last executing test programs: 19.256936079s ago: executing program 3 (id=6042): r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030500000000000700000000ffff", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 19.078937131s ago: executing program 3 (id=6045): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x40) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x40094, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, 0x1c) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000280)=""/77, &(0x7f0000000300)=0x4d) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r5, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) close(r1) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x17e, r5, 0x200, 0x4070bd2d, 0x35dfdbfc, {}, [@pci]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x4044804) 18.968849499s ago: executing program 3 (id=6046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008, 0x7}, {0x100000001, 0x8, 0xcc}, {0xf6}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x804) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x7}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xd, 0x0, 0x0, @ipv6=@empty}]}]}, @typed={0x4, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f0000000140)={r11, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000400)={r11, 0xde, "890bc4a455a8bc7e19373e8b39a93eb3db54929bce5af92087ec325c5ba12b6056abbf9e6c3676b85e21a4ad2e3490df66d479629d3652573625b7d9bbf1a272fc3d7b644f81b49d9e2ffc1fca8a724add76b801fda39a6294661c04fef533c59e7b2648c321c91a7d86c6c09da9e11b862cbd373ba776d74fd23431f18290d40bb32cae61e713e0d6eda60008195c7acc46013ab6a4b5213d143182b8f3207121d1628cbc707828e8c7f8f31030557b02c699c6a2829a2a37da14a0561c3b8d08dd7075ba3f7f5f006d5f1c9140a80c2bb700c639ed2ce3da05ef412713"}, &(0x7f0000000500)=0xe6) 18.849385689s ago: executing program 3 (id=6051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c0002"], 0xc0}, 0x1, 0xfff0}, 0x0) 18.610162786s ago: executing program 3 (id=6054): r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030500000000000700000000ffff", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 18.447614155s ago: executing program 3 (id=6057): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000040)={'macsec0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{0x0, 0x2}, [@TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0xfffffffffffffe83, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0xde9, 0x42}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf8}}, 0x0) 17.624267265s ago: executing program 0 (id=6070): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x0, 0x2b, 0x0, "37ddfa1f1047a0a2be08f9683d9cfc56da791df0d11b215ea51282432449decea58c0afa4c3ec4bcd97121f3cfd07cfd0b2b742475102f6aae7d06a87b36734a8de7a7eb274221db71e0066e94e7de16"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000780)}}], 0x1, 0x24040014) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 17.493832728s ago: executing program 1 (id=6072): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x57}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "7931a3f2c4eb79226bdf2685936663db"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b23f5f67d544"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x23}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x50) (async) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x57}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "7931a3f2c4eb79226bdf2685936663db"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b23f5f67d544"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x23}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x32}}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x10040) syz_genetlink_get_family_id$team(&(0x7f0000000340), r2) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000380), &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x88, r0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x18, 0x48}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0x88}}, 0x20000080) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000840)={r2, &(0x7f0000000740)='-)%/$\xaf\x00', 0x10100, &(0x7f0000000780)={@_ha_fsid={[0x7, 0x7]}, {0x2, 0x6, 0xbc3, 0x4}}, 0x6, &(0x7f00000007c0), &(0x7f0000000800)=0x6}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000840)={r2, &(0x7f0000000740)='-)%/$\xaf\x00', 0x10100, &(0x7f0000000780)={@_ha_fsid={[0x7, 0x7]}, {0x2, 0x6, 0xbc3, 0x4}}, 0x6, &(0x7f00000007c0), &(0x7f0000000800)=0x6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a40)={r6, 0x0, 0xb6, 0x1000, &(0x7f0000000880)="5674f31361b7148853305d6fdf783ed6472b1a5161016661856c48ac4c90c225e218a865ef34156aef20794b129de4a59f4c0644d6b31a99db74bcec812c30f9af731874fb62b8a3020455249a87eac112cf097d9347547340e5716704c25b1b709064641db50ec7c9b01ca1b9a61bb29b334d54ffe9afc778d09e777b76e07e59614b04b90b434ad50a2ff12c8ac2aa5b2fdf4ea621aa5f10abd6b5aa47c2c677bb54fe0a66170475654f20fe7e14d4fe79ff996f63", &(0x7f0000000940)=""/4096, 0x3, 0x0, 0xc2, 0x1000, &(0x7f0000001940)="f6a23049769703e30726558a25f7aaf9589cae049a89dbb745751d0383794aa5a315069ac792f0e428f8c8e35f6e8d2bc60f8b9523367ca611b39c6f6a8dc66baea527fdd4a1698ffd13275a6476c155e73bc202d8247378b44a96d0130c90fa79706cfd50e3016bca5b9c2393efd377f12dc9798d743916adec6160401a9f6b3c475b391b90e5c0a78bbfc5d2cd55822e594cef3d708a22a8195c4f6146537a5db4f7996ce230de4e94c9315f5c6a4ad3c99a4f7485f0679489032c01825b2746d5", &(0x7f0000001a40)="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", 0x1, 0x0, 0x7}, 0x50) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000002ac0), 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$pppl2tp(r6, &(0x7f0000002b00)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x3, 0x4, {0xa, 0x4e23, 0x162, @mcast1}}}, 0x3a) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000002b40), &(0x7f0000002b80)=0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000002b40), &(0x7f0000002b80)=0x4) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000002bc0)='vlan1\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000002d80)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002d40)={&(0x7f0000002c40)={0xd0, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xdf5}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5bf}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002dc0)={'pim6reg\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002dc0)={'pim6reg\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e40)={0x80, r0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x3c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x5}, @NL80211_TXQ_ATTR_QUEUE={0x5}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x4}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x7}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x667c}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x9}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x6}]}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'dummy0\x00'}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x63ae}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), r6) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x2c, r8, 0x0, 0xbe, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x41}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008004) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x2c, r8, 0x0, 0xbe, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x41}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008004) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000003080)=0x82, 0x4) accept$alg(r6, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000030c0)={r6}, 0x8) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000030c0)={r6}, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000003300)={@mcast2}, &(0x7f0000003340)=0x14) (async) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000003300)={@mcast2, 0x0}, &(0x7f0000003340)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000036c0)={0x6, 0x11, &(0x7f00000033c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003480)='syzkaller\x00', 0x1, 0xfd, &(0x7f00000034c0)=""/253, 0x41100, 0x2, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000035c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000003600)={0x1, 0x9, 0xfffffffe, 0x73a}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000003640)=[{0x2, 0x4, 0xc, 0x3}, {0x5, 0x1, 0xa, 0x2}, {0x3, 0x2, 0x7, 0x7}, {0x3, 0x4, 0xb, 0x1}, {0x0, 0x4, 0x1, 0x4}]}, 0x94) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000036c0)={0x6, 0x11, &(0x7f00000033c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003480)='syzkaller\x00', 