last executing test programs: 18.490520407s ago: executing program 0 (id=7109): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x401, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1200, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @rand_addr=0x64010101}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e51fc050000000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x4c815}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000108000140000000002c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x10, &(0x7f00000001c0)="1f00d10000000000", 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffa, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x87}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x1, 0x1000000000000195, 0xf, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x844) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xffffff9b}], 0x1, 0x1) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r9, 0x0) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000001b40)={{r6, &(0x7f00000005c0)='+\x00', 0x2, &(0x7f0000000680)={@_ha_fsid={[0x1ff, 0x5]}, {0x137, 0xf4c, 0xd, 0x6}}, 0xffff, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x9}, 0x1, &(0x7f0000001b00)=[{0x2, 0x0, &(0x7f00000008c0)='deflate\x00', &(0x7f0000000b00)="2bd392d7155d3032f73ebb08f5c776d36db3dcc866b6f3de54463ac8a37c91855bba2405120dbb301d41b6c221d25775184233bbfe492db048d6c9e39bfa5230af018b1017530658b516ecb15bd8dc54f2d33d1fc14bbed14e93abf693356a117cd9608cb21fccfab825ad7fafa6f9347a50aee7f4235e707db322e12c7b417caf85a24a98317074014aeba6562870777cea2a7cfb4fef49056d50f208e045dc3374e13b0c9c5aa829fd58e3608254e9208f5690745a408131b8ea58911519a81009fee6f39aaaa6624c4b849acaa9e21678743be52a3e17f14a48ceb770cc43bda54906402f2a496f09b93462af94b8f4a03ca7cbb88eb5d0650823ec1038657763f63fc67b23b4d3f434f12f7267d3980c4511add2e8cd1806d93987165b3654569ed2693ebae17dd1a2bd5c4bf70da10fe822996d695fecb6ff6e8383f9475b9b12edb3a63a2f0b945148fb8bd9326ad6cac13fed30eb537d115e6d1931e0a372221b3b200503a682b3625f3a5e3e8cc645407d363fa179788a8c6e62d9258ca421f1a46015a85781d8b3420b17df2a75c2a3fb478a7f8251679a4ca0cf192b1da00e7edae07626be7603f676986efb1a8b89817d739f9a4c8fef4668cfde3a3a7b2c17c2bee2d2d2cf6f9df9097cf01207e4461b8a70dbd38834eaeb08d7dad336ebd91f910d028c592e3a0e745ea49b45d99c6e4bdd8806f5f1032c357c560905b4618bcdba3ed0aa2e581b2ff2d32c76ea71700860a38f0f66c6d514f4d0301b26a7bc5db2a74e5c512253937d04395ab24ef5837477fe9cf8be38a3435a7927863d017856cb7551e74f452a8e9441e234ece28aa7f9928031bbc5250505fcade01f6f20272a0f860626e4ec9e93803b89d12efe594ae14b56def1bfbaf9b0cb584e38665de2303bab5fc5d7f267c060203ad1115d7f206474ad943bc6e0b686daf601a040956e02c27329f5c1ec693d62593dab2f0ad2b50938608815485ba73da84e782cc448cc3e95409d492ee821704f75323c96f5b3fbeadf75b801925d9f16b7908cbbc679df5c5b6385c1054f323bc969967a537e610e7feba7d286d75276f61774dbe1ea56745716560bac9a7a0ea20dfe7328293c4472c33ffbd1126a841b176bacef14a93070b82a6d446b0151e5d44ffdf01c14c2ee9650224e3f9ae2793ef27e3132ffa852f197e39721f23eccb748bcd3993ef887aba2f18b81a9af0f975d9c2e84afa42299be114a0d5ab3073d382d03490d1c811b41f53252a4c78b107c2bed9ea7a2d6fe61c9e1d364c5b7985314e29ebe2e580d338d7aad14c775001cf2d16860ff87c7a59dab77c5c726ecf3bda6cd70dca40998340e8478825e4152b2be351443979f14db8d9b2473e8eff2a54ed43aa16f652aed50d9c5d1641e89bd6fa8f60601bfa02ec43559e7a03612dd2261c5802b748ea26213ce0c1c409055f15775d7a7eee6c25d0f58d0ea96b2c16ad031bf4336519087d9b13ccd84e0d04298c7354deeb35203b659860e8cf23e3423fe95384892fea3304521e3f3d7dc561e5723364d3aec6828db092d56c7f97422352bdece47a0e84b827e0b86f5196701f15928797ece6876f21ab86f3aedab944b84b81769ee2d71b51711b9e5878a556b60b0fe1f7a4fe5a19a4b00887ac7e55de0461959dbf16710663e0e63c966c9ed0459e6a27570ae99f6511cfaaf72032425248ccca24a8c9635e84e160344adf355c8439d18709856a781b88b33fd151305035298c5a7e6ea5dda46d222e0fa33007861cdea4d711496e2c29eaa21e3568a42c8a056b49e2b5a87e1cb81e0e5d4ee75ed61f7e0c56d0bb74c4a620afb90d660bc3641699bb8a648175afa8da966715c8c6539b2f729266f091bd5843e82a7ab05ef46b0a2cd11169b47b9b714805af9be09984dd56b0e8a7a6e2a5bb82dd70ede1fc0c3ba9ed221a232a9e3ca968d4234daf43a625a248b0afa1d43a346631d687550e1d3fa0e31231b290155c5bc3ce384ad592fc29aec60b6d5a39f1759f601216dbaeac81ad93e7eb9adc68eafd1ddfcf1fce3a6dc1d86ca3762a4c175b0fbd82df61a5ea98eaeb9283321a746bfe29e17b0a53f9e72217c1a4c51c974700a38d06b1560e2b7fde378d2a5b8ea04641c79980baca2f52e5bb4c09f288c0dabef489861388997ffb56f1381e2dd52e7654bcd796652477b9e724e50c178f80e226f7c5848cc4d0afe08971e3f27757598c4dd8d0ea1963abca8cfc84ad5d7867ab51377c88e45f9c78a7e7a4584664c34b37b098a6e472978691a7d94acce88606cab1ce1884e1acf5f81d190d4c5f4a17dd01b8a8968d3639c7a1589d9c393c461ceec9f28a96bdb3db50ad99351d1bb78073b59099a2362504d00ebfe04cfe127dd9e50a68ec33d0df4fbc24ea631ed8a9696f4f571a037f2dbe2f26c7e197ee53d7f62b263129f313953feeaef2eca41a4e9341619c89c64bd7fa65f5d28d0cb8865bd505857a8076fb7b27a738f8488b60dafabe23f78aa5e2f86fe035e400de1a972eab059f7c17daea38273af2160f632588aa691ae277237a707691f8ab0d764af4ea15e7fe31f41a68abb96269207d300ca84d83dfc1dab24427a0e3a3faac7ebe9e7685d9ca202c8c237a471c827280eab51e3a3e86ed405874d06a2e852a764114f13ab584eee6c09992f7f4132192799d4987dd95a11a8f091fc350a1888c2d3a0c3cdf145e086e66628cd7659f7120e32c5415f7b38b2849941176b1bd44c6fa4e1dd1965ce5ae4bc0e672efd49acdb20fced98c522d3d12dc6f2b04534681598a34a1bbc726f34a1580db94898a4edbc5d30e2d47fb71b52647fac149ef7653a35f29dba823be243e1d62afb4b00a9b10f2d4ca68711a97b94fd3f737e2888e961f82571ecdf58db004f3cf087858f707a915a653f24537d4cdd187a55dbe6395fbae249197e66ea07363a551603216f1d78cb34e9b51694f46692a867b5b7c8685110a2d59529a79687d34b5669e118421c1e3bcb8fd66e26ed092a60b2a6aa0652b76a50b1576fb2527062b9faab8dee86f9a910676418bc9ffc9a7ae575a3d2a115f89a391d6529c01398272a580e5c6b9cb98fb65d6de0dee1ee22855707f950bfdac0bd18d0cdf59275a54294991d4bf797f97a286c1d7b134bdfd1fbf6ef5b6f6a56f798c5ce44c2cccfbdd1e8fc40c430464c33c865badba5e7c04d59979ae6edad1309ed0ddd86e86da892899d85409da5803fb22409b3c84cf18e6cee1c224769d6b8da691f94d567749a292054d40863585d725ae68cbb5239e8a210abcaae632a1382488d8101af6cf4afd5c47761ef79db8fbbd3be9f12675b791724e883e76428a6197d1da0581398f64012af3f29d49987e7a3697dbd401a3a10049accdf4d03868f87e33b83ea5938592dc4ee12571a76f96229d511079b0a0cd1a63b4f9a22fb3f4fa7cf9a44694de1cfbec01ddcb32ca0696ada841112c16bf90e9f8252ed02dea90509fdcdd63babe2be93df480a1f73b6483ad9b792a744759ae603031458ec5ead2c7278a59373c9b68112468894fbd95d4b8fa35d94b6ed86a5b72cb25b95dc14d3b8f6f2139bf7161e9f32ac4b0479f85b35dd4d7366b7ea0ef7893c4d1a5306fd7527118a5a87e2441a3a047fcc1a64c83e7d0c3d733c10467797fab67f142e245f40f646d2f3804a657f7c7801f5a120f914a729a2727ef99dd1bcbd65e5ce099fbb186aa764ca709590dfbda458f09bc8e1fcf9ef65839b1e81b099d72494f0024cb194cb6a69daf132cb4f64a70138176924b8f23b76de6c794121ad33b840d83377b882d70690f1662f1662d1f70f85510cd19ef2729456478449b474b4c144652954dd8934da2f58c113efe8d366bca378dc8d634c0e4537b7bc71e31801348544802d3e1faa4d671bd0f7e9f82711e71c783588c250ba30abb2550e728475e8b1ba0053a6155b149a933976ca375810feeb635bd1d6dbb803794097ee9e9ec9766abe5e4ee48920f65ac82d9ee5ce701e01e6c9f1393cb300d3c38fe734860f66097e386d5792ab5f5f715bb916e5ad9a8de0b8e12d5d6e6c8a5588dd0fc98b9d44afe310237adc84e0c719ae1bfb2d280687c9ab34464d6a49dd382d580f620a1d4dc46de7f47cf30a7f64e0e62aebefc2409618cc0404b514dce6a9b0a50c19f97d6a9d65574808fcf56bd2cba734ad8fdc6b5bedf4190d48937f7150221d484ce44e319b68efcf6ced1df171015e9f39597755142832de509ad323565015dcd10a51515f665faeb01f9bb82a08cf8f5051d4796f456f635a1f9fb8926c7b35fe48f349e02d6e5c4c1bc0e9f79587a91cb30ff329684817783c3f80c8052e4baacd21efb11fe5d7763089d1c8553071bbe0594451e79d78e2b8755a115e740491ca9d4a037fc448fbad20da76d7e4a41cf604dd24844506f53c852e720cd8c03685f6d7806009ba70044ee312ed16ff04fb9af108adb72a9e33ce1623430cb8828e6a0ec66f4acd376341016bd51ca07e595e0ae57eee32731eae8940272031c1b5c0e07e4b807cb6097e06a2c54c35bc6cfb643a3714066de2c3757286bf9e54f3a7dbf07dd4d7b1a1841a3a311f1737b268e9501d1989a691810df3beb3f36ba4c2514747f48143f89c0c3bc075cecf0d8030bed8a8815be4d8db915e8088122758646ad67586c52c17ae3de4784dd4f0ba889f27b2b810c0cf812e5cbfdc86a5e8ea2281295c07600fa53c6c7d0bd90d1a3034e9d6a2495a498a064d99b09ff9ff0391b9036e70cbb19d6cf97bed391a8dee05342b779d0a1fa5505e889ea56f9d1a39391ed83f6c07bd87830bc4249157cdb3396383fa08f2ec82dc6481be62497e7a28a311f3ccd2b4e594610e9e4b7fa34a796f1d90c74a76887b3b251fb7c7b69d90de4ea3cfd8c46eedc2ae127a96ed3dedb70bd23fe78dd02e6390e59f7c1fde17bbf5ce8690de709fafc6261d9fdc223de81db4eacedd2a9d3c3c64fb204fdecc1123090b716837dfad753301bd8f554bfc085e29a24db147d96e4b39abe68807e0a577c6b7a383c50b0f647e83455884e3bd1a449e67d15b2cc531222256f18ff61fa52db141838dfcf935fefbfc1255607af7da8466f652484f152b5e7a97949787c2e4137393d6dde90273736f49011c5d8e10844309e72e79352d646d1b749077925ef4173bd807a552b563c683815097157eeccfc2b6cfb592458009ec9910d9b383dabb41b24e1f6117a69a6618a186ca6927e3125a98f3d83c9683230fc26bcab1a2c14d6c20581c2394eb3ae297d48a29fe4bd147aef8330952174d46a7280f2023fa7be72d688b7f9184cd96415a299c9db4227d583154912c654b6d0a2081f6eb3ab2473dba96c30606ceccff8542b794b18f57106f2bf4e13bdad6c8b212dc2f4413fd7d95da479de51d9c0d4e873b3c292a43645f030c5973c32c5c955f9f5fd899f07264789a0c73730a189db0263ba4003680679df750424306d7a37394e6bf266b20175c965b1d533f16f26b9ac0a4d2135eef115bd7dd45be87e18aa5bec22882340369f0b60495ce2ca03762df2273fab48e4a3a9f8648acdd57f72423293b3fc1a8c2ac76b4f2c23b5934fc0ee009da63ed19611b38546a8612517b0693dc8e47d20e662a9cb74e866075ea57f21fd60bc5c8b93ecd2459bbd64091e686cedc0bd2898bd60550b1caa230020ca5d6df68eccad5fe0bad70a73527fb508248838bf77dd43577dfbb8b9be7cb6c73b6ee6c5d715d79a497ad1aa3551b7c", 0x1000, 0x20}]}) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@bloom_filter={0x1e, 0x2, 0x6, 0x80, 0x10024, 0x1, 0xeb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x6, 0xf}, 0x50) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c40)={0x0, 0x15}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x13, 0x19, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x2, 0x3d, &(0x7f0000000440)=""/61, 0x60700, 0x40, '\x00', 0x0, @fallback=0x26, r9, 0x8, &(0x7f0000000540)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x8, 0x0, 0x401}, 0x10, 0x0, r10, 0x5, &(0x7f0000001c80)=[r11, r12], &(0x7f0000001cc0)=[{0x1, 0x1, 0xe, 0xa}, {0x2, 0x1, 0x6}, {0x1, 0x4, 0x10, 0x7}, {0x2, 0x2, 0x10, 0x3}, {0x0, 0x2, 0x0, 0x3}], 0x10, 0xfffffffc}, 0x94) 18.349955866s ago: executing program 4 (id=7112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0x3, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4890) socket$kcm(0x11, 0x3, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x2e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="55ee4addb0838779ff7a51df6a14", 0xe}], 0x1}, 0x4) 18.248709692s ago: executing program 1 (id=7113): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="3a8b91e3c8cfec03d5358654aee62aa346aa96e0bb97fe358130a72c4db202e92ffb55213bc41b6f2ee7a6adce49da85d10d014478d9d4bc77dccbccda4a8a38ea0c88d7cccd0c3565299f455dec55c25ac4723a5b203e8abb6dc9ebe84a5892ee383e3d6574cc905128bc77819c443877e6a1684ce1184dd7", 0x79) sendmmsg$sock(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002380)="fb904d54fe74bf8e9f31558a1c60c12f", 0x10}], 0x1}}], 0x1, 0x20000000) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_int(r2, 0x1, 0x10, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newlink={0x20, 0x29, 0x10f}, 0x20}}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000300)={0x6, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x319f, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0xffffff0f, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1aa38, r6, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r9, 0x3, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x88) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x5c, r7, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80000001}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffffb}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10040004}, 0x4801) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)='J', 0x1}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) 18.050880794s ago: executing program 0 (id=7114): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x0) 17.871939159s ago: executing program 2 (id=7115): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x8, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000005002000000000000c001f00706879300a"], 0x28}}, 0x0) 17.750225602s ago: executing program 4 (id=7116): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$tipc(0x1e, 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}}, 0x4000) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000780), 0x6, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000007c0)={0x134, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2}, [@NFQA_PAYLOAD={0x105, 0xa, "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"}, @NFQA_PAYLOAD={0xa, 0xa, "278dcafac973"}, @NFQA_VLAN={0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x134}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0xb29, 0x17}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7f1, 0x69, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x7d9, 0x0, @wg=@data={0x4, 0x202, 0x1ff, "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"}}}}, 0x7ff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000140), &(0x7f0000000280)=r6}, 0x20) unshare(0x20000400) socket(0x23, 0x805, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r9, &(0x7f0000000900)}, 0x20) 17.703585766s ago: executing program 0 (id=7117): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc093235457f25725b81019e5d061ea6f5974b145500c8a5ce3bcffc9853267f44afb8f5de862d03e3bb0dda8c68f15d40cd1edbaac9d5a05906a4786bbfb5ef8312a53d79fe6e2e7aea4b93b8d"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x8b) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000000), 0x10) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000400)="6929e1cea0edd803d5f151e29fd0240167c5e22979a32996c7cb84fd8a5fb0be77a83b041ee3895e41908ade2108b79b676ccc255ebf78565cad0fdca33a19b38f1db73132f198badc75b453046036e7c1b6f7e88695cf01c4b375e448055d1c67130ae8e5ba6002e7fccb13541146b6afa4588b6b310966333ffaf7aa1ccd7049806c0f57aa35b3da94162a47baf7cc5d96ea9ce7f0b1e459133a181cb3b52f14218756c3922774e8972b6ebbefd1b3ffac253f8581ac", 0xb7}], 0x1}}], 0x1, 0x24048080) sendmmsg$inet6(r3, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='_', 0x1}], 0x2a}}], 0x1, 0x24040884) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x20008000) r7 = socket(0x27, 0x803, 0x2ce) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="12257335e7a38309c2ae74075e50c31b1b7f5278f31a336e1ce5c9", @ANYRES16=r2], 0x118}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000010) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) sendto$inet(r8, &(0x7f0000001400)="e3", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom$inet(r8, &(0x7f0000000080)=""/72, 0x48, 0x1, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0xc941) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c00000010fc240400000000000000000000000057d1e676cc7028876e71e3a5f0cc1dc6142b4a74409aa5b79dd61c1d75c02cfe62daec6c001702e73c13b446a2895c3a8c5a7bb107f7ea816897d027392728beca120ab61235965219bb71d2961bce28f91aff8b", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRESDEC, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="b36e8844a137cf04ced68e263d2526972db9a9ae40ed04111b20e5499081f6c6f76eed2e3d055ccd9a4cc60ea988dcc589eb1101af9ef9578bb3ce7c511e79fdaff54b07ddd53284496712caaa048881294a41fbaabb9af653504f88f996ff535bc6837f7a93cbc049123f11325b92bbc8d62073e7f29b5cdd048665463f9bee19a440fd1d767c7db35d7e45fb97136bdec29c8a24cac08720c8b81aacf2609048a8c89a7fe71009fbaf7dd3"], 0x4c}}, 0x0) 17.702647519s ago: executing program 1 (id=7118): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) (async) close(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'macvlan1\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "0ee8a808941c4da72524f794b5edc67608616d924ca70d8235ff19fd43cfbbdc", "bfe519402c358b35d3605adfd271a54806ff5004e7186adc2cccd48265ef3a4b", "49b2f2e05ac6b34d7b93d55fbea1d36c5a838fdd6f7c536af96335affbcf4c27", "89e6f349fd75d21b00d5f3c79164081b1202fe3586b20c1750be1146bcf001ec", "64fde8cc0b51858d4bbed89b789057adf7894f4b1c8bbeb0e1850144997bf967", "ae010cd12d01e1bbf73405af", 0x4, 0x7f, 0x1, 0x8a, 0xaa}}) (async) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x0, 0x4, 0x40000000}, {}, 0x400000, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7}}]}, 0x14c}}, 0x4810) 17.701038799s ago: executing program 2 (id=7120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x3, 0x6, 0x4920e7af812c3f03}, 0x14}}, 0x44) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 17.506254934s ago: executing program 1 (id=7121): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x90656}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x7}, @IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0xc4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r7, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac08}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ce617ebf1b"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000005}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) 17.49478925s ago: executing program 2 (id=7122): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000140), 0x4) syz_emit_ethernet(0xae, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x78, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1, 0x1, "fe06000000e3"}]}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 17.194590259s ago: executing program 2 (id=7124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101e81, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'vlan0\x00', @random="b5d4d0076dbd"}) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b00000006800010003bc271d7743267a0000000006000a00"/33, @ANYRES32, @ANYBLOB="100008800c0001000000000000000200"], 0x8d}, 0x1, 0x0, 0x0, 0x4804}, 0x0) 17.167293709s ago: executing program 4 (id=7125): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0x100, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="500100001a00130700000000ffdbdf25fe8000000000000000000000000000bbff020000000000000000000000000001000400004e2100020a00000021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0301000000000000000000000000000004d632000000fc000000000000000000000000000000050000000000000000000000008000001100000000000000070000000000000001000000ffffffff0000000000000000010000800000000043050000000000000300000001000000ffffffffffffff7f020100000000000001000000000000000000000000000000000000002cbd7000453500000a000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000040"], 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x2014) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=r1], 0xcc}}, 0x84) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010104, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 17.088590678s ago: executing program 4 (id=7126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000054140811110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008c000000bf0900000000000066090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.978708148s ago: executing program 2 (id=7127): r0 = socket(0x2b, 0x80801, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x6}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="01000000020000000400000004"], 0x48) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=@delchain={0x24, 0x26, 0xf31, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff3}}}, 0x24}}, 0x0) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x3}], 0x2, 0x40002320, 0x0) read(r1, &(0x7f0000001480)=""/4096, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x5f) 16.977869034s ago: executing program 1 (id=7128): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) (async) accept(r0, 0x0, &(0x7f0000000000)) 16.903472345s ago: executing program 1 (id=7129): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0xb) ppoll(&(0x7f0000000180)=[{}], 0xfdfe, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 16.77597678s ago: executing program 0 (id=7130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$nl_crypto(0x10, 0x3, 0x15) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x40, r2, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}}, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005d00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00000900000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x100}) (async, rerun: 64) sendmsg$nl_crypto(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=@del={0x110, 0x11, 0x438, 0x70bd2b, 0x25dfdbfc, {{'xxhash64\x00'}, '\x00', '\x00', 0x0, 0x400}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x1000}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000058c0)=@newtfilter={0x30, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r6, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x40) (async) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20}, 0x80) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x23, &(0x7f0000000040)="1875008e80d51858", 0x8) (async, rerun: 64) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) (rerun: 64) 16.63879242s ago: executing program 0 (id=7131): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @func={0x5, 0x0, 0x0, 0xc, 0x5}]}}, 0x0, 0x36, 0xf}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r1 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001280)={@private2, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1f, 0x13}}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000800d12d54b40866bc129d01a44fb75a346a47550500000032a59d3499f9d5ad74135c98c8eaaf5286ea38e561ebf581d06e1116c00d17edfbdd6049619c67c3fcd464e5fb2d2de5fbe2de2123dcec080897cbf4c262b5c2b1f19b00a226dd90", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="080004004440"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x8005) 16.638074141s ago: executing program 1 (id=7132): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250200000008000300", @ANYRES32=r6, @ANYBLOB="08002600431700000800270001000057"], 0x2c}, 0x1, 0x0, 0x0, 0xffad46ab5102f456}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x4}}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r9, 