last executing test programs: 18.622548043s ago: executing program 1 (id=1626): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0xf, 0x12) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x8}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) 18.48803144s ago: executing program 0 (id=1629): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x66}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)=@flushpolicy={0x38, 0x12, 0x105, 0x4, 0x25dfdbfb, "", [@address_filter={0x28, 0x1a, {@in=@local, @in=@private=0xa010100, 0xa, 0x7, 0x10}}]}, 0x38}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000201}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044901}, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000207010200000000000700"/26], 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x0) 18.376565353s ago: executing program 4 (id=1632): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r1}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xf, 0x0, &(0x7f0000000200)="63eced8e46dc3f869a91a7644e52fe", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.182353093s ago: executing program 0 (id=1634): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x3, 0x4, 0x20, @private2, @empty, 0x8000, 0x40, 0x733a, 0x2}}) getpeername$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'veth0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000780)={@mcast1, 0x0}, &(0x7f00000007c0)=0x14) getpeername$packet(r3, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000840)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x80, 0x6, 0x0, 0x0, @local, @mcast2, 0x8, 0x7800, 0x5, 0xdb}}) r17 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r17, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r18, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f00000009c0)={'gre0\x00', 0x0, 0x10, 0x1, 0x8b, 0x7cb, {{0x6, 0x4, 0x1, 0x17, 0x18, 0x68, 0x0, 0x0, 0x4, 0x0, @multicast1, @broadcast, {[@end]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000c40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={0x1bc, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xaf973482216515b4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000004}, 0x8800) sendto$packet(r3, &(0x7f0000000000)="2e12cee8672c275c3c67398a0fbf316671c6c3938865a81c142008bf73d0e5c7a54fea90bfd6b575370d0f8c07dbf06ec3d5895b", 0x34, 0x840, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0xa17, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0xc915) 18.064465944s ago: executing program 3 (id=1637): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x80}, {0x6}]}, 0x10) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0xf, 0xff, 0x80, 0x1e, @dev={0xfe, 0x80, '\x00', 0x27}, @private0, 0x10, 0x8, 0x1ff, 0x8}}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@deltfilter={0x309c, 0x2d, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfffe}, {0x8, 0xd}, {0xd, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x1628, 0x2, [@TCA_BASIC_EMATCHES={0x1240, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x5, 0x0, 0xfffb}, "e30713c427ec255164b880f7607dc69b1e3dc0f43db92cc658a4aa789225dabb9f0764ddbb78fccf2124d39cd0bd4b38096eff69d75e98b7007f443bcdc3fe8b33a3e3806419893abd6ae99f248bd81cd623f7ff3fcf73d33bdbdea0"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6592, 0x7, 0x8}, {{0x2, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x11c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="23ba7dd4a149"]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="5a2ae27c8bd437cc7be9", @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x1}, {0x1, 0x400, 0xfffffffb, 0x400}}}, @TCF_EM_IPT={0x48, 0x1, 0x0, 0x0, {{0x3ff, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x32, 0x5, "0cb9f9cc6d1c5da8372c3c00198ef5ab99f98dcc3cd5d0b7a65d442ea4df0078bcec37e396e203f7c61e41e4727f"}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9b, 0x7, 0x6}, {{0x3, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x58, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x31}, "45cf75a2d781e6ffbe87d3c0d28576a6b3eb2198f94034cbf60030ece55910271041a34cd4d2b7a0b9988afce94fdcf0577ebce81badfbaf2ddad57240230bff5dc649203018c6a22e"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8000, 0x3, 0xf500}, {0xfffffff9, 0xa86, 0x8, 0xfffffff8}}}]}, @TCA_EMATCH_TREE_LIST={0x10a0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x80, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1000}, [@TCA_EM_META_LVALUE={0x37, 0x2, [@TCF_META_TYPE_VAR="853153f644", @TCF_META_TYPE_VAR="b5aa320040b8ba", @TCF_META_TYPE_VAR="d7e2d8", @TCF_META_TYPE_VAR="59e9cb", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="c3180a", @TCF_META_TYPE_VAR="cb640ff7c1e75b92816b", @TCF_META_TYPE_VAR="1256c8a9e1ccc9f4"]}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR="d66a", @TCF_META_TYPE_VAR="20b193316d4c03122812", @TCF_META_TYPE_VAR="86b6d40d0f56efb2", @TCF_META_TYPE_VAR="99ffed7d", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x3, 0x2}, {0x8, 0xec, 0x2}}}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="e24bfa", @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x101}, {0xffffffffffffffff, 0x3, 0x7}}}, @TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0x40, 0x0, 0x3ed0}, "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"}}]}]}, @TCA_BASIC_EMATCHES={0x3e4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xfff, 0x7, 0x4}, {{0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x2}, {0x4, 0x200, 0x10, 0x8}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2}, {0xca5, 0x0, 0x8, 0x2, 0x2, 0x3}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7}, {0x5, 0xe14, 0x2, 0x5, 0xf, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x36d, 0x3, 0xe}, {0x858, 0xd, 0xfff, 0x6}}}]}, @TCA_EMATCH_TREE_LIST={0x180, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe8, 0x2, 0x0, 0x0, {{0x8, 0x0, 0x5}, "afb26aa44007b6c2fe21ccc3454e639fde15b73b49710c92fa0be2a1a3465644ba47784ed2f98e48e42bc9f3f15c937ebc8a1001febce97406d46bfb91a95856ba897b1962e1116da19d9afc972cb88a0d0d5d7fdbaae312b78535e7a9ad7b57cfaf7d6e4a8916eeda7c32d358462b0925d503616f6cf6867f99a1fedb528fe9954c9311d6681df8b6793d4ca00764e6b5375dcf177e22d2ea5a9839dc7a6f15caf455ec3a0dce4f7d0da78f99addca68cd7ecbbb38bc6c12b4ec88c41a768e8fc59038f869e5ff575f2eb4e4a07b426dee5d63d8a31ff628693bb13"}}, @TCF_EM_META={0x2c, 0x2, 0x0, 0x0, {{0x7, 0x4, 0xe}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="d9", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR="1ba84210f941", @TCF_META_TYPE_VAR="b5"]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x8}, {{0x3, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x7fff}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{}, {{0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0xf800}, {0xf42, 0x10, 0xfff, 0x4, 0x5, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x65e8}, {0x7, 0x9, 0x2, "e24864ead055145481"}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x8001}, {0xffffffffffffffff, 0x6, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x1b4, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x9, 0x2, 0x322f}, {0x1ff, 0x1, 0x0, 'r'}}}, @TCF_EM_CONTAINER={0xd0, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x9}, "36d17bb0b5a10984bfc502eded09040f9ac685dbf475b7a305c945138120f65b7e9aa07f5b4f2efa1a59fb60316d2be3f9407f0d3101263fbae8fb8c800c8265ac09b375e8ec8fd59b1af3ca53b8260967dd8978ebea938c948e80d6819a77b20d2544d903f9b8c850023a5da4a501a54cfe55f1100fe5e0011b5af353f3079da9a7079421c329e90c2cba97110c74718b83c6c9573ec9360e762dee60695c61211e4b90c8f308727f0d33ed811027aa9eb57200345aadc6b1f9e27b6e49c10fecb5abc0"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xae31, 0x1, 0x80}, {0x3, 0xde, 0x3, 0x0, 0x2}}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x101}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR="3f99", @TCF_META_TYPE_VAR="be139ea1", @TCF_META_TYPE_VAR="4eb1449fb768b6", @TCF_META_TYPE_VAR="a08f76", @TCF_META_TYPE_VAR='!', @TCF_META_TYPE_VAR="16174327c568aa", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8b6c, 0x4e, 0x2}, {0x0, 0xe, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x11f9}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x80}, {0x0, 0xfffffffc, 0x9, 0x3, 0x2, 0x0, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x8d2}, {0x7, 0x6, 0x8, 0x1, 0x0, 0x3, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7ff, 0x7, 0x3d52}, {{0x3, 0x1, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xb, 0x8, 0x6}, {0x2, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0x1a38, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x2, 0xb7, 0x8, 0x3, {0x7, 0x2, 0x0, 0x5, 0x1, 0x4}, {0xc3, 0x0, 0x80, 0x9, 0x1, 0x7}, 0x1, 0x30c0, 0xfffffffa}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe7, 0x781321c3f4d709c4}}, @TCA_BASIC_POLICE={0x41c, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffa, 0x6, 0x3, 0x0, 0x7fff, 0x4, 0x6, 0x10, 0xc, 0x2, 0xdd2f, 0x401, 0x5, 0x10, 0x2, 0x2, 0x8, 0x0, 0x8, 0x6, 0xd, 0x7, 0x8, 0x40, 0x700000, 0x11, 0x6, 0x9, 0x1cc7, 0x7, 0x101, 0x77, 0xeb5, 0x7a3af53f, 0xfffff0c5, 0xc0ab, 0x6, 0x2, 0x8, 0x0, 0x264, 0x10, 0x7, 0x7, 0x1, 0x4000, 0x10000, 0x800, 0x40, 0x3, 0x1000, 0x2, 0xc59, 0x800, 0x1, 0x1, 0x8, 0x9, 0x2, 0x0, 0x9, 0x2, 0xa2, 0xfffffffe, 0x1f3, 0x6, 0x1, 0xb, 0xa84, 0x2, 0x1, 0x80000000, 0x5, 0xfff, 0x46c, 0x80000000, 0x1, 0x1000, 0x3, 0x2, 0x10, 0x3, 0x2, 0x9a, 0x5, 0x2, 0x3, 0x7, 0x8, 0xffffff01, 0xf, 0x80000001, 0xaad3, 0xfffffffa, 0x40, 0x6, 0xffffea5c, 0xffff, 0x7, 0x2, 0x8, 0x7, 0x81, 0xfffffffe, 0x5, 0x4, 0x6, 0x2, 0x0, 0x8001, 0xd, 0x8, 0x7ff, 0x9, 0x5, 0xe3f, 0x1ff, 0x4db, 0x1, 0x7, 0xfffffffc, 0x7ef, 0x6, 0x3, 0x2, 0x7, 0x1, 0x40, 0x1, 0x80000000, 0x3, 0xfff, 0x80000001, 0x7fff, 0xfffffff7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x7, 0x9, 0x4, 0x5, 0x75, 0x46, 0x9ad, 0x6, 0x81, 0xb1, 0x5, 0x2, 0xe, 0xee, 0x8001, 0xd, 0x8, 0x200, 0x0, 0xffffffff, 0x2, 0x0, 0x5, 0xffffffff, 0x9, 0x7, 0xffd5, 0x7, 0x9, 0x10001, 0x5, 0x4, 0xfff, 0x2, 0x1, 0x5, 0x0, 0x3, 0x1, 0x6, 0x800, 0x24, 0x4787, 0x0, 0x3, 0x7, 0x7ff, 0x2, 0x3957, 0xcae, 0x9a7, 0x1, 0x4, 0x2, 0xfffffffc, 0x83, 0x2, 0x35c, 0x4, 0x8001, 0x4, 0x9c, 0x3, 0x2, 0x7, 0x401, 0x34f1, 0x81, 0x5, 0x2, 0xc129, 0xfa0e, 0x605, 0xf4, 0x3, 0x61, 0x2, 0x2, 0x6, 0x6, 0x576, 0xf, 0x6, 0x2, 0x2, 0x2, 0x1, 0x81, 0x7fff, 0xfffffffa, 0x3, 0x5, 0x5, 0x6, 0xd3, 0x2, 0x4, 0xfffffffc, 0x9, 0x7, 0x8, 0x0, 0x10, 0x9, 0x0, 0x7ff, 0x0, 0x3, 0xffff, 0x0, 0x81, 0x7, 0x10001, 0x2, 0x1, 0xfffffffd]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0x5}}, @TCA_BASIC_EMATCHES={0x15c8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{0x5, 0x4, 0xf27d}, [@TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='H']}]}}, @TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x5567, 0x0, 0x8}, "49e940"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1ec, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x100}, {0x965, 0x6, 0x2, "2e1e3d28ebc5"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9}, {{0x4, 0x0, 0x0, 0x1}, {0x3}}}}, @TCF_EM_META={0x54, 0x1, 0x0, 0x0, {{0x2040, 0x4, 0x76d}, [@TCA_EM_META_RVALUE={0x2a, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="7dea68f12624f147", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="647e49999ebf4640537c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x1, 0x1}, {0x0, 0x64, 0x2}}}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="16df", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_IPT={0x168, 0x2, 0x0, 0x0, {{0xb0, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_DATA={0x27, 0x5, "ea857a12fa3e72123c7ea11722d86f16f6e08a0a851404fc5993a0aa1a5b3d7e23f7d4"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xf7, 0x5, "6026e4769d47501e560520250e78dd5a8a804ce3551298337e039d07a0d986d5e211d2045ece8ab7f2f39e79bf2eb9f20d215f0cba23998ff67fcd0dc037839241c2f7bdd22194447c6b082433bd5481177cb35d2a811b7148d5d2c54787cfbb2c991848f6239b4938a5532b553cee9c515e1608baab30fa7cb7ef2a687142d2a802e0bdfb67c6c0e8c37797fd5309adca724397eb46956df22b4f49435713bf10da5f4604a81fb43fc85d8078e4d79afee4fd2b4222663f5d3b326f798686a2ff4c541d055a9b7b80f8c6001d1749aef21756523f1cadb1473f985db35ad2d564da41897be8807f260de7b300be39eab6fbd6"}]}}]}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x38, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xf47f}, "c8e04abb9f74d7c36b0dad74639a8464bd1598b94d59c282b39a3903e5ebe73c7cec73fe1679bc0acb"}}]}, @TCA_EMATCH_TREE_LIST={0x121c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1134, 0x1, 0x0, 0x0, {{0xfffa, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_DATA={0xfd, 0x5, "f480cfb4a410b0e9ce1eacf09e072c31b122c5eade510cc883f0e4b15594e7c773ef60d227578d7783085072cb448e7b698037afa155a972f3313694854cf08325798663042ca02dd6c1e184e454b3337fcb305a2e94d760c5bb0c46f7c77887e5abf779461acd0cddba90a7144a5e1a76b88532dcb3227bcd1c02a1707bfb9da557c4fd575e3399c2942710a0beeea9ced3e4db00085dcd31daced4f04293f523e39843b2ec92dcb800d2e822f46c63c75947e4e0a4a0d9cbba981bc11cdd96ee9f4bfe2eab1ef23bcc7c9e2b999b3f51ea6c3198faddad7fa33028d537ef71e45b22b12fe470f66d5181e8cc92b724d66609e8729f68c92c"}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xe8}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}]}}, @TCF_EM_CONTAINER={0x54, 0x2, 0x0, 0x0, {{0x9, 0x0, 0xa182}, "1e38164dbdfc2a1511eeeeb82ae2e9578c9a8db9b3e5dd0cb855d32510c7d82adc1f471d821572747c78b5f6f40648a5a1f212b407a161da7a5af91e851f35f092643e81e54cb790"}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x550}, {0x1, 0x4, 0x1, "6759e314"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6a9, 0x1, 0x6}, {0x10001, 0xeb, 0x13, 0x2, 0x4, 0x2, 0x1}}}, @TCF_EM_CONTAINER={0x14, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x9}, "4820a07a474bb0"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xe77b, 0x3, 0x4000}, {0x1, 0x200, 0xff, 0x7}}}, @TCF_EM_CONTAINER={0x34, 0x2, 0x0, 0x0, {{}, "f14e6a119866f8b62784031dc25dd06a6ab3678d1b7092d2f76a6cdae5a26a5dd5e382f747f4"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x58, 0x3, 0x0, 0x0, {{0x0, 0x0, 0xffff}, "c11b4c76467187492f9f945a2cc5a1a913d39c5a96406637b7b2fb9227d6cdf36aa9c1c968165c90cff5926da42164b5acf126d263d8a9d4ef88eadb280a27c7f464aa8dc0d193f1dab6"}}, @TCF_EM_IPT={0xb0, 0x3, 0x0, 0x0, {{0x3, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x8f, 0x5, "79707ab4b60f1436bbc876bb1b9e5063071837223d413a22bd48628c762c584408604a5a6ebeeda5812b9f5e5043c914b5d238a28ad7fdd5e7d52509c31475484599ec935f958bd5df3a2436d0d254a65233149267f8417818f59feed151384518fa2adfe01395310ebd4a34e8b6367ea3ba7b476c003a80fa937a6222a930877f3aba6a2d1e97320e42f0"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x1ff}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x309c}}, 0x2000000) 17.986676881s ago: executing program 0 (id=1638): socket(0x3, 0x80005, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) 17.898638846s ago: executing program 3 (id=1639): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x9) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@union={0xe, 0x2, 0x0, 0x5, 0x0, 0x64c0, [{0xb, 0x0, 0x4}, {0x6, 0x1, 0x9}]}]}, {0x0, [0x5f, 0x61, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000480)=""/153, 0x43, 0x99, 0x1, 0x6}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000001b80)={{0x0, 0x8, 0x7, 0x5, 0x7, 0x6, 0x1, 0x42de1e82, 0x58bf, 0x40, 0xffffffff, 0x8, 0xffff, 0x4, 0x1}, 0x18, [0x0, 0x0, 0x0]}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r6 = accept$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a00)=0x14) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x7, &(0x7f0000000600)=@raw=[@jmp={0x5, 0x0, 0x2, 0x0, 0x9, 0x40, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000640)='GPL\x00', 0x4d5e, 0x2e, &(0x7f0000000680)=""/46, 0x41100, 0x19, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xf, 0x8, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000780)=[{0x0, 0x5, 0xf, 0x5}], 0x10, 0x3}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x19, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xb44e, 0x0, 0x0, 0x0, 0xb}]}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0xfc, &(0x7f0000000280)=""/252, 0x41000, 0x2a, '\x00', r2, @cgroup_sockopt=0x15, r3, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x9, 0x2, 0xfffffff9}, 0x10, 0x0, r7, 0x4, &(0x7f0000000880)=[0x1, r8], &(0x7f00000008c0)=[{0x0, 0x4, 0xe, 0xa}, {0x3, 0x4, 0x8}, {0x1, 0x2, 0x10}, {0x5, 0x3, 0x4, 0x9}], 0x10, 0x4}, 0x94) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 17.710144574s ago: executing program 0 (id=1640): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect(r1, &(0x7f0000000300)=@ethernet={0x1, @multicast}, 0x80) (async) getsockname(r0, &(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000280)=0x80) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x805) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xfa, "73d0faf090f556d835ef9f2f77fb53a0f7593a518e48a0178b97714c96255f29e4f834fb699488072ad31830bae5000ff10dd24d3be52a809d4fac495e777babd9599c9c3c31df5b749da0e8f6639fe51e15103004c77f1c25041c1ec2e5da0834920a48d9bd9f13e90ef123393acb9f1dab7ec3d6c9a75ffc61e6110c532747cefcf899f62843fda6cf7dc04988ef2fcd79cb47bb6d2a4aabcce8c60d819343099c7cc66e0a359cb22f573613d0e8d956f914b80f418f93efa2a2495c7511c566358f9d937e28ba2dd70711b7ce8bb491ecd25c037a2776c98e49baa54592592f866edd6d99c8db328a9155a2b539b469acdfb0d34e89ec5de2"}, &(0x7f0000000040)=0x102) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x401}, &(0x7f00000000c0)=0x8) (async) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000400)={@null, 0x2, 'ipvlan0\x00'}) 17.433989984s ago: executing program 4 (id=1641): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x40, 0x2, 0xfd, 0x2, 0x5, 0x2768}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380980003801400010076657468305f746f5f68737200000000080007400000ae"], 0xd8}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) socket$nl_rdma(0x10, 0x3, 0x14) 17.306949744s ago: executing program 1 (id=1642): syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0xfa6945ea81e9f82c, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0xd}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x66}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) syz_emit_ethernet(0xc2, &(0x7f0000000180)={@local, @local, @val={@void, {0x8100, 0x2, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0x4e20, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "899bf5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {'\x00\x00 \x00\x00\x00\x00\r\x00', "d8e4ad6fc1d3b573e94331d0b791a724"}}}}}}}, 0x0) 17.298818659s ago: executing program 3 (id=1643): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.298048598s ago: executing program 2 (id=1644): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000b2cf0001002abd7000ffdbdf250200000075599757955fe7a33fc648ebfc817f78d51a2ac49caded21"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r8, 0x4040942c, &(0x7f0000000140)={0x0, 0x80000001, [0x0, 0x0, 0x6, 0x1, 0x0, 0xa]}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f806df250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) write$nci(r8, &(0x7f0000001480)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x81, @f={0xf8, 0x2, 0x3, 0x2, 0x0, 0x4, 0x2, {0x9, 0x100, "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"}, 0x7f, 0x3, 0xb2, 0x1}}, 0x111) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r12, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x259fdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x5, 0xffff}, {0xffe0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0x7}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xc, 0xb1a3, 0x5, 0x1, 0x98fa, 0x2, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) 17.277811924s ago: executing program 4 (id=1645): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'dummy0\x00', @random="0100002010ff"}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000010001ffd26bd7000fedbcf2500400040", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b00010067656e657665000034000280050004000100000005000900010000000800010000000000060005004e20000005000c0001000000060005004e20000008000a00", @ANYRES32=r2, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 17.212375889s ago: executing program 0 (id=1646): syz_emit_ethernet(0x33, &(0x7f0000000200)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="0b80d010da6a6a3cd6"}}}}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendto$packet(r1, &(0x7f0000000100)="527c5ff67055645b8bbf0b691fc5cf52059ce4dff7649ac4e4dc2a3e783e082d5d7f5afddb538ff5f06931e6a7d0df28109ce250a124e59354f624561e90550f17b61d510d53785e6386852f13c7fb186e08e484171c5c4b03670b1b6c48450ea66be8a3e913552e583973e4517a65c19ff8a46fb5cdd36e71cfc6b4e5ed50cd682110c74c00022d0bcc5756a8ca43618ef5b9968045322246842a9893a0876501eac96b3e8d0e7f74788036cbf0d83cc034ea76e07d28", 0xb7, 0xc090, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}]}, 0x3c}}, 0x0) (async) syz_emit_ethernet(0xfc0, &(0x7f0000000000)=ANY=[], 0x0) 17.150948179s ago: executing program 1 (id=1647): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000008000)=@newtfilter={0x24, 0x2c, 0x40c, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xf}, {0x5, 0x3}, {0x10, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x10) getsockopt$MRT(r1, 0x0, 0xcf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x6, 0x9, 0x0, 0x0, @str='$\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x10, 0x1403, 0x1}, 0x10}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000680)={0x18, r7, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x400}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4}]}}}]}, 0x64}}, 0x0) 17.149252298s ago: executing program 3 (id=1648): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x34, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_IFNAME={0x14}]}, 0x34}}, 0x0) r5 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unshare(0x28000600) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) splice(r7, 0x0, r6, &(0x7f0000000080), 0x2006, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r10, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r10, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4158850, r9, 0x0) 17.034410346s ago: executing program 0 (id=1649): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x330, 0x0, 0x298, 0x0, 0x298, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x32, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@empty, @local, 0x0, 0xff, 'veth0_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x14}, @multicast1, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x57}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000800)={'gretap0\x00', 0x0, 0x0, 0x80, 0x7, 0x1, {{0x30, 0x4, 0x2, 0x9, 0xc0, 0x67, 0x0, 0xd3, 0x4, 0x0, @multicast1, @local, {[@timestamp={0x44, 0xc, 0xce, 0x0, 0x3, [0x800, 0xffffffff]}, @cipso={0x86, 0x45, 0xffffffffffffffff, [{0x5, 0x12, "cbb6d1f35f857f291a41207b18d379e3"}, {0x3d8411fb7b1009b, 0xd, "23e7ba29557df592352530"}, {0x1, 0x6, "1774ac73"}, {0x5, 0x8, "2e826a354d64"}, {0x1, 0xf, "292f68750621730a33f1223c69"}, {0x7, 0x3, '\''}]}, @timestamp={0x44, 0x18, 0x85, 0x0, 0x2, [0xb99, 0x693, 0x5, 0x7fffffff, 0xa854]}, @lsrr={0x83, 0x37, 0x5c, [@private=0xa010102, @local, @rand_addr=0x64010100, @loopback, @multicast2, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010102, @multicast2, @multicast2, @remote, @multicast1]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x3}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', r3, 0x4, 0x0, 0x4, 0xd13c00, 0x15, @empty, @mcast1, 0x40, 0x7800, 0x6, 0x3}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x7ffffffffffffffe, 0x3ff}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x20000800) listen(r1, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r8) connect$unix(r1, &(0x7f0000000580)=@file={0x0, '.