0x1, 0xfd, &(0x7f00000034c0)=""/253, 0x41100, 0x2, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000035c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000003600)={0x1, 0x9, 0xfffffffe, 0x73a}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000003640)=[{0x2, 0x4, 0xc, 0x3}, {0x5, 0x1, 0xa, 0x2}, {0x3, 0x2, 0x7, 0x7}, {0x3, 0x4, 0xb, 0x1}, {0x0, 0x4, 0x1, 0x4}]}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003800)=@bpf_ext={0x1c, 0x23, &(0x7f0000003100)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0xb, 0x1, 0x0, r6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ldst={0x3, 0x2, 0x2, 0x2, 0x1, 0x0, 0x10}, @alu={0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0xc, 0x7, 0x2, 0x30, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}], &(0x7f0000003240)='GPL\x00', 0x3e, 0x73, &(0x7f0000003280)=""/115, 0x41000, 0x0, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003380)={0x5, 0x0, 0x5, 0x3}, 0x10, 0x2d31, r11, 0x2, &(0x7f0000003780)=[r6, r6, r6], &(0x7f00000037c0)=[{0x3, 0x2, 0x7, 0x8}, {0x0, 0x1, 0x7, 0x4}]}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003800)=@bpf_ext={0x1c, 0x23, &(0x7f0000003100)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0xb, 0x1, 0x0, r6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ldst={0x3, 0x2, 0x2, 0x2, 0x1, 0x0, 0x10}, @alu={0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0xc, 0x7, 0x2, 0x30, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}], &(0x7f0000003240)='GPL\x00', 0x3e, 0x73, &(0x7f0000003280)=""/115, 0x41000, 0x0, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003380)={0x5, 0x0, 0x5, 0x3}, 0x10, 0x2d31, r11, 0x2, &(0x7f0000003780)=[r6, r6, r6], &(0x7f00000037c0)=[{0x3, 0x2, 0x7, 0x8}, {0x0, 0x1, 0x7, 0x4}]}, 0x94) 17.446958758s ago: executing program 0 (id=6074): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001080)=""/4096, 0x1000, 0x0, &(0x7f0000002080)=""/25, 0x19}, &(0x7f0000002100)=0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r2, &(0x7f0000000380)="647d805482fc26070fe62a961e33157b84a46ee6e6928ff1a84c09fa1a240004584bd8a48e34145f88d677aa879c92a99a3c9dfa1d2de475dfa3bc70f5252721ae159e2f903b84fbb20c8316d6d8391426e6cea5f2e742eec11eabdc22298c2cdd5823a8a4d37fc7ed5aa8e64937995222e0a7697cec54b37edd316548cf91464333b776dcc8d6bb35", 0x89, 0x20000040, &(0x7f0000000540)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x22, 0x34, &(0x7f00000008c0)="f6f4e9a1000000000000000d0800c32a8bc678bbd404fcd535fdc8a75167efec52a9", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)="03b93f812becaa", 0x0}, 0x50) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendto(r1, 0x0, 0x0, 0x50010, &(0x7f0000000040)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000250009afcef92da6dd1697ff200000000800030046"], 0x1c}, 0x1, 0x0, 0x0, 0x49d7}, 0x20000004) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0xa}, [], [0x0, 0x0, 0xffffff00], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x6, 0xf7fe, 0x4, 'snmp\x00', 'syz1\x00', {0xe8ea}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r5, 0x0, 0xfffffffffffffd17, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f00000001c0)={'security\x00', 0x0, [0x24, 0x3, 0x92, 0x3, 0x3ff]}, &(0x7f0000000240)=0x54) syz_open_procfs$namespace(0x0, 0x0) recvmsg(r4, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x40012000) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000a80)={{}, 0x1, 0x1, 0x9}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000240)={{0x24, 0x2}, 0x100, './file0\x00'}) 17.273593329s ago: executing program 1 (id=6077): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c0, 0x98, 0x138, 0x428, 0x0, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x9}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x32}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3, 0x8}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98, 0x3f00}, {0x28}}}}, 0x520) 17.16472236s ago: executing program 4 (id=6078): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@ipv6_getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) 17.164108362s ago: executing program 1 (id=6079): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x7}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f00000001c0)=0x800, 0x4) (async) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffd, @local, 0x3}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x400}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="a01ced", 0x3}], 0x1) 16.85656071s ago: executing program 0 (id=6081): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x21b0, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0xf5ffffffffffffff) 16.79015105s ago: executing program 1 (id=6083): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x400, 0xf, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0x8, 0x4]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40010) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 16.748765345s ago: executing program 0 (id=6085): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x0, 0x2b, 0x0, "37ddfa1f1047a0a2be08f9683d9cfc56da791df0d11b215ea51282432449decea58c0afa4c3ec4bcd97121f3cfd07cfd0b2b742475102f6aae7d06a87b36734a8de7a7eb274221db71e0066e94e7de16"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000780)}}], 0x1, 0x24040014) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (fail_nth: 3) 16.644308327s ago: executing program 1 (id=6086): socket$kcm(0x2, 0x3, 0x2) (async) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9bed67a87ee4623d39c10780000000000", 0x11}}, 0x20040814) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xa, 0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0xffffffff}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}}, 0x841) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r8}, 0x70) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r7, 0x58, &(0x7f0000000800)}, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) r11 = accept(r9, &(0x7f0000000680)=@tipc=@name, &(0x7f0000000700)=0x80) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'veth1_to_batadv\x00', 0x0}) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r10, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r12}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x24}}, 0x0) (async) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, 0x0) (async) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) (async) recvmmsg(r14, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) (async) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977770a89"], 0xa) 16.643043103s ago: executing program 0 (id=6087): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x72}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) r1 = socket(0x29, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}}) socket(0x10, 0x80000, 0x3) close(r0) 16.60342527s ago: executing program 1 (id=6088): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="81010000000000000000030000000c000800010000000000000008000100000000000c00020008000000000000000800010000000000280007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB='{A\'.'], 0x64}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000240)={0x0, 0x0}) 16.512489563s ago: executing program 0 (id=6090): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x4850}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 16.103915669s ago: executing program 4 (id=6091): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x0, @multicast2}}}, 0x108) syz_emit_ethernet(0xb1, &(0x7f0000000100)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x7b, 0x3a, 0x0, @remote, @private2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1ff, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @local, @loopback, [], "09c62c83b82500fcd8119633f44a3cba554d5392e975e68f3978547a4a1a9df388b21ee5fc30f881769272f8e073f0ab7617f401c0b5de245ce7a1bae833ea6b0499bfa4f798f4f25fd07d"}}}}}}}, 0x0) 15.931670791s ago: executing program 4 (id=6093): syz_emit_ethernet(0x6e, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}, @srh={0x2e, 0x4, 0x4, 0x2, 0x2, 0x28, 0xb5, [@local, @private0]}], @echo_reply}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "1c1f15f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}]}}]}, 0x14c}}, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004a2b9fbec78f15de1665abc00000000000004000090000000000dccddbf7f1fb451a9d5bd625949ed1694b167c9cf1180bb4ffe9a7a0f6db2657a1c9ff28a2615877fe70ecb540d0df7d37a2e1432cc63b72ed6d95892244319aab25ff16c66af9cfd68436e8d2bb490d103eeead3460da75ef2ff7e7e62e3c535c6e03c732"], 