last executing test programs: 27.593466717s ago: executing program 3 (id=4487): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0xa, 0x5, 0x5) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d1, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket(0x22, 0xa, 0x2) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) close(0x4) 25.831859664s ago: executing program 3 (id=4504): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xad, 0x35, &(0x7f00000000c0)="25d6800a56bca1011638a519f64c0e3a7ecee217fecfeb01870a849b4b28e067ff6c6e2c2b3053ef0be312d950ae385c58c71437247691251697d4fdb8d21bc862ac8e34c33b703c51f253a406c5a17d53bd5db6d39abd06aec87a82f00673495ba3ed831273613a108c3b285f8fa52e80e088c204c04207d7b1dda12afa05144608acce614a9c59db26a657eb3b2e114316e1e364599398b0df40bd0d655bda31dab9b2e42696487b8bd6d083", &(0x7f0000000000)=""/53, 0x1, 0x0, 0x66, 0x20, &(0x7f0000000200)="c211e595af805251345165c0ff8890bfad4bde0e86e596e3fe17e6d687f5b52ddadc76605cb52a2831ca12686940de4604a94195192d155df228e34495438eed8ec6cf20344752f640c7c0519e49bd27c992c3f76510c877c81d65a5ba7fcfdab1395883e3e2", &(0x7f0000000040)="f02045dd3fa7676b2dfbdee0b23a06a836f7f2940253e8a74c7bb11f10559a3c", 0x1, 0x0, 0x10}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbc025087c0000080001800400dd80080003"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000c00)={0x3, 0x10, '\x00', 0x0, &(0x7f0000000bc0)=[0x0, 0x0]}) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)=r0}, 0x20) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x8, 0x5, 0xb, 0x0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x53, &(0x7f0000000840)=""/83, 0x41000, 0x80, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000640)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x0, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000900)=[r6, r6], &(0x7f0000000940)=[{0x0, 0x4, 0x8, 0x2}, {0x2, 0x2, 0x1, 0xc}, {0x0, 0x4, 0x4}, {0x4, 0x3, 0x10, 0x8}, {0x1, 0x4, 0x0, 0x2}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x5, 0xd, 0x0, 0xfffffff8}, 0x10, 0x0, r7, 0x4, &(0x7f0000000a80)=[r5], &(0x7f0000000ac0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x2, 0x2, 0x2}, {0x0, 0x1, 0x4, 0x1}, {0x5, 0x1, 0x2, 0x9}]}, 0x94) 25.386571474s ago: executing program 3 (id=4510): r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a00000001"], 0x184}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc3abb9a7489d2048}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x68, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f2d0000000000000187ac1414aaa69d35a2cca84708f7abca1bac14141bbd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 25.041869508s ago: executing program 3 (id=4512): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) ppoll(&(0x7f0000000280), 0x1, &(0x7f0000002d00)={0x0, 0x989680}, 0x0, 0x4f) 24.944633678s ago: executing program 3 (id=4515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000f7dbdf253a00000008000300", @ANYRES32=r4, @ANYBLOB="04005b000600650000400000"], 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e40)=ANY=[@ANYBLOB="380000001800dd8d03100000000000000200000000000006000000200600150004000000143def09a194131de8fb415681ec71001680100008800c0002800800010009000000"], 0x38}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000040000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020096797a3000000000140000001100110000000000000000000000000ac12cfb485bf927e2241ca70728d8ceb9b650c5d0d581088ad31c45f5106b6f0810524d46abd3c8b5929eb184118f"], 0x68}}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="500000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="460609000000000028001280133adda6fe79de0900000000000000000200001800020600000000000000000d00c2aa7773d813d97dff00000000000000e0e6050114987b697985634f7591cb588d0f4adec30295d3fbe970ed97eeb778ecc2a8cc12058fa71a0aae164cf1529253e0000173d7fe8970d5002f6c718ba85f7a914ea05a5dbc6023b70eacc8bc4f00000000b2f4dc3913d77941d5fd4e68305f92cd0736827640e5adfab5f906b41ae2f5cdc61991d8dee8", @ANYRES32=r9, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r10 = socket(0x2b, 0x80801, 0x1) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) ioctl$sock_TIOCOUTQ(r10, 0x5411, &(0x7f0000000000)) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x134, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x104, 0x2, {{0xfffffffe, 0x2, 0x40, 0xa, 0xe7, 0xcc36}, [@TCA_NETEM_LOSS={0xb8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x40, 0xf, 0xa, 0x4006559, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0xd82c, 0x8, 0x6, 0x0, 0xc5e0}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1000, 0x2, 0x0, 0x8, 0x1}}, @NETEM_LOSS_GI={0x9, 0x1, {0x4, 0x4, 0x9de, 0x9, 0xb502}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5b, 0x20000, 0x3, 0xa}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x40003, 0x0, 0x6}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x40009, 0xae}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x100020}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x608, 0x340, 0x228, 0x140, 0x0, 0x140, 0x538, 0x538, 0x538, 0x538, 0x538, 0x6, &(0x7f0000000340), {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x3, 0x1, 0x0, [0x0, 0x0, 0x1ff, 0x1000, 0x446f, 0x1, 0x8, 0xfff7, 0x1, 0x4, 0x3, 0xc, 0xa, 0x9, 0xdda, 0xf], 0x5}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xd}}}, {{@ipv6={@loopback, @mcast2, [0xffffffff, 0x0, 0xff, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xffffff00], 'batadv_slave_1\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x2f, 0xb, 0x0, 0x21}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x9, @ipv4=@multicast2, 0x4e24}}}, {{@ipv6={@remote, @remote, [0xffffff00, 0xffffff00, 0xff, 0xffffffff], [0xffffffff, 0xff, 0xff, 0xffffffff], 'ip6_vti0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x3b, 0x3, 0x3, 0x23}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"effb"}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010102, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x21, 0x3}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d5], 0xcf, 0x5, 0x6}}, @common=@icmp6={{0x28}, {0x3, "0bdd"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x11}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x668) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r14}, &(0x7f0000000840), &(0x7f0000000880)=r15}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) 21.732349778s ago: executing program 4 (id=4548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000540)={'rose0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x10}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb6fb585}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.418961592s ago: executing program 4 (id=4553): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) unshare(0x22020400) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async, rerun: 64) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x1, {0xa, 0x4e20, 0x800, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}}}, 0x3a) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r2) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000084850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r6, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/73, 0x49}], 0x1) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x400c004) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, 0x0, &(0x7f0000000180)) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0xfffffffe, @remote}, 0x1c) (async, rerun: 64) r8 = epoll_create1(0x80000) (rerun: 64) epoll_wait(r8, &(0x7f0000000100)=[{}, {}], 0x2, 0x3) (async, rerun: 64) sendto$inet6(r1, &(0x7f00000001c0)="a6e297", 0x3, 0x840, 0x0, 0x0) (async, rerun: 64) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000005c0)=0x100, 0x4) (async) socket$kcm(0xf, 0x0, 0x2) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) connect$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.129568474s ago: executing program 4 (id=4557): syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000013c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x5, 0x1, 0x3, 0xfd}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0xfffffffd, 0x0, 0x1bb, 0x4}}]}}}]}, 0x94}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0x1, 0xb}, {0x10, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc020}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES16=0xffffffffffffffff], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[@ANYRES32=r6, @ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc040841) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r9, 0x0) write$tun(r9, &(0x7f00000006c0)={@void, @void, @ipv6=@tipc_packet={0x8, 0x6, "0ee333", 0x26c, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x3a, 0x0, 0x9, 0x1, 0x0, 0x9, 0x67}, @hopopts={0x88, 0x1, '\x00', [@pad1, @pad1, @pad1]}, @dstopts={0x2b, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x7ea}, @generic={0x8, 0x46, "197687ad6b727e46f29bf2d1941929ad8043d14ea3d832d028987c82bdc08991f3c3edc79113baf7632d50f00d6674e48a7c13fab0dff2d0651cbf90ddca104b212d89770205"}]}, @hopopts={0x88, 0x23, '\x00', [@generic={0x5, 0xf8, "1389b0e090e363e50751a8650f73283f9d73614afacb66b4858ee719dae290688723d13af99008092f4e8f0591fd582e00057f81cfbe6ce395fd2fe43b96ef1a8d6d776ec1d6a9608f734a76e03425c337a0fd7b19c632f7604a9340f6ab4498044687e158e911f8d2022b2b9504a618d6bd8e67613ff8faeaff30616ec8d0408f1d32efe72f4ec1b25413bf9f8a0fd324e12676a260e78f221f012dca778f2926959752f7c036689cdaefa217a5ce522f248eb6754fe11377be1d8595ab3665c7bb434bc060de0c6c1dd2b2cc84ca43af310dd97846c46a8e7ece12103328e0cc1b984b64d00a8a4aad7385f6bf60df9ce32f0ab43191a5"}, @calipso={0x7, 0x20, {0x0, 0x6, 0xe6, 0xc000, [0x7, 0x5, 0x7]}}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x2, 0x20, 0x0, [@empty]}, @hopopts={0x2b, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, @fragment={0x3b, 0x0, 0x2, 0x0, 0x0, 0x6, 0x67}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x1, 0x0, 0x1, 0x8, 0x8, 0x0, 0x4e22, 0x4e22, 0x1, 0x0, 0x0, 0x0, 0x1}, [{0x9, 0x9, 0x3, 0x8, 0x3, 0x7, 0x7, 0x1}, {0x8, 0x4, 0xb, 0x9, 0x16eb, 0x101, 0xc, 0x9}, {0x6811, 0x3, 0xffff, 0x80000000, 0xc, 0x5, 0x6, 0x6b37}]}}}}, 0x294) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r11, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r10) 19.513717512s ago: executing program 2 (id=4567): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x21f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x400, 0x0, 0x2, 0x0, 0xa0}, {}, {0xad7}}}, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1e, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000200004000000000000009000000850000008b000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="850000f8ac00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 19.415564869s ago: executing program 2 (id=4568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bind(r1, &(0x7f0000000500)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x801, 0x0, r2, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) close(r2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket(0x2000000015, 0x80005, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private2, @in=@broadcast}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, 0x0, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r7, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231e0000400012800e0001006970366772657461700000002c00028014000600fc0000000000000000000000000000001400070020011600000000000000000000000001"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 19.233892258s ago: executing program 2 (id=4570): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfd}, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) getsockopt$sock_buf(r4, 0x1, 0x37, 0x0, &(0x7f0000000200)) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000000380)={'veth0\x00', 0x1, 0xffffffff}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)={0x60, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x480c0) r5 = socket(0x26, 0xa, 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f00000002c0)={0x0, 0x7, 0xefff, 0xfa64}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01030000aa794aa4df2524000000"], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) 19.114114622s ago: executing program 1 (id=4572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_SKBQUEUE={0x6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14004147}, 0x4000084) (fail_nth: 6) 19.096956166s ago: executing program 0 (id=4573): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f0000000140), 0xfffffdef) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x100}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x0, 0xffffffff, 0x7fffffff, 0x7, 0x8, 0xba, 0x401, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4800) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x100, 0x70b929, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4040810) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 18.465209469s ago: executing program 1 (id=4574): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 2', 0x1b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x10001, 0x0}, 0x8) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0xe, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_query, @map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x95}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000440)='syzkaller\x00', 0x2, 0xfb, &(0x7f0000000480)=""/251, 0x41100, 0x17, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0xe, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xa0000000}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xeb, &(0x7f00000001c0)=""/235, 0x41100, 0x49, '\x00', r2, @fallback=0x16, r3, 0x8, &(0x7f0000000300)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xe, 0x8000, 0x7fffffff}, 0x10, r4, r5, 0x5, &(0x7f0000000740)=[0xffffffffffffffff, r6], &(0x7f0000000780)=[{0x0, 0x2, 0x2, 0xd}, {0x1, 0x2, 0x8, 0x8}, {0x4, 0x3, 0x0, 0x5}, {0x5, 0x2, 0x10, 0x7}, {0x2, 0x3, 0xa, 0x8}], 0x10, 0x9}, 0x94) 18.166755074s ago: executing program 1 (id=4575): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r3 = socket$kcm(0xa, 0x5, 0x106) socket$pptp(0x18, 0x1, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240002000000000000000000000000000c0001800806f1d69af79dc8"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffe0}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_ingress={0xc}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x7}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x8af9}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xd}]}}]}, 0x6c}}, 0x4000010) 18.038666802s ago: executing program 0 (id=4576): r0 = socket(0x27, 0x80000, 0x4) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x84, 0xbe, "3e95812f8bae3d124677999240f29554eb4a93e87495f33020535a1be26ec121136556e461c5ea6ec2325819460ad24059c448c4c2f6e06957de3d0fc834552e443563e512f550388d8b565f50089acac7bf4c6df2447bcc967c2820d520d11783a195fc47fe3de3aa2e0b56a97db70fa35461bb425ca757dd5deea468eb81d5"}]}, 0x98}, 0x1, 0x0, 0x0, 0x40891}, 0x400c1) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000200)={{r0}, 0x7fff, 0xb148}) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000003c0)={{0x1000, 0xb6}, 0x100, './file0\x00'}) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0xe) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000580)={0xce2, {0x2, 0x4, 0x7f, 0xcaac, 0x4}}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x29, 0xfa, 0x8, 0xf, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x0, 0x7, 0x4}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x74, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x400}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048000}, 0x40000) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000800), &(0x7f0000000840)=0x8) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000880)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000cc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20050}, 0xc, &(0x7f0000000c80)={&(0x7f0000000900)={0x36c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x83d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x288000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x254}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x98e8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3bd9d5c1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1271}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40f}]}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x452}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x53ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1af}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x78a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6fd1}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffa}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe8c1, @ipv4={'\x00', '\xff\xff', @local}, 0xe6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4000014}, 0x40080) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x60, r6, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9f6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x82c}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20048844) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ec0), r5) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r7, 0x20, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x40000c1) recvmsg$unix(r0, &(0x7f0000002480)={&(0x7f0000000fc0), 0x6e, &(0x7f0000002400)=[{&(0x7f0000001040)=""/52, 0x34}, {&(0x7f0000001080)=""/203, 0xcb}, {&(0x7f0000001180)=""/167, 0xa7}, {&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/236, 0xec}, {&(0x7f0000002380)=""/56, 0x38}, {&(0x7f00000023c0)=""/40, 0x28}], 0x8}, 0x10100) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000024c0)={0x3, 'gre0\x00', {}, 0x9}) clock_gettime(0x0, &(0x7f0000002500)={0x0, 0x0}) setsockopt$sock_timeval(r5, 0x1, 0x86, &(0x7f0000002540)={r8, r9/1000+60000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000025c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x28, r1, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x11}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000026c0)=0x9, 0x4) 18.03798571s ago: executing program 4 (id=4577): socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001300050077371aac858da93be2e77e56", @ANYRES32=0x0, @ANYBLOB="2804070010180000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=0x0, @ANYBLOB="0c002b8008000100", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r6, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 17.917672015s ago: executing program 0 (id=4578): mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9, 0x32, 0xffffffffffffffff, 0x59449000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x240080, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x10, r1, 0x7c7bd000) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000d0601020000000000000000000000050500050000000000050001000000120043006269746d618c3a69702c6d6163000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4010) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="03000000040000000400000009000000001a4092c3d9ce6932bebd321a82bae323f03e096b23448d12b4af4cad303447a89ba05403e7adadd0a02c2187af44b0499db08269db0e62a0759b930687e87233cf16cdcd8b232bf1ff60510819fc1ff129bc7669c4000000000000000000ccda7bd5ff6624000000", @ANYRES32=0x1, @ANYBLOB="8d7d422cdbd3d700c0287d7b34af6e52e36777bfd5130e6c279f60f3d2c9db10b22f9f4bcaae29d79893a404ba84ecd2c919f6f9df20453730aa17e80c5d8889fc73a571cc4681d610a0c8dfa769babd2de256c45c8556728ab2", @ANYRESDEC=r3, @ANYRES32, @ANYRESOCT=r2], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r5, 0x1, 0x52, 0x0, &(0x7f0000000380)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000004000000faffffff9800000010000000", @ANYRES32=0x1, @ANYBLOB="0000000000000067130100000300eadd195aa6135f7c076bd7aea9256f1047d9132d6bb2618e4d54b1a9173e00000072b81405a3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="180000d736acaa52d24bfa000000000000000000000000021a1000007a562f90983e61ff90c2ad4229759c1c", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r7, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r10, &(0x7f0000000040)=ANY=[], 0x6) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x26, r9}) sendmsg$nl_route_sched(r8, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104d076806cceb6e, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x7ffffffe, 0x8, 0x0, 0x0}}, 0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x0) shutdown(r8, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 17.698566102s ago: executing program 4 (id=4579): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="98fad5709c567926", 0x8}], 0x1}}], 0x1, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080002040300ff0106000700459d00dd6a289c6d96d65de1e265dbd93d0065000060679078ac1e0c01ffffffff11f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be4ee0efb45c215a64"], 0x4b) socket$inet6(0xa, 0x2, 0x3a) (async) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="98fad5709c567926", 0x8}], 0x1}}], 0x1, 0x5) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080002040300ff0106000700459d00dd6a289c6d96d65de1e265dbd93d0065000060679078ac1e0c01ffffffff11f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be4ee0efb45c215a64"], 0x4b) (async) 17.655252759s ago: executing program 0 (id=4580): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.43775626s ago: executing program 0 (id=4581): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="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", 0x0, 0x3800, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x7}, 0x24) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r10, 0x0, 0x40, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r13, @ANYBLOB="0100"], 0x3c}}, 0x0) 17.437246007s ago: executing program 4 (id=4582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140a00"/20], 0x14}, 0x1, 0x0, 0x0, 0x14004147}, 0x4000084) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x11) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r1) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "e8"}], 0x18}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042800c00018006000600800a0000140002800d001480080018"], 0x38}, 0x1, 0x0, 0x0, 0x48855}, 0xc000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x810, 0xffffffffffffffff, 0x215ec000) close(0x3) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0xfc, "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"}, &(0x7f0000000440)=0x104) poll(&(0x7f0000002000)=[{r5, 0x93d4}], 0x1, 0x9) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'dummy0\x00', 0x1}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x34, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x28080) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf250700000014000300000000000000000000000000000000010d0002"], 0x3c}}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48841}, 0x0) 17.188332976s ago: executing program 1 (id=4583): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newtaction={0x7c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x68, 0x1, [@m_sample={0x34, 0xc, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "9030"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x30, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x7c}, 0x1, 0x2b1e}, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x3, r2, 0x1, 0x1, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES8=r1], 0xdd12}], 0x1, 