0x1}, 0x1c}}, 0x0) (async) close(r7) (async) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000eb337819ded6b82603efed06e380047963fa26c5ef95b0131d31a1ed6dba260c18687167f1212976bb260e402dc9a92e6191de00fe3d2ee7e13ee2bda848ca", @ANYRES16=r10, @ANYBLOB="0d090000000000000000010000000800010000000000"], 0x1c}}, 0x0) 16.636060377s ago: executing program 3 (id=7133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fdffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)) 16.552466568s ago: executing program 3 (id=7134): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, &(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) close(r2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r4}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="00000000000000001228fe8ef8a6aa44da17639d5bb714000000b7030000000000008500000005000000bf09000002000000b60901000000002066000000646c6c251801000020786c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f9300000000000fb50300c1f65185e1fbeddc0076000000b70000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x50000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 16.441063569s ago: executing program 0 (id=7135): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000004000000140001800d0001007564703a7379b390b3"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40004) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 16.098700193s ago: executing program 4 (id=7136): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast2}}}}, 0x0) (async) mmap(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x0, 0x11, 0xffffffffffffffff, 0xe1af6000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 16.079428033s ago: executing program 2 (id=7137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=@base={0xa, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0xf00, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @local, 0xe79}, 0x1c) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x895}, 0x24044884) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=@base={0xa, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) (async) socket(0x40000000015, 0x5, 0x0) (async) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r3, 0x0, 0xf00, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @local, 0xe79}, 0x1c) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x895}, 0x24044884) (async) 16.038813146s ago: executing program 4 (id=7138): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xa) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000040)=0x6, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xa) (async) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000040)=0x6, 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) 15.705863796s ago: executing program 3 (id=7139): syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f026"}, {0x21, 0x7, "b8a3e100906e61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c883747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e8860"}]}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000740)=0xffffffbf, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x1a5}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e22, @multicast2}], 0x3c) 15.675439928s ago: executing program 3 (id=7140): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0100000030620000280012800a000100767863616e00000018000280140001000000003097d3fa9a7912f9eaa000", @ANYRES32=0x0, @ANYBLOB="0100000000000000"], 0x48}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x8000) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000100)=0x5, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 15.588370459s ago: executing program 3 (id=7141): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000000020a0102000000000000000002000005140000001100010000000000000000000000000aa1ad853aad5fb33ae3cf354c2e3798dc452aaf9a25fb45caf6d45b9ab91c511c319ccc703a52f5b5f84c152f57f7b1a627b66b1f3637984616247b9fe6f04133d7ffd6cf42597d8cbda41ac3044772f2e770b92677de31c5befd6c5d89c89e7ba4c3c55f268df0957e07847978841ecb03d9594267cc8dbdf49d3c8ed494"], 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 15.366191175s ago: executing program 3 (id=7142): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = epoll_create(0x1) epoll_wait(r1, &(0x7f0000000040), 0x0, 0xf6e7) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000080)={0x50000000}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0xdfc, &(0x7f0000000180), 0x8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000640)=r4, 0x12) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) epoll_pwait(r1, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xe8c8, &(0x7f0000000700)={[0x7d]}, 0x8) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f00000007c0)={0x1, 'veth0_to_bond\x00', {}, 0xfffd}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r7, 0x2, 0x70bd27, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040044) r8 = socket$netlink(0x10, 0x3, 0xc) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1) writev(r2, &(0x7f0000001c40)=[{&(0x7f0000000a80)="eff6b7f549b9cb4188259626211ceadc01ffd17cfc9f786f1655c0d616568fb733df4a46b3297822248a304277b0a0299fdc3d50d4f0d1b6347affb046378c4a555112ecf743affff3a58e05a8e148ec7b7954db484ba9b8becf043f3f3b1c68f6d29254237dd0112ec1dc755367bb1b80a6f183abcc8f9798629688085d4eff7b8760c5282ecec8ea98cdbb3db91c595f5d730e7411b18c", 0x98}, {&(0x7f0000000b40)="330375620dc86fc1bb427d8ebb0ed6b9580d7830d455b4b106a7595ffbca6864510e45ce7ee9f8975617758260d0e98800d9282e1500da8dfa4f20c1875a3ba27395c06c0a8b77bcad3e2a6c86496ea4d59222a8cc00c209e2389b4f4bf16abe9160e730cce07328e6fb31f0a66dc380ba7a6777b39a044c49fc8d4d9e18c26f57ac6246c62fdf2473c24a654f15edc571ac514893054fab0e35f3f0c5dc282fd11471575c98c8745f3cf45d39c50b68fe4fa4293b2f960d3342db1f61cb7478d2ea5a9057", 0xc5}, {&(0x7f0000000c40)="38c2f6f4533fc5fde6dc25469052cb0d20b871074b311380d055ea2979b025cd529fe8677f927cd97caca6d878ef6d5fca161081aa18e63e44383341eaf97c453843bf9a9659605150c7a9dcb9ec856a404bf8bd9ba766a418997d73b519807fa7cf6f9ceff40f61af5b13c8edaa6d832916aeadfafb2d5bb573945c1d6fb8c1d290455ee956820919807208ef517fcd26322983159cf0cad0e4fd5378d8a2c2d594ff416989b851d440b7017c32d5146abccd0f15567d68139bdf13b7ab7c2d9e0c90f64d4c2f6e42ac618824c42aaa9a051d11142c344378e567969bbbd44bd3fd2374ac4d13333a421130bbccd9a505795dc0129f7e3f76e4593d1832e78c56ed0e1da786619b99eed537915794b189d73a660ba8ff9c143c6bdd79709d11c04930942bd56256f781f513c856ed75a242709e9bf9912c20b338f12ec90159570ec60f7550a6ebe626801fbc634d588d83ec7758665e9f918ce411d28c7ed98ebd1b0aec5d83dbf8805598f45b0b032a745f0735518b976a0caa1343740a33ab58e4769892c9e8996f8fedbc7be3c635e441d1e2441cb60d8fe380d05f123b0fa3c1e591ec5648d74914d1a92d8aa86a2ef3fa0bd1ed0a601a0e36eb75ca2b2ce03f2ddffedf7e413cc9f4149238777cbfcd175088eea30303196c149b80d7e8c471a35b82d00ad69b8e34965dc4b6836f4d6f66170ba4942172de112ff4bfa13769042dd52039b9dd5b0cd71c7e3088e43bac3669f6b947fc359b66707b0774d33d8a7bf96d70486584ffe2c91bab47b43af6705405336a68d952ac91cb4cb297a0aa64a6628f7cc5dc7421c4d7359c322d28dbe9c879d640b7d8e2f2f0861a847840b71e64447bb7d374649d999e92ffc4673bffdd5431e2a9ce4819295da212dbde99b12b074411e52302b1d4d54abcda8f8f7ed10e20ccb17ae738c11c0af57ed72b42966d7eb76b9d6c55c9528608615d8cf7916fe255bccaea29ac3278d9cbe3ee1b329d6674e2fce058f8f442da8d39280d5a94f1d699e764cc530b07c11eb76dd3920824750b08bd9368a60a124887404b4da1efd3ee060c3920994a83b0b6f81f69e0e54b22ef10e6445f7c6e477e5aab3e34d499f013b8544a1c3d18da88f965d73866a985595f901a160d91e551b7b03ce656b0fc20bab614eea96a29e64383883f757b99941e8536d1c60f57b24ae3e6d874d502f5a608512e23ab50d5ae3c856268ab77482f76a37a5e54ea84e8b6bb7880e7944ce401af5ae7c393f03c9e55d4d526f67224368fcb9f12b176d72bde4bba7d0213ed040b2be311cc4fdf366ab734a0ec6dde35904e9ff76cd63e89e128f962c83d29ea2f5810a2134dba10d389ef37edb125f52cd7a6d7e100347ab29da911872671ea8ca44c265125ccf1f5f40381c45562479389ef499300fc8a899f9707f5dc68d0ce784accf7d973979425ea03a4973396e28ac83e7dbc87e629c9fbf3810e64db12703fbb9c277d39297f709e8d05a5f0cbc7dc0a302b11e809db3c7f159af5e06803db7e3540d487bb1281e4e4937e7e6c985ef6d98ffe4f281c60e85aaac41245d7082f1485886a1ca0b5cfe2d9122538da125e57863fa5f5cc5f9d46deb9ab7e184e9bdf667d562703dd05e67716ffadf60f22b9034541d1bf3dae78a203f083416340bd161d3abb5b1197f123d8c439a85e1139a739a8af40f8ec79ce5fcebbabd3183724f5a2cd5ddfcdd62ddbc389c157d5094f4c9764046b990535cb4f53cee981b67bb26081f7ae8f348ad745bfd76026b6e0a49dff16c0b5fcab8d23639d7e6d20be4392f7075603a4613231225581ab2984d10407767aa6cd8fc0e0c85a6493216cd7ba83903eddf061675dcf544acdf5c434d7ce1b560985f1d1f8fbd389fac29dfea3f12d504888d32d5d8773162305768c2229aae66febf0cc9e18b71b0facd1ae67300d6883d76b910972c2454fae6e30c69ff039a6e29a2d5c4175f2ede651ec17de5b76e4f6a66fd4c18ba933ed9616ba3d7eb3da25a12d2aee57603808fd87cd80473bd643972839c14951baf207f904122f31138c982b29f25d53aee6e8e3be0b17eb7034a84403481900be9c20dbb01a4e45741aba2f8a1e7184ebc545eda16b392b620b2a6b5a1af3e19bf88ea791ac3c74b1a2218ee270a2e82c7696170e5434b7ac22dae01e720394eb445f4724baf1691f40ce4c618a32f794f8e394a48ef6ae6757f385edb76e32459456e78a572da1c603614cf3011b7b9cf3c1b629cbd29d1b5ee8396482eb1c1cfabe28874388354624f0a3fcd6d1400efd790e204713ae8b071f87af29e0f699cb34b7d8312c01e9913c46a379b17de2762ca85a450f8ec7ab878bf9231d802318f73af5f21adb8c7eec86d8d89c0ade74c11ed1cdbe63976ea41f9ac24d4d3ac8074dafeae12f958108aa6d10ca7865407a7216a4c7ff14ed9ebd640305bbab34258dd98b6ab4324eee54c21b96b5df241a7602b4f8532beb30badc812e933def0b87bf61a9e8a4040e1bee9c7e339eb116c862ecbdd466d47be5c88aceb321d3b03fc64f4d20307b82a89cca461bcb0f3a0215829abe404d1b92d622e10801e4447bf8a9fa8fb39d2342d8bca1f0e8c146b6688106bcd550dba60bca6142317d975eb6408c8799c6ec0b9d0200583ddb3d50208e9a8cd9a85621c552587d6992ce7e1597c2ba7c1ac8004f098d741806a3ee3b697009f14bf89916f8c47f72a6ab0376769c1914b97c8087cdac1842c1169b2b234262635fac490e4ceec00f5500e4477cb32e4f883a423851dd5cfa0c776f7ebc5264070113111c2f561a27d471401106dd6ee1af1bfbffdaf6f3a2fc203c6b35014eabd9bec3154ec5caa2753ad4b38167d379cc185aa933e2669c3b76d808069c7f2b3b2c48dc38ee3826a6ab1ada911ed161fe00a4d825de7c9a0ab76f4ade3bbd55d9bf86f1b6ca04b8eceaea1c63c70ed8fa7ca6b047a7cdce46d1e6e632d45c9bde097d5dcb9d3de97668d762a5f6b75ff7dfbe17aeb38eb9c894a6b2ebf739aa73a70b7ea096ec9d9d22620b12f8b9cca8f4b8abf84aed754d27730c0b452a126f9fb5b7be3bd3086fed2d46680a360d5298ec9a32736172345dd4cf4813b777fcf2e00372eac91200e99edeb45888875302a920df8cfcbd8963212b5b2a3e366f0fea6c184877272fc350a1aabd3cf64347b68bcdad3890537ccc862095a419693a151e1d5b190b9a37162e86118dcd975f969bb258a43e64940ca272e4ff411decb31df6811c2fa48825c2e936320133e59a59a6b15479a018c1bea29132be00bb65a8dee189b1bf9791fab4936d0c442d82a2886ba928d262ed9e15b6f3f909b55928dedbe5bcd9ce9048901a7860a9f9f81adbfe3cefff3ecbc4207a5c8cdadca749e562d56169075bf5000c28b42d1c44d5c4bc62fbd79f38e5a5d03806e83acbdb8d014bd1bac81f1c069bf9c735b2777159af23954e2655af4c25e087e9f9a3b6fc75a4de099214155cd0ad7e64088fe203cb27a45051092d78403231dd75c8fb785cf58e8b0778b9ee15a659fe6f5ef3f98c607dcb1dffb911b4ae87eedd5eaf504c20df3b57f242233aa95d96eac2e2cb359dda2235623971e974ec79e16ee2897268f93f48db8856a034877c602405fb527c28a71306e1154e3d33144501c9afc0d828eae12ac89c1072e1dafbba409fd18485d1fc03c7fc033e47ca0743d068520d1f63a7166f06e930c012635e8c0a45772032b1d696e40f46b48df1d630081424e29a19195ce2f1db5a8d7fb5cd2762fcdf19d9513930bd620174b30dfa9fc9744ee6c2bc9badb4a933838feb13825acf92a2a1af52f16336d8d1b210420f969899fd2688fba50385d766a710526a8a2e6c72af45ff0c967a202670863079f068c5c7b25c1b25320ddb259521c14566d243b6ff1484ff182716f8b4271d2fcd95cf6af86467c448c10120db789022b1bf543d10273b56dbb2a65077ed34cd94479ec4c0141792fa70c7ef23024d6e862ff15d617437b295d6a39666cc3d4d727aabecf7b4b09f5145817bcbd1cf77e8512ca4b6684b5e402adc1cef1ad79bb9dc1ebce82b8ad88ad0d6a761a3f5280c9172b3704a8953052a4dadc581540e27751ba95774c0cd17117a9a274b7de15c8dc5fb5cd8bbed15afdb16f22893afb013bc77aad306cc9ec9a62ef656966549f147b1d460d152a1aeb2e8dcb7caee6817a86033e93f6d6ac4e0d2c9cdeb414b8597d8c8eba975028f5fb40ef0f6b53fec9874cda5450c344aa73d6a454becdcec3f64ff9802ec5e39f615f170aec290378d0bd51c1b20f8e05cc9702680cc5262e4f5c0a8b08da5cfaafac4917405c78fc8e65125840b035a16aee05af1fff53898efcded8c57c52b4d3cb71e7baa6415bbf9d51a624c59eed512f55ac6caaeef45c9ebb1c6644ed9335fd97a211c98c88d8397f98c85089ec1c7ded2e50c3894ff541f229c734c764ab815442c689006d1ba8ff8a02a888ca6add2ca7ca78b4f1c2fb039890f0b4b25bf9bf1fb3eba8578a7262474cc60f68ad7d032c8653336e5b97b72cf090be594ae72c7bee8736855efc84367bb8261c0164769c2106688495a37c9ce4fb31f51d2a8fad500662e20b1f125cd9a515d1cdf6adb1758b21e0571c507d5026e36bf5b4a64e514612ad201209a45b69691bc850104f3099122da2fba280d7e57d0b10fd9b3351764ec600a7ebb4eb4127c35520b16fcff333402782c51321a862480873510d3e168baff4b4ce913bf65a151e35d7864e17da7cbbb0d5a197a7370e789391289935f7d593e2d53750e2650f90fd7699cd2dbed069eaad34f6737aeef38b5139f7a54d758c06836b597e314666dbb62b3b3988263332ec6ab35012b230d790f18ee22373c13e461d9da548cc7f1916b69e390e62a2f107183b5f73d1379f1a8cd814252f2cde4054a59dae28cf55168f0ca7ae51cc53951976de5cf0f86979c77e9858232a1cef797e6602db9791d26db328e2b2a7c89ad13e24a2c730f08fe8bc86c6e96b045ccd373cc1465b5b1e0ca2e06a9dca662f2ede664497a993dcbf35b2039830d18fa95784238a37bdcc4f5819dfcc529f5273150447231434201cc3bebcca8d01d715d67652d61ebcd81fdb0cda71efee34ed672f85bb642540c3af4190ab3a1d7287a125bd03958afbadfdcf644731ae6dee01addd14abda04c6f6362a4d458c42fdf53c14e5dcf92a61294b2ecc626adf58e7ac331501d8c360d17c8537b384e91130524d63d186740dac6de670128c5aac627b388eca16bb28701ac1e69c1289cf78b54b804f14cd7b4061541a612ef817897d0249aa1397ed081d04ca0abbeda7b1ff98c7de15114430339a2b2e2da5806a23186ed546b186595b706d351a1fe7974d9d4044342d063befe5228112314d6de5960c3d77d6fc93e975c98a4eacaad6f482560c202ffdb59e46a93bad7e74a4997940a4b76b2c55bb0bdadb64fc3c282ae61529b1f5a5a7e5af13e6ed7f374cb9d2489ac50b2965fdba0a93f9928056d03b5e0b8474716cc17f3396ec9e5a7d2e30de0130be5d244c9574ff2d63492f397132456d49d4ba398641c00a9f749657842d592e066887b4fb1371310c1b4f31b1414ae95f0188bbf930e8993670c87750b60772af0d43a4438a62f7c3ab8ec77ad97c30b088562eeb2bc149578032f3a43f0b904ec5109dd6d010e49a5185cab36925604ec316803337fcf7269107c4a1d9af7f16a02653a76b59643b4335b2ff9777ec0d4fcf57b", 0x1000}], 0x3) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001c80), 0x4) pipe(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f0000001d00)={0x0, r9, r11, 0x0, 0x7b3f, '\x00', {0x5f, 0x0, 0x800, 0x56f, 0x0, 0x5, 0x1, 0x3, {0x5, 0x1}, {0x2a58, 0x80000001}, {0x1, 0x7}, 0x2, 0x2, 0xffffffff, 0x3, 0x4, 0x1, 0xfffd, 0x7fff, 0x3, 0x9, '\x00', 0x3, 0x4, 0x2, 0xd8}}) syz_genetlink_get_family_id$devlink(&(0x7f0000001dc0), r8) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc050}, 0x4050) listen(r10, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001fc0)={r10, 0x58, &(0x7f0000001f40)}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_GET_CPSTAT(r5, 0x80186e83, &(0x7f0000002000)) 1.304127934s ago: executing program 32 (id=7135): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000004000000140001800d0001007564703a7379b390b3"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40004) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 1.246045785s ago: executing program 33 (id=7132): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250200000008000300", @ANYRES32=r6, @ANYBLOB="08002600431700000800270001000057"], 0x2c}, 0x1, 0x0, 0x0, 0xffad46ab5102f456}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x4}}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r9, 0x1}, 0x1c}}, 0x0) (async) close(r7) (async) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000eb337819ded6b82603efed06e380047963fa26c5ef95b0131d31a1ed6dba260c18687167f1212976bb260e402dc9a92e6191de00fe3d2ee7e13ee2bda848ca", @ANYRES16=r10, @ANYBLOB="0d090000000000000000010000000800010000000000"], 0x1c}}, 0x0) 186.122043ms ago: executing program 34 (id=7137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=@base={0xa, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0xf00, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @local, 0xe79}, 0x1c) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x895}, 0x24044884) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=@base={0xa, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) (async) socket(0x40000000015, 0x5, 0x0) (async) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r3, 0x0, 0xf00, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @local, 0xe79}, 0x1c) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x895}, 0x24044884) (async) 92.280451ms ago: executing program 35 (id=7142): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = epoll_create(0x1) epoll_wait(r1, &(0x7f0000000040), 0x0, 0xf6e7) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000080)={0x50000000}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0xdfc, &(0x7f0000000180), 0x8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000640)=r4, 0x12) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) epoll_pwait(r1, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xe8c8, &(0x7f0000000700)={[0x7d]}, 0x8) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f00000007c0)={0x1, 'veth0_to_bond\x00', {}, 0xfffd}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r7, 0x2, 0x70bd27, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040044) r8 = socket$netlink(0x10, 0x3, 0xc) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1) writev(r2, &(0x7f0000001c40)=[{&(0x7f0000000a80)="eff6b7f549b9cb4188259626211ceadc01ffd17cfc9f786f1655c0d616568fb733df4a46b3297822248a304277b0a0299fdc3d50d4f0d1b6347affb046378c4a555112ecf743affff3a58e05a8e148ec7b7954db484ba9b8becf043f3f3b1c68f6d29254237dd0112ec1dc755367bb1b80a6f183abcc8f9798629688085d4eff7b8760c5282ecec8ea98cdbb3db91c595f5d730e7411b18c", 0x98}, {&(0x7f0000000b40)="330375620dc86fc1bb427d8ebb0ed6b9580d7830d455b4b106a7595ffbca6864510e45ce7ee9f8975617758260d0e98800d9282e1500da8dfa4f20c1875a3ba27395c06c0a8b77bcad3e2a6c86496ea4d59222a8cc00c209e2389b4f4bf16abe9160e730cce07328e6fb31f0a66dc380ba7a6777b39a044c49fc8d4d9e18c26f57ac6246c62fdf2473c24a654f15edc571ac514893054fab0e35f3f0c5dc282fd11471575c98c8745f3cf45d39c50b68fe4fa4293b2f960d3342db1f61cb7478d2ea5a9057", 0xc5}, {&(0x7f0000000c40)="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", 0x1000}], 0x3) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001c80), 0x4) pipe(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f0000001d00)={0x0, r9, r11, 0x0, 0x7b3f, '\x00', {0x5f, 0x0, 0x800, 0x56f, 0x0, 0x5, 0x1, 0x3, {0x5, 0x1}, {0x2a58, 0x80000001}, {0x1, 0x7}, 0x2, 0x2, 0xffffffff, 0x3, 0x4, 0x1, 0xfffd, 0x7fff, 0x3, 0x9, '\x00', 0x3, 0x4, 0x2, 0xd8}}) syz_genetlink_get_family_id$devlink(&(0x7f0000001dc0), r8) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc050}, 0x4050) listen(r10, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001fc0)={r10, 0x58, &(0x7f0000001f40)}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_GET_CPSTAT(r5, 0x80186e83, &(0x7f0000002000)) 0s ago: executing program 36 (id=7138): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xa) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000040)=0x6, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xa) (async) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000040)=0x6, 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) kernel console output (not intermixed with test programs): , 1] type 1 family 0 port 2816 - 0 [ 666.847093][T28046] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.884232][T28258] bridge8: entered allmulticast mode [ 667.032756][T28266] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 667.118150][T28046] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.147819][T28046] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 667.169715][T28046] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.240899][T28271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.356853][T19102] IPVS: starting estimator thread 0... [ 667.364151][T28271] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 667.486705][T28279] IPVS: using max 30 ests per chain, 72000 per kthread [ 667.871861][T28046] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 667.893203][T28046] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 667.918339][T28046] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 667.967733][T28046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.988024][T28046] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 668.005611][T28046] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 668.038924][T28046] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 668.077985][T28046] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 668.175682][ T5649] Bluetooth: hci1: command tx timeout [ 668.277152][T28314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6088'. [ 668.400074][T28046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.482663][T28046] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.522366][T25720] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.529637][T25720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.540322][T28329] sctp: [Deprecated]: syz.4.6092 (pid 28329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 668.540322][T28329] Use struct sctp_sack_info instead [ 668.593371][T25703] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.600713][T25703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.747061][T28339] netem: unknown loss type 8 [ 668.752148][T28339] netem: change failed [ 669.211742][T28358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 669.648897][T28363] netlink: 'syz.4.6100': attribute type 7 has an invalid length. [ 669.680590][T28363] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6100'. [ 670.203992][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6106'. [ 670.248185][T28046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.258233][ T5649] Bluetooth: hci1: command tx timeout [ 670.300090][T28394] IPv6: NLM_F_CREATE should be specified when creating new route [ 670.338519][T28394] IPv6: Can't replace route, no match found [ 670.371352][T28391] : entered promiscuous mode [ 670.521056][T28046] veth0_vlan: entered promiscuous mode [ 670.535117][T28400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6108'. [ 