0x48) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000000)={0x1, 0x200, 0x1000, @broadcast, 'pim6reg1\x00'}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, &(0x7f0000000240)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b75d937e552300", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ffffffffffffffff"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r3, 0xa773a000) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}, @srh={0x2e, 0x4, 0x4, 0x2, 0x2, 0x28, 0xb5, [@local, @private0]}], @echo_reply}}}}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004a2b9fbec78f15de1665abc00000000000004000090000000000dccddbf7f1fb451a9d5bd625949ed1694b167c9cf1180bb4ffe9a7a0f6db2657a1c9ff28a2615877fe70ecb540d0df7d37a2e1432cc63b72ed6d95892244319aab25ff16c66af9cfd68436e8d2bb490d103eeead3460da75ef2ff7e7e62e3c535c6e03c732"], 0x48) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000000)={0x1, 0x200, 0x1000, @broadcast, 'pim6reg1\x00'}) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, &(0x7f0000000240)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b75d937e552300", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ffffffffffffffff"}, 0x28) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) close(0x3) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r3, 0xa773a000) (async) 15.880274648s ago: executing program 4 (id=6095): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000008ac0)=[{{0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2}, 0x3}], 0x1, 0x820b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x9000000, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x40880) bind$rxrpc(r3, &(0x7f00000004c0)=@in6={0x21, 0x0, 0xa, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r5) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r3, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r7, 0x0}, 0x50) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x14}, 0x18) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000640)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x1, 0x0, 0x7f, 0x7, 0x4, 0x1}, {0x8, 0x8, 0x66, 0x4, 0xeb, 0x2ff9}], ['\x00', '\x00', '\x00']}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r6, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES64=r8], 0x48}, 0x1, 0x0, 0x0, 0x2400008c}, 0x0) sendto$inet6(r1, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 15.619158937s ago: executing program 2 (id=6097): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_stats}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, 0x3, 0x0, 0x2, 0x6, 0x7ff, 0x46c3}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000800024000000000080006400000a40208000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_stats}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, 0x3, 0x0, 0x2, 0x6, 0x7ff, 0x46c3}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000800024000000000080006400000a40208000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) 15.582544637s ago: executing program 4 (id=6098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}}, 0x0) (async) 15.547303983s ago: executing program 2 (id=6099): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f00000007c0)=r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)={@val={0xa}, @void, @eth={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x8, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xbc, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffc}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6c0e}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x770a0ce8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x940}, 0x8051) 15.448736889s ago: executing program 4 (id=6100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002580)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc00, 0x8, 0x8, 0x2, 0x6, {0x1, 0x1, 0xf, 0x70, 0x5d5, 0x2}, {0x20, 0x0, 0x1, 0x5, 0x6}, 0x2, 0x5, 0x40}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r9, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r9, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000300)={0x6, 0x7ff, 0x205, 0x3ff, 0x3, 0x7f, 0x9, 0xfffff000}, &(0x7f00000003c0)=0x20) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}]]}}}]}, 0x40}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42002}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x78, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x5}, 0x40040) (rerun: 32) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r13, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 15.375892615s ago: executing program 2 (id=6101): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x7fff, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x2000a4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000bc0)}}], 0x1, 0x4000000) 15.220633208s ago: executing program 2 (id=6102): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6000000, 0x4a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4e003}, 0x40c4) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000002f00002c0012800b00010067726574617000001c00028006000e00020000000800070064010101060010004e22000008000a00", @ANYRES32=r6, @ANYBLOB="2b11981ac4f6e7d24fb4a7ef10d6df868c9c08267d06006d35c9c4e27fb9ee816d02514a439937af209a90ad99f56a78c8cb9fed7708da3430fc20065548157e6be6a338492f11364c707bfa9d1fadf6e98855a1e3d40d4941bc62775f61ce9bac1b6e10f6cf83475dc1675549debc752a14fa909938b057d3a319e6430739d96670090bc5ee9948870a6be286a1205c7f4cab2abe3a2685cc85e4094d00"/167], 0x54}}, 0x24000000) 15.072571465s ago: executing program 2 (id=6103): r0 = socket(0x2a, 0x2, 0x7) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xffff}, {0x3}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x6}}]}, 0x2c}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a000000021000100040000000000000000000000000000000000000000000001ff02000000000000000000000000000100000003000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0x200, 0x2070bd2c, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6, 0x10}, {}, {0xc, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x5, 0xb}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x18}}]}, 0x44}}, 0x48c00) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x4, 0xc, 0x6, 0x8, 0x20, 0x0, 0x7}, 0xe) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f0000000140)={r10, 0xf371}, 0x8) r11 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'wg1\x00'}) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 15.067332404s ago: executing program 2 (id=6104): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x494, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x388, 0x1, [@m_ctinfo={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x90, 0x4, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="7d04a5219f97"}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x7c, 0xc, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x5, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x8, 0x6, "2ff4fb63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x494, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x388, 0x1, [@m_ctinfo={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x90, 0x4, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="7d04a5219f97"}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x7c, 0xc, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x5, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x8, 0x6, "2ff4fb63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000dc0)='vxcan1\x00') 1.078940625s ago: executing program 32 (id=6090): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x4850}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 1.061663904s ago: executing program 33 (id=6088): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="81010000000000000000030000000c000800010000000000000008000100000000000c00020008000000000000000800010000000000280007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB='{A\'.'], 0x64}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000240)={0x0, 0x0}) 27.77316ms ago: executing program 34 (id=6104): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x494, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x388, 0x1, [@m_ctinfo={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x90, 0x4, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="7d04a5219f97"}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x7c, 0xc, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x5, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x8, 