0x0, 0x0, 0x4008000}, 0x20040051) sendmmsg$inet(r0, &(0x7f0000003c80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="f7f33c06fb8712cd8dae829bbadbd764eaa2a0d5e9bce07d302d441868549be5c18e7b72c45c59f1aa3d261e2a728b2d534eae1527cc337ba64f04a827fa25b3c305025cb2fe52eecfacd4e8a208c2e751ca3f058573c8b8c096fe759a2bc4691c63e57f9827a795d41cf7d49daf277e6092db977e9a3d963a672198825bfb4593ddf52ec10c9271a6a5ee8fa5a755e0d2e3ddc154d7032572ab37f0c186fdb13eaa1afc1fd557827b72fcf37b0d5d474451175b12e1ff788b6f423870f7227d49346f97194e581ab27e9b7513927721bd3e5c7d4dadc6d461cb8c0d3ca742e043ab396bd416621f623d73430ed7d1330cae60c63bc7a647c1", 0xf9}, {&(0x7f0000000240)="6fc045401e40f59df27f4f28e63d4a171db1c3edfe61357a3760c2f68ce24412910fd95d0aa4142e69217daf40a60e2db184e9b325b24e28e5a6423a0c8b0024e55b0e8d7b3e01edbe0e4d728e512decb4e77531e2e2d7b8d6fd969d0ee80350a9901e9ec76209441cffac4a3a645154ba8172852a3ff5b94c2b021c595e1c166cbb29b907cab4a084d624a3a98a67f703c05cb9f1faf332cafdb557322527b97412f46efa7a4ec64159f5e79e485d4570b4189709042fa89e131f051a8bae538f74591d03", 0xc5}], 0x2, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @remote}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @noop, @timestamp_addr={0x44, 0xc, 0xaa, 0x1, 0x6, [{@broadcast, 0x430}]}, @ssrr={0x89, 0x13, 0xd9, [@multicast2, @rand_addr=0x64010101, @broadcast, @empty]}, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x91}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xe8}}, {{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000540)="458ef92d223b795fdda7cb578dc4deafe7ba1c155b10f3b7e85a59c4a09be179371eab541d75b97d9331169dfe54c4bff31e1c59862897697d163732124210fea21806b08b1014d81929ab69f34ac2eaa6c2a0092c550f80bafcc63df2efed28ea4d82204b1eadb31f2bac40069e20ef9776c670683fe498db844b3f0152852b80649e716382e45d33d6aa2ba4cbd70545002ac09d1769816701cd1cd423ab416bc5eda054fe1c", 0xa7}, {&(0x7f0000000600)="dedca97d7eef4e24a75a8ec3807579a4aca5c718057b7a0107e3a0bd078174e6139090d60ae7eb942ca8761d02932c2c0fe89183d9f417583b90f7cc85ab5facbec6237aec6d48920d05a59fbc0754f89f41cc5a7b20f7d8dd345059c3e35c4f3ae2111991d6a1707cd32018df30e87c7171e698167bfb149b53a1c65fad9e860beeeb9b799df316bc8447d3ea626e40f4cb50a8f25be646c96b22a51383362e5140135b8f8f7b57ed45197f530d3af16c84f446da655f4304ef3541c404fb6dd36e337f01ebbd417feb32839c6f549415bc593a3a57", 0xd6}, {&(0x7f0000000340)="8be8766748d334335ccadd581eeae1e26adac3fe4d0aced9bfe9e565a0e11f8b65dcf80dedaae4d140aac548298a07de8945b2ca2ad2288183ce9025c48b11f9375d9276568996a9e1f854f204c0c6914f956252e277eafda44c", 0x5a}, {&(0x7f00000001c0)="cefbc55d6b595e599c837c8de9d1ebcd2da79163ba5ef3", 0x17}], 0x4, &(0x7f0000003d40)=ANY=[@ANYBLOB="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"], 0x210}}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000000980)="e9775cecf2917af65f4d7ca24371988dc725d62f301ae8bd2a4c5acf69a9b39c674f567dd148c5a7dae544", 0x2b}, {&(0x7f0000000a00)="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", 0xfd}, {&(0x7f0000000b00)="fa64317aa5e998182e", 0x9}, {&(0x7f0000000b40)="d20bc1f3f804821e5755dd54f22ff7c9e3edb56b2b28b65e050a4dfe55383c3a91418b09cac2d0f63e54c6a0725a4778c68cff43486cb0d8ce74d73bd6d1f0", 0x3f}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="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", 0x1000}], 0x7, &(0x7f0000003c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xa4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x48}}], 0x3, 0x884) 17.022955124s ago: executing program 1 (id=4584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_SKBQUEUE={0x6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14004147}, 0x4000084) (fail_nth: 7) 16.957245863s ago: executing program 0 (id=4585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}}}]}]}, 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x4, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xffe, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0x2, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x6, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x9, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x400, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r1, 0x0, 0x0, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r4, 0x104, 0x6, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000440)=0x4, 0x4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r3, 0x325, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x180a4}, 0x4000010) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac070000", @ANYRES16=r3, @ANYBLOB="080027bd7000fbdbdf25130000001800078008000100030000000c00040001000000000000007800018038000400200001000a004e2300137b40ff010000000000000000000000000001070000001400020002004e22e0000002000000000000000004000280380004001400010002004e21ac1414bb0000000000000000200002000a004e2400000000fc010000000000000000000000000000000000000400068004000480"], 0xac}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r8, &(0x7f00000052c0)={&(0x7f0000003fc0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0xe, 0xffffffffffffffff, [{0x2, 0x8, "a09dd6faeba8"}]}]}}}], 0x20}, 0x40) socket$inet6_sctp(0xa, 0x0, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r7, 0x75fb3000) socket(0x15, 0xa, 0x3) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r9, 0x11, 0x1, &(0x7f0000002b40)=0x9, 0x4) 16.644012396s ago: executing program 1 (id=4586): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f0000000140), 0xfffffdef) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x100}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x0, 0xffffffff, 0x7fffffff, 0x7, 0x8, 0xba, 0x401, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4800) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x100, 0x70b929, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4040810) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 16.561540896s ago: executing program 2 (id=4587): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000001c000000000085000000530000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) tee(r0, r1, 0x1ff, 0x2) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @loopback}], 0x3c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.177897827s ago: executing program 2 (id=4588): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r5, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r5, 0x8000, 0x9, [0x7, 0xb, 0xe7, 0xa, 0x3f2, 0x7, 0x2, 0x7, 0x3]}, 0x1a) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) 16.116322609s ago: executing program 3 (id=4589): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000017c0)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf5, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1200000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd9, 0x13a, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x10, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x8dff}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @private=0xa010101}, 0x3f, 0x0, 0x2}}, 0x2e) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee1768814002b000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2531"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 15.278244002s ago: executing program 2 (id=4590): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @enum]}}, 0x0, 0x32}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req={0x1, 0x7fffffff, 0x7, 0x7}, 0x10) recvmmsg$unix(r6, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/207, 0xcf}, {&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000001cc0)=""/197, 0xd3}], 0x3}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001dc0)=""/194, 0xc2}], 0x1, 0x0, 0xfffffffffffffca7}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000b40)=""/57, 0x39}, {&(0x7f0000002000)=""/164, 0xa8}, {&(0x7f0000001f40)=""/133, 0x85}, {&(0x7f0000005940)=""/4083, 0xff3}], 0x4}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000003300)=""/12, 0xc}, {&(0x7f00000001c0)=""/221, 0xdd}, {&(0x7f00000034c0)=""/110, 0x6e}], 0x4}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a80)=""/234, 0xea}, {0x0}], 0x57}}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x1}}], 0x6, 0x400123a0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x54}}, 0x800) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x98, 0x0, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004844}, 0x50) 2.037239795s ago: executing program 32 (id=4582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140a00"/20], 0x14}, 0x1, 0x0, 0x0, 0x14004147}, 0x4000084) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x11) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r1) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "e8"}], 0x18}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042800c00018006000600800a0000140002800d001480080018"], 0x38}, 0x1, 0x0, 0x0, 0x48855}, 0xc000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x810, 0xffffffffffffffff, 0x215ec000) close(0x3) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0xfc, "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"}, &(0x7f0000000440)=0x104) poll(&(0x7f0000002000)=[{r5, 0x93d4}], 0x1, 0x9) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'dummy0\x00', 0x1}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x34, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x28080) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf250700000014000300000000000000000000000000000000010d0002"], 0x3c}}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48841}, 0x0) 1.532208913s ago: executing program 33 (id=4585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}}}]}]}, 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x4, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xffe, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0x2, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x6, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x9, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x400, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r1, 0x0, 0x0, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r4, 0x104, 0x6, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000440)=0x4, 0x4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r3, 0x325, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x180a4}, 0x4000010) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac070000", @ANYRES16=r3, @ANYBLOB="080027bd7000fbdbdf25130000001800078008000100030000000c00040001000000000000007800018038000400200001000a004e2300137b40ff010000000000000000000000000001070000001400020002004e22e0000002000000000000000004000280380004001400010002004e21ac1414bb0000000000000000200002000a004e2400000000fc010000000000000000000000000000000000000400068004000480"], 0xac}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r8, &(0x7f00000052c0)={&(0x7f0000003fc0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0xe, 0xffffffffffffffff, [{0x2, 0x8, "a09dd6faeba8"}]}]}}}], 0x20}, 0x40) socket$inet6_sctp(0xa, 0x0, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r7, 0x75fb3000) socket(0x15, 0xa, 0x3) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r9, 0x11, 0x1, &(0x7f0000002b40)=0x9, 0x4) 1.485713234s ago: executing program 34 (id=4586): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f0000000140), 0xfffffdef) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x100}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x0, 0xffffffff, 0x7fffffff, 0x7, 0x8, 0xba, 0x401, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4800) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x100, 0x70b929, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4040810) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 431.036867ms ago: executing program 35 (id=4589): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000017c0)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf5, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1200000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd9, 0x13a, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x10, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x8dff}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @private=0xa010101}, 0x3f, 0x0, 0x2}}, 0x2e) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee1768814002b000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2531"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 0s ago: executing program 36 (id=4590): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @enum]}}, 0x0, 0x32}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req={0x1, 0x7fffffff, 0x7, 0x7}, 0x10) recvmmsg$unix(r6, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/207, 0xcf}, {&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000001cc0)=""/197, 0xd3}], 0x3}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001dc0)=""/194, 0xc2}], 0x1, 0x0, 0xfffffffffffffca7}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000b40)=""/57, 0x39}, {&(0x7f0000002000)=""/164, 0xa8}, {&(0x7f0000001f40)=""/133, 0x85}, {&(0x7f0000005940)=""/4083, 0xff3}], 0x4}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000003300)=""/12, 0xc}, {&(0x7f00000001c0)=""/221, 0xdd}, {&(0x7f00000034c0)=""/110, 0x6e}], 0x4}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a80)=""/234, 0xea}, {0x0}], 0x57}}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x1}}], 0x6, 0x400123a0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x54}}, 0x800) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x98, 0x0, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004844}, 0x50) kernel console output (not intermixed with test programs): netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 731.012017][T20354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3679'. [ 731.056019][T20354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3679'. [ 731.065521][T20356] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3680'. [ 731.075206][T20356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3680'. [ 731.096270][T20356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3680'. [ 731.105323][T20356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3680'. [ 731.152424][T12069] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 731.165078][T12069] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 731.313743][T20362] FAULT_INJECTION: forcing a failure. [ 731.313743][T20362] name failslab, interval 1, probability 0, space 0, times 0 [ 731.332895][T20362] CPU: 0 UID: 0 PID: 20362 Comm: syz.2.3682 Not tainted syzkaller #0 PREEMPT(full) [ 731.332927][T20362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 731.332941][T20362] Call Trace: [ 731.332950][T20362] [ 731.332959][T20362] dump_stack_lvl+0xe8/0x150 [ 731.332997][T20362] should_fail_ex+0x412/0x560 [ 731.333032][T20362] should_failslab+0xa8/0x100 [ 731.333062][T20362] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 731.333090][T20362] ? kobject_set_name_vargs+0x61/0x110 [ 731.333121][T20362] kstrdup+0x42/0x100 [ 731.333152][T20362] kobject_set_name_vargs+0x61/0x110 [ 731.333180][T20362] dev_set_name+0xe2/0x140 [ 731.333217][T20362] ? __pfx_dev_set_name+0x10/0x10 [ 731.333256][T20362] ? device_initialize+0x24b/0x440 [ 731.333281][T20362] netdev_register_kobject+0xb7/0x310 [ 731.333317][T20362] register_netdevice+0x12c0/0x1cf0 [ 731.333360][T20362] ? __pfx_register_netdevice+0x10/0x10 [ 731.333401][T20362] ip6gre_newlink_common+0x403/0x5b0 [ 731.333436][T20362] ? __pfx_ip6gre_newlink_common+0x10/0x10 [ 731.333467][T20362] ? lockdep_rtnl_is_held+0x26/0x40 [ 731.333489][T20362] ? ip6gre_tunnel_find+0x501/0x5a0 [ 731.333532][T20362] ip6gre_newlink+0x228/0x350 [ 731.333561][T20362] ? __pfx_ip6gre_newlink+0x10/0x10 [ 731.333590][T20362] rtnl_newlink_create+0x329/0xb70 [ 731.333629][T20362] ? __mutex_lock+0x5ac/0x1300 [ 731.333657][T20362] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 731.333694][T20362] ? __pfx___mutex_lock+0x10/0x10 [ 731.333728][T20362] ? ns_capable+0x89/0xe0 [ 731.333761][T20362] rtnl_newlink+0x1666/0x1be0 [ 731.333808][T20362] ? __pfx_rtnl_newlink+0x10/0x10 [ 731.333849][T20362] ? __lock_acquire+0x6b5/0x2cf0 [ 731.333893][T20362] ? __lock_acquire+0x6b5/0x2cf0 [ 731.333925][T20362] ? __lock_acquire+0x6b5/0x2cf0 [ 731.333965][T20362] ? unwind_next_frame+0xa5/0x23c0 [ 731.334023][T20362] ? __lock_acquire+0x6b5/0x2cf0 [ 731.334055][T20362] ? is_bpf_text_address+0x26/0x2b0 [ 731.334082][T20362] ? kernel_text_address+0xa5/0xe0 [ 731.334138][T20362] ? __pfx_rtnl_newlink+0x10/0x10 [ 731.334168][T20362] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 731.334202][T20362] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 731.334231][T20362] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 731.334265][T20362] ? __lock_acquire+0x6b5/0x2cf0 [ 731.334305][T20362] netlink_rcv_skb+0x232/0x4b0 [ 731.334337][T20362] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 731.334369][T20362] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 731.334412][T20362] ? netlink_deliver_tap+0x2e/0x1b0 [ 731.334451][T20362] netlink_unicast+0x80f/0x9b0 [ 731.334488][T20362] ? __pfx_netlink_unicast+0x10/0x10 [ 731.334518][T20362] ? netlink_sendmsg+0x650/0xb40 [ 731.334545][T20362] ? skb_put+0x11b/0x210 [ 731.334582][T20362] netlink_sendmsg+0x813/0xb40 [ 731.334623][T20362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.334664][T20362] ? aa_sock_msg_perm+0xf1/0x1b0 [ 731.334694][T20362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 731.334724][T20362] ____sys_sendmsg+0x972/0x9f0 [ 731.334756][T20362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 731.334790][T20362] ? import_iovec+0x73/0xa0 [ 731.334832][T20362] ___sys_sendmsg+0x2a5/0x360 [ 731.334861][T20362] ? __pfx____sys_sendmsg+0x10/0x10 [ 731.334935][T20362] ? __fget_files+0x2a/0x420 [ 731.334967][T20362] ? __fget_files+0x3a0/0x420 [ 731.335011][T20362] __x64_sys_sendmsg+0x1bd/0x2a0 [ 731.335037][T20362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 731.335071][T20362] ? __pfx_ksys_write+0x10/0x10 [ 731.335109][T20362] do_syscall_64+0x14d/0xf80 [ 731.335129][T20362] ? trace_irq_disable+0x3b/0x150 [ 731.335160][T20362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.335184][T20362] ? clear_bhb_loop+0x40/0x90 [ 731.335210][T20362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.335232][T20362] RIP: 0033:0x7fb4fe59c799 [ 731.335254][T20362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.335273][T20362] RSP: 002b:00007fb4ff378028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.335302][T20362] RAX: ffffffffffffffda RBX: 00007fb4fe815fa0 RCX: 00007fb4fe59c799 [ 731.335318][T20362] RDX: 000000000000c010 RSI: 0000200000000200 RDI: 0000000000000003 [ 731.335338][T20362] RBP: 00007fb4ff378090 R08: 0000000000000000 R09: 0000000000000000 [ 731.335358][T20362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 731.335370][T20362] R13: 00007fb4fe816038 R14: 00007fb4fe815fa0 R15: 00007ffe67b55898 [ 731.335406][T20362] [ 731.842116][T20350] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3678'. [ 731.851395][T20350] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3678'. [ 731.860534][T20350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3678'. [ 731.910805][T20367] geneve3: entered promiscuous mode [ 731.918269][T12069] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.946709][T12069] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.955515][T12069] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.999816][T12069] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.760556][T20414] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 734.783829][T20408] syzkaller0: entered promiscuous mode [ 734.790524][T20408] syzkaller0: entered allmulticast mode [ 735.108372][T20438] tun0: tun_chr_ioctl cmd 1074025677 [ 735.113917][T20438] tun0: linktype set to 778 [ 735.393472][T20463] macvtap0: entered promiscuous mode [ 735.403705][T20463] veth0_macvtap: left promiscuous mode [ 735.519683][T20463] macvtap0 (unregistering): left promiscuous mode [ 735.651773][T20481] netlink: 'syz.1.3717': attribute type 1 has an invalid length. [ 735.768239][T20476] netlink: 'syz.2.3715': attribute type 3 has an invalid length. [ 735.799282][T20477] vcan0: tx drop: invalid da for name 0x00000000000000fe [ 735.813033][T20488] __nla_validate_parse: 6 callbacks suppressed [ 735.813054][T20488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3719'. [ 735.835738][T20490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3719'. [ 736.048620][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ab15000: rx timeout, send abort [ 736.069932][T20502] netlink: 'syz.4.3723': attribute type 9 has an invalid length. [ 736.084797][T20504] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3724'. [ 736.297005][T20512] tc_dump_action: action bad kind [ 736.364327][T20517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3728'. [ 736.375639][T20517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3728'. [ 736.474299][T20524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3730'. [ 736.491153][T20521] bond2: entered promiscuous mode [ 736.512350][T20521] vcan1: entered promiscuous mode [ 736.517829][T20521] vcan1: entered allmulticast mode [ 736.523771][T20521] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 736.535839][T20521] bond2: (slave vcan1): Error -95 calling set_mac_address [ 736.548785][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ab14800: rx timeout, send abort [ 736.557277][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ab15000: abort rx timeout. Force session deactivation [ 737.057154][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ab14800: abort rx timeout. Force session deactivation [ 737.443032][T20553] netlink: 'syz.2.3737': attribute type 1 has an invalid length. [ 737.454250][T20553] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3737'. [ 737.477136][T20553] netlink: 'syz.2.3737': attribute type 1 has an invalid length. [ 737.496059][T20553] netlink: 'syz.2.3737': attribute type 8 has an invalid length. [ 737.526410][T20553] netlink: 582 bytes leftover after parsing attributes in process `syz.2.3737'. [ 737.546266][T20553] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3737'. [ 738.290703][T20574] netlink: 'syz.1.3741': attribute type 1 has an invalid length. [ 738.302274][T20574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3741'. [ 738.481870][T20581] syzkaller1: entered promiscuous mode [ 738.501676][T20581] syzkaller1: entered allmulticast mode [ 738.571008][T20584] xt_TCPMSS: Only works on TCP SYN packets [ 738.821808][T20596] IPVS: Scheduler module ip_vs_sip not found [ 739.094717][T20617] bond2: entered promiscuous mode [ 739.370903][T20633] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 739.475687][T20639] netlink: 'syz.1.3758': attribute type 1 has an invalid length. [ 739.595227][T20646] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 739.607162][T20646] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 739.633674][T20654] netlink: 'syz.2.3760': attribute type 1 has an invalid length. [ 739.657775][T20648] tipc: Started in network mode [ 739.662722][T20648] tipc: Node identity 5e192e44a558, cluster identity 4711 [ 739.670599][T20648] tipc: Enabled bearer , priority 0 [ 739.694992][T20656] netlink: 'syz.0.3764': attribute type 11 has an invalid length. [ 739.717392][T20639] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 739.733421][T20648] syzkaller0: entered promiscuous mode [ 739.740028][T20648] syzkaller0: entered allmulticast mode [ 739.755427][T20653] netlink: 'syz.3.3763': attribute type 4 has an invalid length. [ 739.838209][T20648] tipc: Resetting bearer [ 739.847378][T20662] syzkaller0: entered promiscuous mode [ 739.852995][T20662] syzkaller0: entered allmulticast mode [ 739.921419][T20643] tipc: Resetting bearer [ 739.948900][T20643] tipc: Disabling bearer [ 740.103545][T20639] macvlan2: entered promiscuous mode [ 740.121396][T20639] macvlan2: entered allmulticast mode [ 740.394373][T20687] rdma_rxe: rxe_newlink: failed to add lo [ 740.700453][T20714] validate_nla: 1 callbacks suppressed [ 740.700473][T20714] netlink: 'syz.2.3779': attribute type 10 has an invalid length. [ 740.763714][T20716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.834367][T20716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.834969][T20724] __nla_validate_parse: 9 callbacks suppressed [ 740.835012][T20724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3782'. [ 741.084278][T20728] netlink: 'syz.2.3783': attribute type 16 has an invalid length. [ 741.252418][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3787'. [ 741.576019][T20767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3794'. [ 742.417200][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3805'. [ 743.019928][T20824] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.027520][T20824] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.139180][T20824] caif0: left allmulticast mode [ 743.198233][T20824] veth1: left promiscuous mode [ 743.203095][T20824] veth1: left allmulticast mode [ 743.346330][ T1914] block nbd4: Possible stuck request ffff888026e50000: control (read@0,1024B). Runtime 60 seconds [ 743.357303][ T1914] block nbd4: Possible stuck request ffff888026e50200: control (read@1024,1024B). Runtime 60 seconds [ 743.369070][ T1914] block nbd4: Possible stuck request ffff888026e50400: control (read@2048,1024B). Runtime 60 seconds [ 743.380575][ T1914] block nbd4: Possible stuck request ffff888026e50600: control (read@3072,1024B). Runtime 60 seconds [ 743.539854][T20824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.967963][T20824] bond1: left promiscuous mode [ 743.974054][T20824] vcan1: left promiscuous mode [ 743.996511][T20824] gretap1: left promiscuous mode [ 744.007147][T20824] bridge1: left promiscuous mode [ 744.015101][T20824] bridge1: left allmulticast mode [ 744.032980][T20824] bond2: left promiscuous mode [ 744.110214][T12078] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.126869][T12078] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.166647][T20858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3816'. [ 744.186196][T12078] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.194781][T12078] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.253749][T20860] netlink: 'syz.1.3817': attribute type 12 has an invalid length. [ 744.260406][T12078] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.286843][T20861] netlink: 'syz.1.3817': attribute type 12 has an invalid length. [ 744.308773][T12078] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.340937][T12078] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.349418][T20868] netlink: 'syz.2.3819': attribute type 3 has an invalid length. [ 744.359938][T12078] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.376558][T20866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.389157][T20869] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3820'. [ 744.446387][T20872] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3822'. [ 744.455563][T20872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3822'. [ 744.467177][T20872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3822'. [ 745.596498][ T5193] udevd[5193]: worker [18056] /devices/virtual/block/nbd4 is taking a long time [ 747.189200][ T1300] net_ratelimit: 5 callbacks suppressed [ 747.189223][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.322611][T20872] tipc: Enabling of bearer rejected, failed to enable media [ 747.547391][T20898] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3829'. [ 747.557029][T20886] netlink: 'syz.2.3824': attribute type 13 has an invalid length. [ 747.588784][T20886] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 747.616455][T20894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3824'. [ 747.631209][T20886] pim6reg1: entered promiscuous mode [ 747.646329][T20886] pim6reg1: entered allmulticast mode [ 747.658080][T20903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3829'. [ 747.670168][T20894] bridge0: left allmulticast mode [ 748.200230][T20925] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3838'. [ 748.213707][T20929] wg1 speed is unknown, defaulting to 1000 [ 748.504507][T20946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3843'. [ 748.518873][T20943] netlink: 'syz.1.3844': attribute type 28 has an invalid length. [ 748.555038][T20950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3845'. [ 748.582268][T20950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3845'. [ 748.645699][T20957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3843'. [ 748.811514][T20966] netlink: 'syz.0.3848': attribute type 1 has an invalid length. [ 748.843534][T20966] netlink: 'syz.0.3848': attribute type 2 has an invalid length. [ 748.877578][T20929] ip6_vti0 speed is unknown, defaulting to 1000 [ 749.061915][T20974] netlink: 'syz.0.3850': attribute type 11 has an invalid length. [ 749.095526][T20976] batman_adv: batadv0: Adding interface: gretap1 [ 749.110816][T20976] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.153975][T20976] batman_adv: batadv0: Interface activated: gretap1 [ 749.192430][T20978] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3852'. [ 749.203188][T20978] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3852'. [ 749.903001][T21006] vlan0: entered allmulticast mode [ 749.913961][T21009] netlink: 'syz.1.3862': attribute type 1 has an invalid length. [ 749.933171][T21009] netlink: 'syz.1.3862': attribute type 22 has an invalid length. [ 749.935699][T21006] veth0_to_bond: entered allmulticast mode [ 750.009422][T21015] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 750.302547][T21017] wg1 speed is unknown, defaulting to 1000 [ 750.443480][T21033] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 750.657638][T21042] sctp: [Deprecated]: syz.3.3870 (pid 21042) Use of int in maxseg socket option. [ 750.657638][T21042] Use struct sctp_assoc_value instead [ 750.760626][T21017] ip6_vti0 speed is unknown, defaulting to 1000 [ 750.771143][T21048] netlink: 'syz.2.3875': attribute type 1 has an invalid length. [ 750.779599][T21048] netlink: 'syz.2.3875': attribute type 2 has an invalid length. [ 750.790726][T21048] netlink: 'syz.2.3875': attribute type 1 has an invalid length. [ 751.464260][T21075] ip6tnl1: entered allmulticast mode [ 751.603953][T21084] lo: Caught tx_queue_len zero misconfig [ 751.679068][T21064] wg1 speed is unknown, defaulting to 1000 [ 751.911731][T21095] netlink: 'syz.4.3889': attribute type 8 has an invalid length. [ 751.967856][T21088] wg1 speed is unknown, defaulting to 1000 [ 751.976476][T21064] ip6_vti0 speed is unknown, defaulting to 1000 [ 752.200460][T21097] geneve2: entered promiscuous mode [ 752.227469][T21097] geneve2: entered allmulticast mode [ 752.739550][T21088] ip6_vti0 speed is unknown, defaulting to 1000 [ 752.861737][T21122] __nla_validate_parse: 8 callbacks suppressed [ 752.861758][T21122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3897'. [ 752.896489][T21122] openvswitch: netlink: Missing key (keys=40, expected=80) [ 753.091554][T21126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3899'. [ 753.301586][T21132] netlink: 'syz.3.3901': attribute type 10 has an invalid length. [ 753.309698][T21132] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3901'. [ 753.406762][T21134] netlink: 'syz.4.3900': attribute type 1 has an invalid length. [ 753.448627][T21131] wg1 speed is unknown, defaulting to 1000 [ 753.961077][T21160] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3907'. [ 754.057105][T21131] ip6_vti0 speed is unknown, defaulting to 1000 [ 754.775246][T21193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3915'. [ 755.064827][T21189] sch_tbf: burst 2 is lower than device tunl0 mtu (1480) ! [ 755.604638][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3919'. [ 755.777298][T21218] sctp: [Deprecated]: syz.1.3920 (pid 21218) Use of int in max_burst socket option. [ 755.777298][T21218] Use struct sctp_assoc_value instead [ 756.117781][T21236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3924'. [ 756.761457][T21261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3932'. [ 756.801558][T21259] dvmrp1: entered allmulticast mode [ 756.818379][T21259] dvmrp1: left allmulticast mode [ 756.880270][T21259] x_tables: duplicate underflow at hook 2 [ 756.902215][T21263] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 756.914202][T21263] bond3 (unregistering): Released all slaves [ 756.950185][T21269] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 757.555738][T21296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.612548][T21296] netlink: 'syz.3.3941': attribute type 6 has an invalid length. [ 757.729423][T21300] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 758.340209][T21324] netlink: 'syz.0.3949': attribute type 8 has an invalid length. [ 758.391488][T21328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3950'. [ 758.421392][T21328] vti0: entered promiscuous mode [ 758.428023][T21328] vti0: entered allmulticast mode [ 758.433974][T21325] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3949'. [ 758.456162][T21324] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3949'. [ 758.456294][T21325] 0ªî{X¹¦: renamed from gretap0 [ 758.479926][T21325] 0ªî{X¹¦: entered allmulticast mode [ 758.517624][T21325] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 758.551945][T21332] netlink: 'syz.2.3952': attribute type 10 has an invalid length. [ 758.560602][T21332] netlink: 'syz.2.3952': attribute type 10 has an invalid length. [ 758.590266][T21324] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 758.613557][T21324] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 758.960714][T21351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3956'. [ 758.976755][T21351] hsr0: entered promiscuous mode [ 758.982491][T21351] macvlan2: entered allmulticast mode [ 758.988919][T21351] hsr0: entered allmulticast mode [ 758.994010][T21351] hsr_slave_0: entered allmulticast mode [ 759.016020][T21351] hsr_slave_1: entered allmulticast mode [ 759.060453][T21353] bridge_slave_0: left allmulticast mode [ 759.081134][T21353] bridge_slave_0: left promiscuous mode [ 759.098400][T21353] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.146670][T21353] bridge_slave_1: left allmulticast mode [ 759.172613][T21353] bridge_slave_1: left promiscuous mode [ 759.206824][T21353] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.253987][T21353] bond0: (slave bond_slave_0): Releasing backup interface [ 759.267195][T21353] bond0: (slave bond_slave_1): Releasing backup interface [ 759.284505][T21353] team0: Port device team_slave_0 removed [ 759.297937][T21353] team0: Port device team_slave_1 removed [ 759.306999][T21353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.315109][T21353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.325549][T21353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.334907][T21353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.344597][T21353] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 759.362857][T10657] wg1 speed is unknown, defaulting to 1000 [ 759.369059][T21351] team0: Mode changed to "roundrobin" [ 759.551363][T21370] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3960'. [ 759.699821][T21372] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 759.721158][T21372] bond2: (slave lo): Enslaving as an active interface with an up link [ 759.730912][T21372] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 759.792769][T21382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3964'. [ 759.803048][T21382] netlink: 'syz.3.3964': attribute type 2 has an invalid length. [ 759.812471][T21382] syzkaller0: entered promiscuous mode [ 759.818811][T21382] syzkaller0: entered allmulticast mode [ 760.028555][T21399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 760.471985][T21424] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3975'. [ 760.505638][T15516] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.522900][T15516] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.544224][T15516] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.564195][T15516] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.701613][T21439] netlink: 'syz.4.3982': attribute type 11 has an invalid length. [ 760.712441][T21442] bridge0: entered allmulticast mode [ 760.718825][T21442] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 760.888428][T21446] syzkaller0: entered promiscuous mode [ 760.894085][T21446] syzkaller0: entered allmulticast mode [ 760.997176][T21452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3985'. [ 761.031357][T21456] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3989'. [ 761.042580][T21456] netlink: 'syz.2.3989': attribute type 1 has an invalid length. [ 761.081988][T21459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3990'. [ 761.290720][T21466] syzkaller1: entered promiscuous mode [ 761.296841][T21466] syzkaller1: entered allmulticast mode [ 761.563123][T21470] wg1 speed is unknown, defaulting to 1000 [ 761.925213][T21468] wg1 speed is unknown, defaulting to 1000 [ 761.940792][T21470] ip6_vti0 speed is unknown, defaulting to 1000 [ 761.976457][T21480] netlink: 'syz.3.3997': attribute type 1 has an invalid length. [ 762.071903][T21480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 762.140209][T21480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 762.192519][T21480] bond3: (slave geneve4): making interface the new active one [ 762.211851][T21480] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 762.267290][T21492] tipc: Started in network mode [ 762.272463][T21492] tipc: Node identity 5a0ba89ca853, cluster identity 4711 [ 762.282722][T21492] tipc: Enabled bearer , priority 0 [ 762.302898][T12069] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 762.314035][T12069] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 762.417977][T12069] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 762.436562][T12069] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 762.447673][T21492] tipc: Disabling bearer [ 762.485051][T21497] wg1 speed is unknown, defaulting to 1000 [ 762.645381][T21468] ip6_vti0 speed is unknown, defaulting to 1000 [ 762.921462][T21505] wg1 speed is unknown, defaulting to 1000 [ 763.440064][T21529] __nla_validate_parse: 4 callbacks suppressed [ 763.440085][T21529] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4005'. [ 763.475339][T21497] ip6_vti0 speed is unknown, defaulting to 1000 [ 763.880187][T21505] ip6_vti0 speed is unknown, defaulting to 1000 [ 764.035668][T21550] xt_bpf: check failed: parse error [ 764.359437][T21550] siw: device registration error -23 [ 765.366119][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4018'. [ 765.606398][T21581] syzkaller1: entered promiscuous mode [ 765.624598][T21595] syz.1.4020 uses old SIOCAX25GETINFO [ 765.630686][T21581] syzkaller1: entered allmulticast mode [ 765.831401][T21600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4021'. [ 766.043162][T21600] 8021q: adding VLAN 0 to HW filter on device bond3 [ 766.063883][T21612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4024'. [ 766.140327][T21600] netlink: 776 bytes leftover after parsing attributes in process `syz.1.4021'. [ 766.156308][T21600] unsupported nla_type 12320 [ 766.424771][T21620] wg1 speed is unknown, defaulting to 1000 [ 766.689659][T21640] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4032'. [ 766.700280][T21638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4031'. [ 766.726147][T21638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4031'. [ 766.781448][T21640] syzkaller0: entered promiscuous mode [ 766.796609][T21640] syzkaller0: entered allmulticast mode [ 766.860708][T21620] ip6_vti0 speed is unknown, defaulting to 1000 [ 768.715005][T21656] tipc: Enabling of bearer rejected, failed to enable media [ 768.902455][T21677] netlink: 'syz.1.4041': attribute type 1 has an invalid length. [ 768.971688][T21677] 8021q: adding VLAN 0 to HW filter on device bond4 [ 768.982242][T21674] netlink: 'syz.0.4040': attribute type 1 has an invalid length. [ 769.125589][T21681] bond4: (slave veth3): Enslaving as an active interface with a down link [ 769.150148][T21677] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 769.166446][T21677] bond4: (slave batadv1): making interface the new active one [ 769.176654][T21677] batadv1: entered promiscuous mode [ 769.182566][T21677] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 769.192701][T21679] wg1 speed is unknown, defaulting to 1000 [ 769.419450][T21696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4045'. [ 769.449207][T21679] ip6_vti0 speed is unknown, defaulting to 1000 [ 769.662093][T21709] ipt_ECN: cannot use operation on non-tcp rule [ 769.882673][T21713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4049'. [ 770.137266][T21713] pim6reg: entered allmulticast mode [ 770.178909][T21712] pim6reg: left allmulticast mode [ 770.880747][T21735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4057'. [ 770.959552][T21740] netlink: 'syz.1.4058': attribute type 8 has an invalid length. [ 770.993275][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4058'. [ 771.039501][T21742] netlink: 'syz.1.4058': attribute type 30 has an invalid length. [ 771.054360][T21748] netlink: 'syz.4.4059': attribute type 10 has an invalid length. [ 771.087687][T21748] bond0: (slave dummy0): Releasing backup interface [ 771.094885][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4058'. [ 771.106236][T21749] netlink: 'syz.4.4059': attribute type 10 has an invalid length. [ 771.125309][ T49] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.134352][T21742] netlink: 'syz.1.4058': attribute type 30 has an invalid length. [ 771.159879][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.182635][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.298390][T21749] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 771.436154][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.528796][T10663] IPVS: starting estimator thread 0... [ 771.636232][T21766] IPVS: using max 29 ests per chain, 69600 per kthread [ 772.183771][T21793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 772.227590][T21800] netlink: 'syz.3.4070': attribute type 4 has an invalid length. [ 772.235393][T21800] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4070'. [ 772.250095][T21793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 772.254222][T21803] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4071'. [ 772.274907][T21794] netlink: 'syz.3.4070': attribute type 4 has an invalid length. [ 772.291233][T21794] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4070'. [ 772.301001][T21803] netlink: 'syz.2.4071': attribute type 1 has an invalid length. [ 772.507071][T21804] bond5: (slave bond_slave_1): Device is not bonding slave [ 772.514519][T21804] bond5: option active_slave: invalid value (bond_slave_1) [ 772.527262][T21804] bond5 (unregistering): Released all slaves [ 773.078033][T21824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.121450][T21824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 773.431061][ T1914] block nbd4: Possible stuck request ffff888026e50000: control (read@0,1024B). Runtime 90 seconds [ 773.442409][ T1914] block nbd4: Possible stuck request ffff888026e50200: control (read@1024,1024B). Runtime 90 seconds [ 773.453467][ T1914] block nbd4: Possible stuck request ffff888026e50400: control (read@2048,1024B). Runtime 90 seconds [ 773.464761][ T1914] block nbd4: Possible stuck request ffff888026e50600: control (read@3072,1024B). Runtime 90 seconds [ 773.548690][T21838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4082'. [ 773.608342][T21842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4082'. [ 773.702307][T21842] 8021q: adding VLAN 0 to HW filter on device bond6 [ 773.778971][T21838] vlan3: entered promiscuous mode [ 773.784084][T21838] bond6: entered promiscuous mode [ 773.962841][T21855] sock: sock_timestamping_bind_phc: sock not bind to device [ 774.399587][T21851] validate_nla: 1 callbacks suppressed [ 774.399609][T21851] netlink: 'syz.3.4084': attribute type 13 has an invalid length. [ 774.414408][T21851] netlink: 'syz.3.4084': attribute type 17 has an invalid length. [ 774.511328][T21851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.520940][T21851] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.538468][T21851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 774.582333][T21891] syzkaller0: entered promiscuous mode [ 774.606191][T21891] syzkaller0: entered allmulticast mode [ 774.874809][T21906] team0: Device gtp0 is of different type [ 774.924401][T21907] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 775.239904][T21925] wg1 speed is unknown, defaulting to 1000 [ 775.604404][T21925] ip6_vti0 speed is unknown, defaulting to 1000 [ 775.863169][T21946] __nla_validate_parse: 1 callbacks suppressed [ 775.863192][T21946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4116'. [ 775.894915][ T29] audit: type=1800 audit(1773093625.311:7): pid=21949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4116" name="memory.events" dev="tmpfs" ino=1103 res=0 errno=0 [ 775.916352][T21946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4116'. [ 775.926048][T21946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4116'. [ 775.945739][T21946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4116'. [ 776.140414][T21969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4119'. [ 776.267178][T21977] batadv_slave_1: entered promiscuous mode [ 776.463928][T21983] siw: device registration error -23 [ 776.483162][T21977] batadv_slave_1: left promiscuous mode [ 776.653106][T21994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4129'. [ 776.903363][T22002] syzkaller0: entered promiscuous mode [ 776.919270][T22002] syzkaller0: entered allmulticast mode [ 777.066480][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4135'. [ 777.076748][T22012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4135'. [ 777.085756][T22012] netlink: 'syz.3.4135': attribute type 14 has an invalid length. [ 777.094289][T22012] netlink: 'syz.3.4135': attribute type 12 has an invalid length. [ 777.421945][T22032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4143'. [ 777.441796][T22032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4143'. [ 777.488780][T22032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 777.496116][T22032] IPv6: NLM_F_CREATE should be set when creating new route [ 777.505604][T22032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 777.512950][T22032] IPv6: NLM_F_CREATE should be set when creating new route [ 777.675983][ T29] audit: type=1107 audit(1773093627.091:8): pid=22042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='+#X_¨…°Î&èœAçÑ‹ œë/ÛñRŸÿ/ŠALâQ/[Ï“„G$r,$T즈­+ƒ.