 'hsr' [ 376.831150][T14815] Cannot create hsr debugfs directory [ 376.850905][T14817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.858696][T14817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.876938][ T50] Bluetooth: hci8: command tx timeout [ 376.890493][T14817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.908049][T14817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.916116][T14817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.942609][T14817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.956266][ T50] Bluetooth: hci9: command tx timeout [ 377.059804][T14817] hsr_slave_0: entered promiscuous mode [ 377.066812][T14817] hsr_slave_1: entered promiscuous mode [ 377.073070][T14817] debugfs: 'hsr0' already exists in 'hsr' [ 377.079700][T14817] Cannot create hsr debugfs directory [ 377.275989][ T50] Bluetooth: hci6: command tx timeout [ 377.435793][ T5645] Bluetooth: hci7: command tx timeout [ 378.155060][ T5645] Bluetooth: hci5: command tx timeout [ 378.955428][ T5645] Bluetooth: hci8: command tx timeout [ 379.035070][ T5645] Bluetooth: hci9: command tx timeout [ 379.355365][ T5645] Bluetooth: hci6: command tx timeout [ 379.514916][ T5645] Bluetooth: hci7: command tx timeout [ 380.235302][ T5645] Bluetooth: hci5: command tx timeout [ 381.035004][ T5645] Bluetooth: hci8: command tx timeout [ 381.115270][ T5645] Bluetooth: hci9: command tx timeout [ 381.435236][ T5645] Bluetooth: hci6: command tx timeout [ 381.594922][ T5645] Bluetooth: hci7: command tx timeout [ 383.115628][ T5645] Bluetooth: hci8: command tx timeout [ 383.196128][ T5645] Bluetooth: hci9: command tx timeout [ 403.680594][ T1657] block nbd3: Possible stuck request ffff888027c60380: control (read@0,1024B). Runtime 180 seconds [ 403.692322][ T1657] block nbd3: Possible stuck request ffff888027c60540: control (read@1024,1024B). Runtime 180 seconds [ 403.704346][ T1657] block nbd3: Possible stuck request ffff888027c60700: control (read@2048,1024B). Runtime 180 seconds [ 403.716487][ T1657] block nbd3: Possible stuck request ffff888027c608c0: control (read@3072,1024B). Runtime 180 seconds [ 404.429766][ T5002] udevd[5002]: worker [9862] /devices/virtual/block/nbd3 timeout; kill it [ 404.438769][ T5002] udevd[5002]: seq 16102 '/devices/virtual/block/nbd3' killed [ 431.988550][ T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 432.003863][ T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 432.013532][ T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 432.029127][ T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 432.037869][ T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 432.313964][T14853] lo speed is unknown, defaulting to 1000 [ 432.548754][T14853] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.556387][T14853] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.563659][T14853] bridge_slave_0: entered allmulticast mode [ 432.571519][T14853] bridge_slave_0: entered promiscuous mode [ 432.580125][T14853] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.587627][T14853] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.594953][T14853] bridge_slave_1: entered allmulticast mode [ 432.602426][T14853] bridge_slave_1: entered promiscuous mode [ 432.634089][T14853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.649561][T14853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.683063][T14853] team0: Port device team_slave_0 added [ 432.692466][T14853] team0: Port device team_slave_1 added [ 432.721234][T14853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.728313][T14853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.754833][T14853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.767606][T14853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.774651][T14853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.801646][T14853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.850158][T14853] hsr_slave_0: entered promiscuous mode [ 432.857326][T14853] hsr_slave_1: entered promiscuous mode [ 432.863539][T14853] debugfs: 'hsr0' already exists in 'hsr' [ 432.869635][T14853] Cannot create hsr debugfs directory [ 433.068848][ T50] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 433.084897][ T50] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 433.094009][ T50] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 433.103793][ T50] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 433.111854][ T50] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 433.525763][T14871] lo speed is unknown, defaulting to 1000 [ 433.599856][ T5645] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 433.614137][ T5645] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 433.625528][ T5645] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 433.636986][ T5645] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 433.647043][ T5645] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 433.773278][ T1657] block nbd3: Possible stuck request ffff888027c60380: control (read@0,1024B). Runtime 210 seconds [ 433.786755][ T1657] block nbd3: Possible stuck request ffff888027c60540: control (read@1024,1024B). Runtime 210 seconds [ 433.800541][ T1657] block nbd3: Possible stuck request ffff888027c60700: control (read@2048,1024B). Runtime 210 seconds [ 433.813077][ T1657] block nbd3: Possible stuck request ffff888027c608c0: control (read@3072,1024B). Runtime 210 seconds [ 434.009305][T14871] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.017983][T14871] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.025448][T14871] bridge_slave_0: entered allmulticast mode [ 434.033820][T14871] bridge_slave_0: entered promiscuous mode [ 434.043668][T14871] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.051284][T14871] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.059004][T14871] bridge_slave_1: entered allmulticast mode [ 434.067736][T14871] bridge_slave_1: entered promiscuous mode [ 434.075135][ T5645] Bluetooth: hci10: command tx timeout [ 434.118777][T14871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.132627][T14871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.172716][T14871] team0: Port device team_slave_0 added [ 434.183119][T14871] team0: Port device team_slave_1 added [ 434.222387][T14871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.229484][T14871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.256174][T14871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.267285][T14882] lo speed is unknown, defaulting to 1000 [ 434.271892][T14871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.280222][T14871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.306662][T14871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.394493][T14871] hsr_slave_0: entered promiscuous mode [ 434.402140][T14871] hsr_slave_1: entered promiscuous mode [ 434.408753][T14871] debugfs: 'hsr0' already exists in 'hsr' [ 434.414524][T14871] Cannot create hsr debugfs directory [ 434.788481][T14882] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.797255][T14882] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.804566][T14882] bridge_slave_0: entered allmulticast mode [ 434.812870][T14882] bridge_slave_0: entered promiscuous mode [ 434.821403][T14882] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.829219][T14882] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.837439][T14882] bridge_slave_1: entered allmulticast mode [ 434.846723][T14882] bridge_slave_1: entered promiscuous mode [ 434.900770][T14882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.918601][T14882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.000225][T14882] team0: Port device team_slave_0 added [ 435.027191][T14882] team0: Port device team_slave_1 added [ 435.120318][ T50] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 435.139975][ T50] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 435.148830][ T50] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 435.157711][ T50] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 435.160290][T14882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.173837][T14882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.200772][ T50] Bluetooth: hci11: command tx timeout [ 435.208916][ T5642] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 435.225194][T14882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.238306][T14882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.245691][T14882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.273482][T14882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.364653][T14882] hsr_slave_0: entered promiscuous mode [ 435.380937][T14882] hsr_slave_1: entered promiscuous mode [ 435.388285][T14882] debugfs: 'hsr0' already exists in 'hsr' [ 435.394156][T14882] Cannot create hsr debugfs directory [ 435.451870][ T5642] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 435.465984][ T5642] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 435.477064][ T5642] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 435.487584][ T5642] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 435.500481][ T5642] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 435.675058][ T5642] Bluetooth: hci12: command tx timeout [ 436.038967][T14912] lo speed is unknown, defaulting to 1000 [ 436.147557][T14908] lo speed is unknown, defaulting to 1000 [ 436.157663][ T5642] Bluetooth: hci10: command tx timeout [ 436.533619][T14912] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.541020][T14912] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.548460][T14912] bridge_slave_0: entered allmulticast mode [ 436.557166][T14912] bridge_slave_0: entered promiscuous mode [ 436.566576][T14912] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.573784][T14912] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.581350][T14912] bridge_slave_1: entered allmulticast mode [ 436.589749][T14912] bridge_slave_1: entered promiscuous mode [ 436.639627][T14912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.653703][T14912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.702585][T14912] team0: Port device team_slave_0 added [ 436.727289][T14912] team0: Port device team_slave_1 added [ 436.780833][T14912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.788922][T14912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.816223][T14912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.848896][T14912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.856408][T14912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.882876][T14912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.914640][T14908] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.922387][T14908] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.929979][T14908] bridge_slave_0: entered allmulticast mode [ 436.938686][T14908] bridge_slave_0: entered promiscuous mode [ 436.947943][T14908] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.956075][T14908] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.963470][T14908] bridge_slave_1: entered allmulticast mode [ 436.972355][T14908] bridge_slave_1: entered promiscuous mode [ 437.030732][T14908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.046439][T14908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.061232][T14912] hsr_slave_0: entered promiscuous mode [ 437.068472][T14912] hsr_slave_1: entered promiscuous mode [ 437.075059][T14912] debugfs: 'hsr0' already exists in 'hsr' [ 437.080870][T14912] Cannot create hsr debugfs directory [ 437.126959][T14908] team0: Port device team_slave_0 added [ 437.142058][T14908] team0: Port device team_slave_1 added [ 437.208220][T14908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.216445][T14908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.243432][T14908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.256590][T14908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.263576][T14908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.290217][ T5642] Bluetooth: hci11: command tx timeout [ 437.296353][T14908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.355563][ T5642] Bluetooth: hci13: command tx timeout [ 437.401137][T14908] hsr_slave_0: entered promiscuous mode [ 437.408215][T14908] hsr_slave_1: entered promiscuous mode [ 437.414650][T14908] debugfs: 'hsr0' already exists in 'hsr' [ 437.420596][T14908] Cannot create hsr debugfs directory [ 437.515361][ T5642] Bluetooth: hci14: command tx timeout [ 437.755594][ T5642] Bluetooth: hci12: command tx timeout [ 438.235392][ T5642] Bluetooth: hci10: command tx timeout [ 439.355226][ T5642] Bluetooth: hci11: command tx timeout [ 439.435208][ T5642] Bluetooth: hci13: command tx timeout [ 439.596262][ T5642] Bluetooth: hci14: command tx timeout [ 439.835497][ T5642] Bluetooth: hci12: command tx timeout [ 440.155626][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 440.315028][ T5642] Bluetooth: hci10: command tx timeout [ 441.435065][ T5642] Bluetooth: hci11: command tx timeout [ 441.515057][ T5642] Bluetooth: hci13: command tx timeout [ 441.676333][ T5642] Bluetooth: hci14: command tx timeout [ 441.915292][ T5642] Bluetooth: hci12: command tx timeout [ 443.595390][ T5642] Bluetooth: hci13: command tx timeout [ 443.756147][ T5642] Bluetooth: hci14: command tx timeout [ 455.515231][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 463.835972][ T1657] block nbd3: Possible stuck request ffff888027c60380: control (read@0,1024B). Runtime 240 seconds [ 463.847317][ T1657] block nbd3: Possible stuck request ffff888027c60540: control (read@1024,1024B). Runtime 240 seconds [ 463.858948][ T1657] block nbd3: Possible stuck request ffff888027c60700: control (read@2048,1024B). Runtime 240 seconds [ 463.870783][ T1657] block nbd3: Possible stuck request ffff888027c608c0: control (read@3072,1024B). Runtime 240 seconds [ 465.755620][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 475.995841][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 492.127194][ T5645] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 492.139145][ T5645] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 492.149086][ T5645] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 492.162383][ T5645] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 492.170943][ T5645] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 492.449880][T14946] lo speed is unknown, defaulting to 1000 [ 492.693585][T14946] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.701520][T14946] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.709265][T14946] bridge_slave_0: entered allmulticast mode [ 492.717991][T14946] bridge_slave_0: entered promiscuous mode [ 492.726508][T14946] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.733752][T14946] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.741845][T14946] bridge_slave_1: entered allmulticast mode [ 492.749887][T14946] bridge_slave_1: entered promiscuous mode [ 492.783670][T14946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.797351][T14946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.830765][T14946] team0: Port device team_slave_0 added [ 492.839577][T14946] team0: Port device team_slave_1 added [ 492.868720][T14946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.875805][T14946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.902201][T14946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.915421][T14946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.922412][T14946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.948757][T14946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.997661][T14946] hsr_slave_0: entered promiscuous mode [ 493.004406][T14946] hsr_slave_1: entered promiscuous mode [ 493.011208][T14946] debugfs: 'hsr0' already exists in 'hsr' [ 493.017003][T14946] Cannot create hsr debugfs directory [ 493.205800][ T5645] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 493.225725][ T5645] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 493.233677][ T5645] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 493.246282][ T5645] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 493.254292][ T5645] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 493.649928][T14964] lo speed is unknown, defaulting to 1000 [ 493.782266][ T5645] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 493.797827][ T5645] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 493.811463][ T5645] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 493.821828][ T5645] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 493.830360][ T5645] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 493.945901][ T1657] block nbd3: Possible stuck request ffff888027c60380: control (read@0,1024B). Runtime 270 seconds [ 493.957927][ T1657] block nbd3: Possible stuck request ffff888027c60540: control (read@1024,1024B). Runtime 270 seconds [ 493.970175][ T1657] block nbd3: Possible stuck request ffff888027c60700: control (read@2048,1024B). Runtime 270 seconds [ 493.982325][ T1657] block nbd3: Possible stuck request ffff888027c608c0: control (read@3072,1024B). Runtime 270 seconds [ 494.194549][T14964] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.201985][T14964] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.210051][T14964] bridge_slave_0: entered allmulticast mode [ 494.219260][T14964] bridge_slave_0: entered promiscuous mode [ 494.229550][T14964] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.237540][ T5645] Bluetooth: hci15: command tx timeout [ 494.244161][T14964] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.244411][T14964] bridge_slave_1: entered allmulticast mode [ 494.259097][T14964] bridge_slave_1: entered promiscuous mode [ 494.305738][T14964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.320286][T14964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.368563][T14964] team0: Port device team_slave_0 added [ 494.378110][T14964] team0: Port device team_slave_1 added [ 494.412161][T14964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.420033][T14964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.448083][T14964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.468440][T14964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.475966][T14964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.502647][T14964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.513968][T14976] lo speed is unknown, defaulting to 1000 [ 494.598200][T14964] hsr_slave_0: entered promiscuous mode [ 494.605585][T14964] hsr_slave_1: entered promiscuous mode [ 494.612024][T14964] debugfs: 'hsr0' already exists in 'hsr' [ 494.617909][T14964] Cannot create hsr debugfs directory [ 494.982413][T14976] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.990100][T14976] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.998017][T14976] bridge_slave_0: entered allmulticast mode [ 495.006101][T14976] bridge_slave_0: entered promiscuous mode [ 495.015914][T14976] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.023233][T14976] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.030970][T14976] bridge_slave_1: entered allmulticast mode [ 495.039818][T14976] bridge_slave_1: entered promiscuous mode [ 495.124266][T14976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.142004][T14976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.275740][ T5645] Bluetooth: hci16: command tx timeout [ 495.303022][T14976] team0: Port device team_slave_0 added [ 495.323235][ T5642] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 495.340957][T14976] team0: Port device team_slave_1 added [ 495.345691][ T5642] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 495.356837][ T5642] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 495.367706][ T5642] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 495.381339][ T5642] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 495.480768][ T5642] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 495.498076][T14976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.503189][ T5642] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 