670.563241][T28046] veth1_vlan: entered promiscuous mode [ 670.700294][T28046] veth0_macvtap: entered promiscuous mode [ 670.721522][T28046] veth1_macvtap: entered promiscuous mode [ 670.790292][T28046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.853849][T28046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.908274][T28412] netlink: 'syz.1.6112': attribute type 6 has an invalid length. [ 670.959214][T25703] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.991349][T25703] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.011223][T28412] netlink: 'syz.1.6112': attribute type 11 has an invalid length. [ 671.013838][T25703] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.046121][T25703] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.153837][T28415] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 671.221689][T28416] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 671.429237][T25722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.459464][T25722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.576850][T25716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.606931][T25716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.908068][T28435] netem: change failed [ 672.117826][T28444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6121'. [ 672.238236][T18227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 672.263741][T18227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 672.276425][T18227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 672.285847][T18227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 672.297940][T18227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 672.873800][T28460] syzkaller0: entered promiscuous mode [ 672.885325][T28460] syzkaller0: entered allmulticast mode [ 672.926181][T28472] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 673.465974][T28449] vxcan1 speed is unknown, defaulting to 1000 [ 673.579815][T28487] lo: entered promiscuous mode [ 673.600351][T28487] tunl0: entered promiscuous mode [ 673.619121][T28487] gre0: entered promiscuous mode [ 673.672273][T28487] gretap0: entered promiscuous mode [ 673.709826][T28487] erspan0: entered promiscuous mode [ 673.739220][T28487] ip_vti0: entered promiscuous mode [ 673.909865][T28498] IPv6: Can't replace route, no match found [ 673.940327][T28498] l2tp_ppp: sess 2/0: no socket in recv [ 674.035493][T28449] xfrm0 speed is unknown, defaulting to 1000 [ 674.335408][T18227] Bluetooth: hci5: command tx timeout [ 674.462829][T28449] lo speed is unknown, defaulting to 1000 [ 675.006941][T28538] vxcan1 speed is unknown, defaulting to 1000 [ 675.052190][T28548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6150'. [ 675.238813][T28554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6150'. [ 675.256595][T28554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6150'. [ 675.452039][T28538] xfrm0 speed is unknown, defaulting to 1000 [ 675.545917][T28449] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.553259][T28449] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.561668][T28449] bridge_slave_0: entered allmulticast mode [ 675.571991][T28449] bridge_slave_0: entered promiscuous mode [ 675.590381][T28449] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.600462][T28449] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.608678][T28449] bridge_slave_1: entered allmulticast mode [ 675.620726][T28449] bridge_slave_1: entered promiscuous mode [ 675.670031][T28449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.685635][T28449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.745371][T28449] team0: Port device team_slave_0 added [ 675.755337][T28449] team0: Port device team_slave_1 added [ 675.808803][T28449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.818646][T28449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.847939][T28449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.865046][T28538] lo speed is unknown, defaulting to 1000 [ 675.870824][T28449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.870842][T28449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.909296][T28449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.949434][T28550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.141443][T28449] hsr_slave_0: entered promiscuous mode [ 676.155366][T28449] hsr_slave_1: entered promiscuous mode [ 676.162082][T28449] debugfs: 'hsr0' already exists in 'hsr' [ 676.170209][T28449] Cannot create hsr debugfs directory [ 676.350659][T28582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6156'. [ 676.416071][T18227] Bluetooth: hci5: command tx timeout [ 676.437855][T28585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6157'. [ 676.501888][T28585] netlink: 'syz.4.6157': attribute type 9 has an invalid length. [ 676.657005][T28593] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6160'. [ 677.092281][T28608] netlink: 'syz.3.6164': attribute type 1 has an invalid length. [ 677.115548][T28608] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6164'. [ 677.238257][T28449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.287429][T28449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.323032][T28449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 677.492603][T28618] xt_socket: unknown flags 0x50 [ 677.510365][T28621] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6168'. [ 677.572030][T28624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6169'. [ 677.602820][T28625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6169'. [ 677.718620][T28449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.745589][T28449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.765027][T28449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 678.076404][T28635] netlink: 'syz.0.6172': attribute type 1 has an invalid length. [ 678.119799][T28635] netlink: 'syz.0.6172': attribute type 1 has an invalid length. [ 678.136147][T28449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.168562][T28449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.195810][T28449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 678.371057][T28449] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.394585][T28449] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.418721][T28449] netdevsim netdevsim1  (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 678.495175][T18227] Bluetooth: hci5: command tx timeout [ 678.613631][T28635] bridge10: entered promiscuous mode [ 678.619577][T28635] bridge10: entered allmulticast mode [ 679.156600][T28655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6176'. [ 679.308327][T28657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6177'. [ 679.318451][T28657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6177'. [ 679.328391][T28657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6177'. [ 679.430651][T28658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6177'. [ 679.437228][T28657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6177'. [ 679.476054][T28658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6177'. [ 679.504025][T25720] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.522476][T25720] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.538515][T25720] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.552682][T25720] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.803800][ T29] audit: type=1800 audit(1780381870.994:16): pid=28668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6181" name="memory.events" dev="tmpfs" ino=395 res=0 errno=0 [ 679.829034][T28449] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 679.856253][T28449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 679.877896][T28449] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 679.910367][T28449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 679.967602][T28449] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 679.992452][T28449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 680.010617][T28449] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 680.060724][T28449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 680.118240][T28676] syzkaller0: entered promiscuous mode [ 680.130176][T28676] syzkaller0: entered allmulticast mode [ 680.293273][T28449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.339519][T28449] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.444169][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.451510][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.579573][T18227] Bluetooth: hci5: command tx timeout [ 680.751639][T25703] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.758964][T25703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.222363][T28727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 681.913414][T28449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.086615][T28449] veth0_vlan: entered promiscuous mode [ 682.112759][T28449] veth1_vlan: entered promiscuous mode [ 682.262626][T28449] veth0_macvtap: entered promiscuous mode [ 682.307889][T28449] veth1_macvtap: entered promiscuous mode [ 682.348174][T28449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.362158][T28449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.408806][T25703] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.429175][T28771] xt_hashlimit: size too large, truncated to 1048576 [ 682.432908][T25703] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.462507][T25703] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.478588][T25703] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.982565][T28789] __nla_validate_parse: 11 callbacks suppressed [ 682.982581][T28789] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6213'. [ 683.273795][T28797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6215'. [ 683.286407][T28797] netem: invalid attributes len -5 [ 683.291926][T28797] netem: change failed [ 683.396918][T28799] netlink: 'syz.2.6216': attribute type 9 has an invalid length. [ 685.211359][T28763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.320412][T25722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.365277][T25722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.479029][T28840] netlink: 'syz.2.6228': attribute type 11 has an invalid length. [ 685.496568][T28832] bond1: option mode: invalid value (133) [ 685.506549][T28832] bond1 (unregistering): Released all slaves [ 685.577836][T25703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.593062][T28840] xt_hashlimit: invalid rate [ 685.598639][T25703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.645114][T28841] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 685.700819][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.712429][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 685.770599][T28851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6229'. [ 685.813943][T28851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6229'. [ 686.098736][T28860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6232'. [ 686.131755][T28860] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.139527][T28860] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.859233][T28911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 687.086436][T28930] xt_l2tp: missing protocol rule (udp|l2tpip) [ 687.136069][T28930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6250'. [ 687.163969][T28930] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.6250'. [ 688.089657][T28946] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6254'. [ 688.442952][ T29] audit: type=1804 audit(1780381879.634:17): pid=28961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6259" name="/newroot/53/memory.events" dev="tmpfs" ino=289 res=1 errno=0 [ 688.468863][T28962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6258'. [ 688.510502][T28962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6258'. [ 688.529686][ T29] audit: type=1800 audit(1780381879.634:18): pid=28961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6259" name="memory.events" dev="tmpfs" ino=289 res=0 errno=0 [ 688.565517][T28964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6258'. [ 688.585425][T28964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6258'. [ 688.782283][T28975] syzkaller0: entered promiscuous mode [ 688.796387][T28975] syzkaller0: entered allmulticast mode [ 688.839015][T28977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6263'. [ 688.874011][T28977] netlink: 'syz.3.6263': attribute type 10 has an invalid length. [ 688.966345][T28977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.989088][T28977] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 689.646127][T29008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 689.798698][T29016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6275'. [ 689.901522][T29020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6276'. [ 690.238376][T29041] IPv6: NLM_F_CREATE should be specified when creating new route [ 690.273199][T29044] netlink: 'syz.0.6284': attribute type 1 has an invalid length. [ 690.387423][T29052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6287'. [ 690.427871][T29044] bond7: entered promiscuous mode [ 690.433639][T29044] 8021q: adding VLAN 0 to HW filter on device bond7 [ 690.453877][T29056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6288'. [ 690.480802][T29052] bridge_slave_1: left allmulticast mode [ 690.501657][T29052] bridge_slave_1: left promiscuous mode [ 690.533744][T29052] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.571711][T29052] bridge_slave_0: left allmulticast mode [ 690.593531][T29052] bridge_slave_0: left promiscuous mode [ 690.600969][T29052] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.883457][T29072] netlink: 'syz.3.6292': attribute type 1 has an invalid length. [ 690.909388][T29072] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 691.032552][T29078] openvswitch: netlink: Flow key attr not present in new flow. [ 691.171675][T29087] netem: change failed [ 691.609622][T29110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.045926][T29133] netlink: 'syz.0.6312': attribute type 9 has an invalid length. [ 692.067321][ T29] audit: type=1804 audit(1780381883.264:19): pid=29131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6311" name="/newroot/46/cgroup.controllers" dev="tmpfs" ino=252 res=1 errno=0 [ 692.119200][ T29] audit: type=1800 audit(1780381883.264:20): pid=29131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6311" name="cgroup.controllers" dev="tmpfs" ino=252 res=0 errno=0 [ 692.192764][T29140] netlink: 'syz.4.6315': attribute type 11 has an invalid length. [ 692.205583][T29140] netlink: 'syz.4.6315': attribute type 4 has an invalid length. [ 693.206469][T29168] __nla_validate_parse: 13 callbacks suppressed [ 693.206483][T29168] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6321'. [ 694.161716][T29177] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 695.148235][T29140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 695.347110][T29192] netlink: 'syz.4.6330': attribute type 11 has an invalid length. [ 695.389759][T29196] rxe_newlink: 23 callbacks suppressed [ 695.389777][T29196] rdma_rxe: rxe_newlink: failed to add lo [ 695.642554][T29210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6332'. [ 696.069514][T29237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6340'. [ 696.669029][T29278] veth0: entered promiscuous mode [ 696.718412][T29281] veth0: left promiscuous mode [ 696.788572][T29290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6358'. [ 697.041011][T29306] openvswitch: netlink: Duplicate or invalid key (type 0). [ 697.048665][T29306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.877729][T29351] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6376'. [ 698.017923][ T5649] Bluetooth: hci5: command 0x0405 tx timeout [ 698.127541][T29373] netlink: 'syz.2.6380': attribute type 1 has an invalid length. [ 698.149394][T29373] netlink: 476 bytes leftover after parsing attributes in process `syz.2.6380'. [ 698.173350][T29373] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.6380'. [ 698.306354][T29360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6378'. [ 698.608977][T29400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.822300][T29410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6391'. [ 699.041305][T29421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6395'. [ 699.082662][T29421] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 699.095140][T29424] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6396'. [ 699.186971][T29434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6395'. [ 699.281200][T29439] Cannot find set identified by id 0 to match [ 699.500200][T29458] netlink: 216 bytes leftover after parsing attributes in process `syz.3.6403'. [ 699.510672][T29458] netlink: 'syz.3.6403': attribute type 2 has an invalid length. [ 699.519223][T29458] netlink: 'syz.3.6403': attribute type 1 has an invalid length. [ 699.583746][T29460] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 699.900452][T29462] bond8: entered promiscuous mode [ 699.946132][T29462] bond8: entered allmulticast mode [ 699.968114][T29462] 8021q: adding VLAN 0 to HW filter on device bond8 [ 700.162738][T29485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6415'. [ 700.203750][T29485] xfrm2: entered allmulticast mode [ 700.600825][T29507] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6422'. [ 700.700023][T29507] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20002 [ 700.889683][T29524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.050329][T29532] syzkaller0: entered promiscuous mode [ 701.076820][T29532] syzkaller0: entered allmulticast mode [ 701.549624][T29549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6437'. [ 701.931550][T29567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6441'. [ 702.627087][T29599] bond1: option resend_igmp: invalid value (32767) [ 702.641133][T29599] bond1: option resend_igmp: allowed values 0 - 255 [ 702.659673][T29599] bond1 (unregistering): Released all slaves [ 702.769711][T29616] netlink: 'syz.2.6450': attribute type 1 has an invalid length. [ 703.447956][T18227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 703.471183][T18227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 703.481793][T18227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 703.492424][T18227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 703.505579][T18227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 703.732227][T29653] bridge3: entered allmulticast mode [ 703.901080][T18226] syz_tun (unregistering): left allmulticast mode [ 704.071432][T29665] __nla_validate_parse: 2 callbacks suppressed [ 704.071451][T29665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6466'. [ 704.325153][T29649] infiniband syz0: set active [ 704.336523][T29649] infiniband syz0: added bridge_slave_1 [ 704.361397][T29649] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 704.382887][T29649] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 704.493901][T29682] netlink: 'syz.4.6468': attribute type 1 has an invalid length. [ 704.497153][T29649] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 704.594007][T29649] RDS/IB: syz0: added [ 704.608834][T29649] smc: adding ib device syz0 with port count 1 [ 704.622043][T29649] smc: ib device syz0 port 1 has no pnetid [ 704.633542][T29682] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 704.637360][T29687] tipc: Invalid UDP bearer configuration [ 704.647069][T29687] tipc: Enabling of bearer rejected, failed to enable media [ 704.685895][T29692] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6472'. [ 704.688535][T29638] vxcan1 speed is unknown, defaulting to 1000 [ 704.697710][T29692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6472'. [ 704.779572][T29695] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6472'. [ 705.371683][T29716] netlink: 372 bytes leftover after parsing attributes in process `syz.4.6479'. [ 705.509395][T29638] xfrm0 speed is unknown, defaulting to 1000 [ 705.608683][T29723] netlink: 'syz.4.6481': attribute type 58 has an invalid length. [ 705.622321][ T5649] Bluetooth: hci2: command tx timeout [ 705.630764][T29723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6481'. [ 706.218476][T29638] lo speed is unknown, defaulting to 1000 [ 706.416232][T29744] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 706.443277][T29744] bond0: (slave lo): Error: Device can not be enslaved while up [ 706.786046][ T9] IPVS: starting estimator thread 0... [ 706.858197][T29764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6491'. [ 706.888617][T29758] IPVS: using max 29 ests per chain, 69600 per kthread [ 706.899390][T29764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6491'. [ 707.694919][ T5649] Bluetooth: hci2: command tx timeout [ 708.039200][T29791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6500'. [ 708.072313][T29789] bond1: entered promiscuous mode [ 708.086233][T29791] block nbd3: Unsupported socket: should be TCP or UNIX. [ 708.389870][T29801] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 708.695959][T29814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6506'. [ 708.738389][T29814] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 709.084156][T29638] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.121866][T29638] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.136879][T29638] bridge_slave_0: entered allmulticast mode [ 709.148964][T29638] bridge_slave_0: entered promiscuous mode [ 709.170159][T29638] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.195224][T29638] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.202793][T29638] bridge_slave_1: entered allmulticast mode [ 709.237705][T29638] bridge_slave_1: entered promiscuous mode [ 709.371495][T29638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.414250][T29638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.543015][T29638] team0: Port device team_slave_0 added [ 709.583962][T29638] team0: Port device team_slave_1 added [ 709.682038][T29638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.703602][T29638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.765185][T29638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.788748][ T5649] Bluetooth: hci2: command tx timeout [ 709.806801][T29638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.848308][T29638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.922755][T29638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.938754][T29853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6516'. [ 710.069000][T29638] hsr_slave_0: entered promiscuous mode [ 710.087374][T29638] hsr_slave_1: entered promiscuous mode [ 710.096479][T29638] debugfs: 'hsr0' already exists in 'hsr' [ 710.114907][T29638] Cannot create hsr debugfs directory [ 710.312824][T29869] netlink: 808 bytes leftover after parsing attributes in process `syz.1.6521'. [ 710.390449][T29872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6522'. [ 710.442715][T29872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6522'. [ 710.547900][T29876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6524'. [ 710.605181][T29881] syz.4.6526: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 710.623686][T29881] CPU: 1 UID: 0 PID: 29881 Comm: syz.4.6526 Not tainted syzkaller #0 PREEMPT(full) [ 710.623717][T29881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 710.623730][T29881] Call Trace: [ 710.623738][T29881] [ 710.623748][T29881] dump_stack_lvl+0xe8/0x150 [ 710.623777][T29881] warn_alloc+0x249/0x340 [ 710.623810][T29881] ? stack_trace_save+0xa9/0x100 [ 710.623845][T29881] ? __pfx_warn_alloc+0x10/0x10 [ 710.623882][T29881] ? kasan_save_track+0x4f/0x80 [ 710.623908][T29881] ? kasan_save_track+0x3e/0x80 [ 710.623933][T29881] ? __kasan_kmalloc+0x93/0xb0 [ 710.623959][T29881] ? __kmalloc_cache_noprof+0x31c/0x660 [ 710.623989][T29881] ? xskq_create+0x56/0x170 [ 710.624018][T29881] ? xsk_setsockopt+0x54c/0x990 [ 710.624043][T29881] ? do_sock_setsockopt+0x17c/0x1b0 [ 710.624072][T29881] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 710.624101][T29881] ? do_syscall_64+0x174/0x580 [ 710.624131][T29881] __vmalloc_node_range_noprof+0x132/0x1750 [ 710.624208][T29881] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 710.624246][T29881] ? __kasan_kmalloc+0x93/0xb0 [ 710.624284][T29881] vmalloc_user_noprof+0xad/0xe0 [ 710.624314][T29881] ? xskq_create+0xbf/0x170 [ 710.624345][T29881] xskq_create+0xbf/0x170 [ 710.624378][T29881] xsk_init_queue+0x8a/0xe0 [ 710.624409][T29881] xsk_setsockopt+0x54c/0x990 [ 710.624442][T29881] ? __pfx_xsk_setsockopt+0x10/0x10 [ 710.624469][T29881] ? __pfx_aa_sk_perm+0x10/0x10 [ 710.624503][T29881] ? aa_sock_opt_perm+0xff/0x1a0 [ 710.624536][T29881] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 710.624563][T29881] ? __pfx_xsk_setsockopt+0x10/0x10 [ 710.624592][T29881] do_sock_setsockopt+0x17c/0x1b0 [ 710.624628][T29881] __x64_sys_setsockopt+0x13d/0x1b0 [ 710.624661][T29881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.624684][T29881] do_syscall_64+0x174/0x580 [ 710.624704][T29881] ? trace_irq_disable+0x3b/0x140 [ 710.624733][T29881] ? clear_bhb_loop+0x40/0x90 [ 710.624759][T29881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.624779][T29881] RIP: 0033:0x7fadda19ce59 [ 710.624799][T29881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.624816][T29881] RSP: 002b:00007faddb016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 710.624838][T29881] RAX: ffffffffffffffda RBX: 00007fadda415fa0 RCX: 00007fadda19ce59 [ 710.624853][T29881] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 710.624865][T29881] RBP: 00007fadda232d6f R08: 0000000000000004 R09: 0000000000000000 [ 710.624877][T29881] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.624890][T29881] R13: 00007fadda416038 R14: 00007fadda415fa0 R15: 00007ffecc959aa8 [ 710.624926][T29881] [ 710.909784][T29881] Mem-Info: [ 710.915916][T29881] active_anon:5984 inactive_anon:0 isolated_anon:0 [ 710.915916][T29881] active_file:2890 inactive_file:40476 isolated_file:0 [ 710.915916][T29881] unevictable:768 dirty:65 writeback:0 [ 710.915916][T29881] slab_reclaimable:14452 slab_unreclaimable:156301 [ 710.915916][T29881] mapped:29395 shmem:1337 pagetables:3464 [ 710.915916][T29881] sec_pagetables:0 bounce:0 [ 710.915916][T29881] kernel_misc_reclaimable:0 [ 710.915916][T29881] free:1240719 free_pcp:22913 free_cma:0 [ 710.965980][T29881] Node 0 active_anon:23936kB inactive_anon:0kB active_file:11560kB inactive_file:161696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:19276kB dirty:260kB writeback:0kB shmem:3812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17900kB pagetables:13704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 711.040556][T29881] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 711.075536][T29881] Node 0 DMA free:11224kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:12kB free_cma:0kB [ 711.108607][T29881] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 711.114700][T29881] Node 0 DMA32 free:1263596kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23880kB inactive_anon:0kB active_file:11560kB inactive_file:161696kB unevictable:1536kB writepending:260kB zspages:0kB present:3129332kB managed:2552804kB mlocked:0kB bounce:0kB free_pcp:33196kB local_pcp:14772kB free_cma:0kB [ 711.150387][T29881] lowmem_reserve[]: 0 0 0 0 0 [ 711.155259][T29881] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 711.185121][T29881] lowmem_reserve[]: 0 0 0 0 0 [ 711.189897][T29881] Node 1 Normal free:3687516kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58464kB local_pcp:30436kB free_cma:0kB [ 711.281957][T29881] lowmem_reserve[]: 0 0 0 0 0 [ 711.298322][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 711.337863][T29881] Node 0 DMA: 2*4kB (U) 0*8kB 1*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11224kB [ 711.408222][T29638] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.435491][T29881] Node 0 DMA32: 9961*4kB (UME) 8011*8kB (UME) 3675*16kB (UM) 151*32kB (UME) 910*64kB (UME) 1392*128kB (UME) 993*256kB (UM) 488*512kB (UME) 209*1024kB (U) 67*2048kB (UM) 1*4096kB (U) = 1263372kB [ 711.518973][T29881] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 711.533956][T29881] Node 1 Normal: 3*4kB (UM) 8*8kB (UM) 9*16kB (UM) 8*32kB (UM) 14*64kB (UM) 12*128kB (UM) 9*256kB (UM) 10*512kB (UM) 9*1024kB (UM) 9*2048kB (U) 891*4096kB (UM) = 3687516kB [ 711.557559][T29881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 711.567439][T29881] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 711.576950][T29881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 711.589919][T29881] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 711.617753][T29881] 45804 total pagecache pages [ 711.623032][T29881] 0 pages in swap cache [ 711.627736][T29881] Free swap = 124996kB [ 711.632086][T29881] Total swap = 124996kB [ 711.636832][T29881] 2097051 pages RAM [ 711.642722][T29881] 0 pages HighMem/MovableOnly [ 711.657443][T29638] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.668007][T29881] 427065 pages reserved [ 711.672315][T29881] 0 pages cma reserved [ 711.797064][T29638] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.865809][ T5649] Bluetooth: hci2: command tx timeout [ 711.898076][T29638] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.392648][T29638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 712.445494][T29638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 712.479152][T29638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 712.494236][T29638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 712.514332][T29638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 712.535675][T29638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 712.551429][T29638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 712.596521][T29638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 712.881395][T29638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.898547][T29938] xt_hashlimit: invalid rate [ 712.953914][T29638] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.982879][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.990103][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.049849][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.057084][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.111771][T29948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6546'. [ 713.599976][T29965] syzkaller0: entered promiscuous mode [ 713.620149][T29965] syzkaller0: entered allmulticast mode [ 714.015872][T29980] netlink: 'syz.3.6552': attribute type 1 has an invalid length. [ 714.034577][T29980] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6552'. [ 714.222258][T29987] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6554'. [ 714.318464][T29638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.460218][T29638] veth0_vlan: entered promiscuous mode [ 714.502293][T29638] veth1_vlan: entered promiscuous mode [ 714.602756][T29638] veth0_macvtap: entered promiscuous mode [ 714.621683][T29638] veth1_macvtap: entered promiscuous mode [ 714.729755][T29638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.781113][T29638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.856182][T25721] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.880800][T25721] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.922342][T25721] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.943406][T25721] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.238565][T25711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.272067][T25711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.406647][T25711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.419423][T30032] netlink: 'syz.3.6569': attribute type 24 has an invalid length. [ 715.437714][T25711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.876777][T30055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6574'. [ 715.898049][T30055] netlink: 'syz.1.6574': attribute type 3 has an invalid length. [ 715.898255][T30059] netlink: 'syz.3.6575': attribute type 1 has an invalid length. [ 715.921848][T30061] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 716.115265][T30059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 716.280261][T30075] bond1: (slave geneve2): making interface the new active one [ 716.309743][T30075] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 716.528685][T30105] netlink: 'syz.3.6587': attribute type 14 has an invalid length. [ 716.541080][T30105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6587'. [ 716.566329][T25720] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.566757][T30105] netlink: 'syz.3.6587': attribute type 14 has an invalid length. [ 716.581002][T25720] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.599991][T30105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6587'. [ 716.611577][T25720] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.635292][T25720] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.695943][T30114] netlink: 212 bytes leftover after parsing attributes in process `syz.0.6590'. [ 716.708810][T30114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6590'. [ 716.719042][T30114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6590'. [ 717.353231][T30151] openvswitch: netlink: IP tunnel TTL not specified. [ 717.372700][T30153] openvswitch: netlink: IP tunnel TTL not specified. [ 717.405585][T30151] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6601'. [ 717.730941][T30175] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 718.056786][T30190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6611'. [ 718.118750][T30192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6611'. [ 718.167417][T30202] Bluetooth: MGMT ver 1.23 [ 718.431777][T30218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6617'. [ 718.509301][T30221] netlink: zone id is out of range [ 718.528136][T30221] netlink: zone id is out of range [ 718.545334][T30221] netlink: zone id is out of range [ 718.566773][T30221] netlink: zone id is out of range [ 718.594866][T30221] netlink: zone id is out of range [ 718.610210][T30221] netlink: zone id is out of range [ 718.621885][T30221] netlink: zone id is out of range [ 718.637816][T30218] team0 (unregistering): Port device team_slave_0 removed [ 718.688154][T30218] team0 (unregistering): Port device team_slave_1 removed [ 718.790086][T30208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.213588][T30254] netlink: 'syz.1.6631': attribute type 1 has an invalid length. [ 719.301713][T30258] netlink: 'syz.2.6632': attribute type 1 has an invalid length. [ 719.338039][T30257] netlink: 'syz.2.6632': attribute type 1 has an invalid length. [ 720.977778][T30346] dvmrp0: entered allmulticast mode [ 721.126369][T30359] __nla_validate_parse: 9 callbacks suppressed [ 721.126388][T30359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6656'. [ 721.202067][T30362] xt_TCPMSS: Only works on TCP SYN packets [ 721.544627][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 721.695437][T30392] x_tables: duplicate underflow at hook 4 [ 721.943490][T30406] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.951913][T30406] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.232429][T30415] syz_tun: entered allmulticast mode [ 722.341960][T30415] pim6reg: entered allmulticast mode [ 722.413494][T30430] netlink: 'syz.1.6680': attribute type 1 has an invalid length. [ 722.456711][T30415] syz_tun (unregistering): left allmulticast mode [ 722.507952][T30430] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 722.649766][T30438] netlink: 'syz.1.6683': attribute type 1 has an invalid length. [ 722.716771][T30445] FAULT_INJECTION: forcing a failure. [ 722.716771][T30445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.738990][ T807] IPVS: starting estimator thread 0... [ 722.741547][T30445] CPU: 0 UID: 0 PID: 30445 Comm: syz.3.6686 Not tainted syzkaller #0 PREEMPT(full) [ 722.741618][T30445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 722.741650][T30445] Call Trace: [ 722.741671][T30445] [ 722.741693][T30445] dump_stack_lvl+0xe8/0x150 [ 722.741767][T30445] should_fail_ex+0x412/0x560 [ 722.741826][T30445] _copy_from_user+0x2d/0xb0 [ 722.741907][T30445] __sys_sendto+0x2b0/0x710 [ 722.742023][T30445] ? __pfx___sys_sendto+0x10/0x10 [ 722.742088][T30445] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 722.742174][T30445] ? __fget_files+0x3a0/0x420 [ 722.742265][T30445] ? ksys_write+0x242/0x270 [ 722.742345][T30445] ? __pfx_ksys_write+0x10/0x10 [ 722.742450][T30445] __x64_sys_sendto+0xde/0x100 [ 722.742525][T30445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.742589][T30445] do_syscall_64+0x174/0x580 [ 722.742652][T30445] ? trace_irq_disable+0x3b/0x140 [ 722.742723][T30445] ? clear_bhb_loop+0x40/0x90 [ 722.742787][T30445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.742839][T30445] RIP: 0033:0x7f5ba9f9ce59 [ 722.742892][T30445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.742935][T30445] RSP: 002b:00007f5ba81f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 722.742995][T30445] RAX: ffffffffffffffda RBX: 00007f5baa215fa0 RCX: 00007f5ba9f9ce59 [ 722.743029][T30445] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000004 [ 722.743069][T30445] RBP: 00007f5ba81f6090 R08: 0000200000000200 R09: 0000000000000014 [ 722.743096][T30445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.743129][T30445] R13: 00007f5baa216038 R14: 00007f5baa215fa0 R15: 00007ffc55509de8 [ 722.743215][T30445] [ 722.792413][T30438] bond2: entered promiscuous mode [ 722.959927][T30438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 723.004936][T30447] IPVS: using max 25 ests per chain, 60000 per kthread [ 723.042176][T30438] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6683'. [ 723.097421][T30438] bond2: (slave bridge1): making interface the new active one [ 723.120445][T30438] bridge1: entered promiscuous mode [ 723.149063][T30438] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 723.571409][T30485] net_ratelimit: 53 callbacks suppressed [ 723.571429][T30485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.688774][T30488] sctp: [Deprecated]: syz.1.6698 (pid 30488) Use of int in maxseg socket option. [ 723.688774][T30488] Use struct sctp_assoc_value instead [ 723.709273][T30490] FAULT_INJECTION: forcing a failure. [ 723.709273][T30490] name failslab, interval 1, probability 0, space 0, times 0 [ 723.733855][T30490] CPU: 1 UID: 0 PID: 30490 Comm: syz.3.6699 Not tainted syzkaller #0 PREEMPT(full) [ 723.733884][T30490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 723.733896][T30490] Call Trace: [ 723.733904][T30490] [ 723.733913][T30490] dump_stack_lvl+0xe8/0x150 [ 723.733942][T30490] should_fail_ex+0x412/0x560 [ 723.733971][T30490] should_failslab+0xa8/0x100 [ 723.733994][T30490] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 723.734024][T30490] ? __alloc_skb+0x186/0x7d0 [ 723.734053][T30490] ? __alloc_skb+0x1d0/0x7d0 [ 723.734085][T30490] ? __local_bh_enable_ip+0xd0/0x130 [ 723.734123][T30490] __alloc_skb+0x1d0/0x7d0 [ 723.734151][T30490] ? __lock_acquire+0x6b5/0x2cf0 [ 723.734178][T30490] alloc_skb_with_frags+0xc8/0x760 [ 723.734209][T30490] ? __lock_acquire+0x6b5/0x2cf0 [ 723.734240][T30490] sock_alloc_send_pskb+0x878/0x990 [ 723.734270][T30490] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 723.734304][T30490] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 723.734333][T30490] ? dev_get_by_index+0x22/0x2e0 [ 723.734356][T30490] ? dev_get_by_index+0x22/0x2e0 [ 723.734396][T30490] packet_sendmsg+0x315a/0x4fb0 [ 723.734443][T30490] ? __lock_acquire+0x6b5/0x2cf0 [ 723.734487][T30490] ? __lock_acquire+0x6b5/0x2cf0 [ 723.734531][T30490] ? __pfx_packet_sendmsg+0x10/0x10 [ 723.734556][T30490] ? aa_sk_perm+0x6d5/0x900 [ 723.734593][T30490] ? __pfx_aa_sk_perm+0x10/0x10 [ 723.734619][T30490] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 723.734658][T30490] ? aa_sock_msg_perm+0xf1/0x1b0 [ 723.734708][T30490] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 723.734743][T30490] ? __pfx_packet_sendmsg+0x10/0x10 [ 723.734777][T30490] __sys_sendto+0x672/0x710 [ 723.734809][T30490] ? __pfx___sys_sendto+0x10/0x10 [ 723.734835][T30490] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 723.734875][T30490] ? __fget_files+0x3a0/0x420 [ 723.734916][T30490] ? ksys_write+0x242/0x270 [ 723.734948][T30490] ? __pfx_ksys_write+0x10/0x10 [ 723.734983][T30490] __x64_sys_sendto+0xde/0x100 [ 723.735013][T30490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.735036][T30490] do_syscall_64+0x174/0x580 [ 723.735055][T30490] ? trace_irq_disable+0x3b/0x140 [ 723.735213][T30490] ? clear_bhb_loop+0x40/0x90 [ 723.735243][T30490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.735265][T30490] RIP: 0033:0x7f5ba9f9ce59 [ 723.735284][T30490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.735302][T30490] RSP: 002b:00007f5ba81f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 723.735324][T30490] RAX: ffffffffffffffda RBX: 00007f5baa215fa0 RCX: 00007f5ba9f9ce59 [ 723.735339][T30490] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000004 [ 723.735351][T30490] RBP: 00007f5ba81f6090 R08: 0000200000000200 R09: 0000000000000014 [ 723.735364][T30490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.735375][T30490] R13: 00007f5baa216038 R14: 00007f5baa215fa0 R15: 00007ffc55509de8 [ 723.735409][T30490] [ 724.250074][T30499] tipc: MTU too low for tipc bearer [ 724.601713][T30512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6707'. [ 724.812983][T30525] netlink: 'syz.3.6713': attribute type 1 has an invalid length. [ 724.847117][T30528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6710'. [ 724.915238][T30525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 725.210086][T30544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6718'. [ 725.712883][T30564] Cannot find del_set index 4 as target [ 725.734160][T30565] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6726'. [ 725.826959][T30572] tipc: Started in network mode [ 725.840610][T30572] tipc: Node identity ac14140f, cluster identity 4711 [ 725.881614][T30572] tipc: New replicast peer: 255.255.255.255 [ 725.949025][T30572] tipc: Enabled bearer , priority 10 [ 726.001095][T30580] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6729'. [ 726.061068][T30582] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6729'. [ 726.078325][T30580] tipc: Started in network mode [ 726.093680][T30580] tipc: Node identity ac14142f, cluster identity 4711 [ 726.113796][T30580] tipc: Enabling of bearer rejected, failed to enable media [ 726.178479][T30589] FAULT_INJECTION: forcing a failure. [ 726.178479][T30589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.262575][T30589] CPU: 1 UID: 0 PID: 30589 Comm: syz.3.6730 Not tainted syzkaller #0 PREEMPT(full) [ 726.262606][T30589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 726.262620][T30589] Call Trace: [ 726.262629][T30589] [ 726.262637][T30589] dump_stack_lvl+0xe8/0x150 [ 726.262667][T30589] should_fail_ex+0x412/0x560 [ 726.262696][T30589] _copy_from_iter+0x1d3/0x1670 [ 726.262724][T30589] ? sock_alloc_send_pskb+0x896/0x990 [ 726.262754][T30589] ? __pfx__copy_from_iter+0x10/0x10 [ 726.262786][T30589] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 726.262812][T30589] skb_copy_datagram_from_iter+0xf5/0x710 [ 726.262837][T30589] ? dev_get_by_index+0x22/0x2e0 [ 726.262859][T30589] ? skb_put+0x11b/0x210 [ 726.262893][T30589] packet_sendmsg+0x35b1/0x4fb0 [ 726.262941][T30589] ? __lock_acquire+0x6b5/0x2cf0 [ 726.262978][T30589] ? __lock_acquire+0x6b5/0x2cf0 [ 726.263023][T30589] ? __pfx_packet_sendmsg+0x10/0x10 [ 726.263049][T30589] ? aa_sk_perm+0x6d5/0x900 [ 726.263086][T30589] ? __pfx_aa_sk_perm+0x10/0x10 [ 726.263113][T30589] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 726.263153][T30589] ? aa_sock_msg_perm+0xf1/0x1b0 [ 