ú+zûa‹ÿµ1™Tö[* yM3<«h§—Üõm~Ùˆ [ 777.675983][ T29] -Z`˜jwô$ ~“Ìùª[à?‚ Q¡où®Ý EQ}x7ÆÑþj“›Œ!¸J2Ô9UF|nálwܱõI5L~/‘¨Ò®ãé%C«|V@Øû|àwº²ŠJ§›â­\({öûÇÛ÷¿u¾è)óD„l@ íTå5£’eRFâ£ç`ló>ø¼ªùLgÊ–' [ 777.859179][T22050] netlink: 'syz.0.4149': attribute type 5 has an invalid length. [ 777.878070][T22050] smc: net device wlan0 erased user defined pnetid SYZ0 [ 778.171291][T22064] netlink: 'syz.0.4155': attribute type 13 has an invalid length. [ 778.191500][T22073] netlink: 'syz.4.4156': attribute type 32 has an invalid length. [ 778.236897][T22064] 1ªî{X¹¦: left allmulticast mode [ 778.263275][T22077] netlink: 'syz.3.4158': attribute type 11 has an invalid length. [ 778.288133][T22064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 778.342106][T22073] bond7: Setting coupled_control to off (0) [ 778.391644][T22082] sctp: [Deprecated]: syz.2.4160 (pid 22082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 778.391644][T22082] Use struct sctp_sack_info instead [ 778.411095][T22083] sctp: [Deprecated]: syz.2.4160 (pid 22083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 778.411095][T22083] Use struct sctp_sack_info instead [ 778.435390][T22082] netlink: 'syz.2.4160': attribute type 153 has an invalid length. [ 778.716479][T22097] nbd3: detected capacity change from 0 to 63 [ 778.728242][T22105] nbd: must specify at least one socket [ 778.752134][T16751] block nbd3: Receive control failed (result -104) [ 779.325559][T22135] batadv_slave_1: entered promiscuous mode [ 779.429732][T22134] batadv_slave_1: left promiscuous mode [ 779.548886][T22142] netlink: 'syz.2.4178': attribute type 1 has an invalid length. [ 779.568561][T22142] xfrm0: Caught tx_queue_len zero misconfig [ 779.671467][T22150] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 779.843153][T22158] openvswitch: netlink: Flow key attr not present in new flow. [ 779.991717][T22165] tipc: Enabled bearer , priority 0 [ 780.007571][T22165] syzkaller0: entered promiscuous mode [ 780.013632][T22165] syzkaller0: entered allmulticast mode [ 780.054567][T22165] tipc: Resetting bearer [ 780.063201][T22165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 780.070543][T22165] IPv6: NLM_F_CREATE should be set when creating new route [ 780.077886][T22165] IPv6: NLM_F_CREATE should be set when creating new route [ 780.091384][T22164] tipc: Resetting bearer [ 780.097167][T22172] x_tables: duplicate underflow at hook 3 [ 780.135580][T22164] tipc: Disabling bearer [ 780.455803][ T139] batadv1: left promiscuous mode [ 781.164436][T22202] netlink: 'syz.1.4194': attribute type 21 has an invalid length. [ 781.194564][T22202] IPv6: NLM_F_CREATE should be specified when creating new route [ 781.236297][T22202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 781.243637][T22202] IPv6: NLM_F_CREATE should be set when creating new route [ 781.250971][T22202] IPv6: NLM_F_CREATE should be set when creating new route [ 781.258238][T22202] IPv6: NLM_F_CREATE should be set when creating new route [ 781.546194][T22217] __nla_validate_parse: 11 callbacks suppressed [ 781.546214][T22217] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4197'. [ 781.612664][T22219] netlink: 'syz.1.4197': attribute type 11 has an invalid length. [ 781.620755][T22219] netlink: 'syz.1.4197': attribute type 23 has an invalid length. [ 781.635652][T22219] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4197'. [ 781.694690][T22223] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 781.721455][T22223] netlink: 'syz.2.4198': attribute type 10 has an invalid length. [ 781.726522][T22219] tipc: Started in network mode [ 781.735216][T22219] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 781.754672][T22219] tipc: Enabling of bearer rejected, failed to enable media [ 781.774939][T22227] tipc: Started in network mode [ 781.775555][T22228] netlink: 'syz.2.4198': attribute type 10 has an invalid length. [ 781.780285][T22227] tipc: Node identity 2ad5f9f62618, cluster identity 4711 [ 781.816133][T22227] tipc: Enabled bearer , priority 0 [ 781.859740][T22222] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4199'. [ 782.024756][T22204] tipc: Disabling bearer [ 782.227356][T22254] netlink: 'syz.0.4207': attribute type 27 has an invalid length. [ 782.313425][T22260] netlink: 428 bytes leftover after parsing attributes in process `syz.4.4208'. [ 782.461021][T22254] hsr0: left allmulticast mode [ 782.467931][T22254] hsr_slave_0: left allmulticast mode [ 782.473352][T22254] hsr_slave_1: left allmulticast mode [ 782.479788][T22254] macvlan2: left allmulticast mode [ 782.499816][T22260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4208'. [ 782.510753][T20855] wg1 speed is unknown, defaulting to 1000 [ 782.516737][T20855] syz0: Port: 1 Link DOWN [ 782.521822][T20855] wg1 speed is unknown, defaulting to 1000 [ 782.527937][ T139] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.540780][ T139] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.556753][ T139] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.581527][ T139] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.662146][T22264] wg1 speed is unknown, defaulting to 1000 [ 783.534241][T22304] bond8: Unable to set down delay as MII monitoring is disabled [ 783.547427][T22304] bond8 (unregistering): Released all slaves [ 783.578324][T22285] wg1 speed is unknown, defaulting to 1000 [ 783.578346][T22264] ip6_vti0 speed is unknown, defaulting to 1000 [ 783.838398][T22318] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4226'. [ 784.021329][T22324] wg1 speed is unknown, defaulting to 1000 [ 784.135859][T22285] ip6_vti0 speed is unknown, defaulting to 1000 [ 784.189820][T22332] sctp: [Deprecated]: syz.0.4229 (pid 22332) Use of int in max_burst socket option. [ 784.189820][T22332] Use struct sctp_assoc_value instead [ 784.257469][T22332] netlink: 'syz.0.4229': attribute type 7 has an invalid length. [ 784.286115][T22332] netlink: 'syz.0.4229': attribute type 8 has an invalid length. [ 784.316232][T22332] netlink: 'syz.0.4229': attribute type 8 has an invalid length. [ 784.347319][T22332] netlink: 'syz.0.4229': attribute type 4 has an invalid length. [ 784.363020][T22332] netlink: 207236 bytes leftover after parsing attributes in process `syz.0.4229'. [ 784.555374][T22324] ip6_vti0 speed is unknown, defaulting to 1000 [ 784.628611][T22336] syzkaller0: entered promiscuous mode [ 784.634145][T22336] syzkaller0: entered allmulticast mode [ 784.857006][T22343] siw: device registration error -23 [ 785.821238][T22364] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 785.889831][T10653] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 786.093785][T22372] vlan0: entered promiscuous mode [ 786.326195][T10653] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 786.471766][T22387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4242'. [ 786.656284][ T3576] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 787.091842][T22405] wg1 speed is unknown, defaulting to 1000 [ 787.101611][T22416] IPVS: set_ctl: invalid protocol: 7 9.0.32.0:2 [ 787.117124][T22416] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 787.158712][T22426] validate_nla: 1 callbacks suppressed [ 787.158731][T22426] netlink: 'syz.1.4249': attribute type 13 has an invalid length. [ 787.229480][T22426] netlink: 'syz.1.4249': attribute type 17 has an invalid length. [ 787.294072][T22431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4249'. [ 787.416325][T22426] sit0: left promiscuous mode [ 787.473733][T22426] bridge0: left allmulticast mode [ 787.513905][T22426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.525702][T22445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.552844][T22426] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.568216][T22426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 787.592444][T10655] ip6_vti0 speed is unknown, defaulting to 1000 [ 787.615130][T10655] syz2: Port: 1 Link ACTIVE [ 787.650932][T10655] ip6_vti0 speed is unknown, defaulting to 1000 [ 787.667337][T12071] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 787.675773][T12071] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 787.783626][T22405] ip6_vti0 speed is unknown, defaulting to 1000 [ 788.064374][T22461] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002 [ 788.169855][T22463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4265'. [ 788.193357][T22466] lo: Caught tx_queue_len zero misconfig [ 788.204439][T22463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4265'. [ 788.277202][T10655] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 788.318839][T22463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4265'. [ 788.897332][T22495] netlink: 'syz.1.4274': attribute type 30 has an invalid length. [ 788.926438][T22495] netlink: 'syz.1.4274': attribute type 1 has an invalid length. [ 788.959151][T22511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4276'. [ 788.980052][T22495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4274'. [ 789.033300][T22511] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4276'. [ 789.050207][T22511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4276'. [ 789.097128][T22516] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 789.154068][T22490] bond4: option all_slaves_active: invalid value (13) [ 789.163743][T22490] bond4 (unregistering): Released all slaves [ 789.376832][T22532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4280'. [ 789.483904][T22533] bond8: option lacp_rate: invalid value (128) [ 789.501768][T22533] bond8 (unregistering): Released all slaves [ 789.902751][T22550] netlink: 65173 bytes leftover after parsing attributes in process `syz.4.4284'. [ 789.980131][T22550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 790.260609][T22575] pim6reg: entered allmulticast mode [ 790.295437][T22575] pim6reg: left allmulticast mode [ 790.337986][T22577] bond3 (unregistering): Released all slaves [ 790.401356][T22581] nftables ruleset with unbound chain [ 790.414000][T22581] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 790.484019][T22583] team0: Device gtp0 failed to enter team mode [ 790.491052][T22583] team0: Device gtp0 failed to enter team mode [ 791.039869][T22602] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 791.470497][T22617] netlink: 'syz.1.4307': attribute type 3 has an invalid length. [ 791.655294][T22627] netlink: 'syz.4.4310': attribute type 4 has an invalid length. [ 791.680702][T22627] .`: renamed from bond0 [ 791.922565][T22646] netlink: 'syz.3.4312': attribute type 10 has an invalid length. [ 791.961994][T22646] veth1_macvtap: left promiscuous mode [ 791.969263][T22646] team0: Device veth1_macvtap failed to register rx_handler [ 792.146127][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 792.231915][T22659] bond0: option arp_validate: invalid value (55553) [ 792.371106][T22663] wg1 speed is unknown, defaulting to 1000 [ 792.575416][T22676] macvlan2: entered allmulticast mode [ 792.581262][T22676] .`: entered allmulticast mode [ 792.588740][T22676] bond_slave_0: entered allmulticast mode [ 792.594847][T22676] bond_slave_1: entered allmulticast mode [ 792.607047][T22676] dummy0: entered allmulticast mode [ 792.614755][T22676] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 792.623599][T22676] .`: left allmulticast mode [ 792.630262][T22676] bond_slave_0: left allmulticast mode [ 792.647760][T22676] bond_slave_1: left allmulticast mode [ 792.653503][T22676] dummy0: left allmulticast mode [ 792.868866][T22672] wg1 speed is unknown, defaulting to 1000 [ 792.877289][T22663] ip6_vti0 speed is unknown, defaulting to 1000 [ 792.970572][T22688] netlink: 'syz.1.4330': attribute type 4 has an invalid length. [ 793.098298][T22694] __nla_validate_parse: 114 callbacks suppressed [ 793.098321][T22694] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4332'. [ 793.364323][T22694] PKCS7: Unknown OID: [4] (bad) [ 793.370406][T22694] PKCS7: Only support pkcs7_signedData type [ 793.497842][T22701] wg1 speed is unknown, defaulting to 1000 [ 793.699898][T22672] ip6_vti0 speed is unknown, defaulting to 1000 [ 793.863797][T22713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.059968][T22718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4337'. [ 794.272369][T22730] netlink: 'syz.2.4340': attribute type 4 has an invalid length. [ 794.281082][T22729] netlink: 'syz.2.4340': attribute type 4 has an invalid length. [ 794.309745][T22701] ip6_vti0 speed is unknown, defaulting to 1000 [ 794.359055][T22734] netlink: 'syz.3.4342': attribute type 10 has an invalid length. [ 794.386274][T22734] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4342'. [ 794.439538][T22736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4342'. [ 794.568711][T22742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4344'. [ 794.623301][T22736] bond4: option broadcast_neighbor: invalid value (30) [ 794.657319][T22736] bond4 (unregistering): Released all slaves [ 794.723971][T22745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.745282][T22744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4344'. [ 795.202985][T22755] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4349'. [ 795.218145][T22755] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4349'. [ 795.377078][T22760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4351'. [ 795.542428][T22772] netlink: 'syz.1.4350': attribute type 11 has an invalid length. [ 795.734638][T22785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4355'. [ 795.973073][T22771] wg1 speed is unknown, defaulting to 1000 [ 796.558249][T22760] wg1 speed is unknown, defaulting to 1000 [ 797.050942][T22814] wg1 speed is unknown, defaulting to 1000 [ 797.060031][T22760] ip6_vti0 speed is unknown, defaulting to 1000 [ 797.259955][T22844] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.267274][T22844] IPv6: NLM_F_CREATE should be set when creating new route [ 797.285784][T22846] 8021q: VLANs not supported on sit0 [ 797.377225][T22850] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.384538][T22850] IPv6: NLM_F_CREATE should be set when creating new route [ 797.505008][T22853] xt_limit: Overflow, try lower: 31324/2147483648 [ 797.562740][T22824] netlink: 'syz.0.4361': attribute type 1 has an invalid length. [ 797.940933][T22858] pimreg: entered allmulticast mode [ 798.148546][T22771] ip6_vti0 speed is unknown, defaulting to 1000 [ 798.194924][T22865] __nla_validate_parse: 6 callbacks suppressed [ 798.194945][T22865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4375'. [ 798.684847][T22814] ip6_vti0 speed is unknown, defaulting to 1000 [ 798.929695][T22874] bridge4: entered promiscuous mode [ 798.947317][T22874] bridge4: entered allmulticast mode [ 798.979321][T22874] team0: Port device bridge4 added [ 799.011460][T22880] syzkaller0: entered promiscuous mode [ 799.018926][T22880] syzkaller0: entered allmulticast mode [ 799.129679][T22880] bond5 (unregistering): Released all slaves [ 799.270974][T22889] syzkaller1: entered promiscuous mode [ 799.276707][T22889] syzkaller1: entered allmulticast mode [ 800.001304][T22902] vlan3: entered promiscuous mode [ 800.006503][T22902] bridge0: entered promiscuous mode [ 800.305247][T22913] netlink: 'syz.3.4391': attribute type 2 has an invalid length. [ 800.335612][T22914] netlink: 'syz.3.4391': attribute type 2 has an invalid length. [ 800.423934][T22913] !: entered promiscuous mode [ 800.832546][T22930] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4396'. [ 800.946099][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 801.252934][T22939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4399'. [ 801.562008][T22952] netlink: 'syz.1.4402': attribute type 2 has an invalid length. [ 801.577190][T22952] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4402'. [ 801.732768][T22957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4404'. [ 801.899595][T22965] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4407'. [ 801.959964][T22965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4407'. [ 802.053170][T22975] netlink: 'syz.1.4409': attribute type 1 has an invalid length. [ 802.066556][T22975] netlink: 'syz.1.4409': attribute type 2 has an invalid length. [ 802.085922][T22975] netlink: 'syz.1.4409': attribute type 1 has an invalid length. [ 802.093819][T22975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4409'. [ 802.231084][T22977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4411'. [ 802.282859][T22985] netlink: zone id is out of range [ 802.288493][T22985] netlink: zone id is out of range [ 802.296072][T22985] netlink: zone id is out of range [ 802.311793][T22985] netlink: zone id is out of range [ 802.322894][T22985] netlink: zone id is out of range [ 802.336444][T22985] netlink: zone id is out of range [ 802.347514][T22985] netlink: zone id is out of range [ 802.385127][T22985] netlink: zone id is out of range [ 802.412657][T22985] netlink: zone id is out of range [ 802.418152][T22985] netlink: zone id is out of range [ 802.479147][T22992] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4414'. [ 802.818384][T23005] netlink: 'syz.1.4418': attribute type 5 has an invalid length. [ 803.506425][ T1914] block nbd4: Possible stuck request ffff888026e50000: control (read@0,1024B). Runtime 120 seconds [ 803.517366][ T1914] block nbd4: Possible stuck request ffff888026e50200: control (read@1024,1024B). Runtime 120 seconds [ 803.530491][ T1914] block nbd4: Possible stuck request ffff888026e50400: control (read@2048,1024B). Runtime 120 seconds [ 803.542662][ T1914] block nbd4: Possible stuck request ffff888026e50600: control (read@3072,1024B). Runtime 120 seconds [ 803.556263][T23051] __nla_validate_parse: 2 callbacks suppressed [ 803.556283][T23051] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4431'. [ 803.685154][T23053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4432'. [ 803.694412][T23053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4432'. [ 803.709467][T23053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4432'. [ 803.719499][T23053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4432'. [ 803.896455][T23057] sit1: entered promiscuous mode [ 803.920098][T23057] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4434'. [ 803.967076][T23067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4436'. [ 804.006297][T23068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4436'. [ 804.035280][T23068] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 804.093674][T23080] netlink: 'syz.0.4440': attribute type 58 has an invalid length. [ 804.176090][T23082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4439'. [ 804.223681][T23085] syzkaller0: entered promiscuous mode [ 804.230342][T23085] syzkaller0: entered allmulticast mode [ 804.344391][T23101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 804.351723][T23101] IPv6: NLM_F_CREATE should be set when creating new route [ 804.359024][T23101] IPv6: NLM_F_CREATE should be set when creating new route [ 804.366298][T23101] IPv6: NLM_F_CREATE should be set when creating new route [ 804.775660][T23111] bond4: entered allmulticast mode [ 804.791137][T23111] 8021q: adding VLAN 0 to HW filter on device bond4 [ 804.808135][T23123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4449'. [ 805.030292][T23093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 805.449971][T23157] netlink: 'syz.2.4459': attribute type 8 has an invalid length. [ 805.627293][T23168] delete_channel: no stack [ 805.882365][T23194] Cannot find map_set index 135 as target [ 805.967769][T23194] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 805.992767][T23194] bond5 (unregistering): Released all slaves [ 806.016238][T23205] delete_channel: no stack [ 806.021027][T23205] delete_channel: no stack [ 806.421310][T23225] wg1 speed is unknown, defaulting to 1000 [ 806.888644][T23225] ip6_vti0 speed is unknown, defaulting to 1000 [ 807.076710][T23255] netlink: 'syz.1.4484': attribute type 1 has an invalid length. [ 807.158751][T23255] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 807.348206][T23277] wg1 speed is unknown, defaulting to 1000 [ 808.033036][T23277] ip6_vti0 speed is unknown, defaulting to 1000 [ 808.630095][ T1300] net_ratelimit: 48 callbacks suppressed [ 808.630117][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.743258][T23335] netlink: 'syz.4.4501': attribute type 2 has an invalid length. [ 808.826206][T23337] netlink: 'syz.4.4501': attribute type 2 has an invalid length. [ 808.859390][T23335] : entered promiscuous mode [ 808.900859][T23337] : left promiscuous mode [ 808.980880][T23348] x_tables: unsorted underflow at hook 2 [ 809.006618][T23348] __nla_validate_parse: 12 callbacks suppressed [ 809.006636][T23348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4504'. [ 809.039329][T23348] netlink: 'syz.3.4504': attribute type 33 has an invalid length. [ 809.047581][T23348] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4504'. [ 809.181411][T23355] netlink: zone id is out of range [ 809.198937][T23356] netlink: zone id is out of range [ 809.218905][T23355] netlink: zone id is out of range [ 809.237362][T23356] netlink: zone id is out of range [ 809.252864][T23355] netlink: zone id is out of range [ 809.267745][ T1914] block nbd3: Possible stuck request ffff888026db8000: control (read@0,1024B). Runtime 30 seconds [ 809.278768][ T1914] block nbd3: Possible stuck request ffff888026db8200: control (read@1024,1024B). Runtime 30 seconds [ 809.290711][ T1914] block nbd3: Possible stuck request ffff888026db8400: control (read@2048,1024B). Runtime 30 seconds [ 809.301744][ T1914] block nbd3: Possible stuck request ffff888026db8600: control (read@3072,1024B). Runtime 30 seconds [ 809.314048][T23356] netlink: zone id is out of range [ 809.329323][T23355] netlink: zone id is out of range [ 809.335767][T23358] FAULT_INJECTION: forcing a failure. [ 809.335767][T23358] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 809.370695][T23356] netlink: zone id is out of range [ 809.378271][T23355] netlink: zone id is out of range [ 809.396789][T23358] CPU: 0 UID: 0 PID: 23358 Comm: syz.2.4509 Not tainted syzkaller #0 PREEMPT(full) [ 809.396831][T23358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 809.396844][T23358] Call Trace: [ 809.396852][T23358] [ 809.396862][T23358] dump_stack_lvl+0xe8/0x150 [ 809.396896][T23358] should_fail_ex+0x412/0x560 [ 809.396940][T23358] _copy_from_user+0x2d/0xb0 [ 809.396973][T23358] ___sys_sendmsg+0x1c6/0x360 [ 809.397002][T23358] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.397058][T23358] ? __fget_files+0x2a/0x420 [ 809.397087][T23358] ? __fget_files+0x3a0/0x420 [ 809.397128][T23358] __x64_sys_sendmsg+0x1bd/0x2a0 [ 809.397152][T23358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 809.397200][T23358] ? __pfx_ksys_write+0x10/0x10 [ 809.397236][T23358] do_syscall_64+0x14d/0xf80 [ 809.397257][T23358] ? trace_irq_disable+0x3b/0x150 [ 809.397288][T23358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.397311][T23358] ? clear_bhb_loop+0x40/0x90 [ 809.397337][T23358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.397359][T23358] RIP: 0033:0x7fb4fe59c799 [ 809.397379][T23358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.397398][T23358] RSP: 002b:00007fb4ff378028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.397422][T23358] RAX: ffffffffffffffda RBX: 00007fb4fe815fa0 RCX: 00007fb4fe59c799 [ 809.397438][T23358] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 809.397452][T23358] RBP: 00007fb4ff378090 R08: 0000000000000000 R09: 0000000000000000 [ 809.397465][T23358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.397477][T23358] R13: 00007fb4fe816038 R14: 00007fb4fe815fa0 R15: 00007ffe67b55898 [ 809.397511][T23358] [ 809.583674][T23360] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4510'. [ 809.592871][T23360] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4510'. [ 809.687560][T23363] netlink: 'syz.4.4511': attribute type 1 has an invalid length. [ 809.722781][T23363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.812844][T23373] macvlan3: entered promiscuous mode [ 809.819380][T23373] macvlan3: entered allmulticast mode [ 809.846741][T23372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4514'. [ 809.865183][T23374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4514'. [ 809.891120][T23373] bond0: (slave ip6gretap3): making interface the new active one [ 809.905833][T23379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4515'. [ 809.917594][T23373] bond0: (slave ip6gretap3): Enslaving as an active interface with an up link [ 809.980218][T23382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4515'. [ 810.012083][T23382] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4515'. [ 810.076503][T23382] netem: incorrect gi model size [ 810.081947][T23382] netem: change failed [ 810.098144][T23379] x_tables: duplicate underflow at hook 1 [ 810.321734][T23402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4520'. [ 810.473199][T23403] wg1 speed is unknown, defaulting to 1000 [ 810.582680][T23408] tap0: tun_chr_ioctl cmd 1074025681 [ 810.607779][T23410] FAULT_INJECTION: forcing a failure. [ 810.607779][T23410] name failslab, interval 1, probability 0, space 0, times 0 [ 810.650804][T23410] CPU: 1 UID: 0 PID: 23410 Comm: syz.4.4523 Not tainted syzkaller #0 PREEMPT(full) [ 810.650835][T23410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 810.650848][T23410] Call Trace: [ 810.650857][T23410] [ 810.650865][T23410] dump_stack_lvl+0xe8/0x150 [ 810.650902][T23410] should_fail_ex+0x412/0x560 [ 810.650934][T23410] should_failslab+0xa8/0x100 [ 810.650964][T23410] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 810.650989][T23410] ? __alloc_skb+0x186/0x7d0 [ 810.651018][T23410] ? __alloc_skb+0x1d0/0x7d0 [ 810.651046][T23410] ? __local_bh_enable_ip+0xd0/0x130 [ 810.651079][T23410] __alloc_skb+0x1d0/0x7d0 [ 810.651116][T23410] netlink_sendmsg+0x5d4/0xb40 [ 810.651158][T23410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.651191][T23410] ? aa_sock_msg_perm+0xf1/0x1b0 [ 810.651222][T23410] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 810.651250][T23410] ____sys_sendmsg+0x972/0x9f0 [ 810.651282][T23410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.651324][T23410] ? import_iovec+0x73/0xa0 [ 810.651362][T23410] ___sys_sendmsg+0x2a5/0x360 [ 810.651389][T23410] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.651449][T23410] ? __fget_files+0x2a/0x420 [ 810.651479][T23410] ? __fget_files+0x3a0/0x420 [ 810.651522][T23410] __x64_sys_sendmsg+0x1bd/0x2a0 [ 810.651546][T23410] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 810.651578][T23410] ? __pfx_ksys_write+0x10/0x10 [ 810.651614][T23410] do_syscall_64+0x14d/0xf80 [ 810.651634][T23410] ? trace_irq_disable+0x3b/0x150 [ 810.651665][T23410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.651687][T23410] ? clear_bhb_loop+0x40/0x90 [ 810.651713][T23410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.651735][T23410] RIP: 0033:0x7f453bf9c799 [ 810.651754][T23410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.651773][T23410] RSP: 002b:00007f453ce4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.651795][T23410] RAX: ffffffffffffffda RBX: 00007f453c215fa0 RCX: 00007f453bf9c799 [ 810.651811][T23410] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 810.651825][T23410] RBP: 00007f453ce4a090 R08: 0000000000000000 R09: 0000000000000000 [ 810.651838][T23410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.651851][T23410] R13: 00007f453c216038 R14: 00007f453c215fa0 R15: 00007fffc30c6628 [ 810.651884][T23410] [ 811.361744][T23418] bond8: option resend_igmp: invalid value (2878) [ 811.394410][T23418] bond8: option resend_igmp: allowed values 0 - 255 [ 811.433769][T23418] bond8 (unregistering): Released all slaves [ 811.471832][T23403] ip6_vti0 speed is unknown, defaulting to 1000 [ 813.184174][T23505] netlink: 'syz.0.4550': attribute type 1 has an invalid length. [ 813.654121][T23535] netlink: 'syz.0.4558': attribute type 2 has an invalid length. [ 813.678401][T23535] : entered promiscuous mode [ 813.883258][T23535] wg1 speed is unknown, defaulting to 1000 [ 814.327457][T23535] ip6_vti0 speed is unknown, defaulting to 1000 [ 814.397517][T23554] syzkaller0: entered promiscuous mode [ 814.403057][T23554] syzkaller0: entered allmulticast mode [ 814.627945][T23559] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 814.641069][T23559] bond3 (unregistering): Released all slaves [ 815.072434][T23565] sit2: entered promiscuous mode [ 815.402068][T10663] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 815.566205][T12069] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 815.682427][T23585] FAULT_INJECTION: forcing a failure. [ 815.682427][T23585] name failslab, interval 1, probability 0, space 0, times 0 [ 815.748602][T23585] CPU: 1 UID: 0 PID: 23585 Comm: syz.1.4572 Not tainted syzkaller #0 PREEMPT(full) [ 815.748632][T23585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 815.748646][T23585] Call Trace: [ 815.748655][T23585] [ 815.748665][T23585] dump_stack_lvl+0xe8/0x150 [ 815.748700][T23585] should_fail_ex+0x412/0x560 [ 815.748735][T23585] should_failslab+0xa8/0x100 [ 815.748765][T23585] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 815.748790][T23585] ? __alloc_skb+0x186/0x7d0 [ 815.748820][T23585] ? __alloc_skb+0x1d0/0x7d0 [ 815.748847][T23585] ? __local_bh_enable_ip+0xd0/0x130 [ 815.748881][T23585] __alloc_skb+0x1d0/0x7d0 [ 815.748910][T23585] ? netlink_ack_tlv_len+0x6c/0x210 [ 815.748942][T23585] netlink_ack+0x146/0xa50 [ 815.748989][T23585] netlink_rcv_skb+0x2b6/0x4b0 [ 815.749025][T23585] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 815.749055][T23585] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 815.749095][T23585] ? bpf_lsm_capable+0x9/0x20 [ 815.749125][T23585] ? security_capable+0x7e/0x2c0 [ 815.749159][T23585] nfnetlink_rcv+0x2c0/0x27b0 [ 815.749193][T23585] ? __local_bh_enable_ip+0xd0/0x130 [ 815.749219][T23585] ? lockdep_hardirqs_on+0x7a/0x110 [ 815.749250][T23585] ? __dev_queue_xmit+0x28d/0x38d0 [ 815.749271][T23585] ? __local_bh_enable_ip+0xd0/0x130 [ 815.749295][T23585] ? __dev_queue_xmit+0x28d/0x38d0 [ 815.749317][T23585] ? __dev_queue_xmit+0x1f56/0x38d0 [ 815.749336][T23585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.749361][T23585] ? __dev_queue_xmit+0x28d/0x38d0 [ 815.749390][T23585] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 815.749421][T23585] ? __pfx___dev_queue_xmit+0x10/0x10 [ 815.749449][T23585] ? ref_tracker_free+0x693/0x840 [ 815.749474][T23585] ? __copy_skb_header+0xa3/0x4a0 [ 815.749495][T23585] ? __pfx_ref_tracker_free+0x10/0x10 [ 815.749539][T23585] ? skb_clone+0x246/0x3a0 [ 815.749562][T23585] ? __netlink_deliver_tap+0x807/0x850 [ 815.749590][T23585] ? netlink_deliver_tap+0x2e/0x1b0 [ 815.749622][T23585] ? netlink_deliver_tap+0x2e/0x1b0 [ 815.749656][T23585] netlink_unicast+0x80f/0x9b0 [ 815.749688][T23585] ? __pfx_netlink_unicast+0x10/0x10 [ 815.749716][T23585] ? netlink_sendmsg+0x650/0xb40 [ 815.749744][T23585] ? skb_put+0x11b/0x210 [ 815.749778][T23585] netlink_sendmsg+0x813/0xb40 [ 815.749818][T23585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.749852][T23585] ? aa_sock_msg_perm+0xf1/0x1b0 [ 815.749883][T23585] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 815.749911][T23585] ____sys_sendmsg+0x972/0x9f0 [ 815.749944][T23585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 815.749975][T23585] ? import_iovec+0x73/0xa0 [ 815.750012][T23585] ___sys_sendmsg+0x2a5/0x360 [ 815.750050][T23585] ? __pfx____sys_sendmsg+0x10/0x10 [ 815.750110][T23585] ? __fget_files+0x2a/0x420 [ 815.750141][T23585] ? __fget_files+0x3a0/0x420 [ 815.750184][T23585] __x64_sys_sendmsg+0x1bd/0x2a0 [ 815.750209][T23585] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 815.750241][T23585] ? __pfx_ksys_write+0x10/0x10 [ 815.750277][T23585] do_syscall_64+0x14d/0xf80 [ 815.750298][T23585] ? trace_irq_disable+0x3b/0x150 [ 815.750329][T23585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.750351][T23585] ? clear_bhb_loop+0x40/0x90 [ 815.750379][T23585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.750400][T23585] RIP: 0033:0x7f70c459c799 [ 815.750421][T23585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.750439][T23585] RSP: 002b:00007f70c5372028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.750464][T23585] RAX: ffffffffffffffda RBX: 00007f70c4815fa0 RCX: 00007f70c459c799 [ 815.750480][T23585] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 815.750494][T23585] RBP: 00007f70c5372090 R08: 0000000000000000 R09: 0000000000000000 [ 815.750508][T23585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.750530][T23585] R13: 00007f70c4816038 R14: 00007f70c4815fa0 R15: 00007fff4e4dbb38 [ 815.750565][T23585] [ 816.306236][T10663] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 816.660641][ T139] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 816.686157][ T139] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 816.802391][T23603] bridge_slave_1: left allmulticast mode [ 816.808263][T23603] bridge_slave_1: left promiscuous mode [ 816.814276][T23603] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.847231][T23603] net_ratelimit: 25 callbacks suppressed [ 816.847254][T23603] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 816.897393][T23606] __nla_validate_parse: 5 callbacks suppressed [ 816.897415][T23606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4578'. [ 817.087150][T23610] syzkaller1: entered promiscuous mode [ 817.092689][T23610] syzkaller1: entered allmulticast mode [ 817.245186][T20855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 817.330955][T23618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 817.359154][T23616] netlink: 'syz.0.4581': attribute type 1 has an invalid length. [ 817.430626][T23623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4581'. [ 817.459513][T23623] bond3: (slave bridge7): making interface the new active one [ 817.531861][T23623] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 817.567551][T23616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4581'. [ 817.593452][T23626] netlink: 'syz.1.4583': attribute type 7 has an invalid length. [ 817.601300][T23626] netlink: 'syz.1.4583': attribute type 8 has an invalid length. [ 817.609199][T23626] netlink: 'syz.1.4583': attribute type 9 has an invalid length. [ 817.627273][T23616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 817.754434][T23629] FAULT_INJECTION: forcing a failure. [ 817.754434][T23629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.810843][T23629] CPU: 0 UID: 0 PID: 23629 Comm: syz.1.4584 Not tainted syzkaller #0 PREEMPT(full) [ 817.810875][T23629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 817.810888][T23629] Call Trace: [ 817.810897][T23629] [ 817.810906][T23629] dump_stack_lvl+0xe8/0x150 [ 817.810942][T23629] should_fail_ex+0x412/0x560 [ 817.810975][T23629] _copy_to_user+0x31/0xb0 [ 817.811012][T23629] simple_read_from_buffer+0xe1/0x170 [ 817.811049][T23629] proc_fail_nth_read+0x1bb/0x230 [ 817.811084][T23629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 817.811118][T23629] ? rw_verify_area+0x2a6/0x4d0 [ 817.811141][T23629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 817.811173][T23629] vfs_read+0x20c/0xa70 [ 817.811195][T23629] ? fdget_pos+0x246/0x320 [ 817.811233][T23629] ? __pfx___mutex_lock+0x10/0x10 [ 817.811268][T23629] ? __pfx_vfs_read+0x10/0x10 [ 817.811291][T23629] ? __fget_files+0x2a/0x420 [ 817.811325][T23629] ? __fget_files+0x3a0/0x420 [ 817.811362][T23629] ? __fget_files+0x2a/0x420 [ 817.811420][T23629] ksys_read+0x150/0x270 [ 817.811446][T23629] ? __pfx_ksys_read+0x10/0x10 [ 817.811482][T23629] do_syscall_64+0x14d/0xf80 [ 817.811502][T23629] ? trace_irq_disable+0x3b/0x150 [ 817.811534][T23629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.811556][T23629] ? clear_bhb_loop+0x40/0x90 [ 817.811583][T23629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.811605][T23629] RIP: 0033:0x7f70c455cfce [ 817.811625][T23629] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 817.811643][T23629] RSP: 002b:00007f70c5371fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 817.811665][T23629] RAX: ffffffffffffffda RBX: 00007f70c53726c0 RCX: 00007f70c455cfce [ 817.811681][T23629] RDX: 000000000000000f RSI: 00007f70c53720a0 RDI: 0000000000000004 [ 817.811694][T23629] RBP: 00007f70c5372090 R08: 0000000000000000 R09: 0000000000000000 [ 817.811707][T23629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.811720][T23629] R13: 00007f70c4816038 R14: 00007f70c4815fa0 R15: 00007fff4e4dbb38 [ 817.811755][T23629] [ 818.125004][T23632] netlink: zone id is out of range [ 818.154468][T23632] netlink: zone id is out of range [ 818.172145][T23632] netlink: zone id is out of range [ 818.195613][T23632] netlink: zone id is out of range [ 818.220023][T23632] netlink: zone id is out of range [ 818.286455][T23632] netlink: zone id is out of range [ 818.291752][T23632] netlink: zone id is out of range [ 818.302989][T23641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4587'. [ 818.312221][T23641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4587'. [ 818.327513][T23632] netlink: zone id is out of range [ 818.367911][T23641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4587'. [ 818.377122][ T139] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.386270][T12069] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.402411][T12069] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.402751][T23641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4587'. [ 818.429412][T12069] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.506079][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 821.106095][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 829.746130][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 832.766357][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 832.774863][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 832.783532][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 832.793814][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 832.802057][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 832.821198][T16751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 832.829304][T16751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 832.837491][T16751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 832.853787][T16751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 832.864422][T16751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 832.921280][T23660] wg1 speed is unknown, defaulting to 1000 [ 833.062986][T23660] ip6_vti0 speed is unknown, defaulting to 1000 [ 833.362014][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 833.371773][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 833.381087][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 833.389433][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 833.397857][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 833.455289][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 833.464501][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 833.476899][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 833.485067][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 833.492872][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 833.539050][T23664] wg1 speed is unknown, defaulting to 1000 [ 833.586595][ T1914] block nbd4: Possible stuck request ffff888026e50000: control (read@0,1024B). Runtime 150 seconds [ 833.597460][ T1914] block nbd4: Possible stuck request ffff888026e50200: control (read@1024,1024B). Runtime 150 seconds [ 833.608519][ T1914] block nbd4: Possible stuck request ffff888026e50400: control (read@2048,1024B). Runtime 150 seconds [ 833.619955][ T1914] block nbd4: Possible stuck request ffff888026e50600: control (read@3072,1024B). Runtime 150 seconds [ 833.674499][T23660] chnl_net:caif_netlink_parms(): no params data found [ 833.816440][T23667] wg1 speed is unknown, defaulting to 1000 [ 833.819181][T23660] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.832680][T23660] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.840681][T23660] bridge_slave_0: entered allmulticast mode [ 833.849270][T23660] bridge_slave_0: entered promiscuous mode [ 833.857803][T23664] ip6_vti0 speed is unknown, defaulting to 1000 [ 833.860767][T23660] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.872020][T23660] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.879964][T23660] bridge_slave_1: entered allmulticast mode [ 833.888797][T23660] bridge_slave_1: entered promiscuous mode [ 833.936907][T23660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.951048][T23660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.023682][T23660] team0: Port device team_slave_0 added [ 834.049124][T23660] team0: Port device team_slave_1 added [ 834.126697][T23660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.133701][T23660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.166094][T23660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.198260][T23660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.205256][T23660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.233421][T23660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.290473][T23667] ip6_vti0 speed is unknown, defaulting to 1000 [ 834.377516][T23660] hsr_slave_0: entered promiscuous mode [ 834.396841][T23660] hsr_slave_1: entered promiscuous mode [ 834.403364][T23660] debugfs: 'hsr0' already exists in 'hsr' [ 834.425995][T23660] Cannot create hsr debugfs directory [ 834.452888][T16751] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 834.466607][T16751] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 834.474739][T16751] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 834.483031][T16751] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 834.517630][T16751] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 834.759444][T23675] wg1 speed is unknown, defaulting to 1000 [ 834.947329][T16751] Bluetooth: hci3: command tx timeout [ 834.979876][ T5834] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 834.989372][ T5834] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 834.997540][ T5834] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 835.016272][ T5834] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 835.027341][ T5834] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 835.080012][T23675] ip6_vti0 speed is unknown, defaulting to 1000 [ 835.156375][T23664] chnl_net:caif_netlink_parms(): no params data found [ 835.180780][T23681] wg1 speed is unknown, defaulting to 1000 [ 835.426033][ T5834] Bluetooth: hci6: command tx timeout [ 835.481976][T23664] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.489400][T23664] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.497318][T23664] bridge_slave_0: entered allmulticast mode [ 835.505394][T23664] bridge_slave_0: entered promiscuous mode [ 835.539338][T23681] ip6_vti0 speed is unknown, defaulting to 1000 [ 835.539714][T23664] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.553094][T23664] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.560976][T23664] bridge_slave_1: entered allmulticast mode [ 835.569250][T23664] bridge_slave_1: entered promiscuous mode [ 835.577008][T23667] chnl_net:caif_netlink_parms(): no params data found [ 835.586021][ T5834] Bluetooth: hci7: command tx timeout [ 835.674745][T23664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.711994][T23664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.823724][T23664] team0: Port device team_slave_0 added [ 835.859057][T23664] team0: Port device team_slave_1 added [ 835.895797][T23667] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.903107][T23667] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.911014][T23667] bridge_slave_0: entered allmulticast mode [ 835.918548][T23667] bridge_slave_0: entered promiscuous mode [ 835.958828][T23667] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.966409][T23667] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.973750][T23667] bridge_slave_1: entered allmulticast mode [ 835.981274][T23667] bridge_slave_1: entered promiscuous mode [ 835.996611][T23664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.003592][T23664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.029738][T23664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.046964][T23664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.053933][T23664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.080304][T23664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.162767][T23667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.190511][T23667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.241393][T23664] hsr_slave_0: entered promiscuous mode [ 836.248288][T23664] hsr_slave_1: entered promiscuous mode [ 836.254555][T23664] debugfs: 'hsr0' already exists in 'hsr' [ 836.260398][T23664] Cannot create hsr debugfs directory [ 836.278063][T23675] chnl_net:caif_netlink_parms(): no params data found [ 836.295616][T23667] team0: Port device team_slave_0 added [ 836.304465][T23667] team0: Port device team_slave_1 added [ 836.415034][T23667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.422272][T23667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.448838][T23667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.485026][T23667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.492707][T23667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.519533][T23667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.545983][ T5834] Bluetooth: hci8: command tx timeout [ 836.596440][T23675] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.603670][T23675] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.611229][T23675] bridge_slave_0: entered allmulticast mode [ 836.618893][T23675] bridge_slave_0: entered promiscuous mode [ 836.650780][T23675] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.658185][T23675] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.665586][T23675] bridge_slave_1: entered allmulticast mode [ 836.673442][T23675] bridge_slave_1: entered promiscuous mode [ 836.776486][T23667] hsr_slave_0: entered promiscuous mode [ 836.783025][T23667] hsr_slave_1: entered promiscuous mode [ 836.794255][T23667] debugfs: 'hsr0' already exists in 'hsr' [ 836.800264][T23667] Cannot create hsr debugfs directory [ 836.813664][T23681] chnl_net:caif_netlink_parms(): no params data found [ 836.829090][T23675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.841665][T23675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.957169][T23675] team0: Port device team_slave_0 added [ 