\x00'}, 0x6e) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000500)={'icmp\x00'}, &(0x7f0000000540)=0x1e) 17.026785879s ago: executing program 4 (id=1650): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb28d7f15973e0ed7283f14b912685e684c42b9eeb9", 0x29) 16.939855322s ago: executing program 3 (id=1651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x2, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x44000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x18, 0x20, 0x601, 0x70bd2c, 0xfffffffc, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}]}, 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x22d6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}]}, 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x100, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x34, r6, 0x2799f5eec7981083, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev}, &(0x7f00000002c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2d, 0x6, 0x10, 0xb, 0x20, @dev={0xfe, 0x80, '\x00', 0x41}, @private0, 0x20, 0x7800, 0x584, 0xa8}}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000880)={0xcc, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x406c801}, 0x850) 16.930369465s ago: executing program 4 (id=1652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001140)=@delneigh={0x30, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x80}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x804) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4044001) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/time_for_children\x00') sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x68, 0x3e, 0x107, 0x70bd27, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0x4, 0xf9}, @generic="f204af20d0a9e113722adbc1cd90bd90ece533cc28c7c091d95cd9ad6ddc65d3024739c79c8eb796f8ff25e6c7cb52bf6a1b9d6ff384", @nested={0x18, 0x2, 0x0, 0x1, [@generic="725eb862cec9a478ce2057c5241935e6782507e2"]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 16.883152188s ago: executing program 3 (id=1653): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r0, 0x200) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1}, 0x4}], 0x1, 0x0, 0x0) recvfrom(r1, &(0x7f0000000380)=""/49, 0xfec6, 0x10022, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) (async) r5 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, 0x0) (async) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x119, 0x487, 0x0, &(0x7f0000000480)) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400bda10000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4020040}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e00000000000000009dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 16.839238102s ago: executing program 4 (id=1654): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pwritev(r0, &(0x7f0000000000), 0x0, 0x80000000, 0xf) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000040)=""/233, &(0x7f0000000140)=0xe9) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @dev}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x6c, 0x14, 0x400, 0x70bd28, 0x25dfdbff, {0x2, 0x8, 0x68, 0xfe, r2}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LABEL={0x14, 0x3, 'syzkaller1\x00'}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000894}, 0x20044004) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r4) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000380)) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r6, 0x400, 0x70bd29, 0x7, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r3, r3, &(0x7f0000000540)=0x10001, 0x9) socket$inet6(0xa, 0x80000, 0x2c) ioctl(r0, 0x2, &(0x7f0000000580)="b8fa86646d0a51ef669edf6ca386b10484518dcd80f74d65ec49d458eaf4cd06b5ab1b7b2091d5c4f2a78f0496ee5a9a6b051d105790887788f650ae1fe1a635685bfec046c540162449973058b5ddc45ff2a2a298bd5c9ea3be73f9271b86b128646874a89d747a8761e5cfae45227c1fe5b619fa9dcef8fb7bf14e1e71f4c9a05899140be0518981bfdda09805d822ddb95d1d0ac6788b36a1de30a0b4895d76e0c84671f5b1072f3b0f107f0a1f9d8ee230566fac73d24a596c") r8 = socket$unix(0x1, 0x5, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000640)={r2, 0x1, 0x6, @random="9372dae0c850"}, 0x10) getsockopt(r3, 0x5, 0x8, &(0x7f0000000680)=""/24, &(0x7f00000006c0)=0x18) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a80)=@generic={&(0x7f0000000a40)='./file0\x00', 0x0, 0x8}, 0x18) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file0\x00', 0x0, 0x8}, 0x18) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0xa27b, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c40)={0xffffffffffffffff, 0xfffffffb, 0x8}, 0xc) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)=@o_path={&(0x7f0000000c80)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x3, 0x2d, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5fcb, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@btf_id={0x18, 0x17, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41906a9f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xaa9}, @alu={0x4, 0x1, 0x1, 0x1, 0x9, 0x6, 0x4}, @jmp={0x5, 0x0, 0xb, 0x8, 0x6, 0x4633af8264950029, 0x10}, @call={0x85, 0x0, 0x0, 0xc4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='GPL\x00', 0x2, 0x86, &(0x7f0000000940)=""/134, 0x40f00, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r10, 0x2, &(0x7f0000000d00)=[r11, r12, r13, r14, r15], &(0x7f0000000d40)=[{0x3, 0x4, 0x5, 0x2}, {0x2, 0x4, 0x5}], 0x10, 0xb91}, 0x94) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'veth1_to_bridge\x00', &(0x7f0000000e40)=@ethtool_flash={0x33, 0xf1, './file0\x00'}}) connect$pppoe(r8, &(0x7f0000000f40)={0x18, 0x0, {0x1, @multicast, 'veth0_virt_wifi\x00'}}, 0x1e) 16.838664948s ago: executing program 1 (id=1655): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="f36088e85e", 0x5}], 0x1, 0x0, 0x0, 0x20060000}}], 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x12002, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r6, 0x20, &(0x7f0000000240)={&(0x7f0000000140)=""/253, 0xfd, 0x0, &(0x7f0000001540)=""/250, 0xfa}}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f0000000000001173000000", @ANYRES8, @ANYRES64=r3, @ANYRES64=0x0], 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x4, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 15.71500251s ago: executing program 1 (id=1656): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x1) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, &(0x7f00000002c0)="8d5349e58acf9025261db919ccd603b6f92591a52498b6cd7b6fa727dd1d8719c57bcb1bc41a598870842c324351d4da882ca86d8373398f2d94b35edf1e07e6096b5ad294239ed591caede6499fcd00c1718618b072aca8e0fcfdad3327389fa69a4a220374e7", 0x67, 0x2400c094, &(0x7f0000000100)={0x2, 0xe20, @empty}, 0x10) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000200)=0x40) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f00000000c0)={0x0, 0x0, "fc5a6f6fd810794cddb8f3f36b96f940"}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async, rerun: 32) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) (async) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) (async) getsockopt$inet_buf(r10, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x1407, 0x200, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x26008014}, 0x40000) (async, rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000028c0)={{{@in=@private=0xa010101, @in=@multicast2, 0x4e23, 0x0, 0x4e24, 0x92, 0x8, 0x80, 0x180, 0xff}, {0x6a, 0x8, 0x5e3, 0x7, 0x7, 0xf, 0x5}, {0x865, 0x193f322c, 0x2, 0xffffffffffffffff}, 0xffd, 0x6e6bbd, 0x0, 0x1, 0x3}, {{@in=@remote, 0x10004d5, 0x32}, 0x2, @in=@private=0xa010100, 0x3507, 0x2, 0x1, 0xd, 0xffffff03, 0xfff}}, 0xe8) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000700060000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.668223043s ago: executing program 2 (id=1657): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0xbabc) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000002c0)=0x400, 0x4) (async) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000b00)={0x81a}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000040a01040000000000030000020000020900010073797a30000000000901030073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close(0x3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket(0x840000000002, 0x3, 0x100) getsockopt$inet_mreqn(r5, 0x0, 0x33, 0x0, &(0x7f0000000740)=0x2) (async) write(r4, &(0x7f00000001c0)='4', 0x1) (async) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/111, 0x6f}, {&(0x7f0000000940)=""/223, 0xdf}], 0x2, &(0x7f0000000a40)=""/142, 0x8e}, 0x100) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) (async) r6 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000000)=0x78) tee(r3, r2, 0xffffffffffffffff, 0x2) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) (async, rerun: 64) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}, 0x1, 0x1}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000480)="9276902c4fb1536ce71dd58152246d4f5b031449f54adf3e258d4f4e56239beab7cf533d2f10da9c396266202587dc9ba5f64ec7134e7d77a2f084cee4f5dff322800a7dda0d428c3b8d88f685b752da1ece0ee2c72b4ed92c9d9d37be131c5a612a84b07aa666951377357949ee93c4e511971819eac1498a9fcd63e2aaadbcb3711cdb6283866971131767ab64b63048692297ed43f5a18f01de42d9481e82", 0xa0}, {&(0x7f0000000540)="e1d3ceb63331cbb0261d1ee6ed8a60758403ef6ad2d1745803603807b8d5612611016f9f7648e50d8f2ea86c86596153b87a7ccb585f718211c4fc151a4ab61ee0ec6231864b363b65", 0x49}, {&(0x7f00000000c0)="9e483648c282a65c2fbbe08659e99612dadfd436b2ac1ea551d3df1d75b334d8b5c5eba43fba98e794d2", 0x2a}, {&(0x7f00000005c0)="e74b5b8a97c44b4e66cd44e74bf80f2a45ec41526a7a97ac429c2e98895f753a0a7426767980d3e11ec479f5cb52ae4f7117a4493fb48d33111eda63e75c1a18ed22feea6b9dd11c0bc9b97531ee0edcbf876fb204f8657dc743901e7b458867018bb4f9641d6322e83f7133dd030da9e4e84319b78df3f8d3b105f3fe02850a719ee8aed005a3fbc5993dd50992de0baa087fdb55689a89e4629f7646598defda6b40de4a0397c3f4e31210684f0d7b7b82073e6459fde817b0acd16eb9eb031c19d27153cff7373683597253b6beb43adc330e36cd9a02a8bc827a", 0xdc}, {&(0x7f0000000180)="2ffaadea9698682ea3f8fdb306cb81f23012b1d3503c2b653731bd1249f166da03213e9727663d0420ea467b57d7dbccd1799a38bfc8d0", 0x37}, {&(0x7f00000006c0)="013bb2f077b4af9217306663867a14b0b453c7a4be801423ee45cc615e7088ab730c294c210a0ec21bb837c0d0e1dce4648ac280bddd6c3c5b715aed7fe6c766eb08df02813d65005a7126825736958da1dfca80e265adefdd2659efb3e5767065b6142462d1f19ec4dc6599c20bce05153d418186f80ac2c378067ddfe86a2714736973a6ca9c1ec663e006da1915304af8b3ee7cd2d7de6d2f25f0e11bb1aeb62d9caf35b3ef25283ebbaf81355f6c9d1a1ee486219667d2491bda7566e57b2b25e87332f998fc585f904c7fae6ed05fefb4455861554ee19b74f70eec329263", 0xe1}, {&(0x7f00000007c0)="24845268196aa8b2633d66a7d1335b2ffef608ac8dc4f088b9f67f9cb69edbc959ed91ce8eb48375e7b06785138886e82cddbe42bcb5799dac48fdbb0de40ea82b186aaa35c924a198101da750c5df086996bd439ad17d2365109b74ccf95d29f099c5b898e5081e38ce4d95abd254d712ab835142acdba01904", 0x7a}], 0x7, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x1010}, 0x4) (rerun: 64) 15.586988658s ago: executing program 1 (id=1658): ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000100)={0x1, 0x2, 0x1000, 0x9b, &(0x7f00000001c0)="b6c5ea35c7864622d1209f29d81e9c3e12ad1c8595662899285f4eb8b8f1842b92dde534e5c0b23db01a89c615bff5e87722aeb72957a259b3eae67d1459aba6bd879cbe6bedb191cf03d54ccf4a58e9b740ad834e8bb1d0bfca8fa0a3180888330d3b5b05d90742afa0ac541ef2221608b71d389b1b3ae8b03abced330e6f945983d35993f274162330c608fa109f79a012f1096e62605cdc8c0a", 0x0, 0x0, 0x0}) (async) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000100)={0x1, 0x2, 0x1000, 0x9b, &(0x7f00000001c0)="b6c5ea35c7864622d1209f29d81e9c3e12ad1c8595662899285f4eb8b8f1842b92dde534e5c0b23db01a89c615bff5e87722aeb72957a259b3eae67d1459aba6bd879cbe6bedb191cf03d54ccf4a58e9b740ad834e8bb1d0bfca8fa0a3180888330d3b5b05d90742afa0ac541ef2221608b71d389b1b3ae8b03abced330e6f945983d35993f274162330c608fa109f79a012f1096e62605cdc8c0a", 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="dc30"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r0 = socket$nl_rdma(0x10, 0x3, 0x14) write(r0, &(0x7f00000003c0), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x39}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200920a5}, 0x20000080) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r9, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="9c3fb68af360"}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x880) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 15.585902284s ago: executing program 2 (id=1659): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x17, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) 15.56557685s ago: executing program 2 (id=1660): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) (async) 15.53586923s ago: executing program 2 (id=1661): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x200) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1}, 0x4}], 0x1, 0x0, 0x0) recvfrom(r1, &(0x7f0000000380)=""/49, 0xfec6, 0x10022, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="7f666ea5656097d9e58450e76e8347a51ddf13de24a015bec842e7fc2753e6726c621703de0281e1121f04", 0x2b}, {&(0x7f0000000180)="89927c28703b3ae1bb600eb97cf79530973468290c07b0744025eb91312b7db70059adf81de7febd514c3029d45bf96edbff17dff0c6f6709703ea9540f8233be06103e487606c912104c4cfaf321965cc0eecf5f83cf3b824084ebe47b7745f90a76944a5140f92f97d962e708624f79b74892edca8ae53033990dafd14d8dff971c5c33e50842bf1b3181a37be8bdf3de6b35129d7420f9b79a4448751fec6971ce28c4a99203b", 0xa8}], 0x2, &(0x7f00000003c0)=[{0x108, 0x29, 0x6, "60a2044991972c509ffc7d51f9a0828e891406a86f3f27209eab1b2d02d5bb0f93c70b5c88f0e8ac3ceef54e89cd078511cd296246743ba2575272eb172e3aea53cc2cb783869b0c1ff13f443b65857bd0ba1044104d5cc19e11116ba2d06096da1ff80374a3ca059f7a41600bf85a039b45ff9dfc2e37816514e43859399a241648ebe49eebb0b1d3db20a485ad823145dcd6056e9911dfc1ca1bf69b3375dfd032be00062402b71f68324a0aeada8333c6cb975afa49e20325b11daf9b322162242f4cd3087d95f055f8653cbe7864357eb3115fc51c3c141acfb4f94365af3e81e3f45a9a2c56229e35a372683e381991"}, {0xa0, 0x118, 0x6, "3eb27c23c5319a3aeb35e0de97ad1b418443f3cc5990e5bd33ac0d94fa2a3d290bd6822b23b9b20268a7995c88614a9781c52648fe1a90b0941eee47695fce0149cd930f1d4f9eab1f833869b6c415d6af081917d54f7a453bff5b087b809af0bcadaaf5c664f076e1eda65a0ec357e003795b8e7bcdcd5f6356834fb8b42c6de07167ff68fbdcd883807e1ff0e95b"}, {0xe8, 0x88, 0xd7af, "27c29210e7c48510485db8178d9d9bc26953ae72c4a4b019b1ee1e0fc0a1fa4c50ff66b233f6e134a706f082eb2c7560ba260acaa8b91a2020757c7dfcddd88f5f31f87d1baf3e5ba615b6fcf40515604ffb31b8decbc51cd0a3e8b829495e6f886b438f68617b2bd2b595a10cc9b26cec8b17f982589032572b18d019a666038f4890cbb3209b7aad931e4d0daa226dd923afefcf14d3b04eaa651a82de58e7679f314bd2eefd8b0eb50a55d8a63f4530f7eae4d6172d3058e4248f401d80f2cce8963c44fb7abada980bdc6750fa04f8d193913f3c3309"}, {0x10, 0x1, 0x3}, {0x60, 0x10b, 0x9, "4b02c03dad03b53be8f778cc925d234dbe23d57262d473b99023a045756fe13148ecf29e176bfdf896639540208c6d05734f3badd4d4f57ed25b7ed012b562c1d9c540748eb10b5f0c3691263345031e"}, {0xc0, 0xc, 0xfff, "b1b3b003b6a5ff4df51a31ab83500dd3c6df7b4597642ebd9bf7dad0aa0dbbe069c7a1d2762e69eb9442f7690f90ebeecdd81d093bb32ba4bab562a4fe214daf96bcfbf4844e441755192ebff2e4694abe3c3c8e1df2547e53559443040047d800f61d0b1299890b088e1861038c50cf333ab5c0359d60f9dd5fcb92d0596f1eb42e0d0e6dda2f10540a9f97cbb8eafc4a244222dd69136b5fecbbd074084f6597a651c27220dc078809e637be74"}, {0x108, 0x6, 0x9, "14c86b3d7da68527da9a8739847bd2a8f8f0bfbbaae08d506872380828aba28b2af931976d5bacce5eff05b5d76fda60d74b9d7219b945297df5a0fc927cc60b9f8d030cc8839dd95d7be4ce49b890dd1587c1b6b1f43ada86d97543149e6a855d3d78e9c211eea89630332ab75b08dfd74de6f9df6aaeb52db9c70885a9244b1f3b48e7ecfbbc604e88ff28d4e36c46c4da2ade21fafe263ef6edf471a0fe8273fb2fe4bbe6ea7faa0d376d47fbbd1a9b23f97cfb2e4aa6488862619a7afb0537db43ae030f56033b20c6cdb9b8f5f12c348ae363ea00d62143769dda21facb8b029ebee5d9620c692448f111ac7ee71bae9621ebf7e6a7"}], 0x4c8}, 0x40041) 15.459454114s ago: executing program 2 (id=1662): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000380)={'veth0_macvtap\x00', {0x2, 0x4e20, @local}}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCNEWUNIT(r0, 0x4004743b, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@random="1e6e8e66a5e75c037fffa95b5387ee02d233f7befe87e9ae076c2c4c0778", 0x1e, 0x1) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x80000) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@multicast, @empty, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x4, 0x6, @private0={0xfc, 0x0, '\x00', 0xfe}}}}}}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01020000000000000000070000000900020073797a30000000000900010073797a30"], 0xc0}}, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="d3c3265d512a7b0bad4a053dd4f3eb8f33b2b70d042496437d9ff8fa99114117655a59c9472f46bda7942ad2c6e89b193a620013047830e538eb3cb46de508403c49c0aa694c009aece25db24e88cd05642b58712cc802b374a32e6af64b9c40e001aecc92d1b239c6f582b12a9857ffdb5ed3c688d4b4ca799ee690be7341c88878f4e9c3e77461e7d0f2c68eb5ab1d80", 0x91}, {&(0x7f0000000240)="aaa4e7d6797434c2e4b7b13635fe9fed5a39247c804187c6d3e7867e4a6cb6293451343b3f74e680e938ae6fcf1c3d90b5d0e23adc245633b74eb43c7a52fa90c10eebc9ac19b129008619358c2eabffeae66f0a645116d791184c8e61262789b4c6a0d86a4f1bbed10f2f679289fe2020a45b75964fbd4d0f8f43da899e445ac45f6273c0a53322c56d261577e58c8d12881da40e4f2dfa845d7f57d3cb11d64deba1ef763a42b7d013128066f60f525f87e387d789041197a3e33d8ec5f83b3e00efa4fc7a4dd4e083d3523ca4ec", 0xcf}], 0x2, 0x0, 0x8) 1.175328851s ago: executing program 32 (id=1649): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x330, 0x0, 0x298, 0x0, 0x298, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x32, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@empty, @local, 0x0, 0xff, 'veth0_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x14}, @multicast1, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x57}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000800)={'gretap0\x00', 0x0, 0x0, 0x80, 0x7, 0x1, {{0x30, 0x4, 0x2, 0x9, 0xc0, 0x67, 0x0, 0xd3, 0x4, 0x0, @multicast1, @local, {[@timestamp={0x44, 0xc, 0xce, 0x0, 0x3, [0x800, 0xffffffff]}, @cipso={0x86, 0x45, 0xffffffffffffffff, [{0x5, 0x12, "cbb6d1f35f857f291a41207b18d379e3"}, {0x3d8411fb7b1009b, 0xd, "23e7ba29557df592352530"}, {0x1, 0x6, "1774ac73"}, {0x5, 0x8, "2e826a354d64"}, {0x1, 0xf, "292f68750621730a33f1223c69"}, {0x7, 0x3, '\''}]}, @timestamp={0x44, 0x18, 0x85, 0x0, 0x2, [0xb99, 0x693, 0x5, 0x7fffffff, 0xa854]}, @lsrr={0x83, 0x37, 0x5c, [@private=0xa010102, @local, @rand_addr=0x64010100, @loopback, @multicast2, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010102, @multicast2, @multicast2, @remote, @multicast1]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x3}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', r3, 0x4, 0x0, 0x4, 0xd13c00, 0x15, @empty, @mcast1, 0x40, 0x7800, 0x6, 0x3}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x7ffffffffffffffe, 0x3ff}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x20000800) listen(r1, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r8) connect$unix(r1, &(0x7f0000000580)=@file={0x0, '.\x00'}, 0x6e) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000500)={'icmp\x00'}, &(0x7f0000000540)=0x1e) 1.138456929s ago: executing program 33 (id=1653): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r0, 0x200) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1}, 0x4}], 0x1, 0x0, 0x0) recvfrom(r1, &(0x7f0000000380)=""/49, 0xfec6, 0x10022, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) (async) r5 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, 0x0) (async) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x119, 0x487, 0x0, &(0x7f0000000480)) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400bda10000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4020040}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e00000000000000009dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.096134399s ago: executing program 34 (id=1654): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pwritev(r0, &(0x7f0000000000), 0x0, 0x80000000, 0xf) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000040)=""/233, &(0x7f0000000140)=0xe9) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @dev}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x6c, 0x14, 0x400, 0x70bd28, 0x25dfdbff, {0x2, 0x8, 0x68, 0xfe, r2}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LABEL={0x14, 0x3, 'syzkaller1\x00'}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000894}, 0x20044004) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r4) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000380)) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r6, 0x400, 0x70bd29, 0x7, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r3, r3, &(0x7f0000000540)=0x10001, 0x9) socket$inet6(0xa, 0x80000, 0x2c) ioctl(r0, 0x2, &(0x7f0000000580)="b8fa86646d0a51ef669edf6ca386b10484518dcd80f74d65ec49d458eaf4cd06b5ab1b7b2091d5c4f2a78f0496ee5a9a6b051d105790887788f650ae1fe1a635685bfec046c540162449973058b5ddc45ff2a2a298bd5c9ea3be73f9271b86b128646874a89d747a8761e5cfae45227c1fe5b619fa9dcef8fb7bf14e1e71f4c9a05899140be0518981bfdda09805d822ddb95d1d0ac6788b36a1de30a0b4895d76e0c84671f5b1072f3b0f107f0a1f9d8ee230566fac73d24a596c") r8 = socket$unix(0x1, 0x5, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000640)={r2, 0x1, 0x6, @random="9372dae0c850"}, 0x10) getsockopt(r3, 0x5, 0x8, &(0x7f0000000680)=""/24, &(0x7f00000006c0)=0x18) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a80)=@generic={&(0x7f0000000a40)='./file0\x00', 0x0, 0x8}, 0x18) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file0\x00', 0x0, 0x8}, 0x18) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0xa27b, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c40)={0xffffffffffffffff, 0xfffffffb, 0x8}, 0xc) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)=@o_path={&(0x7f0000000c80)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x3, 0x2d, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5fcb, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@btf_id={0x18, 0x17, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41906a9f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xaa9}, @alu={0x4, 0x1, 0x1, 0x1, 0x9, 0x6, 0x4}, @jmp={0x5, 0x0, 0xb, 0x8, 0x6, 0x4633af8264950029, 0x10}, @call={0x85, 0x0, 0x0, 0xc4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='GPL\x00', 0x2, 0x86, &(0x7f0000000940)=""/134, 0x40f00, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r10, 0x2, &(0x7f0000000d00)=[r11, r12, r13, r14, r15], &(0x7f0000000d40)=[{0x3, 0x4, 0x5, 0x2}, {0x2, 0x4, 0x5}], 0x10, 0xb91}, 0x94) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'veth1_to_bridge\x00', &(0x7f0000000e40)=@ethtool_flash={0x33, 0xf1, './file0\x00'}}) connect$pppoe(r8, &(0x7f0000000f40)={0x18, 0x0, {0x1, @multicast, 'veth0_virt_wifi\x00'}}, 0x1e) 45.455253ms ago: executing program 35 (id=1658): ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000100)={0x1, 0x2, 0x1000, 0x9b, &(0x7f00000001c0)="b6c5ea35c7864622d1209f29d81e9c3e12ad1c8595662899285f4eb8b8f1842b92dde534e5c0b23db01a89c615bff5e87722aeb72957a259b3eae67d1459aba6bd879cbe6bedb191cf03d54ccf4a58e9b740ad834e8bb1d0bfca8fa0a3180888330d3b5b05d90742afa0ac541ef2221608b71d389b1b3ae8b03abced330e6f945983d35993f274162330c608fa109f79a012f1096e62605cdc8c0a", 