726.263191][T30589] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 726.263218][T30589] ? __pfx_packet_sendmsg+0x10/0x10 [ 726.263246][T30589] __sys_sendto+0x672/0x710 [ 726.263278][T30589] ? __pfx___sys_sendto+0x10/0x10 [ 726.263304][T30589] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 726.263341][T30589] ? __fget_files+0x3a0/0x420 [ 726.263379][T30589] ? ksys_write+0x242/0x270 [ 726.263411][T30589] ? __pfx_ksys_write+0x10/0x10 [ 726.263446][T30589] __x64_sys_sendto+0xde/0x100 [ 726.263477][T30589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.263500][T30589] do_syscall_64+0x174/0x580 [ 726.263519][T30589] ? trace_irq_disable+0x3b/0x140 [ 726.263550][T30589] ? clear_bhb_loop+0x40/0x90 [ 726.263575][T30589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.263596][T30589] RIP: 0033:0x7f5ba9f9ce59 [ 726.263615][T30589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.263631][T30589] RSP: 002b:00007f5ba81f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 726.263652][T30589] RAX: ffffffffffffffda RBX: 00007f5baa215fa0 RCX: 00007f5ba9f9ce59 [ 726.263667][T30589] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000004 [ 726.263680][T30589] RBP: 00007f5ba81f6090 R08: 0000200000000200 R09: 0000000000000014 [ 726.263692][T30589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.263703][T30589] R13: 00007f5baa216038 R14: 00007f5baa215fa0 R15: 00007ffc55509de8 [ 726.263737][T30589] [ 726.663278][T30601] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.670616][T30601] bridge0: port 2(bridge_slave_1) entered listening state [ 726.678342][T30601] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.685601][T30601] bridge0: port 1(bridge_slave_0) entered listening state [ 726.717881][T30597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6733'. [ 726.797936][T30611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6735'. [ 726.928107][T30615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6736'. [ 727.010379][ T807] tipc: Node number set to 2886997007 [ 727.050052][T30619] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6737'. [ 727.085811][T30620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6738'. [ 727.109466][T30620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6738'. [ 727.127256][T30620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6738'. [ 727.152557][T30620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6738'. [ 727.348793][T30640] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6741'. [ 727.492673][T30640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.501049][T30647] FAULT_INJECTION: forcing a failure. [ 727.501049][T30647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.532971][T30640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.551444][T30640] bond0 (unregistering): Released all slaves [ 727.553235][T30647] CPU: 0 UID: 0 PID: 30647 Comm: syz.0.6745 Not tainted syzkaller #0 PREEMPT(full) [ 727.553298][T30647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 727.553336][T30647] Call Trace: [ 727.553358][T30647] [ 727.553380][T30647] dump_stack_lvl+0xe8/0x150 [ 727.553460][T30647] should_fail_ex+0x412/0x560 [ 727.553533][T30647] _copy_from_user+0x2d/0xb0 [ 727.553603][T30647] kstrtouint_from_user+0xd6/0x180 [ 727.553685][T30647] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 727.553788][T30647] proc_fail_nth_write+0x8e/0x210 [ 727.553860][T30647] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 727.553950][T30647] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 727.554028][T30647] vfs_write+0x29a/0xb90 [ 727.554132][T30647] ? __pfx_vfs_write+0x10/0x10 [ 727.554207][T30647] ? __fget_files+0x2a/0x420 [ 727.554280][T30647] ? __fget_files+0x3a0/0x420 [ 727.554350][T30647] ? __fget_files+0x2a/0x420 [ 727.554468][T30647] ksys_write+0x150/0x270 [ 727.554557][T30647] ? __pfx_ksys_write+0x10/0x10 [ 727.554661][T30647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.554721][T30647] do_syscall_64+0x174/0x580 [ 727.554777][T30647] ? trace_irq_disable+0x3b/0x140 [ 727.554857][T30647] ? clear_bhb_loop+0x40/0x90 [ 727.554921][T30647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.554972][T30647] RIP: 0033:0x7f952555d68e [ 727.555023][T30647] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 727.555065][T30647] RSP: 002b:00007f952649efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 727.555124][T30647] RAX: ffffffffffffffda RBX: 00007f952649f6c0 RCX: 00007f952555d68e [ 727.555158][T30647] RDX: 0000000000000001 RSI: 00007f952649f0a0 RDI: 0000000000000005 [ 727.555193][T30647] RBP: 00007f952649f090 R08: 0000000000000000 R09: 0000000000000000 [ 727.555231][T30647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.555262][T30647] R13: 00007f9525816038 R14: 00007f9525815fa0 R15: 00007ffc1ebeeb18 [ 727.555358][T30647] [ 728.111601][T30665] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6751'. [ 728.353280][T30672] syzkaller0: entered promiscuous mode [ 728.371295][T30672] syzkaller0: entered allmulticast mode [ 728.893571][T30701] netlink: 'syz.4.6759': attribute type 1 has an invalid length. [ 729.091657][T30701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.174921][T30712] bond0: (slave geneve2): making interface the new active one [ 729.206935][T30712] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 729.367668][T30728] openvswitch: netlink: Flow key attr not present in new flow. [ 729.413182][T30726] veth3: entered allmulticast mode [ 730.533393][T30784] gretap0: entered promiscuous mode [ 730.543448][T30784] vlan2: entered promiscuous mode [ 731.371591][T30833] netlink: 'syz.4.6796': attribute type 11 has an invalid length. [ 731.633036][T30835] ipt_ECN: cannot use operation on non-tcp rule [ 731.712405][T30841] netlink: 'syz.2.6798': attribute type 1 has an invalid length. [ 731.796857][T30846] __nla_validate_parse: 76 callbacks suppressed [ 731.796877][T30846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6800'. [ 731.843508][T30848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6800'. [ 732.531117][T30892] erspan0: entered promiscuous mode [ 733.389167][T30930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6826'. [ 733.396006][T30932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6827'. [ 733.409102][T30932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6827'. [ 733.478859][T30935] netlink: 'syz.4.6828': attribute type 1 has an invalid length. [ 733.909435][T30958] openvswitch: netlink: Message has 150 unknown bytes. [ 734.082211][T30968] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 734.259955][T30959] tipc: Resetting bearer [ 734.999816][T30959] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 735.025964][T30989] netlink: 'syz.1.6840': attribute type 1 has an invalid length. [ 735.032476][T30959] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 735.132076][T30991] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6839'. [ 735.223966][T30959] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 735.240965][T30959] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 735.289188][T30995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6841'. [ 735.389056][T30959] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 735.430722][T30959] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 735.645577][T31009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6845'. [ 735.741632][T30959] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 735.765996][T30959] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 735.803169][T31015] openvswitch: netlink: IP tunnel dst address not specified [ 735.832090][T31015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.057465][T30959] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 736.083534][T30959] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 736.910228][T31065] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.6855'. [ 736.948500][T31070] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 737.692959][T31089] netlink: 'syz.1.6862': attribute type 7 has an invalid length. [ 737.729556][T31089] netlink: 'syz.1.6862': attribute type 7 has an invalid length. [ 737.767333][T31089] netlink: 'syz.1.6862': attribute type 7 has an invalid length. [ 737.806106][T31089] netlink: 'syz.1.6862': attribute type 7 has an invalid length. [ 737.843252][T31089] netlink: 'syz.1.6862': attribute type 7 has an invalid length. [ 737.886486][T31089] netlink: 'syz.1.6862': attribute type 7 has an invalid length. [ 737.912257][T31089] netlink: 'syz.1.6862': attribute type 7 has an invalid length. [ 737.933906][T31089] netlink: 'syz.1.6862': attribute type 7 has an invalid length. [ 737.949724][T31089] netlink: 'syz.1.6862': attribute type 7 has an invalid length. [ 737.967547][T31103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6864'. [ 737.981773][T31103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6864'. [ 737.995455][T31089] netlink: 'syz.1.6862': attribute type 7 has an invalid length. [ 738.244330][T31117] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 738.272008][T31118] sctp: [Deprecated]: syz.2.6869 (pid 31118) Use of struct sctp_assoc_value in delayed_ack socket option. [ 738.272008][T31118] Use struct sctp_sack_info instead [ 738.562277][T31137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 738.569643][T31137] IPv6: NLM_F_CREATE should be set when creating new route [ 738.576994][T31137] IPv6: NLM_F_CREATE should be set when creating new route [ 738.651396][T31144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6875'. [ 738.732792][T31149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6878'. [ 738.773852][T31149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.979416][T31149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.149976][T31161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6881'. [ 739.337478][T31176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6881'. [ 740.182919][T31214] xt_hashlimit: size too large, truncated to 1048576 [ 740.361846][T31225] netlink: 42 bytes leftover after parsing attributes in process `syz.0.6894'. [ 740.392398][T31225] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6894'. [ 741.624058][T31266] veth3: entered allmulticast mode [ 741.654033][T31272] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6907'. [ 742.107669][T31289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6911'. [ 742.133227][T31289] netlink: 13 bytes leftover after parsing attributes in process `syz.2.6911'. [ 742.165040][T31289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6911'. [ 742.207875][T31289] netlink: 13 bytes leftover after parsing attributes in process `syz.2.6911'. [ 742.238985][T31289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6911'. [ 742.280601][T31299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6913'. [ 742.287510][T31289] netlink: 13 bytes leftover after parsing attributes in process `syz.2.6911'. [ 742.305112][T31299] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6913'. [ 742.728134][T31307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6915'. [ 742.746496][T31312] bond1: (slave geneve2): making interface the new active one [ 742.759802][T31312] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 742.770731][T31307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 742.827822][T25719] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 742.861316][T25719] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 742.900293][T25719] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 742.920243][T25719] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 742.977282][T31322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6918'. [ 743.259344][T31331] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 743.279630][T31331] syzkaller1: group set to 0 [ 743.486404][T31343] veth0: entered promiscuous mode [ 743.513834][T31343] veth0: left promiscuous mode [ 744.589903][T31388] bond0: entered promiscuous mode [ 744.618846][T31388] bond_slave_0: entered promiscuous mode [ 744.660404][T31388] bond_slave_1: entered promiscuous mode [ 746.249085][T31449] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 746.323272][T31429] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 746.346759][T31438] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 746.347735][T31439] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 747.138500][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 747.161247][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 747.254132][T31498] __nla_validate_parse: 4 callbacks suppressed [ 747.254153][T31498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6952'. [ 747.354290][T31505] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 750.148414][T31608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6961'. [ 750.195413][T31607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6960'. [ 750.211684][T31608] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 750.224260][T31608] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 750.233428][T31608] gretap1: entered promiscuous mode [ 750.239716][T31608] gretap1: entered allmulticast mode [ 750.251227][T31611] vet: renamed from veth0_vlan (while UP) [ 750.342118][T31619] netlink: 51 bytes leftover after parsing attributes in process `syz.2.6966'. [ 750.444033][T31626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6968'. [ 750.482345][T31626] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6968'. [ 750.512935][T31629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6970'. [ 750.528543][T31625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6968'. [ 750.760995][T31640] validate_nla: 11 callbacks suppressed [ 750.761015][T31640] netlink: 'syz.3.6975': attribute type 16 has an invalid length. [ 750.789492][T31642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6976'. [ 750.793738][T31640] netlink: 'syz.3.6975': attribute type 17 has an invalid length. [ 750.912290][T31649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6976'. [ 750.973521][T31642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 751.221903][T31640] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 753.156372][T31720] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.180305][T31720] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 753.269241][T31739] gtp0: entered promiscuous mode [ 753.288186][T31739] gtp0: entered allmulticast mode [ 753.437933][T31720] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.473232][T31720] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 753.550148][T31752] netlink: 'syz.4.7006': attribute type 2 has an invalid length. [ 753.601922][T31720] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.626054][T31720] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 753.628047][T31761] __nla_validate_parse: 2 callbacks suppressed [ 753.628090][T31761] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7006'. [ 753.822266][T31770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7012'. [ 753.841171][T31766] netlink: 'syz.3.7010': attribute type 11 has an invalid length. [ 753.858817][T31720] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.885681][T31720] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 754.229185][T25722] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 754.264222][T25722] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 754.352565][T25711] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 754.373931][T25711] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 754.427638][T25711] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 754.444559][T25711] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 754.500223][T25711] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 754.532477][T25711] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 754.597739][T31807] veth0: entered promiscuous mode [ 754.640160][T31804] veth0: left promiscuous mode [ 754.663327][T31812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7025'. [ 754.676708][T31813] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7024'. [ 754.763029][T31818] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7026'. [ 754.774347][T31812] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 755.175926][T31844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7035'. [ 755.197582][T31844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7035'. [ 755.357302][T31854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7037'. [ 755.373648][T31857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7039'. [ 755.389474][T31859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7038'. [ 755.815440][T31877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.077111][T31894] openvswitch: netlink: VLAN attribute unexpected. [ 756.197816][T31897] syzkaller0: entered promiscuous mode [ 756.203441][T31897] syzkaller0: entered allmulticast mode [ 756.261922][T31897] tipc: Failed to obtain node identity [ 756.270915][T31897] tipc: Enabling of bearer rejected, failed to enable media [ 756.287181][T31897] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 756.296653][T31897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 756.747756][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 756.756724][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 758.962483][T31927] __nla_validate_parse: 35 callbacks suppressed [ 758.962503][T31927] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7062'. [ 758.991179][T31929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7060'. [ 759.039160][T31929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7060'. [ 759.246969][T31941] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7064'. [ 759.286243][T25711] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.310202][T31929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7060'. [ 759.326481][T31929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7060'. [ 759.382393][T31943] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7065'. [ 759.600686][T25711] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.625635][T25711] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.646225][T31929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7060'. [ 759.655974][T25711] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.684542][T31929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7060'. [ 759.719821][T31929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7060'. [ 759.887839][T31957] netlink: 'syz.0.7072': attribute type 24 has an invalid length. [ 759.987609][T31961] syz_tun: entered allmulticast mode [ 760.052607][T31961] pimreg: entered allmulticast mode [ 760.126731][T31961] syz_tun: left allmulticast mode [ 760.270501][T31985] netlink: 'syz.1.7080': attribute type 2 has an invalid length. [ 760.705962][T32010] netlink: 'syz.3.7088': attribute type 1 has an invalid length. [ 760.798106][T32010] bond3: entered promiscuous mode [ 760.811031][T32010] 8021q: adding VLAN 0 to HW filter on device bond3 [ 760.861797][T32010] 8021q: adding VLAN 0 to HW filter on device bond3 [ 760.888906][T32010] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 760.905838][T32010] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 760.920393][T32010] bond3: (slave ip6gre1): making interface the new active one [ 760.930133][T32010] ip6gre1: entered promiscuous mode [ 760.938497][T32010] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 761.182959][T30967] block nbd5: Receive control failed (result -32) [ 761.360014][T32034] netlink: 'syz.1.7093': attribute type 1 has an invalid length. [ 761.373508][T32034] netlink: 'syz.1.7093': attribute type 1 has an invalid length. [ 761.442971][T32043] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 761.538786][T32052] x_tables: duplicate underflow at hook 1 [ 761.603645][T32057] netlink: 'syz.1.7102': attribute type 1 has an invalid length. [ 761.647770][T32057] 8021q: adding VLAN 0 to HW filter on device bond3 [ 761.682363][T32061] bond3: (slave geneve2): making interface the new active one [ 761.692586][T32061] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 762.122752][T32077] netlink: 'syz.3.7108': attribute type 1 has an invalid length. [ 762.160401][T32077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 762.193045][T32077] bond4: (slave gretap2): making interface the new active one [ 762.202992][T32077] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 762.348063][T32084] netlink: 'syz.2.7111': attribute type 16 has an invalid length. [ 762.357945][T32084] netlink: 'syz.2.7111': attribute type 17 has an invalid length. [ 762.437739][T32081] bond1 (unregistering): Released all slaves [ 762.491096][T32084] lo: left promiscuous mode [ 762.522033][T32084] tunl0: left promiscuous mode [ 762.542482][T32084] gre0: left promiscuous mode [ 762.673695][T32084] gretap0: left promiscuous mode [ 762.692221][T32084] erspan0: left promiscuous mode [ 762.709082][T32084] ip_vti0: left promiscuous mode [ 762.774782][T32084] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 763.160738][T32112] syzkaller1: entered promiscuous mode [ 763.173625][T32112] syzkaller1: entered allmulticast mode [ 763.253247][T32126] netlink: 'syz.1.7121': attribute type 1 has an invalid length. [ 763.344337][T32130] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 763.368448][T32130] bond4 (unregistering): Released all slaves [ 763.444163][T32126] 8021q: adding VLAN 0 to HW filter on device bond4 [ 763.585287][T32126] bond4: (slave ip6gretap1): making interface the new active one [ 763.612565][T32126] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 765.258462][T32199] __nla_validate_parse: 43 callbacks suppressed [ 765.258486][T32199] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.7141'. [ 777.882747][T25722] bridge_slave_1: left allmulticast mode [ 777.889828][T25722] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.934315][T25722] pimreg: left allmulticast mode [ 778.131582][T25722] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 778.763932][T25722] bond4 (unregistering): (slave bridge7): Releasing active interface [ 779.063629][T25722] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.081500][T25722] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.099517][T25722] .