836.995042][T23675] team0: Port device team_slave_1 added [ 837.026427][ T5834] Bluetooth: hci3: command tx timeout [ 837.076081][T23675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.083085][T23675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.107298][ T5834] Bluetooth: hci9: command tx timeout [ 837.109836][T23675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.165480][T23675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.173048][T23675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.199583][T23675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.217794][T23681] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.225028][T23681] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.232585][T23681] bridge_slave_0: entered allmulticast mode [ 837.240412][T23681] bridge_slave_0: entered promiscuous mode [ 837.264963][T23681] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.272630][T23681] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.280322][T23681] bridge_slave_1: entered allmulticast mode [ 837.287947][T23681] bridge_slave_1: entered promiscuous mode [ 837.378051][T23681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.393297][T23675] hsr_slave_0: entered promiscuous mode [ 837.400174][T23675] hsr_slave_1: entered promiscuous mode [ 837.407056][T23675] debugfs: 'hsr0' already exists in 'hsr' [ 837.412796][T23675] Cannot create hsr debugfs directory [ 837.428929][T23681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.485238][T23681] team0: Port device team_slave_0 added [ 837.494252][T23681] team0: Port device team_slave_1 added [ 837.506195][ T5834] Bluetooth: hci6: command tx timeout [ 837.568041][T23681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.575023][T23681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.602143][T23681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.614943][T23681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.622279][T23681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.648695][T23681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.666199][ T5834] Bluetooth: hci7: command tx timeout [ 837.786499][T23681] hsr_slave_0: entered promiscuous mode [ 837.793031][T23681] hsr_slave_1: entered promiscuous mode [ 837.800017][T23681] debugfs: 'hsr0' already exists in 'hsr' [ 837.805759][T23681] Cannot create hsr debugfs directory [ 838.626971][ T5834] Bluetooth: hci8: command tx timeout [ 839.106139][ T5834] Bluetooth: hci3: command tx timeout [ 839.186231][ T5834] Bluetooth: hci9: command tx timeout [ 839.347315][ T1914] block nbd3: Possible stuck request ffff888026db8000: control (read@0,1024B). Runtime 60 seconds [ 839.358626][ T1914] block nbd3: Possible stuck request ffff888026db8200: control (read@1024,1024B). Runtime 60 seconds [ 839.369705][ T1914] block nbd3: Possible stuck request ffff888026db8400: control (read@2048,1024B). Runtime 60 seconds [ 839.381899][ T1914] block nbd3: Possible stuck request ffff888026db8600: control (read@3072,1024B). Runtime 60 seconds [ 839.586104][ T5834] Bluetooth: hci6: command tx timeout [ 839.746144][ T5834] Bluetooth: hci7: command tx timeout [ 840.706137][ T5834] Bluetooth: hci8: command tx timeout [ 841.052586][ T5193] udevd[5193]: worker [20097] /devices/virtual/block/nbd3 is taking a long time [ 841.186144][ T5834] Bluetooth: hci3: command tx timeout [ 841.266340][T16751] Bluetooth: hci9: command tx timeout [ 841.676063][T16751] Bluetooth: hci6: command tx timeout [ 841.826174][T16751] Bluetooth: hci7: command tx timeout [ 842.786278][T16751] Bluetooth: hci8: command tx timeout [ 843.346220][T16751] Bluetooth: hci9: command tx timeout [ 847.666319][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 856.626153][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 863.667418][ T1914] block nbd4: Possible stuck request ffff888026e50000: control (read@0,1024B). Runtime 180 seconds [ 863.678330][ T1914] block nbd4: Possible stuck request ffff888026e50200: control (read@1024,1024B). Runtime 180 seconds [ 863.689506][ T1914] block nbd4: Possible stuck request ffff888026e50400: control (read@2048,1024B). Runtime 180 seconds [ 863.700653][ T1914] block nbd4: Possible stuck request ffff888026e50600: control (read@3072,1024B). Runtime 180 seconds [ 865.090128][ T5193] udevd[5193]: worker [18056] /devices/virtual/block/nbd4 timeout; kill it [ 865.099153][ T5193] udevd[5193]: seq 33975 '/devices/virtual/block/nbd4' killed [ 869.426876][ T1914] block nbd3: Possible stuck request ffff888026db8000: control (read@0,1024B). Runtime 90 seconds [ 869.437564][ T1914] block nbd3: Possible stuck request ffff888026db8200: control (read@1024,1024B). Runtime 90 seconds [ 869.448505][ T1914] block nbd3: Possible stuck request ffff888026db8400: control (read@2048,1024B). Runtime 90 seconds [ 869.459535][ T1914] block nbd3: Possible stuck request ffff888026db8600: control (read@3072,1024B). Runtime 90 seconds [ 870.068599][ T1300] net_ratelimit: 45 callbacks suppressed [ 870.068620][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.226108][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 892.860562][ T5834] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 892.869613][ T5834] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 892.878117][ T5834] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 892.887984][ T5834] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 892.895728][ T5834] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 892.934929][T23709] wg1 speed is unknown, defaulting to 1000 [ 893.068741][T23709] ip6_vti0 speed is unknown, defaulting to 1000 [ 893.320052][T23709] chnl_net:caif_netlink_parms(): no params data found [ 893.396682][T23709] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.403885][T23709] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.411586][T23709] bridge_slave_0: entered allmulticast mode [ 893.419033][T23709] bridge_slave_0: entered promiscuous mode [ 893.427526][T23709] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.434652][T23709] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.442159][T23709] bridge_slave_1: entered allmulticast mode [ 893.450071][T23709] bridge_slave_1: entered promiscuous mode [ 893.481109][T23709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.493306][T23709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.528573][T23709] team0: Port device team_slave_0 added [ 893.536786][T23709] team0: Port device team_slave_1 added [ 893.563895][T23709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.570957][T23709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.597292][T23709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.609520][T23709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.616559][T23709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.642567][T23709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.688948][T23709] hsr_slave_0: entered promiscuous mode [ 893.695430][T23709] hsr_slave_1: entered promiscuous mode [ 893.701811][T23709] debugfs: 'hsr0' already exists in 'hsr' [ 893.707634][T23709] Cannot create hsr debugfs directory [ 893.765983][ T1914] block nbd4: Possible stuck request ffff888026e50000: control (read@0,1024B). Runtime 210 seconds [ 893.777218][ T1914] block nbd4: Possible stuck request ffff888026e50200: control (read@1024,1024B). Runtime 210 seconds [ 893.788593][ T1914] block nbd4: Possible stuck request ffff888026e50400: control (read@2048,1024B). Runtime 210 seconds [ 893.799698][ T1914] block nbd4: Possible stuck request ffff888026e50600: control (read@3072,1024B). Runtime 210 seconds [ 894.019414][T23723] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 894.028456][T23723] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 894.039362][T23723] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 894.047285][T23723] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 894.052613][T23724] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 894.061873][ T5829] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 894.071103][T23724] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 894.080289][T23724] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 894.089315][T23724] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 894.098254][T23724] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 894.154938][T23720] wg1 speed is unknown, defaulting to 1000 [ 894.349568][T23720] ip6_vti0 speed is unknown, defaulting to 1000 [ 894.349737][T23719] wg1 speed is unknown, defaulting to 1000 [ 894.584419][T23719] ip6_vti0 speed is unknown, defaulting to 1000 [ 894.753232][T23720] chnl_net:caif_netlink_parms(): no params data found [ 894.899720][T23720] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.907138][T23720] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.914704][T23720] bridge_slave_0: entered allmulticast mode [ 894.923765][T23720] bridge_slave_0: entered promiscuous mode [ 894.938898][T23720] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.946175][ T5834] Bluetooth: hci10: command tx timeout [ 894.952147][T23720] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.959706][T23720] bridge_slave_1: entered allmulticast mode [ 894.967915][T23720] bridge_slave_1: entered promiscuous mode [ 895.042730][T23720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.082511][T23720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.124701][T16751] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 895.134326][T16751] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 895.142848][T16751] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 895.151423][T16751] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 895.159445][T16751] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 895.221419][T23720] team0: Port device team_slave_0 added [ 895.231140][T23720] team0: Port device team_slave_1 added [ 895.265191][T16751] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 895.274736][T16751] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 895.283177][T16751] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 895.298185][T16751] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 895.306502][T16751] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 895.349372][T23734] wg1 speed is unknown, defaulting to 1000 [ 895.373437][T23720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.380729][T23720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.407930][T23720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.425229][T23720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.433546][T23720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.460467][T23720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.544020][T23720] hsr_slave_0: entered promiscuous mode [ 895.550969][T23720] hsr_slave_1: entered promiscuous mode [ 895.557988][T23720] debugfs: 'hsr0' already exists in 'hsr' [ 895.563984][T23720] Cannot create hsr debugfs directory [ 895.581057][T23719] chnl_net:caif_netlink_parms(): no params data found [ 895.709604][T23736] wg1 speed is unknown, defaulting to 1000 [ 895.721845][T23734] ip6_vti0 speed is unknown, defaulting to 1000 [ 895.889215][T23719] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.896728][T23719] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.904015][T23719] bridge_slave_0: entered allmulticast mode [ 895.917756][T23719] bridge_slave_0: entered promiscuous mode [ 895.943961][T23719] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.952191][T23719] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.976355][T23719] bridge_slave_1: entered allmulticast mode [ 895.984496][T23719] bridge_slave_1: entered promiscuous mode [ 896.121713][T23719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.135539][T23719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.147044][ T5834] Bluetooth: hci12: command tx timeout [ 896.153694][T16751] Bluetooth: hci11: command tx timeout [ 896.166288][T23736] ip6_vti0 speed is unknown, defaulting to 1000 [ 896.231603][T23719] team0: Port device team_slave_0 added [ 896.253739][T23719] team0: Port device team_slave_1 added [ 896.305009][T23719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.313598][T23719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.340021][T23719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.378864][T23719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.388241][T23719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.414740][T23719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.545071][T23719] hsr_slave_0: entered promiscuous mode [ 896.552106][T23719] hsr_slave_1: entered promiscuous mode [ 896.558890][T23719] debugfs: 'hsr0' already exists in 'hsr' [ 896.564656][T23719] Cannot create hsr debugfs directory [ 896.766162][T23734] chnl_net:caif_netlink_parms(): no params data found [ 896.969497][T23734] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.977027][T23734] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.984407][T23734] bridge_slave_0: entered allmulticast mode [ 896.993040][T23734] bridge_slave_0: entered promiscuous mode [ 897.002324][T23734] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.010005][T23734] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.018215][T23734] bridge_slave_1: entered allmulticast mode [ 897.026480][T16751] Bluetooth: hci10: command tx timeout [ 897.027101][T23734] bridge_slave_1: entered promiscuous mode [ 897.082561][T23734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.092219][T23736] chnl_net:caif_netlink_parms(): no params data found [ 897.117425][T23734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.175311][T23734] team0: Port device team_slave_0 added [ 897.186146][T16751] Bluetooth: hci13: command tx timeout [ 897.198551][T23734] team0: Port device team_slave_1 added [ 897.249651][T23734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.257274][T23734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.285943][T23734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.300122][T23734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.307513][T23734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.333947][T23734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.346428][T16751] Bluetooth: hci14: command tx timeout [ 897.385376][T23736] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.392857][T23736] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.400323][T23736] bridge_slave_0: entered allmulticast mode [ 897.408022][T23736] bridge_slave_0: entered promiscuous mode [ 897.430207][T23736] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.438264][T23736] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.445552][T23736] bridge_slave_1: entered allmulticast mode [ 897.453125][T23736] bridge_slave_1: entered promiscuous mode [ 897.502188][T23734] hsr_slave_0: entered promiscuous mode [ 897.509568][T23734] hsr_slave_1: entered promiscuous mode [ 897.515967][T23734] debugfs: 'hsr0' already exists in 'hsr' [ 897.521721][T23734] Cannot create hsr debugfs directory [ 897.571543][T23736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.600819][T23736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.663491][T23736] team0: Port device team_slave_0 added [ 897.682514][T23736] team0: Port device team_slave_1 added [ 897.729406][T23736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.736497][T23736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.762884][T23736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.781465][T23736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.788880][T23736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.814976][T23736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.886274][T23736] hsr_slave_0: entered promiscuous mode [ 897.892792][T23736] hsr_slave_1: entered promiscuous mode [ 897.900354][T23736] debugfs: 'hsr0' already exists in 'hsr' [ 897.906275][T23736] Cannot create hsr debugfs directory [ 898.226408][T16751] Bluetooth: hci11: command tx timeout [ 898.228532][ T5834] Bluetooth: hci12: command tx timeout [ 899.106045][ T5834] Bluetooth: hci10: command tx timeout [ 899.266082][ T5834] Bluetooth: hci13: command tx timeout [ 899.426003][ T5834] Bluetooth: hci14: command tx timeout [ 899.506325][ T1914] block nbd3: Possible stuck request ffff888026db8000: control (read@0,1024B). Runtime 120 seconds [ 899.517355][ T1914] block nbd3: Possible stuck request ffff888026db8200: control (read@1024,1024B). Runtime 120 seconds [ 899.529121][ T1914] block nbd3: Possible stuck request ffff888026db8400: control (read@2048,1024B). Runtime 120 seconds [ 899.540517][ T1914] block nbd3: Possible stuck request ffff888026db8600: control (read@3072,1024B). Runtime 120 seconds [ 900.306651][T16751] Bluetooth: hci12: command tx timeout [ 900.312269][ T5834] Bluetooth: hci11: command tx timeout [ 901.186192][ T5834] Bluetooth: hci10: command tx timeout [ 901.346007][ T5834] Bluetooth: hci13: command tx timeout [ 901.506060][ T5834] Bluetooth: hci14: command tx timeout [ 902.386073][T16751] Bluetooth: hci12: command tx timeout [ 902.391634][ T5834] Bluetooth: hci11: command tx timeout [ 903.436211][ T5834] Bluetooth: hci13: command tx timeout [ 903.585956][ T5834] Bluetooth: hci14: command tx timeout [ 923.829867][ T1914] block nbd4: Possible stuck request ffff888026e50000: control (read@0,1024B). Runtime 240 seconds [ 923.840950][ T1914] block nbd4: Possible stuck request ffff888026e50200: control (read@1024,1024B). Runtime 240 seconds [ 923.852072][ T1914] block nbd4: Possible stuck request ffff888026e50400: control (read@2048,1024B). Runtime 240 seconds [ 923.863197][ T1914] block nbd4: Possible stuck request ffff888026e50600: control (read@3072,1024B). Runtime 240 seconds [ 929.586304][ T1914] block nbd3: Possible stuck request ffff888026db8000: control (read@0,1024B). Runtime 150 seconds [ 929.597284][ T1914] block nbd3: Possible stuck request ffff888026db8200: control (read@1024,1024B). Runtime 150 seconds [ 929.608334][ T1914] block nbd3: Possible stuck request ffff888026db8400: control (read@2048,1024B). Runtime 150 seconds [ 929.619384][ T1914] block nbd3: Possible stuck request ffff888026db8600: control (read@3072,1024B). Runtime 150 seconds [ 931.506676][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 931.515054][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.484889][T16751] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 953.494349][T16751] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 953.502667][T16751] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 953.511842][T16751] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 953.521418][T16751] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 953.559442][T23760] wg1 speed is unknown, defaulting to 1000 [ 953.699545][T23760] ip6_vti0 speed is unknown, defaulting to 1000 [ 953.915371][ T1914] block nbd4: Possible stuck request ffff888026e50000: control (read@0,1024B). Runtime 270 seconds [ 953.926928][ T1914] block nbd4: Possible stuck request ffff888026e50200: control (read@1024,1024B). Runtime 270 seconds [ 953.938089][ T1914] block nbd4: Possible stuck request ffff888026e50400: control (read@2048,1024B). Runtime 270 seconds [ 953.949200][ T1914] block nbd4: Possible stuck request ffff888026e50600: control (read@3072,1024B). Runtime 270 seconds [ 954.000149][T23760] chnl_net:caif_netlink_parms(): no params data found [ 954.083699][T23760] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.091286][T23760] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.098924][T23760] bridge_slave_0: entered allmulticast mode [ 954.106698][T23760] bridge_slave_0: entered promiscuous mode [ 954.114897][T23760] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.122669][T23760] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.130244][T23760] bridge_slave_1: entered allmulticast mode [ 954.137850][T23760] bridge_slave_1: entered promiscuous mode [ 954.169897][T23760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.182289][T23760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.216600][T23760] team0: Port device team_slave_0 added [ 954.224762][T23760] team0: Port device team_slave_1 added [ 954.254526][T23760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.261653][T23760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.288146][T23760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.300733][T23760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.308072][T23760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.334277][T23760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.378906][T23760] hsr_slave_0: entered promiscuous mode [ 954.388721][T23760] hsr_slave_1: entered promiscuous mode [ 954.395006][T23760] debugfs: 'hsr0' already exists in 'hsr' [ 954.401099][T23760] Cannot create hsr debugfs directory [ 954.577095][T16751] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 954.589136][T16751] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 954.598014][T16751] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 954.617292][T16751] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 954.638124][T16751] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 954.701536][T16751] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 954.715612][T16751] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 954.729539][T16751] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 954.739168][T16751] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 954.747489][T16751] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 954.758737][T23770] wg1 speed is unknown, defaulting to 1000 [ 954.954131][T23770] ip6_vti0 speed is unknown, defaulting to 1000 [ 954.954155][T23772] wg1 speed is unknown, defaulting to 1000 [ 955.257719][T23772] ip6_vti0 speed is unknown, defaulting to 1000 [ 955.446595][T23770] chnl_net:caif_netlink_parms(): no params data found [ 955.586009][T16751] Bluetooth: hci15: command tx timeout [ 955.710244][T23770] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.717600][T23770] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.725158][T23770] bridge_slave_0: entered allmulticast mode [ 955.733735][T23770] bridge_slave_0: entered promiscuous mode [ 955.756029][T23770] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.757685][ T5834] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 955.763325][T23770] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.781287][ T5834] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 955.781407][T23770] bridge_slave_1: entered allmulticast mode [ 955.795063][ T5834] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 955.803908][T23724] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 955.809662][T23770] bridge_slave_1: entered promiscuous mode [ 955.813546][T23724] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 955.841034][T23724] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 955.851225][T23724] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 955.860045][T23724] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 955.870066][T23724] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 955.879428][T23724] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 955.941964][T23770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.955346][T23770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.972402][T23783] wg1 