0x0, 0x0, 0x0}) (async) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000100)={0x1, 0x2, 0x1000, 0x9b, &(0x7f00000001c0)="b6c5ea35c7864622d1209f29d81e9c3e12ad1c8595662899285f4eb8b8f1842b92dde534e5c0b23db01a89c615bff5e87722aeb72957a259b3eae67d1459aba6bd879cbe6bedb191cf03d54ccf4a58e9b740ad834e8bb1d0bfca8fa0a3180888330d3b5b05d90742afa0ac541ef2221608b71d389b1b3ae8b03abced330e6f945983d35993f274162330c608fa109f79a012f1096e62605cdc8c0a", 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="dc30"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r0 = socket$nl_rdma(0x10, 0x3, 0x14) write(r0, &(0x7f00000003c0), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x39}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200920a5}, 0x20000080) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r9, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="9c3fb68af360"}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x880) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 0s ago: executing program 36 (id=1662): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000380)={'veth0_macvtap\x00', {0x2, 0x4e20, @local}}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCNEWUNIT(r0, 0x4004743b, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@random="1e6e8e66a5e75c037fffa95b5387ee02d233f7befe87e9ae076c2c4c0778", 0x1e, 0x1) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x80000) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@multicast, @empty, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x4, 0x6, @private0={0xfc, 0x0, '\x00', 0xfe}}}}}}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01020000000000000000070000000900020073797a30000000000900010073797a30"], 0xc0}}, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="d3c3265d512a7b0bad4a053dd4f3eb8f33b2b70d042496437d9ff8fa99114117655a59c9472f46bda7942ad2c6e89b193a620013047830e538eb3cb46de508403c49c0aa694c009aece25db24e88cd05642b58712cc802b374a32e6af64b9c40e001aecc92d1b239c6f582b12a9857ffdb5ed3c688d4b4ca799ee690be7341c88878f4e9c3e77461e7d0f2c68eb5ab1d80", 0x91}, {&(0x7f0000000240)="aaa4e7d6797434c2e4b7b13635fe9fed5a39247c804187c6d3e7867e4a6cb6293451343b3f74e680e938ae6fcf1c3d90b5d0e23adc245633b74eb43c7a52fa90c10eebc9ac19b129008619358c2eabffeae66f0a645116d791184c8e61262789b4c6a0d86a4f1bbed10f2f679289fe2020a45b75964fbd4d0f8f43da899e445ac45f6273c0a53322c56d261577e58c8d12881da40e4f2dfa845d7f57d3cb11d64deba1ef763a42b7d013128066f60f525f87e387d789041197a3e33d8ec5f83b3e00efa4fc7a4dd4e083d3523ca4ec", 0xcf}], 0x2, 0x0, 0x8) kernel console output (not intermixed with test programs): nnel medium [ 95.684186][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.805713][ T7053] netlink: 48 bytes leftover after parsing attributes in process `syz.2.300'. [ 96.178205][ T7076] openvswitch: netlink: Flow actions attr not present in new flow. [ 96.333770][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.720677][ T7109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.761971][ T7109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.791876][ T7109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.061504][ T7117] xt_policy: too many policy elements [ 97.116392][ T7121] netlink: 'syz.0.320': attribute type 1 has an invalid length. [ 97.169027][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.208681][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.320'. [ 97.256698][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.320'. [ 97.364701][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.444314][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.446399][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 97.466338][ T7117] syzkaller0: entered promiscuous mode [ 97.473352][ T7117] syzkaller0: entered allmulticast mode [ 97.763465][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 99.344233][ T7171] ip6t_REJECT: ECHOREPLY is not supported [ 99.504958][ T7173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.333'. [ 99.573314][ T7182] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.335'. [ 99.692106][ T7186] xt_TCPMSS: Only works on TCP SYN packets [ 100.152633][ T7229] netlink: 'syz.1.349': attribute type 2 has an invalid length. [ 100.248901][ T7237] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 100.270502][ T7237] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 100.293340][ T7237] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 100.344046][ T985] IPVS: starting estimator thread 0... [ 100.356960][ T7246] net_ratelimit: 28 callbacks suppressed [ 100.356978][ T7246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.432941][ T7254] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.443568][ T7247] IPVS: using max 32 ests per chain, 76800 per kthread [ 100.461932][ T7249] __nla_validate_parse: 3 callbacks suppressed [ 100.461948][ T7249] netlink: 7 bytes leftover after parsing attributes in process `syz.4.352'. [ 100.485516][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.557869][ T7258] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 100.567598][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 100.573420][ T7258] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 100.589036][ T7260] netlink: 56 bytes leftover after parsing attributes in process `syz.2.358'. [ 100.610639][ T7257] team0: Port device team_slave_0 removed [ 100.720783][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 100.863300][ T7273] netlink: 36 bytes leftover after parsing attributes in process `syz.3.364'. [ 100.960287][ T7268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.362'. [ 101.093084][ T7284] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 101.100553][ T7284] team0: Device ipvlan2 is already an upper device of the team interface [ 101.173549][ T7292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.369'. [ 101.498507][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.376'. [ 101.531014][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.695078][ T7329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.796834][ T7333] IPVS: ip_vs_edit_dest(): server weight less than zero [ 101.806207][ T10] IPVS: starting estimator thread 0... [ 101.834228][ T7325] block nbd0: server does not support multiple connections per device. [ 101.844384][ T7325] block nbd0: shutting down sockets [ 101.893706][ T7339] IPVS: using max 30 ests per chain, 72000 per kthread [ 101.895837][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 102.046898][ T7356] netlink: 'syz.4.388': attribute type 2 has an invalid length. [ 102.210273][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.391'. [ 102.411619][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.420149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.566741][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.579788][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.817251][ T7406] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 103.231414][ T7429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.109941][ T7503] xt_TCPMSS: Only works on TCP SYN packets [ 104.146654][ T7500] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 104.202780][ T7500] bridge2: entered allmulticast mode [ 105.604021][ T5979] net_ratelimit: 54 callbacks suppressed [ 105.604038][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.682065][ T7603] __nla_validate_parse: 15 callbacks suppressed [ 105.682082][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 105.712250][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.764777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.822322][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 105.841714][ T7603] hsr_slave_0 (unregistering): left promiscuous mode [ 105.841723][ T7618] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 105.886020][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 105.904134][ T7618] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 106.039566][ T7630] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.466'. [ 106.302068][ T7646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.473'. [ 106.307287][ T7643] bridge_slave_0: left allmulticast mode [ 106.318688][ T7643] bridge_slave_0: left promiscuous mode [ 106.326965][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.338068][ T7643] bridge_slave_1: left allmulticast mode [ 106.343894][ T7643] bridge_slave_1: left promiscuous mode [ 106.349591][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.364440][ T7643] bond0: (slave bond_slave_0): Releasing backup interface [ 106.375716][ T7643] bond0: (slave bond_slave_1): Releasing backup interface [ 106.392164][ T7643] team0: Port device team_slave_0 removed [ 106.400725][ T7643] team0: Port device team_slave_1 removed [ 106.409350][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.419568][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.430738][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.439039][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.447805][ T7643] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.613943][ T7660] netlink: 36 bytes leftover after parsing attributes in process `syz.2.477'. [ 106.653502][ T7660] netlink: 36 bytes leftover after parsing attributes in process `syz.2.477'. [ 106.724088][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.773028][ T7670] netlink: 52 bytes leftover after parsing attributes in process `syz.0.479'. [ 106.857884][ T29] audit: type=1800 audit(1773913368.753:2): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.481" name="memory.events" dev="tmpfs" ino=496 res=0 errno=0 [ 107.019036][ T7696] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 107.040998][ T7698] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 107.355312][ T7714] syzkaller0: entered promiscuous mode [ 107.377459][ T7714] syzkaller0: entered allmulticast mode [ 107.394396][ T7714] netlink: 'syz.0.488': attribute type 16 has an invalid length. [ 107.403193][ T7714] netlink: 'syz.0.488': attribute type 17 has an invalid length. [ 107.419950][ T7714] erspan0: left allmulticast mode [ 107.450527][ T7714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.764093][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.919444][ T7684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.932271][ T7711] netlink: 'syz.4.487': attribute type 1 has an invalid length. [ 109.940009][ T7711] netlink: 96 bytes leftover after parsing attributes in process `syz.4.487'. [ 109.954605][ T7711] netlink: 'syz.4.487': attribute type 1 has an invalid length. [ 109.965993][ T7711] netlink: 'syz.4.487': attribute type 8 has an invalid length. [ 109.974113][ T7711] netlink: 582 bytes leftover after parsing attributes in process `syz.4.487'. [ 110.167473][ T7750] Bluetooth: MGMT ver 1.23 [ 110.533511][ T7772] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 110.856048][ T7788] netlink: 'syz.3.508': attribute type 1 has an invalid length. [ 110.884393][ T5936] net_ratelimit: 5 callbacks suppressed [ 110.884408][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.900600][ T7788] bond1: entered promiscuous mode [ 110.908969][ T7788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.926526][ T7790] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 110.932353][ T7790] syzkaller1: Linktype set failed because interface is up [ 110.956597][ T5879] syzkaller1: tun_net_xmit 90 [ 110.985763][ T7786] syzkaller0: entered promiscuous mode [ 110.991255][ T7786] syzkaller0: entered allmulticast mode [ 110.999149][ T7788] __nla_validate_parse: 5 callbacks suppressed [ 110.999163][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.508'. [ 111.013834][ T7797] netlink: 24 bytes leftover after parsing attributes in process `syz.4.510'. [ 111.023359][ T7797] netlink: 80 bytes leftover after parsing attributes in process `syz.4.510'. [ 111.026086][ T7788] bond1: entered allmulticast mode [ 111.053956][ T5979] syzkaller1: tun_net_xmit 90 [ 111.058903][ T7797] netlink: 24 bytes leftover after parsing attributes in process `syz.4.510'. [ 111.068210][ T7796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.510'. [ 111.082150][ T7796] netlink: 80 bytes leftover after parsing attributes in process `syz.4.510'. [ 111.091506][ T7796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.510'. [ 111.140778][ T7790] bond1: (slave bridge1): making interface the new active one [ 111.191137][ T7790] bridge1: entered promiscuous mode [ 111.196846][ T7790] bridge1: entered allmulticast mode [ 111.230996][ T7790] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 111.670493][ T7829] pim6reg: entered allmulticast mode [ 111.680140][ T7831] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.523'. [ 111.690683][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.707037][ T7829] pim6reg: left allmulticast mode [ 111.927355][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.119889][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 112.173302][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 112.189446][ T7879] netlink: 'syz.3.537': attribute type 1 has an invalid length. [ 112.288615][ T7891] openvswitch: netlink: IPv4 tun info is not correct [ 112.361257][ T7892] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 112.411599][ T7892] bond2: (slave geneve2): making interface the new active one [ 112.419862][ T7892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.422225][ T7900] x_tables: ip6_tables: CT target: only valid in raw table, not [ 112.422225][ T7900] [ 112.428702][ T7892] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 112.448768][ T78] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.464693][ T6071] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.474821][ T6071] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.487307][ T6071] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.556080][ T7907] sctp: [Deprecated]: syz.2.546 (pid 7907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.556080][ T7907] Use struct sctp_sack_info instead [ 112.690434][ T7912] netlink: 'syz.2.548': attribute type 2 has an invalid length. [ 112.804643][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.973866][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.014491][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.724754][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.876408][ T7854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.043857][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.639900][ T7999] netlink: 'syz.3.572': attribute type 3 has an invalid length. [ 115.672479][ T7999] netlink: 'syz.3.572': attribute type 2 has an invalid length. [ 115.681383][ T7997] netlink: 'syz.2.573': attribute type 3 has an invalid length. [ 115.711958][ T8007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.748240][ T8004] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 115.819725][ T8012] netlink: 'syz.1.575': attribute type 1 has an invalid length. [ 115.851433][ T8013] netlink: 'syz.1.575': attribute type 1 has an invalid length. [ 116.013068][ T8023] net_ratelimit: 3 callbacks suppressed [ 116.013085][ T8023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.027268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.035839][ T8023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.048582][ T6071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.069945][ T8019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.078535][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.093848][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.282990][ T8035] __nla_validate_parse: 9 callbacks suppressed [ 116.283007][ T8035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.583'. [ 116.321842][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.585'. [ 116.333230][ T8035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.583'. [ 116.348254][ T8033] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 116.356925][ T8038] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 116.360286][ T8034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.616390][ T8059] xt_l2tp: invalid flags combination: 0 [ 116.739666][ T8066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.594'. [ 116.866989][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'. [ 116.926990][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'. [ 117.095647][ T8093] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 117.129334][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.314608][ T8105] syzkaller1: entered promiscuous mode [ 117.326440][ T8106] netlink: 'syz.4.606': attribute type 1 has an invalid length. [ 117.334216][ T8106] netlink: 228 bytes leftover after parsing attributes in process `syz.4.606'. [ 117.353914][ T8105] syzkaller1: entered allmulticast mode [ 117.434508][ T8105] nbd0: detected capacity change from 0 to 127 [ 117.455474][ T8101] netlink: 64 bytes leftover after parsing attributes in process `syz.3.605'. [ 117.506447][ T8118] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 117.598920][ T8120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.625359][ T5839] block nbd0: Receive control failed (result -104) [ 117.632529][ T8120] bond0: (slave rose0): Enslaving as an active interface with an up link [ 117.807771][ T8129] geneve3: entered promiscuous mode [ 118.163833][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.335829][ T8175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.625'. [ 118.346125][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 118.373887][ T8174] trusted_key: syz.1.626 sent an empty control message without MSG_MORE. [ 118.657804][ T8187] : renamed from bond0 (while UP) [ 118.770690][ T8194] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 119.030016][ T8221] Cannot find set identified by id 1 to match [ 119.394966][ T5827] udevd[5827]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 119.461240][ T8243] ipt_REJECT: ECHOREPLY no longer supported. [ 119.481464][ T5827] udevd[5827]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 119.584918][ T6069] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.606818][ T6079] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.719257][ T6079] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.760191][ T6079] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.894493][ T8271] netlink: 'syz.1.656': attribute type 1 has an invalid length. [ 121.283882][ T798] net_ratelimit: 73 callbacks suppressed [ 121.283898][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.714375][ T8391] __nla_validate_parse: 12 callbacks suppressed [ 121.714392][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.686'. [ 121.749062][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.686'. [ 121.879917][ T8402] netlink: 'syz.0.690': attribute type 29 has an invalid length. [ 121.926859][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.939605][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 121.972725][ T8402] netlink: 'syz.0.690': attribute type 29 has an invalid length. [ 122.002901][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 122.027576][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.690'. [ 122.039790][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.694'. [ 122.083108][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.694'. [ 122.223049][ T8416] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 122.259617][ T8419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.695'. [ 122.281070][ T8426] netlink: 'syz.1.696': attribute type 13 has an invalid length. [ 122.461217][ T8411] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 122.475355][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.500612][ T8431] vcan0: entered allmulticast mode [ 122.523563][ T8435] syzkaller0: entered promiscuous mode [ 122.535544][ T8435] syzkaller0: entered allmulticast mode [ 122.809015][ T8449] netlink: 104 bytes leftover after parsing attributes in process `syz.4.700'. [ 122.840991][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 122.933975][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.224426][ T8468] xt_hashlimit: size too large, truncated to 1048576 [ 123.369596][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.875256][ T8505] netlink: 'syz.2.713': attribute type 7 has an invalid length. [ 124.051118][ T8513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.059716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.086678][ T8513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.129911][ T8510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.138834][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.170714][ T8521] netlink: 'syz.2.717': attribute type 19 has an invalid length. [ 124.382409][ T8521] netlink: 'syz.2.717': attribute type 19 has an invalid length. [ 124.634353][ T8550] syz.1.722: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 124.672479][ T8550] CPU: 0 UID: 0 PID: 8550 Comm: syz.1.722 Not tainted syzkaller #0 PREEMPT(full) [ 124.672508][ T8550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.672527][ T8550] Call Trace: [ 124.672534][ T8550] [ 124.672543][ T8550] dump_stack_lvl+0xe8/0x150 [ 124.672574][ T8550] warn_alloc+0x249/0x340 [ 124.672598][ T8550] ? stack_trace_save+0xa9/0x100 [ 124.672622][ T8550] ? __pfx_warn_alloc+0x10/0x10 [ 124.672651][ T8550] ? kasan_save_track+0x4f/0x80 [ 124.672669][ T8550] ? kasan_save_track+0x3e/0x80 [ 124.672687][ T8550] ? __kasan_kmalloc+0x93/0xb0 [ 124.672707][ T8550] ? __kmalloc_cache_noprof+0x31c/0x660 [ 124.672728][ T8550] ? xskq_create+0x56/0x170 [ 124.672754][ T8550] ? xsk_setsockopt+0x54c/0x990 [ 124.672777][ T8550] ? do_sock_setsockopt+0x17c/0x1b0 [ 124.672805][ T8550] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 124.672831][ T8550] ? do_syscall_64+0x14d/0xf80 [ 124.672851][ T8550] __vmalloc_node_range_noprof+0x132/0x1730 [ 124.672901][ T8550] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 124.672929][ T8550] ? __kasan_kmalloc+0x93/0xb0 [ 124.672957][ T8550] vmalloc_user_noprof+0xad/0xe0 [ 124.672979][ T8550] ? xskq_create+0xbf/0x170 [ 124.673006][ T8550] xskq_create+0xbf/0x170 [ 124.673036][ T8550] xsk_init_queue+0x8a/0xe0 [ 124.673064][ T8550] xsk_setsockopt+0x54c/0x990 [ 124.673090][ T8550] ? __pfx_xsk_setsockopt+0x10/0x10 [ 124.673116][ T8550] ? __pfx_aa_sk_perm+0x10/0x10 [ 124.673143][ T8550] ? aa_sock_opt_perm+0xff/0x1a0 [ 124.673180][ T8550] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 124.673202][ T8550] ? __pfx_xsk_setsockopt+0x10/0x10 [ 124.673229][ T8550] do_sock_setsockopt+0x17c/0x1b0 [ 124.673262][ T8550] __x64_sys_setsockopt+0x13d/0x1b0 [ 124.673296][ T8550] do_syscall_64+0x14d/0xf80 [ 124.673313][ T8550] ? trace_irq_disable+0x3b/0x150 [ 124.673340][ T8550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.673360][ T8550] ? clear_bhb_loop+0x40/0x90 [ 124.673383][ T8550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.673403][ T8550] RIP: 0033:0x7f99ded9c799 [ 124.673429][ T8550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.673450][ T8550] RSP: 002b:00007f99dfcb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 124.673472][ T8550] RAX: ffffffffffffffda RBX: 00007f99df015fa0 RCX: 00007f99ded9c799 [ 124.673487][ T8550] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 124.673498][ T8550] RBP: 00007f99dee32c99 R08: 0000000000000004 R09: 0000000000000000 [ 124.673511][ T8550] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.673524][ T8550] R13: 00007f99df016038 R14: 00007f99df015fa0 R15: 00007fffbe1170e8 [ 124.673554][ T8550] [ 124.944027][ T8550] Mem-Info: [ 124.947166][ T8550] active_anon:5801 inactive_anon:0 isolated_anon:0 [ 124.947166][ T8550] active_file:2584 inactive_file:39999 isolated_file:0 [ 124.947166][ T8550] unevictable:768 dirty:47 writeback:0 [ 124.947166][ T8550] slab_reclaimable:10889 slab_unreclaimable:97139 [ 124.947166][ T8550] mapped:30288 shmem:1353 pagetables:1245 [ 124.947166][ T8550] sec_pagetables:0 bounce:0 [ 124.947166][ T8550] kernel_misc_reclaimable:0 [ 124.947166][ T8550] free:1323576 free_pcp:12554 free_cma:0 [ 124.997409][ T8550] Node 0 active_anon:23180kB inactive_anon:0kB active_file:10336kB inactive_file:159792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121100kB dirty:184kB writeback:0kB shmem:3880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13008kB pagetables:4920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 125.049698][ T8550] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 125.081547][ T8550] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.085083][ T8548] netlink: 'syz.0.718': attribute type 1 has an invalid length. [ 125.113088][ T8550] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 125.127706][ T8550] Node 0 DMA32 free:1327592kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23180kB inactive_anon:0kB active_file:10336kB inactive_file:159792kB unevictable:1536kB writepending:184kB zspages:0kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:49452kB local_pcp:24996kB free_cma:0kB [ 125.161809][ T8550] lowmem_reserve[]: 0 0 0 0 0 [ 125.167219][ T8550] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 125.196988][ T8550] lowmem_reserve[]: 0 0 0 0 0 [ 125.201728][ T8550] Node 1 Normal free:3952804kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.234722][ T8550] lowmem_reserve[]: 0 0 0 0 0 [ 125.239475][ T8550] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 125.239801][ T8557] ±ÿ: renamed from team_slave_1 (while UP) [ 125.252443][ T8550] Node 0 DMA32: 2072*4kB (UME) 1821*8kB (UME) 1080*16kB (UM) 393*32kB (UME) 248*64kB (UME) 302*128kB (UM) 109*256kB (UME) 139*512kB (UE) 81*1024kB (UM) 37*2048kB (UM) 235*4096kB (UM) = 1327592kB [ 125.278919][ T8550] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 125.291413][ T8558] lo: Caught tx_queue_len zero misconfig [ 125.291538][ T8550] Node 1 Normal: 1*4kB (U) 12*8kB (UM) 12*16kB (UM) 14*32kB (UM) 9*64kB (UM) 7*128kB (UM) 6*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 962*4096kB (UM) = 3952804kB [ 125.317871][ T8550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.334323][ T8550] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.343932][ T8550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.368844][ T8550] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.379951][ T8550] 43933 total pagecache pages [ 125.385341][ T8550] 0 pages in swap cache [ 125.391150][ T8550] Free swap = 124996kB [ 125.402965][ T8550] Total swap = 124996kB [ 125.475983][ T8568] netlink: 'syz.4.726': attribute type 1 has an invalid length. [ 125.486297][ T8550] 2097051 pages RAM [ 125.490124][ T8550] 0 pages HighMem/MovableOnly [ 125.490138][ T8570] pim6reg: entered allmulticast mode [ 125.500760][ T8550] 427026 pages reserved [ 125.532166][ T8550] 0 pages cma reserved [ 125.560162][ T8577] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.586825][ T8568] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.679743][ T8581] syzkaller1: entered promiscuous mode [ 125.694005][ T8581] syzkaller1: entered allmulticast mode [ 125.801930][ T8592] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 126.291260][ T8622] netlink: 'syz.2.742': attribute type 4 has an invalid length. [ 126.385661][ T8628] sctp: [Deprecated]: syz.4.743 (pid 8628) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.385661][ T8628] Use struct sctp_sack_info instead [ 126.484567][ T798] net_ratelimit: 7 callbacks suppressed [ 126.484583][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.011170][ T8648] __nla_validate_parse: 11 callbacks suppressed [ 127.011190][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 127.030216][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 127.051917][ T8648] bond2: entered promiscuous mode [ 127.223204][ T8660] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 127.246227][ T8660] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.254886][ T8660] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.291405][ T8666] netlink: 5116 bytes leftover after parsing attributes in process `syz.2.755'. [ 127.525633][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.831504][ T8707] netlink: 100 bytes leftover after parsing attributes in process `syz.2.768'. [ 127.867366][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 127.898870][ T8707] veth0_macvtap: left promiscuous mode [ 127.923253][ T8716] netlink: 'syz.2.768': attribute type 1 has an invalid length. [ 128.005232][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.051005][ T8728] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.773'. [ 128.078221][ T8729] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.773'. [ 128.165341][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.355222][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.782'. [ 128.509807][ T8760] netlink: 88 bytes leftover after parsing attributes in process `syz.2.784'. [ 128.564408][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.608062][ T8763] netlink: 'syz.3.785': attribute type 39 has an invalid length. [ 129.040571][ T8778] netlink: 'syz.3.789': attribute type 2 has an invalid length. [ 129.306985][ T8795] netlink: 'syz.3.792': attribute type 8 has an invalid length. [ 129.607693][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.688212][ T8814] netlink: 'syz.1.797': attribute type 1 has an invalid length. [ 129.857321][ T8827] xt_l2tp: missing protocol rule (udp|l2tpip) [ 129.884379][ T8824] xt_l2tp: missing protocol rule (udp|l2tpip) [ 129.898882][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 129.925824][ T8826] bridge0: mtu less than device minimum [ 129.933040][ T8826] xt_socket: unknown flags 0x50 [ 130.079048][ T8849] Bluetooth: MGMT ver 1.23 [ 130.159333][ T8858] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 130.182646][ T8858] ksmbd: Unknown IPC event: 3, ignore. [ 130.198810][ T8858] SET target dimension over the limit! [ 130.520181][ T8885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.528639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.583476][ T8885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.649492][ T8889] hsr0: entered promiscuous mode [ 130.676347][ T8889] macvlan2: entered allmulticast mode [ 130.681755][ T8889] hsr0: entered allmulticast mode [ 130.703670][ T8889] hsr_slave_0: entered allmulticast mode [ 130.709516][ T8889] hsr_slave_1: entered allmulticast mode [ 130.862203][ T8908] team0: No ports can be present during mode change [ 130.986452][ T8915] netlink: 'syz.4.824': attribute type 83 has an invalid length. [ 131.014555][ T8917] : renamed from hsr0 (while UP) [ 131.129020][ T8922] sctp: [Deprecated]: syz.4.828 (pid 8922) Use of int in max_burst socket option. [ 131.129020][ T8922] Use struct sctp_assoc_value instead [ 131.186605][ T8931] x_tables: duplicate underflow at hook 3 [ 131.684018][ T798] net_ratelimit: 5 callbacks suppressed [ 131.684033][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.943374][ T8974] syzkaller0: entered promiscuous mode [ 131.950100][ T8974] syzkaller0: entered allmulticast mode [ 132.015898][ T8980] lo: entered promiscuous mode [ 132.023508][ T8980] netlink: 'syz.4.840': attribute type 2 has an invalid length. [ 132.034631][ T8980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.091648][ T8980] syzkaller1: entered promiscuous mode [ 132.108174][ T8980] syzkaller1: entered allmulticast mode [ 132.355095][ T9004] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 132.410465][ T9013] ksmbd: Unknown IPC event: 3, ignore. [ 132.648202][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 132.660468][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.726992][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.772048][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.780538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.809241][ T9034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.819618][ T3010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.823497][ T9038] netlink: 'syz.0.852': attribute type 21 has an invalid length. [ 132.843835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.880113][ T9039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.934614][ T9035] __nla_validate_parse: 78 callbacks suppressed [ 132.934632][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 132.950181][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 133.048380][ T9050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.853'. [ 133.057455][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'. [ 133.083877][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'. [ 133.489674][ T9080] lo: left promiscuous mode [ 133.552687][ T9076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.860'. [ 133.589614][ T9089] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 133.595074][ T9076] tipc: Started in network mode [ 133.624996][ T9076] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 133.632558][ T9076] tipc: Enabled bearer , priority 2 [ 133.792896][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.869'. [ 133.808386][ T9100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.869'. [ 133.899023][ T9109] netlink: 144 bytes leftover after parsing attributes in process `syz.4.872'. [ 133.953210][ T9112] netlink: 'syz.1.874': attribute type 4 has an invalid length. [ 134.253732][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.261580][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.738634][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 134.784066][ T985] tipc: Node number set to 10463914 [ 135.531569][ T9171] netlink: 'syz.0.896': attribute type 1 has an invalid length. [ 135.593237][ T9171] bond2: entered promiscuous mode [ 135.599295][ T9171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.651850][ T9175] bond2: (slave bridge4): making interface the new active one [ 135.660410][ T9175] bridge4: entered promiscuous mode [ 135.670242][ T9175] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 135.697935][ T9171] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 135.711427][ T9171] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 135.913160][ T9183] xt_hashlimit: size too large, truncated to 1048576 [ 135.959841][ T29] audit: type=1107 audit(1773913397.853:3): pid=9180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Wp8Êb°–¬ªÂZhç}‰ p•Ýò÷7Mâ' [ 136.737359][ T9228] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 136.762655][ T9230] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 137.009273][ T9243] bond0: (slave gre0): Error: Device type is different from other slaves [ 137.051037][ T9251] delete_channel: no stack [ 137.102688][ T9249] net_ratelimit: 6 callbacks suppressed [ 137.102703][ T9249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.109485][ T9307] __nla_validate_parse: 17 callbacks suppressed [ 138.109503][ T9307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.938'. [ 138.159371][ T9307] netlink: 120 bytes leftover after parsing attributes in process `syz.2.938'. [ 138.198855][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 138.216707][ T9316] netlink: 48 bytes leftover after parsing attributes in process `syz.3.941'. [ 138.239251][ T9315] syzkaller0: entered promiscuous mode [ 138.253872][ T9315] syzkaller0: entered allmulticast mode [ 138.446083][ T9325] ip6tnl0: Caught tx_queue_len zero misconfig [ 138.520100][ T9333] netlink: 'syz.1.947': attribute type 3 has an invalid length. [ 138.520716][ T9328] netlink: 32 bytes leftover after parsing attributes in process `syz.4.945'. [ 138.593382][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 138.760644][ T9347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.840781][ T9357] netlink: 'syz.3.954': attribute type 33 has an invalid length. [ 139.400817][ T9398] netlink: 'syz.2.963': attribute type 10 has an invalid length. [ 139.412851][ T9398] netlink: 40 bytes leftover after parsing attributes in process `syz.2.963'. [ 139.451223][ T9398] dummy0: entered promiscuous mode [ 139.466569][ T9398] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 139.719166][ T9394] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.962'. [ 139.728609][ T9394] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 139.799823][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 140.148208][ T9435] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 140.211720][ T9447] veth1_macvtap: left promiscuous mode [ 140.226539][ T9447] macsec0: entered promiscuous mode [ 140.231865][ T9447] macsec0: entered allmulticast mode [ 140.246124][ T9447] veth1_macvtap: entered promiscuous mode [ 140.251980][ T9447] veth1_macvtap: entered allmulticast mode [ 140.261148][ T9447] macsec0: left promiscuous mode [ 140.265397][ T9449] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20002 [ 140.267671][ T9447] macsec0: left allmulticast mode [ 140.278260][ T9447] veth1_macvtap: left allmulticast mode [ 140.337770][ T9455] netlink: 128 bytes leftover after parsing attributes in process `syz.2.979'. [ 140.778296][ T9487] gre1: entered promiscuous mode [ 140.783304][ T9487] gre1: entered allmulticast mode [ 140.886233][ T9495] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 140.927906][ T9493] netlink: 'syz.4.990': attribute type 1 has an invalid length. [ 140.970902][ T9493] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.128401][ T9492] bond3: (slave geneve2): making interface the new active one [ 141.174065][ T9492] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 141.188829][ T3010] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 141.202883][ T3010] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 141.263842][ T3010] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 141.371379][ T9526] IPv6: NLM_F_REPLACE set, but no existing node found! [ 141.376688][ T9524] Cannot find del_set index 0 as target [ 141.563110][ T3010] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 141.813535][ T9547] syzkaller0: entered allmulticast mode [ 141.825211][ T9547] syzkaller0 (unregistering): left allmulticast mode [ 142.398123][ T9567] syzkaller0: entered promiscuous mode [ 142.405139][ T9567] syzkaller0: entered allmulticast mode [ 144.056684][ T9508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.230905][ T9575] netlink: 'syz.3.1014': attribute type 10 has an invalid length. [ 144.274288][ T9575] __nla_validate_parse: 40 callbacks suppressed [ 144.274302][ T9575] netlink: 396 bytes leftover after parsing attributes in process `syz.3.1014'. [ 144.311595][ T9578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1016'. [ 144.342558][ T9578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1016'. [ 144.441436][ T9592] vcan1: entered promiscuous mode [ 144.451978][ T9597] netlink: 'syz.3.1021': attribute type 12 has an invalid length. [ 144.463079][ T9597] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.1021'. [ 144.469491][ T9592] vcan1: entered allmulticast mode [ 144.475565][ T9597] sctp: [Deprecated]: syz.3.1021 (pid 9597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.475565][ T9597] Use struct sctp_sack_info instead [ 144.751500][ T9611] syzkaller0: entered promiscuous mode [ 144.767403][ T9611] syzkaller0: entered allmulticast mode [ 144.839529][ T9614] syzkaller0: entered promiscuous mode [ 144.845073][ T9614] syzkaller0: entered allmulticast mode [ 144.857354][ T9614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.885339][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1019'. [ 145.046944][ T9619] Cannot find set identified by id 0 to match [ 145.492212][ T9609] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 146.724328][ T5829] Bluetooth: hci0: command 0x0401 tx timeout [ 147.077161][ T9625] lo: entered promiscuous mode [ 147.162636][ T9647] netlink: 'syz.1.1037': attribute type 1 has an invalid length. [ 147.290459][ T9647] bond3: entered promiscuous mode [ 147.304518][ T9647] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.346363][ T9656] bond3: (slave bridge3): making interface the new active one [ 147.354476][ T9656] bridge3: entered promiscuous mode [ 147.361544][ T9656] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 147.372656][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'. [ 147.501770][ T9670] Bluetooth: MGMT ver 1.23 [ 147.721323][ T9690] xt_hashlimit: overflow, rate too high: 0 [ 147.785942][ T9696] macvtap0: entered promiscuous mode [ 147.792189][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 147.805021][ T9696] veth0_macvtap: left promiscuous mode [ 147.822792][ T9696] macvtap0 (unregistering): left promiscuous mode [ 147.861397][ T9696] netlink: 'syz.1.1051': attribute type 1 has an invalid length. [ 147.926189][ T9700] bond4: entered promiscuous mode [ 147.931308][ T9700] bond4: entered allmulticast mode [ 147.937822][ T9700] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.005567][ T2614] block nbd0: Possible stuck request ffff888026b98000: control (read@0,1024B). Runtime 30 seconds [ 148.017275][ T2614] block nbd0: Possible stuck request ffff888026b98200: control (read@1024,1024B). Runtime 30 seconds [ 148.028599][ T2614] block nbd0: Possible stuck request ffff888026b98400: control (read@2048,1024B). Runtime 30 seconds [ 148.041001][ T2614] block nbd0: Possible stuck request ffff888026b98600: control (read@3072,1024B). Runtime 30 seconds [ 149.198906][ T9640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 149.388361][ T9709] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1055'. [ 149.418174][ T9709] netlink: 'syz.0.1055': attribute type 1 has an invalid length. [ 149.427727][ T9709] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1055'. [ 149.441977][ T9715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.454171][ T9709] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1055'. [ 149.467919][ T9709] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1055'. [ 149.688758][ T9733] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1063'. [ 149.942343][ T9745] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1067'. [ 150.010749][ T9751] blkio.reset_stats is deprecated [ 150.156432][ T9756] pimreg: entered allmulticast mode [ 150.271917][ T9758] netlink: 'syz.0.1073': attribute type 5 has an invalid length. [ 150.351857][ T9765] syzkaller1: entered promiscuous mode [ 150.365919][ T9765] syzkaller1: entered allmulticast mode [ 150.551300][ T9784] xt_hashlimit: size too large, truncated to 1048576 [ 150.623162][ T9791] netlink: 'syz.0.1084': attribute type 6 has an invalid length. [ 150.642298][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1085'. [ 150.663411][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 150.667715][ T9784] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 150.711717][ T9784] netlink: 'syz.1.1081': attribute type 10 has an invalid length. [ 150.725196][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1083'. [ 150.756279][ T9802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1087'. [ 150.791125][ T9784] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 151.221820][ T9837] FAULT_INJECTION: forcing a failure. [ 151.221820][ T9837] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 151.240845][ T9837] CPU: 0 UID: 0 PID: 9837 Comm: syz.0.1095 Not tainted syzkaller #0 PREEMPT(full) [ 151.240868][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.240879][ T9837] Call Trace: [ 151.240885][ T9837] [ 151.240892][ T9837] dump_stack_lvl+0xe8/0x150 [ 151.240921][ T9837] should_fail_ex+0x412/0x560 [ 151.240948][ T9837] _copy_from_user+0x2d/0xb0 [ 151.240974][ T9837] ___sys_sendmsg+0x1c6/0x360 [ 151.240996][ T9837] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.241041][ T9837] ? __fget_files+0x2a/0x420 [ 151.241064][ T9837] ? __fget_files+0x3a0/0x420 [ 151.241095][ T9837] __x64_sys_sendmsg+0x1bd/0x2a0 [ 151.241116][ T9837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.241142][ T9837] ? __pfx_ksys_write+0x10/0x10 [ 151.241172][ T9837] do_syscall_64+0x14d/0xf80 [ 151.241188][ T9837] ? trace_irq_disable+0x3b/0x150 [ 151.241211][ T9837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.241229][ T9837] ? clear_bhb_loop+0x40/0x90 [ 151.241250][ T9837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.241268][ T9837] RIP: 0033:0x7fccde79c799 [ 151.241284][ T9837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.241298][ T9837] RSP: 002b:00007fccdf697028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.241316][ T9837] RAX: ffffffffffffffda RBX: 00007fccdea16090 RCX: 00007fccde79c799 [ 151.241329][ T9837] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000004 [ 151.241338][ T9837] RBP: 00007fccdf697090 R08: 0000000000000000 R09: 0000000000000000 [ 151.241347][ T9837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.241356][ T9837] R13: 00007fccdea16128 R14: 00007fccdea16090 R15: 00007ffc5a171e38 [ 151.241380][ T9837] [ 151.488931][ T9838] syzkaller1: entered promiscuous mode [ 151.510010][ T9838] syzkaller1: entered allmulticast mode [ 151.995143][ T9867] syzkaller0: entered promiscuous mode [ 152.000653][ T9867] syzkaller0: entered allmulticast mode [ 152.105098][ T9871] syzkaller1: entered promiscuous mode [ 152.112613][ T9871] syzkaller1: entered allmulticast mode [ 152.224344][ T9867] netlink: 'syz.4.1105': attribute type 9 has an invalid length. [ 152.302130][ T9888] FAULT_INJECTION: forcing a failure. [ 152.302130][ T9888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.316586][ T9888] CPU: 1 UID: 0 PID: 9888 Comm: syz.3.1109 Not tainted syzkaller #0 PREEMPT(full) [ 152.316609][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.316620][ T9888] Call Trace: [ 152.316626][ T9888] [ 152.316634][ T9888] dump_stack_lvl+0xe8/0x150 [ 152.316661][ T9888] should_fail_ex+0x412/0x560 [ 152.316686][ T9888] _copy_from_user+0x2d/0xb0 [ 152.316712][ T9888] __copy_msghdr+0x3c5/0x5b0 [ 152.316733][ T9888] ___sys_sendmsg+0x213/0x360 [ 152.316752][ T9888] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.316800][ T9888] ? __fget_files+0x2a/0x420 [ 152.316822][ T9888] ? __fget_files+0x3a0/0x420 [ 152.316855][ T9888] __x64_sys_sendmsg+0x1bd/0x2a0 [ 152.316876][ T9888] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.316901][ T9888] ? __pfx_ksys_write+0x10/0x10 [ 152.316931][ T9888] do_syscall_64+0x14d/0xf80 [ 152.316947][ T9888] ? trace_irq_disable+0x3b/0x150 [ 152.316971][ T9888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.316988][ T9888] ? clear_bhb_loop+0x40/0x90 [ 152.317009][ T9888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.317026][ T9888] RIP: 0033:0x7f4e0b99c799 [ 152.317043][ T9888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.317057][ T9888] RSP: 002b:00007f4e0c940028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.317076][ T9888] RAX: ffffffffffffffda RBX: 00007f4e0bc15fa0 RCX: 00007f4e0b99c799 [ 152.317088][ T9888] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000004 [ 152.317099][ T9888] RBP: 00007f4e0c940090 