last executing test programs: 22.270122603s ago: executing program 3 (id=2108): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000100)={0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040), 0x4) 22.267890923s ago: executing program 0 (id=2110): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)=0x8, 0x4) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000100), 0x4) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f0000000380)="37f299856976b7ba3b5f7b76034a7ef12f998b9838bd6d4d0fe8a57aebc0d9d938546db6aa0e0d64ae5fd0a11653a78cd68d824aee08b009312cf7230e68195d52629f2cc10e5262dbe5783f2e00ec412d98b6f1fffc15298ac32beb062a7650bb7a61647bbff863d9120bc2d8e784f178c5134e8a3cd6d1b532feae6dc89c068035c59f314e396cc2e7a069d42d3a69ef39da004d19f5aa97511b77395f029ab07995c9e9d5fcb8af06426c7e209eb7a3a24de97fed7b82289085608e0e2fbda2552f5860b230", 0xc7) setsockopt$MRT6_TABLE(r0, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000008, 0x10, r0, 0xa8e10000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000300)="054c59c6c144fe32c61ddcdd73abef0c0e8f80d9a23d6e50d5a6f658733c89eff20f74fd57af1bf7b8d7492c214abfe8840000000000000000000000b2d959d6e01c77e04c943458ac545baaaca0dc47a9eba3861f7b16c6dc9c08dcaa", 0x5d, 0x40004, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x1a) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) close(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/163, 0xa3, 0x0, &(0x7f0000000540)=""/26, 0x1a}, &(0x7f00000005c0)=0x40) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x24) syz_emit_ethernet(0x86, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2e81001700884700000000000000003384daae298653d6e17d14c074e15f5409e508c9f41ef8fc7a0e6ed4ba420027af294f8786b3fbad3687f982f8e2f341ed7cdd8bde3977681742e82cb3572070e1904c5b14574dc41a724341f62e765a6da76861341f8d9893fc422c417f612cf52f7fda610563e1830b73fe"], &(0x7f00000002c0)={0x1, 0x1, [0xbb0, 0x79a, 0x840, 0xbf8]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000033080a001c0012800b00010062726964676500000cfc01800800310000000000"], 0x3c}}, 0x80) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) 22.102334618s ago: executing program 3 (id=2112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}}) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = accept(r2, &(0x7f0000000200)=@in={0x2, 0x0, @empty}, &(0x7f0000000280)=0x80) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 21.939150807s ago: executing program 3 (id=2114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x582, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) unshare(0x28000600) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000840)={0xa, &(0x7f0000000700)=[{0x40, 0x19, &(0x7f0000000040)="9af2893db7dbdaeeccfca354cf9c3d931206e85fb0ef529d8c"}, {0x7, 0x18, &(0x7f0000000140)="157707fa849f56d18b74862f2dd2f6e2354835570a7bff91", 0x0, 0x1}, {0xffffffff, 0x92, &(0x7f0000000300)="feceb88714b48b9f292602a186410c4ab9a80669c3ff1482a38a5da0d4466e0da1b26020ccd4ad04b0b6ae9d2b3e65f429d8f9d671c09dd72877b6e11eda6d9c5180a20142b98848778071e22036db7ee875fd7d43ab9279ca5f99ab4de6f40745c5ab05ed1c7dc028b4e5b6a951c401d0871bec675cc561b1a8d0ec739f41718ad6a15523b189b656ff6ece4ad074fc9589", 0x1, 0x1}, {0x1ff, 0x1c, &(0x7f0000000400)="be1409a09ec2a8ba96dcd659c7cfbd5c0e8bb2aa90e82d7eb3a6d577", 0x1}, {0x0, 0x3a, &(0x7f0000000440)="4d8557fd84be99de8493db4893b263adefecfb93863e6c345420fe1306fc0fec34d48c3654351744d26a581b98bc5e476bbde777420414322d0a", 0x0, 0x1}, {0x401, 0x3f, &(0x7f0000000480)="851ec0e2d2cefca0e9d0a8b21a829764cb4748bc6204b44ca4e7807f66550d8eee97430cc17189e113a19f134bbc32fa842ae65cd8ed56191a1e02aa1397da"}, {0xfffffffe, 0x9, &(0x7f0000000500)="3bc50d929ec2130d4a", 0x1}, {0x7fff, 0xf2, &(0x7f0000000540)="4a1d6d3ab354c9a66002c1e7027c54cab78781131cd5e8005085fc820644faa1ef583a2b8529452a1541d235339c2b020b7f2207783b4bb4048d86e728fc73294f74adfe073df2be57e7f26f0aa43d32062a907600f2a0268f316b53b9618c313da76947e5a248acd42ba13e30a2069586107b24102f0fcb10a950de8972679f3c3c94c7332507e5d118e914d298ed7e202d4f90c54e23b6269bed6272ac3dc16a8bd7afc3277374cd5317ed4ece8dfdb22407436996cb9f7093b28466ad502a9fd0b8d5fae80c5ca71f57c14c11b207154226545806eca38b93a95bec6ffaa478bed7f081a47c62aa6aa4c37256d4967028", 0x1, 0x1}, {0x62, 0x16, &(0x7f0000000640)="323c3ea4de466c797b46b46462d56708231aadab5572", 0x0, 0x1}, {0x4, 0x2, &(0x7f00000006c0)="a92f", 0x0, 0x1}]}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 21.900138286s ago: executing program 0 (id=2115): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x8f, 0x8}]}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0xff8d, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) 21.854702361s ago: executing program 2 (id=2116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x1e, 0x800, 0x78) (async) r1 = socket(0x1e, 0x800, 0x78) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x5, 0x7fff}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r3, 0x81}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x6b, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x7, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x6b, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x7, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 21.554568891s ago: executing program 0 (id=2117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x8, 0x1, 0xffff0000, 0x7fffffff, {{0x1a, 0x4, 0x2, 0x9, 0x68, 0x66, 0x0, 0x9, 0x29, 0x0, @private=0xa010102, @local, {[@cipso={0x86, 0x51, 0x1, [{0x6, 0xd, "4932192120f540dfc2049d"}, {0x7, 0x12, "f723c81574749d21cea674af35f36e8c"}, {0x0, 0xc, "7d960477019c5d0ace23"}, {0x7, 0xf, "73eabd9051155dacfcb781ae6d"}, {0x7, 0x9, "3ea47c14eedbfe"}, {0x2, 0x8, "33a9aaed6588"}]}]}}}}}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000005c0)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004300)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ac00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003b00010324bd7002fbdb060000000000"], 0x61}, 0x1, 0x0, 0x0, 0x80}, 0xc048) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="819a749baa00ddff1dd1850683e97fc1"], &(0x7f0000000280)='GPL\x00'}, 0x90) 21.377479495s ago: executing program 2 (id=2119): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x120, r0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9a55}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x47}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xee95}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdfe}]}, 0x120}}, 0x28000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f"], 0x38}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0xf0b, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) 21.237570596s ago: executing program 4 (id=2121): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000005e08000c0000000c000000020000000000000000000005000000000000"], 0x0, 0x26}, 0x20) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0xa}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xfffffffffffffe0b, 0x5, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x60000000}]}]}, 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0xed000000, 0x10, &(0x7f0000000200), 0x10}, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000100)="7c62e40c2fe73772a02b593ed045667f0d72eddd8aecd07e4244e64ae8d5b61bb25d7cedd950c8f54cef0394d057ba4b2647328b7aff103d4fff2b62173e4cadce6fe9c67837a0cb8d462f7892f0d09c661491af0db43f0fc10b78c82534c50199b589c9298cbb2fd550a1497b52a6914e8eb9e73b42100c17", &(0x7f0000000280)=""/104, 0x4}, 0x20) 21.07771838s ago: executing program 4 (id=2123): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000040)=0xb) setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0) 21.04274021s ago: executing program 4 (id=2124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r2, 0x309}], 0x1, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r1, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x40800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x108400, 0x0) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000340)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000028300000140012800a00010069706f69620000000400028008000500", @ANYRES32=r5, @ANYBLOB="8ba8e1e2d2e3af02923ee81f731042f3d797817f2cb87f4afe4c982bafe23c07f40a7540fb6ea18bd2e6edb326d07d73f9095a34d349d4a6898225da90eda1f37f0d583eed4155806a5b3873b6a3456198b5f71277e747d2e24193a2dd95917845873e8af7adccd6d3117018daefd1c2406f72ea22db2bba40dc74992b0c028a17cbff17d05107e553ea656641547c889b1890375daea13ca0052f1495266ecd9c1093a8cc64bd13cb2f23a8b99fb15bd643ca0393e13a6fb3ddcc2eab410f263f"], 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000200)=@raw=[@generic={0x7, 0x1, 0x3, 0x21c2, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x56, &(0x7f00000003c0)=""/86, 0x61680, 0x52, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0xb, 0x6, 0xffffff94}, 0x10, 0x13183, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000580)=r8, 0x4) sendto$inet(r1, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 19.203980921s ago: executing program 0 (id=2125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000000000f7000000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000300"/28], 0x50) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000f40)=@base={0x14, 0x4, 0x400, 0x6, 0x0, 0x1, 0x5}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4101, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x85c}, 0x4004044) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000000063013800000000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0xfffffffffffffe1e, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11}, 0x94) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r6}, 0x20) r7 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x29, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffa}, {}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ldst={0x2, 0x1, 0x2, 0xb, 0x9, 0x10, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000d80)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x50, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0xd, 0xdcdb, 0xfffffff9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[r2, 0xffffffffffffffff, r1, r1, r2, r2, r1, r1, r1], 0x0, 0x10, 0x101}, 0x94) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt(r8, 0x6, 0x4, &(0x7f0000000ac0)=""/114, &(0x7f0000000b40)=0x72) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@getqdisc={0x38, 0x26, 0x301, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {0x4, 0xfff2}, {0xffff, 0x6}}, [{0x4}, {0x4}, {0x5b}, {0x4}, {0x4}]}, 0x38}}, 0x20040005) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0xdc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x7, 0x4}, {0xfffffff9, 0x43, 0x1, 0x7}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x8, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xfffffff8, 0x400}]}}, @TCA_U32_MARK={0x10, 0xa, {0x80000001, 0x8}}]}}, @TCA_RATE={0x6, 0x5, {0xfe}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0xc040) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x63, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000380), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509f8ff00000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0x5, 0x10}, 0xc) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xac}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x553, 0x0, 0x0, 0x0, 0x81}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0xe, 0xe5, &(0x7f00000001c0)=""/229, 0x41100, 0x1, '\x00', r10, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x4, 0x4100, 0x6}, 0x10, r11, r0, 0x3, &(0x7f0000000980)=[r12, r14, r15, r16, r17, 0x1], &(0x7f00000009c0)=[{0x5, 0x4, 0x5, 0xa}, {0x0, 0x1, 0x5, 0x2}, {0x4, 0x3, 0x7, 0x2}], 0x10, 0x6}, 0x94) ioctl$int_out(r16, 0x2, &(0x7f0000000540)) 19.143489773s ago: executing program 3 (id=2126): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x38}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 19.139548725s ago: executing program 2 (id=2127): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getuid() sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getroute={0x0, 0x1a, 0x8, 0x70bd28, 0x25dfdbfe, {0xa, 0x14, 0x10, 0x5, 0x0, 0x1, 0xfe, 0x2, 0xc00}, [@RTA_UID, @RTA_OIF, @RTA_UID={0x0, 0x19, r1}, @RTA_PRIORITY={0x0, 0x6, 0x3}]}, 0x44}}, 0x0) 19.047083244s ago: executing program 4 (id=2128): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x8a77, @none}, 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) mmap(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x2000005, 0xa812, r1, 0x19662000) 18.954017097s ago: executing program 3 (id=2130): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040851}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@getnexthop={0x44, 0x6a, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NHA_OIF={0x8, 0x5, r3}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4044011) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 18.952485932s ago: executing program 2 (id=2131): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10012, r1, 0x1517f) 18.862620216s ago: executing program 4 (id=2132): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) clock_gettime(0x0, &(0x7f0000000e40)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000000dc0)=[{{&(0x7f00000001c0)=@generic, 0x80, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/3, 0x3}, {&(0x7f0000000300)=""/229, 0xe5}, {&(0x7f0000000440)=""/52, 0x34}, {&(0x7f0000000480)=""/151, 0x97}, {&(0x7f0000000640)=""/167, 0xa7}, {&(0x7f0000000700)=""/31, 0x1f}], 0x6, &(0x7f00000007c0)=""/132, 0x84}, 0x5}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/62, 0x3e}, {&(0x7f0000000940)=""/239, 0xef}, {&(0x7f0000000a40)=""/193, 0xc1}, {&(0x7f0000000b40)=""/157, 0x9d}, {&(0x7f0000000c00)=""/37, 0x25}], 0x5, &(0x7f0000000cc0)=""/197, 0xc5}, 0x6}], 0x2, 0x0, &(0x7f0000000e80)={r6, r7+60000000}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r8, 0x3f}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e105000000890600001144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x1c7}, {&(0x7f00000022c0)="03b08259909695eb5ca0294fba511a888314cac2cc4b8fcfa8a6395f98c9495276871c1415f144fc9b74b6be1832c68c5a06cd992e2fa712186cb328d237fb2b3daa49d29c7221005ae22dfd2fa279a3a0ebe73b3093e6f66d7ab7e24362e64a1bbd1f4e7a6e2f2cf522cf9b4437037aed5091737c0883648a89f0c8ad70436a97e52561c4ac61cc619e5cc62e9a9b0fec63", 0x92}], 0x3}, 0x4000001) 18.739291984s ago: executing program 3 (id=2133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0xb, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="db8017"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000400000000000000000a0000040900010000000000000000030000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000001080008400000000114000000110001000000000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000780)={0x30, r10, 0xf21, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40085}, 0x24008840) ioctl$SIOCX25SSUBSCRIP(r9, 0x89e1, &(0x7f0000003280)={'vxcan1\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 18.622176656s ago: executing program 0 (id=2134): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000000)='f*-}\\\x00', 0x10d000, &(0x7f0000000040)={@_ha_fsid={[0x7, 0x59]}, {0x5, 0x1, 0x4, 0x100000000}}, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x2}, 0x1, &(0x7f00000001c0)=[{0x3, 0x1ff, &(0x7f0000000100)='\x00', &(0x7f0000000140)="45452738c57baef84acc68a2c17c44d5f785c65d3cf63da95cec32b05bc2295eec3cc596d12b464f32017cca6856dbd230e8e9c1d5ba1aaa21bfd080017fe2f30c065f956a0b2e130c8c81232ef9b76f43ab40ab5cab2487986c9b74efdeebcfb75f84", 0x63, 0x20}]}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x200}, 0x94) 18.618388851s ago: executing program 2 (id=2135): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="140100002700"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 18.508237509s ago: executing program 0 (id=2136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x1, 0x136, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000540], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x1ae) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000100)=@framed={{}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@delqdisc={0x164, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0x1, 0x9}}, [@q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1a}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3d}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3ff}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x31}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x34}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x29}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x164}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/223, 0xdf}], 0x1}}], 0x1, 0x60, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002300)="81", 0x5dc}], 0x1}, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x8000, 0x80, 0xfffffff8, 0xffffffff, {{0x38, 0x4, 0x1, 0x2, 0xe0, 0x67, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@rr={0x7, 0x1b, 0x30, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x39}, @empty, @loopback, @multicast2, @private=0xa010101]}, @timestamp_addr={0x44, 0x34, 0xf1, 0x1, 0x2, [{@multicast1, 0x4}, {@empty, 0x2}, {@local, 0x8}, {@broadcast, 0x3188}, {@rand_addr=0x64010100, 0x1}, {@multicast1, 0x8}]}, @ssrr={0x89, 0x1f, 0xc1, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x41}]}, @ssrr={0x89, 0x1b, 0x4, [@multicast2, @rand_addr=0x64010101, @empty, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @timestamp={0x44, 0xc, 0x68, 0x0, 0x9, [0x6, 0x80000000]}, @timestamp_addr={0x44, 0x34, 0x2c, 0x1, 0x4, [{@multicast2, 0x5}, {@private=0xa010101, 0x2}, {@loopback, 0xb81}, {@loopback, 0x31}, {@multicast1, 0x2}, {@private=0xa010101, 0x5}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, r7, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000100000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000001608000140000000000900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) 18.433114909s ago: executing program 2 (id=2137): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000002f00090027bd7000fddbdf2504000000040019"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 18.11361768s ago: executing program 1 (id=2138): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xcac, 0x0, 0x0, 0x9, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x11, 0x8, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x40800) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 17.783700982s ago: executing program 4 (id=2139): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x44, r3, 0x1, 0x4, 0x40000000, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @void}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 17.265349174s ago: executing program 1 (id=2140): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x1, 0x2, 0x801}, 0x14}}, 0x0) shutdown(r2, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r4, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}}, 0x4040010) close(0x4) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) clock_gettime(0x5, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x10}], 0x1, &(0x7f0000000080)={r6, r7+10000000}, &(0x7f0000000100)={[0x4]}, 0x8) 16.343561921s ago: executing program 1 (id=2141): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000340)={0x3b, @empty, 0x4e20, 0x1, 'wlc\x00', 0x3c, 0x9, 0x13}, 0x2c) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) getpeername$inet(r0, &(0x7f0000000180), &(0x7f0000000280)=0x10) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000200)='`', 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0xfffffff8}], 0x1, 0x40010102, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0x75, &(0x7f0000000400)={@remote, @random="2fac2725a723", @val={@void, {0x8100, 0x0, 0x1}}, {@generic={0x22e2, "a07c50ede4b78deb33c08233a3f331e789183f4a07aab92c60910aae648004718ad24c35d2fd55619a08d085e984285295f3a46af186f339fe907e44dd66198b893e747ca98a2160dbbea70244d374b3ebfeeaef304975083441cb236979a2ec288278"}}}, &(0x7f0000000480)={0x1, 0x1, [0xd49, 0xe09, 0xdca, 0xae4]}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x118) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000020601036c0000000000000000000000050005000a000000050001000600000005000400000000000900020073797a320000000010000300686173683a69702c6d616300140007800800120000000000080008"], 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x10001) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYRES8=r6], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 16.267150257s ago: executing program 1 (id=2142): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0xfffffffc, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003083c00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200308c00bb28001280f61332786d61637365630000180002800c00040003000069c6bb260008000500feffff7f08000500", @ANYRES32=r2, @ANYBLOB], 0x50}}, 0x0) 16.154305192s ago: executing program 1 (id=2143): sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="fffffaff4cfce911406bfbc851c5808d9db098a90a9d866e57778ff7a6aa6e13237a1812bef048445ff3287a060cd55c0b039565dc1d39a6bba485dde67f2cfce5347ac55bd471d94b3ed20e663c36ad", 0x50, 0x20004800, 0x0, 0x0) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab", @ANYRESOCT], 0xfdef) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4) (async) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0f13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2871"], 0xe0}], 0x1}, 0x40040) (async) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 15.873190324s ago: executing program 1 (id=2144): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket(0x8, 0x800, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x41002000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000440)=@newchain={0x6e8, 0x64, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x5}, {0xc, 0xfff1}, {0xb, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x6b0, 0x2, [@TCA_CGROUP_POLICE={0x410, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5f42f9d}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x6, 0x1, 0x8, 0xff, 0x3, 0xb853, 0x89, 0x9, 0xfffffffe, 