495.505831][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.505863][T14976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.526320][T14976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.562209][ T5642] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 495.572981][ T5642] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 495.581490][ T5642] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 495.588895][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.588929][T14976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.812253][T14976] hsr_slave_0: entered promiscuous mode [ 495.819372][T14976] hsr_slave_1: entered promiscuous mode [ 495.826749][T14976] debugfs: 'hsr0' already exists in 'hsr' [ 495.832492][T14976] Cannot create hsr debugfs directory [ 495.928033][ T5645] Bluetooth: hci17: command tx timeout [ 496.193466][T15001] lo speed is unknown, defaulting to 1000 [ 496.316828][ T5645] Bluetooth: hci15: command tx timeout [ 496.356059][T15004] lo speed is unknown, defaulting to 1000 [ 496.803188][T15001] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.811503][T15001] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.819249][T15001] bridge_slave_0: entered allmulticast mode [ 496.827493][T15001] bridge_slave_0: entered promiscuous mode [ 496.846263][T15001] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.853526][T15001] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.861449][T15001] bridge_slave_1: entered allmulticast mode [ 496.870487][T15001] bridge_slave_1: entered promiscuous mode [ 496.926583][T15001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.949847][T15001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.986692][T15004] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.993983][T15004] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.002430][T15004] bridge_slave_0: entered allmulticast mode [ 497.011551][T15004] bridge_slave_0: entered promiscuous mode [ 497.031279][T15004] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.039993][T15004] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.048221][T15004] bridge_slave_1: entered allmulticast mode [ 497.056214][T15004] bridge_slave_1: entered promiscuous mode [ 497.066946][T15001] team0: Port device team_slave_0 added [ 497.088843][T15001] team0: Port device team_slave_1 added [ 497.122984][T15004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.151697][T15004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.162169][T15001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.170233][T15001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.197572][T15001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.211507][T15001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.219664][T15001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.246754][T15001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.297898][T15004] team0: Port device team_slave_0 added [ 497.310770][T15004] team0: Port device team_slave_1 added [ 497.355972][ T5637] Bluetooth: hci16: command tx timeout [ 497.378535][T15001] hsr_slave_0: entered promiscuous mode [ 497.386460][T15001] hsr_slave_1: entered promiscuous mode [ 497.393133][T15001] debugfs: 'hsr0' already exists in 'hsr' [ 497.399988][T15001] Cannot create hsr debugfs directory [ 497.407539][T15004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.414606][T15004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.443700][T15004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.455473][ T5637] Bluetooth: hci18: command tx timeout [ 497.462877][T15004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.470517][T15004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.497626][T15004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.590140][T15004] hsr_slave_0: entered promiscuous mode [ 497.597880][T15004] hsr_slave_1: entered promiscuous mode [ 497.604324][T15004] debugfs: 'hsr0' already exists in 'hsr' [ 497.610466][T15004] Cannot create hsr debugfs directory [ 497.676169][ T5637] Bluetooth: hci19: command tx timeout [ 497.995539][ T5637] Bluetooth: hci17: command tx timeout [ 498.406088][ T5637] Bluetooth: hci15: command tx timeout [ 498.575383][ T5637] Bluetooth: hci9: command 0x0406 tx timeout [ 498.584167][ T5640] Bluetooth: hci5: command 0x0406 tx timeout [ 498.594371][ T5640] Bluetooth: hci6: command 0x0406 tx timeout [ 498.598699][ T5637] Bluetooth: hci7: command 0x0406 tx timeout [ 498.614016][ T5640] Bluetooth: hci8: command 0x0406 tx timeout [ 499.436000][ T9643] Bluetooth: hci16: command tx timeout [ 499.515366][ T9643] Bluetooth: hci18: command tx timeout [ 499.756004][ T9643] Bluetooth: hci19: command tx timeout [ 500.075185][ T9643] Bluetooth: hci17: command tx timeout [ 500.474855][ T9643] Bluetooth: hci15: command tx timeout [ 501.515085][ T9643] Bluetooth: hci16: command tx timeout [ 501.597632][ T9643] Bluetooth: hci18: command tx timeout [ 501.835510][ T9643] Bluetooth: hci19: command tx timeout [ 502.156052][ T9643] Bluetooth: hci17: command tx timeout [ 503.675922][ T9643] Bluetooth: hci18: command tx timeout [ 503.915982][ T9643] Bluetooth: hci19: command tx timeout [ 512.475799][ T30] INFO: task syz.3.2211:14604 blocked for more than 143 seconds. [ 512.484822][ T30] Not tainted syzkaller #0 [ 512.489828][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.498888][ T30] task:syz.3.2211 state:D stack:26328 pid:14604 tgid:14596 ppid:5649 task_flags:0x480140 flags:0x00080002 [ 512.510964][ T30] Call Trace: [ 512.514281][ T30] [ 512.517357][ T30] __schedule+0x1821/0x5740 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 512.521948][ T30] ? __pfx___schedule+0x10/0x10 [ 512.527168][ T30] ? schedule+0x90/0x360 [ 512.531875][ T30] schedule+0x164/0x360 [ 512.536567][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 512.542174][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 512.549820][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 512.557575][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 512.563766][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 512.570444][ T30] nbd_set_size+0x454/0x680 [ 512.575405][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 512.580560][ T30] ? nla_memcpy+0x5b/0xc0 [ 512.585729][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 512.591119][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 512.597501][ T30] ? rcu_is_watching+0x15/0xb0 [ 512.617465][ T30] ? trace_kmalloc+0x2a/0xf0 [ 512.635724][ T30] ? __nla_parse+0x40/0x60 [ 512.654208][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 512.673489][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 