R08: 0000000000000000 R09: 0000000000000000 [ 152.317127][ T9888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.317137][ T9888] R13: 00007f4e0bc16038 R14: 00007f4e0bc15fa0 R15: 00007ffc2380ad08 [ 152.317166][ T9888] [ 152.871660][ T9872] infiniband syz1: set down [ 152.879156][ T9872] infiniband syz1: added bond_slave_0 [ 152.943142][ T9872] RDS/IB: syz1: added [ 152.948505][ T9872] smc: adding ib device syz1 with port count 1 [ 152.956333][ T9872] smc: ib device syz1 port 1 has no pnetid [ 153.123031][ T9925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.382949][ T9940] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 153.420876][ T9940] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 153.665310][ T9961] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.805311][ T9969] netlink: 'syz.0.1134': attribute type 3 has an invalid length. [ 153.823352][ T9972] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 153.954354][ T9980] netlink: 'syz.4.1137': attribute type 1 has an invalid length. [ 153.989437][ T9980] netlink: 'syz.4.1137': attribute type 1 has an invalid length. [ 154.072233][ T9993] netlink: 'syz.3.1141': attribute type 9 has an invalid length. [ 154.102987][ T9997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.213301][T10005] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 154.254999][T10000] bond3: (slave vcan1): refused to change device type [ 154.578837][T10027] openvswitch: netlink: Missing key (keys=40, expected=80) [ 154.768956][T10038] validate_nla: 2 callbacks suppressed [ 154.768976][T10038] netlink: 'syz.3.1152': attribute type 1 has an invalid length. [ 154.803469][T10036] __nla_validate_parse: 11 callbacks suppressed [ 154.803485][T10036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1151'. [ 154.969896][T10038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.992439][T10043] bond3: (slave gretap1): making interface the new active one [ 155.021630][T10043] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 155.057175][T10046] macvlan3: entered promiscuous mode [ 155.076321][T10046] macvlan3: entered allmulticast mode [ 155.096994][T10046] bond3: entered promiscuous mode [ 155.117573][T10046] gretap1: entered promiscuous mode [ 155.137897][T10046] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 155.146262][T10046] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 155.165371][T10046] bond3: left promiscuous mode [ 155.170241][T10046] gretap1: left promiscuous mode [ 155.190636][T10057] macvtap0: entered promiscuous mode [ 155.201500][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1156'. [ 155.222402][T10057] veth0_macvtap: left promiscuous mode [ 155.355215][T10057] macvtap0 (unregistering): left promiscuous mode [ 155.413259][T10071] xt_hashlimit: size too large, truncated to 1048576 [ 155.464845][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 155.489342][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1159'. [ 155.516460][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1159'. [ 155.595319][T10083] openvswitch: netlink: EtherType 50a is less than min 600 [ 155.616125][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1161'. [ 155.678611][T10083] netlink: 'syz.0.1162': attribute type 33 has an invalid length. [ 155.731314][T10083] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 155.756615][T10083] bond4 (unregistering): Released all slaves [ 155.940938][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'. [ 155.985328][T10106] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1169'. [ 156.001252][T10108] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1168'. [ 156.007475][T10109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1168'. [ 157.069243][T10180] netlink: 'syz.1.1195': attribute type 1 has an invalid length. [ 157.104492][T10182] netlink: 'syz.0.1196': attribute type 10 has an invalid length. [ 157.117604][T10182] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 157.134930][T10183] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 157.311115][T10196] syzkaller0: left promiscuous mode [ 157.325614][T10196] syzkaller0: left allmulticast mode [ 157.352634][T10199] netlink: 'syz.0.1199': attribute type 10 has an invalid length. [ 157.366060][T10199] syz_tun: entered promiscuous mode [ 157.397824][T10199] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 157.969246][T10245] syz_tun: refused to change device tx_queue_len [ 157.977426][T10243] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 158.504196][T10282] nbd: socks must be embedded in a SOCK_ITEM attr [ 158.565311][T10287] unsupported nla_type 33542 [ 158.649805][T10292] : entered promiscuous mode [ 158.690530][T10295] FAULT_INJECTION: forcing a failure. [ 158.690530][T10295] name failslab, interval 1, probability 0, space 0, times 1 [ 158.723510][T10295] CPU: 1 UID: 0 PID: 10295 Comm: syz.1.1226 Not tainted syzkaller #0 PREEMPT(full) [ 158.723533][T10295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.723544][T10295] Call Trace: [ 158.723551][T10295] [ 158.723558][T10295] dump_stack_lvl+0xe8/0x150 [ 158.723586][T10295] should_fail_ex+0x412/0x560 [ 158.723615][T10295] should_failslab+0xa8/0x100 [ 158.723637][T10295] ? skb_clone+0x212/0x3a0 [ 158.723655][T10295] kmem_cache_alloc_noprof+0x87/0x650 [ 158.723679][T10295] skb_clone+0x212/0x3a0 [ 158.723701][T10295] __netlink_deliver_tap+0x404/0x850 [ 158.723733][T10295] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.723756][T10295] netlink_deliver_tap+0x19c/0x1b0 [ 158.723779][T10295] netlink_sendskb+0x68/0x140 [ 158.723802][T10295] netlink_unicast+0x3a3/0x9b0 [ 158.723830][T10295] ? __pfx_netlink_unicast+0x10/0x10 [ 158.723867][T10295] netlink_rcv_skb+0x2b6/0x4b0 [ 158.723891][T10295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.723911][T10295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.723949][T10295] ? down_read+0x272/0x2e0 [ 158.723967][T10295] ? genl_rcv+0xd/0x40 [ 158.723986][T10295] genl_rcv+0x28/0x40 [ 158.724001][T10295] netlink_unicast+0x80f/0x9b0 [ 158.724029][T10295] ? __pfx_netlink_unicast+0x10/0x10 [ 158.724052][T10295] ? netlink_sendmsg+0x650/0xb40 [ 158.724079][T10295] netlink_sendmsg+0x813/0xb40 [ 158.724111][T10295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.724137][T10295] ? aa_sock_msg_perm+0xf1/0x1b0 [ 158.724160][T10295] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.724182][T10295] ____sys_sendmsg+0x972/0x9f0 [ 158.724208][T10295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.724233][T10295] ? import_iovec+0x73/0xa0 [ 158.724262][T10295] ___sys_sendmsg+0x2a5/0x360 [ 158.724285][T10295] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.724336][T10295] ? __fget_files+0x2a/0x420 [ 158.724359][T10295] ? __fget_files+0x3a0/0x420 [ 158.724393][T10295] __x64_sys_sendmsg+0x1bd/0x2a0 [ 158.724414][T10295] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.724442][T10295] ? __pfx_ksys_write+0x10/0x10 [ 158.724472][T10295] do_syscall_64+0x14d/0xf80 [ 158.724489][T10295] ? trace_irq_disable+0x3b/0x150 [ 158.724512][T10295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.724531][T10295] ? clear_bhb_loop+0x40/0x90 [ 158.724552][T10295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.724570][T10295] RIP: 0033:0x7f99ded9c799 [ 158.724587][T10295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.724601][T10295] RSP: 002b:00007f99dfcb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.724619][T10295] RAX: ffffffffffffffda RBX: 00007f99df015fa0 RCX: 00007f99ded9c799 [ 158.724632][T10295] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000004 [ 158.724642][T10295] RBP: 00007f99dfcb8090 R08: 0000000000000000 R09: 0000000000000000 [ 158.724652][T10295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.724662][T10295] R13: 00007f99df016038 R14: 00007f99df015fa0 R15: 00007fffbe1170e8 [ 158.724692][T10295] [ 159.117850][T10300] bridge5: port 1(erspan0) entered blocking state [ 159.124938][T10300] bridge5: port 1(erspan0) entered disabled state [ 159.131454][T10300] erspan0: entered allmulticast mode [ 159.163307][T10300] erspan0: entered promiscuous mode [ 159.172063][T10300] bridge5: port 1(erspan0) entered blocking state [ 159.178639][T10300] bridge5: port 1(erspan0) entered forwarding state [ 159.206845][T10302] vlan2: entered allmulticast mode [ 159.211970][T10302] bridge5: entered allmulticast mode [ 159.381759][T10317] Cannot find del_set index 4 as target [ 159.465124][T10323] netlink: 'syz.2.1234': attribute type 4 has an invalid length. [ 159.714512][T10342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.053899][T10368] __nla_validate_parse: 19 callbacks suppressed [ 160.053916][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'. [ 160.296152][T10379] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.1250'. [ 160.546399][T10401] netlink: 'syz.2.1256': attribute type 2 has an invalid length. [ 160.565214][T10401] vþ: entered promiscuous mode [ 160.677438][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 160.712333][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 160.755451][T10407] netlink: 'syz.3.1257': attribute type 10 has an invalid length. [ 160.943172][T10430] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1265'. [ 160.980791][T10432] batadv_slave_0: Caught tx_queue_len zero misconfig [ 161.017390][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 161.140909][T10445] gretap0: entered promiscuous mode [ 161.149695][T10445] vlan2: entered promiscuous mode [ 161.462543][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 161.719893][T10491] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1282'. [ 161.798565][T10493] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 162.323248][T10529] xt_hashlimit: size too large, truncated to 1048576 [ 162.606140][T10551] netlink: 'syz.1.1301': attribute type 64 has an invalid length. [ 162.614751][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 162.652481][T10553] openvswitch: netlink: Actions may not be safe on all matching packets [ 162.664167][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1303'. [ 162.758218][T10544] macvtap0: entered promiscuous mode [ 162.764716][T10544] vlan0: entered promiscuous mode [ 162.770220][T10544] macvtap0: entered allmulticast mode [ 162.776943][T10544] vlan0: entered allmulticast mode [ 162.782146][T10544] veth0_vlan: entered allmulticast mode [ 162.791891][T10553] team0: No ports can be present during mode change [ 163.095148][T10574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.195698][T10588] siw: device registration error -23 [ 163.857521][T10610] syzkaller0: entered promiscuous mode [ 163.863095][T10610] syzkaller0: entered allmulticast mode [ 164.988554][T10646] raw_sendmsg: syz.4.1329 forgot to set AF_INET. Fix it! [ 165.278649][T10625] netlink: 'syz.3.1323': attribute type 4 has an invalid length. [ 165.399463][T10663] netlink: 'syz.3.1335': attribute type 1 has an invalid length. [ 165.478551][T10663] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.523444][T10672] __nla_validate_parse: 8 callbacks suppressed [ 165.523461][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 165.567459][T10669] bond4: (slave geneve2): making interface the new active one [ 165.576283][T10669] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 165.590944][ T9915] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 165.618334][ T9915] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 165.665430][ T9915] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 165.698008][ T9915] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 165.850599][T10689] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1340'. [ 165.904528][T10689] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1340'. [ 165.928541][T10684] syzkaller0: entered promiscuous mode [ 165.934380][T10684] syzkaller0: entered allmulticast mode [ 166.016834][T10694] netlink: 'syz.3.1343': attribute type 9 has an invalid length. [ 166.059040][T10698] netlink: 'syz.1.1345': attribute type 2 has an invalid length. [ 166.068395][T10698] netlink: 'syz.1.1345': attribute type 1 has an invalid length. [ 166.160478][T10702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1346'. [ 166.211614][T10702] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1346'. [ 166.231085][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 166.456573][T10721] netlink: 'syz.3.1353': attribute type 9 has an invalid length. [ 166.556975][T10737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1357'. [ 166.867324][T10760] netlink: 808 bytes leftover after parsing attributes in process `syz.0.1361'. [ 167.220566][T10768] netlink: 'syz.3.1366': attribute type 1 has an invalid length. [ 167.229753][T10768] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1366'. [ 167.265461][T10778] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.514395][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1373'. [ 167.673257][T10798] syzkaller0: entered promiscuous mode [ 167.678840][T10798] syzkaller0: entered allmulticast mode [ 167.761284][T10783] netlink: 'syz.4.1370': attribute type 11 has an invalid length. [ 167.833179][T10808] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 167.842717][T10808] xt_connbytes: Forcing CT accounting to be enabled [ 168.022377][T10819] netlink: 'syz.3.1383': attribute type 15 has an invalid length. [ 168.077315][T10822] netlink: 'syz.2.1384': attribute type 1 has an invalid length. [ 168.397398][T10835] netlink: 'syz.4.1390': attribute type 21 has an invalid length. [ 168.425444][T10835] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.614577][T10848] syzkaller0: entered promiscuous mode [ 168.620176][T10848] syzkaller0: entered allmulticast mode [ 168.690850][T10862] netlink: 'syz.0.1398': attribute type 29 has an invalid length. [ 168.720113][T10862] netlink: 'syz.0.1398': attribute type 29 has an invalid length. [ 168.799141][T10869] openvswitch: netlink: IP tunnel dst address not specified [ 168.829392][T10869] openvswitch: netlink: IP tunnel dst address not specified [ 168.837478][T10869] openvswitch: netlink: IP tunnel dst address not specified [ 169.103381][T10894] netem: incorrect gi model size [ 169.113457][T10894] netem: change failed [ 169.649844][T10932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.705797][T10932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.836697][T10943] lo: Caught tx_queue_len zero misconfig [ 170.206860][T10964] bond0: entered promiscuous mode [ 170.212484][T10964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.251387][T10964] bond0: (slave bridge2): making interface the new active one [ 170.260374][T10964] bridge2: entered promiscuous mode [ 170.268482][T10964] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 170.555732][T10981] team0: Port device team_slave_0 removed [ 170.915665][T11014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.991169][T11014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.070298][T11022] syzkaller1: entered promiscuous mode [ 171.087143][T11022] syzkaller1: entered allmulticast mode [ 171.116543][T11023] bridge0: entered promiscuous mode [ 171.131213][T11023] __nla_validate_parse: 82 callbacks suppressed [ 171.131229][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1441'. [ 171.149448][T11029] validate_nla: 3 callbacks suppressed [ 171.149463][T11029] netlink: 'syz.2.1447': attribute type 4 has an invalid length. [ 171.200930][T11033] netlink: 'syz.2.1447': attribute type 4 has an invalid length. [ 171.257013][T11036] netlink: 'syz.4.1449': attribute type 21 has an invalid length. [ 171.428260][T11046] openvswitch: netlink: Flow actions attr not present in new flow. [ 171.629592][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'. [ 171.673133][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'. [ 171.690236][T11061] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1457'. [ 172.069619][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 172.384403][T11104] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1471'. [ 172.458306][T11114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.504752][T11115] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1471'. [ 172.542719][T11117] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.641673][T11123] team0: Device ip6gre1 is of different type [ 172.863508][T11138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1481'. [ 172.881418][T11138] IPv6: Can't replace route, no match found [ 172.891209][T11138] IPv6: Can't replace route, no match found [ 172.891912][T11141] netlink: 'syz.2.1482': attribute type 1 has an invalid length. [ 172.942565][T11144] bond4: option miimon: invalid value (18446744073709551585) [ 172.950623][T11144] bond4: option miimon: allowed values 0 - 2147483647 [ 172.958614][T11144] bond4 (unregistering): Released all slaves [ 173.001572][T11140] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 173.012089][T11140] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 173.036827][T11140] bond4: (slave ip6gre1): making interface the new active one [ 173.051647][T11140] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 173.408768][T11169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.415419][T11177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.522331][T11179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1492'. [ 174.119077][T11208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.172439][T11208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.338034][T11214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.350875][T11214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.382646][T11225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1507'. [ 174.455780][T11216] erspan0: entered promiscuous mode [ 174.503200][ T35] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.523859][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.532754][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 174.552110][ T35] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.593786][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.616384][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 174.634395][ T35] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.665215][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.683675][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 174.702997][ T35] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.719230][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.739691][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 175.123414][T11260] syzkaller0: entered promiscuous mode [ 175.129742][T11260] syzkaller0: entered allmulticast mode [ 175.139388][T11260] TC_ACT_REPEAT abuse ? [ 175.394554][T11271] batadv1: entered allmulticast mode [ 175.894231][ T163] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 176.096070][T11288] erspan0: left allmulticast mode [ 176.101677][T11288] erspan0: left promiscuous mode [ 176.107694][T11288] bridge5: port 1(erspan0) entered disabled state [ 176.129402][T11288] bridge_slave_0: left allmulticast mode [ 176.136051][T11288] bridge_slave_0: left promiscuous mode [ 176.146641][T11288] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.168717][T11288] bridge_slave_1: left allmulticast mode [ 176.177469][T11288] bridge_slave_1: left promiscuous mode [ 176.183298][T11288] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.197502][T11288] bond0: (slave bond_slave_0): Releasing backup interface [ 176.209113][T11288] bond0: (slave bond_slave_1): Releasing backup interface [ 176.225110][T11288] team0: Port device 26±ÿ removed [ 176.231055][T11288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.239642][T11288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.255998][T11288] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 176.348655][T11300] __nla_validate_parse: 5 callbacks suppressed [ 176.348674][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1534'. [ 176.438794][T11305] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1535'. [ 176.512526][T11309] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 177.548584][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1538'. [ 177.603793][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 177.747151][T11327] netlink: 'syz.2.1541': attribute type 1 has an invalid length. [ 177.756338][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 178.092515][T11352] sctp: [Deprecated]: syz.2.1549 (pid 11352) Use of int in max_burst socket option. [ 178.092515][T11352] Use struct sctp_assoc_value instead [ 178.111064][ T2614] block nbd0: Possible stuck request ffff888026b98000: control (read@0,1024B). Runtime 60 seconds [ 178.123146][ T2614] block nbd0: Possible stuck request ffff888026b98200: control (read@1024,1024B). Runtime 60 seconds [ 178.134840][ T2614] block nbd0: Possible stuck request ffff888026b98400: control (read@2048,1024B). Runtime 60 seconds [ 178.146761][ T2614] block nbd0: Possible stuck request ffff888026b98600: control (read@3072,1024B). Runtime 60 seconds [ 178.229763][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1552'. [ 178.253176][T11364] macsec2: entered promiscuous mode [ 178.263106][T11364] bridge0: entered promiscuous mode [ 178.269059][T11364] macsec2: entered allmulticast mode [ 178.275206][T11364] bridge0: entered allmulticast mode [ 178.281507][T11364] bridge0: port 3(macsec2) entered blocking state [ 178.288631][T11364] bridge0: port 3(macsec2) entered disabled state [ 178.301069][T11364] bridge0: left allmulticast mode [ 178.306369][T11364] bridge0: left promiscuous mode [ 178.427453][T11376] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1556'. [ 178.461242][T11373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1554'. [ 178.487999][T11372] syzkaller0: entered promiscuous mode [ 178.502499][T11372] syzkaller0: entered allmulticast mode [ 178.589618][T11390] netlink: 'syz.2.1558': attribute type 1 has an invalid length. [ 178.644709][ T6093] wlan0: Trigger new scan to find an IBSS to join [ 178.718199][T11396] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1561'. [ 178.786491][T11402] netlink: 'syz.4.1559': attribute type 21 has an invalid length. [ 178.794591][T11402] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1559'. [ 178.852012][T11404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1564'. [ 179.232380][T11434] netlink: 'syz.4.1572': attribute type 3 has an invalid length. [ 179.430228][T11444] tipc: Started in network mode [ 179.475310][T11454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.487388][T11456] sctp: [Deprecated]: syz.0.1578 (pid 11456) Use of int in max_burst socket option deprecated. [ 179.487388][T11456] Use struct sctp_assoc_value instead [ 179.498680][T11444] tipc: Node identity , cluster identity 4711 [ 179.521670][T11444] tipc: Failed to obtain node identity [ 179.533375][T11444] tipc: Enabling of bearer rejected, failed to enable media [ 179.555068][T11457] syzkaller0: entered promiscuous mode [ 179.560553][T11457] syzkaller0: entered allmulticast mode [ 179.669970][T11469] netlink: 'syz.2.1582': attribute type 1 has an invalid length. [ 179.711455][T11469] netlink: 'syz.2.1582': attribute type 1 has an invalid length. [ 179.740776][T11469] netlink: 'syz.2.1582': attribute type 1 has an invalid length. [ 179.771232][T11469] netlink: 'syz.2.1582': attribute type 1 has an invalid length. [ 180.185845][T11507] openvswitch: netlink: Flow actions attr not present in