0x6, "2ff4fb63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x494, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x388, 0x1, [@m_ctinfo={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x90, 0x4, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="7d04a5219f97"}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x7c, 0xc, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x5, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x8, 0x6, "2ff4fb63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000dc0)='vxcan1\x00') 0s ago: executing program 35 (id=6100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002580)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc00, 0x8, 0x8, 0x2, 0x6, {0x1, 0x1, 0xf, 0x70, 0x5d5, 0x2}, {0x20, 0x0, 0x1, 0x5, 0x6}, 0x2, 0x5, 0x40}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r9, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r9, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000300)={0x6, 0x7ff, 0x205, 0x3ff, 0x3, 0x7f, 0x9, 0xfffff000}, &(0x7f00000003c0)=0x20) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}]]}}}]}, 0x40}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42002}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x78, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x5}, 0x40040) (rerun: 32) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r13, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) kernel console output (not intermixed with test programs): ocal translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 409.097720][ T7547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 409.128782][T23808] veth9: left promiscuous mode [ 409.134387][T23808] veth9: left allmulticast mode [ 409.140445][T23808] bond10: left promiscuous mode [ 409.146085][T23808] bridge6: left promiscuous mode [ 409.168791][T23817] bond22: entered promiscuous mode [ 409.175103][T23817] 8021q: adding VLAN 0 to HW filter on device bond22 [ 409.182684][T18718] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.191637][T18718] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.227414][T23821] bridge8: entered promiscuous mode [ 409.234811][T23821] bond22: (slave bridge8): Enslaving as an active interface with an up link [ 409.244536][T18718] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.256824][T23827] veth1_to_bond: entered allmulticast mode [ 409.263071][T18718] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.264715][T23827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5384'. [ 409.284670][T23827] veth1_to_bond (unregistering): left allmulticast mode [ 409.295888][T23827] bond0: (slave bond_slave_1): Releasing backup interface [ 409.447399][T23836] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5386'. [ 409.598180][T23850] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5391'. [ 409.617698][T23842] netlink: 'syz.0.5389': attribute type 2 has an invalid length. [ 409.640569][T23842] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5389'. [ 409.719290][T23856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5393'. [ 409.766929][T23860] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5395'. [ 409.811613][T23863] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5396'. [ 409.842485][T23863] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5396'. [ 410.009112][T23878] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 410.218337][T23897] netlink: 'syz.1.5406': attribute type 3 has an invalid length. [ 410.226662][T23895] netlink: 'syz.1.5406': attribute type 3 has an invalid length. [ 410.507494][T23912] netlink: 'syz.1.5411': attribute type 1 has an invalid length. [ 410.516523][T23912] netlink: 'syz.1.5411': attribute type 3 has an invalid length. [ 410.641487][T23923] tipc: Started in network mode [ 410.647299][T23923] tipc: Node identity be92d17b0e4f, cluster identity 4711 [ 410.655682][T23923] tipc: Enabled bearer , priority 0 [ 410.696042][T23925] syzkaller0: entered promiscuous mode [ 410.701684][T23925] syzkaller0: entered allmulticast mode [ 410.708264][T23925] tipc: Resetting bearer [ 410.729961][T23922] tipc: Resetting bearer [ 410.785596][T23922] tipc: Disabling bearer [ 412.312946][T23965] block nbd1: not configured, cannot reconfigure [ 412.377733][T23970] ip6gretap2: entered promiscuous mode [ 412.388329][T23970] ip6gretap2: entered allmulticast mode [ 412.547730][T23981] FAULT_INJECTION: forcing a failure. [ 412.547730][T23981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.568096][T23981] CPU: 0 UID: 0 PID: 23981 Comm: syz.4.5432 Not tainted syzkaller #0 PREEMPT(full) [ 412.568128][T23981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.568140][T23981] Call Trace: [ 412.568150][T23981] [ 412.568160][T23981] dump_stack_lvl+0xe8/0x150 [ 412.568191][T23981] should_fail_ex+0x40c/0x560 [ 412.568217][T23981] copy_fpstate_to_sigframe+0xa83/0xd20 [ 412.568283][T23981] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 412.568324][T23981] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 412.568367][T23981] ? fpu__alloc_mathframe+0xac/0x130 [ 412.568399][T23981] get_sigframe+0x603/0x830 [ 412.568434][T23981] ? __pfx_get_sigframe+0x10/0x10 [ 412.568469][T23981] x64_setup_rt_frame+0x163/0xc50 [ 412.568500][T23981] ? rcu_is_watching+0x15/0xb0 [ 412.568526][T23981] ? _raw_spin_unlock_irq+0x2e/0x50 [ 412.568550][T23981] ? get_signal+0x10dd/0x12c0 [ 412.568588][T23981] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 412.568625][T23981] arch_do_signal_or_restart+0x456/0x860 [ 412.568656][T23981] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 412.568692][T23981] ? rcu_is_watching+0x15/0xb0 [ 412.568716][T23981] exit_to_user_mode_loop+0x104/0x730 [ 412.568746][T23981] ? rcu_is_watching+0x15/0xb0 [ 412.568767][T23981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.568790][T23981] do_syscall_64+0x353/0x580 [ 412.568818][T23981] ? trace_irq_disable+0x3b/0x140 [ 412.568848][T23981] ? clear_bhb_loop+0x40/0x90 [ 412.568872][T23981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.568893][T23981] RIP: 0033:0x7f37e1b9ce59 [ 412.568912][T23981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.568931][T23981] RSP: 002b:00007f37e2aa1028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 412.568956][T23981] RAX: fffffffffffffffc RBX: 00007f37e1e15fa0 RCX: 00007f37e1b9ce59 [ 412.568972][T23981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 412.568985][T23981] RBP: 00007f37e2aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 412.568998][T23981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.569011][T23981] R13: 00007f37e1e16038 R14: 00007f37e1e15fa0 R15: 00007ffebd6ee228 [ 412.569036][T23981] [ 412.854799][T23991] bond11: entered promiscuous mode [ 412.860606][T23991] 8021q: adding VLAN 0 to HW filter on device bond11 [ 412.894476][T23992] bridge7: entered promiscuous mode [ 412.900768][T23992] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 412.911920][T23995] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 412.995990][T24007] netlink: 'syz.4.5440': attribute type 10 has an invalid length. [ 413.047901][T24007] team0: entered allmulticast mode [ 413.066183][T24007] team_slave_0: entered allmulticast mode [ 413.072085][T24007] team_slave_1: entered allmulticast mode [ 413.079162][T24007] bridge0: port 4(team0) entered blocking state [ 413.087969][T24007] bridge0: port 4(team0) entered disabled state [ 413.106139][T24007] team0: entered promiscuous mode [ 413.111359][T24007] team_slave_0: entered promiscuous mode [ 413.117635][T24007] team_slave_1: entered promiscuous mode [ 413.130327][T24018] syzkaller1: entered promiscuous mode [ 413.145989][T24018] syzkaller1: entered allmulticast mode [ 413.242529][T24027] netlink: 'syz.1.5445': attribute type 13 has an invalid length. [ 413.313869][ T8913] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.322431][T16203] net_ratelimit: 17 callbacks suppressed [ 413.322450][T16203] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 413.323584][T24026] syzkaller0: entered promiscuous mode [ 413.328311][T16203] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 413.367575][T24026] syzkaller0: entered allmulticast mode [ 413.853471][T24075] FAULT_INJECTION: forcing a failure. [ 413.853471][T24075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.881084][T16198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 413.896095][T16198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 413.904971][T24075] CPU: 1 UID: 0 PID: 24075 Comm: syz.3.5456 Not tainted syzkaller #0 