` (unregistering): Released all slaves [ 779.113296][T25722] bond1 (unregistering): Released all slaves [ 779.138412][T25722] bond2 (unregistering): Released all slaves [ 779.163358][T25722] bond3 (unregistering): Released all slaves [ 779.199546][T25722] bond0 (unregistering): Released all slaves [ 779.231125][T25722] bond4 (unregistering): Released all slaves [ 779.353557][T25722] : left promiscuous mode [ 779.499865][T25722] : left promiscuous mode [ 779.677677][T25722] tipc: Disabling bearer [ 779.706639][T25722] tipc: Left network mode [ 779.730122][ T5649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 779.742757][ T5649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 779.755421][ T5649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 779.766751][ T5649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 779.775361][ T5649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 779.892413][T30967] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 779.900739][T30967] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 779.908718][T30967] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 779.916894][T30967] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 779.928155][T30967] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 780.020365][T30967] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 780.037687][T30967] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 780.049136][T30967] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 780.062701][T30967] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 780.073017][T30967] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 781.148570][ T5649] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 781.164120][ T5649] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 781.180623][ T5649] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 781.191074][ T5649] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 781.202381][ T5649] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 781.335068][T30967] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 781.351272][T30967] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 781.363946][T30967] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 781.372361][T30967] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 781.380902][T30967] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 781.459904][T30967] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 781.480711][T30967] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 781.493611][T30967] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 781.510609][T30967] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 781.521510][T30967] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 781.584190][T32215] vxcan1 speed is unknown, defaulting to 1000 [ 782.015515][T30967] Bluetooth: hci4: command tx timeout [ 782.174984][T30967] Bluetooth: hci6: command tx timeout [ 782.940937][T32215] xfrm0 speed is unknown, defaulting to 1000 [ 782.950768][T32212] vxcan1 speed is unknown, defaulting to 1000 [ 783.178895][T25722] hsr_slave_0: left promiscuous mode [ 783.195864][T25722] hsr_slave_1: left promiscuous mode [ 783.203685][T25722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.225207][T25722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.239720][T25722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.256361][T25722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.279395][T25722] veth1_macvtap: left promiscuous mode [ 783.295850][T25722] veth0_macvtap: left allmulticast mode [ 783.303075][T30967] Bluetooth: hci7: command tx timeout [ 783.455402][T30967] Bluetooth: hci8: command tx timeout [ 783.518776][T25722] pim6reg (unregistering): left allmulticast mode [ 783.615985][T30967] Bluetooth: hci9: command tx timeout [ 783.819068][T25722] team0 (unregistering): Port device team_slave_1 removed [ 783.848090][T25722] team0 (unregistering): Port device team_slave_0 removed [ 784.035633][T32212] xfrm0 speed is unknown, defaulting to 1000 [ 784.036250][T32247] vxcan1 speed is unknown, defaulting to 1000 [ 784.041723][T32215] lo speed is unknown, defaulting to 1000 [ 784.105579][T30967] Bluetooth: hci4: command tx timeout [ 784.255284][T30967] Bluetooth: hci6: command tx timeout [ 784.388151][T25722] IPVS: stop unused estimator thread 0... [ 784.660932][T32245] vxcan1 speed is unknown, defaulting to 1000 [ 784.689724][T32247] xfrm0 speed is unknown, defaulting to 1000 [ 784.737100][T32212] lo speed is unknown, defaulting to 1000 [ 785.291524][T32249] vxcan1 speed is unknown, defaulting to 1000 [ 785.375849][ T5649] Bluetooth: hci7: command tx timeout [ 785.445534][T32245] xfrm0 speed is unknown, defaulting to 1000 [ 785.475828][T32247] lo speed is unknown, defaulting to 1000 [ 785.536808][ T5649] Bluetooth: hci8: command tx timeout [ 785.704998][ T5649] Bluetooth: hci9: command tx timeout [ 786.176893][ T5649] Bluetooth: hci4: command tx timeout [ 786.335770][ T5649] Bluetooth: hci6: command tx timeout [ 786.550621][T32249] xfrm0 speed is unknown, defaulting to 1000 [ 786.558835][T32245] lo speed is unknown, defaulting to 1000 [ 786.816116][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.823385][ C0] bridge0: topology change detected, propagating [ 786.830730][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.838014][ C0] bridge0: topology change detected, propagating [ 787.020961][T32215] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.043264][T32215] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.051202][T32215] bridge_slave_0: entered allmulticast mode [ 787.081325][T32215] bridge_slave_0: entered promiscuous mode [ 787.118522][T32215] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.136655][T32215] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.154910][T32215] bridge_slave_1: entered allmulticast mode [ 787.177989][T32215] bridge_slave_1: entered promiscuous mode [ 787.397906][T32215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.446816][T32215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.456812][ T5649] Bluetooth: hci7: command tx timeout [ 787.616953][ T5649] Bluetooth: hci8: command tx timeout [ 787.642661][T32249] lo speed is unknown, defaulting to 1000 [ 787.753590][T32215] team0: Port device team_slave_0 added [ 787.775960][ T5649] Bluetooth: hci9: command tx timeout [ 787.792340][T32215] team0: Port device team_slave_1 added [ 788.117928][T32215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.140594][T32215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.214163][T32215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.256508][T32215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.263915][ T5649] Bluetooth: hci4: command tx timeout [ 788.275008][T32215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.363534][T32215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.415180][ T5649] Bluetooth: hci6: command tx timeout [ 788.715508][T32215] hsr_slave_0: entered promiscuous mode [ 788.722598][T32215] hsr_slave_1: entered promiscuous mode [ 788.741009][T32215] debugfs: 'hsr0' already exists in 'hsr' [ 788.746874][T32215] Cannot create hsr debugfs directory [ 789.003623][T32212] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.011825][T32212] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.019546][T32212] bridge_slave_0: entered allmulticast mode [ 789.027838][T32212] bridge_slave_0: entered promiscuous mode [ 789.079155][T32212] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.089415][T32212] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.098210][T32212] bridge_slave_1: entered allmulticast mode [ 789.107698][T32212] bridge_slave_1: entered promiscuous mode [ 789.241926][T32212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.279642][T32212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.483844][T32212] team0: Port device team_slave_0 added [ 789.534612][ T5649] Bluetooth: hci7: command tx timeout [ 789.560605][T32212] team0: Port device team_slave_1 added [ 789.693718][T32212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.700957][ T5649] Bluetooth: hci8: command tx timeout [ 789.708641][T32212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.735983][T32212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.790274][T32212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.809649][T32212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.837477][T32212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.858845][ T5649] Bluetooth: hci9: command tx timeout [ 790.159574][T32212] hsr_slave_0: entered promiscuous mode [ 790.175875][T32212] hsr_slave_1: entered promiscuous mode [ 790.184270][T32212] debugfs: 'hsr0' already exists in 'hsr' [ 790.209328][T32212] Cannot create hsr debugfs directory [ 790.229426][T32247] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.236906][T32247] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.244284][T32247] bridge_slave_0: entered allmulticast mode [ 790.253847][T32247] bridge_slave_0: entered promiscuous mode [ 790.268767][T32247] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.276668][T32247] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.284050][T32247] bridge_slave_1: entered allmulticast mode [ 790.293222][T32247] bridge_slave_1: entered promiscuous mode [ 790.483472][T32247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.553252][T32247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.597087][T32245] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.604602][T32245] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.611966][T32245] bridge_slave_0: entered allmulticast mode [ 790.621236][T32245] bridge_slave_0: entered promiscuous mode [ 790.709676][T32245] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.717959][T32245] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.725897][T32245] bridge_slave_1: entered allmulticast mode [ 790.734107][T32245] bridge_slave_1: entered promiscuous mode [ 790.848478][T32247] team0: Port device team_slave_0 added [ 790.909849][T32247] team0: Port device team_slave_1 added [ 790.956387][T32245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.022168][T32245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.050050][T32247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.061026][T32247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.094641][T32247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.109075][T32249] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.117064][T32249] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.124888][T32249] bridge_slave_0: entered allmulticast mode [ 791.133096][T32249] bridge_slave_0: entered promiscuous mode [ 791.146763][T32249] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.153983][T32249] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.162423][T32249] bridge_slave_1: entered allmulticast mode [ 791.171289][T32249] bridge_slave_1: entered promiscuous mode [ 791.213766][T32247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.227521][T32247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.255358][T32247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.362217][T32245] team0: Port device team_slave_0 added [ 791.373625][T32245] team0: Port device team_slave_1 added [ 791.446728][T32249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.534308][T32249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.546618][T32245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.555897][T32245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.583483][T32245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.610587][T32247] hsr_slave_0: entered promiscuous mode [ 791.625385][T32247] hsr_slave_1: entered promiscuous mode [ 791.633372][T32247] debugfs: 'hsr0' already exists in 'hsr' [ 791.640774][T32247] Cannot create hsr debugfs directory [ 791.668415][T32245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.676953][T32245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.713354][T32245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.823670][T32249] team0: Port device team_slave_0 added [ 791.887046][T32249] team0: Port device team_slave_1 added [ 791.969113][T32245] hsr_slave_0: entered promiscuous mode [ 791.977965][T32245] hsr_slave_1: entered promiscuous mode [ 791.990291][T32245] debugfs: 'hsr0' already exists in 'hsr' [ 791.997017][T32245] Cannot create hsr debugfs directory [ 792.117269][T32249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.126090][T32249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.154212][T32249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.215797][T32249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.222811][T32249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.250959][T32249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.405366][T32249] hsr_slave_0: entered promiscuous mode [ 792.412362][T32249] hsr_slave_1: entered promiscuous mode [ 792.421184][T32249] debugfs: 'hsr0' already exists in 'hsr' [ 792.428658][T32249] Cannot create hsr debugfs directory [ 808.582193][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 839.301660][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 839.859918][T30967] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 839.873112][T30967] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 839.882071][T30967] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 839.895457][T30967] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 839.904223][T30967] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 839.992621][T30967] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 840.008037][T30967] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 840.031069][T30967] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 840.045915][T30967] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 840.054706][T30967] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 840.495290][T32321] vxcan1 speed is unknown, defaulting to 1000 [ 840.849987][T32321] xfrm0 speed is unknown, defaulting to 1000 [ 840.857230][T32324] vxcan1 speed is unknown, defaulting to 1000 [ 841.078013][T30967] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 841.098912][T30967] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 841.109165][T30967] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 841.118307][T30967] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 841.130201][T30967] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 841.328864][ T5649] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 841.342048][ T5649] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 841.354396][ T5649] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 841.364258][ T5649] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 841.381920][ T5649] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 841.722744][T32324] xfrm0 speed is unknown, defaulting to 1000 [ 841.727516][T32321] lo speed is unknown, defaulting to 1000 [ 841.947843][T30967] Bluetooth: hci10: command tx timeout [ 842.096611][T30967] Bluetooth: hci11: command tx timeout [ 842.253383][T32348] vxcan1 speed is unknown, defaulting to 1000 [ 842.393094][ T5649] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 842.413025][ T5649] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 842.428747][ T5649] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 842.450182][ T5649] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 842.458044][ T5649] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 842.681688][T32324] lo speed is unknown, defaulting to 1000 [ 843.031341][T32344] vxcan1 speed is unknown, defaulting to 1000 [ 843.046599][T32348] xfrm0 speed is unknown, defaulting to 1000 [ 843.214500][ T5649] Bluetooth: hci12: command tx timeout [ 843.454462][ T5649] Bluetooth: hci13: command tx timeout [ 843.761265][T32348] lo speed is unknown, defaulting to 1000 [ 843.929852][T32344] xfrm0 speed is unknown, defaulting to 1000 [ 843.943658][T32366] vxcan1 speed is unknown, defaulting to 1000 [ 844.014595][ T5649] Bluetooth: hci10: command tx timeout [ 844.175287][ T5649] Bluetooth: hci11: command tx timeout [ 844.494689][ T5649] Bluetooth: hci14: command tx timeout [ 844.585416][T32321] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.594531][T32321] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.612042][T32321] bridge_slave_0: entered allmulticast mode [ 844.628393][T32321] bridge_slave_0: entered promiscuous mode [ 844.686741][T32321] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.696390][T32321] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.703782][T32321] bridge_slave_1: entered allmulticast mode [ 844.743556][T32321] bridge_slave_1: entered promiscuous mode [ 844.881935][T32344] lo speed is unknown, defaulting to 1000 [ 844.887856][T32366] xfrm0 speed is unknown, defaulting to 1000 [ 844.922457][T32321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.965436][T32321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.178456][T32321] team0: Port device team_slave_0 added [ 845.219410][T32321] team0: Port device team_slave_1 added [ 845.295793][ T5649] Bluetooth: hci12: command tx timeout [ 845.412891][T32321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.434416][T32321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.488392][T32321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.533197][T32321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.541940][ T5649] Bluetooth: hci13: command tx timeout [ 845.564388][T32321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.591468][T32321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.779812][T32366] lo speed is unknown, defaulting to 1000 [ 846.025471][T32321] hsr_slave_0: entered promiscuous mode [ 846.055928][T32321] hsr_slave_1: entered promiscuous mode [ 846.062463][T32321] debugfs: 'hsr0' already exists in 'hsr' [ 846.085724][T32321] Cannot create hsr debugfs directory [ 846.105817][ T5649] Bluetooth: hci10: command tx timeout [ 846.255306][ T5649] Bluetooth: hci11: command tx timeout [ 846.575493][ T5649] Bluetooth: hci14: command tx timeout [ 846.838612][T32324] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.865150][T32324] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.872599][T32324] bridge_slave_0: entered allmulticast mode [ 846.897192][T32324] bridge_slave_0: entered promiscuous mode [ 846.997812][T32324] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.015739][T32324] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.027206][T32324] bridge_slave_1: entered allmulticast mode [ 847.036531][T32324] bridge_slave_1: entered promiscuous mode [ 847.319487][T32324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.375098][ T5649] Bluetooth: hci12: command tx timeout [ 847.419388][T32324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.522074][T32324] team0: Port device team_slave_0 added [ 847.589263][T32324] team0: Port device team_slave_1 added [ 847.614579][ T5649] Bluetooth: hci13: command tx timeout [ 847.754155][T32348] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.762471][T32348] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.770840][T32348] bridge_slave_0: entered allmulticast mode [ 847.781984][T32348] bridge_slave_0: entered promiscuous mode [ 847.790908][T32324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.799584][T32324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.833963][T32324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.848430][T32324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.861647][T32324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.889099][T32324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.938935][T32348] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.950297][T32348] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.958360][T32348] bridge_slave_1: entered allmulticast mode [ 847.966773][T32348] bridge_slave_1: entered promiscuous mode [ 848.185128][ T5649] Bluetooth: hci10: command tx timeout [ 848.212016][T32348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.292668][T32348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.346761][ T5649] Bluetooth: hci11: command tx timeout [ 848.364773][T32324] hsr_slave_0: entered promiscuous mode [ 848.401429][T32324] hsr_slave_1: entered promiscuous mode [ 848.408586][T32324] debugfs: 'hsr0' already exists in 'hsr' [ 848.415525][T32324] Cannot create hsr debugfs directory [ 848.557698][T32348] team0: Port device team_slave_0 added [ 848.579564][T32348] team0: Port device team_slave_1 added [ 848.664606][ T5649] Bluetooth: hci14: command tx timeout [ 848.830809][T32348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.839439][T32348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.866599][T32348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.929053][T32344] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.937480][T32344] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.945599][T32344] bridge_slave_0: entered allmulticast mode [ 848.956226][T32344] bridge_slave_0: entered promiscuous mode [ 848.973927][T32348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.984294][T32348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.013233][T32348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.048734][T32344] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.057058][T32344] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.065401][T32344] bridge_slave_1: entered allmulticast mode [ 849.075451][T32344] bridge_slave_1: entered promiscuous mode [ 849.172127][T32344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.242258][T32344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.376135][T32366] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.384024][T32366] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.392595][T32366] bridge_slave_0: entered allmulticast mode [ 849.401453][T32366] bridge_slave_0: entered promiscuous mode [ 849.419559][T32348] hsr_slave_0: entered promiscuous mode [ 849.429070][T32348] hsr_slave_1: entered promiscuous mode [ 849.438394][T32348] debugfs: 'hsr0' already exists in 'hsr' [ 849.444195][T32348] Cannot create hsr debugfs directory [ 849.458968][T32344] team0: Port device team_slave_0 added [ 849.465976][ T5649] Bluetooth: hci12: command tx timeout [ 849.480457][T32366] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.496148][T32366] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.503532][T32366] bridge_slave_1: entered allmulticast mode [ 849.512900][T32366] bridge_slave_1: entered promiscuous mode [ 849.524748][T32344] team0: Port device team_slave_1 added [ 849.540593][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 849.695727][ T5649] Bluetooth: hci13: command tx timeout [ 849.699058][T32366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.748972][T32344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.757472][T32344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.789594][T32344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.819870][T32366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.846697][T32344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.855789][T32344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.882694][T32344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.016980][T32366] team0: Port device team_slave_0 added [ 850.053078][T32366] team0: Port device team_slave_1 added [ 850.131420][T32344] hsr_slave_0: entered promiscuous mode [ 850.138889][T32344] hsr_slave_1: entered promiscuous mode [ 850.145573][T32344] debugfs: 'hsr0' already exists in 'hsr' [ 850.151390][T32344] Cannot create hsr debugfs directory [ 850.250985][T32366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.259992][T32366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.286937][T32366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.333968][T32366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.341604][T32366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.370321][T32366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.538488][T32366] hsr_slave_0: entered promiscuous mode [ 850.546345][T32366] hsr_slave_1: entered promiscuous mode [ 850.553135][T32366] debugfs: 'hsr0' already exists in 'hsr' [ 850.559492][T32366] Cannot create hsr debugfs directory [ 850.745217][ T5649] Bluetooth: hci14: command tx timeout [ 870.021521][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 870.046580][T25709] bridge_slave_1: left allmulticast mode [ 870.054870][T25709] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.069149][T25709] bridge_slave_0: left allmulticast mode [ 870.076345][T25709] bridge_slave_0: left promiscuous mode [ 870.082179][T25709] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.348462][T25709] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 870.364110][T25709] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 870.949140][T25709] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.958441][T25709] bond_slave_0: left allmulticast mode [ 870.971815][T25709] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.988742][T25709] bond_slave_1: left allmulticast mode [ 871.000223][T25709] .` (unregistering): Released all slaves [ 871.021768][T25709] bond0 (unregistering): Released all slaves [ 871.045724][T25709] bond1 (unregistering): Released all slaves [ 871.074162][T25709] bond2 (unregistering): Released all slaves [ 871.098466][T25709] bond3 (unregistering): Released all slaves [ 871.134475][T25709] bond4 (unregistering): Released all slaves [ 871.159142][T25709] bond5 (unregistering): Released all slaves [ 871.183167][T25709] bond6 (unregistering): Released all slaves [ 871.337671][T25709] tipc: Left network mode [ 872.884894][T25709] hsr_slave_0: left promiscuous mode [ 872.891054][T25709] hsr_slave_1: left promiscuous mode [ 872.905711][T25709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.913161][T25709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.928417][T25709] veth1_macvtap: left promiscuous mode [ 872.934051][T25709] veth1_vlan: left promiscuous mode [ 872.940320][T25709] veth0_vlan: left promiscuous mode [ 873.092228][T25709] pim6reg (unregistering): left allmulticast mode [ 873.728370][T25709] IPVS: stop unused estimator thread 0... [ 899.899436][T30967] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 899.913866][T30967] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 899.928731][T30967] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 899.937920][T30967] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 899.946401][T30967] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 900.108799][ T5649] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 900.134046][ T5649] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 900.142978][ T5649] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 900.152116][ T5649] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 900.163369][ T5649] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 900.700108][T32423] vxcan1 speed is unknown, defaulting to 1000 [ 901.097624][T32221] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 901.116310][T32221] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 901.127429][T32221] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 901.136158][T32221] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 901.143929][T32221] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 901.246205][T32423] xfrm0 speed is unknown, defaulting to 1000 [ 901.257004][T32428] vxcan1 speed is unknown, defaulting to 1000 [ 901.806822][T32428] xfrm0 speed is unknown, defaulting to 1000 [ 901.813519][T32423] lo speed is unknown, defaulting to 1000 [ 901.859167][T32446] vxcan1 speed is unknown, defaulting to 1000 [ 902.016122][T32221] Bluetooth: hci15: command tx timeout [ 902.163760][T32444] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 902.179616][T32444] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 902.188148][T32444] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 902.197829][T32444] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 902.215250][T32444] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 902.255333][T32444] Bluetooth: hci16: command tx timeout [ 902.652083][T32428] lo speed is unknown, defaulting to 1000 [ 902.719272][T32446] xfrm0 speed is unknown, defaulting to 1000 [ 902.821808][T32221] Bluetooth: hci6: command 0x0406 tx timeout [ 902.829255][T32444] Bluetooth: hci4: command 0x0406 tx timeout [ 903.099181][T32457] vxcan1 speed is unknown, defaulting to 1000 [ 903.215284][T18227] Bluetooth: hci17: command tx timeout [ 903.462743][ T5649] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 903.477630][ T5649] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 903.486093][ T5649] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 903.499435][ T5649] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 903.507567][ T5649] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 903.770839][T32446] lo speed is unknown, defaulting to 1000 [ 904.105027][T18227] Bluetooth: hci15: command tx timeout [ 904.208516][T32457] xfrm0 speed is unknown, defaulting to 1000 [ 904.255510][T18227] Bluetooth: hci18: command tx timeout [ 904.336696][T18227] Bluetooth: hci16: command tx timeout [ 904.567531][T32468] vxcan1 speed is unknown, defaulting to 1000 [ 904.944605][T32423] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.975138][T32423] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.982680][T32423] bridge_slave_0: entered allmulticast mode [ 904.995948][T32423] bridge_slave_0: entered promiscuous mode [ 905.021785][T32423] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.040984][T32423] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.060976][T32423] bridge_slave_1: entered allmulticast mode [ 905.076903][T32423] bridge_slave_1: entered promiscuous mode [ 905.273009][T32423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.295523][T18227] Bluetooth: hci17: command tx timeout [ 905.302075][T32457] lo speed is unknown, defaulting to 1000 [ 905.336184][T32423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.501132][T32468] xfrm0 speed is unknown, defaulting to 1000 [ 905.579665][T32423] team0: Port device team_slave_0 added [ 905.615623][T18227] Bluetooth: hci19: command tx timeout [ 905.645126][T32423] team0: Port device team_slave_1 added [ 905.798026][T32423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.821812][T32423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.896283][T32423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.031681][T32423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.064964][T32423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.115109][T32423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.175023][T32486] Bluetooth: hci15: command tx timeout [ 906.181132][T32468] lo speed is unknown, defaulting to 1000 [ 906.335475][T32486] Bluetooth: hci18: command tx timeout [ 906.415421][T32486] Bluetooth: hci16: command tx timeout [ 906.437097][T32423] hsr_slave_0: entered promiscuous mode [ 906.467689][T32423] hsr_slave_1: entered promiscuous mode [ 906.501044][T32423] debugfs: 'hsr0' already exists in 'hsr' [ 906.513812][T32423] Cannot create hsr debugfs directory [ 907.212937][T32428] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.234971][T32428] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.245104][T32428] bridge_slave_0: entered allmulticast mode [ 907.267324][T32428] bridge_slave_0: entered promiscuous mode [ 907.349564][T32428] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.366123][T32428] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.373556][T32428] bridge_slave_1: entered allmulticast mode [ 907.384518][T32486] Bluetooth: hci17: command tx timeout [ 907.391618][T32428] bridge_slave_1: entered promiscuous mode [ 907.606111][T32428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.674157][T32428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.697278][T32486] Bluetooth: hci19: command tx timeout [ 907.829457][T32428] team0: Port device team_slave_0 added [ 907.862536][T32428] team0: Port device team_slave_1 added [ 907.970025][T32486] Bluetooth: hci7: command 0x0406 tx timeout [ 907.978620][T32486] Bluetooth: hci8: command 0x0406 tx timeout [ 907.980595][T30967] Bluetooth: hci9: command 0x0406 tx timeout [ 908.155687][T32428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.163039][T32428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.235488][T32428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.254200][T32428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.269008][T32444] Bluetooth: hci15: command tx timeout [ 908.275112][T32428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.301725][T32428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.415957][T32444] Bluetooth: hci18: command tx timeout [ 908.496942][ T5649] Bluetooth: hci16: command tx timeout [ 908.521930][T32446] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.533274][T32446] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.542824][T32446] bridge_slave_0: entered allmulticast mode [ 908.554144][T32446] bridge_slave_0: entered promiscuous mode [ 908.610077][T32446] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.618781][T32446] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.627010][T32446] bridge_slave_1: entered allmulticast mode [ 908.637063][T32446] bridge_slave_1: entered promiscuous mode [ 908.692284][T32428] hsr_slave_0: entered promiscuous mode [ 908.699375][T32428] hsr_slave_1: entered promiscuous mode [ 908.706733][T32428] debugfs: 'hsr0' already exists in 'hsr' [ 908.712524][T32428] Cannot create hsr debugfs directory [ 908.822145][T32446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.839923][T32446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.015757][T32446] team0: Port device team_slave_0 added [ 909.080067][T32446] team0: Port device team_slave_1 added [ 909.176745][T32457] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.184115][T32457] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.195155][T32457] bridge_slave_0: entered allmulticast mode [ 909.208050][T32457] bridge_slave_0: entered promiscuous mode [ 909.286754][T32457] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.294060][T32457] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.309899][T32457] bridge_slave_1: entered allmulticast mode [ 909.320908][T32457] bridge_slave_1: entered promiscuous mode [ 909.332303][T32446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.341966][T32446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.368922][T32446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.455524][ T5649] Bluetooth: hci17: command tx timeout [ 909.463049][T32446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.471054][T32446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.498022][T32446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.589128][T32457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.646533][T32457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.785212][ T5649] Bluetooth: hci19: command tx timeout [ 909.829188][T32457] team0: Port device team_slave_0 added [ 909.883052][T32446] hsr_slave_0: entered promiscuous mode [ 909.891620][T32446] hsr_slave_1: entered promiscuous mode [ 909.899492][T32446] debugfs: 'hsr0' already exists in 'hsr' [ 909.905960][T32446] Cannot create hsr debugfs directory [ 909.916367][T32457] team0: Port device team_slave_1 added [ 909.922191][T32468] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.930429][T32468] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.938831][T32468] bridge_slave_0: entered allmulticast mode [ 909.948182][T32468] bridge_slave_0: entered promiscuous mode [ 910.030172][T32468] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.042514][T32468] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.050794][T32468] bridge_slave_1: entered allmulticast mode [ 910.060407][T32468] bridge_slave_1: entered promiscuous mode [ 910.174269][T32457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.187633][T32457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.215505][T32457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.241644][T32468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.253896][T32457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.268584][T32457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.295757][T32457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.341784][T32468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.495202][ T5649] Bluetooth: hci18: command tx timeout [ 910.516271][T32468] team0: Port device team_slave_0 added [ 910.527633][T32468] team0: Port device team_slave_1 added [ 910.559670][T32457] hsr_slave_0: entered promiscuous mode [ 910.582698][T32457] hsr_slave_1: entered promiscuous mode [ 910.607054][T32457] debugfs: 'hsr0' already exists in 'hsr' [ 910.636578][T32457] Cannot create hsr debugfs directory [ 910.790219][T32468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.797681][T32468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.831184][T32468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.910212][T32468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.917947][T32468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.947020][T32468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.210575][T32468] hsr_slave_0: entered promiscuous mode [ 911.220805][T32468] hsr_slave_1: entered promiscuous mode [ 911.228818][T32468] debugfs: 'hsr0' already exists in 'hsr' [ 911.235158][T32468] Cannot create hsr debugfs directory [ 911.855080][ T5649] Bluetooth: hci19: command tx timeout [ 919.945048][ T30] INFO: task syz.1.7132:32166 blocked for more than 143 seconds. [ 919.956981][ T30] Not tainted syzkaller #0 [ 919.961993][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 919.971362][ T30] task:syz.1.7132 state:D stack:28064 pid:32166 tgid:32163 ppid:28449 task_flags:0x400040 flags:0x00080002 [ 919.991160][ T30] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 919.998043][ T30] [ 920.001044][ T30] __schedule+0x1821/0x5740 [ 920.011085][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 920.026822][ T30] ? __pfx___schedule+0x10/0x10 [ 920.045382][ T30] ? schedule+0x90/0x360 [ 920.049827][ T30] schedule+0x164/0x360 [ 920.064002][ T30] schedule_preempt_disabled+0x13/0x30 [ 920.096460][ T30] __mutex_lock+0x7f7/0x1550 [ 920.113683][ T30] ? kernel_text_address+0xa5/0xe0 [ 920.131734][ T30] ? __mutex_lock+0x608/0x1550 [ 920.144244][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 920.150401][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 920.156470][ T30] ? stack_trace_save+0xa9/0x100 [ 920.161497][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 920.167177][ T30] ? radix_tree_lookup+0x240/0x290 [ 920.172375][ T30] genl_rcv_msg+0x10b/0x7a0 [ 920.180319][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 920.185902][ T30] netlink_rcv_skb+0x232/0x4b0 [ 920.190747][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 920.197611][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 920.202998][ T30] ? down_read+0x270/0x2e0 [ 920.212357][ T30] ? genl_rcv+0xd/0x40 [ 920.219653][ T30] genl_rcv+0x28/0x40 [ 920.223708][ T30] netlink_unicast+0x75c/0x8e0 [ 920.230204][ T30] netlink_sendmsg+0x813/0xb40 [ 920.236101][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.241470][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 920.248259][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 920.253620][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.264121][ T30] __sys_sendto+0x672/0x710 [ 920.269597][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 920.275733][ T30] ? exc_page_fault+0x6a/0xc0 [ 920.280485][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 920.287980][ T30] __x64_sys_sendto+0xde/0x100 [ 920.292828][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.300076][ T30] do_syscall_64+0x174/0x580 [ 920.305567][ T30] ? trace_irq_disable+0x3b/0x140 [ 920.310677][ T30] ? clear_bhb_loop+0x40/0x90 [ 920.320887][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.329195][ T30] RIP: 0033:0x7f4994f5d68e [ 920.333681][ T30] RSP: 002b:00007f4995d76e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 920.345681][ T30] RAX: ffffffffffffffda RBX: 00007f4995d786c0 RCX: 00007f4994f5d68e [ 920.353736][ T30] RDX: 0000000000000028 RSI: 00007f4995d77000 RDI: 0000000000000005 [ 920.362732][ T30] RBP: 0000000000000000 R08: 00007f4995d76f04 R09: 000000000000000c [ 920.372056][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 920.381179][ T30] R13: 00007f4995d76f58 R14: 00007f4995d77000 R15: 0000000000000000 [ 920.390062][ T30] [ 920.393215][ T30] INFO: task syz.0.7135:32175 blocked for more than 143 seconds. [ 920.405452][ T30] Not tainted syzkaller #0 [ 920.410456][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 920.420464][ T30] task:syz.0.7135 state:D stack:27904 pid:32175 tgid:32174 ppid:29638 task_flags:0x400040 flags:0x00080002 [ 920.438120][ T30] Call Trace: [ 920.441472][ T30] [ 920.445449][ T30] __schedule+0x1821/0x5740 [ 920.450040][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 920.455568][ T30] ? __pfx___schedule+0x10/0x10 [ 920.460505][ T30] ? schedule+0x90/0x360 [ 920.465659][ T30] schedule+0x164/0x360 [ 920.469894][ T30] schedule_preempt_disabled+0x13/0x30 [ 920.475999][ T30] __mutex_lock+0x7f7/0x1550 [ 920.480670][ T30] ? __mutex_lock+0x608/0x1550 [ 920.486490][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 920.491242][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 920.497667][ T30] ? radix_tree_lookup+0x240/0x290 [ 920.502875][ T30] genl_rcv_msg+0x10b/0x7a0 [ 920.508473][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 920.513579][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 920.520295][ T30] netlink_rcv_skb+0x232/0x4b0 [ 920.526280][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 920.531374][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 920.537981][ T30] ? down_read+0x270/0x2e0 [ 920.542465][ T30] ? genl_rcv+0xd/0x40 [ 920.548256][ T30] genl_rcv+0x28/0x40 [ 920.552311][ T30] netlink_unicast+0x75c/0x8e0 [ 920.558467][ T30] netlink_sendmsg+0x813/0xb40 [ 920.563324][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.569638][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 920.576371][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 920.581997][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.588488][ T30] __sys_sendto+0x672/0x710 [ 920.593070][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 920.599146][ T30] ? exc_page_fault+0x6a/0xc0 [ 920.603908][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 920.610240][ T30] __x64_sys_sendto+0xde/0x100 [ 920.616148][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.622299][ T30] do_syscall_64+0x174/0x580 [ 920.627986][ T30] ? trace_irq_disable+0x3b/0x140 [ 920.633097][ T30] ? clear_bhb_loop+0x40/0x90 [ 920.638843][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.645923][ T30] RIP: 0033:0x7f952555d68e [ 920.650407][ T30] RSP: 002b:00007f952649de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 920.665982][ T30] RAX: ffffffffffffffda RBX: 00007f952649f6c0 RCX: 00007f952555d68e [ 920.674038][ T30] RDX: 0000000000000020 RSI: 00007f952649e000 RDI: 0000000000000005 [ 920.683581][ T30] RBP: 0000000000000000 R08: 00007f952649df04 R09: 000000000000000c [ 920.692633][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 920.701541][ T30] R13: 00007f952649df58 R14: 00007f952649e000 R15: 0000000000000000 [ 920.710905][ T30] [ 920.714012][ T30] INFO: task syz.0.7135:32177 blocked for more than 144 seconds. [ 920.723791][ T30] Not tainted syzkaller #0 [ 920.729649][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 920.739709][ T30] task:syz.0.7135 