0x6, 0x400, 0x6, 0x9, 0x200000, 0x9, 0xffff, 0x9, 0xd, 0x9b40, 0x8, 0x10, 0x0, 0x4, 0x0, 0x9, 0xf402, 0x622, 0xffffff00, 0x5, 0x1, 0x7, 0x101, 0x6, 0xfffffffa, 0x1, 0x0, 0x6, 0x8db, 0x0, 0xfffffffc, 0x5, 0x5b71, 0x4, 0x2, 0x6, 0x329, 0x8000, 0x2, 0x5, 0x3, 0x6, 0x8, 0x9, 0x5, 0xf, 0x8, 0x4, 0x5, 0x6, 0x7, 0x3, 0x4, 0x2, 0x0, 0x5, 0x9, 0x8, 0x2, 0x6, 0x6, 0x9, 0x1, 0x7, 0x7, 0x4cded615, 0x1, 0x9, 0x2, 0x800, 0x3, 0x5, 0x4, 0x5, 0x0, 0x8, 0x5, 0x9, 0x80, 0x80, 0x8, 0x2, 0x1, 0x0, 0x7, 0x6, 0xfffffc0f, 0x2, 0x4, 0x200000, 0x8, 0x5, 0x4, 0x1, 0xfffffffd, 0x1, 0x400, 0x1, 0x6, 0x8, 0xe, 0xad2f, 0x0, 0x10001, 0x3, 0xffffff00, 0x0, 0xd, 0x9, 0x8, 0x8, 0x42a6554b, 0x2, 0x94eb, 0x76f0000, 0x800, 0x7, 0x3, 0xe, 0xffffffff, 0xff, 0x86a, 0x7, 0x5, 0x5, 0x3, 0x7196, 0x4, 0xffff, 0x5, 0x5, 0x1, 0x3, 0x42, 0xa, 0x7, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xa, 0x1, 0x1, 0x4, 0x3, 0xd55, 0x4, 0x0, 0x1982, 0x8000, 0x1, 0x1000, 0x9d5c, 0x7fffffff, 0x3, 0x4a, 0x1, 0x4, 0x3, 0xdc19, 0x8, 0x8, 0x0, 0x7, 0x2, 0x2, 0x465b, 0x4, 0x2, 0x0, 0x83, 0x5, 0x7, 0x4, 0x2, 0x343, 0x4, 0x5, 0x2, 0x10001, 0x2400, 0x6, 0x7, 0x7, 0xfffffc2d, 0xe7, 0x7, 0x8, 0x5, 0x7, 0x6, 0x9, 0x7, 0x80000000, 0x3, 0x4, 0x8, 0x9, 0x2, 0x9, 0x1, 0x42d, 0xffffffff, 0x8, 0x9422, 0x1000, 0x0, 0xe80, 0x8, 0xbf, 0x9, 0x7fff, 0x20b5, 0xffffb276, 0x0, 0x9, 0xfffff000, 0x3, 0xb, 0x6, 0x6, 0xdcf3, 0x9, 0x0, 0x6, 0x4, 0x4, 0x8714, 0x4, 0xafa4, 0x0, 0x9, 0x1, 0x4, 0x7, 0x937e, 0xfffffff8, 0x9, 0xfffffff9, 0x9, 0xfffffffa, 0xfffffffd, 0x7ff, 0x2973]}]}, @TCA_CGROUP_ACT={0x29c, 0x1, [@m_bpf={0xc4, 0x4, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x2, 0x7, 0xfb, 0x6}, {0xf, 0x8, 0x9, 0x5}]}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x800, 0x7f, 0xd}, {0x7861, 0x3b, 0x7, 0x8}, {0x7, 0x2, 0x8b, 0x7fffffff}, {0x0, 0x9, 0x9, 0x3}, {0x2, 0x4c, 0x5, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x7ff, 0x7, 0x8, 0x8ce4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x17, 0x6, "f9077ed8a18c386c195e7c508c29a2af60e4e7"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x90, 0x1c, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1de, 0xc, 0x8, 0x6, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfff, 0x100, 0x0, 0x8, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8, 0x0, 0x401, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xb75}}]}, {0xd, 0x6, "e461a98cdbd14e53d0"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x144, 0x18, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x9b12, 0x10000000, 0x51, 0x1}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x3, 0x4, 0x3, 0xfffffff6}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0xffffffffffffffff, 0x6, 0x9}, 0x3}}]}, {0xbf, 0x6, "2320aa7f67994f8e3713608d1e108cd031ccf492f26581f5baf2f6332b4c3860cb46c290f630e0fd11c09e3971fa645592326311c90aefd890b5a472f82ddab7c8bfac7035e43dd57d0887d0205060e83ffdb092b3adaeae50a1bb069a8368db45898ac07884692f116797c1d83aaff6bfd098abc97efc74a087aa390b915365ef727841bb0bbe8666c98dd64328485060727335fc78f71a569b7ba86194fef03c04b261a324de80dcc932cc22cd8faa2fea65b037fbe9a4f494db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7}}}}]}]}}]}, 0x6e8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x40000000015, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) syz_emit_ethernet(0xb2, &(0x7f00000002c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x6, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0x4efe, 0x0, 0x1}, {0xff001}], @ipv4=@igmp={{0x23, 0x4, 0x3, 0x5, 0x94, 0x65, 0x0, 0x7f, 0x2, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x2d, 0x1, [{0x0, 0xa, "b0ab6493d6004592"}, {0x5, 0x12, "e25b222437b65708da19c70e58926daa"}, {0x0, 0xb, "bca527079b3a83ac25"}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xd, 0x3, 0x2, [{@empty, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xc}, {@empty, 0x7}]}, @lsrr={0x83, 0x17, 0xc0, [@empty, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @timestamp_addr={0x44, 0x14, 0xa7, 0x1, 0xe, [{@private=0xa010100, 0x800}, {@rand_addr=0x64010100, 0x401}]}]}}, {0x1e, 0x7, 0x0, @loopback}}}}}}, &(0x7f0000000380)={0x1, 0x4, [0x553, 0x8d9, 0xda9, 0x2fe]}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1f33d1ada0875bba64e012441b34000000", @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250100000000000000014100000018001700000000000000007564703a73797a3100000000"], 0x34}}, 0x0) 3.170652154s ago: executing program 32 (id=2136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x1, 0x136, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000540], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x1ae) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000100)=@framed={{}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@delqdisc={0x164, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0x1, 0x9}}, [@q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1a}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3d}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3ff}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x31}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x34}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x29}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x164}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/223, 0xdf}], 0x1}}], 0x1, 0x60, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002300)="81", 0x5dc}], 0x1}, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x8000, 0x80, 0xfffffff8, 0xffffffff, {{0x38, 0x4, 0x1, 0x2, 0xe0, 0x67, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@rr={0x7, 0x1b, 0x30, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x39}, @empty, @loopback, @multicast2, @private=0xa010101]}, @timestamp_addr={0x44, 0x34, 0xf1, 0x1, 0x2, [{@multicast1, 0x4}, {@empty, 0x2}, {@local, 0x8}, {@broadcast, 0x3188}, {@rand_addr=0x64010100, 0x1}, {@multicast1, 0x8}]}, @ssrr={0x89, 0x1f, 0xc1, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x41}]}, @ssrr={0x89, 0x1b, 0x4, [@multicast2, @rand_addr=0x64010101, @empty, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @timestamp={0x44, 0xc, 0x68, 0x0, 0x9, [0x6, 0x80000000]}, @timestamp_addr={0x44, 0x34, 0x2c, 0x1, 0x4, [{@multicast2, 0x5}, {@private=0xa010101, 0x2}, {@loopback, 0xb81}, {@loopback, 0x31}, {@multicast1, 0x2}, {@private=0xa010101, 0x5}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, r7, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000100000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000001608000140000000000900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) 3.137325951s ago: executing program 33 (id=2137): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000002f00090027bd7000fddbdf2504000000040019"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 3.092707362s ago: executing program 34 (id=2133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0xb, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="db8017"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000400000000000000000a0000040900010000000000000000030000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000001080008400000000114000000110001000000000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000780)={0x30, r10, 0xf21, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40085}, 0x24008840) ioctl$SIOCX25SSUBSCRIP(r9, 0x89e1, &(0x7f0000003280)={'vxcan1\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.0369407s ago: executing program 35 (id=2139): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x44, r3, 0x1, 0x4, 0x40000000, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @void}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 36 (id=2144): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket(0x8, 0x800, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x41002000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000440)=@newchain={0x6e8, 0x64, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x5}, {0xc, 0xfff1}, {0xb, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x6b0, 0x2, [@TCA_CGROUP_POLICE={0x410, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5f42f9d}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x6, 0x1, 0x8, 0xff, 0x3, 0xb853, 0x89, 0x9, 0xfffffffe, 0x6, 0x400, 0x6, 0x9, 0x200000, 0x9, 0xffff, 0x9, 0xd, 0x9b40, 0x8, 0x10, 0x0, 0x4, 0x0, 0x9, 0xf402, 0x622, 0xffffff00, 0x5, 0x1, 0x7, 0x101, 0x6, 0xfffffffa, 0x1, 0x0, 0x6, 0x8db, 0x0, 0xfffffffc, 0x5, 0x5b71, 0x4, 0x2, 0x6, 0x329, 0x8000, 0x2, 0x5, 0x3, 0x6, 0x8, 0x9, 0x5, 0xf, 0x8, 0x4, 0x5, 0x6, 0x7, 0x3, 0x4, 0x2, 0x0, 0x5, 0x9, 0x8, 0x2, 0x6, 0x6, 0x9, 0x1, 0x7, 0x7, 0x4cded615, 0x1, 0x9, 0x2, 0x800, 0x3, 0x5, 0x4, 0x5, 0x0, 0x8, 0x5, 0x9, 0x80, 0x80, 0x8, 0x2, 0x1, 0x0, 0x7, 0x6, 0xfffffc0f, 0x2, 0x4, 0x200000, 0x8, 0x5, 0x4, 0x1, 0xfffffffd, 0x1, 0x400, 0x1, 0x6, 0x8, 0xe, 0xad2f, 0x0, 0x10001, 0x3, 0xffffff00, 0x0, 0xd, 0x9, 0x8, 0x8, 0x42a6554b, 0x2, 0x94eb, 0x76f0000, 0x800, 0x7, 0x3, 0xe, 0xffffffff, 0xff, 0x86a, 0x7, 0x5, 0x5, 0x3, 0x7196, 0x4, 0xffff, 0x5, 0x5, 0x1, 0x3, 0x42, 0xa, 0x7, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0xa, 0x1, 0x1, 0x4, 0x3, 0xd55, 0x4, 0x0, 0x1982, 0x8000, 0x1, 0x1000, 0x9d5c, 0x7fffffff, 0x3, 0x4a, 0x1, 0x4, 0x3, 0xdc19, 0x8, 0x8, 0x0, 0x7, 0x2, 0x2, 0x465b, 0x4, 0x2, 0x0, 0x83, 0x5, 0x7, 0x4, 0x2, 0x343, 0x4, 0x5, 0x2, 0x10001, 0x2400, 0x6, 0x7, 0x7, 0xfffffc2d, 0xe7, 0x7, 0x8, 0x5, 0x7, 0x6, 0x9, 0x7, 0x80000000, 0x3, 0x4, 0x8, 0x9, 0x2, 0x9, 0x1, 0x42d, 0xffffffff, 0x8, 0x9422, 0x1000, 0x0, 0xe80, 0x8, 0xbf, 0x9, 0x7fff, 0x20b5, 0xffffb276, 0x0, 0x9, 0xfffff000, 0x3, 0xb, 0x6, 0x6, 0xdcf3, 0x9, 0x0, 0x6, 0x4, 0x4, 0x8714, 0x4, 0xafa4, 0x0, 0x9, 0x1, 0x4, 0x7, 0x937e, 0xfffffff8, 0x9, 0xfffffff9, 0x9, 0xfffffffa, 0xfffffffd, 0x7ff, 0x2973]}]}, @TCA_CGROUP_ACT={0x29c, 0x1, [@m_bpf={0xc4, 0x4, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x2, 0x7, 0xfb, 0x6}, {0xf, 0x8, 0x9, 0x5}]}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x800, 0x7f, 0xd}, {0x7861, 0x3b, 0x7, 0x8}, {0x7, 0x2, 0x8b, 0x7fffffff}, {0x0, 0x9, 0x9, 0x3}, {0x2, 0x4c, 0x5, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x7ff, 0x7, 0x8, 0x8ce4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x17, 0x6, "f9077ed8a18c386c195e7c508c29a2af60e4e7"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x90, 0x1c, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1de, 0xc, 0x8, 0x6, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfff, 0x100, 0x0, 0x8, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8, 0x0, 0x401, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xb75}}]}, {0xd, 0x6, "e461a98cdbd14e53d0"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x144, 0x18, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x9b12, 0x10000000, 0x51, 0x1}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x3, 0x4, 0x3, 0xfffffff6}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0xffffffffffffffff, 0x6, 0x9}, 0x3}}]}, {0xbf, 0x6, "2320aa7f67994f8e3713608d1e108cd031ccf492f26581f5baf2f6332b4c3860cb46c290f630e0fd11c09e3971fa645592326311c90aefd890b5a472f82ddab7c8bfac7035e43dd57d0887d0205060e83ffdb092b3adaeae50a1bb069a8368db45898ac07884692f116797c1d83aaff6bfd098abc97efc74a087aa390b915365ef727841bb0bbe8666c98dd64328485060727335fc78f71a569b7ba86194fef03c04b261a324de80dcc932cc22cd8faa2fea65b037fbe9a4f494db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7}}}}]}]}}]}, 0x6e8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x40000000015, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) syz_emit_ethernet(0xb2, &(0x7f00000002c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x6, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0x4efe, 0x0, 0x1}, {0xff001}], @ipv4=@igmp={{0x23, 0x4, 0x3, 0x5, 0x94, 0x65, 0x0, 0x7f, 0x2, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x2d, 0x1, [{0x0, 0xa, "b0ab6493d6004592"}, {0x5, 0x12, "e25b222437b65708da19c70e58926daa"}, {0x0, 0xb, "bca527079b3a83ac25"}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xd, 0x3, 0x2, [{@empty, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xc}, {@empty, 0x7}]}, @lsrr={0x83, 0x17, 0xc0, [@empty, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @timestamp_addr={0x44, 0x14, 0xa7, 0x1, 0xe, [{@private=0xa010100, 0x800}, {@rand_addr=0x64010100, 0x401}]}]}}, {0x1e, 0x7, 0x0, @loopback}}}}}}, &(0x7f0000000380)={0x1, 0x4, [0x553, 0x8d9, 0xda9, 0x2fe]}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1f33d1ada0875bba64e012441b34000000", @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250100000000000000014100000018001700000000000000007564703a73797a3100000000"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): le 06/25/2026 [ 191.395695][ T9185] Call Trace: [ 191.395704][ T9185] [ 191.395713][ T9185] dump_stack_lvl+0xe8/0x150 [ 191.395752][ T9185] should_fail_ex+0x40c/0x560 [ 191.395783][ T9185] _copy_from_user+0x2d/0xb0 [ 191.395816][ T9185] sctp_setsockopt+0x1c4/0x12c0 [ 191.395848][ T9185] ? sock_common_setsockopt+0x36/0xc0 [ 191.395875][ T9185] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 191.395918][ T9185] do_sock_setsockopt+0x17c/0x1b0 [ 191.395955][ T9185] __x64_sys_setsockopt+0x13d/0x1b0 [ 191.395989][ T9185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.396013][ T9185] do_syscall_64+0x174/0x580 [ 191.396043][ T9185] ? trace_irq_disable+0x3b/0x140 [ 191.396070][ T9185] ? clear_bhb_loop+0x40/0x90 [ 191.396097][ T9185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.396122][ T9185] RIP: 0033:0x7f2bcd79de99 [ 191.396143][ T9185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.396160][ T9185] RSP: 002b:00007f2bce639028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 191.396183][ T9185] RAX: ffffffffffffffda RBX: 00007f2bcda26090 RCX: 00007f2bcd79de99 [ 191.396198][ T9185] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 191.396211][ T9185] RBP: 00007f2bce639090 R08: 000000000000009c R09: 0000000000000000 [ 191.396224][ T9185] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 191.396237][ T9185] R13: 00007f2bcda26128 R14: 00007f2bcda26090 R15: 00007fff18b674a8 [ 191.396271][ T9185] [ 191.407288][ T9187] CPU: 0 UID: 0 PID: 9187 Comm: syz.4.1386 Not tainted syzkaller #0 PREEMPT(full) [ 191.407364][ T9187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 191.407397][ T9187] Call Trace: [ 191.407429][ T9187] [ 191.407450][ T9187] dump_stack_lvl+0xe8/0x150 [ 191.407556][ T9187] should_fail_ex+0x40c/0x560 [ 191.407635][ T9187] should_failslab+0xa8/0x100 [ 191.407771][ T9187] __kmalloc_noprof+0xfe/0x720 [ 191.407839][ T9187] ? __kasan_kmalloc+0x93/0xb0 [ 191.407934][ T9187] ? nla_strdup+0x9d/0x140 [ 191.408013][ T9187] ? nla_strdup+0x9d/0x140 [ 191.408107][ T9187] nla_strdup+0x9d/0x140 [ 191.408184][ T9187] nf_tables_newtable+0x49a/0x1950 [ 191.408328][ T9187] nfnetlink_rcv+0x1288/0x28c0 [ 191.408511][ T9187] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 191.408638][ T9187] ? ref_tracker_free+0x689/0x830 [ 191.408775][ T9187] ? skb_clone+0x246/0x3a0 [ 191.408815][ T9187] ? __netlink_deliver_tap+0x811/0x860 [ 191.408980][ T9187] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.409077][ T9187] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.409177][ T9187] netlink_unicast+0x7bb/0x940 [ 191.409293][ T9187] netlink_sendmsg+0x813/0xb40 [ 191.409377][ T9187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.409451][ T9187] ? aa_sock_msg_perm+0xf1/0x1b0 [ 191.409525][ T9187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.409578][ T9187] sock_sendmsg_nosec+0x13a/0x180 [ 191.409652][ T9187] ____sys_sendmsg+0x54e/0x850 [ 191.409756][ T9187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.409867][ T9187] ? import_iovec+0x73/0xa0 [ 191.409948][ T9187] ___sys_sendmsg+0x2a5/0x360 [ 191.410033][ T9187] ? __lock_acquire+0x683/0x2cf0 [ 191.410122][ T9187] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.410352][ T9187] ? __fget_files+0x2a/0x420 [ 191.410443][ T9187] ? __fget_files+0x3a2/0x420 [ 191.410549][ T9187] __x64_sys_sendmsg+0x1b1/0x290 [ 191.410645][ T9187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.410778][ T9187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.410842][ T9187] do_syscall_64+0x174/0x580 [ 191.410921][ T9187] ? trace_irq_disable+0x3b/0x140 [ 191.410989][ T9187] ? clear_bhb_loop+0x40/0x90 [ 191.411063][ T9187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.411120][ T9187] RIP: 0033:0x7fe27979de99 [ 191.411183][ T9187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.411226][ T9187] RSP: 002b:00007fe27a628028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.411282][ T9187] RAX: ffffffffffffffda RBX: 00007fe279a25fa0 RCX: 00007fe27979de99 [ 191.411324][ T9187] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 191.411357][ T9187] RBP: 00007fe27a628090 R08: 0000000000000000 R09: 0000000000000000 [ 191.411390][ T9187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.411431][ T9187] R13: 00007fe279a26038 R14: 00007fe279a25fa0 R15: 00007ffc2b419298 [ 191.411524][ T9187] [ 192.370302][ T9209] FAULT_INJECTION: forcing a failure. [ 192.370302][ T9209] name failslab, interval 1, probability 0, space 0, times 0 [ 192.386623][ T9209] CPU: 1 UID: 0 PID: 9209 Comm: syz.2.1399 Not tainted syzkaller #0 PREEMPT(full) [ 192.386651][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 192.386665][ T9209] Call Trace: [ 192.386673][ T9209] [ 192.386682][ T9209] dump_stack_lvl+0xe8/0x150 [ 192.386719][ T9209] should_fail_ex+0x40c/0x560 [ 192.386748][ T9209] should_failslab+0xa8/0x100 [ 192.386781][ T9209] __kmalloc_cache_noprof+0xa8/0x660 [ 192.386811][ T9209] ? __xdp_reg_mem_model+0x1e9/0x5a0 [ 192.386830][ T9209] ? __xdp_reg_mem_model+0x1e9/0x5a0 [ 192.386857][ T9209] __xdp_reg_mem_model+0x1e9/0x5a0 [ 192.386884][ T9209] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 192.386917][ T9209] xdp_reg_mem_model+0x22/0x40 [ 192.386939][ T9209] bpf_test_run_xdp_live+0x292/0x1c20 [ 192.386965][ T9209] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 192.387011][ T9209] ? __mutex_unlock_slowpath+0x731/0x900 [ 192.387052][ T9209] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 192.387088][ T9209] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 192.387110][ T9209] ? 0xffffffffa02052c0 [ 192.387182][ T9209] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 192.387212][ T9209] ? _copy_from_user+0x94/0xb0 [ 192.387242][ T9209] ? bpf_test_init+0x113/0x150 [ 192.387271][ T9209] ? xdp_convert_md_to_buff+0x5b/0x330 [ 192.387294][ T9209] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 192.387329][ T9209] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 192.387371][ T9209] ? __fget_files+0x2a/0x420 [ 192.387405][ T9209] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 192.387440][ T9209] bpf_prog_test_run+0x2c5/0x340 [ 192.387474][ T9209] __sys_bpf+0xa22/0xd90 [ 192.387511][ T9209] ? __pfx___sys_bpf+0x10/0x10 [ 192.387548][ T9209] ? __fget_files+0x2a/0x420 [ 192.387593][ T9209] ? ksys_write+0x242/0x270 [ 192.387627][ T9209] ? __pfx_ksys_write+0x10/0x10 [ 192.387666][ T9209] __x64_sys_bpf+0xba/0xd0 [ 192.387691][ T9209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.387714][ T9209] do_syscall_64+0x174/0x580 [ 192.387744][ T9209] ? trace_irq_disable+0x3b/0x140 [ 192.387770][ T9209] ? clear_bhb_loop+0x40/0x90 [ 192.387795][ T9209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.387816][ T9209] RIP: 0033:0x7fb29479de99 [ 192.387836][ T9209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.387853][ T9209] RSP: 002b:00007fb2929f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.387874][ T9209] RAX: ffffffffffffffda RBX: 00007fb294a25fa0 RCX: 00007fb29479de99 [ 192.387888][ T9209] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 192.387901][ T9209] RBP: 00007fb2929f6090 R08: 0000000000000000 R09: 0000000000000000 [ 192.387913][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.387924][ T9209] R13: 00007fb294a26038 R14: 00007fb294a25fa0 R15: 00007fffc12c4678 [ 192.387956][ T9209] [ 192.674642][ T9215] raw_sendmsg: syz.1.1398 forgot to set AF_INET. Fix it! [ 193.142568][ T9235] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1402'. [ 193.546366][ T9248] geneve2: entered promiscuous mode [ 193.565489][ T9248] geneve2: entered allmulticast mode [ 193.594347][ T1107] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 193.618835][ T1107] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 193.643679][ T1107] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 193.647787][ T9257] x_tables: duplicate underflow at hook 1 [ 193.666979][ T1107] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 193.702047][ T9262] syzkaller1: entered promiscuous mode [ 193.717925][ T9262] syzkaller1: entered allmulticast mode [ 193.778766][ T9253] syzkaller1: entered promiscuous mode [ 193.800053][ T9253] syzkaller1: entered allmulticast mode [ 194.383049][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.391291][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.650110][ T9299] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1419'. [ 194.742187][ T9303] FAULT_INJECTION: forcing a failure. [ 194.742187][ T9303] name failslab, interval 1, probability 0, space 0, times 0 [ 194.785721][ T9303] CPU: 0 UID: 0 PID: 9303 Comm: syz.1.1422 Not tainted syzkaller #0 PREEMPT(full) [ 194.785749][ T9303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 194.785761][ T9303] Call Trace: [ 194.785769][ T9303] [ 194.785778][ T9303] dump_stack_lvl+0xe8/0x150 [ 194.785822][ T9303] should_fail_ex+0x40c/0x560 [ 194.785849][ T9303] should_failslab+0xa8/0x100 [ 194.785881][ T9303] __kmalloc_cache_noprof+0xa8/0x660 [ 194.785908][ T9303] ? __xdp_reg_mem_model+0x1e9/0x5a0 [ 194.785926][ T9303] ? __xdp_reg_mem_model+0x1e9/0x5a0 [ 194.785953][ T9303] __xdp_reg_mem_model+0x1e9/0x5a0 [ 194.785979][ T9303] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 194.786009][ T9303] xdp_reg_mem_model+0x22/0x40 [ 194.786028][ T9303] bpf_test_run_xdp_live+0x292/0x1c20 [ 194.786053][ T9303] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 194.786087][ T9303] ? __mutex_unlock_slowpath+0x731/0x900 [ 194.786125][ T9303] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.786160][ T9303] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 194.786180][ T9303] ? 