PREEMPT(full) [ 413.905067][T24075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.905102][T24075] Call Trace: [ 413.905132][T24075] [ 413.905154][T24075] dump_stack_lvl+0xe8/0x150 [ 413.905231][T24075] should_fail_ex+0x40c/0x560 [ 413.905300][T24075] _copy_from_user+0x2d/0xb0 [ 413.905386][T24075] restore_altstack+0xae/0x4f0 [ 413.905440][T24075] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 413.905511][T24075] ? __pfx_restore_altstack+0x10/0x10 [ 413.905573][T24075] ? rcu_is_watching+0x15/0xb0 [ 413.905629][T24075] ? trace_irq_enable+0x3b/0x140 [ 413.905706][T24075] __ia32_sys_rt_sigreturn+0x2bd/0x8c0 [ 413.905807][T24075] ? trace_irq_enable+0x3b/0x140 [ 413.905882][T24075] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 413.905953][T24075] ? _raw_spin_unlock_irq+0x2e/0x50 [ 413.906020][T24075] ? signal_setup_done+0x22f/0x310 [ 413.906097][T24075] ? arch_do_signal_or_restart+0x4f4/0x860 [ 413.906174][T24075] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 413.906269][T24075] ? __task_pid_nr_ns+0x28/0x470 [ 413.906285][T24075] ? rcu_is_watching+0x15/0xb0 [ 413.906304][T24075] ? rcu_is_watching+0x15/0xb0 [ 413.906323][T24075] ? lock_release+0x4b/0x3c0 [ 413.906412][T24075] ? rcu_is_watching+0x15/0xb0 [ 413.906432][T24075] ? rcu_is_watching+0x15/0xb0 [ 413.906486][T24075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.906505][T24075] do_syscall_64+0x174/0x580 [ 413.906648][T24075] ? trace_irq_disable+0x3b/0x140 [ 413.906744][T24075] ? clear_bhb_loop+0x40/0x90 [ 413.907069][T24075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.907130][T24075] RIP: 0033:0x7f81f773e1d9 [ 413.907190][T24075] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 413.907479][T24075] RSP: 002b:00007f81f8663a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 413.907576][T24075] RAX: ffffffffffffffda RBX: 00007f81f7a15fa0 RCX: 00007f81f773e1d9 [ 413.907622][T24075] RDX: 00007f81f8663a80 RSI: 00007f81f8663bb0 RDI: 0000000000000021 [ 413.907664][T24075] RBP: 00007f81f8664090 R08: 0000000000000000 R09: 0000000000000000 [ 413.907707][T24075] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 413.907733][T24075] R13: 00007f81f7a16038 R14: 00007f81f7a15fa0 R15: 00007ffee789ff68 [ 413.907794][T24075] [ 414.264408][ T8913] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.358016][T24087] __nla_validate_parse: 24 callbacks suppressed [ 414.358037][T24087] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5460'. [ 414.382312][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5461'. [ 414.389097][T24087] xt_policy: neither incoming nor outgoing policy selected [ 414.463236][T24094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5462'. [ 414.502007][T24094] IPv6: sit3: Disabled Multicast RS [ 414.754467][T16210] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 414.770576][T16210] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 414.881345][T24115] sctp: [Deprecated]: syz.4.5468 (pid 24115) Use of int in max_burst socket option. [ 414.881345][T24115] Use struct sctp_assoc_value instead [ 414.919274][T24117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5469'. [ 415.020482][T24124] batadv0: entered promiscuous mode [ 415.026990][T24124] macsec0: entered promiscuous mode [ 415.034193][T24124] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 415.042412][T24124] batadv0: left promiscuous mode [ 415.324297][T16210] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 415.339205][T16210] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 415.522781][T24147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5475'. [ 415.533986][T24147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5475'. [ 415.543186][T24147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5475'. [ 415.559827][T16210] netdevsim netdevsim3 : set [0, 1] type 1 family 0 port 8472 - 0 [ 415.559832][T24147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5475'. [ 415.559878][T16210] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 415.568301][T24147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5475'. [ 415.581600][T16210] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 415.589736][T24154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5475'. [ 415.621325][T16210] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 415.674693][ T8913] IPVS: starting estimator thread 0... [ 415.774065][T24156] IPVS: using max 37 ests per chain, 88800 per kthread [ 415.864697][T16193] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 415.878955][T16193] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 416.664618][ T1738] block nbd0: Possible stuck request ffff88802784e000: control (read@0,1024B). Runtime 120 seconds [ 416.676196][ T1738] block nbd0: Possible stuck request ffff88802784e1c0: control (read@1024,1024B). Runtime 120 seconds [ 416.687976][ T1738] block nbd0: Possible stuck request ffff88802784e380: control (read@2048,1024B). Runtime 120 seconds [ 417.605246][T24103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 417.829163][T24164] FAULT_INJECTION: forcing a failure. [ 417.829163][T24164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.886716][T24164] CPU: 1 UID: 0 PID: 24164 Comm: syz.3.5480 Not tainted syzkaller #0 PREEMPT(full) [ 417.886752][T24164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 417.886766][T24164] Call Trace: [ 417.886774][T24164] [ 417.886785][T24164] dump_stack_lvl+0xe8/0x150 [ 417.886816][T24164] should_fail_ex+0x40c/0x560 [ 417.886842][T24164] fpu__restore_sig+0x207/0x1200 [ 417.886876][T24164] ? __might_fault+0xaf/0x130 [ 417.886930][T24164] ? __pfx_fpu__restore_sig+0x10/0x10 [ 417.886959][T24164] ? _copy_from_user+0x94/0xb0 [ 417.886997][T24164] ? __might_fault+0xaf/0x130 [ 417.887021][T24164] ? __might_fault+0xcb/0x130 [ 417.887048][T24164] __ia32_sys_rt_sigreturn+0x756/0x8c0 [ 417.887086][T24164] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 417.887116][T24164] ? _raw_spin_unlock_irq+0x2e/0x50 [ 417.887156][T24164] ? lock_release+0x4b/0x3c0 [ 417.887198][T24164] ? rcu_is_watching+0x15/0xb0 [ 417.887222][T24164] ? rcu_is_watching+0x15/0xb0 [ 417.887244][T24164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.887266][T24164] do_syscall_64+0x174/0x580 [ 417.887294][T24164] ? trace_irq_disable+0x3b/0x140 [ 417.887323][T24164] ? clear_bhb_loop+0x40/0x90 [ 417.887347][T24164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.887368][T24164] RIP: 0033:0x7f81f779ce59 [ 417.887386][T24164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.887405][T24164] RSP: 002b:00007f81f8664028 EFLAGS: 00000246 [ 417.887425][T24164] RAX: fffffffffffffffc RBX: 00007f81f7a15fa0 RCX: 00007f81f779ce59 [ 417.887440][T24164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.887453][T24164] RBP: 00007f81f8664090 R08: 0000000000000000 R09: 0000000000000000 [ 417.887466][T24164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.887478][T24164] R13: 00007f81f7a16038 R14: 00007f81f7a15fa0 R15: 00007ffee789ff68 [ 417.887513][T24164] [ 418.168242][T24183] bridge0: port 3(vlan4) entered blocking state [ 418.202440][T24183] bridge0: port 3(vlan4) entered disabled state [ 418.210676][T24183] vlan4: entered allmulticast mode [ 418.218469][T24183] vlan4: entered promiscuous mode [ 418.234533][T24183] bond0: (slave team0): Releasing backup interface [ 418.260393][T24183] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.288196][T24183] bridge_slave_1: left allmulticast mode [ 418.317368][T24183] bridge_slave_1: left promiscuous mode [ 418.347437][T24183] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.385308][T24183] bond0: (slave bond_slave_0): Releasing backup interface [ 418.411225][T24183] bond0: (slave bond_slave_1): Releasing backup interface [ 418.452016][T24183] team0: Port device team_slave_0 removed [ 418.496587][T24183] team0: Port device team_slave_1 removed [ 418.516206][T24183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.547230][T24183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.568490][T24183] net_ratelimit: 8 callbacks suppressed [ 418.568513][T24183] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 418.604734][T16198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 418.619181][T16198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 418.654585][T24190] syzkaller1: entered promiscuous mode [ 418.663062][T24190] syzkaller1: entered allmulticast mode [ 418.795478][ T7547] veth0_to_bond: left promiscuous mode [ 419.107976][T24235] syzkaller1: entered promiscuous mode [ 419.131241][T24235] syzkaller1: entered allmulticast mode [ 419.204541][T16198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 419.219115][T16198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 419.300688][T24250] netlink: 'syz.1.5505': attribute type 21 has an invalid length. [ 419.345017][T24250] netlink: 'syz.1.5505': attribute type 5 has an invalid length. [ 419.369759][T24254] __nla_validate_parse: 7 callbacks suppressed [ 419.369781][T24254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5507'. [ 419.481247][T24263] vlan5: entered promiscuous mode [ 419.490589][T24263] geneve1: entered promiscuous mode [ 419.496417][T24263] vlan5: entered allmulticast mode [ 419.501804][T24263] geneve1: entered allmulticast mode [ 419.635847][T24275] openvswitch: netlink: Key type 53 is out of range max 32 [ 419.756993][T24281] openvswitch: netlink: Key 22 has unexpected len 12 expected 4 [ 419.804966][ T7547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 419.820425][ T7547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 419.906288][T24292] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5514'. [ 419.919720][T24291] xt_nat: multiple ranges no longer supported [ 420.199384][T24313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5525'. [ 420.214580][T24311] veth0: entered promiscuous mode [ 420.272566][T24313] bond23: entered promiscuous mode [ 420.280625][T24313] 8021q: adding VLAN 0 to HW filter on device bond23 [ 420.330193][T24319] bridge10: entered promiscuous mode [ 420.340231][T24324] openvswitch: netlink: Key 32 has unexpected len 12 expected 2 [ 420.351123][T24319] bond23: (slave bridge10): Enslaving as an active interface with an up link [ 420.365729][T24308] veth0: left promiscuous mode [ 420.389234][T24320] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5527'. [ 420.429551][T24325] FAULT_INJECTION: forcing a failure. [ 420.429551][T24325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.471923][T24331] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5533'. [ 420.487848][T24331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5533'. [ 420.511035][T24325] CPU: 1 UID: 0 PID: 24325 Comm: syz.3.5529 Not tainted syzkaller #0 PREEMPT(full) [ 420.511066][T24325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.511079][T24325] Call Trace: [ 420.511089][T24325] [ 420.511097][T24325] dump_stack_lvl+0xe8/0x150 [ 420.511130][T24325] should_fail_ex+0x40c/0x560 [ 420.511159][T24325] _copy_from_user+0x2d/0xb0 [ 420.511190][T24325] restore_altstack+0xae/0x4f0 [ 420.511218][T24325] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 420.511250][T24325] ? __pfx_restore_altstack+0x10/0x10 [ 420.511270][T24325] ? rcu_is_watching+0x15/0xb0 [ 420.511292][T24325] ? trace_irq_enable+0x3b/0x140 [ 420.511323][T24325] __ia32_sys_rt_sigreturn+0x2bd/0x8c0 [ 420.511370][T24325] ? trace_irq_enable+0x3b/0x140 [ 420.511398][T24325] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 420.511427][T24325] ? _raw_spin_unlock_irq+0x2e/0x50 [ 420.511452][T24325] ? signal_setup_done+0x22f/0x310 [ 420.511482][T24325] ? arch_do_signal_or_restart+0x4f4/0x860 [ 420.511513][T24325] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 420.511543][T24325] ? __task_pid_nr_ns+0x28/0x470 [ 420.511561][T24325] ? rcu_is_watching+0x15/0xb0 [ 420.511584][T24325] ? rcu_is_watching+0x15/0xb0 [ 420.511605][T24325] ? lock_release+0x4b/0x3c0 [ 420.511635][T24325] ? rcu_is_watching+0x15/0xb0 [ 420.511656][T24325] ? rcu_is_watching+0x15/0xb0 [ 420.511677][T24325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.511699][T24325] do_syscall_64+0x174/0x580 [ 420.511727][T24325] ? trace_irq_disable+0x3b/0x140 [ 420.511778][T24325] ? clear_bhb_loop+0x40/0x90 [ 420.511802][T24325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.511823][T24325] RIP: 0033:0x7f81f773e1d9 [ 420.511842][T24325] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 420.511860][T24325] RSP: 002b:00007f81f8663a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 420.511883][T24325] RAX: ffffffffffffffda RBX: 00007f81f7a15fa0 RCX: 00007f81f773e1d9 [ 420.511898][T24325] RDX: 00007f81f8663a80 RSI: 00007f81f8663bb0 RDI: 0000000000000021 [ 420.511913][T24325] RBP: 00007f81f8664090 R08: 0000000000000000 R09: 0000000000000000 [ 420.511926][T24325] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 420.511939][T24325] R13: 00007f81f7a16038 R14: 00007f81f7a15fa0 R15: 00007ffee789ff68 [ 420.511963][T24325] [ 420.518725][T24331] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5533'. [ 420.794027][T24331] netlink: 'syz.0.5533': attribute type 3 has an invalid length. [ 420.806144][T24343] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 420.815352][T24331] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5533'. [ 421.058118][T24365] netlink: 'syz.2.5539': attribute type 75 has an invalid length. [ 421.189117][T24373] veth0: entered promiscuous mode [ 421.277950][T24372] veth0: left promiscuous mode [ 421.301144][T24377] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5544'. [ 421.312697][T24380] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5546'. [ 421.338207][T24382] netlink: 'syz.0.5545': attribute type 3 has an invalid length. [ 421.534338][T24394] IPVS: Unknown mcast interface: vcan0 [ 421.689532][T24412] veth0: entered promiscuous mode [ 421.762174][T24411] veth0: left promiscuous mode [ 421.831431][T24423] netlink: 'syz.4.5563': attribute type 10 has an invalid length. [ 422.177572][T24454] veth0: entered promiscuous mode [ 422.220090][T24457] netlink: 'syz.4.5574': attribute type 1 has an invalid length. [ 422.243277][T24457] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 422.252277][T24453] veth0: left promiscuous mode [ 422.271659][T24463] netlink: 'syz.0.5575': attribute type 3 has an invalid length. [ 422.443008][T24474] netlink: 'syz.4.5579': attribute type 11 has an invalid length. [ 422.471840][T24470] FAULT_INJECTION: forcing a failure. [ 422.471840][T24470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.500503][T24474] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.512988][T24470] CPU: 1 UID: 0 PID: 24470 Comm: syz.3.5578 Not tainted syzkaller #0 PREEMPT(full) [ 422.513018][T24470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 422.513031][T24470] Call Trace: [ 422.513039][T24470] [ 422.513049][T24470] dump_stack_lvl+0xe8/0x150 [ 422.513077][T24470] should_fail_ex+0x40c/0x560 [ 422.513102][T24470] fpu__restore_sig+0x207/0x1200 [ 422.513137][T24470] ? __might_fault+0xaf/0x130 [ 422.513167][T24470] ? __pfx_fpu__restore_sig+0x10/0x10 [ 422.513195][T24470] ? _copy_from_user+0x94/0xb0 [ 422.513231][T24470] ? __might_fault+0xaf/0x130 [ 422.513255][T24470] ? __might_fault+0xcb/0x130 [ 422.513282][T24470] __ia32_sys_rt_sigreturn+0x756/0x8c0 [ 422.513318][T24470] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 422.513352][T24470] ? _raw_spin_unlock_irq+0x2e/0x50 [ 422.513389][T24470] ? lock_release+0x4b/0x3c0 [ 422.513418][T24470] ? rcu_is_watching+0x15/0xb0 [ 422.513441][T24470] ? rcu_is_watching+0x15/0xb0 [ 422.513462][T24470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.513483][T24470] do_syscall_64+0x174/0x580 [ 422.513511][T24470] ? clear_bhb_loop+0x40/0x90 [ 422.513532][T24470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.513551][T24470] RIP: 0033:0x7f81f779ce59 [ 422.513570][T24470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.513588][T24470] RSP: 002b:00007f81f8664028 EFLAGS: 00000246 [ 422.513616][T24470] RAX: fffffffffffffffc RBX: 00007f81f7a15fa0 RCX: 00007f81f779ce59 [ 422.513632][T24470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.513644][T24470] RBP: 00007f81f8664090 R08: 0000000000000000 R09: 0000000000000000 [ 422.513657][T24470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 422.513668][T24470] R13: 00007f81f7a16038 R14: 00007f81f7a15fa0 R15: 00007ffee789ff68 [ 422.513691][T24470] [ 422.745163][T24482] ip6tnl0: Caught tx_queue_len zero misconfig [ 422.816025][T16203] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 422.839925][T16203] bond2: (slave veth0_to_bond): making interface the new active one [ 422.860427][T16203] bond2: active interface up! [ 422.991193][T24500] bond12: entered promiscuous mode [ 422.999168][T24500] 8021q: adding VLAN 0 to HW filter on device bond12 [ 423.025501][T24500] bridge8: entered promiscuous mode [ 423.031563][T24500] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 423.063551][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.119246][T24512] FAULT_INJECTION: forcing a failure. [ 423.119246][T24512] name