512.680770][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 512.687214][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 512.693377][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 512.699084][ T30] genl_rcv_msg+0x61c/0x7a0 [ 512.703690][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.709962][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 512.717129][ T30] netlink_rcv_skb+0x232/0x4b0 [ 512.721999][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.730029][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 512.736033][ T30] ? down_read+0x270/0x2e0 [ 512.740523][ T30] ? genl_rcv+0xd/0x40 [ 512.744613][ T30] genl_rcv+0x28/0x40 [ 512.748752][ T30] netlink_unicast+0x75c/0x8e0 [ 512.753556][ T30] netlink_sendmsg+0x813/0xb40 [ 512.758476][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.763822][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 512.769385][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 512.774809][ T30] ____sys_sendmsg+0x972/0x9f0 [ 512.779617][ T30] ? __might_fault+0xaf/0x130 [ 512.784350][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.789755][ T30] ? import_iovec+0x73/0xa0 [ 512.794306][ T30] ___sys_sendmsg+0x2a5/0x360 [ 512.799823][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 512.804929][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.810182][ T30] ? futex_wake+0x4ac/0x580 [ 512.814843][ T30] ? __fget_files+0x2a/0x420 [ 512.819477][ T30] ? __fget_files+0x3a0/0x420 [ 512.824172][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 512.829455][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 512.835049][ T30] ? rcu_is_watching+0x15/0xb0 [ 512.839861][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.845994][ T30] do_syscall_64+0x174/0x580 [ 512.850648][ T30] ? trace_irq_disable+0x3b/0x140 [ 512.856050][ T30] ? clear_bhb_loop+0x40/0x90 [ 512.860766][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.866765][ T30] RIP: 0033:0x7fddb2b9ce59 [ 512.871215][ T30] RSP: 002b:00007fddb3aa1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.880367][ T30] RAX: ffffffffffffffda RBX: 00007fddb2e16090 RCX: 00007fddb2b9ce59 [ 512.888713][ T30] RDX: 0000000024000004 RSI: 00002000000007c0 RDI: 000000000000000a [ 512.896844][ T30] RBP: 00007fddb2c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 512.905295][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.913359][ T30] R13: 00007fddb2e16128 R14: 00007fddb2e16090 R15: 00007ffe1c571678 [ 512.922118][ T30] [ 512.925505][ T30] INFO: task syz.0.2213:14626 blocked for more than 143 seconds. [ 512.933275][ T30] Not tainted syzkaller #0 [ 512.938338][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.947347][ T30] task:syz.0.2213 state:D stack:28704 pid:14626 tgid:14624 ppid:5641 task_flags:0x400040 flags:0x00080002 [ 512.959780][ T30] Call Trace: [ 512.963127][ T30] [ 512.966445][ T30] __schedule+0x1821/0x5740 [ 512.971062][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 512.977061][ T30] ? __pfx___schedule+0x10/0x10 [ 512.981946][ T30] ? schedule+0x90/0x360 [ 512.987161][ T30] schedule+0x164/0x360 [ 512.991396][ T30] schedule_preempt_disabled+0x13/0x30 [ 512.996992][ T30] __mutex_lock+0x7f7/0x1550 [ 513.001631][ T30] ? kernel_text_address+0xa5/0xe0 [ 513.006937][ T30] ? __mutex_lock+0x608/0x1550 [ 513.011770][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 513.016957][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 513.022048][ T30] ? stack_trace_save+0xa9/0x100 [ 513.027162][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 513.032181][ T30] ? radix_tree_lookup+0x240/0x290 [ 513.038148][ T30] genl_rcv_msg+0x10b/0x7a0 [ 513.042745][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.048500][ T30] netlink_rcv_skb+0x232/0x4b0 [ 513.053351][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.058919][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.064305][ T30] ? down_read+0x270/0x2e0 [ 513.069084][ T30] ? genl_rcv+0xd/0x40 [ 513.073647][ T30] genl_rcv+0x28/0x40 [ 513.078051][ T30] netlink_unicast+0x75c/0x8e0 [ 513.082840][ T30] netlink_sendmsg+0x813/0xb40 [ 513.087780][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.093129][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 513.098781][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.104135][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.109817][ T30] __sys_sendto+0x672/0x710 [ 513.114375][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 513.119765][ T30] ? exc_page_fault+0x6a/0xc0 [ 513.124495][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 513.130120][ T30] __x64_sys_sendto+0xde/0x100 [ 513.135539][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.141664][ T30] do_syscall_64+0x174/0x580 [ 513.146568][ T30] ? trace_irq_disable+0x3b/0x140 [ 513.151740][ T30] ? clear_bhb_loop+0x40/0x90 [ 513.156530][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.162482][ T30] RIP: 0033:0x7fdc3715d68e [ 513.167252][ T30] RSP: 002b:00007fdc37ff1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 513.175823][ T30] RAX: ffffffffffffffda RBX: 00007fdc37ff36c0 RCX: 00007fdc3715d68e [ 513.183868][ T30] RDX: 000000000000001c RSI: 00007fdc37ff2000 RDI: 0000000000000006 [ 513.191970][ T30] RBP: 0000000000000000 R08: 00007fdc37ff1f04 R09: 000000000000000c [ 513.200411][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 513.208741][ T30] R13: 00007fdc37ff1f58 R14: 00007fdc37ff2000 R15: 0000000000000000 [ 513.216894][ T30] [ 513.219979][ T30] INFO: task syz.0.2213:14632 blocked for more than 144 seconds. [ 513.228223][ T30] Not tainted syzkaller #0 [ 513.233221][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.241998][ T30] task:syz.0.2213 state:D stack:28120 pid:14632 tgid:14624 ppid:5641 task_flags:0x400140 flags:0x00080002 [ 513.254076][ T30] Call Trace: [ 513.257784][ T30] [ 513.260764][ T30] __schedule+0x1821/0x5740 [ 513.265356][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 513.270372][ T30] ? __pfx___schedule+0x10/0x10 [ 513.275346][ T30] ? schedule+0x90/0x360 [ 513.279634][ T30] schedule+0x164/0x360 [ 513.283836][ T30] schedule_preempt_disabled+0x13/0x30 [ 513.289704][ T30] __mutex_lock+0x7f7/0x1550 [ 513.294534][ T30] ? kernel_text_address+0xa5/0xe0 [ 513.299803][ T30] ? __mutex_lock+0x608/0x1550 [ 513.304682][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 513.309398][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 513.314429][ T30] ? stack_trace_save+0xa9/0x100 [ 513.319990][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 513.325068][ T30] ? radix_tree_lookup+0x240/0x290 [ 513.330223][ T30] genl_rcv_msg+0x10b/0x7a0 [ 513.334888][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.339988][ T30] netlink_rcv_skb+0x232/0x4b0 [ 513.345120][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.350186][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.355743][ T30] ? down_read+0x270/0x2e0 [ 513.360211][ T30] ? genl_rcv+0xd/0x40 [ 513.364330][ T30] genl_rcv+0x28/0x40 [ 513.368401][ T30] netlink_unicast+0x75c/0x8e0 [ 513.373215][ T30] netlink_sendmsg+0x813/0xb40 [ 513.378393][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.383757][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 513.388819][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.394143][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.399507][ T30] __sys_sendto+0x672/0x710 [ 513.404040][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 513.409445][ T30] ? exc_page_fault+0x6a/0xc0 [ 513.414175][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 513.419644][ T30] __x64_sys_sendto+0xde/0x100 [ 513.424472][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.430877][ T30] do_syscall_64+0x174/0x580 [ 513.436086][ T30] ? trace_irq_disable+0x3b/0x140 [ 513.441190][ T30] ? clear_bhb_loop+0x40/0x90 [ 513.445979][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.451903][ T30] RIP: 0033:0x7fdc3715d68e [ 513.456430][ T30] RSP: 002b:00007fdc37fd0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 513.465232][ T30] RAX: ffffffffffffffda RBX: 00007fdc37fd26c0 RCX: 00007fdc3715d68e [ 513.473242][ T30] RDX: 0000000000000024 RSI: 00007fdc37fd1000 RDI: 0000000000000008 [ 513.481328][ T30] RBP: 0000000000000000 R08: 00007fdc37fd0f04 R09: 000000000000000c [ 513.489379][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 513.497749][ T30] R13: 00007fdc37fd0f58 R14: 00007fdc37fd1000 R15: 0000000000000000 [ 513.505861][ T30] [ 513.508939][ T30] INFO: task syz.4.2215:14634 blocked for more than 144 seconds. [ 513.520324][ T30] Not tainted syzkaller #0 [ 513.526516][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.536292][ T30] task:syz.4.2215 state:D stack:24168 pid:14634 tgid:14628 ppid:5634 task_flags:0x400140 flags:0x00080002 [ 513.549638][ T30] Call Trace: [ 513.553011][ T30] [ 513.556076][ T30] __schedule+0x1821/0x5740 [ 513.560642][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 513.566013][ T30] ? __pfx___schedule+0x10/0x10 [ 513.570930][ T30] ? schedule+0x90/0x360 [ 513.575340][ T30] schedule+0x164/0x360 [ 513.579545][ T30] schedule_preempt_disabled+0x13/0x30 [ 513.585084][ T30] __mutex_lock+0x7f7/0x1550 [ 513.589706][ T30] ? kernel_text_address+0xa5/0xe0 [ 513.595163][ T30] ? __mutex_lock+0x608/0x1550 [ 513.599969][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 513.604741][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 513.609800][ T30] ? stack_trace_save+0xa9/0x100 [ 513.614914][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 513.619910][ T30] ? radix_tree_lookup+0x240/0x290 [ 513.625393][ T30] genl_rcv_msg+0x10b/0x7a0 [ 513.629958][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.635141][ T30] netlink_rcv_skb+0x232/0x4b0 [ 513.639952][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.645548][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.650991][ T30] ? down_read+0x270/0x2e0 [ 513.656160][ T30] ? genl_rcv+0xd/0x40 [ 513.660308][ T30] genl_rcv+0x28/0x40 [ 513.664343][ T30] netlink_unicast+0x75c/0x8e0 [ 513.669240][ T30] netlink_sendmsg+0x813/0xb40 [ 513.674061][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.679528][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 513.684517][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.690410][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.696090][ T30] __sys_sendto+0x672/0x710 [ 513.700652][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 513.705861][ T30] ? exc_page_fault+0x6a/0xc0 [ 513.710593][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 513.716238][ T30] __x64_sys_sendto+0xde/0x100 [ 513.721150][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.727346][ T30] do_syscall_64+0x174/0x580 [ 513.731987][ T30] ? trace_irq_disable+0x3b/0x140 [ 513.737287][ T30] ? clear_bhb_loop+0x40/0x90 [ 513.742030][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.748279][ T30] RIP: 0033:0x7f7e8115d68e [ 513.752734][ T30] RSP: 002b:00007f7e8206fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 513.761689][ T30] RAX: ffffffffffffffda RBX: 00007f7e820716c0 RCX: 00007f7e8115d68e [ 513.769797][ T30] RDX: 000000000000001c RSI: 00007f7e82070000 RDI: 000000000000000e [ 513.779313][ T30] RBP: 0000000000000000 R08: 00007f7e8206ff04 R09: 000000000000000c [ 513.788427][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 513.796594][ T30] R13: 00007f7e8206ff58 R14: 00007f7e82070000 R15: 0000000000000000 [ 513.804699][ T30] [ 513.807831][ T30] INFO: task syz.2.2216:14657 blocked for more than 144 seconds. [ 513.816127][ T30] Not tainted syzkaller #0 [ 513.821107][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.830056][ T30] task:syz.2.2216 state:D stack:27904 pid:14657 tgid:14656 ppid:5646 task_flags:0x400040 flags:0x00080002 [ 513.842294][ T30] Call Trace: [ 513.845937][ T30] [ 513.848903][ T30] __schedule+0x1821/0x5740 [ 513.853417][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 513.858802][ T30] ? __pfx___schedule+0x10/0x10 [ 513.863782][ T30] ? schedule+0x90/0x360 [ 513.868368][ T30] schedule+0x164/0x360 [ 513.872582][ T30] schedule_preempt_disabled+0x13/0x30 [ 513.878396][ T30] __mutex_lock+0x7f7/0x1550 [ 513.883029][ T30] ? __mutex_lock+0x608/0x1550 [ 513.888184][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 513.892923][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 513.898132][ T30] ? radix_tree_lookup+0x240/0x290 [ 513.903349][ T30] genl_rcv_msg+0x10b/0x7a0 [ 513.908226][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.913299][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 513.918963][ T30] netlink_rcv_skb+0x232/0x4b0 [ 513.923804][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.929025][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.934377][ T30] ? down_read+0x270/0x2e0 [ 513.939219][ T30] ? genl_rcv+0xd/0x40 [ 513.943405][ T30] genl_rcv+0x28/0x40 [ 513.947462][ T30] netlink_unicast+0x75c/0x8e0 [ 513.952265][ T30] netlink_sendmsg+0x813/0xb40 [ 513.957192][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.962519][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 513.967802][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.973130][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.978778][ T30] __sys_sendto+0x672/0x710 [ 513.983333][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 513.988518][ T30] ? exc_page_fault+0x6a/0xc0 [ 513.993233][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 