0xffffffffa02052c0 [ 194.786247][ T9303] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 194.786276][ T9303] ? _copy_from_user+0x94/0xb0 [ 194.786306][ T9303] ? bpf_test_init+0x113/0x150 [ 194.786335][ T9303] ? xdp_convert_md_to_buff+0x5b/0x330 [ 194.786358][ T9303] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 194.786393][ T9303] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 194.786430][ T9303] ? __fget_files+0x2a/0x420 [ 194.786461][ T9303] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 194.786494][ T9303] bpf_prog_test_run+0x2c5/0x340 [ 194.786526][ T9303] __sys_bpf+0xa22/0xd90 [ 194.786560][ T9303] ? __pfx___sys_bpf+0x10/0x10 [ 194.786607][ T9303] ? __fget_files+0x2a/0x420 [ 194.786651][ T9303] ? ksys_write+0x242/0x270 [ 194.786684][ T9303] ? __pfx_ksys_write+0x10/0x10 [ 194.786720][ T9303] __x64_sys_bpf+0xba/0xd0 [ 194.786759][ T9303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.786781][ T9303] do_syscall_64+0x174/0x580 [ 194.786815][ T9303] ? trace_irq_disable+0x3b/0x140 [ 194.786838][ T9303] ? clear_bhb_loop+0x40/0x90 [ 194.786860][ T9303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.786881][ T9303] RIP: 0033:0x7fd51b39de99 [ 194.786900][ T9303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.786918][ T9303] RSP: 002b:00007fd51c225028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.786941][ T9303] RAX: ffffffffffffffda RBX: 00007fd51b625fa0 RCX: 00007fd51b39de99 [ 194.786955][ T9303] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 194.786968][ T9303] RBP: 00007fd51c225090 R08: 0000000000000000 R09: 0000000000000000 [ 194.786988][ T9303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.787000][ T9303] R13: 00007fd51b626038 R14: 00007fd51b625fa0 R15: 00007ffd63ae3208 [ 194.787035][ T9303] [ 195.138555][ T9281] netlink: 'syz.3.1417': attribute type 4 has an invalid length. [ 195.397037][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'. [ 195.549956][ T9329] netlink: 'syz.2.1428': attribute type 1 has an invalid length. [ 196.424932][ T9366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.638830][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 198.352900][ T9460] FAULT_INJECTION: forcing a failure. [ 198.352900][ T9460] name failslab, interval 1, probability 0, space 0, times 0 [ 198.365898][ T9460] CPU: 0 UID: 0 PID: 9460 Comm: syz.4.1481 Not tainted syzkaller #0 PREEMPT(full) [ 198.365928][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 198.365942][ T9460] Call Trace: [ 198.365950][ T9460] [ 198.365965][ T9460] dump_stack_lvl+0xe8/0x150 [ 198.365994][ T9460] should_fail_ex+0x40c/0x560 [ 198.366015][ T9460] should_failslab+0xa8/0x100 [ 198.366039][ T9460] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 198.366058][ T9460] ? local_lock_release+0x9c/0x160 [ 198.366080][ T9460] ? __alloc_skb+0x1d7/0x7a0 [ 198.366099][ T9460] ? __alloc_skb+0x1d7/0x7a0 [ 198.366125][ T9460] __alloc_skb+0x1d7/0x7a0 [ 198.366149][ T9460] netlink_sendmsg+0x5d4/0xb40 [ 198.366172][ T9460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.366189][ T9460] ? aa_sock_msg_perm+0xf1/0x1b0 [ 198.366209][ T9460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.366223][ T9460] sock_sendmsg_nosec+0x13a/0x180 [ 198.366243][ T9460] ____sys_sendmsg+0x54e/0x850 [ 198.366279][ T9460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.366316][ T9460] ? import_iovec+0x73/0xa0 [ 198.366342][ T9460] ___sys_sendmsg+0x2a5/0x360 [ 198.366364][ T9460] ? __lock_acquire+0x683/0x2cf0 [ 198.366389][ T9460] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.366438][ T9460] ? __fget_files+0x2a/0x420 [ 198.366458][ T9460] ? __fget_files+0x3a2/0x420 [ 198.366508][ T9460] __x64_sys_sendmsg+0x1b1/0x290 [ 198.366544][ T9460] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.366601][ T9460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.366619][ T9460] do_syscall_64+0x174/0x580 [ 198.366643][ T9460] ? trace_irq_disable+0x3b/0x140 [ 198.366662][ T9460] ? clear_bhb_loop+0x40/0x90 [ 198.366702][ T9460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.366724][ T9460] RIP: 0033:0x7fe27979de99 [ 198.366746][ T9460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.366765][ T9460] RSP: 002b:00007fe27a628028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.366792][ T9460] RAX: ffffffffffffffda RBX: 00007fe279a25fa0 RCX: 00007fe27979de99 [ 198.366803][ T9460] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000004 [ 198.366813][ T9460] RBP: 00007fe27a628090 R08: 0000000000000000 R09: 0000000000000000 [ 198.366822][ T9460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.366830][ T9460] R13: 00007fe279a26038 R14: 00007fe279a25fa0 R15: 00007ffc2b419298 [ 198.366855][ T9460] [ 198.836517][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1486'. [ 199.145294][ T9482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1491'. [ 200.783662][ T9517] syz.4.1504 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 200.899499][ T9517] CPU: 0 UID: 0 PID: 9517 Comm: syz.4.1504 Not tainted syzkaller #0 PREEMPT(full) [ 200.899528][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 200.899541][ T9517] Call Trace: [ 200.899549][ T9517] [ 200.899559][ T9517] dump_stack_lvl+0xe8/0x150 [ 200.899597][ T9517] dump_header+0xd3/0x4b0 [ 200.899630][ T9517] oom_kill_process+0x3ab/0x970 [ 200.899657][ T9517] out_of_memory+0x1064/0x1480 [ 200.899677][ T9517] ? try_charge_memcg+0xbca/0x1590 [ 200.899721][ T9517] ? __pfx_out_of_memory+0x10/0x10 [ 200.899740][ T9517] ? do_raw_spin_unlock+0xf5/0x210 [ 200.899775][ T9517] try_charge_memcg+0xc74/0x1590 [ 200.899824][ T9517] ? __pfx_try_charge_memcg+0x10/0x10 [ 200.899853][ T9517] ? percpu_ref_tryget+0x15/0x180 [ 200.899908][ T9517] ? charge_memcg+0x20/0x2b0 [ 200.899941][ T9517] charge_memcg+0x19c/0x2b0 [ 200.899972][ T9517] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 200.900002][ T9517] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 200.900037][ T9517] swap_cache_alloc_folio+0x4de/0x990 [ 200.900087][ T9517] swap_cache_read_folio+0x44/0x120 [ 200.900116][ T9517] swap_cluster_readahead+0x3a0/0x640 [ 200.900148][ T9517] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 200.900194][ T9517] ? get_vma_policy+0x27b/0x3c0 [ 200.900230][ T9517] swapin_readahead+0x19a/0xc10 [ 200.900258][ T9517] ? swap_table_get+0x1e/0x260 [ 200.900280][ T9517] ? swap_table_get+0x1e/0x260 [ 200.900304][ T9517] ? __pfx_swapin_readahead+0x10/0x10 [ 200.900330][ T9517] ? swap_table_get+0x1e/0x260 [ 200.900350][ T9517] ? swap_table_get+0x1e/0x260 [ 200.900368][ T9517] ? swap_table_get+0x1e/0x260 [ 200.900396][ T9517] ? swap_table_get+0x216/0x260 [ 200.900419][ T9517] ? swap_cache_get_folio+0x2e7/0x2f0 [ 200.900487][ T9517] do_swap_page+0x455/0x5060 [ 200.900525][ T9517] ? __pte_offset_map+0x29/0x240 [ 200.900556][ T9517] ? __lock_acquire+0x683/0x2cf0 [ 200.900584][ T9517] ? do_swap_page+0x124/0x5060 [ 200.900606][ T9517] ? __pfx_do_swap_page+0x10/0x10 [ 200.900638][ T9517] ? __pte_offset_map+0x1ae/0x240 [ 200.900664][ T9517] ? pte_offset_map_rw_nolock+0xea/0x160 [ 200.900692][ T9517] handle_mm_fault+0x124c/0x3080 [ 200.900732][ T9517] ? handle_mm_fault+0xec/0x3080 [ 200.900766][ T9517] ? __pfx_handle_mm_fault+0x10/0x10 [ 200.900821][ T9517] ? lock_vma_under_rcu+0x45a/0x500 [ 200.900877][ T9517] do_user_addr_fault+0xa4d/0x1340 [ 200.900921][ T9517] ? trace_page_fault_user+0x84/0x1e0 [ 200.900964][ T9517] exc_page_fault+0x6a/0xc0 [ 200.900998][ T9517] asm_exc_page_fault+0x26/0x30 [ 200.901019][ T9517] RIP: 0033:0x7fe279758fc3 [ 200.901041][ T9517] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ee 86 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 200.901067][ T9517] RSP: 002b:00007ffc2b419390 EFLAGS: 00010246 [ 200.901087][ T9517] RAX: 0000000000000000 RBX: 000055558becd500 RCX: 0000000000000000 [ 200.901101][ T9517] RDX: 00007ffc2b4193d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.901115][ T9517] RBP: 00007fe279a27da0 R08: 0000000000000000 R09: 0000000000000000 [ 200.901129][ T9517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000030f73 [ 200.901143][ T9517] R13: 00007fe279a2618c R14: 0000000000030cd3 R15: 00007fe279a26180 [ 200.901180][ T9517] [ 201.043001][ T9547] block nbd0: not configured, cannot reconfigure [ 201.135722][ T9517] memory: usage 307200kB, limit 307200kB, failcnt 635 [ 201.310272][ T9517] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 201.380616][ T9517] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 201.396332][ T9517] Memory cgroup stats for /syz4: [ 201.396790][ T9517] cache 0 [ 201.434016][ T9517] rss 0 [ 201.442040][ T9517] rss_huge 0 [ 201.449277][ T9517] shmem 0 [ 201.459125][ T9517] mapped_file 0 [ 201.475082][ T9517] dirty 0 [ 201.487359][ T9517] writeback 0 [ 201.508339][ T9517] workingset_refault_anon 1 [ 201.521370][ T9517] workingset_refault_file 3 [ 201.539800][ T9517] swap 217088 [ 201.548116][ T9517] swapcached 225280 [ 201.556545][ T9517] pgpgin 15099 [ 201.564690][ T9517] pgpgout 15098 [ 201.573485][ T9517] pgfault 44760 [ 201.585829][ T9517] pgmajfault 6 [ 201.597894][ T9517] inactive_anon 0 [ 201.608833][ T9517] active_anon 4096 [ 201.626364][ T9517] inactive_file 0 [ 201.640869][ T9517] active_file 0 [ 201.652435][ T9517] unevictable 0 [ 201.659870][ T9517] hierarchical_memory_limit 314572800 [ 201.672647][ T9517] hierarchical_memsw_limit 9223372036854771712 [ 201.702503][ T9517] total_cache 0 [ 201.710891][ T9517] total_rss 0 [ 201.718911][ T9517] total_rss_huge 0 [ 201.734549][ T9563] bridge_slave_0: left allmulticast mode [ 201.737099][ T9517] total_shmem 0 [ 201.761832][ T9517] total_mapped_file 0 [ 201.770128][ T9563] bridge_slave_0: left promiscuous mode [ 201.774899][ T9517] total_dirty 0 [ 201.792958][ T9517] total_writeback 0 [ 201.798313][ T9563] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.809257][ T9517] total_workingset_refault_anon 1 [ 201.828066][ T9517] total_workingset_refault_file 3 [ 201.854759][ T9517] total_swap 217088 [ 201.856550][ T9563] bridge_slave_1: left allmulticast mode [ 201.876172][ T9517] total_swapcached 225280 [ 201.883695][ T9563] bridge_slave_1: left promiscuous mode [ 201.900823][ T9517] total_pgpgin 15099 [ 201.905418][ T9563] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.924658][ T9517] total_pgpgout 15098 [ 201.942112][ T9517] total_pgfault 44760 [ 201.963971][ T9517] total_pgmajfault 6 [ 201.980809][ T9517] total_inactive_anon 0 [ 201.991639][ T9563] bond0: (slave bond_slave_0): Releasing backup interface [ 202.009045][ T9517] total_active_anon 4096 [ 202.027951][ T9517] total_inactive_file 0 [ 202.050927][ T9517] total_active_file 0 [ 202.064786][ T9563] bond0: (slave bond_slave_1): Releasing backup interface [ 202.074936][ T9517] total_unevictable 0 [ 202.092340][ T9517] anon_cost 0 [ 202.109310][ T9517] file_cost 0 [ 202.123526][ T9517] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1504,pid=9517,uid=0 [ 202.145218][ T9563] team0: Port device team_slave_0 removed [ 202.194627][ T9517] Memory cgroup out of memory: Killed process 9517 (syz.4.1504) total-vm:167972kB, anon-rss:1248kB, file-rss:23056kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 202.228439][ T9563] team0: Port device team_slave_1 removed [ 202.257404][ T9563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.308488][ T9563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.354898][ T9563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.387652][ T9563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.466104][ T9563] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 202.797131][ T9584] syzkaller1: entered promiscuous mode [ 202.830587][ T9584] syzkaller1: entered allmulticast mode [ 203.043514][ T9592] syzkaller1: entered promiscuous mode [ 203.057606][ T9592] syzkaller1: entered allmulticast mode [ 203.286273][ T9599] tipc: Enabled bearer , priority 0 [ 203.499009][ T9601] syzkaller0: entered promiscuous mode [ 203.512526][ T9601] syzkaller0: entered allmulticast mode [ 203.635930][ T9598] tipc: Resetting bearer [ 203.725830][ T9598] tipc: Disabling bearer [ 204.302534][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1540'. [ 204.359136][ T9633] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 204.407299][ T9633] bond1 (unregistering): Released all slaves [ 204.618949][ T9646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1544'. [ 204.926101][ T9658] syzkaller1: entered promiscuous mode [ 204.955555][ T9658] syzkaller1: entered allmulticast mode [ 204.982521][ T5630] hid-generic 0005:16C0:0007.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 205.364345][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 206.034203][ T9701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1564'. [ 206.538867][ T9689] netlink: 344 bytes leftover after parsing attributes in process `syz.0.1560'. [ 206.705456][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1569'. [ 206.741409][ T9725] syzkaller0: entered promiscuous mode [ 206.748195][ T9725] syzkaller0: entered allmulticast mode [ 208.706970][ T9742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.722906][ T9731] syzkaller1: entered promiscuous mode [ 208.728870][ T9731] syzkaller1: entered allmulticast mode [ 208.921663][ T9752] netlink: 'syz.3.1578': attribute type 1 has an invalid length. [ 210.999297][ T9752] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 211.238151][ T9775] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 211.260968][ T9775] bond1 (unregistering): Released all slaves [ 211.407041][ T9789] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1589'. [ 211.444162][ T9789] IPVS: length: 203 != 24 [ 211.464068][ T9793] syzkaller0: entered promiscuous mode [ 211.469854][ T9793] syzkaller0: entered allmulticast mode [ 211.826133][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 211.827472][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 211.832674][ T5645] Bluetooth: hci0: command 0x0401 tx timeout [ 211.838578][ T5641] Bluetooth: hci2: command 0x0406 tx timeout [ 212.287298][ T9825] FAULT_INJECTION: forcing a failure. [ 212.287298][ T9825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.324635][ T9825] CPU: 0 UID: 0 PID: 9825 Comm: syz.4.1601 Not tainted syzkaller #0 PREEMPT(full) [ 212.324665][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 212.324677][ T9825] Call Trace: [ 212.324684][ T9825] [ 212.324693][ T9825] dump_stack_lvl+0xe8/0x150 [ 212.324729][ T9825] should_fail_ex+0x40c/0x560 [ 212.324756][ T9825] _copy_from_iter+0x1d3/0x1660 [ 212.324783][ T9825] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 212.324817][ T9825] ? __pfx_policy_nodemask+0x10/0x10 [ 212.324846][ T9825] ? unwind_next_frame+0x8f/0x2550 [ 212.324869][ T9825] ? __pfx__copy_from_iter+0x10/0x10 [ 212.324899][ T9825] ? alloc_pages_mpol+0x24a/0x380 [ 212.324939][ T9825] copy_page_from_iter+0x219/0x2d0 [ 212.324970][ T9825] tun_get_user+0x1bf1/0x4370 [ 212.324999][ T9825] ? tun_get_user+0x6e7/0x4370 [ 212.325045][ T9825] ? aa_file_perm+0x4ed/0x15f0 [ 212.325068][ T9825] ? __pfx_tun_get_user+0x10/0x10 [ 212.325098][ T9825] ? __lock_acquire+0x683/0x2cf0 [ 212.325140][ T9825] ? ref_tracker_alloc+0x341/0x4b0 [ 212.325165][ T9825] ? get_pid_task+0x20/0x1f0 [ 212.325197][ T9825] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 212.325234][ T9825] ? tun_get+0x1c/0x2f0 [ 212.325260][ T9825] ? tun_get+0x1c/0x2f0 [ 212.325293][ T9825] ? tun_get+0x1c/0x2f0 [ 212.325317][ T9825] ? tun_get+0x1c/0x2f0 [ 212.325347][ T9825] tun_chr_write_iter+0x113/0x200 [ 212.325377][ T9825] vfs_write+0x612/0xba0 [ 212.325416][ T9825] ? __pfx_vfs_write+0x10/0x10 [ 212.325459][ T9825] ? __fget_files+0x2a/0x420 [ 212.325496][ T9825] ksys_write+0x150/0x270 [ 212.325530][ T9825] ? __pfx_ksys_write+0x10/0x10 [ 212.325571][ T9825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.325594][ T9825] do_syscall_64+0x174/0x580 [ 212.325625][ T9825] ? trace_irq_disable+0x3b/0x140 [ 212.325656][ T9825] ? clear_bhb_loop+0x40/0x90 [ 212.325683][ T9825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.325704][ T9825] RIP: 0033:0x7fe27975e6ce [ 212.325725][ T9825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 212.325744][ T9825] RSP: 002b:00007fe27a627fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 212.325767][ T9825] RAX: ffffffffffffffda RBX: 00007fe27a6286c0 RCX: 00007fe27975e6ce [ 212.325783][ T9825] RDX: 0000000000000082 RSI: 0000200000000080 RDI: 00000000000000c8 [ 212.325797][ T9825] RBP: 00007fe27a628090 R08: 0000000000000000 R09: 0000000000000000 [ 212.325812][ T9825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.325824][ T9825] R13: 00007fe279a26038 R14: 00007fe279a25fa0 R15: 00007ffc2b419298 [ 212.325858][ T9825] [ 212.718313][ T9831] Bluetooth: MGMT ver 1.23 [ 212.745611][ T9831] netlink: 'syz.0.1604': attribute type 9 has an invalid length. [ 212.761913][ T9834] netlink: 'syz.3.1603': attribute type 16 has an invalid length. [ 212.777895][ T9834] netlink: 'syz.3.1603': attribute type 17 has an invalid length. [ 212.867167][ T9834] ip6erspan0: left allmulticast mode [ 214.049041][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1620'. [ 214.235810][ T9881] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.255419][ T9881] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 214.343949][ T9881] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.370854][ T9881] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 214.501938][ T9881] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.537634][ T9881] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 214.616375][ T9897] rdma_op ffff88803367f9f0 conn xmit_rdma 0000000000000000 [ 214.635900][ T9881] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.650229][ T9903] FAULT_INJECTION: forcing a failure. [ 214.650229][ T9903] name failslab, interval 1, probability 0, space 0, times 0 [ 214.670893][ T9881] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 214.680612][ T9903] CPU: 1 UID: 0 PID: 9903 Comm: syz.0.1627 Not tainted syzkaller #0 PREEMPT(full) [ 214.680702][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 214.680729][ T9903] Call Trace: [ 214.680750][ T9903] [ 214.680783][ T9903] dump_stack_lvl+0xe8/0x150 [ 214.680820][ T9903] should_fail_ex+0x40c/0x560 [ 214.680849][ T9903] should_failslab+0xa8/0x100 [ 214.680880][ T9903] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 214.680903][ T9903] ? skb_clone+0x212/0x3a0 [ 214.680918][ T9903] ? skb_clone+0x212/0x3a0 [ 214.680941][ T9903] skb_clone+0x212/0x3a0 [ 214.680960][ T9903] __netlink_deliver_tap+0x413/0x860 [ 214.680997][ T9903] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.681025][ T9903] netlink_deliver_tap+0x19c/0x1b0 [ 214.681052][ T9903] netlink_unicast+0x77f/0x940 [ 214.681085][ T9903] netlink_sendmsg+0x813/0xb40 [ 214.681109][ T9903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.681129][ T9903] ? aa_sock_msg_perm+0xf1/0x1b0 [ 214.681153][ T9903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.681169][ T9903] sock_sendmsg_nosec+0x13a/0x180 [ 214.681191][ T9903] ____sys_sendmsg+0x54e/0x850 [ 214.681222][ T9903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.681257][ T9903] ? import_iovec+0x73/0xa0 [ 214.681284][ T9903] ___sys_sendmsg+0x2a5/0x360 [ 214.681309][ T9903] ? __lock_acquire+0x683/0x2cf0 [ 214.681336][ T9903] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.681395][ T9903] ? __fget_files+0x2a/0x420 [ 214.681417][ T9903] ? __fget_files+0x3a2/0x420 [ 214.681448][ T9903] __x64_sys_sendmsg+0x1b1/0x290 [ 214.681477][ T9903] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.681519][ T9903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.681538][ T9903] do_syscall_64+0x174/0x580 [ 214.681564][ T9903] ? trace_irq_disable+0x3b/0x140 [ 214.681585][ T9903] ? clear_bhb_loop+0x40/0x90 [ 214.681607][ T9903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.681624][ T9903] RIP: 0033:0x7f2bcd79de99 [ 214.681650][ T9903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.681665][ T9903] RSP: 002b:00007f2bce65a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.681684][ T9903] RAX: ffffffffffffffda RBX: 00007f2bcda25fa0 RCX: 00007f2bcd79de99 [ 214.681697][ T9903] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 214.681707][ T9903] RBP: 00007f2bce65a090 R08: 0000000000000000 R09: 0000000000000000 [ 214.681718][ T9903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.681728][ T9903] R13: 00007f2bcda26038 R14: 00007f2bcda25fa0 R15: 00007fff18b674a8 [ 214.681756][ T9903] [ 214.971499][ T9900] IPVS: Scheduler module ip_vs_sip not found [ 215.233557][ T706] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 215.258590][ T706] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 215.355809][ T1107] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 215.385282][ T1107] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 215.442713][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 215.465386][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 215.517534][ T9925] netlink: 'syz.3.1636': attribute type 2 has an invalid length. [ 215.531130][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 215.540888][ T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 215.681692][ T9931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.700572][ T9931] syzkaller0: entered promiscuous mode [ 215.710280][ T9931] syzkaller0: entered allmulticast mode [ 215.729699][ T9931] syzkaller0: tun_net_xmit 663 [ 215.735858][ T9931] syzkaller0: tun_net_xmit 663 [ 215.740754][ T9931] syzkaller0: tun_net_xmit 663 [ 215.745609][ T9931] syzkaller0: tun_net_xmit 663 [ 215.750481][ T9931] syzkaller0: tun_net_xmit 663 [ 215.755313][ T9931] syzkaller0: tun_net_xmit 663 [ 215.760187][ T9931] syzkaller0: tun_net_xmit 663 [ 215.765043][ T9931] syzkaller0: tun_net_xmit 663 [ 215.769899][ T9931] syzkaller0: tun_net_xmit 663 [ 215.774780][ T9931] syzkaller0: tun_net_xmit 663 [ 215.779797][ T9931] syzkaller0: tun_net_xmit 663 [ 215.784638][ T9931] syzkaller0: tun_net_xmit 663 [ 215.789516][ T9931] syzkaller0: tun_net_xmit 663 [ 215.794399][ T9931] syzkaller0: tun_net_xmit 663 [ 215.799311][ T9931] syzkaller0: tun_net_xmit 663 [ 215.804175][ T9931] syzkaller0: tun_net_xmit 663 [ 215.809017][ T9931] syzkaller0: tun_net_xmit 663 [ 215.813885][ T9931] syzkaller0: tun_net_xmit 663 [ 215.818718][ T9931] syzkaller0: tun_net_xmit 663 [ 215.823584][ T9931] syzkaller0: tun_net_xmit 663 [ 215.828407][ T9931] syzkaller0: tun_net_xmit 663 [ 215.833271][ T9931] syzkaller0: tun_net_xmit 663 [ 215.838094][ T9931] syzkaller0: tun_net_xmit 663 [ 215.843065][ T9931] syzkaller0: tun_net_xmit 663 [ 215.847884][ T9931] syzkaller0: tun_net_xmit 663 [ 215.852736][ T9931] syzkaller0: tun_net_xmit 663 [ 215.857602][ T9931] syzkaller0: tun_net_xmit 663 [ 215.862491][ T9931] syzkaller0: tun_net_xmit 663 [ 215.867321][ T9931] syzkaller0: tun_net_xmit 663 [ 215.872184][ T9931] syzkaller0: tun_net_xmit 663 [ 215.877011][ T9931] syzkaller0: tun_net_xmit 663 [ 215.881877][ T9931] syzkaller0: tun_net_xmit 663 [ 215.886815][ T9931] syzkaller0: tun_net_xmit 663 [ 215.891800][ T9931] syzkaller0: tun_net_xmit 663 [ 215.896661][ T9931] syzkaller0: tun_net_xmit 663 [ 215.901516][ T9931] syzkaller0: tun_net_xmit 663 [ 215.906343][ T9931] syzkaller0: tun_net_xmit 663 [ 215.911210][ T9931] syzkaller0: tun_net_xmit 663 [ 215.916072][ T9931] syzkaller0: tun_net_xmit 663 [ 215.920931][ T9931] syzkaller0: tun_net_xmit 663 [ 215.925772][ T9931] syzkaller0: tun_net_xmit 663 [ 215.930631][ T9931] syzkaller0: tun_net_xmit 663 [ 215.935445][ T9931] syzkaller0: tun_net_xmit 663 [ 215.940311][ T9931] syzkaller0: tun_net_xmit 663 [ 215.945141][ T9931] syzkaller0: tun_net_xmit 663 [ 215.950029][ T9931] syzkaller0: tun_net_xmit 663 [ 215.954889][ T9931] syzkaller0: tun_net_xmit 663 [ 215.959749][ T9931] syzkaller0: tun_net_xmit 663 [ 215.964613][ T9931] syzkaller0: tun_net_xmit 663 [ 215.969473][ T9931] syzkaller0: tun_net_xmit 663 [ 215.974313][ T9931] syzkaller0: tun_net_xmit 663 [ 215.979157][ T9931] syzkaller0: tun_net_xmit 663 [ 215.984024][ T9931] syzkaller0: tun_net_xmit 663 [ 215.988848][ T9931] syzkaller0: tun_net_xmit 663 [ 215.993726][ T9931] syzkaller0: tun_net_xmit 663 [ 215.998578][ T9931] syzkaller0: tun_net_xmit 663 [ 216.003426][ T9931] syzkaller0: tun_net_xmit 663 [ 216.008240][ T9931] syzkaller0: tun_net_xmit 663 [ 216.013086][ T9931] syzkaller0: tun_net_xmit 663 [ 216.017900][ T9931] syzkaller0: tun_net_xmit 663 [ 216.022769][ T9931] syzkaller0: tun_net_xmit 663 [ 216.027768][ T9931] syzkaller0: tun_net_xmit 663 [ 216.032638][ T9931] syzkaller0: tun_net_xmit 663 [ 216.037644][ T9931] syzkaller0: tun_net_xmit 663 [ 216.043396][ C0] syzkaller0: tun_net_xmit 663 [ 216.049606][ C0] syzkaller0: tun_net_xmit 663 [ 216.054482][ C0] syzkaller0: tun_net_xmit 663 [ 216.059512][ C0] syzkaller0: tun_net_xmit 663 [ 216.064374][ C0] syzkaller0: tun_net_xmit 663 [ 216.069199][ C0] syzkaller0: tun_net_xmit 663 [ 216.074072][ C0] syzkaller0: tun_net_xmit 663 [ 216.078907][ C0] syzkaller0: tun_net_xmit 663 [ 216.083781][ C0] syzkaller0: tun_net_xmit 663 [ 216.088635][ C0] syzkaller0: tun_net_xmit 663 [ 216.093488][ C0] syzkaller0: tun_net_xmit 663 [ 216.098314][ C0] syzkaller0: tun_net_xmit 663 [ 216.103184][ C0] syzkaller0: tun_net_xmit 663 [ 216.108018][ C0] syzkaller0: tun_net_xmit 663 [ 216.112883][ C0] syzkaller0: tun_net_xmit 663 [ 216.117712][ C0] syzkaller0: tun_net_xmit 663 [ 216.122576][ C0] syzkaller0: tun_net_xmit 663 [ 216.127421][ C0] syzkaller0: tun_net_xmit 663 [ 216.132286][ C0] syzkaller0: tun_net_xmit 663 [ 216.137108][ C0] syzkaller0: tun_net_xmit 663 [ 216.141969][ C0] syzkaller0: tun_net_xmit 663 [ 216.146792][ C0] syzkaller0: tun_net_xmit 663 [ 216.151640][ C0] syzkaller0: tun_net_xmit 663 [ 216.156503][ C0] syzkaller0: tun_net_xmit 663 [ 216.161379][ C0] syzkaller0: tun_net_xmit 663 [ 216.166203][ C0] syzkaller0: tun_net_xmit 663 [ 216.171063][ C0] syzkaller0: tun_net_xmit 663 [ 216.175903][ C0] syzkaller0: tun_net_xmit 663 [ 216.180782][ C0] syzkaller0: tun_net_xmit 663 [ 216.185608][ C0] syzkaller0: tun_net_xmit 663 [ 216.190461][ C0] syzkaller0: tun_net_xmit 663 [ 216.195369][ C0] syzkaller0: tun_net_xmit 663 [ 216.200269][ C0] syzkaller0: tun_net_xmit 663 [ 216.268191][ T9944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1640'. [ 216.718400][ T9960] bond1: down delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 216.728937][ T9960] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 216.744394][ T9960] bond1 (unregistering): Released all slaves [ 216.824512][ T9968] syzkaller0: entered promiscuous mode [ 216.831569][ T9968] syzkaller0: entered allmulticast mode [ 218.993276][ T1107] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.063809][ T1107] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.128452][ T1107] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.211935][ T1107] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.413357][T10012] netlink: 'syz.2.1665': attribute type 1 has an invalid length. [ 219.438057][T10011] FAULT_INJECTION: forcing a failure. [ 219.438057][T10011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.463907][T10011] CPU: 1 UID: 0 PID: 10011 Comm: syz.4.1663 Not tainted syzkaller #0 PREEMPT(full) [ 219.463937][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 219.463951][T10011] Call Trace: [ 219.463958][T10011] [ 219.463968][T10011] dump_stack_lvl+0xe8/0x150 [ 219.464007][T10011] should_fail_ex+0x40c/0x560 [ 219.464037][T10011] _copy_from_user+0x2d/0xb0 [ 219.464070][T10011] sctp_getsockopt_paddr_thresholds+0x10c/0x790 [ 219.464113][T10011] ? __pfx_sctp_getsockopt_paddr_thresholds+0x10/0x10 [ 219.464163][T10011] ? sctp_getsockopt+0x12f/0xb90 [ 219.464199][T10011] ? __local_bh_enable_ip+0xd0/0x130 [ 219.464229][T10011] sctp_getsockopt+0x94a/0xb90 [ 219.464262][T10011] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 219.464295][T10011] do_sock_getsockopt+0x51d/0x7e0 [ 219.464334][T10011] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 219.464384][T10011] ? __fget_files+0x3a2/0x420 [ 219.464412][T10011] ? __fget_files+0x2a/0x420 [ 219.464449][T10011] __x64_sys_getsockopt+0x1a4/0x240 [ 219.464487][T10011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.464511][T10011] do_syscall_64+0x174/0x580 [ 219.464555][T10011] ? trace_irq_disable+0x3b/0x140 [ 219.464584][T10011] ? clear_bhb_loop+0x40/0x90 [ 219.464611][T10011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.464633][T10011] RIP: 0033:0x7fe27979de99 [ 219.464653][T10011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.464671][T10011] RSP: 002b:00007fe27a628028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 219.464694][T10011] RAX: ffffffffffffffda RBX: 00007fe279a25fa0 RCX: 00007fe27979de99 [ 219.464711][T10011] RDX: 000000000000001f RSI: 0000000000000084 RDI: 0000000000000003 [ 219.464723][T10011] RBP: 00007fe27a628090 R08: 0000200000000140 R09: 0000000000000000 [ 219.464737][T10011] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 219.464750][T10011] R13: 00007fe279a26038 R14: 00007fe279a25fa0 R15: 00007ffc2b419298 [ 219.464786][T10011] [ 219.674204][T10012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.756407][T10020] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 219.779242][T10020] bond1: (slave batadv1): making interface the new active one [ 219.788933][T10020] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 219.867809][T10025] netlink: 'syz.4.1667': attribute type 33 has an invalid length. [ 219.898592][T10012] bond1: (slave veth3): Enslaving as an active interface with a down link [ 220.413904][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1671'. [ 220.463168][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1671'. [ 220.525780][T10045] FAULT_INJECTION: forcing a failure. [ 220.525780][T10045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.545177][T10045] CPU: 0 UID: 0 PID: 10045 Comm: syz.3.1673 Not tainted syzkaller #0 PREEMPT(full) [ 220.545208][T10045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 220.545222][T10045] Call Trace: [ 220.545230][T10045] [ 220.545239][T10045] dump_stack_lvl+0xe8/0x150 [ 220.545278][T10045] should_fail_ex+0x40c/0x560 [ 220.545307][T10045] _copy_from_user+0x2d/0xb0 [ 220.545340][T10045] __copy_msghdr+0x390/0x590 [ 220.545488][T10045] ___sys_sendmsg+0x213/0x360 [ 220.545528][T10045] ? __lock_acquire+0x683/0x2cf0 [ 220.545592][T10045] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.545662][T10045] ? __fget_files+0x2a/0x420 [ 220.545690][T10045] ? __fget_files+0x3a2/0x420 [ 220.545729][T10045] __x64_sys_sendmsg+0x1b1/0x290 [ 220.545765][T10045] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.545813][T10045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.545837][T10045] do_syscall_64+0x174/0x580 [ 220.545868][T10045] ? trace_irq_disable+0x3b/0x140 [ 220.545896][T10045] ? clear_bhb_loop+0x40/0x90 [ 220.545923][T10045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.545946][T10045] RIP: 0033:0x7f9af499de99 [ 220.545974][T10045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.545993][T10045] RSP: 002b:00007f9af5933028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.546017][T10045] RAX: ffffffffffffffda RBX: 00007f9af4c25fa0 RCX: 00007f9af499de99 [ 220.546032][T10045] RDX: 000000003000cb08 RSI: 0000200000001c00 RDI: 0000000000000004 [ 220.546046][T10045] RBP: 00007f9af5933090 R08: 0000000000000000 R09: 0000000000000000 [ 220.546060][T10045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.546073][T10045] R13: 00007f9af4c26038 R14: 00007f9af4c25fa0 R15: 00007fff91a0c018 [ 220.546108][T10045] [ 221.138505][T10064] syzkaller1: entered promiscuous mode [ 221.170544][T10064] syzkaller1: entered allmulticast mode [ 221.350121][T10079] FAULT_INJECTION: forcing a failure. [ 221.350121][T10079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.426530][T10079] CPU: 0 UID: 0 PID: 10079 Comm: syz.1.1680 Not tainted syzkaller #0 PREEMPT(full) [ 221.426560][T10079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 221.426573][T10079] Call Trace: [ 221.426581][T10079] [ 221.426590][T10079] dump_stack_lvl+0xe8/0x150 [ 221.426629][T10079] should_fail_ex+0x40c/0x560 [ 221.426660][T10079] _copy_from_user+0x2d/0xb0 [ 221.426691][T10079] kstrtouint_from_user+0xd6/0x180 [ 221.426721][T10079] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 221.426764][T10079] proc_fail_nth_write+0x8e/0x210 [ 221.426793][T10079] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 221.426831][T10079] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 221.426859][T10079] vfs_write+0x296/0xba0 [ 221.426908][T10079] ? __pfx_vfs_write+0x10/0x10 [ 221.426941][T10079] ? __fget_files+0x2a/0x420 [ 221.426973][T10079] ? __fget_files+0x3a2/0x420 [ 221.426998][T10079] ? __fget_files+0x2a/0x420 [ 221.427035][T10079] ksys_write+0x150/0x270 [ 221.427069][T10079] ? __pfx_ksys_write+0x10/0x10 [ 221.427110][T10079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.427134][T10079] do_syscall_64+0x174/0x580 [ 221.427164][T10079] ? trace_irq_disable+0x3b/0x140 [ 221.427191][T10079] ? clear_bhb_loop+0x40/0x90 [ 221.427216][T10079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.427237][T10079] RIP: 0033:0x7fd51b35e6ce [ 221.427259][T10079] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 221.427277][T10079] RSP: 002b:00007fd51c1e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.427300][T10079] RAX: ffffffffffffffda RBX: 00007fd51c1e36c0 RCX: 00007fd51b35e6ce [ 221.427315][T10079] RDX: 0000000000000001 RSI: 00007fd51c1e30a0 RDI: 0000000000000006 [ 221.427328][T10079] RBP: 00007fd51c1e3090 R08: 0000000000000000 R09: 0000000000000000 [ 221.427341][T10079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.427353][T10079] R13: 00007fd51b626218 R14: 00007fd51b626180 R15: 00007ffd63ae3208 [ 221.427388][T10079] [ 221.916534][T10074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.737161][T10129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1695'. [ 222.792297][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 222.916180][T10136] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1698'. [ 222.952474][T10139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1699'. [ 222.975926][T10139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1699'. [ 223.091506][T10144] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1699'. [ 223.125213][T10144] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1699'. [ 223.159342][T10144] batadv_slave_1: entered promiscuous mode [ 223.220144][T10137] batadv_slave_1: left promiscuous mode [ 223.544381][T10161] syzkaller1: entered promiscuous mode [ 223.550559][T10161] syzkaller1: entered allmulticast mode [ 223.681929][T10162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1706'. [ 223.793131][T10171] geneve2: entered promiscuous mode [ 223.798733][T10171] geneve2: entered allmulticast mode [ 223.815411][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 224.843795][T10211] syzkaller0: entered promiscuous mode [ 224.849660][T10211] syzkaller0: entered allmulticast mode [ 226.436742][T10175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.648799][T10221] warning: `syz.3.1724' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 226.723068][T10225] tipc: Started in network mode [ 226.753803][T10225] tipc: Node identity 9ae30129b1b1, cluster identity 4711 [ 226.788882][T10225] tipc: Enabled bearer , priority 0 [ 226.835213][T10234] Cannot find del_set index 3 as target [ 226.932243][T10229] syzkaller0: entered promiscuous mode [ 226.949116][T10229] syzkaller0: entered allmulticast mode [ 226.956436][T10229] tipc: Resetting bearer [ 226.989014][T10224] tipc: Resetting bearer [ 227.192157][T10248] netlink: 'syz.4.1734': attribute type 1 has an invalid length. [ 228.565672][T10256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.219357][T10224] tipc: Disabling bearer [ 229.264829][T10248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.366640][T10250] bond1: (slave veth3): Enslaving as an active interface with a down link [ 229.393482][T10251] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 229.401965][T10251] bond1: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 229.475167][ T10] tipc: Node number set to 726794537 [ 229.886291][T10285] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1745'. [ 229.903594][T10285] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1745'. [ 229.925993][T10285] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1745'. [ 230.463430][T10297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1750'. [ 230.483078][T10297] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 230.852512][T10317] netlink: 'syz.1.1758': attribute type 39 has an invalid length. [ 232.183068][T10371] netlink: 'syz.1.1771': attribute type 13 has an invalid length. [ 232.191526][T10371] netlink: 'syz.1.1771': attribute type 58 has an invalid length. [ 232.200116][T10371] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1771'. [ 234.065991][T10403] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1774'. [ 234.154904][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1775'. [ 234.171711][T10404] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1773'. [ 234.431565][T10425] ipt_REJECT: ECHOREPLY no longer supported. [ 234.452028][T10425] x_tables: duplicate underflow at hook 1 [ 235.203302][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1791'. [ 235.265618][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1791'. [ 235.306941][T10455] netlink: 'syz.4.1792': attribute type 21 has an invalid length. [ 235.410421][ T809] IPVS: starting estimator thread 0... [ 235.462674][T10457] IPVS: sh: FWM 3 0x00000003 - no destination available [ 235.549540][T10459] IPVS: using max 26 ests per chain, 62400 per kthread [ 236.981097][T10452] xfrm1: entered promiscuous mode [ 237.006232][T10452] xfrm1: entered allmulticast mode [ 237.014362][T10455] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1792'. [ 237.164319][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1793'. [ 237.215792][T10469] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 237.223912][T10469] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 237.251402][T10470] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1796'. [ 237.278418][T10470] netlink: 764 bytes leftover after parsing attributes in process `syz.4.1796'. [ 237.649957][T10490] netlink: 'syz.4.1803': attribute type 3 has an invalid length. [ 237.845116][T10498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1805'. [ 237.861860][T10498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1805'. [ 237.913736][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1807'. [ 238.035626][T10511] netlink: 'syz.2.1805': attribute type 1 has an invalid length. [ 238.052219][T10511] netlink: 'syz.2.1805': attribute type 11 has an invalid length. [ 238.070154][T10511] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1805'. [ 240.595781][T10543] TCP: TCP_TX_DELAY enabled [ 240.858720][T10555] gretap1: entered promiscuous mode [ 240.871863][T10555] batman_adv: batadv0: Adding interface: gretap1 [ 240.878713][T10555] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 240.899596][T10555] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 241.495307][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1834'. [ 241.607445][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1835'. [ 241.619906][T10595] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1835'. [ 241.848947][T10604] netlink: 'syz.2.1839': attribute type 30 has an invalid length. [ 241.926902][T10611] netlink: 'syz.2.1839': attribute type 13 has an invalid length. [ 241.958650][T10608] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.994832][T10608] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.085267][T10608] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.104606][T10615] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1842'. [ 242.115044][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'. [ 242.120141][T10608] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.137917][T10615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1842'. [ 242.253259][T10608] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.295809][T10608] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.380443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.408887][T10608] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.450187][T10608] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.616235][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1847'. [ 242.795183][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.830234][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.913311][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.938082][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.013775][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.044296][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.055734][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1848'. [ 243.123727][ T706] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.147547][ T706] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.306637][T10655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1855'. [ 243.666081][T10658] bond3: option resend_igmp: invalid value (32767) [ 243.687622][T10658] bond3: option resend_igmp: allowed values 0 - 255 [ 243.708375][T10658] bond3 (unregistering): Released all slaves [ 243.888834][T10678] syzkaller0: entered promiscuous mode [ 243.894841][T10678] syzkaller0: entered allmulticast mode [ 243.933008][T10678] tipc: Started in network mode [ 243.951290][T10678] tipc: Node identity bef184299ab6, cluster identity 4711 [ 243.971575][T10678] tipc: Enabled bearer , priority 0 [ 244.000358][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1854'. [ 244.087073][T10678] tipc: Resetting bearer [ 244.098131][T10677] tipc: Resetting bearer [ 244.120293][T10677] tipc: Disabling bearer [ 244.219873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.230091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.238848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.261203][T10686] netlink: 'syz.1.1862': attribute type 1 has an invalid length. [ 244.657830][T10697] syzkaller0: entered promiscuous mode [ 244.668867][T10697] syzkaller0: entered allmulticast mode [ 245.520882][T10753] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 245.520882][T10753] Please contact the netfilter-devel mailing list or update your nftables rules. [ 245.780533][T10766] netlink: 'syz.1.1891': attribute type 1 has an invalid length. [ 245.825237][T10766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.846156][T10768] bond1: (slave geneve2): making interface the new active one [ 245.855634][T10768] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 246.065672][T10778] netlink: 'syz.4.1894': attribute type 21 has an invalid length. [ 246.095251][T10778] netlink: 'syz.4.1894': attribute type 6 has an invalid length. [ 246.122916][T10737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.726598][T10806] __nla_validate_parse: 9 callbacks suppressed [ 246.726618][T10806] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1905'. [ 247.728715][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1911'. [ 248.543336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.551817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.560292][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.568727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.577287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.585818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.594572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.603048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.611610][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.822375][T10844] netlink: 'syz.0.1914': attribute type 1 has an invalid length. [ 248.832829][T10845] netlink: 'syz.0.1914': attribute type 1 has an invalid length. [ 248.887663][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1914'. [ 249.323617][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'. [ 