speed is unknown, defaulting to 1000 [ 956.040683][T23770] team0: Port device team_slave_0 added [ 956.076781][T23770] team0: Port device team_slave_1 added [ 956.136647][T23770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.143658][T23770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.170420][T23770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.184205][T23770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.191643][T23770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.218593][T23770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.284025][T23772] chnl_net:caif_netlink_parms(): no params data found [ 956.310136][T23770] hsr_slave_0: entered promiscuous mode [ 956.317449][T23770] hsr_slave_1: entered promiscuous mode [ 956.323764][T23770] debugfs: 'hsr0' already exists in 'hsr' [ 956.330099][T23770] Cannot create hsr debugfs directory [ 956.342176][T23782] wg1 speed is unknown, defaulting to 1000 [ 956.361013][T23783] ip6_vti0 speed is unknown, defaulting to 1000 [ 956.581355][T23772] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.588740][T23772] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.597668][T23772] bridge_slave_0: entered allmulticast mode [ 956.606322][T23772] bridge_slave_0: entered promiscuous mode [ 956.615562][T23772] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.623571][T23772] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.632568][T23772] bridge_slave_1: entered allmulticast mode [ 956.641335][T23772] bridge_slave_1: entered promiscuous mode [ 956.706095][T16751] Bluetooth: hci16: command tx timeout [ 956.780685][T23772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.793861][T23772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.804003][T16751] Bluetooth: hci17: command tx timeout [ 956.810942][T23782] ip6_vti0 speed is unknown, defaulting to 1000 [ 956.915086][T23772] team0: Port device team_slave_0 added [ 956.935514][T23772] team0: Port device team_slave_1 added [ 957.029727][T23772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.039207][T23772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.069296][T23772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.091779][T23772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.099133][T23772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.126328][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 957.135715][T23772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.260663][T23772] hsr_slave_0: entered promiscuous mode [ 957.269488][T23772] hsr_slave_1: entered promiscuous mode [ 957.276312][T23772] debugfs: 'hsr0' already exists in 'hsr' [ 957.282080][T23772] Cannot create hsr debugfs directory [ 957.428904][T23783] chnl_net:caif_netlink_parms(): no params data found [ 957.666051][T23794] Bluetooth: hci15: command tx timeout [ 957.675760][T23783] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.683262][T23783] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.690942][T23783] bridge_slave_0: entered allmulticast mode [ 957.698599][T23783] bridge_slave_0: entered promiscuous mode [ 957.707563][T23783] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.714741][T23783] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.722465][T23783] bridge_slave_1: entered allmulticast mode [ 957.730265][T23783] bridge_slave_1: entered promiscuous mode [ 957.803241][T23783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.832735][T23783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.870955][T23782] chnl_net:caif_netlink_parms(): no params data found [ 957.892835][T23783] team0: Port device team_slave_0 added [ 957.916083][T23794] Bluetooth: hci19: command tx timeout [ 957.923231][T23794] Bluetooth: hci18: command tx timeout [ 957.929094][T23783] team0: Port device team_slave_1 added [ 957.983739][T23783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.992081][T23783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.020564][T23783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.047838][T23783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.054836][T23783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.081553][T23783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.141804][T23782] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.149448][T23782] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.157557][T23782] bridge_slave_0: entered allmulticast mode [ 958.165978][T23782] bridge_slave_0: entered promiscuous mode [ 958.191360][T23782] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.199105][T23782] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.206712][T23782] bridge_slave_1: entered allmulticast mode [ 958.214113][T23782] bridge_slave_1: entered promiscuous mode [ 958.252391][T23783] hsr_slave_0: entered promiscuous mode [ 958.259319][T23783] hsr_slave_1: entered promiscuous mode [ 958.265713][T23783] debugfs: 'hsr0' already exists in 'hsr' [ 958.271690][T23783] Cannot create hsr debugfs directory [ 958.304110][T23782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.318612][T23782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.357920][T23782] team0: Port device team_slave_0 added [ 958.378756][T23782] team0: Port device team_slave_1 added [ 958.454423][T23782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.461602][T23782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.488399][T23782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.501498][T23782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.508751][T23782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.535214][T23782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.638499][T23782] hsr_slave_0: entered promiscuous mode [ 958.645631][T23782] hsr_slave_1: entered promiscuous mode [ 958.652200][T23782] debugfs: 'hsr0' already exists in 'hsr' [ 958.658395][T23782] Cannot create hsr debugfs directory [ 958.786128][T23803] Bluetooth: hci16: command tx timeout [ 958.866318][T23803] Bluetooth: hci17: command tx timeout [ 959.191865][T23793] Bluetooth: hci9: command 0x0406 tx timeout [ 959.198664][T23803] Bluetooth: hci3: command 0x0406 tx timeout [ 959.204757][T23803] Bluetooth: hci6: command 0x0406 tx timeout [ 959.211742][T23793] Bluetooth: hci7: command 0x0406 tx timeout [ 959.217249][T23803] Bluetooth: hci8: command 0x0406 tx timeout [ 959.666656][ T1914] block nbd3: Possible stuck request ffff888026db8000: control (read@0,1024B). Runtime 180 seconds [ 959.677608][ T1914] block nbd3: Possible stuck request ffff888026db8200: control (read@1024,1024B). Runtime 180 seconds [ 959.688923][ T1914] block nbd3: Possible stuck request ffff888026db8400: control (read@2048,1024B). Runtime 180 seconds [ 959.700205][ T1914] block nbd3: Possible stuck request ffff888026db8600: control (read@3072,1024B). Runtime 180 seconds [ 959.746036][T23723] Bluetooth: hci15: command tx timeout [ 959.986358][T23723] Bluetooth: hci18: command tx timeout [ 959.991914][T23723] Bluetooth: hci19: command tx timeout [ 960.866196][T23723] Bluetooth: hci16: command tx timeout [ 960.946227][T23723] Bluetooth: hci17: command tx timeout [ 961.826112][T23723] Bluetooth: hci15: command tx timeout [ 962.066162][T23723] Bluetooth: hci19: command tx timeout [ 962.071563][T16751] Bluetooth: hci18: command tx timeout [ 962.375052][ T5193] udevd[5193]: worker [20097] /devices/virtual/block/nbd3 timeout; kill it [ 962.384006][ T5193] udevd[5193]: seq 37977 '/devices/virtual/block/nbd3' killed [ 962.946288][T16751] Bluetooth: hci16: command tx timeout [ 963.026235][T16751] Bluetooth: hci17: command tx timeout [ 964.145956][T16751] Bluetooth: hci18: command tx timeout [ 964.157477][T16751] Bluetooth: hci19: command tx timeout [ 973.746815][ T30] INFO: task syz.4.4582:23618 blocked for more than 143 seconds. [ 973.754613][ T30] Not tainted syzkaller #0 [ 973.759897][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 973.768853][ T30] task:syz.4.4582 state:D stack:25976 pid:23618 tgid:23617 ppid:17211 task_flags:0x400140 flags:0x00080002 [ 973.780904][ T30] Call Trace: [ 973.784215][ T30] [ 973.787308][ T30] __schedule+0x15dd/0x52d0 [ 973.791884][ T30] ? __lock_acquire+0x6b5/0x2cf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 973.797077][ T30] ? __pfx___schedule+0x10/0x10 [ 973.802012][ T30] ? schedule+0x90/0x360 [ 973.806470][ T30] schedule+0x164/0x360 [ 973.810968][ T30] schedule_preempt_disabled+0x13/0x30 [ 973.816639][ T30] __mutex_lock+0x7fe/0x1300 [ 973.821278][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 973.827144][ T30] ? __mutex_lock+0x5ac/0x1300 [ 973.832015][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 973.837186][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 973.842278][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 973.847755][ T30] ? radix_tree_lookup+0x240/0x290 [ 973.852932][ T30] genl_rcv_msg+0x10b/0x7a0 [ 973.857953][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 973.863031][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 973.868894][ T30] netlink_rcv_skb+0x232/0x4b0 [ 973.873731][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 973.879301][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 973.884657][ T30] ? down_read+0x272/0x2e0 [ 973.889577][ T30] ? genl_rcv+0xd/0x40 [ 973.893702][ T30] genl_rcv+0x28/0x40 [ 973.898133][ T30] netlink_unicast+0x80f/0x9b0 [ 973.902958][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 973.911053][ T30] ? netlink_sendmsg+0x650/0xb40 [ 973.916576][ T30] ? skb_put+0x11b/0x210 [ 973.920883][ T30] netlink_sendmsg+0x813/0xb40 [ 973.925705][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 973.931751][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 973.937174][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 973.942511][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 973.949374][ T30] __sys_sendto+0x672/0x710 [ 973.953944][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 973.959479][ T30] ? fd_install+0x94/0x3d0 [ 973.963956][ T30] ? fd_install+0x306/0x3d0 [ 973.968986][ T30] __x64_sys_sendto+0xde/0x100 [ 973.975064][ T30] do_syscall_64+0x14d/0xf80 [ 974.005894][ T30] ? trace_irq_disable+0x3b/0x150 [ 974.011000][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.036946][ T30] ? clear_bhb_loop+0x40/0x90 [ 974.041747][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.048890][ T30] RIP: 0033:0x7f453bf5cfce [ 974.053366][ T30] RSP: 002b:00007f453ce48e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 974.062309][ T30] RAX: ffffffffffffffda RBX: 00007f453ce4a6c0 RCX: 00007f453bf5cfce [ 974.073030][ T30] RDX: 0000000000000024 RSI: 00007f453ce49000 RDI: 0000000000000008 [ 974.085859][ T30] RBP: 0000000000000000 R08: 00007f453ce48f04 R09: 000000000000000c [ 974.093892][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 974.102202][ T30] R13: 00007f453ce48f58 R14: 00007f453ce49000 R15: 0000000000000000 [ 974.111008][ T30] [ 974.114148][ T30] INFO: task syz.4.4582:23622 blocked for more than 143 seconds. [ 974.122974][ T30] Not tainted syzkaller #0 [ 974.133873][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 974.142730][ T30] task:syz.4.4582 state:D stack:26240 pid:23622 tgid:23617 ppid:17211 task_flags:0x480140 flags:0x00080002 [ 974.155048][ T30] Call Trace: [ 974.158452][ T30] [ 974.161434][ T30] __schedule+0x15dd/0x52d0 [ 974.166124][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 974.171116][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 974.176277][ T30] ? __pfx___schedule+0x10/0x10 [ 974.181196][ T30] ? schedule+0x90/0x360 [ 974.185455][ T30] schedule+0x164/0x360 [ 974.190021][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 974.195619][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 974.201798][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 974.207992][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 974.214193][ T30] nbd_set_size+0x454/0x680 [ 974.218840][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 974.223931][ T30] ? nla_memcpy+0x5b/0xc0 [ 974.228502][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 974.233981][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 974.239823][ T30] ? rcu_is_watching+0x15/0xb0 [ 974.244634][ T30] ? trace_kmalloc+0x2a/0x110 [ 974.249485][ T30] ? __nla_parse+0x40/0x60 [ 974.253928][ T30] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 974.260374][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 974.266094][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 974.272213][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 974.277258][ T30] genl_rcv_msg+0x61c/0x7a0 [ 974.281797][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.286971][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 974.292736][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 974.298008][ T30] netlink_rcv_skb+0x232/0x4b0 [ 974.302793][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.308101][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 974.313448][ T30] ? down_read+0x272/0x2e0 [ 974.318007][ T30] ? genl_rcv+0xd/0x40 [ 974.322112][ T30] genl_rcv+0x28/0x40 [ 974.326245][ T30] netlink_unicast+0x80f/0x9b0 [ 974.331072][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 974.336557][ T30] ? netlink_sendmsg+0x650/0xb40 [ 974.341542][ T30] ? skb_put+0x11b/0x210 [ 974.345968][ T30] netlink_sendmsg+0x813/0xb40 [ 974.350795][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.356487][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 974.361493][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 974.367175][ T30] ____sys_sendmsg+0x972/0x9f0 [ 974.371972][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 974.377356][ T30] ? import_iovec+0x73/0xa0 [ 974.381914][ T30] ___sys_sendmsg+0x2a5/0x360 [ 974.386889][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 974.392139][ T30] ? futex_wake+0x4ac/0x580 [ 974.400003][ T30] ? __fget_files+0x2a/0x420 [ 974.404653][ T30] ? __fget_files+0x3a0/0x420 [ 974.409633][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 974.415694][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 974.421611][ T30] ? rcu_is_watching+0x15/0xb0 [ 974.426675][ T30] do_syscall_64+0x14d/0xf80 [ 974.431346][ T30] ? trace_irq_disable+0x3b/0x150 [ 974.436478][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.442675][ T30] ? clear_bhb_loop+0x40/0x90 [ 974.447544][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.453507][ T30] RIP: 0033:0x7f453bf9c799 [ 974.458051][ T30] RSP: 002b:00007f453ce29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.466764][ T30] RAX: ffffffffffffffda RBX: 00007f453c216090 RCX: 00007f453bf9c799 [ 974.474751][ T30] RDX: 0000000000028080 RSI: 0000200000000640 RDI: 000000000000000a [ 974.484785][ T30] RBP: 00007f453c032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 974.492971][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 974.501026][ T30] R13: 00007f453c216128 R14: 00007f453c216090 R15: 00007fffc30c6628 [ 974.509248][ T30] [ 974.512330][ T30] INFO: task syz.4.4582:23624 blocked for more than 144 seconds. [ 974.520692][ T30] Not tainted syzkaller #0 [ 974.525655][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 974.534470][ T30] task:syz.4.4582 state:D stack:28016 pid:23624 tgid:23617 ppid:17211 task_flags:0x400040 flags:0x00080002 [ 974.546764][ T30] Call Trace: [ 974.550084][ T30] [ 974.553039][ T30] __schedule+0x15dd/0x52d0 [ 974.557665][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 974.562649][ T30] ? __pfx___schedule+0x10/0x10 [ 974.567701][ T30] ? schedule+0x90/0x360 [ 974.571990][ T30] schedule+0x164/0x360 [ 974.576351][ T30] schedule_preempt_disabled+0x13/0x30 [ 974.581855][ T30] __mutex_lock+0x7fe/0x1300 [ 974.586619][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 974.591857][ T30] ? __mutex_lock+0x5ac/0x1300 [ 974.596762][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 974.601506][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 974.606714][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 974.611697][ T30] ? radix_tree_lookup+0x240/0x290 [ 974.616905][ T30] genl_rcv_msg+0x10b/0x7a0 [ 974.621448][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.627400][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 974.632372][ T30] netlink_rcv_skb+0x232/0x4b0 [ 974.637273][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.642338][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 974.647807][ T30] ? down_read+0x272/0x2e0 [ 974.652269][ T30] ? genl_rcv+0xd/0x40 [ 974.656447][ T30] genl_rcv+0x28/0x40 [ 974.660489][ T30] netlink_unicast+0x80f/0x9b0 [ 974.665292][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 974.670779][ T30] ? netlink_sendmsg+0x650/0xb40 [ 974.675757][ T30] ? skb_put+0x11b/0x210 [ 974.680121][ T30] netlink_sendmsg+0x813/0xb40 [ 974.684907][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.690439][ T30] ? __se_sys_ioctl+0x47/0x170 [ 974.695248][ T30] ? do_syscall_64+0x14d/0xf80 [ 974.700147][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 974.705137][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 974.710733][ T30] ____sys_sendmsg+0x972/0x9f0 [ 974.715550][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 974.720922][ T30] ? import_iovec+0x73/0xa0 [ 974.725446][ T30] ___sys_sendmsg+0x2a5/0x360 [ 974.730300][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 974.735538][ T30] ? tomoyo_path_number_perm+0x219/0x630 [ 974.741543][ T30] ? __fget_files+0x2a/0x420 [ 974.746301][ T30] ? __fget_files+0x3a0/0x420 [ 974.751032][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 974.756144][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 974.761634][ T30] ? rcu_is_watching+0x15/0xb0 [ 974.766620][ T30] ? __pfx_kcov_ioctl+0x10/0x10 [ 974.771537][ T30] do_syscall_64+0x14d/0xf80 [ 974.776211][ T30] ? trace_irq_disable+0x3b/0x150 [ 974.781290][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.787633][ T30] ? clear_bhb_loop+0x40/0x90 [ 974.792362][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.798472][ T30] RIP: 0033:0x7f453bf9c799 [ 974.802925][ T30] RSP: 002b:00007f453ce08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.811537][ T30] RAX: ffffffffffffffda RBX: 00007f453c216180 RCX: 00007f453bf9c799 [ 974.819614][ T30] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000005 [ 974.827792][ T30] RBP: 00007f453c032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 974.835899][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 974.843906][ T30] R13: 00007f453c216218 R14: 00007f453c216180 R15: 00007fffc30c6628 [ 974.852278][ T30] [ 974.855370][ T30] INFO: task syz.0.4585:23631 blocked for more than 144 seconds. [ 974.863219][ T30] Not tainted syzkaller #0 [ 974.868710][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 974.877493][ T30] task:syz.0.4585 state:D stack:25760 pid:23631 tgid:23630 ppid:18587 task_flags:0x400140 flags:0x00080002 [ 974.889831][ T30] Call Trace: [ 974.893143][ T30] [ 974.896208][ T30] __schedule+0x15dd/0x52d0 [ 974.900770][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 974.905742][ T30] ? __pfx___schedule+0x10/0x10 [ 974.910924][ T30] ? schedule+0x90/0x360 [ 974.915265][ T30] schedule+0x164/0x360 [ 974.919561][ T30] schedule_preempt_disabled+0x13/0x30 [ 974.925079][ T30] __mutex_lock+0x7fe/0x1300 [ 974.929911][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 974.935160][ T30] ? __mutex_lock+0x5ac/0x1300 [ 974.940050][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 974.944796][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 974.950029][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 974.955027][ T30] ? radix_tree_lookup+0x240/0x290 [ 974.960734][ T30] genl_rcv_msg+0x10b/0x7a0 [ 974.965315][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.970554][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 974.975550][ T30] netlink_rcv_skb+0x232/0x4b0 [ 974.980468][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.985536][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 974.991081][ T30] ? down_read+0x272/0x2e0 [ 974.995550][ T30] ? genl_rcv+0xd/0x40 [ 974.999713][ T30] genl_rcv+0x28/0x40 [ 975.003734][ T30] netlink_unicast+0x80f/0x9b0 [ 975.008689][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 975.014023][ T30] ? netlink_sendmsg+0x650/0xb40 [ 975.019177][ T30] ? skb_put+0x11b/0x210 [ 975.023485][ T30] netlink_sendmsg+0x813/0xb40 [ 975.028663][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 975.034030][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 975.039072][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 975.044405][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 975.049938][ T30] __sys_sendto+0x672/0x710 [ 975.054497][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 975.059706][ T30] ? exc_page_fault+0x6a/0xc0 [ 975.064443][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 975.070124][ T30] __x64_sys_sendto+0xde/0x100 [ 975.074927][ T30] do_syscall_64+0x14d/0xf80 [ 975.079605][ T30] ? trace_irq_disable+0x3b/0x150 [ 975.084674][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.090916][ T30] ? clear_bhb_loop+0x40/0x90 [ 975.095635][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.101636][ T30] RIP: 0033:0x7fdcda55cfce [ 975.106245][ T30] RSP: 002b:00007fdcdb38be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 975.114693][ T30] RAX: ffffffffffffffda RBX: 00007fdcdb38d6c0 RCX: 00007fdcda55cfce [ 975.122778][ T30] RDX: 0000000000000020 RSI: 00007fdcdb38c000 RDI: 0000000000000006 [ 975.130914][ T30] RBP: 0000000000000000 R08: 00007fdcdb38bf04 R09: 000000000000000c [ 975.138986][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 975.147140][ T30] R13: 00007fdcdb38bf58 R14: 00007fdcdb38c000 R15: 0000000000000000 [ 975.155138][ T30] [ 975.158260][ T30] INFO: task syz.1.4586:23640 blocked for more than 144 seconds. [ 975.166267][ T30] Not tainted syzkaller #0 [ 975.171238][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 975.180235][ T30] task:syz.1.4586 state:D stack:24000 pid:23640 tgid:23633 ppid:18016 task_flags:0x400140 flags:0x00080002 [ 975.192425][ T30] Call Trace: [ 975.195740][ T30] [ 975.198770][ T30] __schedule+0x15dd/0x52d0 [ 975.203371][ T30] ? __pfx___schedule+0x10/0x10 [ 975.208433][ T30] ? schedule+0x90/0x360 [ 975.212722][ T30] schedule+0x164/0x360 [ 975.216998][ T30] schedule_preempt_disabled+0x13/0x30 [ 975.222504][ T30] __mutex_lock+0x7fe/0x1300 [ 975.227231][ T30] ? __mutex_lock+0x5ac/0x1300 [ 975.232030][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 975.236878][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 975.241957][ T30] ? radix_tree_lookup+0x240/0x290 [ 975.247223][ T30] genl_rcv_msg+0x10b/0x7a0 [ 975.251759][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 975.256888][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 975.261870][ T30] netlink_rcv_skb+0x232/0x4b0 [ 975.266905][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 975.271970][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 975.277378][ T30] ? down_read+0x272/0x2e0 [ 975.281844][ T30] ? genl_rcv+0xd/0x40 [ 975.286260][ T30] genl_rcv+0x28/0x40 [ 975.290257][ T30] netlink_unicast+0x80f/0x9b0 [ 975.295036][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 975.300464][ T30] ? netlink_sendmsg+0x650/0xb40 [ 975.305456][ T30] ? skb_put+0x11b/0x210 [ 975.309879][ T30] netlink_sendmsg+0x813/0xb40 [ 975.314709][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 