new flow. [ 180.317220][T11503] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.324972][T11503] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.680571][T11503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.084614][T11504] netlink: 'syz.0.1592': attribute type 3 has an invalid length. [ 181.210627][ T9915] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.239344][ T9915] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.282423][ T9915] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.308834][ T9915] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.484455][T11550] __nla_validate_parse: 26 callbacks suppressed [ 181.484473][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1600'. [ 181.558637][T11550] vlan0: left allmulticast mode [ 181.564305][T11550] veth0_vlan: left allmulticast mode [ 181.565619][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1604'. [ 181.575508][T11550] vlan0: left promiscuous mode [ 181.685289][ T6093] wlan0: Trigger new scan to find an IBSS to join [ 181.703199][T11564] ipt_REJECT: TCP_RESET invalid for non-tcp [ 181.729695][T11566] netlink: 181328 bytes leftover after parsing attributes in process `syz.0.1607'. [ 182.182149][T11587] syzkaller0: entered promiscuous mode [ 182.191374][T11587] syzkaller0: entered allmulticast mode [ 182.254395][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 182.268975][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 182.289387][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 182.310681][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 182.335636][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 182.347396][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 182.357097][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 182.615144][ T9915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.622529][T11569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.751487][T11610] IPVS: set_ctl: invalid protocol: 2 10.1.1.0:20001 [ 182.822083][T11612] vlan2: entered allmulticast mode [ 182.829271][T11612] hsr0: entered allmulticast mode [ 182.837533][T11612] hsr_slave_0: entered allmulticast mode [ 182.843242][T11612] hsr_slave_1: entered allmulticast mode [ 182.865594][T11617] netlink: 'syz.4.1617': attribute type 2 has an invalid length. [ 182.977775][T11628] netlink: 'syz.1.1622': attribute type 10 has an invalid length. [ 183.119431][T11636] netlink: 'syz.4.1624': attribute type 83 has an invalid length. [ 183.347724][T11653] netlink: 'syz.1.1626': attribute type 1 has an invalid length. [ 183.395839][T11653] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.539825][T11662] bond5: (slave geneve4): making interface the new active one [ 183.610292][T11662] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 183.690029][T11668] : entered promiscuous mode [ 184.367474][T11686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.422572][T11686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.447690][T11686] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 184.494721][T11686] bond0 (unregistering): Released all slaves [ 184.592388][T11706] netlink: 'syz.4.1645': attribute type 1 has an invalid length. [ 184.655659][ T9915] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 184.686876][T11706] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.729986][T11716] openvswitch: netlink: IP tunnel dst address not specified [ 184.741107][T11699] syzkaller0: entered promiscuous mode [ 184.747167][T11699] syzkaller0: entered allmulticast mode [ 184.864531][T11721] ipt_ECN: cannot use operation on non-tcp rule [ 184.880068][T11723] xt_ecn: cannot match TCP bits for non-tcp packets [ 189.216716][ T5196] udevd[5196]: worker [5823] /devices/virtual/block/nbd0 is taking a long time [ 191.043696][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 191.050622][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 191.051240][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 191.058257][ T5839] Bluetooth: hci0: command 0x0401 tx timeout [ 194.090999][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.100111][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.783408][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 200.795379][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 200.802964][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 200.811867][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 200.819871][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.868203][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 200.878151][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 200.886758][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 200.895260][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 200.902775][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 200.950448][ T5828] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 200.959913][ T5828] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 200.968132][ T5828] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 200.977088][ T5828] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 200.986380][ T5828] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 201.301225][T11773] chnl_net:caif_netlink_parms(): no params data found [ 201.489372][T11773] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.496902][T11773] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.504582][T11773] bridge_slave_0: entered allmulticast mode [ 201.511409][T11773] bridge_slave_0: entered promiscuous mode [ 201.532974][T11773] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.540523][T11773] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.548175][T11773] bridge_slave_1: entered allmulticast mode [ 201.556057][T11773] bridge_slave_1: entered promiscuous mode [ 201.616958][T11773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.630934][T11773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.679597][T11773] team0: Port device team_slave_0 added [ 201.696365][T11773] team0: Port device team_slave_1 added [ 201.703081][T11775] chnl_net:caif_netlink_parms(): no params data found [ 201.795531][T11773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.802831][T11773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.829428][T11773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.866156][T11773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.873120][T11773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.914198][T11773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.991795][ T5829] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 202.010929][ T5829] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 202.019228][ T5829] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 202.025272][ T5834] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 202.027107][ T5829] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 202.042608][ T5834] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 202.052591][ T5829] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 202.052650][ T5834] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 202.068695][ T5829] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 202.077667][ T5829] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 202.118943][T11773] hsr_slave_0: entered promiscuous mode [ 202.125581][T11773] hsr_slave_1: entered promiscuous mode [ 202.131545][T11773] debugfs: 'hsr0' already exists in 'hsr' [ 202.138310][T11773] Cannot create hsr debugfs directory [ 202.152995][T11775] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.160584][T11775] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.168174][T11775] bridge_slave_0: entered allmulticast mode [ 202.175685][T11775] bridge_slave_0: entered promiscuous mode [ 202.183392][T11775] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.190590][T11775] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.198783][T11775] bridge_slave_1: entered allmulticast mode [ 202.206837][T11775] bridge_slave_1: entered promiscuous mode [ 202.322977][T11777] chnl_net:caif_netlink_parms(): no params data found [ 202.342015][T11775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.356558][T11775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.499728][T11775] team0: Port device team_slave_0 added [ 202.537257][T11775] team0: Port device team_slave_1 added [ 202.677169][T11775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.695700][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.722748][T11775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.759198][T11775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.766268][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.792903][T11775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.822144][T11777] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.830106][T11777] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.837744][T11777] bridge_slave_0: entered allmulticast mode [ 202.845772][T11777] bridge_slave_0: entered promiscuous mode [ 202.882008][T11777] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.889294][ T5829] Bluetooth: hci5: command tx timeout [ 202.896122][T11777] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.903305][T11777] bridge_slave_1: entered allmulticast mode [ 202.910500][T11777] bridge_slave_1: entered promiscuous mode [ 202.963933][ T5829] Bluetooth: hci6: command tx timeout [ 202.995090][T11777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.007564][T11777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.043804][ T5829] Bluetooth: hci7: command tx timeout [ 203.070201][T11775] hsr_slave_0: entered promiscuous mode [ 203.078631][T11775] hsr_slave_1: entered promiscuous mode [ 203.086263][T11775] debugfs: 'hsr0' already exists in 'hsr' [ 203.091993][T11775] Cannot create hsr debugfs directory [ 203.109293][T11777] team0: Port device team_slave_0 added [ 203.118633][T11777] team0: Port device team_slave_1 added [ 203.207237][T11777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.214268][T11777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.241064][T11777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.276397][T11777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.283337][T11777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.310765][T11777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.430837][T11777] hsr_slave_0: entered promiscuous mode [ 203.437148][T11777] hsr_slave_1: entered promiscuous mode [ 203.443395][T11777] debugfs: 'hsr0' already exists in 'hsr' [ 203.449777][T11777] Cannot create hsr debugfs directory [ 203.473147][T11792] chnl_net:caif_netlink_parms(): no params data found [ 203.617870][T11793] chnl_net:caif_netlink_parms(): no params data found [ 203.698997][T11792] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.706246][T11792] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.713384][T11792] bridge_slave_0: entered allmulticast mode [ 203.721016][T11792] bridge_slave_0: entered promiscuous mode [ 203.748545][T11792] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.755839][T11792] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.763053][T11792] bridge_slave_1: entered allmulticast mode [ 203.771414][T11792] bridge_slave_1: entered promiscuous mode [ 203.846833][T11792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.877334][T11792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.892759][T11793] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.900061][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.907797][T11793] bridge_slave_0: entered allmulticast mode [ 203.915257][T11793] bridge_slave_0: entered promiscuous mode [ 203.937480][T11793] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.945505][T11793] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.952947][T11793] bridge_slave_1: entered allmulticast mode [ 203.960300][T11793] bridge_slave_1: entered promiscuous mode [ 204.003128][T11792] team0: Port device team_slave_0 added [ 204.022449][T11793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.035015][T11792] team0: Port device team_slave_1 added [ 204.056006][T11793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.107812][T11792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.115553][T11792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.142236][T11792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.162799][T11792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.166363][ T5837] Bluetooth: hci8: command tx timeout [ 204.170854][T11792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.177350][ T5829] Bluetooth: hci9: command tx timeout [ 204.202835][T11792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.221765][T11793] team0: Port device team_slave_0 added [ 204.243679][T11793] team0: Port device team_slave_1 added [ 204.276806][T11793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.284370][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.310748][T11793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.338806][T11793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.346369][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.373329][T11793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.409949][T11792] hsr_slave_0: entered promiscuous mode [ 204.416489][T11792] hsr_slave_1: entered promiscuous mode [ 204.422525][T11792] debugfs: 'hsr0' already exists in 'hsr' [ 204.429001][T11792] Cannot create hsr debugfs directory [ 204.490705][T11793] hsr_slave_0: entered promiscuous mode [ 204.497308][T11793] hsr_slave_1: entered promiscuous mode [ 204.503344][T11793] debugfs: 'hsr0' already exists in 'hsr' [ 204.509565][T11793] Cannot create hsr debugfs directory [ 204.964897][ T5829] Bluetooth: hci5: command tx timeout [ 205.044278][ T5829] Bluetooth: hci6: command tx timeout [ 205.123757][ T5829] Bluetooth: hci7: command tx timeout [ 206.243946][ T5837] Bluetooth: hci8: command tx timeout [ 206.249418][ T5829] Bluetooth: hci9: command tx timeout [ 207.043770][ T5829] Bluetooth: hci5: command tx timeout [ 207.123788][ T5829] Bluetooth: hci6: command tx timeout [ 207.203771][ T5829] Bluetooth: hci7: command tx timeout [ 208.165756][ T2614] block nbd0: Possible stuck request ffff888026b98000: control (read@0,1024B). Runtime 90 seconds [ 208.176514][ T2614] block nbd0: Possible stuck request ffff888026b98200: control (read@1024,1024B). Runtime 90 seconds [ 208.187894][ T2614] block nbd0: Possible stuck request ffff888026b98400: control (read@2048,1024B). Runtime 90 seconds [ 208.198917][ T2614] block nbd0: Possible stuck request ffff888026b98600: control (read@3072,1024B). Runtime 90 seconds [ 208.324278][ T5829] Bluetooth: hci9: command tx timeout [ 208.324294][ T5837] Bluetooth: hci8: command tx timeout [ 209.123810][ T5829] Bluetooth: hci5: command tx timeout [ 209.204013][ T5829] Bluetooth: hci6: command tx timeout [ 209.283705][ T5829] Bluetooth: hci7: command tx timeout [ 210.403809][ T5829] Bluetooth: hci8: command tx timeout [ 210.404237][ T5837] Bluetooth: hci9: command tx timeout [ 215.204741][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 238.244181][ T2614] block nbd0: Possible stuck request ffff888026b98000: control (read@0,1024B). Runtime 120 seconds [ 238.255552][ T2614] block nbd0: Possible stuck request ffff888026b98200: control (read@1024,1024B). Runtime 120 seconds [ 238.267480][ T2614] block nbd0: Possible stuck request ffff888026b98400: control (read@2048,1024B). Runtime 120 seconds [ 238.278758][ T2614] block nbd0: Possible stuck request ffff888026b98600: control (read@3072,1024B). Runtime 120 seconds [ 247.203972][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.525398][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.534431][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.353140][ T5829] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 261.363066][ T5829] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 261.372075][ T5829] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 261.384884][ T5829] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 261.392586][ T5829] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 261.425990][ T5829] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 261.434712][ T5829] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 261.442660][ T5829] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 261.451650][ T5829] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 261.460764][ T5829] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 261.469958][ T5829] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 261.474659][ T5828] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 261.488024][ T5828] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 261.513524][ T5828] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 261.522075][ T5828] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 261.808009][T11822] chnl_net:caif_netlink_parms(): no params data found [ 261.978133][T11822] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.986085][T11822] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.993510][T11822] bridge_slave_0: entered allmulticast mode [ 262.002506][T11822] bridge_slave_0: entered promiscuous mode [ 262.027769][T11822] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.035108][T11822] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.042214][T11822] bridge_slave_1: entered allmulticast mode [ 262.049338][T11822] bridge_slave_1: entered promiscuous mode [ 262.109814][T11822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.129546][T11822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.175686][T11822] team0: Port device team_slave_0 added [ 262.184164][T11822] team0: Port device team_slave_1 added [ 262.222231][T11822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.229637][T11822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.256339][T11822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.286221][T11822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.294977][T11822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.322547][T11822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.445164][ T5834] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 262.454693][ T5834] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 262.464944][ T5834] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 262.475203][ T5834] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 262.487418][ T5834] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 262.546897][ T5834] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 262.557178][ T5834] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 262.567981][ T5834] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 262.577245][ T5834] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 262.585230][ T5834] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 262.653444][T11824] chnl_net:caif_netlink_parms(): no params data found [ 262.672739][T11822] hsr_slave_0: entered promiscuous mode [ 262.679170][T11822] hsr_slave_1: entered promiscuous mode [ 262.685370][T11822] debugfs: 'hsr0' already exists in 'hsr' [ 262.691087][T11822] Cannot create hsr debugfs directory [ 262.764672][T11826] chnl_net:caif_netlink_parms(): no params data found [ 263.106123][T11826] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.113315][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.120645][T11826] bridge_slave_0: entered allmulticast mode [ 263.130325][T11826] bridge_slave_0: entered promiscuous mode [ 263.143176][T11826] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.150457][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.157676][T11826] bridge_slave_1: entered allmulticast mode [ 263.165582][T11826] bridge_slave_1: entered promiscuous mode [ 263.173057][T11824] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.180676][T11824] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.188397][T11824] bridge_slave_0: entered allmulticast mode [ 263.196274][T11824] bridge_slave_0: entered promiscuous mode [ 263.211436][T11824] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.218977][T11824] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.226905][T11824] bridge_slave_1: entered allmulticast mode [ 263.233988][T11824] bridge_slave_1: entered promiscuous mode [ 263.308833][T11826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.349357][T11826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.370068][T11824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.385383][T11824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.443755][ T5834] Bluetooth: hci10: command tx timeout [ 263.450605][T11826] team0: Port device team_slave_0 added [ 263.463341][T11826] team0: Port device team_slave_1 added [ 263.477682][T11824] team0: Port device team_slave_0 added [ 263.513133][T11826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.520419][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.548683][ T5834] Bluetooth: hci11: command tx timeout [ 263.554166][T11826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.567283][T11824] team0: Port device team_slave_1 added [ 263.588383][T11826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.595732][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.623081][ T5834] Bluetooth: hci12: command tx timeout [ 263.629921][T11826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.740292][T11824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.748446][T11824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.784387][T11824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.827407][T11824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.836946][T11824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.865714][T11824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.887912][T11841] chnl_net:caif_netlink_parms(): no params data found [ 263.926776][T11826] hsr_slave_0: entered promiscuous mode [ 263.932982][T11826] hsr_slave_1: entered promiscuous mode [ 263.939187][T11826] debugfs: 'hsr0' already exists in 'hsr' [ 263.945165][T11826] Cannot create hsr debugfs directory [ 263.965102][T11839] chnl_net:caif_netlink_parms(): no params data found [ 264.032948][T11824] hsr_slave_0: entered promiscuous mode [ 264.039264][T11824] hsr_slave_1: entered promiscuous mode [ 264.045710][T11824] debugfs: 'hsr0' already exists in 'hsr' [ 264.051603][T11824] Cannot create hsr debugfs directory [ 264.261844][T11841] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.269778][T11841] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.277394][T11841] bridge_slave_0: entered allmulticast mode [ 264.284770][T11841] bridge_slave_0: entered promiscuous mode [ 264.292285][T11839] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.299806][T11839] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.307444][T11839] bridge_slave_0: entered allmulticast mode [ 264.314916][T11839] bridge_slave_0: entered promiscuous mode [ 264.334805][T11841] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.341912][T11841] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.349620][T11841] bridge_slave_1: entered allmulticast mode [ 264.357076][T11841] bridge_slave_1: entered promiscuous mode [ 264.364230][T11839] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.371859][T11839] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.379312][T11839] bridge_slave_1: entered allmulticast mode [ 264.387050][T11839] bridge_slave_1: entered promiscuous mode [ 264.433156][T11839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.471561][T11839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.513895][T11841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.549530][T11841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.560325][T11839] team0: Port device team_slave_0 added [ 264.566504][ T5834] Bluetooth: hci13: command tx timeout [ 264.598655][T11839] team0: Port device team_slave_1 added [ 264.644515][ T5834] Bluetooth: hci14: command tx timeout [ 264.658953][T11841] team0: Port device team_slave_0 added [ 264.676546][T11839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.683483][T11839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.714622][T11839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.734009][T11841] team0: Port device team_slave_1 added [ 264.752554][T11839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.759973][T11839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.787606][T11839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.822000][T11841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.829330][T11841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.857246][T11841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.870638][T11841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.879741][T11841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.906127][T11841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.961185][T11839] hsr_slave_0: entered promiscuous mode [ 264.968079][T11839] hsr_slave_1: entered promiscuous mode [ 264.974505][T11839] debugfs: 'hsr0' already exists in 'hsr' [ 264.980617][T11839] Cannot create hsr debugfs directory [ 265.026940][T11841] hsr_slave_0: entered promiscuous mode [ 265.033207][T11841] hsr_slave_1: entered promiscuous mode [ 265.039910][T11841] debugfs: 'hsr0' already exists in 'hsr' [ 265.047730][T11841] Cannot create hsr debugfs directory [ 265.524311][ T5834] Bluetooth: hci10: command tx timeout [ 265.604343][ T5834] Bluetooth: hci11: command tx timeout [ 265.684128][ T5834] Bluetooth: hci12: command tx timeout [ 266.643817][ T5834] Bluetooth: hci13: command tx timeout [ 266.723837][ T5834] Bluetooth: hci14: command tx timeout [ 267.603840][ T5834] Bluetooth: hci10: command tx timeout [ 267.694180][ T5828] Bluetooth: hci11: command tx timeout [ 267.764453][ T5834] Bluetooth: hci12: command tx timeout [ 268.327971][ T2614] block nbd0: Possible stuck request ffff888026b98000: control (read@0,1024B). Runtime 150 seconds [ 268.339164][ T2614] block nbd0: Possible stuck request ffff888026b98200: control (read@1024,1024B). Runtime 150 seconds [ 268.350744][ T2614] block nbd0: Possible stuck request ffff888026b98400: control (read@2048,1024B). Runtime 150 seconds [ 268.362514][ T2614] block nbd0: Possible stuck request ffff888026b98600: control (read@3072,1024B). Runtime 150 seconds [ 268.724227][ T5834] Bluetooth: hci13: command tx timeout [ 268.803906][ T5834] Bluetooth: hci14: command tx timeout [ 269.683918][ T5834] Bluetooth: hci10: command tx timeout [ 269.764168][ T5834] Bluetooth: hci11: command tx timeout [ 269.843886][ T5834] Bluetooth: hci12: command tx timeout [ 270.803822][ T5834] Bluetooth: hci13: command tx timeout [ 270.884139][ T5834] Bluetooth: hci14: command tx timeout [ 278.084252][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 279.204745][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 298.405749][ T2614] block nbd0: Possible stuck request ffff888026b98000: control (read@0,1024B). Runtime 180 seconds [ 298.416913][ T2614] block nbd0: Possible stuck request ffff888026b98200: control (read@1024,1024B). Runtime 180 seconds [ 298.428320][ T2614] block nbd0: Possible stuck request ffff888026b98400: control (read@2048,1024B). Runtime 180 seconds [ 298.439873][ T2614] block nbd0: Possible stuck request ffff888026b98600: control (read@3072,1024B). Runtime 180 seconds [ 299.112019][ T5196] udevd[5196]: worker [5823] /devices/virtual/block/nbd0 timeout; kill it [ 299.121076][ T5196] udevd[5196]: seq 12631 '/devices/virtual/block/nbd0' killed [ 311.204375][ T6093] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 316.966800][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 316.975832][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.930754][ T5828] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 321.938490][ T5829] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 321.940176][ T5829] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 321.954734][ T5829] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 321.955876][ T5828] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 321.962929][ T5829] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 321.970202][ T5828] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 321.977032][ T5829] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 321.990046][ T5828] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 322.004462][ T5829] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 322.067487][ T5829] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 322.079416][ T5829] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 322.116285][ T5147] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 322.125666][ T5839] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 322.137071][ T5839] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 322.536223][T11872] chnl_net:caif_netlink_parms(): no params data found [ 322.671821][T11872] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.679911][T11872] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.688363][T11872] bridge_slave_0: entered allmulticast mode [ 322.696901][T11872] bridge_slave_0: entered promiscuous mode [ 322.725634][T11872] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.732759][T11872] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.743539][T11872] bridge_slave_1: entered allmulticast mode [ 322.756296][T11872] bridge_slave_1: entered promiscuous mode [ 322.808416][T11872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.822379][T11872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.959156][T11872] team0: Port device team_slave_0 added [ 322.976954][T11872] team0: Port device team_slave_1 added [ 323.024172][ T5839] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 323.035784][ T5839] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 323.046517][ T51] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 323.046722][ T5839] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 323.055580][ T51] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 323.063550][ T5839] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 323.069645][ T51] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 323.084330][ T5839] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 323.094492][ T5839] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 323.102394][ T5839] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 323.142405][T11872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.150655][T11872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.176726][T11872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.211624][T11872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.231720][T11872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.258155][T11872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.322228][T11871] chnl_net:caif_netlink_parms(): no params data found [ 323.471175][T11872] hsr_slave_0: entered promiscuous mode [ 323.478578][T11872] hsr_slave_1: entered promiscuous mode [ 323.485527][T11872] debugfs: 'hsr0' already exists in 'hsr' [ 323.491261][T11872] Cannot create hsr debugfs directory [ 323.512895][T11875] chnl_net:caif_netlink_parms(): no params data found [ 323.624018][T11871] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.631177][T11871] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.643871][T11871] bridge_slave_0: entered allmulticast mode [ 323.651729][T11871] bridge_slave_0: entered promiscuous mode [ 323.702254][T11871] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.709778][T11871] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.717477][T11871] bridge_slave_1: entered allmulticast mode [ 323.725560][T11871] bridge_slave_1: entered promiscuous mode [ 323.828316][T11871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.882906][T11871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.960061][T11875] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.967730][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.975280][T11875] bridge_slave_0: entered allmulticast mode [ 323.982171][T11875] bridge_slave_0: entered promiscuous mode [ 323.991433][T11871] team0: Port device team_slave_0 added [ 324.000525][T11871] team0: Port device team_slave_1 added [ 324.015437][ T5839] Bluetooth: hci16: command tx timeout [ 324.036893][T11875] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.045040][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.052159][T11875] bridge_slave_1: entered allmulticast mode [ 324.059574][T11875] bridge_slave_1: entered promiscuous mode [ 324.084424][ T5839] Bluetooth: hci15: command tx timeout [ 324.125813][T11875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.141217][T11871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.148962][T11871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.175423][ T5147] Bluetooth: hci5: command 0x0406 tx timeout [ 324.176579][ T5147] Bluetooth: hci6: command 0x0406 tx timeout [ 324.184568][T11871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.189412][ T5147] Bluetooth: hci7: command 0x0406 tx timeout [ 324.198827][ T5839] Bluetooth: hci17: command tx timeout [ 324.239022][T11875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.249653][T11871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.257849][T11871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.285419][T11871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.378928][T11875] team0: Port device team_slave_0 added [ 324.416209][T11875] team0: Port device team_slave_1 added [ 324.450777][T11871] hsr_slave_0: entered promiscuous mode [ 324.457210][T11871] hsr_slave_1: entered promiscuous mode [ 324.463288][T11871] debugfs: 'hsr0' already exists in 'hsr' [ 324.469128][T11871] Cannot create hsr debugfs directory [ 324.506981][T11887] chnl_net:caif_netlink_parms(): no params data found [ 324.571580][T11875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.579119][T11875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.607025][T11875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.648783][T11875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.656595][T11875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.683462][T11875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.708823][T11886] chnl_net:caif_netlink_parms(): no params data found [ 324.920904][T11875] hsr_slave_0: entered promiscuous mode [ 324.927705][T11875] hsr_slave_1: entered promiscuous mode [ 324.933768][T11875] debugfs: 'hsr0' already exists in 'hsr' [ 324.939609][T11875] Cannot create hsr debugfs directory [ 324.955352][T11887] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.962755][T11887] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.970602][T11887] bridge_slave_0: entered allmulticast mode [ 324.977584][T11887] bridge_slave_0: entered promiscuous mode [ 324.985166][T11886] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.992675][T11886] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.000228][T11886] bridge_slave_0: entered allmulticast mode [ 325.007234][T11886] bridge_slave_0: entered promiscuous mode [ 325.039981][T11887] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.047295][T11887] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.055228][T11887] bridge_slave_1: entered allmulticast mode [ 325.062194][T11887] bridge_slave_1: entered promiscuous mode [ 325.069452][T11886] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.076717][T11886] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.084098][T11886] bridge_slave_1: entered allmulticast mode [ 325.091297][T11886] bridge_slave_1: entered promiscuous mode [ 325.123944][ T5828] Bluetooth: hci19: command tx timeout [ 325.130342][ T5837] Bluetooth: hci18: command tx timeout [ 325.178502][T11887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.217638][T11887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.229722][T11886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.269001][T11886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.345037][T11887] team0: Port device team_slave_0 added [ 325.369823][T11887] team0: Port device team_slave_1 added [ 325.387688][T11886] team0: Port device team_slave_0 added [ 325.417474][T11886] team0: Port device team_slave_1 added [ 325.424872][T11887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.431809][T11887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.458463][T11887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.486734][T11887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.495041][T11887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.521487][T11887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.560435][T11886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.568219][T11886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.594982][T11886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.608365][T11886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.616669][T11886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.642771][T11886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.707516][T11887] hsr_slave_0: entered promiscuous mode [ 325.721127][T11887] hsr_slave_1: entered promiscuous mode [ 325.727269][T11887] debugfs: 'hsr0' already exists in 'hsr' [ 325.732989][T11887] Cannot create hsr debugfs directory [ 325.761240][T11886] hsr_slave_0: entered promiscuous mode [ 325.768527][T11886] hsr_slave_1: entered promiscuous mode [ 325.775411][T11886] debugfs: 'hsr0' already exists in 'hsr' [ 325.781125][T11886] Cannot create hsr debugfs directory [ 326.083741][ T5837] Bluetooth: hci16: command tx timeout [ 326.164254][ T5837] Bluetooth: hci15: command tx timeout [ 326.243902][ T5837] Bluetooth: hci17: command tx timeout [ 327.209070][ T5839] Bluetooth: hci18: command tx timeout [ 327.209071][ T5829] Bluetooth: hci19: command tx timeout [ 328.164379][ T5829] Bluetooth: hci16: command tx timeout [ 328.244279][ T5829] Bluetooth: hci15: command tx timeout [ 328.324516][ T5829] Bluetooth: hci17: command tx timeout [ 328.484453][ T2614] block nbd0: Possible stuck request ffff888026b98000: control (read@0,1024B). Runtime 210 seconds [ 328.495507][ T2614] block nbd0: Possible stuck request ffff888026b98200: control (read@1024,1024B). Runtime 210 seconds [ 328.507247][ T2614] block nbd0: Possible stuck request ffff888026b98400: control (read@2048,1024B). Runtime 210 seconds [ 328.518667][ T2614] block nbd0: Possible stuck request ffff888026b98600: control (read@3072,1024B). Runtime 210 seconds [ 329.286856][ T5829] Bluetooth: hci18: command tx timeout [ 329.286879][ T5147] Bluetooth: hci8: command 0x0406 tx timeout [ 329.292646][ T5829] Bluetooth: hci19: command tx timeout [ 329.292685][ T5829] Bluetooth: hci9: command 0x0406 tx timeout [ 329.764127][ T30] INFO: task syz.0.1649:11721 blocked for more than 143 seconds. [ 329.771887][ T30] Not tainted syzkaller #0 [ 329.780102][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.789207][ T30] task:syz.0.1649 state:D stack:26120 pid:11721 tgid:11720 ppid:5833 task_flags:0x480140 flags:0x00080002 [ 329.801504][ T30] Call Trace: [ 329.804893][ T30] [ 329.807836][ T30] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 329.812329][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 329.817536][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 329.822582][ T30] ? __pfx___schedule+0x10/0x10 [ 329.828332][ T30] ? schedule+0x90/0x360 [ 329.832597][ T30] schedule+0x164/0x360 [ 329.873122][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 329.894291][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 329.900405][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 329.907269][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 329.913449][ T30] nbd_set_size+0x454/0x680 [ 329.918683][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 329.925333][ T30] ? nla_memcpy+0x5b/0xc0 [ 329.929668][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 329.935066][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 329.940779][ T30] ? rcu_is_watching+0x15/0xb0 [ 329.945693][ T30] ? trace_kmalloc+0x2a/0x110 [ 329.950381][ T30] ? __nla_parse+0x40/0x60 [ 329.954844][ T30] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 329.961175][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 329.966824][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 329.972901][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 329.977897][ T30] genl_rcv_msg+0x61c/0x7a0 [ 329.982412][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.987619][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 329.993335][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 329.998654][ T30] netlink_rcv_skb+0x232/0x4b0 [ 330.003443][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.008959][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.014340][ T30] ? down_read+0x272/0x2e0 [ 330.018742][ T30] ? genl_rcv+0xd/0x40 [ 330.022788][ T30] genl_rcv+0x28/0x40 [ 330.026896][ T30] netlink_unicast+0x80f/0x9b0 [ 330.031679][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 330.036992][ T30] ? netlink_sendmsg+0x650/0xb40 [ 330.041935][ T30] ? skb_put+0x11b/0x210 [ 330.046271][ T30] netlink_sendmsg+0x813/0xb40 [ 330.051049][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.056430][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 330.061376][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.066753][ T30] ____sys_sendmsg+0x972/0x9f0 [ 330.071523][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.076850][ T30] ? import_iovec+0x73/0xa0 [ 330.081368][ T30] ___sys_sendmsg+0x2a5/0x360 [ 330.086421][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.091630][ T30] ? futex_wake+0x4ac/0x580 [ 330.096309][ T30] ? __fget_files+0x2a/0x420 [ 330.100948][ T30] ? __fget_files+0x3a0/0x420 [ 330.105752][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 330.110918][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.116456][ T30] ? rcu_is_watching+0x15/0xb0 [ 330.121243][ T30] do_syscall_64+0x14d/0xf80 [ 330.125944][ T30] ? trace_irq_disable+0x3b/0x150 [ 330.131009][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.137199][ T30] ? clear_bhb_loop+0x40/0x90 [ 330.141880][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.147887][ T30] RIP: 0033:0x7fccde79c799 [ 330.152311][ T30] RSP: 002b:00007fccdf6b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.160774][ T30] RAX: ffffffffffffffda RBX: 00007fccdea15fa0 RCX: 00007fccde79c799 [ 330.169046][ T30] RDX: 0000000020000800 RSI: 00002000000001c0 RDI: 0000000000000009 [ 330.177073][ T30] RBP: 00007fccde832c99 R08: 0000000000000000 R09: 0000000000000000 [ 330.185117][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.193078][ T30] R13: 00007fccdea16038 R14: 00007fccdea15fa0 R15: 00007ffc5a171e38 [ 330.201131][ T30] [ 330.204433][ T30] INFO: task syz.3.1653:11732 blocked for more than 143 seconds. [ 330.212346][ T30] Not tainted syzkaller #0 [ 330.217420][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.226134][ T30] task:syz.3.1653 state:D stack:26208 pid:11732 tgid:11726 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 330.238076][ T30] Call Trace: [ 330.241353][ T30] [ 330.244550][ T30] __schedule+0x15dd/0x52d0 [ 330.244913][ T5828] Bluetooth: hci16: command tx timeout [ 330.249083][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 330.259490][ T30] ? __pfx___schedule+0x10/0x10 [ 330.264434][ T30] ? schedule+0x90/0x360 [ 330.268686][ T30] schedule+0x164/0x360 [ 330.272832][ T30] schedule_preempt_disabled+0x13/0x30 [ 330.278408][ T30] __mutex_lock+0x7fe/0x1300 [ 330.283000][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 330.288459][ T30] ? __mutex_lock+0x5ac/0x1300 [ 330.293217][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 330.297960][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 330.302994][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 330.307976][ T30] ? radix_tree_lookup+0x240/0x290 [ 330.313304][ T30] genl_rcv_msg+0x10b/0x7a0 [ 330.317982][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.323010][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 330.324562][ T5828] Bluetooth: hci15: command tx timeout [ 330.328641][ T30] netlink_rcv_skb+0x232/0x4b0 [ 330.338236][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.343263][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.348620][ T30] ? down_read+0x272/0x2e0 [ 330.353037][ T30] ? genl_rcv+0xd/0x40 [ 330.357419][ T30] genl_rcv+0x28/0x40 [ 330.361391][ T30] netlink_unicast+0x80f/0x9b0 [ 330.366320][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 330.371613][ T30] ? netlink_sendmsg+0x650/0xb40 [ 330.376975][ T30] ? skb_put+0x11b/0x210 [ 330.381214][ T30] netlink_sendmsg+0x813/0xb40 [ 330.386194][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.391479][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 330.396572][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.401863][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.404339][ T5828] Bluetooth: hci17: command tx timeout [ 330.407451][ T30] __sys_sendto+0x672/0x710 [ 330.417516][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 330.422571][ T30] ? exc_page_fault+0x6a/0xc0 [ 330.427398][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 330.432695][ T30] __x64_sys_sendto+0xde/0x100 [ 330.437506][ T30] do_syscall_64+0x14d/0xf80 [ 330.442096][ T30] ? trace_irq_disable+0x3b/0x150 [ 330.447268][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.453337][ T30] ? clear_bhb_loop+0x40/0x90 [ 330.458050][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.464031][ T30] RIP: 0033:0x7f4e0b95cfce [ 330.468445][ T30] RSP: 002b:00007f4e0c93ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 330.476975][ T30] RAX: ffffffffffffffda RBX: 00007f4e0c9406c0 RCX: 00007f4e0b95cfce [ 330.485151][ T30] RDX: 0000000000000024 RSI: 00007f4e0c93f000 RDI: 0000000000000007 [ 330.493127][ T30] RBP: 0000000000000000 R08: 00007f4e0c93ef04 R09: 000000000000000c [ 330.501225][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 330.509272][ T30] R13: 00007f4e0c93ef58 R14: 00007f4e0c93f000 R15: 0000000000000000 [ 330.517808][ T30] [ 330.520845][ T30] INFO: task syz.4.1654:11729 blocked for more than 144 seconds. [ 330.528666][ T30] Not tainted syzkaller #0 [ 330.533596][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.542294][ T30] task:syz.4.1654 state:D stack:28128 pid:11729 tgid:11728 ppid:5821 task_flags:0x400140 flags:0x00080002 [ 330.555299][ T30] Call Trace: [ 330.558586][ T30] [ 330.561505][ T30] __schedule+0x15dd/0x52d0 [ 330.567457][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 330.572395][ T30] ? __pfx___schedule+0x10/0x10 [ 330.577315][ T30] ? schedule+0x90/0x360 [ 330.581568][ T30] schedule+0x164/0x360 [ 330.585785][ T30] schedule_preempt_disabled+0x13/0x30 [ 330.591251][ T30] __mutex_lock+0x7fe/0x1300 [ 