249.416804][T10844] bond1: entered promiscuous mode [ 249.442943][T10844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.706298][T10865] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 249.788313][T10873] IPv6: NLM_F_REPLACE set, but no existing node found! [ 249.811025][T10865] ip6erspan1: entered allmulticast mode [ 249.823955][T10876] FAULT_INJECTION: forcing a failure. [ 249.823955][T10876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.842553][T10876] CPU: 1 UID: 0 PID: 10876 Comm: syz.4.1922 Not tainted syzkaller #0 PREEMPT(full) [ 249.842587][T10876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 249.842618][T10876] Call Trace: [ 249.842627][T10876] [ 249.842636][T10876] dump_stack_lvl+0xe8/0x150 [ 249.842675][T10876] should_fail_ex+0x40c/0x560 [ 249.842703][T10876] _copy_from_user+0x2d/0xb0 [ 249.842735][T10876] ___sys_sendmsg+0x1c6/0x360 [ 249.842767][T10876] ? __lock_acquire+0x683/0x2cf0 [ 249.842801][T10876] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.842871][T10876] ? __fget_files+0x2a/0x420 [ 249.842899][T10876] ? __fget_files+0x3a2/0x420 [ 249.842939][T10876] __x64_sys_sendmsg+0x1b1/0x290 [ 249.842972][T10876] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.843024][T10876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.843048][T10876] do_syscall_64+0x174/0x580 [ 249.843078][T10876] ? trace_irq_disable+0x3b/0x140 [ 249.843104][T10876] ? clear_bhb_loop+0x40/0x90 [ 249.843131][T10876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.843152][T10876] RIP: 0033:0x7fe27979de99 [ 249.843172][T10876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.843189][T10876] RSP: 002b:00007fe27a628028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.843213][T10876] RAX: ffffffffffffffda RBX: 00007fe279a25fa0 RCX: 00007fe27979de99 [ 249.843228][T10876] RDX: 0000000004000044 RSI: 0000200000000440 RDI: 0000000000000003 [ 249.843252][T10876] RBP: 00007fe27a628090 R08: 0000000000000000 R09: 0000000000000000 [ 249.843266][T10876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.843278][T10876] R13: 00007fe279a26038 R14: 00007fe279a25fa0 R15: 00007ffc2b419298 [ 249.843312][T10876] [ 250.225949][T10889] netlink: 'syz.4.1928': attribute type 1 has an invalid length. [ 250.368028][T10894] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1929'. [ 250.492531][T10897] xt_hashlimit: size too large, truncated to 1048576 [ 250.913353][T10905] bond4 (unregistering): Released all slaves [ 251.067582][T10916] netlink: 'syz.3.1936': attribute type 2 has an invalid length. [ 251.079732][T10918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1937'. [ 251.291793][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1941'. [ 251.398555][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1942'. [ 251.515058][T10927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.666586][T10937] macvlan2: entered promiscuous mode [ 251.679676][T10937] macvlan2: entered allmulticast mode [ 251.697306][T10937] bond1: entered promiscuous mode [ 251.747910][T10937] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 251.785944][T10954] netlink: 'syz.0.1947': attribute type 20 has an invalid length. [ 251.815911][T10937] bond1: left promiscuous mode [ 251.851686][T10954] IPv6: NLM_F_CREATE should be specified when creating new route [ 252.289034][T10971] netlink: 'syz.2.1953': attribute type 2 has an invalid length. [ 252.311286][T10971] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1953'. [ 252.323524][T10976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1955'. [ 252.596569][T10983] FAULT_INJECTION: forcing a failure. [ 252.596569][T10983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.621842][T10983] CPU: 1 UID: 0 PID: 10983 Comm: syz.0.1958 Not tainted syzkaller #0 PREEMPT(full) [ 252.621873][T10983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 252.621886][T10983] Call Trace: [ 252.621895][T10983] [ 252.621904][T10983] dump_stack_lvl+0xe8/0x150 [ 252.621942][T10983] should_fail_ex+0x40c/0x560 [ 252.621971][T10983] _copy_from_iter+0x1d3/0x1660 [ 252.621998][T10983] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 252.622026][T10983] ? rcu_is_watching+0x15/0xb0 [ 252.622060][T10983] ? trace_kmem_cache_alloc+0x29/0xe0 [ 252.622088][T10983] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 252.622113][T10983] ? __pfx__copy_from_iter+0x10/0x10 [ 252.622138][T10983] ? __alloc_skb+0x276/0x7a0 [ 252.622174][T10983] ? __alloc_skb+0x276/0x7a0 [ 252.622207][T10983] ? netlink_sendmsg+0x650/0xb40 [ 252.622229][T10983] ? skb_put+0x112/0x210 [ 252.622262][T10983] netlink_sendmsg+0x6c0/0xb40 [ 252.622294][T10983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.622320][T10983] ? aa_sock_msg_perm+0xf1/0x1b0 [ 252.622348][T10983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.622368][T10983] sock_sendmsg_nosec+0x13a/0x180 [ 252.622397][T10983] ____sys_sendmsg+0x54e/0x850 [ 252.622437][T10983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.622479][T10983] ? import_iovec+0x73/0xa0 [ 252.622514][T10983] ___sys_sendmsg+0x2a5/0x360 [ 252.622546][T10983] ? __lock_acquire+0x683/0x2cf0 [ 252.622580][T10983] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.622650][T10983] ? __fget_files+0x2a/0x420 [ 252.622679][T10983] ? __fget_files+0x3a2/0x420 [ 252.622718][T10983] __x64_sys_sendmsg+0x1b1/0x290 [ 252.622753][T10983] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.622801][T10983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.622823][T10983] do_syscall_64+0x174/0x580 [ 252.622854][T10983] ? trace_irq_disable+0x3b/0x140 [ 252.622880][T10983] ? clear_bhb_loop+0x40/0x90 [ 252.622905][T10983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.622926][T10983] RIP: 0033:0x7f2bcd79de99 [ 252.622947][T10983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.622966][T10983] RSP: 002b:00007f2bce65a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.622989][T10983] RAX: ffffffffffffffda RBX: 00007f2bcda25fa0 RCX: 00007f2bcd79de99 [ 252.623004][T10983] RDX: 0000000004000044 RSI: 0000200000000440 RDI: 0000000000000003 [ 252.623018][T10983] RBP: 00007f2bce65a090 R08: 0000000000000000 R09: 0000000000000000 [ 252.623031][T10983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.623044][T10983] R13: 00007f2bcda26038 R14: 00007f2bcda25fa0 R15: 00007fff18b674a8 [ 252.623077][T10983] [ 253.069319][T10995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1963'. [ 253.086085][T10993] syzkaller1: entered promiscuous mode [ 253.117203][T10993] syzkaller1: entered allmulticast mode [ 253.386887][T11010] xt_bpf: check failed: parse error [ 253.624276][T11013] FAULT_INJECTION: forcing a failure. [ 253.624276][T11013] name failslab, interval 1, probability 0, space 0, times 0 [ 253.658912][T11013] CPU: 0 UID: 0 PID: 11013 Comm: syz.2.1966 Not tainted syzkaller #0 PREEMPT(full) [ 253.658943][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 253.658956][T11013] Call Trace: [ 253.658965][T11013] [ 253.658974][T11013] dump_stack_lvl+0xe8/0x150 [ 253.659013][T11013] should_fail_ex+0x40c/0x560 [ 253.659045][T11013] should_failslab+0xa8/0x100 [ 253.659080][T11013] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 253.659106][T11013] ? local_lock_release+0x9c/0x160 [ 253.659137][T11013] ? __alloc_skb+0x1d7/0x7a0 [ 253.659164][T11013] ? __alloc_skb+0x1d7/0x7a0 [ 253.659200][T11013] __alloc_skb+0x1d7/0x7a0 [ 253.659235][T11013] _sctp_make_chunk+0x59/0x290 [ 253.659270][T11013] sctp_make_datafrag_empty+0x12a/0x240 [ 253.659299][T11013] ? __kasan_kmalloc+0x93/0xb0 [ 253.659330][T11013] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 253.659360][T11013] ? sctp_datamsg_from_user+0x88/0xef0 [ 253.659390][T11013] ? sctp_datamsg_from_user+0x88/0xef0 [ 253.659415][T11013] ? sctp_auth_send_cid+0x69/0x250 [ 253.659447][T11013] sctp_datamsg_from_user+0x735/0xef0 [ 253.659495][T11013] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 253.659536][T11013] ? __lock_acquire+0x683/0x2cf0 [ 253.659574][T11013] ? sctp_transport_put+0xd2/0x150 [ 253.659603][T11013] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 253.659640][T11013] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 253.659672][T11013] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 253.659728][T11013] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 253.659760][T11013] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 253.659794][T11013] sctp_sendmsg+0x1bb5/0x2d00 [ 253.659842][T11013] ? __pfx_sctp_sendmsg+0x10/0x10 [ 253.659882][T11013] ? aa_sk_perm+0x6d5/0x900 [ 253.659921][T11013] ? __might_fault+0xaf/0x130 [ 253.659949][T11013] ? sock_rps_record_flow+0x19/0x350 [ 253.659982][T11013] ? inet_sendmsg+0x298/0x320 [ 253.660013][T11013] ? __pfx_inet_sendmsg+0x10/0x10 [ 253.660041][T11013] sock_sendmsg_nosec+0x10e/0x180 [ 253.660070][T11013] __sys_sendto+0x408/0x5a0 [ 253.660100][T11013] ? ksys_write+0x1e6/0x270 [ 253.660137][T11013] ? __pfx___sys_sendto+0x10/0x10 [ 253.660164][T11013] ? __mutex_unlock_slowpath+0x731/0x900 [ 253.660229][T11013] ? __pfx_ksys_write+0x10/0x10 [ 253.660268][T11013] __x64_sys_sendto+0xde/0x100 [ 253.660299][T11013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.660323][T11013] do_syscall_64+0x174/0x580 [ 253.660354][T11013] ? trace_irq_disable+0x3b/0x140 [ 253.660382][T11013] ? clear_bhb_loop+0x40/0x90 [ 253.660409][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.660431][T11013] RIP: 0033:0x7fb29479de99 [ 253.660452][T11013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.660471][T11013] RSP: 002b:00007fb2929d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 253.660495][T11013] RAX: ffffffffffffffda RBX: 00007fb294a26090 RCX: 00007fb29479de99 [ 253.660511][T11013] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003 [ 253.660525][T11013] RBP: 00007fb2929d5090 R08: 0000200000000380 R09: 0000000000000010 [ 253.660540][T11013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.660553][T11013] R13: 00007fb294a26128 R14: 00007fb294a26090 R15: 00007fffc12c4678 [ 253.660588][T11013] [ 254.371415][T11017] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1968'. [ 254.892293][T11034] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1975'. [ 254.913806][T11031] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1973'. [ 255.046497][T11041] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1973'. [ 255.157500][T11046] gretap1: entered promiscuous mode [ 255.169883][T11046] batman_adv: batadv0: Adding interface: gretap1 [ 255.183948][T11046] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.213287][T11046] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 255.226611][T11049] netlink: 'syz.3.1979': attribute type 1 has an invalid length. [ 255.276491][T11049] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.306840][T11052] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 255.480088][T11055] FAULT_INJECTION: forcing a failure. [ 255.480088][T11055] name failslab, interval 1, probability 0, space 0, times 0 [ 255.493290][T11055] CPU: 1 UID: 0 PID: 11055 Comm: syz.3.1980 Not tainted syzkaller #0 PREEMPT(full) [ 255.493319][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 255.493333][T11055] Call Trace: [ 255.493341][T11055] [ 255.493351][T11055] dump_stack_lvl+0xe8/0x150 [ 255.493389][T11055] should_fail_ex+0x40c/0x560 [ 255.493420][T11055] should_failslab+0xa8/0x100 [ 255.493455][T11055] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 255.493479][T11055] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 255.493508][T11055] ? _sctp_make_chunk+0x59/0x290 [ 255.493538][T11055] ? sctp_chunkify+0x5a/0x260 [ 255.493571][T11055] ? sctp_chunkify+0x5a/0x260 [ 255.493607][T11055] sctp_chunkify+0x5a/0x260 [ 255.493641][T11055] _sctp_make_chunk+0x122/0x290 [ 255.493683][T11055] sctp_make_datafrag_empty+0x12a/0x240 [ 255.493712][T11055] ? __kasan_kmalloc+0x93/0xb0 [ 255.493743][T11055] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 255.493774][T11055] ? sctp_datamsg_from_user+0x88/0xef0 [ 255.493799][T11055] ? sctp_datamsg_from_user+0x88/0xef0 [ 255.493827][T11055] ? sctp_auth_send_cid+0x69/0x250 [ 255.493859][T11055] sctp_datamsg_from_user+0x735/0xef0 [ 255.493909][T11055] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 255.493950][T11055] ? __lock_acquire+0x683/0x2cf0 [ 255.493989][T11055] ? sctp_transport_put+0xd2/0x150 [ 255.494018][T11055] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 255.494057][T11055] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 255.494091][T11055] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 255.494128][T11055] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 255.494160][T11055] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 255.494197][T11055] sctp_sendmsg+0x1bb5/0x2d00 [ 255.494246][T11055] ? __pfx_sctp_sendmsg+0x10/0x10 [ 255.494287][T11055] ? aa_sk_perm+0x6d5/0x900 [ 255.494327][T11055] ? __might_fault+0xaf/0x130 [ 255.494355][T11055] ? sock_rps_record_flow+0x19/0x350 [ 255.494388][T11055] ? inet_sendmsg+0x298/0x320 [ 255.494419][T11055] ? __pfx_inet_sendmsg+0x10/0x10 [ 255.494446][T11055] sock_sendmsg_nosec+0x10e/0x180 [ 255.494475][T11055] __sys_sendto+0x408/0x5a0 [ 255.494504][T11055] ? ksys_write+0x1e6/0x270 [ 255.494541][T11055] ? __pfx___sys_sendto+0x10/0x10 [ 255.494568][T11055] ? __mutex_unlock_slowpath+0x731/0x900 [ 255.494632][T11055] ? __pfx_ksys_write+0x10/0x10 [ 255.494678][T11055] __x64_sys_sendto+0xde/0x100 [ 255.494709][T11055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.494734][T11055] do_syscall_64+0x174/0x580 [ 255.494765][T11055] ? trace_irq_disable+0x3b/0x140 [ 255.494792][T11055] ? clear_bhb_loop+0x40/0x90 [ 255.494819][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.494842][T11055] RIP: 0033:0x7f9af499de99 [ 255.494862][T11055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.494881][T11055] RSP: 002b:00007f9af5912028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 255.494905][T11055] RAX: ffffffffffffffda RBX: 00007f9af4c26090 RCX: 00007f9af499de99 [ 255.494921][T11055] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003 [ 255.494935][T11055] RBP: 00007f9af5912090 R08: 0000200000000380 R09: 0000000000000010 [ 255.494950][T11055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.494963][T11055] R13: 00007f9af4c26128 R14: 00007f9af4c26090 R15: 00007fff91a0c018 [ 255.494998][T11055] [ 255.846996][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.853476][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.862166][T11031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.076563][T11060] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1982'. [ 256.093829][T11060] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1982'. [ 256.103685][T11060] netlink: 'syz.2.1982': attribute type 5 has an invalid length. [ 256.114670][T11060] netlink: 'syz.2.1982': attribute type 6 has an invalid length. [ 256.123007][T11060] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1982'. [ 256.392568][T11071] IPVS: set_ctl: invalid protocol: 115 172.20.20.45:20000 [ 256.912073][T11098] net_ratelimit: 2 callbacks suppressed [ 256.912094][T11098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.972779][T11098] sctp: [Deprecated]: syz.1.1994 (pid 11098) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.972779][T11098] Use struct sctp_sack_info instead [ 257.464296][T11120] netlink: 'syz.4.2000': attribute type 1 has an invalid length. [ 257.641478][T11137] syzkaller0: entered promiscuous mode [ 257.647466][T11137] syzkaller0: entered allmulticast mode [ 257.666714][T11140] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 257.771846][T11146] nbd1: detected capacity change from 0 to 63 [ 257.821076][T11126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.855131][ T5639] block nbd1: Receive control failed (result -104) [ 258.068118][T11157] 8021q: VLANs not supported on tunl0 [ 258.079321][T11153] __nla_validate_parse: 5 callbacks suppressed [ 258.079342][T11153] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2009'. [ 258.127427][T11153] vlan2: entered allmulticast mode [ 258.133699][T11153] gretap0: entered allmulticast mode [ 258.144143][T11162] veth1_to_bond: entered allmulticast mode [ 258.203882][T11163] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2012'. [ 258.964655][T11202] netlink: 'syz.4.2019': attribute type 178 has an invalid length. [ 258.990005][T11202] openvswitch: netlink: Geneve option length err (len 4832, max 255). [ 259.012934][T11199] ip_vti0: Master is either lo or non-ether device [ 259.990310][ T13] wlan1: Trigger new scan to find an IBSS to join [ 261.023691][T11205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.039220][T11208] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.2023'. [ 261.049745][T11209] netlink: 'syz.0.2023': attribute type 5 has an invalid length. [ 261.212332][T11216] bond0: invalid NS target ff00:: specified for addition [ 261.241211][T11216] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 261.250386][T11218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2026'. [ 261.262105][T11220] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2028'. [ 261.338220][T11225] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2028'. [ 261.498752][T11231] bond0: invalid NS target ff00:: specified for addition [ 261.507908][T11231] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 261.731809][T11248] syzkaller0: entered promiscuous mode [ 261.757825][T11248] syzkaller0: entered allmulticast mode [ 261.926900][T11259] xt_nfacct: accounting object `syz1' does not exist [ 261.946029][T11259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2040'. [ 262.062143][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2040'. [ 262.940493][ T1030] wlan1: Trigger new scan to find an IBSS to join [ 263.717399][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2066'. [ 263.728096][T11343] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2067'. [ 263.762371][T11343] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2067'. [ 263.778468][T11339] syzkaller0: entered promiscuous mode [ 263.784877][T11341] sctp: [Deprecated]: syz.3.2066 (pid 11341) Use of int in max_burst socket option. [ 263.784877][T11341] Use struct sctp_assoc_value instead [ 263.803669][T11339] syzkaller0: entered allmulticast mode [ 263.912116][T11349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2069'. [ 263.958189][T11340] team0: Port device team_slave_0 removed [ 264.185367][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2070'. [ 264.222352][T11355] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.545321][T11376] vlan2: entered promiscuous mode [ 264.563905][T11376] hsr0: entered promiscuous mode [ 264.584942][T11376] vlan2: entered allmulticast mode [ 264.601347][T11376] hsr0: entered allmulticast mode [ 264.616152][T11376] hsr_slave_0: entered allmulticast mode [ 264.636089][T11376] hsr_slave_1: entered allmulticast mode [ 264.737402][T11384] xt_hashlimit: size too large, truncated to 1048576 [ 265.004227][T11403] Cannot find del_set index 4 as target [ 265.722245][T11431] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.2090'. [ 265.769655][T11431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2090'. [ 265.788235][T11434] netlink: 'syz.0.2091': attribute type 1 has an invalid length. [ 265.821853][T11439] SET target dimension over the limit! [ 265.981223][T10394] wlan1: Trigger new scan to find an IBSS to join [ 266.046498][T11444] bond2: (slave geneve3): making interface the new active one [ 266.062321][T11444] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 266.099932][T10396] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 266.126428][T10396] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 266.272466][T11450] bond2: (slave gre0): Device is not bonding slave [ 266.295898][T11450] bond2: option active_slave: invalid value (gre0) [ 266.342063][T11450] bond2 (unregistering): Released all slaves [ 266.381896][T10396] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 266.413990][T10396] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 266.526962][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2099'. [ 266.633240][T11477] batadv0: entered promiscuous mode [ 266.656759][T11477] macsec1: entered promiscuous mode [ 266.670242][T11477] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 266.687695][T11477] batadv0: left promiscuous mode [ 266.910528][T10396] wlan1: Creating new IBSS network, BSSID fe:55:c4:62:50:e0 [ 266.931227][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2106'. [ 266.984864][T11490] IPv6: NLM_F_CREATE should be specified when creating new route [ 267.044537][T11498] netlink: 'syz.4.2109': attribute type 1 has an invalid length. [ 267.054010][T11498] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2109'. [ 267.573818][T11526] tipc: Enabled bearer , priority 0 [ 267.653652][T11526] tipc: Resetting bearer [ 267.760945][T11526] tipc: Resetting bearer [ 268.333529][T11550] xt_hashlimit: size too large, truncated to 1048576 [ 269.946220][T11526] tipc: Disabling bearer [ 269.958286][T11539] IPVS: Unknown mcast interface: vcan0 [ 269.987052][T11547] geneve3: entered promiscuous mode [ 270.033289][ T10] tipc: Node number set to 608666665 [ 270.041146][T11548] __nla_validate_parse: 2 callbacks suppressed [ 270.041167][T11548] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2122'. [ 270.486671][T11578] syzkaller0: entered promiscuous mode [ 270.516017][T11578] syzkaller0: entered allmulticast mode [ 270.704616][T11586] netlink: 'syz.3.2133': attribute type 1 has an invalid length. [ 270.738929][T11586] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2133'. [ 270.873160][T11592] "syz.0.2136" (11592) uses obsolete ecb(arc4) skcipher [ 272.844012][T11607] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 272.963801][T11610] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2142'. [ 273.066390][T11612] xt_hashlimit: size too large, truncated to 1048576 [ 273.102159][T11613] xt_hashlimit: size too large, truncated to 1048576 [ 273.367137][T11620] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 