513.999149][ T30] __x64_sys_sendto+0xde/0x100 [ 514.003981][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.010121][ T30] do_syscall_64+0x174/0x580 [ 514.015086][ T30] ? trace_irq_disable+0x3b/0x140 [ 514.020187][ T30] ? clear_bhb_loop+0x40/0x90 [ 514.025470][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.031440][ T30] RIP: 0033:0x7f7aa0d5d68e [ 514.036193][ T30] RSP: 002b:00007f7aa1d13e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 514.044918][ T30] RAX: ffffffffffffffda RBX: 00007f7aa1d156c0 RCX: 00007f7aa0d5d68e [ 514.052956][ T30] RDX: 0000000000000020 RSI: 00007f7aa1d14000 RDI: 0000000000000003 [ 514.061357][ T30] RBP: 0000000000000000 R08: 00007f7aa1d13f04 R09: 000000000000000c [ 514.069419][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 514.078295][ T30] R13: 00007f7aa1d13f58 R14: 00007f7aa1d14000 R15: 0000000000000000 [ 514.087055][ T30] [ 514.090180][ T30] INFO: task syz.1.2218:14665 blocked for more than 144 seconds. [ 514.098082][ T30] Not tainted syzkaller #0 [ 514.103068][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.111892][ T30] task:syz.1.2218 state:D stack:25512 pid:14665 tgid:14664 ppid:5635 task_flags:0x400140 flags:0x00080002 [ 514.124160][ T30] Call Trace: [ 514.127531][ T30] [ 514.130503][ T30] __schedule+0x1821/0x5740 [ 514.135173][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 514.140208][ T30] ? __pfx___schedule+0x10/0x10 [ 514.145464][ T30] ? schedule+0x90/0x360 [ 514.149754][ T30] schedule+0x164/0x360 [ 514.153930][ T30] schedule_preempt_disabled+0x13/0x30 [ 514.159502][ T30] __mutex_lock+0x7f7/0x1550 [ 514.164146][ T30] ? kernel_text_address+0xa5/0xe0 [ 514.169395][ T30] ? __mutex_lock+0x608/0x1550 [ 514.174221][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 514.179382][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 514.184442][ T30] ? stack_trace_save+0xa9/0x100 [ 514.189508][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 514.194492][ T30] ? radix_tree_lookup+0x240/0x290 [ 514.199963][ T30] genl_rcv_msg+0x10b/0x7a0 [ 514.204695][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.209791][ T30] netlink_rcv_skb+0x232/0x4b0 [ 514.214619][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.220158][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 514.225596][ T30] ? down_read+0x270/0x2e0 [ 514.230061][ T30] ? genl_rcv+0xd/0x40 [ 514.234151][ T30] genl_rcv+0x28/0x40 [ 514.238313][ T30] netlink_unicast+0x75c/0x8e0 [ 514.243221][ T30] netlink_sendmsg+0x813/0xb40 [ 514.248482][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.253848][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 514.258895][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 514.264234][ T30] ____sys_sendmsg+0x972/0x9f0 [ 514.269099][ T30] ? __might_fault+0xaf/0x130 [ 514.273832][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.279525][ T30] ? import_iovec+0x73/0xa0 [ 514.284100][ T30] ___sys_sendmsg+0x2a5/0x360 [ 514.288951][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 514.293918][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.299235][ T30] ? futex_wait+0x2a2/0x390 [ 514.303812][ T30] ? __fget_files+0x2a/0x420 [ 514.308998][ T30] ? __fget_files+0x3a0/0x420 [ 514.313739][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 514.318815][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 514.324342][ T30] ? rcu_is_watching+0x15/0xb0 [ 514.329263][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.335749][ T30] do_syscall_64+0x174/0x580 [ 514.340469][ T30] ? trace_irq_disable+0x3b/0x140 [ 514.345876][ T30] ? clear_bhb_loop+0x40/0x90 [ 514.350644][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.356717][ T30] RIP: 0033:0x7ff8de59ce59 [ 514.361269][ T30] RSP: 002b:00007ff8df416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.370183][ T30] RAX: ffffffffffffffda RBX: 00007ff8de815fa0 RCX: 00007ff8de59ce59 [ 514.378305][ T30] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 514.386393][ T30] RBP: 00007ff8de632d6f R08: 0000000000000000 R09: 0000000000000000 [ 514.394403][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.402911][ T30] R13: 00007ff8de816038 R14: 00007ff8de815fa0 R15: 00007ffe1c22dcd8 [ 514.411032][ T30] [ 514.414201][ T30] [ 514.414201][ T30] Showing all locks held in the system: [ 514.422396][ T30] 1 lock held by khungtaskd/30: [ 514.427723][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 514.437948][ T30] 2 locks held by getty/5395: [ 514.442680][ T30] #0: ffff8880369590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 514.452556][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 514.463018][ T30] 1 lock held by udevd/9862: [ 514.467730][ T30] #0: ffff888027bd3350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 514.477398][ T30] 6 locks held by syz.3.2211/14604: [ 514.482655][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.491275][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.500409][ T30] #2: ffff888027bb9a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 514.510904][ T30] #3: ffff888027b3abd8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 514.520742][ T30] #4: ffff888027b3a5a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 514.533176][ T30] #5: ffff888027b3a5d8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 514.545987][ T30] 2 locks held by syz.0.2213/14626: [ 514.551235][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.559742][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.568904][ T30] 2 locks held by syz.0.2213/14632: [ 514.574150][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.582725][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.591877][ T30] 2 locks held by syz.4.2215/14634: [ 514.597176][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.605815][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.614954][ T30] 2 locks held by syz.2.2216/14657: [ 514.620212][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.628532][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.638259][ T30] 2 locks held by syz.1.2218/14665: [ 514.643627][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.651953][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.661054][ T30] 2 locks held by syz-executor/14760: [ 514.666849][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.675212][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.684279][ T30] 2 locks held by syz-executor/14779: [ 514.689840][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.698589][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.707708][ T30] 2 locks held by syz-executor/14781: [ 514.713116][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.721446][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.730753][ T30] 2 locks held by syz-executor/14815: [ 514.736230][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.744501][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.754035][ T30] 2 locks held by syz-executor/14817: [ 514.759856][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.768221][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.777334][ T30] 2 locks held by syz-executor/14853: [ 514.782775][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.791350][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.802214][ T30] 2 locks held by syz-executor/14871: [ 514.807728][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.816357][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.825548][ T30] 2 locks held by syz-executor/14882: [ 514.830957][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.839251][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.848516][ T30] 2 locks held by syz-executor/14908: [ 514.853892][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.862439][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.871528][ T30] 2 locks held by syz-executor/14912: [ 514.877490][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.885856][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.894992][ T30] 2 locks held by syz-executor/14946: [ 514.900410][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.909123][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.918254][ T30] 2 locks held by syz-executor/14964: [ 514.923645][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.931929][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.941285][ T30] 2 locks held by syz-executor/14976: [ 514.946843][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.955371][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.964456][ T30] 2 locks held by syz-executor/15001: [ 514.970443][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.978796][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 514.987891][ T30] 2 locks held by syz-executor/15004: [ 514.993284][ T30] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.001815][ T30] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.010920][ T30] [ 515.013269][ T30] ============================================= [ 515.013269][ T30] [ 515.021796][ T30] NMI backtrace for cpu 0 [ 515.021818][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 515.021838][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 515.021849][ T30] Call Trace: [ 515.021856][ T30] [ 515.021865][ T30] dump_stack_lvl+0xe8/0x150 [ 515.021892][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 515.021919][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 515.021942][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 515.021972][ T30] sys_info+0x135/0x170 [ 515.021997][ T30] watchdog+0xfd3/0x1030 [ 515.022035][ T30] ? watchdog+0x1c9/0x1030 [ 515.022071][ T30] kthread+0x389/0x470 [ 515.022099][ T30] ? __pfx_watchdog+0x10/0x10 [ 515.022126][ T30] ? __pfx_kthread+0x10/0x10 [ 515.022154][ T30] ret_from_fork+0x514/0xb70 [ 515.022179][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 515.022201][ T30] ? __switch_to+0xc79/0x1410 [ 515.022232][ T30] ? __pfx_kthread+0x10/0x10 [ 515.022261][ T30] ret_from_fork_asm+0x1a/0x30 [ 515.022303][ T30] [ 515.022311][ T30] Sending NMI from CPU 0 to CPUs 1: [ 515.134543][ C1] NMI backtrace for cpu 1 [ 515.134561][ C1] CPU: 1 UID: 0 PID: 6008 Comm: kworker/1:9 Not tainted syzkaller #0 PREEMPT(full) [ 515.134581][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 515.134594][ C1] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 515.134627][ C1] RIP: 0010:preempt_count_add+0x42/0x190 [ 515.134653][ C1] Code: 44 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 ea 00 00 00 83 3d 1e ec b0 18 00 75 07 65 8b 05 65 88 a5 11 65 01 3d 5e 88 a5 11 <48> c7 c0 e0 b3 44 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e5 00 [ 515.134670][ C1] RSP: 0018:ffffc900050ffa58 EFLAGS: 00000282 [ 515.134686][ C1] RAX: 0000000080000000 RBX: ffffffff8f520c60 RCX: ffffffff9a44b303 [ 515.134700][ C1] RDX: 0000000000000000 RSI: ffffffff8e222717 RDI: 0000000000000001 [ 515.134711][ C1] RBP: dffffc0000000000 R08: ffffffff8f520c63 R09: 1ffffffff1ea418c [ 515.134724][ C1] R10: dffffc0000000000 R11: fffffbfff1ea418d R12: ffff8880579e9b28 [ 515.134737][ C1] R13: ffffffff8f520da0 R14: 0000000000001366 R15: dffffc0000000000 [ 515.134750][ C1] FS: 0000000000000000(0000) GS:ffff88812538b000(0000) knlGS:0000000000000000 [ 515.134763][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 515.134775][ C1] CR2: 00007f91cf947e20 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 515.134790][ C1] Call Trace: [ 515.134797][ C1] [ 515.134807][ C1] _raw_spin_lock+0x12/0x40 [ 515.134833][ C1] wg_ratelimiter_gc_entries+0x5d/0x450 [ 515.134860][ C1] ? process_scheduled_works+0xa70/0x1860 [ 515.134879][ C1] process_scheduled_works+0xb5d/0x1860 [ 515.134914][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 515.134935][ C1] ? assign_work+0x3d5/0x5e0 [ 515.134954][ C1] worker_thread+0xa53/0xfc0 [ 515.134987][ C1] kthread+0x389/0x470 [ 515.135009][ C1] ? __pfx_worker_thread+0x10/0x10 [ 515.135026][ C1] ? __pfx_kthread+0x10/0x10 [ 515.135048][ C1] ret_from_fork+0x514/0xb70 [ 515.135068][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 515.135086][ C1] ? __switch_to+0xc79/0x1410 [ 515.135112][ C1] ? __pfx_kthread+0x10/0x10 [ 515.135133][ C1] ret_from_fork_asm+0x1a/0x30 [ 515.135164][ C1] [ 515.136087][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 515.136137][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 515.136190][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 515.136221][ T30] Call Trace: [ 515.136248][ T30] [ 515.136270][ T30] vpanic+0x56c/0xa60 [ 515.136342][ T30] ? __pfx___schedule+0x10/0x10 [ 515.136395][ T30] ? __pfx_vpanic+0x10/0x10 [ 515.136484][ T30] panic+0xc5/0xd0 [ 515.136550][ T30] ? __pfx_panic+0x10/0x10 [ 515.136613][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 515.136718][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 515.136827][ T30] watchdog+0x102c/0x1030 [ 515.136922][ T30] ? watchdog+0x1c9/0x1030 [ 515.137033][ T30] kthread+0x389/0x470 [ 515.137099][ T30] ? __pfx_watchdog+0x10/0x10 [ 515.137168][ T30] ? __pfx_kthread+0x10/0x10 [ 515.137239][ T30] ret_from_fork+0x514/0xb70 [ 515.137307][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 515.137360][ T30] ? __switch_to+0xc79/0x1410 [ 515.137445][ T30] ? __pfx_kthread+0x10/0x10 [ 515.137520][ T30] ret_from_fork_asm+0x1a/0x30 [ 515.137629][ T30] [ 515.458208][ T30] Kernel Offset: disabled [ 515.462537][ T30] Rebooting in 86400 seconds..