330.595891][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 330.601093][ T30] ? __mutex_lock+0x5ac/0x1300 [ 330.606388][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 330.611062][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 330.616144][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 330.621297][ T30] ? radix_tree_lookup+0x240/0x290 [ 330.626493][ T30] genl_rcv_msg+0x10b/0x7a0 [ 330.631010][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.636103][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 330.641061][ T30] netlink_rcv_skb+0x232/0x4b0 [ 330.646091][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.651129][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.656491][ T30] ? down_read+0x272/0x2e0 [ 330.660909][ T30] ? genl_rcv+0xd/0x40 [ 330.665223][ T30] genl_rcv+0x28/0x40 [ 330.669210][ T30] netlink_unicast+0x80f/0x9b0 [ 330.674025][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 330.679316][ T30] ? netlink_sendmsg+0x650/0xb40 [ 330.684346][ T30] ? skb_put+0x11b/0x210 [ 330.688599][ T30] netlink_sendmsg+0x813/0xb40 [ 330.693350][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.698695][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 330.703689][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.708979][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.714367][ T30] __sys_sendto+0x672/0x710 [ 330.718880][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 330.727944][ T30] ? exc_page_fault+0x6a/0xc0 [ 330.732621][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 330.737957][ T30] __x64_sys_sendto+0xde/0x100 [ 330.742729][ T30] do_syscall_64+0x14d/0xf80 [ 330.747377][ T30] ? trace_irq_disable+0x3b/0x150 [ 330.752412][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.758542][ T30] ? clear_bhb_loop+0x40/0x90 [ 330.763231][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.769228][ T30] RIP: 0033:0x7f879835cfce [ 330.773836][ T30] RSP: 002b:00007f87965f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 330.782263][ T30] RAX: ffffffffffffffda RBX: 00007f87965f66c0 RCX: 00007f879835cfce [ 330.790419][ T30] RDX: 0000000000000024 RSI: 00007f87965f5000 RDI: 0000000000000007 [ 330.798623][ T30] RBP: 0000000000000000 R08: 00007f87965f4f04 R09: 000000000000000c [ 330.806763][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 330.814807][ T30] R13: 00007f87965f4f58 R14: 00007f87965f5000 R15: 0000000000000000 [ 330.822779][ T30] [ 330.826228][ T30] INFO: task syz.4.1654:11736 blocked for more than 144 seconds. [ 330.837866][ T30] Not tainted syzkaller #0 [ 330.842792][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.851551][ T30] task:syz.4.1654 state:D stack:28784 pid:11736 tgid:11728 ppid:5821 task_flags:0x400040 flags:0x00080002 [ 330.863521][ T30] Call Trace: [ 330.866973][ T30] [ 330.869907][ T30] __schedule+0x15dd/0x52d0 [ 330.874498][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 330.879457][ T30] ? __pfx___schedule+0x10/0x10 [ 330.884584][ T30] ? schedule+0x90/0x360 [ 330.888850][ T30] schedule+0x164/0x360 [ 330.893026][ T30] schedule_preempt_disabled+0x13/0x30 [ 330.898551][ T30] __mutex_lock+0x7fe/0x1300 [ 330.903144][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 330.908387][ T30] ? __mutex_lock+0x5ac/0x1300 [ 330.913158][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 330.917908][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 330.922940][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 330.928226][ T30] ? radix_tree_lookup+0x240/0x290 [ 330.933354][ T30] genl_rcv_msg+0x10b/0x7a0 [ 330.937982][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.943012][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 330.947998][ T30] netlink_rcv_skb+0x232/0x4b0 [ 330.952769][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.957885][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.963188][ T30] ? down_read+0x272/0x2e0 [ 330.967760][ T30] ? genl_rcv+0xd/0x40 [ 330.971855][ T30] genl_rcv+0x28/0x40 [ 330.975882][ T30] netlink_unicast+0x80f/0x9b0 [ 330.980681][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 330.986011][ T30] ? netlink_sendmsg+0x650/0xb40 [ 330.990954][ T30] ? skb_put+0x11b/0x210 [ 330.995370][ T30] netlink_sendmsg+0x813/0xb40 [ 331.000149][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.005533][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 331.010484][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.015863][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.021162][ T30] __sys_sendto+0x672/0x710 [ 331.025765][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 331.031064][ T30] ? exc_page_fault+0x6a/0xc0 [ 331.035846][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 331.041576][ T30] __x64_sys_sendto+0xde/0x100 [ 331.046560][ T30] do_syscall_64+0x14d/0xf80 [ 331.051158][ T30] ? trace_irq_disable+0x3b/0x150 [ 331.056224][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.062292][ T30] ? clear_bhb_loop+0x40/0x90 [ 331.067023][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.072915][ T30] RIP: 0033:0x7f879835cfce [ 331.077378][ T30] RSP: 002b:00007f87965d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 331.085863][ T30] RAX: ffffffffffffffda RBX: 00007f87965d56c0 RCX: 00007f879835cfce [ 331.093912][ T30] RDX: 0000000000000028 RSI: 00007f87965d4000 RDI: 0000000000000007 [ 331.101906][ T30] RBP: 0000000000000000 R08: 00007f87965d3f04 R09: 000000000000000c [ 331.110010][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 331.118023][ T30] R13: 00007f87965d3f58 R14: 00007f87965d4000 R15: 0000000000000000 [ 331.126147][ T30] [ 331.129177][ T30] INFO: task syz.1.1658:11755 blocked for more than 144 seconds. [ 331.137255][ T30] Not tainted syzkaller #0 [ 331.142199][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.150947][ T30] task:syz.1.1658 state:D stack:25312 pid:11755 tgid:11754 ppid:5822 task_flags:0x400140 flags:0x00080002 [ 331.162956][ T30] Call Trace: [ 331.166310][ T30] [ 331.169241][ T30] __schedule+0x15dd/0x52d0 [ 331.173824][ T30] ? __pfx___schedule+0x10/0x10 [ 331.178685][ T30] ? schedule+0x90/0x360 [ 331.182916][ T30] schedule+0x164/0x360 [ 331.187144][ T30] schedule_preempt_disabled+0x13/0x30 [ 331.192610][ T30] __mutex_lock+0x7fe/0x1300 [ 331.197265][ T30] ? __mutex_lock+0x5ac/0x1300 [ 331.202041][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 331.206875][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 331.211912][ T30] ? radix_tree_lookup+0x240/0x290 [ 331.217205][ T30] genl_rcv_msg+0x10b/0x7a0 [ 331.221713][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.226791][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 331.231748][ T30] netlink_rcv_skb+0x232/0x4b0 [ 331.236865][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.241904][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.247289][ T30] ? down_read+0x272/0x2e0 [ 331.251713][ T30] ? genl_rcv+0xd/0x40 [ 331.255861][ T30] genl_rcv+0x28/0x40 [ 331.259855][ T30] netlink_unicast+0x80f/0x9b0 [ 331.264748][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 331.270043][ T30] ? netlink_sendmsg+0x650/0xb40 [ 331.275038][ T30] ? skb_put+0x11b/0x210 [ 331.279297][ T30] netlink_sendmsg+0x813/0xb40 [ 331.284221][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.289664][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 331.294671][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.299959][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.305302][ T30] __sys_sendto+0x672/0x710 [ 331.309815][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 331.314905][ T30] ? exc_page_fault+0x6a/0xc0 [ 331.319594][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 331.325073][ T30] __x64_sys_sendto+0xde/0x100 [ 331.329854][ T30] do_syscall_64+0x14d/0xf80 [ 331.334509][ T30] ? trace_irq_disable+0x3b/0x150 [ 331.339754][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.345941][ T30] ? clear_bhb_loop+0x40/0x90 [ 331.350635][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.356581][ T30] RIP: 0033:0x7f99ded5cfce [ 331.360997][ T30] RSP: 002b:00007f99dfcb6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 331.364313][ T5828] Bluetooth: hci19: command tx timeout [ 331.369618][ T5837] Bluetooth: hci18: command tx timeout [ 331.381563][ T30] RAX: ffffffffffffffda RBX: 00007f99dfcb86c0 RCX: 00007f99ded5cfce [ 331.389690][ T30] RDX: 0000000000000020 RSI: 00007f99dfcb7000 RDI: 0000000000000004 [ 331.397712][ T30] RBP: 0000000000000000 R08: 00007f99dfcb6f04 R09: 000000000000000c [ 331.405728][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 331.413742][ T30] R13: 00007f99dfcb6f58 R14: 00007f99dfcb7000 R15: 0000000000000000 [ 331.421730][ T30] [ 331.424828][ T30] INFO: task syz.1.1658:11756 blocked for more than 145 seconds. [ 331.432541][ T30] Not tainted syzkaller #0 [ 331.437920][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.446728][ T30] task:syz.1.1658 state:D stack:27880 pid:11756 tgid:11754 ppid:5822 task_flags:0x400140 flags:0x00080002 [ 331.458675][ T30] Call Trace: [ 331.461952][ T30] [ 331.464983][ T30] __schedule+0x15dd/0x52d0 [ 331.469523][ T30] ? __pfx___schedule+0x10/0x10 [ 331.474443][ T30] ? schedule+0x90/0x360 [ 331.478708][ T30] schedule+0x164/0x360 [ 331.482858][ T30] schedule_preempt_disabled+0x13/0x30 [ 331.488410][ T30] __mutex_lock+0x7fe/0x1300 [ 331.493008][ T30] ? __mutex_lock+0x5ac/0x1300 [ 331.497917][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 331.502613][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 331.507733][ T30] ? radix_tree_lookup+0x240/0x290 [ 331.512862][ T30] genl_rcv_msg+0x10b/0x7a0 [ 331.517425][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.522457][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 331.527625][ T30] netlink_rcv_skb+0x232/0x4b0 [ 331.532403][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.537475][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.542995][ T30] ? down_read+0x272/0x2e0 [ 331.547626][ T30] ? genl_rcv+0xd/0x40 [ 331.551701][ T30] genl_rcv+0x28/0x40 [ 331.555707][ T30] netlink_unicast+0x80f/0x9b0 [ 331.560481][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 331.565808][ T30] ? netlink_sendmsg+0x650/0xb40 [ 331.570752][ T30] ? skb_put+0x11b/0x210 [ 331.575067][ T30] netlink_sendmsg+0x813/0xb40 [ 331.579867][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.585193][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 331.590134][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.595443][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.600735][ T30] __sys_sendto+0x672/0x710 [ 331.605434][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 331.610487][ T30] ? exc_page_fault+0x6a/0xc0 [ 331.615246][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 331.620548][ T30] __x64_sys_sendto+0xde/0x100 [ 331.625391][ T30] do_syscall_64+0x14d/0xf80 [ 331.629984][ T30] ? trace_irq_disable+0x3b/0x150 [ 331.635049][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.641116][ T30] ? clear_bhb_loop+0x40/0x90 [ 331.646138][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.652040][ T30] RIP: 0033:0x7f99ded5cfce [ 331.656620][ T30] RSP: 002b:00007f99dfc95e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 331.665095][ T30] RAX: ffffffffffffffda RBX: 00007f99dfc976c0 RCX: 00007f99ded5cfce [ 331.673050][ T30] RDX: 0000000000000020 RSI: 00007f99dfc96000 RDI: 0000000000000004 [ 331.681072][ T30] RBP: 0000000000000000 R08: 00007f99dfc95f04 R09: 000000000000000c [ 331.689337][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 331.697377][ T30] R13: 00007f99dfc95f58 R14: 00007f99dfc96000 R15: 0000000000000000 [ 331.705402][ T30] [ 331.708424][ T30] INFO: task syz.2.1662:11768 blocked for more than 145 seconds. [ 331.716387][ T30] Not tainted syzkaller #0 [ 331.721322][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.730036][ T30] task:syz.2.1662 state:D stack:27488 pid:11768 tgid:11767 ppid:5836 task_flags:0x400140 flags:0x00080002 [ 331.742016][ T30] Call Trace: [ 331.745679][ T30] [ 331.748628][ T30] __schedule+0x15dd/0x52d0 [ 331.753172][ T30] ? __pfx___schedule+0x10/0x10 [ 331.758098][ T30] ? schedule+0x90/0x360 [ 331.762352][ T30] schedule+0x164/0x360 [ 331.770359][ T30] schedule_preempt_disabled+0x13/0x30 [ 331.775884][ T30] __mutex_lock+0x7fe/0x1300 [ 331.780481][ T30] ? __mutex_lock+0x5ac/0x1300 [ 331.785309][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 331.789990][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 331.795086][ T30] ? radix_tree_lookup+0x240/0x290 [ 331.800207][ T30] genl_rcv_msg+0x10b/0x7a0 [ 331.804759][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.809786][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 331.814794][ T30] netlink_rcv_skb+0x232/0x4b0 [ 331.819564][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.824688][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.830019][ T30] ? down_read+0x272/0x2e0 [ 331.834556][ T30] ? genl_rcv+0xd/0x40 [ 331.838626][ T30] genl_rcv+0x28/0x40 [ 331.842586][ T30] netlink_unicast+0x80f/0x9b0 [ 331.847744][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 331.853048][ T30] ? netlink_sendmsg+0x650/0xb40 [ 331.858084][ T30] ? skb_put+0x11b/0x210 [ 331.862349][ T30] netlink_sendmsg+0x813/0xb40 [ 331.867228][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.872559][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 331.877684][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.882980][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.888306][ T30] __sys_sendto+0x672/0x710 [ 331.892827][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 331.897935][ T30] ? exc_page_fault+0x6a/0xc0 [ 331.902654][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 331.908027][ T30] __x64_sys_sendto+0xde/0x100 [ 331.912806][ T30] do_syscall_64+0x14d/0xf80 [ 331.917441][ T30] ? trace_irq_disable+0x3b/0x150 [ 331.922493][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.928799][ T30] ? clear_bhb_loop+0x40/0x90 [ 331.933472][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.939480][ T30] RIP: 0033:0x7fbf9175cfce [ 331.943950][ T30] RSP: 002b:00007fbf926ade28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 331.952577][ T30] RAX: ffffffffffffffda RBX: 00007fbf926af6c0 RCX: 00007fbf9175cfce [ 331.960606][ T30] RDX: 0000000000000020 RSI: 00007fbf926adfe0 RDI: 0000000000000004 [ 331.968628][ T30] RBP: 0000000000000000 R08: 00007fbf926adea4 R09: 000000000000000c [ 331.976698][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 331.984821][ T30] R13: 00007fbf926adef8 R14: 00007fbf926adfe0 R15: 0000000000000000 [ 331.992815][ T30] [ 331.995962][ T30] [ 331.995962][ T30] Showing all locks held in the system: [ 332.003729][ T30] 1 lock held by khungtaskd/30: [ 332.008581][ T30] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 332.018542][ T30] 1 lock held by klogd/5185: [ 332.023126][ T30] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 332.033105][ T30] 2 locks held by getty/5584: [ 332.037824][ T30] #0: ffff8880362bb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 332.047712][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 332.058136][ T30] 1 lock held by udevd/5823: [ 332.063166][ T30] #0: ffff888026b08358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 332.072506][ T30] 6 locks held by syz.0.1649/11721: [ 332.077780][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.086061][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.095220][ T30] #2: ffff888026b11a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 332.105745][ T30] #3: ffff88802671e610 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 332.115243][ T30] #4: ffff88802671dfb0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 332.127360][ T30] #5: ffff88802671dfe8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 332.139743][ T30] 2 locks held by syz.3.1653/11732: [ 332.145029][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.153230][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.162596][ T30] 2 locks held by syz.4.1654/11729: [ 332.168116][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.176365][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.185384][ T30] 2 locks held by syz.4.1654/11736: [ 332.190561][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.198773][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.207873][ T30] 2 locks held by syz.1.1658/11755: [ 332.213048][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.221264][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.230283][ T30] 2 locks held by syz.1.1658/11756: [ 332.235528][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.243890][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.252889][ T30] 2 locks held by syz.2.1662/11768: [ 332.258471][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.266803][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.275854][ T30] 2 locks held by syz-executor/11773: [ 332.281228][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.289673][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.298725][ T30] 2 locks held by syz-executor/11775: [ 332.304149][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.312346][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.322091][ T30] 2 locks held by syz-executor/11777: [ 332.329809][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.338082][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.347108][ T30] 2 locks held by syz-executor/11792: [ 332.352462][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.361016][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.370113][ T30] 2 locks held by syz-executor/11793: [ 332.375602][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.383834][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.392826][ T30] 2 locks held by syz-executor/11822: [ 332.398237][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.406864][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.415974][ T30] 2 locks held by syz-executor/11824: [ 332.421350][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.429739][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.438776][ T30] 2 locks held by syz-executor/11826: [ 332.444206][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.452402][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.461882][ T30] 2 locks held by syz-executor/11839: [ 332.467307][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.475566][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.484710][ T30] 2 locks held by syz-executor/11841: [ 332.490058][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.498295][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.507331][ T30] 2 locks held by syz-executor/11871: [ 332.512682][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.520889][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.529948][ T30] 2 locks held by syz-executor/11872: [ 332.535501][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.543768][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.552755][ T30] 2 locks held by syz-executor/11875: [ 332.558187][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.566920][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.575971][ T30] 2 locks held by syz-executor/11886: [ 332.581355][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.589582][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.598644][ T30] 2 locks held by syz-executor/11887: [ 332.604079][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.612275][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 332.621289][ T30] [ 332.623744][ T30] ============================================= [ 332.623744][ T30] [ 332.632161][ T30] NMI backtrace for cpu 0 [ 332.632172][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 332.632188][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.632194][ T30] Call Trace: [ 332.632199][ T30] [ 332.632204][ T30] dump_stack_lvl+0xe8/0x150 [ 332.632221][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 332.632234][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 332.632248][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 332.632263][ T30] sys_info+0x135/0x170 [ 332.632273][ T30] watchdog+0xfd9/0x1030 [ 332.632290][ T30] ? watchdog+0x21a/0x1030 [ 332.632308][ T30] kthread+0x388/0x470 [ 332.632317][ T30] ? __pfx_watchdog+0x10/0x10 [ 332.632330][ T30] ? __pfx_kthread+0x10/0x10 [ 332.632340][ T30] ret_from_fork+0x51e/0xb90 [ 332.632354][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 332.632365][ T30] ? __switch_to+0xc7d/0x1450 [ 332.632378][ T30] ? __pfx_kthread+0x10/0x10 [ 332.632387][ T30] ret_from_fork_asm+0x1a/0x30 [ 332.632408][ T30] [ 332.632412][ T30] Sending NMI from CPU 0 to CPUs 1: [ 332.742366][ C1] NMI backtrace for cpu 1 [ 332.742381][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 332.742397][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.742407][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 332.742435][ C1] Code: ee 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 62 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 332.742448][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 332.742461][ C1] RAX: 0000000000153a13 RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 332.742472][ C1] RDX: 0000000000000001 RSI: ffffffff8def5566 RDI: ffffffff8c27b580 [ 332.742483][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 332.742493][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901196b0 [ 332.742504][ C1] R13: 1ffff11003ad9000 R14: 0000000000000001 R15: 0000000000000001 [ 332.742514][ C1] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 332.742526][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.742535][ C1] CR2: 00007f69c96a2bd0 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 332.742549][ C1] Call Trace: [ 332.742555][ C1] [ 332.742560][ C1] default_idle+0x9/0x20 [ 332.742575][ C1] default_idle_call+0x72/0xb0 [ 332.742592][ C1] do_idle+0x1bd/0x500 [ 332.742611][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 332.742633][ C1] ? __pfx_do_idle+0x10/0x10 [ 332.742655][ C1] cpu_startup_entry+0x43/0x60 [ 332.742674][ C1] start_secondary+0x101/0x110 [ 332.742691][ C1] common_startup_64+0x13e/0x147 [ 332.742713][ C1] [ 332.911128][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 332.917968][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 332.927054][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.937122][ T30] Call Trace: [ 332.940392][ T30] [ 332.943311][ T30] vpanic+0x56c/0xa60 [ 332.947320][ T30] ? __pfx___schedule+0x10/0x10 [ 332.952170][ T30] ? __pfx_vpanic+0x10/0x10 [ 332.956666][ T30] ? __pfx_console_unlock+0x10/0x10 [ 332.961863][ T30] panic+0xc5/0xd0 [ 332.965577][ T30] ? __pfx_panic+0x10/0x10 [ 332.969994][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 332.975356][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 332.981505][ T30] watchdog+0x1023/0x1030 [ 332.985848][ T30] ? watchdog+0x21a/0x1030 [ 332.990268][ T30] kthread+0x388/0x470 [ 332.994329][ T30] ? __pfx_watchdog+0x10/0x10 [ 332.998998][ T30] ? __pfx_kthread+0x10/0x10 [ 333.003574][ T30] ret_from_fork+0x51e/0xb90 [ 333.008161][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 333.013263][ T30] ? __switch_to+0xc7d/0x1450 [ 333.017933][ T30] ? __pfx_kthread+0x10/0x10 [ 333.022511][ T30] ret_from_fork_asm+0x1a/0x30 [ 333.027278][ T30] [ 333.030685][ T30] Kernel Offset: disabled [ 333.034992][ T30] Rebooting in 86400 seconds..