273.405181][T11620] team0: Port device xfrm0 added [ 286.253077][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 286.274413][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 286.284747][ T4943] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 286.295677][ T4943] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 286.305757][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.315334][ T4943] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 286.325420][ T4943] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.334671][ T4943] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 286.344942][ T4943] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 286.353870][ T5639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 286.375913][ T5639] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 286.396660][ T5639] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 286.406364][ T5639] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 286.415206][ T5639] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 286.431029][ T5639] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 287.337469][ T5639] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 287.353772][ T5639] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 287.364389][ T5639] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 287.374859][ T5639] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 287.383103][ T5639] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 287.561295][T11624] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.568685][T11624] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.576329][T11624] bridge_slave_0: entered allmulticast mode [ 287.584954][T11624] bridge_slave_0: entered promiscuous mode [ 287.605505][T11624] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.613207][T11624] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.620910][T11624] bridge_slave_1: entered allmulticast mode [ 287.628923][T11624] bridge_slave_1: entered promiscuous mode [ 287.726463][T11624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.741329][T11624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.831790][T11624] team0: Port device team_slave_0 added [ 287.842493][ T1637] block nbd1: Possible stuck request ffff888026fce000: control (read@0,1024B). Runtime 30 seconds [ 287.856281][ T1637] block nbd1: Possible stuck request ffff888026fce1c0: control (read@1024,1024B). Runtime 30 seconds [ 287.868390][ T1637] block nbd1: Possible stuck request ffff888026fce380: control (read@2048,1024B). Runtime 30 seconds [ 287.879475][ T1637] block nbd1: Possible stuck request ffff888026fce540: control (read@3072,1024B). Runtime 30 seconds [ 287.895511][T11624] team0: Port device team_slave_1 added [ 288.022385][T11624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.033305][T11624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.062052][T11624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.094630][T11624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.101971][T11624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.129771][T11624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.230154][T11628] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.237462][T11628] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.244977][T11628] bridge_slave_0: entered allmulticast mode [ 288.252914][T11628] bridge_slave_0: entered promiscuous mode [ 288.292007][T11628] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.299259][T11628] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.307669][T11628] bridge_slave_1: entered allmulticast mode [ 288.315333][T11628] bridge_slave_1: entered promiscuous mode [ 288.328910][T11624] hsr_slave_0: entered promiscuous mode [ 288.335914][T11624] hsr_slave_1: entered promiscuous mode [ 288.342775][T11624] debugfs: 'hsr0' already exists in 'hsr' [ 288.348709][T11624] Cannot create hsr debugfs directory [ 288.408679][T11626] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.416211][T11626] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.423897][T11626] bridge_slave_0: entered allmulticast mode [ 288.431543][T11626] bridge_slave_0: entered promiscuous mode [ 288.454099][T11628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.463756][ T5639] Bluetooth: hci7: command tx timeout [ 288.470098][ T5634] Bluetooth: hci5: command tx timeout [ 288.470259][ T4943] Bluetooth: hci6: command tx timeout [ 288.490798][T11628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.512043][T11626] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.519296][T11626] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.527118][T11626] bridge_slave_1: entered allmulticast mode [ 288.534570][T11626] bridge_slave_1: entered promiscuous mode [ 288.626851][T11628] team0: Port device team_slave_0 added [ 288.640676][T11628] team0: Port device team_slave_1 added [ 288.650150][T11626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.687502][T11626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.747160][T11628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.754281][T11628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.780817][T11628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.812378][T11628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.819609][T11628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.847012][T11628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.862160][T11626] team0: Port device team_slave_0 added [ 288.890694][T11626] team0: Port device team_slave_1 added [ 288.995362][T11628] hsr_slave_0: entered promiscuous mode [ 289.002035][T11628] hsr_slave_1: entered promiscuous mode [ 289.008412][T11628] debugfs: 'hsr0' already exists in 'hsr' [ 289.014363][T11628] Cannot create hsr debugfs directory [ 289.021146][T11626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.028149][T11626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.055074][T11626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.105171][T11626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.112611][T11626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.141580][T11626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.327508][ T5639] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 289.341488][ T5639] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 289.351231][ T5639] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 289.360614][ T5639] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 289.371932][ T5639] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 289.420386][ T5639] Bluetooth: hci8: command tx timeout [ 289.473878][T11626] hsr_slave_0: entered promiscuous mode [ 289.481250][T11626] hsr_slave_1: entered promiscuous mode [ 289.488131][T11626] debugfs: 'hsr0' already exists in 'hsr' [ 289.498792][T11626] Cannot create hsr debugfs directory [ 289.774683][T11661] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.783080][T11661] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.790582][T11661] bridge_slave_0: entered allmulticast mode [ 289.798622][T11661] bridge_slave_0: entered promiscuous mode [ 289.835597][T11661] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.843985][T11661] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.852512][T11661] bridge_slave_1: entered allmulticast mode [ 289.861054][T11661] bridge_slave_1: entered promiscuous mode [ 289.964951][T11661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.994922][T11661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.075133][T11661] team0: Port device team_slave_0 added [ 290.107618][T11661] team0: Port device team_slave_1 added [ 290.167301][T11661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.174533][T11661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.200861][T11661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.220478][T11661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.228220][T11661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.254851][T11661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.349973][T11661] hsr_slave_0: entered promiscuous mode [ 290.356578][T11661] hsr_slave_1: entered promiscuous mode [ 290.364624][T11661] debugfs: 'hsr0' already exists in 'hsr' [ 290.370621][T11661] Cannot create hsr debugfs directory [ 290.540699][ T5639] Bluetooth: hci7: command tx timeout [ 290.540720][ T4943] Bluetooth: hci5: command tx timeout [ 290.547187][ T5634] Bluetooth: hci6: command tx timeout [ 290.733969][T11691] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.741491][T11691] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.748894][T11691] bridge_slave_0: entered allmulticast mode [ 290.756881][T11691] bridge_slave_0: entered promiscuous mode [ 290.765665][T11691] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.773679][T11691] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.781551][T11691] bridge_slave_1: entered allmulticast mode [ 290.790333][T11691] bridge_slave_1: entered promiscuous mode [ 290.845993][T11691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.858986][T11691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.906430][T11691] team0: Port device team_slave_0 added [ 290.915106][T11691] team0: Port device team_slave_1 added [ 290.944848][T11691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.951917][T11691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.979117][T11691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.991581][T11691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.998564][T11691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.025862][T11691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.081190][T11691] hsr_slave_0: entered promiscuous mode [ 291.087939][T11691] hsr_slave_1: entered promiscuous mode [ 291.094409][T11691] debugfs: 'hsr0' already exists in 'hsr' [ 291.100321][T11691] Cannot create hsr debugfs directory [ 291.419881][ T5634] Bluetooth: hci9: command tx timeout [ 291.499628][ T5634] Bluetooth: hci8: command tx timeout [ 292.619702][ T5634] Bluetooth: hci6: command tx timeout [ 292.619795][ T5639] Bluetooth: hci7: command tx timeout [ 292.625195][ T4943] Bluetooth: hci5: command tx timeout [ 293.499782][ T5639] Bluetooth: hci9: command tx timeout [ 293.579789][ T5639] Bluetooth: hci8: command tx timeout [ 294.699623][ T5639] Bluetooth: hci7: command tx timeout [ 294.699651][ T5634] Bluetooth: hci6: command tx timeout [ 294.705209][ T5639] Bluetooth: hci5: command tx timeout [ 295.580373][ T5639] Bluetooth: hci9: command tx timeout [ 295.659837][ T5639] Bluetooth: hci8: command tx timeout [ 296.917967][ T706] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 297.660146][ T5639] Bluetooth: hci9: command tx timeout [ 317.262116][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.268780][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.900569][ T1637] block nbd1: Possible stuck request ffff888026fce000: control (read@0,1024B). Runtime 60 seconds [ 317.912197][ T1637] block nbd1: Possible stuck request ffff888026fce1c0: control (read@1024,1024B). Runtime 60 seconds [ 317.923321][ T1637] block nbd1: Possible stuck request ffff888026fce380: control (read@2048,1024B). Runtime 60 seconds [ 317.934421][ T1637] block nbd1: Possible stuck request ffff888026fce540: control (read@3072,1024B). Runtime 60 seconds [ 318.322767][ T4993] udevd[4993]: worker [5745] /devices/virtual/block/nbd1 is taking a long time [ 327.842690][ T1118] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 346.816767][ T4943] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 346.828929][ T4943] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 346.841613][ T4943] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 346.851393][ T5644] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 346.868156][ T5644] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 346.875610][ T4943] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 346.886526][ T5644] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 346.896027][ T4943] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 346.905639][ T5634] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 346.918645][ T5634] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 346.975924][ T5644] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 346.986358][ T5644] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 347.000446][ T5644] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 347.012088][ T5644] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 347.024300][ T5644] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 347.863836][ T5644] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 347.876942][ T5644] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 347.886314][ T5644] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 347.897634][ T5644] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 347.906331][ T5644] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 348.013531][ T1637] block nbd1: Possible stuck request ffff888026fce000: control (read@0,1024B). Runtime 90 seconds [ 348.024890][ T1637] block nbd1: Possible stuck request ffff888026fce1c0: control (read@1024,1024B). Runtime 90 seconds [ 348.036957][ T1637] block nbd1: Possible stuck request ffff888026fce380: control (read@2048,1024B). Runtime 90 seconds [ 348.048072][ T1637] block nbd1: Possible stuck request ffff888026fce540: control (read@3072,1024B). Runtime 90 seconds [ 348.488376][T11721] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.496033][T11721] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.505223][T11721] bridge_slave_0: entered allmulticast mode [ 348.513455][T11721] bridge_slave_0: entered promiscuous mode [ 348.549259][T11721] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.556728][T11721] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.565289][T11721] bridge_slave_1: entered allmulticast mode [ 348.574889][T11721] bridge_slave_1: entered promiscuous mode [ 348.668415][T11721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.688898][T11724] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.696469][T11724] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.704516][T11724] bridge_slave_0: entered allmulticast mode [ 348.712289][T11724] bridge_slave_0: entered promiscuous mode [ 348.733271][T11721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.754518][T11724] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.762067][T11724] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.769716][T11724] bridge_slave_1: entered allmulticast mode [ 348.777452][T11724] bridge_slave_1: entered promiscuous mode [ 348.807393][T11720] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.814758][T11720] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.822232][T11720] bridge_slave_0: entered allmulticast mode [ 348.830199][T11720] bridge_slave_0: entered promiscuous mode [ 348.867284][T11720] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.874703][T11720] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.882540][T11720] bridge_slave_1: entered allmulticast mode [ 348.890285][T11720] bridge_slave_1: entered promiscuous mode [ 348.925922][T11721] team0: Port device team_slave_0 added [ 348.949924][T11724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.966117][T11721] team0: Port device team_slave_1 added [ 348.976897][T11720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.989257][T11724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.018613][T11720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.020730][ T5634] Bluetooth: hci11: command tx timeout [ 349.034601][ T5644] Bluetooth: hci10: command tx timeout [ 349.099886][ T5644] Bluetooth: hci12: command tx timeout [ 349.111060][T11724] team0: Port device team_slave_0 added [ 349.117789][T11721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.125191][T11721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.152310][T11721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.178948][T11724] team0: Port device team_slave_1 added [ 349.197343][T11721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.204492][T11721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.230910][T11721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.252886][T11720] team0: Port device team_slave_0 added [ 349.275705][T11724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.282829][T11724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.309016][T11724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.322407][T11720] team0: Port device team_slave_1 added [ 349.333991][T11724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.341499][T11724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.368089][T11724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.431266][T11720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.438298][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.464998][T11720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.498188][T11720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.505808][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.531865][T11720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.568824][T11721] hsr_slave_0: entered promiscuous mode [ 349.575748][T11721] hsr_slave_1: entered promiscuous mode [ 349.582853][T11721] debugfs: 'hsr0' already exists in 'hsr' [ 349.588642][T11721] Cannot create hsr debugfs directory [ 349.691522][T11724] hsr_slave_0: entered promiscuous mode [ 349.698202][T11724] hsr_slave_1: entered promiscuous mode [ 349.705131][T11724] debugfs: 'hsr0' already exists in 'hsr' [ 349.711072][T11724] Cannot create hsr debugfs directory [ 349.801746][T11720] hsr_slave_0: entered promiscuous mode [ 349.808909][T11720] hsr_slave_1: entered promiscuous mode [ 349.816474][T11720] debugfs: 'hsr0' already exists in 'hsr' [ 349.824590][T11720] Cannot create hsr debugfs directory [ 349.964517][ T5634] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 349.976744][ T5634] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 349.984145][ T5639] Bluetooth: hci13: command tx timeout [ 349.992060][ T5634] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 350.002221][ T5634] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 350.012481][ T5634] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 350.408879][T11753] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.417358][T11753] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.427030][T11753] bridge_slave_0: entered allmulticast mode [ 350.435951][T11753] bridge_slave_0: entered promiscuous mode [ 350.477714][T11753] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.485879][T11753] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.494262][T11753] bridge_slave_1: entered allmulticast mode [ 350.504217][T11753] bridge_slave_1: entered promiscuous mode [ 350.597266][T11753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.618226][T11753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.671779][T11753] team0: Port device team_slave_0 added [ 350.697539][T11753] team0: Port device team_slave_1 added [ 350.750339][T11753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.757366][T11753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.784967][T11753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.808794][T11753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.815957][T11753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.842367][T11753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.938460][T11753] hsr_slave_0: entered promiscuous mode [ 350.946512][T11753] hsr_slave_1: entered promiscuous mode [ 350.953418][T11753] debugfs: 'hsr0' already exists in 'hsr' [ 350.959193][T11753] Cannot create hsr debugfs directory [ 351.099800][ T5644] Bluetooth: hci10: command tx timeout [ 351.099900][ T5634] Bluetooth: hci11: command tx timeout [ 351.194633][ T5634] Bluetooth: hci12: command tx timeout [ 351.387737][T11787] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.396114][T11787] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.403764][T11787] bridge_slave_0: entered allmulticast mode [ 351.411861][T11787] bridge_slave_0: entered promiscuous mode [ 351.421798][T11787] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.429130][T11787] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.436768][T11787] bridge_slave_1: entered allmulticast mode [ 351.444837][T11787] bridge_slave_1: entered promiscuous mode [ 351.486561][T11787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.500228][T11787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.538990][T11787] team0: Port device team_slave_0 added [ 351.549913][T11787] team0: Port device team_slave_1 added [ 351.620229][T11787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.627267][T11787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.654011][T11787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.667220][T11787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.674430][T11787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.700643][T11787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.766801][T11787] hsr_slave_0: entered promiscuous mode [ 351.776419][T11787] hsr_slave_1: entered promiscuous mode [ 351.784581][T11787] debugfs: 'hsr0' already exists in 'hsr' [ 351.790696][T11787] Cannot create hsr debugfs directory [ 352.059673][ T5634] Bluetooth: hci13: command tx timeout [ 352.059970][ T5644] Bluetooth: hci14: command tx timeout [ 353.179707][ T5634] Bluetooth: hci11: command tx timeout [ 353.180203][ T5639] Bluetooth: hci10: command tx timeout [ 353.259988][ T5639] Bluetooth: hci12: command tx timeout [ 354.139644][ T5639] Bluetooth: hci13: command tx timeout [ 354.139656][ T5634] Bluetooth: hci14: command tx timeout [ 355.179607][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 355.259749][ T5639] Bluetooth: hci11: command tx timeout [ 355.260139][ T5644] Bluetooth: hci10: command tx timeout [ 355.339789][ T5644] Bluetooth: hci12: command tx timeout [ 356.219675][ T5644] Bluetooth: hci13: command tx timeout [ 356.219723][ T5639] Bluetooth: hci14: command tx timeout [ 358.299700][ T5639] Bluetooth: hci14: command tx timeout [ 358.767685][ T1030] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 378.061789][ T1637] block nbd1: Possible stuck request ffff888026fce000: control (read@0,1024B). Runtime 120 seconds [ 378.072809][ T1637] block nbd1: Possible stuck request ffff888026fce1c0: control (read@1024,1024B). Runtime 120 seconds [ 378.083947][ T1637] block nbd1: Possible stuck request ffff888026fce380: control (read@2048,1024B). Runtime 120 seconds [ 378.095196][ T1637] block nbd1: Possible stuck request ffff888026fce540: control (read@3072,1024B). Runtime 120 seconds [ 378.703373][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.710480][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.692280][ T1118] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 406.867014][ T5644] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 406.880353][ T5644] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 406.890507][ T5644] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 406.900409][ T5644] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 406.916240][ T5644] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 406.924401][ T4943] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 406.940789][ T5644] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 406.963944][ T5644] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 406.974522][ T5644] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 406.982449][ T5644] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 407.787182][T11815] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.803988][T11815] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.811823][T11815] bridge_slave_0: entered allmulticast mode [ 407.822887][T11815] bridge_slave_0: entered promiscuous mode [ 407.867422][T11815] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.889878][T11815] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.897355][T11815] bridge_slave_1: entered allmulticast mode [ 407.915202][T11815] bridge_slave_1: entered promiscuous mode [ 407.996189][ T5644] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 408.008916][ T5644] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 408.018510][ T5644] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 408.035636][ T5644] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 408.044694][ T5644] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 408.105451][ T5634] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 408.118406][ T5634] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 408.130828][ T5634] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 408.141289][ T5634] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 408.149183][ T5634] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 408.149987][ T1637] block nbd1: Possible stuck request ffff888026fce000: control (read@0,1024B). Runtime 150 seconds [ 408.167476][ T1637] block nbd1: Possible stuck request ffff888026fce1c0: control (read@1024,1024B). Runtime 150 seconds [ 408.181860][ T1637] block nbd1: Possible stuck request ffff888026fce380: control (read@2048,1024B). Runtime 150 seconds [ 408.193757][ T1637] block nbd1: Possible stuck request ffff888026fce540: control (read@3072,1024B). Runtime 150 seconds [ 408.195970][T11815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.277504][T11815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.361484][T11817] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.368842][T11817] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.381107][T11817] bridge_slave_0: entered allmulticast mode [ 408.389215][T11817] bridge_slave_0: entered promiscuous mode [ 408.417615][T11817] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.426227][T11817] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.438915][T11817] bridge_slave_1: entered allmulticast mode [ 408.448060][T11817] bridge_slave_1: entered promiscuous mode [ 408.462969][T11815] team0: Port device team_slave_0 added [ 408.501822][T11815] team0: Port device team_slave_1 added [ 408.584649][T11817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.600208][T11815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.607418][T11815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.634356][T11815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.653372][T11817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.680893][T11815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.688235][T11815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.718061][T11815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.767471][T11817] team0: Port device team_slave_0 added [ 408.821692][T11817] team0: Port device team_slave_1 added [ 408.857560][T11815] hsr_slave_0: entered promiscuous mode [ 408.865089][T11815] hsr_slave_1: entered promiscuous mode [ 408.872169][T11815] debugfs: 'hsr0' already exists in 'hsr' [ 408.878593][T11815] Cannot create hsr debugfs directory [ 408.908887][T11817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.916168][T11817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.943875][T11817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.954672][ T5634] Bluetooth: hci15: command tx timeout [ 408.979228][T11817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.991203][T11817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.021017][ T5634] Bluetooth: hci16: command tx timeout [ 409.034295][T11817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.180420][T11817] hsr_slave_0: entered promiscuous mode [ 409.187500][T11817] hsr_slave_1: entered promiscuous mode [ 409.194112][T11817] debugfs: 'hsr0' already exists in 'hsr' [ 409.199979][T11817] Cannot create hsr debugfs directory [ 410.014331][ T5641] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 410.025004][ T5641] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 410.038738][ T5641] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 410.050676][ T5641] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 410.065836][ T5641] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 410.139937][ T50] Bluetooth: hci17: command tx timeout [ 410.214211][T11854] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.223168][T11854] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.231260][T11854] bridge_slave_0: entered allmulticast mode [ 410.238906][T11854] bridge_slave_0: entered promiscuous mode [ 410.247139][T11850] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.254529][T11850] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.262767][T11850] bridge_slave_0: entered allmulticast mode [ 410.271478][T11850] bridge_slave_0: entered promiscuous mode [ 410.281112][T11854] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.288700][T11854] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.296979][T11854] bridge_slave_1: entered allmulticast mode [ 410.303628][ T50] Bluetooth: hci18: command tx timeout [ 410.315085][T11854] bridge_slave_1: entered promiscuous mode [ 410.344282][T11850] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.353268][T11850] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.364592][T11850] bridge_slave_1: entered allmulticast mode [ 410.373442][T11850] bridge_slave_1: entered promiscuous mode [ 410.455318][T11854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.472195][T11854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.502323][T11850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.519032][T11850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.612609][T11854] team0: Port device team_slave_0 added [ 410.638764][T11854] team0: Port device team_slave_1 added [ 410.678096][T11850] team0: Port device team_slave_0 added [ 410.713710][T11850] team0: Port device team_slave_1 added [ 410.720640][T11854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.727718][T11854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.754021][T11854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.767404][T11854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.775674][T11854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.808796][T11854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.867504][T11850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.875139][T11850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.902218][T11850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.930489][T11850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.937555][T11850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.964421][T11850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.020104][ T50] Bluetooth: hci15: command tx timeout [ 411.052940][T11854] hsr_slave_0: entered promiscuous mode [ 411.060071][T11854] hsr_slave_1: entered promiscuous mode [ 411.066606][T11854] debugfs: 'hsr0' already exists in 'hsr' [ 411.072746][T11854] Cannot create hsr debugfs directory [ 411.099667][ T50] Bluetooth: hci16: command tx timeout [ 411.143392][T11850] hsr_slave_0: entered promiscuous mode [ 411.151234][T11850] hsr_slave_1: entered promiscuous mode [ 411.157721][T11850] debugfs: 'hsr0' already exists in 'hsr' [ 411.163907][T11850] Cannot create hsr debugfs directory [ 411.507593][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 411.515155][ T5641] Bluetooth: hci7: command 0x0406 tx timeout [ 411.521462][T11888] Bluetooth: hci6: command 0x0406 tx timeout [ 411.522756][ T50] Bluetooth: hci8: command 0x0406 tx timeout [ 411.534745][T11888] Bluetooth: hci9: command 0x0406 tx timeout [ 411.822103][T11885] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.829945][T11885] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.837316][T11885] bridge_slave_0: entered allmulticast mode [ 411.845876][T11885] bridge_slave_0: entered promiscuous mode [ 411.854450][T11885] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.862024][T11885] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.869819][T11885] bridge_slave_1: entered allmulticast mode [ 411.878489][T11885] bridge_slave_1: entered promiscuous mode [ 411.932855][T11885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.946461][T11885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.985037][T11885] team0: Port device team_slave_0 added [ 411.994817][T11885] team0: Port device team_slave_1 added [ 412.036094][T11885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.044125][T11885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.077746][T11885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.104978][T11885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.112204][T11885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.139094][T11885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.161674][ T5639] Bluetooth: hci19: command tx timeout [ 412.208963][T11885] hsr_slave_0: entered promiscuous mode [ 412.216035][T11885] hsr_slave_1: entered promiscuous mode [ 412.222936][ T5639] Bluetooth: hci17: command tx timeout [ 412.231810][T11885] debugfs: 'hsr0' already exists in 'hsr' [ 412.237599][T11885] Cannot create hsr debugfs directory [ 412.379488][ T5639] Bluetooth: hci18: command tx timeout [ 413.100137][ T5639] Bluetooth: hci15: command tx timeout [ 413.179591][ T5639] Bluetooth: hci16: command tx timeout [ 414.219687][ T5639] Bluetooth: hci19: command tx timeout [ 414.299775][ T5639] Bluetooth: hci17: command tx timeout [ 414.459626][ T5639] Bluetooth: hci18: command tx timeout [ 415.180005][ T5639] Bluetooth: hci15: command tx timeout [ 415.260035][ T5639] Bluetooth: hci16: command tx timeout [ 416.300389][ T5639] Bluetooth: hci19: command tx timeout [ 416.379658][ T5639] Bluetooth: hci17: command tx timeout [ 416.539760][ T5639] Bluetooth: hci18: command tx timeout [ 418.379683][ T5639] Bluetooth: hci19: command tx timeout [ 420.617120][T10394] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 429.260013][ T30] INFO: task syz.3.2133:11581 blocked for more than 143 seconds. [ 429.268149][ T30] Not tainted syzkaller #0 [ 429.273312][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.282062][ T30] task:syz.3.2133 state:D stack:25040 pid:11581 tgid:11580 ppid:5625 task_flags:0x400140 flags:0x00080002 [ 429.294241][ T30] Call Trace: [ 429.297582][ T30] [ 429.300627][ T30] __schedule+0x17d9/0x56c0 [ 429.305190][ T30] ? __lock_acquire+0x683/0x2cf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 429.310536][ T30] ? __lock_acquire+0x683/0x2cf0 [ 429.316117][ T30] ? __pfx___schedule+0x10/0x10 [ 429.322600][ T30] ? schedule+0x90/0x2b0 [ 429.326962][ T30] schedule+0x164/0x2b0 [ 429.332532][ T30] schedule_preempt_disabled+0x13/0x30 [ 429.338090][ T30] __mutex_lock+0x7bf/0x1550 [ 429.343351][ T30] ? __mutex_lock+0x5d4/0x1550 [ 429.348256][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 429.355803][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 429.361512][ T30] ? __dev_queue_xmit+0x29b/0x3820 [ 429.366722][ T30] ? radix_tree_lookup+0x240/0x290 [ 429.388200][ T30] genl_rcv_msg+0x10b/0x7a0 [ 429.408502][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.430765][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 429.446640][ T30] netlink_rcv_skb+0x226/0x4a0 [ 429.456075][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.461395][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.466798][ T30] ? down_read+0x2be/0x330 [ 429.471358][ T30] genl_rcv+0x28/0x40 [ 429.475387][ T30] netlink_unicast+0x7bb/0x940 [ 429.480811][ T30] netlink_sendmsg+0x813/0xb40 [ 429.485670][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.491035][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 429.496014][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.501501][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 429.506609][ T30] __sys_sendto+0x408/0x5a0 [ 429.511241][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 429.516361][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 429.521971][ T30] __x64_sys_sendto+0xde/0x100 [ 429.527268][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.533927][ T30] do_syscall_64+0x174/0x580 [ 429.538620][ T30] ? trace_irq_disable+0x3b/0x140 [ 429.543792][ T30] ? clear_bhb_loop+0x40/0x90 [ 429.548531][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.554771][ T30] RIP: 0033:0x7f9af495e6ce [ 429.559280][ T30] RSP: 002b:00007f9af5931e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 429.567826][ T30] RAX: ffffffffffffffda RBX: 00007f9af59336c0 RCX: 00007f9af495e6ce [ 429.576147][ T30] RDX: 0000000000000024 RSI: 00007f9af5932000 RDI: 0000000000000009 [ 429.584765][ T30] RBP: 0000000000000000 R08: 00007f9af5931f04 R09: 000000000000000c [ 429.593537][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 429.601970][ T30] R13: 00007f9af5931f58 R14: 00007f9af5932000 R15: 0000000000000000 [ 429.610155][ T30] [ 429.613332][ T30] INFO: task syz.3.2133:11586 blocked for more than 143 seconds. [ 429.621186][ T30] Not tainted syzkaller #0 [ 429.626161][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.637739][ T30] task:syz.3.2133 state:D stack:26312 pid:11586 tgid:11580 ppid:5625 task_flags:0x480140 flags:0x00080002 [ 429.650160][ T30] Call Trace: [ 429.653529][ T30] [ 429.656514][ T30] __schedule+0x17d9/0x56c0 [ 429.661316][ T30] ? __lock_acquire+0x683/0x2cf0 [ 429.666387][ T30] ? __pfx___schedule+0x10/0x10 [ 429.671429][ T30] ? schedule+0x90/0x2b0 [ 429.675738][ T30] schedule+0x164/0x2b0 [ 429.680153][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 429.685786][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 429.692195][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 429.698650][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 429.704863][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 429.711172][ T30] nbd_set_size+0x454/0x680 [ 429.715738][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 429.721020][ T30] ? nla_memcpy+0x5b/0xc0 [ 429.725426][ T30] nbd_genl_reconfigure+0x7e9/0x1e80 [ 429.731316][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 429.737115][ T30] ? rcu_is_watching+0x15/0xb0 [ 429.742259][ T30] ? trace_kmalloc+0x2a/0xf0 [ 429.746935][ T30] ? __kmalloc_noprof+0x396/0x720 [ 429.752115][ T30] ? __nla_parse+0x40/0x60 [ 429.756689][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 429.763300][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 429.769812][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 429.775433][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 429.781767][ T30] ? __lock_acquire+0x683/0x2cf0 [ 429.786767][ T30] genl_rcv_msg+0x614/0x7a0 [ 429.791517][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.796604][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 429.802677][ T30] netlink_rcv_skb+0x226/0x4a0 [ 429.807537][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.812699][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.818054][ T30] ? down_read+0x2be/0x330 [ 429.822755][ T30] genl_rcv+0x28/0x40 [ 429.826819][ T30] netlink_unicast+0x7bb/0x940 [ 429.831894][ T30] netlink_sendmsg+0x813/0xb40 [ 429.837183][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.842677][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 429.847861][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.853271][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 429.858338][ T30] ____sys_sendmsg+0x54e/0x850 [ 429.863215][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.868652][ T30] ? import_iovec+0x73/0xa0 [ 429.873379][ T30] ___sys_sendmsg+0x2a5/0x360 [ 429.878174][ T30] ? __lock_acquire+0x683/0x2cf0 [ 429.883546][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.888842][ T30] ? futex_wait+0x2a2/0x390 [ 429.893524][ T30] ? __fget_files+0x2a/0x420 [ 429.898165][ T30] ? __fget_files+0x3a2/0x420 [ 429.903666][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 429.908736][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.914445][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.920996][ T30] do_syscall_64+0x174/0x580 [ 429.925754][ T30] ? trace_irq_disable+0x3b/0x140 [ 429.930981][ T30] ? clear_bhb_loop+0x40/0x90 [ 429.936301][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.942348][ T30] RIP: 0033:0x7f9af499de99 [ 429.946821][ T30] RSP: 002b:00007f9af5912028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.955396][ T30] RAX: ffffffffffffffda RBX: 00007f9af4c26090 RCX: 00007f9af499de99 [ 429.963469][ T30] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 429.971547][ T30] RBP: 00007f9af4a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 429.979919][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.987982][ T30] R13: 00007f9af4c26128 R14: 00007f9af4c26090 R15: 00007fff91a0c018 [ 429.996132][ T30] [ 429.999227][ T30] INFO: task syz.0.2136:11588 blocked for more than 144 seconds. [ 430.007071][ T30] Not tainted syzkaller #0 [ 430.012186][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.021044][ T30] task:syz.0.2136 state:D stack:25520 pid:11588 tgid:11587 ppid:5629 task_flags:0x400140 flags:0x00080002 [ 430.033107][ T30] Call Trace: [ 430.036469][ T30] [ 430.040122][ T30] __schedule+0x17d9/0x56c0 [ 430.044730][ T30] ? __lock_acquire+0x683/0x2cf0 [ 430.049817][ T30] ? __lock_acquire+0x683/0x2cf0 [ 430.054826][ T30] ? __pfx___schedule+0x10/0x10 [ 430.060023][ T30] ? schedule+0x90/0x2b0 [ 430.064365][ T30] schedule+0x164/0x2b0 [ 430.068555][ T30] schedule_preempt_disabled+0x13/0x30 [ 430.074158][ T30] __mutex_lock+0x7bf/0x1550 [ 430.078810][ T30] ? __mutex_lock+0x5d4/0x1550 [ 430.083886][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 430.088675][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 430.093936][ T30] ? __dev_queue_xmit+0x29b/0x3820 [ 430.099106][ T30] ? radix_tree_lookup+0x240/0x290 [ 430.104455][ T30] genl_rcv_msg+0x10b/0x7a0 [ 430.109069][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.114273][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 430.119938][ T30] netlink_rcv_skb+0x226/0x4a0 [ 430.124801][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.130025][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.135534][ T30] ? down_read+0x2be/0x330 [ 430.140853][ T30] genl_rcv+0x28/0x40 [ 430.144923][ T30] netlink_unicast+0x7bb/0x940 [ 430.149821][ T30] netlink_sendmsg+0x813/0xb40 [ 430.154643][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.160069][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 430.165081][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.170456][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 430.175566][ T30] __sys_sendto+0x408/0x5a0 [ 430.180256][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 430.185379][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 430.190792][ T30] __x64_sys_sendto+0xde/0x100 [ 430.195603][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.201937][ T30] do_syscall_64+0x174/0x580 [ 430.206623][ T30] ? trace_irq_disable+0x3b/0x140 [ 430.211869][ T30] ? clear_bhb_loop+0x40/0x90 [ 430.216616][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.222978][ T30] RIP: 0033:0x7f2bcd75e6ce [ 430.227499][ T30] RSP: 002b:00007f2bce658e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 430.236069][ T30] RAX: ffffffffffffffda RBX: 00007f2bce65a6c0 RCX: 00007f2bcd75e6ce [ 430.244711][ T30] RDX: 0000000000000020 RSI: 00007f2bce659000 RDI: 0000000000000006 [ 430.252886][ T30] RBP: 0000000000000000 R08: 00007f2bce658f04 R09: 000000000000000c [ 430.260976][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 430.268988][ T30] R13: 00007f2bce658f58 R14: 00007f2bce659000 R15: 0000000000000000 [ 430.277132][ T30] [ 430.280260][ T30] INFO: task syz.0.2136:11592 blocked for more than 144 seconds. [ 430.288031][ T30] Not tainted syzkaller #0 [ 430.298472][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.307811][ T30] task:syz.0.2136 state:D stack:27200 pid:11592 tgid:11587 ppid:5629 task_flags:0x400040 flags:0x00080002 [ 430.320056][ T30] Call Trace: [ 430.323406][ T30] [ 430.326360][ T30] __schedule+0x17d9/0x56c0 [ 430.330988][ T30] ? __lock_acquire+0x683/0x2cf0 [ 430.335991][ T30] ? __lock_acquire+0x683/0x2cf0 [ 430.341068][ T30] ? __pfx___schedule+0x10/0x10 [ 430.346500][ T30] ? schedule+0x90/0x2b0 [ 430.350968][ T30] schedule+0x164/0x2b0 [ 430.355206][ T30] schedule_preempt_disabled+0x13/0x30 [ 430.360778][ T30] __mutex_lock+0x7bf/0x1550 [ 430.365432][ T30] ? __mutex_lock+0x5d4/0x1550 [ 430.370332][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 430.375057][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 430.380208][ T30] ? __dev_queue_xmit+0x29b/0x3820 [ 430.385378][ T30] ? radix_tree_lookup+0x240/0x290 [ 430.390631][ T30] genl_rcv_msg+0x10b/0x7a0 [ 430.395191][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.400358][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 430.405782][ T30] netlink_rcv_skb+0x226/0x4a0 [ 430.410652][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.415728][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.421147][ T30] ? down_read+0x2be/0x330 [ 430.425640][ T30] genl_rcv+0x28/0x40 [ 430.429844][ T30] netlink_unicast+0x7bb/0x940 [ 430.434733][ T30] netlink_sendmsg+0x813/0xb40 [ 430.439582][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.444920][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 430.450557][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.455904][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 430.461190][ T30] __sys_sendto+0x408/0x5a0 [ 430.465773][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 430.470939][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 430.476281][ T30] __x64_sys_sendto+0xde/0x100 [ 430.481209][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.487323][ T30] do_syscall_64+0x174/0x580 [ 430.492083][ T30] ? trace_irq_disable+0x3b/0x140 [ 430.497165][ T30] ? clear_bhb_loop+0x40/0x90 [ 430.501960][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.507894][ T30] RIP: 0033:0x7f2bcd75e6ce [ 430.512422][ T30] RSP: 002b:00007f2bce637e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 430.520993][ T30] RAX: ffffffffffffffda RBX: 00007f2bce6396c0 RCX: 00007f2bcd75e6ce [ 430.529012][ T30] RDX: 0000000000000020 RSI: 00007f2bce638000 RDI: 0000000000000005 [ 430.537129][ T30] RBP: 0000000000000000 R08: 00007f2bce637f04 R09: 000000000000000c [ 430.546107][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 430.554898][ T30] R13: 00007f2bce637f58 R14: 00007f2bce638000 R15: 0000000000000000 [ 430.563128][ T30] [ 430.566250][ T30] INFO: task syz.2.2137:11590 blocked for more than 144 seconds. [ 430.574351][ T30] Not tainted syzkaller #0 [ 430.579432][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.588157][ T30] task:syz.2.2137 state:D stack:27200 pid:11590 tgid:11589 ppid:5626 task_flags:0x400040 flags:0x00080002 [ 430.600278][ T30] Call Trace: [ 430.603617][ T30] [ 430.606608][ T30] __schedule+0x17d9/0x56c0 [ 430.611277][ T30] ? __lock_acquire+0x683/0x2cf0 [ 430.616291][ T30] ? __lock_acquire+0x683/0x2cf0 [ 430.621507][ T30] ? __pfx___schedule+0x10/0x10 [ 430.626471][ T30] ? schedule+0x90/0x2b0 [ 430.630835][ T30] schedule+0x164/0x2b0 [ 430.635081][ T30] schedule_preempt_disabled+0x13/0x30 [ 430.640664][ T30] __mutex_lock+0x7bf/0x1550 [ 430.645324][ T30] ? __mutex_lock+0x5d4/0x1550 [ 430.650321][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 430.655634][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 430.660997][ T30] ? __dev_queue_xmit+0x29b/0x3820 [ 430.666162][ T30] ? radix_tree_lookup+0x240/0x290 [ 430.671443][ T30] genl_rcv_msg+0x10b/0x7a0 [ 430.676009][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.681316][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 430.686779][ T30] netlink_rcv_skb+0x226/0x4a0 [ 430.691863][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.696934][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.703109][ T30] ? down_read+0x2be/0x330 [ 430.707631][ T30] genl_rcv+0x28/0x40 [ 430.711733][ T30] netlink_unicast+0x7bb/0x940 [ 430.716553][ T30] netlink_sendmsg+0x813/0xb40 [ 430.721461][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.727322][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 430.732402][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.737740][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 430.742882][ T30] ____sys_sendmsg+0x54e/0x850 [ 430.747709][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.753129][ T30] ? import_iovec+0x73/0xa0 [ 430.758360][ T30] ___sys_sendmsg+0x2a5/0x360 [ 430.763265][ T30] ? __lock_acquire+0x683/0x2cf0 [ 430.768274][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.773596][ T30] ? futex_wait+0x2a2/0x390 [ 430.778178][ T30] ? __fget_files+0x2a/0x420 [ 430.783408][ T30] ? __fget_files+0x3a2/0x420 [ 430.788197][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 430.793383][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.798939][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.805167][ T30] do_syscall_64+0x174/0x580 [ 430.809893][ T30] ? trace_irq_disable+0x3b/0x140 [ 430.814947][ T30] ? clear_bhb_loop+0x40/0x90 [ 430.819791][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.825723][ T30] RIP: 0033:0x7fb29479de99 [ 430.830248][ T30] RSP: 002b:00007fb2929f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.838708][ T30] RAX: ffffffffffffffda RBX: 00007fb294a25fa0 RCX: 00007fb29479de99 [ 430.846800][ T30] RDX: 0000000000000084 RSI: 0000200000000080 RDI: 0000000000000003 [ 430.854877][ T30] RBP: 00007fb294833eaf R08: 0000000000000000 R09: 0000000000000000 [ 430.864726][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.872998][ T30] R13: 00007fb294a26038 R14: 00007fb294a25fa0 R15: 00007fffc12c4678 [ 430.881307][ T30] [ 430.884418][ T30] INFO: task syz.4.2139:11602 blocked for more than 144 seconds. [ 430.892288][ T30] Not tainted syzkaller #0 [ 430.897254][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.906111][ T30] task:syz.4.2139 state:D stack:27872 pid:11602 tgid:11601 ppid:5628 task_flags:0x400040 flags:0x00080002 [ 430.918249][ T30] Call Trace: [ 430.921676][ T30] [ 430.924660][ T30] __schedule+0x17d9/0x56c0 [ 430.929212][ T30] ? __lock_acquire+0x683/0x2cf0 [ 430.934292][ T30] ? __lock_acquire+0x683/0x2cf0 [ 430.939294][ T30] ? __pfx___schedule+0x10/0x10 [ 430.944306][ T30] ? schedule+0x90/0x2b0 [ 430.948570][ T30] schedule+0x164/0x2b0 [ 430.952822][ T30] schedule_preempt_disabled+0x13/0x30 [ 430.958336][ T30] __mutex_lock+0x7bf/0x1550 [ 430.963614][ T30] ? __mutex_lock+0x5d4/0x1550 [ 430.968473][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 430.973260][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 430.978341][ T30] ? __dev_queue_xmit+0x29b/0x3820 [ 430.983784][ T30] ? radix_tree_lookup+0x240/0x290 [ 430.988985][ T30] genl_rcv_msg+0x10b/0x7a0 [ 430.993634][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.998809][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 431.004347][ T30] netlink_rcv_skb+0x226/0x4a0 [ 431.009219][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.014513][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.020638][ T30] ? down_read+0x2be/0x330 [ 431.025115][ T30] genl_rcv+0x28/0x40 [ 431.029115][ T30] netlink_unicast+0x7bb/0x940 [ 431.034013][ T30] netlink_sendmsg+0x813/0xb40 [ 431.038840][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.044250][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 431.049228][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.054636][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 431.059771][ T30] __sys_sendto+0x408/0x5a0 [ 431.064799][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 431.070043][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 431.075398][ T30] __x64_sys_sendto+0xde/0x100 [ 431.080288][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.086422][ T30] do_syscall_64+0x174/0x580 [ 431.091268][ T30] ? trace_irq_disable+0x3b/0x140 [ 431.096406][ T30] ? clear_bhb_loop+0x40/0x90 [ 431.101270][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.107234][ T30] RIP: 0033:0x7fe27975e6ce [ 431.111799][ T30] RSP: 002b:00007fe27a626e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 431.120789][ T30] RAX: ffffffffffffffda RBX: 00007fe27a6286c0 RCX: 00007fe27975e6ce [ 431.128871][ T30] RDX: 0000000000000020 RSI: 00007fe27a627000 RDI: 0000000000000005 [ 431.137018][ T30] RBP: 0000000000000000 R08: 00007fe27a626f04 R09: 000000000000000c [ 431.145177][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 431.153286][ T30] R13: 00007fe27a626f58 R14: 00007fe27a627000 R15: 0000000000000000 [ 431.161385][ T30] [ 431.165139][ T30] INFO: task syz.1.2144:11619 blocked for more than 145 seconds. [ 431.173007][ T30] Not tainted syzkaller #0 [ 431.177980][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.186967][ T30] task:syz.1.2144 state:D stack:27872 pid:11619 tgid:11618 ppid:5627 task_flags:0x400140 flags:0x00080002 [ 431.199104][ T30] Call Trace: [ 431.202769][ T30] [ 431.205781][ T30] __schedule+0x17d9/0x56c0 [ 431.210648][ T30] ? __lock_acquire+0x683/0x2cf0 [ 431.215662][ T30] ? __lock_acquire+0x683/0x2cf0 [ 431.220786][ T30] ? __pfx___schedule+0x10/0x10 [ 431.225725][ T30] ? schedule+0x90/0x2b0 [ 431.230204][ T30] schedule+0x164/0x2b0 [ 431.234434][ T30] schedule_preempt_disabled+0x13/0x30 [ 431.240008][ T30] __mutex_lock+0x7bf/0x1550 [ 431.244683][ T30] ? __mutex_lock+0x5d4/0x1550 [ 431.249559][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 431.254303][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 431.259652][ T30] ? __dev_queue_xmit+0x29b/0x3820 [ 431.264857][ T30] ? radix_tree_lookup+0x240/0x290 [ 431.270632][ T30] genl_rcv_msg+0x10b/0x7a0 [ 431.275203][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.280328][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 431.285752][ T30] netlink_rcv_skb+0x226/0x4a0 [ 431.290651][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.295723][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.301149][ T30] ? down_read+0x2be/0x330 [ 431.305614][ T30] genl_rcv+0x28/0x40 [ 431.309833][ T30] netlink_unicast+0x7bb/0x940 [ 431.314681][ T30] netlink_sendmsg+0x813/0xb40 [ 431.319555][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.324900][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 431.329953][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.335281][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 431.340679][ T30] __sys_sendto+0x408/0x5a0 [ 431.345297][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 431.350486][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 431.355840][ T30] __x64_sys_sendto+0xde/0x100 [ 431.360750][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.366866][ T30] do_syscall_64+0x174/0x580 [ 431.372209][ T30] ? trace_irq_disable+0x3b/0x140 [ 431.377320][ T30] ? clear_bhb_loop+0x40/0x90 [ 431.382104][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.388055][ T30] RIP: 0033:0x7fd51b35e6ce [ 431.392598][ T30] RSP: 002b:00007fd51c223e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 431.401215][ T30] RAX: ffffffffffffffda RBX: 00007fd51c2256c0 RCX: 00007fd51b35e6ce [ 431.409224][ T30] RDX: 0000000000000020 RSI: 00007fd51c224000 RDI: 0000000000000005 [ 431.417309][ T30] RBP: 0000000000000000 R08: 00007fd51c223f04 R09: 000000000000000c [ 431.425491][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 431.433645][ T30] R13: 00007fd51c223f58 R14: 00007fd51c224000 R15: 0000000000000000 [ 431.441715][ T30] [ 431.444840][ T30] [ 431.444840][ T30] Showing all locks held in the system: [ 431.452761][ T30] 1 lock held by khungtaskd/30: [ 431.457686][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 431.467741][ T30] 2 locks held by getty/5385: [ 431.473033][ T30] #0: ffff8880326560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 431.482968][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 431.493186][ T30] 1 lock held by udevd/5745: [ 431.497818][ T30] #0: ffff888022fd4350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 431.507225][ T30] 2 locks held by syz.3.2133/11581: [ 431.512516][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.520850][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.530268][ T30] 6 locks held by syz.3.2133/11586: [ 431.535534][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.543884][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.553380][ T30] #2: ffff888022bb1260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 431.563992][ T30] #3: ffff888022babe78 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 431.574112][ T30] #4: ffff888022bab840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 431.586453][ T30] #5: ffff888022bab878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 431.598905][ T30] 2 locks held by syz.0.2136/11588: [ 431.604207][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.612500][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.621635][ T30] 2 locks held by syz.0.2136/11592: [ 431.626871][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.635203][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.644420][ T30] 2 locks held by syz.2.2137/11590: [ 431.649718][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.657988][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.667110][ T30] 2 locks held by syz.4.2139/11602: [ 431.672486][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.681877][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.691185][ T30] 2 locks held by syz.1.2144/11619: [ 431.696444][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.704841][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.713944][ T30] 2 locks held by syz-executor/11624: [ 431.719477][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.727752][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.736845][ T30] 2 locks held by syz-executor/11626: [ 431.742468][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.750901][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.760061][ T30] 2 locks held by syz-executor/11628: [ 431.765539][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.773897][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.783478][ T30] 2 locks held by syz-executor/11661: [ 431.788931][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.797427][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.806888][ T30] 2 locks held by syz-executor/11691: [ 431.813088][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.822269][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.832712][ T30] 2 locks held by syz-executor/11720: [ 431.838160][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.846881][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.856123][ T30] 2 locks held by syz-executor/11721: [ 431.861751][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.870199][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.879373][ T30] 2 locks held by syz-executor/11724: [ 431.885554][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.894040][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.903365][ T30] 2 locks held by syz-executor/11753: [ 431.908814][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.917385][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.926646][ T30] 2 locks held by syz-executor/11787: [ 431.932176][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.940533][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.949725][ T30] 2 locks held by syz-executor/11815: [ 431.955163][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.963469][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.972735][ T30] 2 locks held by syz-executor/11817: [ 431.978280][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.987320][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.996506][ T30] 2 locks held by syz-executor/11850: [ 432.002124][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 432.010456][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 432.019584][ T30] 2 locks held by syz-executor/11854: [ 432.025000][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 432.033324][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 432.042450][ T30] 2 locks held by syz-executor/11885: [ 432.047850][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 432.056597][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 432.065744][ T30] [ 432.068098][ T30] ============================================= [ 432.068098][ T30] [ 432.076808][ T30] NMI backtrace for cpu 0 [ 432.076832][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 432.076855][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 432.076868][ T30] Call Trace: [ 432.076875][ T30] [ 432.076884][ T30] dump_stack_lvl+0xe8/0x150 [ 432.076921][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 432.076949][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 432.076983][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 432.077015][ T30] sys_info+0x135/0x170 [ 432.077038][ T30] watchdog+0xfd7/0x1030 [ 432.077071][ T30] ? watchdog+0x1c7/0x1030 [ 432.077105][ T30] kthread+0x388/0x470 [ 432.077136][ T30] ? __pfx_watchdog+0x10/0x10 [ 432.077160][ T30] ? __pfx_kthread+0x10/0x10 [ 432.077192][ T30] ret_from_fork+0x514/0xb70 [ 432.077225][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 432.077256][ T30] ? __switch_to+0xc89/0x1420 [ 432.077286][ T30] ? __pfx_kthread+0x10/0x10 [ 432.077317][ T30] ret_from_fork_asm+0x1a/0x30 [ 432.077355][ T30] [ 432.077363][ T30] Sending NMI from CPU 0 to CPUs 1: [ 432.189110][ C1] NMI backtrace for cpu 1 [ 432.189131][ C1] CPU: 1 UID: 0 PID: 10394 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 432.189152][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 432.189165][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 432.189205][ C1] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 432.189236][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 10 42 c1 11 db 03 24 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df [ 432.189253][ C1] RSP: 0018:ffffc90005c87438 EFLAGS: 00000283 [ 432.189268][ C1] RAX: 0000000000000001 RBX: ffffc90005c87578 RCX: 0000000080000001 [ 432.189281][ C1] RDX: ffffc90005c87501 RSI: ffffffff8176f27f RDI: ffffffff8eb59c60 [ 432.189295][ C1] RBP: 1ffffffff21dfe01 R08: ffffc90005c87e18 R09: 0000000000000000 [ 432.189315][ C1] R10: ffffc90005c875b8 R11: fffff52000b90eb9 R12: ffffc90005c80000 [ 432.189330][ C1] R13: ffffffff8176f27f R14: ffffffff8eb59c60 R15: ffffc90005c87e28 [ 432.189346][ C1] FS: 0000000000000000(0000) GS:ffff888125057000(0000) knlGS:0000000000000000 [ 432.189365][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.189380][ C1] CR2: 0000560467848ee8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 432.189399][ C1] Call Trace: [ 432.189407][ C1] [ 432.189417][ C1] lock_release+0x4b/0x3c0 [ 432.189448][ C1] ? deref_stack_reg+0x18e/0x220 [ 432.189472][ C1] ? unwind_next_frame+0x8f/0x2550 [ 432.189495][ C1] unwind_next_frame+0x1baa/0x2550 [ 432.189520][ C1] ? worker_thread+0xa47/0xfb0 [ 432.189545][ C1] ? unwind_next_frame+0x8f/0x2550 [ 432.189568][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 432.189594][ C1] arch_stack_walk+0x11b/0x150 [ 432.189616][ C1] ? kthread+0x388/0x470 [ 432.189643][ C1] stack_trace_save+0xa9/0x100 [ 432.189666][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 432.189692][ C1] ? __lock_acquire+0x683/0x2cf0 [ 432.189719][ C1] kasan_save_track+0x3e/0x80 [ 432.189743][ C1] ? kasan_save_track+0x3e/0x80 [ 432.189765][ C1] ? kasan_save_free_info+0x40/0x50 [ 432.189783][ C1] ? __kasan_slab_free+0x5c/0x80 [ 432.189806][ C1] ? kfree+0x1c5/0x640 [ 432.189824][ C1] ? skb_release_data+0x85e/0xab0 [ 432.189851][ C1] ? __kfree_skb+0x5d/0x210 [ 432.189876][ C1] ? ieee80211_iface_work+0x259/0x1010 [ 432.189896][ C1] ? cfg80211_wiphy_work+0x29e/0x420 [ 432.189920][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 432.189939][ C1] ? worker_thread+0xa47/0xfb0 [ 432.189989][ C1] kasan_save_free_info+0x40/0x50 [ 432.190008][ C1] __kasan_slab_free+0x5c/0x80 [ 432.190032][ C1] kfree+0x1c5/0x640 [ 432.190051][ C1] ? skb_release_data+0x85e/0xab0 [ 432.190081][ C1] skb_release_data+0x85e/0xab0 [ 432.190115][ C1] __kfree_skb+0x5d/0x210 [ 432.190141][ C1] ieee80211_iface_work+0x259/0x1010 [ 432.190168][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 432.190204][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 432.190224][ C1] process_scheduled_works+0xa8e/0x14e0 [ 432.190260][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.190285][ C1] ? assign_work+0x3cf/0x5d0 [ 432.190308][ C1] worker_thread+0xa47/0xfb0 [ 432.190344][ C1] kthread+0x388/0x470 [ 432.190369][ C1] ? __pfx_worker_thread+0x10/0x10 [ 432.190388][ C1] ? __pfx_kthread+0x10/0x10 [ 432.190414][ C1] ret_from_fork+0x514/0xb70 [ 432.190442][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 432.190467][ C1] ? __switch_to+0xc89/0x1420 [ 432.190491][ C1] ? __pfx_kthread+0x10/0x10 [ 432.190516][ C1] ret_from_fork_asm+0x1a/0x30 [ 432.190543][ C1] [ 432.191339][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 432.191391][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 432.191465][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 432.191499][ T30] Call Trace: [ 432.191522][ T30] [ 432.191553][ T30] vpanic+0x56c/0xa60 [ 432.191652][ T30] ? __pfx___schedule+0x10/0x10 [ 432.191747][ T30] ? __pfx_vpanic+0x10/0x10 [ 432.191871][ T30] panic+0xc5/0xd0 [ 432.191956][ T30] ? __pfx_panic+0x10/0x10 [ 432.192033][ T30] ? preempt_schedule_common+0x82/0xd0 [ 432.192138][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 432.192249][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 432.192335][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 432.192421][ T30] watchdog+0x1030/0x1030 [ 432.192517][ T30] ? watchdog+0x1c7/0x1030 [ 432.192606][ T30] kthread+0x388/0x470 [ 432.192701][ T30] ? __pfx_watchdog+0x10/0x10 [ 432.192766][ T30] ? __pfx_kthread+0x10/0x10 [ 432.192851][ T30] ret_from_fork+0x514/0xb70 [ 432.192940][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 432.193025][ T30] ? __switch_to+0xc89/0x1420 [ 432.193099][ T30] ? __pfx_kthread+0x10/0x10 [ 432.193179][ T30] ret_from_fork_asm+0x1a/0x30 [ 432.193276][ T30] [ 432.667889][ T30] Kernel Offset: disabled [ 432.672284][ T30] Rebooting in 86400 seconds..