975.320110][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 975.325103][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 975.330583][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 975.335986][ T30] __sys_sendto+0x672/0x710 [ 975.340535][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 975.345591][ T30] ? exc_page_fault+0x6a/0xc0 [ 975.350591][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 975.356040][ T30] __x64_sys_sendto+0xde/0x100 [ 975.360862][ T30] do_syscall_64+0x14d/0xf80 [ 975.365653][ T30] ? trace_irq_disable+0x3b/0x150 [ 975.370871][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.377026][ T30] ? clear_bhb_loop+0x40/0x90 [ 975.381723][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.387809][ T30] RIP: 0033:0x7f70c455cfce [ 975.392269][ T30] RSP: 002b:00007f70c27f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 975.401201][ T30] RAX: ffffffffffffffda RBX: 00007f70c27f66c0 RCX: 00007f70c455cfce [ 975.409339][ T30] RDX: 0000000000000020 RSI: 00007f70c27f5000 RDI: 0000000000000008 [ 975.417441][ T30] RBP: 0000000000000000 R08: 00007f70c27f4f04 R09: 000000000000000c [ 975.425457][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 975.433841][ T30] R13: 00007f70c27f4f58 R14: 00007f70c27f5000 R15: 0000000000000000 [ 975.442027][ T30] [ 975.445107][ T30] INFO: task syz.3.4589:23649 blocked for more than 145 seconds. [ 975.453043][ T30] Not tainted syzkaller #0 [ 975.458204][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 975.467039][ T30] task:syz.3.4589 state:D stack:27416 pid:23649 tgid:23647 ppid:16750 task_flags:0x400140 flags:0x00080002 [ 975.479094][ T30] Call Trace: [ 975.482430][ T30] [ 975.485434][ T30] __schedule+0x15dd/0x52d0 [ 975.490172][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 975.495160][ T30] ? __pfx___schedule+0x10/0x10 [ 975.500147][ T30] ? schedule+0x90/0x360 [ 975.504469][ T30] schedule+0x164/0x360 [ 975.509300][ T30] schedule_preempt_disabled+0x13/0x30 [ 975.514848][ T30] __mutex_lock+0x7fe/0x1300 [ 975.519551][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 975.524797][ T30] ? __mutex_lock+0x5ac/0x1300 [ 975.529742][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 975.534460][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 975.539615][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 975.544597][ T30] ? radix_tree_lookup+0x240/0x290 [ 975.549879][ T30] genl_rcv_msg+0x10b/0x7a0 [ 975.554476][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 975.559573][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 975.564558][ T30] netlink_rcv_skb+0x232/0x4b0 [ 975.569578][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 975.574625][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 975.580029][ T30] ? down_read+0x272/0x2e0 [ 975.584478][ T30] ? genl_rcv+0xd/0x40 [ 975.588741][ T30] genl_rcv+0x28/0x40 [ 975.592768][ T30] netlink_unicast+0x80f/0x9b0 [ 975.597692][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 975.603033][ T30] ? netlink_sendmsg+0x650/0xb40 [ 975.608156][ T30] ? skb_put+0x11b/0x210 [ 975.612487][ T30] netlink_sendmsg+0x813/0xb40 [ 975.617605][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 975.622942][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 975.628029][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 975.633357][ T30] ____sys_sendmsg+0x972/0x9f0 [ 975.638227][ T30] ? futex_unqueue+0x211/0x240 [ 975.643036][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 975.648480][ T30] ? import_iovec+0x73/0xa0 [ 975.653025][ T30] ___sys_sendmsg+0x2a5/0x360 [ 975.657800][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 975.663035][ T30] ? futex_wait+0x29a/0x380 [ 975.668048][ T30] ? __fget_files+0x2a/0x420 [ 975.672698][ T30] ? __fget_files+0x3a0/0x420 [ 975.677585][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 975.682558][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 975.688199][ T30] ? rcu_is_watching+0x15/0xb0 [ 975.693013][ T30] do_syscall_64+0x14d/0xf80 [ 975.697697][ T30] ? trace_irq_disable+0x3b/0x150 [ 975.702765][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.708962][ T30] ? clear_bhb_loop+0x40/0x90 [ 975.713672][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.719661][ T30] RIP: 0033:0x7f0cfbd9c799 [ 975.724105][ T30] RSP: 002b:00007f0cfcc8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 975.732900][ T30] RAX: ffffffffffffffda RBX: 00007f0cfc015fa0 RCX: 00007f0cfbd9c799 [ 975.741026][ T30] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 975.749214][ T30] RBP: 00007f0cfbe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 975.757327][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 975.765328][ T30] R13: 00007f0cfc016038 R14: 00007f0cfc015fa0 R15: 00007ffceab92948 [ 975.773532][ T30] [ 975.776738][ T30] INFO: task syz.3.4589:23651 blocked for more than 145 seconds. [ 975.784485][ T30] Not tainted syzkaller #0 [ 975.789716][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 975.798501][ T30] task:syz.3.4589 state:D stack:22936 pid:23651 tgid:23647 ppid:16750 task_flags:0x400040 flags:0x00080002 [ 975.810587][ T30] Call Trace: [ 975.813884][ T30] [ 975.816895][ T30] __schedule+0x15dd/0x52d0 [ 975.821476][ T30] ? __pfx___schedule+0x10/0x10 [ 975.826615][ T30] ? schedule+0x90/0x360 [ 975.830912][ T30] schedule+0x164/0x360 [ 975.835095][ T30] schedule_preempt_disabled+0x13/0x30 [ 975.840873][ T30] __mutex_lock+0x7fe/0x1300 [ 975.845528][ T30] ? __mutex_lock+0x5ac/0x1300 [ 975.850538][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 975.855270][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 975.860406][ T30] ? radix_tree_lookup+0x240/0x290 [ 975.865572][ T30] genl_rcv_msg+0x10b/0x7a0 [ 975.870255][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 975.875321][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 975.880423][ T30] netlink_rcv_skb+0x232/0x4b0 [ 975.885238][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 975.890480][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 975.896023][ T30] ? down_read+0x272/0x2e0 [ 975.900481][ T30] ? genl_rcv+0xd/0x40 [ 975.904574][ T30] genl_rcv+0x28/0x40 [ 975.908723][ T30] netlink_unicast+0x80f/0x9b0 [ 975.913527][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 975.918949][ T30] ? netlink_sendmsg+0x650/0xb40 [ 975.923931][ T30] ? skb_put+0x11b/0x210 [ 975.928388][ T30] netlink_sendmsg+0x813/0xb40 [ 975.933200][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 975.938583][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 975.943561][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 975.949202][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 975.954513][ T30] __sys_sendto+0x672/0x710 [ 975.959168][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 975.964247][ T30] ? exc_page_fault+0x6a/0xc0 [ 975.969084][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 975.974413][ T30] __x64_sys_sendto+0xde/0x100 [ 975.979319][ T30] do_syscall_64+0x14d/0xf80 [ 975.983941][ T30] ? trace_irq_disable+0x3b/0x150 [ 975.989121][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.995228][ T30] ? clear_bhb_loop+0x40/0x90 [ 975.999969][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.006077][ T30] RIP: 0033:0x7f0cfbd5cfce [ 976.010538][ T30] RSP: 002b:00007f0cfcc69e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 976.019038][ T30] RAX: ffffffffffffffda RBX: 00007f0cfcc6b6c0 RCX: 00007f0cfbd5cfce [ 976.027170][ T30] RDX: 0000000000000020 RSI: 00007f0cfcc6a000 RDI: 0000000000000003 [ 976.035210][ T30] RBP: 0000000000000000 R08: 00007f0cfcc69f04 R09: 000000000000000c [ 976.043291][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 976.051359][ T30] R13: 00007f0cfcc69f58 R14: 00007f0cfcc6a000 R15: 0000000000000000 [ 976.059666][ T30] [ 976.062736][ T30] INFO: task syz.2.4590:23654 blocked for more than 145 seconds. [ 976.070684][ T30] Not tainted syzkaller #0 [ 976.075648][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 976.084409][ T30] task:syz.2.4590 state:D stack:27000 pid:23654 tgid:23653 ppid:17729 task_flags:0x400140 flags:0x00080002 [ 976.096487][ T30] Call Trace: [ 976.099776][ T30] [ 976.102716][ T30] __schedule+0x15dd/0x52d0 [ 976.107393][ T30] ? __pfx___schedule+0x10/0x10 [ 976.112299][ T30] ? schedule+0x90/0x360 [ 976.116823][ T30] schedule+0x164/0x360 [ 976.121038][ T30] schedule_preempt_disabled+0x13/0x30 [ 976.126627][ T30] __mutex_lock+0x7fe/0x1300 [ 976.131279][ T30] ? __mutex_lock+0x5ac/0x1300 [ 976.136252][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 976.140992][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 976.146215][ T30] ? radix_tree_lookup+0x240/0x290 [ 976.151380][ T30] genl_rcv_msg+0x10b/0x7a0 [ 976.156060][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 976.161137][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 976.166433][ T30] netlink_rcv_skb+0x232/0x4b0 [ 976.171254][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 976.176507][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 976.181852][ T30] ? down_read+0x272/0x2e0 [ 976.186365][ T30] ? genl_rcv+0xd/0x40 [ 976.190461][ T30] genl_rcv+0x28/0x40 [ 976.194449][ T30] netlink_unicast+0x80f/0x9b0 [ 976.199412][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 976.204743][ T30] ? netlink_sendmsg+0x650/0xb40 [ 976.209805][ T30] ? skb_put+0x11b/0x210 [ 976.214096][ T30] netlink_sendmsg+0x813/0xb40 [ 976.219032][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 976.224382][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 976.229586][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 976.234942][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 976.240396][ T30] __sys_sendto+0x672/0x710 [ 976.244965][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 976.250093][ T30] ? exc_page_fault+0x6a/0xc0 [ 976.254811][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 976.260304][ T30] __x64_sys_sendto+0xde/0x100 [ 976.265123][ T30] do_syscall_64+0x14d/0xf80 [ 976.269820][ T30] ? trace_irq_disable+0x3b/0x150 [ 976.274884][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.281264][ T30] ? clear_bhb_loop+0x40/0x90 [ 976.286015][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.291949][ T30] RIP: 0033:0x7fb4fe55cfce [ 976.296524][ T30] RSP: 002b:00007fb4ff376e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 976.305045][ T30] RAX: ffffffffffffffda RBX: 00007fb4ff3786c0 RCX: 00007fb4fe55cfce [ 976.313332][ T30] RDX: 0000000000000024 RSI: 00007fb4ff377000 RDI: 0000000000000003 [ 976.321538][ T30] RBP: 0000000000000000 R08: 00007fb4ff376f04 R09: 000000000000000c [ 976.329619][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 976.337747][ T30] R13: 00007fb4ff376f58 R14: 00007fb4ff377000 R15: 0000000000000000 [ 976.345772][ T30] [ 976.348944][ T30] INFO: task syz.2.4590:23656 blocked for more than 145 seconds. [ 976.356847][ T30] Not tainted syzkaller #0 [ 976.361823][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 976.370786][ T30] task:syz.2.4590 state:D stack:27968 pid:23656 tgid:23653 ppid:17729 task_flags:0x400040 flags:0x00080002 [ 976.382902][ T30] Call Trace: [ 976.386492][ T30] [ 976.389442][ T30] __schedule+0x15dd/0x52d0 [ 976.393978][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 976.399099][ T30] ? __pfx___schedule+0x10/0x10 [ 976.404000][ T30] ? schedule+0x90/0x360 [ 976.408369][ T30] schedule+0x164/0x360 [ 976.412570][ T30] schedule_preempt_disabled+0x13/0x30 [ 976.418194][ T30] __mutex_lock+0x7fe/0x1300 [ 976.422819][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 976.428217][ T30] ? __mutex_lock+0x5ac/0x1300 [ 976.433024][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 976.437867][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 976.442959][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 976.448079][ T30] ? radix_tree_lookup+0x240/0x290 [ 976.453230][ T30] genl_rcv_msg+0x10b/0x7a0 [ 976.457936][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 976.463013][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 976.468212][ T30] netlink_rcv_skb+0x232/0x4b0 [ 976.473020][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 976.478210][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 976.483553][ T30] ? down_read+0x272/0x2e0 [ 976.488072][ T30] ? genl_rcv+0xd/0x40 [ 976.492189][ T30] genl_rcv+0x28/0x40 [ 976.496563][ T30] netlink_unicast+0x80f/0x9b0 [ 976.501378][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 976.506782][ T30] ? netlink_sendmsg+0x650/0xb40 [ 976.511757][ T30] ? skb_put+0x11b/0x210 [ 976.516192][ T30] netlink_sendmsg+0x813/0xb40 [ 976.521003][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 976.526356][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 976.531328][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 976.536825][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 976.542156][ T30] __sys_sendto+0x672/0x710 [ 976.546941][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 976.552032][ T30] ? exc_page_fault+0x6a/0xc0 [ 976.556971][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 976.562324][ T30] __x64_sys_sendto+0xde/0x100 [ 976.567192][ T30] do_syscall_64+0x14d/0xf80 [ 976.571815][ T30] ? trace_irq_disable+0x3b/0x150 [ 976.577108][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.583218][ T30] ? clear_bhb_loop+0x40/0x90 [ 976.588017][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.593938][ T30] RIP: 0033:0x7fb4fe55cfce [ 976.598579][ T30] RSP: 002b:00007fb4fc7d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 976.607231][ T30] RAX: ffffffffffffffda RBX: 00007fb4fc7d56c0 RCX: 00007fb4fe55cfce [ 976.615210][ T30] RDX: 0000000000000028 RSI: 00007fb4fc7d4000 RDI: 0000000000000004 [ 976.623374][ T30] RBP: 0000000000000000 R08: 00007fb4fc7d3f04 R09: 000000000000000c [ 976.631413][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 976.639585][ T30] R13: 00007fb4fc7d3f58 R14: 00007fb4fc7d4000 R15: 0000000000000000 [ 976.647639][ T30] [ 976.650781][ T30] [ 976.650781][ T30] Showing all locks held in the system: [ 976.658668][ T30] 1 lock held by khungtaskd/30: [ 976.663541][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 976.673652][ T30] 1 lock held by klogd/5182: [ 976.678368][ T30] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 976.688414][ T30] 2 locks held by getty/5583: [ 976.693113][ T30] #0: ffff8880325ad0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 976.703068][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 976.713555][ T30] 1 lock held by udevd/18056: [ 976.718556][ T30] #0: ffff888026d2c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 976.727947][ T30] 1 lock held by udevd/20097: [ 976.732642][ T30] #0: ffff888026d28358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 976.742087][ T30] 2 locks held by syz.4.4582/23618: [ 976.747355][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 976.755557][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 976.764727][ T30] 6 locks held by syz.4.4582/23622: [ 976.769990][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 976.778382][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 976.787449][ T30] #2: ffff888026d39a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 976.797973][ T30] #3: ffff888026d12358 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 976.807463][ T30] #4: ffff888026d11cf8 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 976.819665][ T30] #5: ffff888026d11d30 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 976.832222][ T30] 2 locks held by syz.4.4582/23624: [ 976.837562][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 976.845908][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 976.854936][ T30] 2 locks held by syz.0.4585/23631: [ 976.860340][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 976.868947][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 976.878126][ T30] 2 locks held by syz.1.4586/23640: [ 976.883361][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 976.891783][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 976.900939][ T30] 2 locks held by syz.3.4589/23649: [ 976.906214][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 976.914449][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 976.923599][ T30] 2 locks held by syz.3.4589/23651: [ 976.928864][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 976.937406][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 976.946654][ T30] 2 locks held by syz.2.4590/23654: [ 976.951884][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 976.960265][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 976.969418][ T30] 2 locks held by syz.2.4590/23656: [ 976.974638][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 976.983004][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 976.992105][ T30] 2 locks held by syz-executor/23660: [ 976.997680][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.005989][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.015028][ T30] 2 locks held by syz-executor/23664: [ 977.020613][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.028903][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.038080][ T30] 2 locks held by syz-executor/23667: [ 977.043472][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.051973][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.061114][ T30] 2 locks held by syz-executor/23675: [ 977.066570][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.074805][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.083928][ T30] 2 locks held by syz-executor/23681: [ 977.089361][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.097784][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.106999][ T30] 2 locks held by syz-executor/23709: [ 977.112375][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.120690][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.129848][ T30] 2 locks held by syz-executor/23719: [ 977.135228][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.143595][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.152680][ T30] 2 locks held by syz-executor/23720: [ 977.158380][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.166690][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.175668][ T30] 2 locks held by syz-executor/23734: [ 977.181233][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.189534][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.198694][ T30] 2 locks held by syz-executor/23736: [ 977.204091][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.212399][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.221617][ T30] 2 locks held by syz-executor/23760: [ 977.227092][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.235318][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.244444][ T30] 2 locks held by syz-executor/23770: [ 977.249912][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.258259][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.267487][ T30] 2 locks held by syz-executor/23772: [ 977.272863][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.281198][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.290308][ T30] 2 locks held by syz-executor/23782: [ 977.295708][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.304113][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.313186][ T30] 2 locks held by syz-executor/23783: [ 977.318666][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 977.327030][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 977.336195][ T30] [ 977.338546][ T30] ============================================= [ 977.338546][ T30] [ 977.347180][ T30] NMI backtrace for cpu 0 [ 977.347198][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 977.347221][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 977.347234][ T30] Call Trace: [ 977.347244][ T30] [ 977.347253][ T30] dump_stack_lvl+0xe8/0x150 [ 977.347286][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 977.347312][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 977.347343][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 977.347375][ T30] sys_info+0x135/0x170 [ 977.347398][ T30] watchdog+0xfd9/0x1030 [ 977.347437][ T30] ? watchdog+0x21a/0x1030 [ 977.347477][ T30] kthread+0x388/0x470 [ 977.347499][ T30] ? __pfx_watchdog+0x10/0x10 [ 977.347529][ T30] ? __pfx_kthread+0x10/0x10 [ 977.347552][ T30] ret_from_fork+0x51e/0xb90 [ 977.347583][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 977.347611][ T30] ? __switch_to+0xc7d/0x1450 [ 977.347639][ T30] ? __pfx_kthread+0x10/0x10 [ 977.347666][ T30] ret_from_fork_asm+0x1a/0x30 [ 977.347732][ T30] [ 977.347741][ T30] Sending NMI from CPU 0 to CPUs 1: [ 977.457868][ C1] NMI backtrace for cpu 1 [ 977.457885][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 977.457904][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 977.457916][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 977.457948][ C1] Code: 6e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 b0 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 977.457964][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 977.457980][ C1] RAX: 00000000003bfbcf RBX: ffffffff819a88ed RCX: 0000000080000001 [ 977.457993][ C1] RDX: 0000000000000001 RSI: ffffffff8def7f4f RDI: ffffffff8c27b200 [ 977.458006][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 977.458019][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901141b0 [ 977.458033][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 0000000000000001 [ 977.458045][ C1] FS: 0000000000000000(0000) GS:ffff888125565000(0000) knlGS:0000000000000000 [ 977.458059][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 977.458071][ C1] CR2: 00007f6095485998 CR3: 000000007ef40000 CR4: 00000000003526f0 [ 977.458087][ C1] Call Trace: [ 977.458095][ C1] [ 977.458102][ C1] default_idle+0x9/0x20 [ 977.458120][ C1] default_idle_call+0x72/0xb0 [ 977.458141][ C1] do_idle+0x1bd/0x500 [ 977.458165][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 977.458194][ C1] ? __pfx_do_idle+0x10/0x10 [ 977.458224][ C1] cpu_startup_entry+0x43/0x60 [ 977.458248][ C1] start_secondary+0x101/0x110 [ 977.458269][ C1] common_startup_64+0x13e/0x147 [ 977.458302][ C1] [ 977.625978][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 977.632863][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 977.641974][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 977.652045][ T30] Call Trace: [ 977.655328][ T30] [ 977.658263][ T30] vpanic+0x56c/0xa60 [ 977.662285][ T30] ? __pfx___schedule+0x10/0x10 [ 977.667148][ T30] ? __pfx_vpanic+0x10/0x10 [ 977.671661][ T30] ? __pfx_console_unlock+0x10/0x10 [ 977.676886][ T30] panic+0xc5/0xd0 [ 977.680664][ T30] ? __pfx_panic+0x10/0x10 [ 977.685124][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 977.690528][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 977.696694][ T30] watchdog+0x1023/0x1030 [ 977.701039][ T30] ? watchdog+0x21a/0x1030 [ 977.705469][ T30] kthread+0x388/0x470 [ 977.709542][ T30] ? __pfx_watchdog+0x10/0x10 [ 977.714230][ T30] ? __pfx_kthread+0x10/0x10 [ 977.718825][ T30] ret_from_fork+0x51e/0xb90 [ 977.723435][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 977.728561][ T30] ? __switch_to+0xc7d/0x1450 [ 977.733267][ T30] ? __pfx_kthread+0x10/0x10 [ 977.737878][ T30] ret_from_fork_asm+0x1a/0x30 [ 977.742681][ T30] [ 977.746328][ T30] Kernel Offset: disabled [ 977.750660][ T30] Rebooting in 86400 seconds..