state:D stack:27904 pid:32177 tgid:32174 ppid:29638 task_flags:0x400040 flags:0x00080002 [ 920.752123][ T30] Call Trace: [ 920.755958][ T30] [ 920.758950][ T30] __schedule+0x1821/0x5740 [ 920.763515][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 920.769496][ T30] ? irqentry_exit+0x218/0x8b0 [ 920.775089][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 920.780375][ T30] ? trace_irq_disable+0x3b/0x140 [ 920.786458][ T30] ? __pfx___schedule+0x10/0x10 [ 920.791398][ T30] ? schedule+0x90/0x360 [ 920.798745][ T30] schedule+0x164/0x360 [ 920.802989][ T30] schedule_preempt_disabled+0x13/0x30 [ 920.809541][ T30] __mutex_lock+0x7f7/0x1550 [ 920.814211][ T30] ? __mutex_lock+0x608/0x1550 [ 920.822545][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 920.828425][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 920.833539][ T30] ? radix_tree_lookup+0x240/0x290 [ 920.839995][ T30] genl_rcv_msg+0x10b/0x7a0 [ 920.845470][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 920.850570][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 920.857306][ T30] netlink_rcv_skb+0x232/0x4b0 [ 920.862169][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 920.868289][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 920.873673][ T30] ? down_read+0x270/0x2e0 [ 920.879278][ T30] ? genl_rcv+0xd/0x40 [ 920.883421][ T30] genl_rcv+0x28/0x40 [ 920.888691][ T30] netlink_unicast+0x75c/0x8e0 [ 920.893545][ T30] netlink_sendmsg+0x813/0xb40 [ 920.904069][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.912039][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 920.918464][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 920.923841][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.930149][ T30] __sys_sendto+0x672/0x710 [ 920.935621][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 920.940752][ T30] ? fd_install+0x94/0x3d0 [ 920.946579][ T30] ? fd_install+0x306/0x3d0 [ 920.951164][ T30] __x64_sys_sendto+0xde/0x100 [ 920.957103][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.963247][ T30] do_syscall_64+0x174/0x580 [ 920.968827][ T30] ? trace_irq_disable+0x3b/0x140 [ 920.973930][ T30] ? clear_bhb_loop+0x40/0x90 [ 920.983100][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.990111][ T30] RIP: 0033:0x7f952555d68e [ 920.995507][ T30] RSP: 002b:00007f952645be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 921.003994][ T30] RAX: ffffffffffffffda RBX: 00007f952645d6c0 RCX: 00007f952555d68e [ 921.013647][ T30] RDX: 0000000000000020 RSI: 00007f952645c000 RDI: 0000000000000006 [ 921.022687][ T30] RBP: 0000000000000000 R08: 00007f952645bf04 R09: 000000000000000c [ 921.031652][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 921.040431][ T30] R13: 00007f952645bf58 R14: 00007f952645c000 R15: 0000000000000000 [ 921.048802][ T30] [ 921.051905][ T30] INFO: task syz.2.7137:32186 blocked for more than 144 seconds. [ 921.067591][ T30] Not tainted syzkaller #0 [ 921.072609][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 921.082345][ T30] task:syz.2.7137 state:D stack:27904 pid:32186 tgid:32184 ppid:28046 task_flags:0x400040 flags:0x00080002 [ 921.096032][ T30] Call Trace: [ 921.099389][ T30] [ 921.102361][ T30] __schedule+0x1821/0x5740 [ 921.108053][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 921.113116][ T30] ? __pfx___schedule+0x10/0x10 [ 921.119002][ T30] ? schedule+0x90/0x360 [ 921.123517][ T30] schedule+0x164/0x360 [ 921.129331][ T30] schedule_preempt_disabled+0x13/0x30 [ 921.136164][ T30] __mutex_lock+0x7f7/0x1550 [ 921.142625][ T30] ? __mutex_lock+0x608/0x1550 [ 921.148409][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 921.153156][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 921.159655][ T30] ? radix_tree_lookup+0x240/0x290 [ 921.165677][ T30] genl_rcv_msg+0x10b/0x7a0 [ 921.170261][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 921.176433][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 921.181888][ T30] netlink_rcv_skb+0x232/0x4b0 [ 921.187938][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 921.193037][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 921.199428][ T30] ? down_read+0x270/0x2e0 [ 921.203913][ T30] ? genl_rcv+0xd/0x40 [ 921.209047][ T30] genl_rcv+0x28/0x40 [ 921.213099][ T30] netlink_unicast+0x75c/0x8e0 [ 921.221755][ T30] netlink_sendmsg+0x813/0xb40 [ 921.227437][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.232805][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 921.238807][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 921.244244][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.250963][ T30] __sys_sendto+0x672/0x710 [ 921.256333][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 921.261462][ T30] ? exc_page_fault+0x6a/0xc0 [ 921.267438][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 921.272802][ T30] __x64_sys_sendto+0xde/0x100 [ 921.278936][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.285975][ T30] do_syscall_64+0x174/0x580 [ 921.290630][ T30] ? trace_irq_disable+0x3b/0x140 [ 921.296954][ T30] ? clear_bhb_loop+0x40/0x90 [ 921.301709][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.308925][ T30] RIP: 0033:0x7f981eb5d68e [ 921.313408][ T30] RSP: 002b:00007f981cdf4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 921.323096][ T30] RAX: ffffffffffffffda RBX: 00007f981cdf66c0 RCX: 00007f981eb5d68e [ 921.332046][ T30] RDX: 0000000000000020 RSI: 00007f981cdf5000 RDI: 0000000000000005 [ 921.340772][ T30] RBP: 0000000000000000 R08: 00007f981cdf4f04 R09: 000000000000000c [ 921.349218][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 921.357667][ T30] R13: 00007f981cdf4f58 R14: 00007f981cdf5000 R15: 0000000000000000 [ 921.366841][ T30] [ 921.369950][ T30] INFO: task syz.4.7138:32187 blocked for more than 144 seconds. [ 921.379448][ T30] Not tainted syzkaller #0 [ 921.385369][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 921.394116][ T30] task:syz.4.7138 state:D stack:28088 pid:32187 tgid:32185 ppid:26883 task_flags:0x400140 flags:0x00080002 [ 921.407662][ T30] Call Trace: [ 921.411010][ T30] [ 921.413974][ T30] __schedule+0x1821/0x5740 [ 921.419681][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 921.425626][ T30] ? __pfx___schedule+0x10/0x10 [ 921.430579][ T30] ? schedule+0x90/0x360 [ 921.437360][ T30] schedule+0x164/0x360 [ 921.441618][ T30] schedule_preempt_disabled+0x13/0x30 [ 921.448088][ T30] __mutex_lock+0x7f7/0x1550 [ 921.452763][ T30] ? kernel_text_address+0xa5/0xe0 [ 921.459029][ T30] ? __mutex_lock+0x608/0x1550 [ 921.463889][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 921.469943][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 921.476011][ T30] ? stack_trace_save+0xa9/0x100 [ 921.481028][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 921.486941][ T30] ? radix_tree_lookup+0x240/0x290 [ 921.492133][ T30] genl_rcv_msg+0x10b/0x7a0 [ 921.497939][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 921.503065][ T30] netlink_rcv_skb+0x232/0x4b0 [ 921.508864][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 921.513965][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 921.520425][ T30] ? down_read+0x270/0x2e0 [ 921.526067][ T30] ? genl_rcv+0xd/0x40 [ 921.530226][ T30] genl_rcv+0x28/0x40 [ 921.534251][ T30] netlink_unicast+0x75c/0x8e0 [ 921.540244][ T30] netlink_sendmsg+0x813/0xb40 [ 921.545937][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.551305][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 921.557578][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 921.562948][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.569287][ T30] __sys_sendto+0x672/0x710 [ 921.573897][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 921.580034][ T30] ? exc_page_fault+0x6a/0xc0 [ 921.585905][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 921.591266][ T30] __x64_sys_sendto+0xde/0x100 [ 921.597090][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.603270][ T30] do_syscall_64+0x174/0x580 [ 921.608948][ T30] ? trace_irq_disable+0x3b/0x140 [ 921.614046][ T30] ? clear_bhb_loop+0x40/0x90 [ 921.621423][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.628280][ T30] RIP: 0033:0x7fadda15d68e [ 921.632799][ T30] RSP: 002b:00007faddb014e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 921.641829][ T30] RAX: ffffffffffffffda RBX: 00007faddb0166c0 RCX: 00007fadda15d68e [ 921.650616][ T30] RDX: 000000000000001c RSI: 00007faddb015000 RDI: 0000000000000005 [ 921.658967][ T30] RBP: 0000000000000000 R08: 00007faddb014f04 R09: 000000000000000c [ 921.667904][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 921.677212][ T30] R13: 00007faddb014f58 R14: 00007faddb015000 R15: 0000000000000000 [ 921.686105][ T30] [ 921.689226][ T30] INFO: task syz.3.7142:32204 blocked for more than 145 seconds. [ 921.703740][ T30] Not tainted syzkaller #0 [ 921.709896][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 921.719639][ T30] task:syz.3.7142 state:D stack:27904 pid:32204 tgid:32201 ppid:27604 task_flags:0x400040 flags:0x00080002 [ 921.732509][ T30] Call Trace: [ 921.738697][ T30] [ 921.741698][ T30] __schedule+0x1821/0x5740 [ 921.747200][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 921.752215][ T30] ? irqentry_exit+0x218/0x8b0 [ 921.758188][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 921.763455][ T30] ? trace_irq_disable+0x3b/0x140 [ 921.770284][ T30] ? __pfx___schedule+0x10/0x10 [ 921.778059][ T30] ? schedule+0x90/0x360 [ 921.782486][ T30] schedule+0x164/0x360 [ 921.787767][ T30] schedule_preempt_disabled+0x13/0x30 [ 921.793307][ T30] __mutex_lock+0x7f7/0x1550 [ 921.799405][ T30] ? __mutex_lock+0x608/0x1550 [ 921.804251][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 921.809955][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 921.815924][ T30] ? radix_tree_lookup+0x240/0x290 [ 921.821114][ T30] genl_rcv_msg+0x10b/0x7a0 [ 921.826943][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 921.832052][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 921.838524][ T30] netlink_rcv_skb+0x232/0x4b0 [ 921.843375][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 921.849974][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 921.864281][ T30] ? down_read+0x270/0x2e0 [ 921.869729][ T30] ? genl_rcv+0xd/0x40 [ 921.873838][ T30] genl_rcv+0x28/0x40 [ 921.878919][ T30] netlink_unicast+0x75c/0x8e0 [ 921.883777][ T30] netlink_sendmsg+0x813/0xb40 [ 921.890288][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.896602][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 921.901638][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 921.907995][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.913381][ T30] __sys_sendto+0x672/0x710 [ 921.919286][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 921.924764][ T30] ? exc_page_fault+0x6a/0xc0 [ 921.929510][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 921.935604][ T30] __x64_sys_sendto+0xde/0x100 [ 921.940455][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.947280][ T30] do_syscall_64+0x174/0x580 [ 921.951979][ T30] ? trace_irq_disable+0x3b/0x140 [ 921.958189][ T30] ? clear_bhb_loop+0x40/0x90 [ 921.962939][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.970224][ T30] RIP: 0033:0x7f5ba9f5d68e [ 921.975955][ T30] RSP: 002b:00007f5ba81b2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 921.985281][ T30] RAX: ffffffffffffffda RBX: 00007f5ba81b46c0 RCX: 00007f5ba9f5d68e [ 921.993322][ T30] RDX: 000000000000001c RSI: 00007f5ba81b3000 RDI: 0000000000000006 [ 922.002391][ T30] RBP: 0000000000000000 R08: 00007f5ba81b2f04 R09: 000000000000000c [ 922.011642][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 922.022516][ T30] R13: 00007f5ba81b2f58 R14: 00007f5ba81b3000 R15: 0000000000000000 [ 922.031429][ T30] [ 922.035788][ T30] [ 922.035788][ T30] Showing all locks held in the system: [ 922.043560][ T30] 1 lock held by khungtaskd/30: [ 922.050275][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 922.061130][ T30] 2 locks held by getty/5395: [ 922.067028][ T30] #0: ffff8880377d90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 922.077805][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 922.089311][ T30] 4 locks held by kworker/u8:27/25716: [ 922.096369][ T30] 5 locks held by kworker/u8:30/25719: [ 922.101934][ T30] 3 locks held by syz.1.7132/32165: [ 922.108523][ T30] 2 locks held by syz.1.7132/32166: [ 922.113775][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.123419][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.133714][ T30] 2 locks held by syz.0.7135/32175: [ 922.139842][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.149026][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.159440][ T30] 2 locks held by syz.0.7135/32177: [ 922.165524][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.173815][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.185523][ T30] 2 locks held by syz.2.7137/32186: [ 922.190793][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.200277][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.210213][ T30] 2 locks held by syz.4.7138/32187: [ 922.216333][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.225662][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.235205][ T30] 2 locks held by syz.3.7142/32204: [ 922.240462][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.249995][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.261190][ T30] 2 locks held by syz-executor/32212: [ 922.267517][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.277384][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.287398][ T30] 2 locks held by syz-executor/32215: [ 922.292830][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.302277][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.312651][ T30] 2 locks held by syz-executor/32245: [ 922.319009][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.328126][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.339503][ T30] 2 locks held by syz-executor/32247: [ 922.349354][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.359417][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.369954][ T30] 2 locks held by syz-executor/32249: [ 922.376520][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.385800][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.396378][ T30] 2 locks held by syz-executor/32321: [ 922.401828][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.411159][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.423615][ T30] 2 locks held by syz-executor/32324: [ 922.430389][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.439699][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.450993][ T30] 2 locks held by syz-executor/32344: [ 922.457923][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.467251][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.477586][ T30] 2 locks held by syz-executor/32348: [ 922.483066][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.492722][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.503031][ T30] 2 locks held by syz-executor/32366: [ 922.508996][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.518051][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.527484][ T30] 2 locks held by syz-executor/32423: [ 922.532932][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.542679][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.553152][ T30] 2 locks held by syz-executor/32428: [ 922.559713][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.569442][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.581220][ T30] 2 locks held by syz-executor/32446: [ 922.587632][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.596928][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.607261][ T30] 2 locks held by syz-executor/32457: [ 922.612709][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.622375][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.632436][ T30] 2 locks held by syz-executor/32468: [ 922.639247][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 922.648513][ T30] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 922.659347][ T30] [ 922.661736][ T30] ============================================= [ 922.661736][ T30] [ 922.673106][ T30] NMI backtrace for cpu 0 [ 922.673125][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 922.673151][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 922.673165][ T30] Call Trace: [ 922.673175][ T30] [ 922.673192][ T30] dump_stack_lvl+0xe8/0x150 [ 922.673225][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 922.673265][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 922.673293][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 922.673329][ T30] sys_info+0x135/0x170 [ 922.673355][ T30] watchdog+0xfd3/0x1030 [ 922.673398][ T30] ? watchdog+0x1c9/0x1030 [ 922.673439][ T30] kthread+0x389/0x470 [ 922.673470][ T30] ? __pfx_watchdog+0x10/0x10 [ 922.673500][ T30] ? __pfx_kthread+0x10/0x10 [ 922.673532][ T30] ret_from_fork+0x514/0xb70 [ 922.673561][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 922.673586][ T30] ? __switch_to+0xc79/0x1410 [ 922.673623][ T30] ? __pfx_kthread+0x10/0x10 [ 922.673654][ T30] ret_from_fork_asm+0x1a/0x30 [ 922.673704][ T30] [ 922.673727][ T30] Sending NMI from CPU 0 to CPUs 1: [ 922.795768][ C1] NMI backtrace for cpu 1 [ 922.795786][ C1] CPU: 1 UID: 0 PID: 25709 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 922.795810][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 922.795824][ C1] Workqueue: bat_events batadv_mcast_mla_update [ 922.795854][ C1] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 922.795881][ C1] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 6c 3f 86 00 48 c7 c3 d8 59 39 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d d9 52 8d 11 74 11 83 e0 04 c1 e8 02 5b [ 922.795898][ C1] RSP: 0018:ffffc90005caf3d8 EFLAGS: 00000a02 [ 922.795914][ C1] RAX: 0000000000000000 RBX: ffff8880b87339d8 RCX: 0000000080000001 [ 922.795929][ C1] RDX: 00000000d862e3f3 RSI: ffffffff8c28b6c0 RDI: ffffffff8c28b680 [ 922.795944][ C1] RBP: dffffc0000000000 R08: ffffffff8176e256 R09: ffffffff8e95cca0 [ 922.795959][ C1] R10: ffffc90005caf518 R11: ffffffff81b0e0e0 R12: ffffc90005caf500 [ 922.795974][ C1] R13: 1ffff92000b95e99 R14: ffffffff8e261798 R15: dffffc0000000000 [ 922.795990][ C1] FS: 0000000000000000(0000) GS:ffff88812539e000(0000) knlGS:0000000000000000 [ 922.796007][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 922.796021][ C1] CR2: 00005556a1f23ee8 CR3: 0000000075f9c000 CR4: 00000000003526f0 [ 922.796041][ C1] Call Trace: [ 922.796049][ C1] [ 922.796056][ C1] ? kfree+0x1c5/0x640 [ 922.796081][ C1] ? unwind_next_frame+0xa6/0x2550 [ 922.796104][ C1] unwind_next_frame+0xd5/0x2550 [ 922.796131][ C1] ? unwind_next_frame+0xa6/0x2550 [ 922.796155][ C1] ? __kasan_slab_free+0x5c/0x80 [ 922.796183][ C1] ? kfree+0x1c5/0x640 [ 922.796208][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 922.796238][ C1] arch_stack_walk+0x11b/0x150 [ 922.796266][ C1] ? kfree+0x1c5/0x640 [ 922.796293][ C1] stack_trace_save+0xa9/0x100 [ 922.796321][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 922.796348][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 922.796372][ C1] ? stack_depot_save_flags+0x33/0x810 [ 922.796395][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 922.796416][ C1] kasan_save_track+0x3e/0x80 [ 922.796441][ C1] ? kasan_save_track+0x3e/0x80 [ 922.796467][ C1] ? kasan_save_free_info+0x46/0x50 [ 922.796488][ C1] ? __kasan_slab_free+0x5c/0x80 [ 922.796514][ C1] ? kfree+0x1c5/0x640 [ 922.796571][ C1] kasan_save_free_info+0x46/0x50 [ 922.796593][ C1] __kasan_slab_free+0x5c/0x80 [ 922.796622][ C1] kfree+0x1c5/0x640 [ 922.796644][ C1] ? batadv_mcast_mla_update+0x3380/0x3740 [ 922.796667][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 922.796705][ C1] batadv_mcast_mla_update+0x3380/0x3740 [ 922.796737][ C1] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 922.796762][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 922.796788][ C1] ? lock_acquire+0x106/0x350 [ 922.796812][ C1] ? process_scheduled_works+0xa70/0x1860 [ 922.796840][ C1] ? process_scheduled_works+0xa70/0x1860 [ 922.796859][ C1] ? process_scheduled_works+0xa70/0x1860 [ 922.796880][ C1] process_scheduled_works+0xb5d/0x1860 [ 922.796920][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 922.796944][ C1] ? assign_work+0x3d5/0x5e0 [ 922.796966][ C1] worker_thread+0xa53/0xfc0 [ 922.797004][ C1] kthread+0x389/0x470 [ 922.797029][ C1] ? __pfx_worker_thread+0x10/0x10 [ 922.797048][ C1] ? __pfx_kthread+0x10/0x10 [ 922.797073][ C1] ret_from_fork+0x514/0xb70 [ 922.797096][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 922.797116][ C1] ? __switch_to+0xc79/0x1410 [ 922.797146][ C1] ? __pfx_kthread+0x10/0x10 [ 922.797171][ C1] ret_from_fork_asm+0x1a/0x30 [ 922.797207][ C1] [ 923.181124][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 923.188044][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 923.197190][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 923.207287][ T30] Call Trace: [ 923.210605][ T30] [ 923.213567][ T30] vpanic+0x56c/0xa60 [ 923.217594][ T30] ? __pfx___schedule+0x10/0x10 [ 923.222495][ T30] ? __pfx_vpanic+0x10/0x10 [ 923.227040][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 923.233257][ T30] panic+0xc5/0xd0 [ 923.237043][ T30] ? __pfx_panic+0x10/0x10 [ 923.241508][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 923.246938][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 923.253145][ T30] watchdog+0x102c/0x1030 [ 923.257533][ T30] ? watchdog+0x1c9/0x1030 [ 923.261996][ T30] kthread+0x389/0x470 [ 923.266108][ T30] ? __pfx_watchdog+0x10/0x10 [ 923.270820][ T30] ? __pfx_kthread+0x10/0x10 [ 923.275453][ T30] ret_from_fork+0x514/0xb70 [ 923.280094][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 923.285347][ T30] ? __switch_to+0xc79/0x1410 [ 923.290073][ T30] ? __pfx_kthread+0x10/0x10 [ 923.294713][ T30] ret_from_fork_asm+0x1a/0x30 [ 923.299537][ T30] [ 923.303210][ T30] Kernel Offset: disabled [ 923.307668][ T30] Rebooting in 86400 seconds..