failslab, interval 1, probability 0, space 0, times 0 [ 423.134356][T24512] CPU: 0 UID: 0 PID: 24512 Comm: syz.2.5591 Not tainted syzkaller #0 PREEMPT(full) [ 423.134385][T24512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 423.134398][T24512] Call Trace: [ 423.134407][T24512] [ 423.134416][T24512] dump_stack_lvl+0xe8/0x150 [ 423.134443][T24512] should_fail_ex+0x40c/0x560 [ 423.134468][T24512] should_failslab+0xa8/0x100 [ 423.134498][T24512] __kmalloc_cache_noprof+0x88/0x660 [ 423.134526][T24512] ? ovs_flow_cmd_new+0x356/0xe80 [ 423.134556][T24512] ovs_flow_cmd_new+0x356/0xe80 [ 423.134579][T24512] ? kasan_save_track+0x3e/0x80 [ 423.134608][T24512] ? kasan_save_free_info+0x40/0x50 [ 423.134626][T24512] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 423.134667][T24512] ? __nla_parse+0x40/0x60 [ 423.134685][T24512] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 423.134704][T24512] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 423.134724][T24512] genl_family_rcv_msg_doit+0x233/0x340 [ 423.134744][T24512] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 423.134767][T24512] ? bpf_lsm_capable+0x9/0x20 [ 423.134780][T24512] ? security_capable+0x7e/0x2c0 [ 423.134805][T24512] genl_rcv_msg+0x614/0x7a0 [ 423.134823][T24512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.134838][T24512] ? ref_tracker_free+0x689/0x830 [ 423.134885][T24512] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 423.134903][T24512] ? __pfx_ref_tracker_free+0x10/0x10 [ 423.134924][T24512] netlink_rcv_skb+0x226/0x4a0 [ 423.134946][T24512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.134963][T24512] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.134990][T24512] ? down_read+0x2be/0x330 [ 423.135013][T24512] genl_rcv+0x28/0x40 [ 423.135028][T24512] netlink_unicast+0x7bb/0x940 [ 423.135082][T24512] netlink_sendmsg+0x813/0xb40 [ 423.135120][T24512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.135150][T24512] ? aa_sock_msg_perm+0xf1/0x1b0 [ 423.135166][T24512] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.135188][T24512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.135211][T24512] ____sys_sendmsg+0x9b9/0xa20 [ 423.135236][T24512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.135258][T24512] ? lock_release+0x4b/0x3c0 [ 423.135282][T24512] ? import_iovec+0x73/0xa0 [ 423.135303][T24512] ___sys_sendmsg+0x2a5/0x360 [ 423.135324][T24512] ? rcu_is_watching+0x15/0xb0 [ 423.135338][T24512] ? get_pid_task+0x20/0x1f0 [ 423.135352][T24512] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.135376][T24512] ? rcu_is_watching+0x15/0xb0 [ 423.135401][T24512] ? __fget_files+0x2a/0x420 [ 423.135416][T24512] ? __fget_files+0x3a2/0x420 [ 423.135436][T24512] __x64_sys_sendmsg+0x1b1/0x290 [ 423.135459][T24512] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.135486][T24512] ? rcu_is_watching+0x15/0xb0 [ 423.135502][T24512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.135517][T24512] do_syscall_64+0x174/0x580 [ 423.135537][T24512] ? trace_irq_disable+0x3b/0x140 [ 423.135557][T24512] ? clear_bhb_loop+0x40/0x90 [ 423.135574][T24512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.135588][T24512] RIP: 0033:0x7fdbabb9ce59 [ 423.135602][T24512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.135615][T24512] RSP: 002b:00007fdbacac1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.135632][T24512] RAX: ffffffffffffffda RBX: 00007fdbabe15fa0 RCX: 00007fdbabb9ce59 [ 423.135645][T24512] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 423.135655][T24512] RBP: 00007fdbacac1090 R08: 0000000000000000 R09: 0000000000000000 [ 423.135664][T24512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.135673][T24512] R13: 00007fdbabe16038 R14: 00007fdbabe15fa0 R15: 00007ffe4def76f8 [ 423.135691][T24512] [ 423.857247][T24544] netlink: 'syz.3.5601': attribute type 3 has an invalid length. [ 423.866566][T24544] netlink: 'syz.3.5601': attribute type 2 has an invalid length. [ 423.982739][T24551] net_ratelimit: 20 callbacks suppressed [ 423.982759][T24551] netlink: zone id is out of range [ 424.005492][T24551] netlink: zone id is out of range [ 424.010832][T24551] netlink: zone id is out of range [ 424.016301][T24551] netlink: zone id is out of range [ 424.022739][T24551] netlink: zone id is out of range [ 424.028235][T16203] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 424.028266][T16203] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 424.059079][T24551] netlink: zone id is out of range [ 424.064803][T24551] netlink: zone id is out of range [ 424.070843][T24551] netlink: zone id is out of range [ 424.124818][T24559] xt_hashlimit: max too large, truncated to 1048576 [ 424.208212][T24571] xt_SECMARK: invalid mode: 9 [ 424.494957][T24587] __nla_validate_parse: 18 callbacks suppressed [ 424.494978][T24587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5614'. [ 424.531819][T24589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5616'. [ 424.545851][T24587] netlink: 508 bytes leftover after parsing attributes in process `syz.2.5614'. [ 424.595824][T24589] bond15: entered promiscuous mode [ 424.601650][T24589] 8021q: adding VLAN 0 to HW filter on device bond15 [ 424.634805][T24589] bridge13: entered promiscuous mode [ 424.650338][T24589] bond15: (slave bridge13): Enslaving as an active interface with an up link [ 424.723282][T24603] bond9: option packets_per_slave: invalid value (18446744073709551615) [ 424.768577][T24603] bond9: option packets_per_slave: allowed values 0 - 65535 [ 424.794750][T24603] bond9 (unregistering): Released all slaves [ 424.814787][T24610] netlink: 'syz.3.5622': attribute type 1 has an invalid length. [ 424.857592][T24608] netlink: 'syz.1.5620': attribute type 2 has an invalid length. [ 424.878000][T24608] netlink: 'syz.1.5620': attribute type 1 has an invalid length. [ 424.961912][T24608] 8021q: adding VLAN 0 to HW filter on device bond16 [ 424.985557][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 424.993297][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 425.244171][T24639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5631'. [ 425.318324][T24650] syzkaller1: entered promiscuous mode [ 425.344207][T24650] syzkaller1: entered allmulticast mode [ 425.404876][T24657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5637'. [ 425.436822][T24657] netlink: 'syz.4.5637': attribute type 5 has an invalid length. [ 425.460068][T24657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5637'. [ 425.472166][T24661] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 425.529400][T24662] syzkaller0: entered promiscuous mode [ 425.546254][T24662] syzkaller0: entered allmulticast mode [ 425.648067][T24672] netlink: 'syz.4.5643': attribute type 1 has an invalid length. [ 425.656675][T24672] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5643'. [ 425.740711][T24677] SET target dimension over the limit! [ 425.755953][T24677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5644'. [ 425.768968][T24673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5635'. [ 425.790526][T24650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5635'. [ 425.806407][T24677] bond9: entered promiscuous mode [ 425.819741][T24677] bond9: entered allmulticast mode [ 425.837381][T24677] netlink: 'syz.3.5644': attribute type 61 has an invalid length. [ 425.865838][T24677] vlan1: entered allmulticast mode [ 425.871238][T24677] bond0: entered allmulticast mode [ 425.876748][T24677] bond_slave_0: entered allmulticast mode [ 425.882647][T24677] bond_slave_1: entered allmulticast mode [ 425.889474][T24677] bond2: entered allmulticast mode [ 426.180392][T24703] netlink: 'syz.3.5654': attribute type 3 has an invalid length. [ 426.193496][T24703] netlink: 'syz.3.5654': attribute type 2 has an invalid length. [ 426.205839][T24705] macvlan0: entered promiscuous mode [ 426.256375][T24709] bridge9: entered promiscuous mode [ 426.262099][T24709] bridge9: entered allmulticast mode [ 426.275364][T24709] team0: Port device bridge9 added [ 426.284849][T24709] bridge0: port 3(team0) entered blocking state [ 426.291418][T24709] bridge0: port 3(team0) entered disabled state [ 426.299723][T24709] team0: entered allmulticast mode [ 426.305495][T24709] team_slave_0: entered allmulticast mode [ 426.311793][T24709] team_slave_1: entered allmulticast mode [ 426.319817][T24709] team0: entered promiscuous mode [ 426.326139][T24709] team_slave_0: entered promiscuous mode [ 426.332323][T24709] team_slave_1: entered promiscuous mode [ 426.378421][T24714] ip6t_srh: unknown srh match flags 5F28 [ 426.476882][T24721] bond10: entered promiscuous mode [ 426.482825][T24721] 8021q: adding VLAN 0 to HW filter on device bond10 [ 426.500302][T24721] bridge10: entered promiscuous mode [ 426.507337][T24721] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 426.551107][T24724] tipc: Enabling of bearer rejected, failed to enable media [ 426.643265][T24727] can: request_module (can-proto-0) failed. [ 426.852767][T24744] vlan4: entered promiscuous mode [ 426.928941][T24748] netlink: 'syz.3.5669': attribute type 1 has an invalid length. [ 426.978065][T24754] netlink: 'syz.0.5670': attribute type 1 has an invalid length. [ 427.026990][T24705] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 427.417483][T24779] IPVS: persistence engine module ip_vs_pe_À not found [ 427.750162][T24808] vlan0: entered promiscuous mode [ 427.758902][T24808] bridge0: entered promiscuous mode [ 427.775654][T24816] IPv6: NLM_F_CREATE should be specified when creating new route [ 427.928579][T24822] syzkaller0: entered promiscuous mode [ 427.960351][T24822] syzkaller0: entered allmulticast mode [ 428.140183][T24835] bond24: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 428.162698][T24835] bond24 (unregistering): Released all slaves [ 429.086167][T24896] xt_SECMARK: invalid mode: 9 [ 429.124135][T16210] net_ratelimit: 52 callbacks suppressed [ 429.124157][T16210] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 429.145185][T16210] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 429.214551][T24899] openvswitch: netlink: Flow actions attr not present in new flow. [ 429.347540][T24905] veth0: entered promiscuous mode [ 429.424087][T24903] veth0: left promiscuous mode [ 429.437385][T24909] syzkaller0: entered promiscuous mode [ 429.453554][T24909] syzkaller0: entered allmulticast mode [ 429.723784][T16198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 429.739018][T16198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 429.758639][T24925] can: request_module (can-proto-0) failed. [ 429.922881][T24933] syzkaller0: entered promiscuous mode [ 429.936884][T24933] syzkaller0: entered allmulticast mode [ 429.980762][T24933] syzkaller0: create flow: hash 4078393288 index 1 [ 430.022756][T24933] __nla_validate_parse: 23 callbacks suppressed [ 430.022777][T24933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5726'. [ 430.069904][T24932] syzkaller0: delete flow: hash 4078393288 index 1 [ 430.121729][T24945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5730'. [ 430.156213][T16203] bridge_slave_1: left allmulticast mode [ 430.162254][T16203] bridge_slave_1: left promiscuous mode [ 430.169436][T16203] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.179296][T16203] bridge_slave_0: left allmulticast mode [ 430.186296][T16203] bridge_slave_0: left promiscuous mode [ 430.192406][T16203] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.273240][T16203] pim6reg: left allmulticast mode [ 430.284154][T16193] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 430.298446][T16193] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 430.300783][T16203] tipc: Resetting bearer [ 430.427856][T16203] tipc: Disabling bearer [ 430.436795][T16193] smbdirect: ib_dev[syz2] removed [ 430.475583][T16203] batman_adv: batadv0: Removing interface: gretap1 [ 430.501421][T16203] bond10 (unregistering): (slave geneve4): Releasing active interface [ 430.547919][T16203] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 430.572095][T16203] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 430.591185][T16203] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 430.609905][T16203] bond6 (unregistering): (slave bridge7): Releasing backup interface [ 430.629294][T16203] bond8 (unregistering): (slave bridge10): Releasing backup interface [ 430.649079][T16203] bond11 (unregistering): (slave bridge13): Releasing backup interface [ 430.669238][T16203] bond12 (unregistering): (slave bridge14): Releasing backup interface [ 430.682087][T16203] bond13 (unregistering): (slave bridge15): Releasing backup interface [ 430.706428][T16203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.718345][T16203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.729501][T16203] bond0 (unregistering): Released all slaves [ 430.744249][T16203] bond1 (unregistering): Released all slaves [ 430.758004][T16203] bond2 (unregistering): Released all slaves [ 430.772107][T16203] bond3 (unregistering): Released all slaves [ 430.787253][T16203] bond4 (unregistering): Released all slaves [ 430.804957][T16203] bond5 (unregistering): Released all slaves [ 430.822253][T16203] bond6 (unregistering): Released all slaves [ 430.841407][T16203] bond7 (unregistering): Released all slaves [ 430.854287][T16198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 430.869445][T16198] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 430.875892][T16203] bond8 (unregistering): Released all slaves [ 430.897056][T16203] bond9 (unregistering): Released all slaves [ 430.916449][T16203] bond10 (unregistering): Released all slaves [ 430.933131][T16203] bond11 (unregistering): Released all slaves [ 430.951178][T16203] bond12 (unregistering): Released all slaves [ 430.967912][T16203] bond13 (unregistering): Released all slaves [ 430.980687][T16203] bond14 (unregistering): Released all slaves [ 430.996677][T16203] bond15 (unregistering): Released all slaves [ 431.017543][ T5865] xfrm0 speed is unknown, defaulting to 1000 [ 431.039841][ T5865] infiniband syz2: ib_query_port failed (-19) [ 431.177014][T24961] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5736'. [ 431.189745][T16203] tipc: Left network mode [ 431.205013][T24961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5736'. [ 431.217924][T24963] veth0: entered promiscuous mode [ 431.226853][T24961] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5736'. [ 431.275810][T24961] validate_nla: 3 callbacks suppressed [ 431.275828][T24961] netlink: 'syz.3.5736': attribute type 3 has an invalid length. [ 431.292672][T24965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5737'. [ 431.316563][T24961] netlink: 'syz.3.5736': attribute type 2 has an invalid length. [ 431.332519][T24961] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5736'. [ 431.358166][T24959] veth0: left promiscuous mode [ 431.424525][T18718] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 431.440417][T24970] can: request_module (can-proto-0) failed. [ 431.615741][T24985] vlan1: entered promiscuous mode [ 431.636011][T24985] hsr0: entered promiscuous mode [ 431.657150][T24985] vlan1: entered allmulticast mode [ 431.672686][T24985] hsr0: entered allmulticast mode [ 431.680246][T24985] hsr_slave_0: entered allmulticast mode [ 431.686798][T24985] hsr_slave_1: entered allmulticast mode [ 431.725032][T24999] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5742'. [ 431.765324][T25003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5743'. [ 431.816518][T24991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5743'. [ 431.941457][T24996] syzkaller1: entered promiscuous mode [ 431.962393][T24996] syzkaller1: entered allmulticast mode [ 431.986661][T25010] xt_TCPMSS: Only works on TCP SYN packets [ 432.223870][T25020] xt_SECMARK: invalid mode: 9 [ 432.225633][T16203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.257370][T25021] netlink: 'syz.2.5749': attribute type 1 has an invalid length. [ 432.294301][T16203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.309970][T16203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.357750][T16203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.385988][T16203] batman_adv: batadv0: Interface deactivated: dummy0 [ 432.405395][T16203] batman_adv: batadv0: Removing interface: dummy0 [ 432.657714][T16203] team0 (unregistering): Port device team_slave_0 removed [ 432.782456][T25025] veth0: entered promiscuous mode [ 432.820106][T25044] IPv6: sit2: Disabled Multicast RS [ 432.867769][T25024] veth0: left promiscuous mode [ 433.114488][T25067] netlink: 'syz.0.5761': attribute type 1 has an invalid length. [ 433.203238][T25065] 8021q: adding VLAN 0 to HW filter on device bond9 [ 433.307545][T16203] IPVS: stop unused estimator thread 0... [ 433.348733][T25079] netlink: 'syz.2.5767': attribute type 1 has an invalid length. [ 433.417138][T25085] veth0: entered promiscuous mode [ 433.495656][T16198] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.536296][T16198] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.560006][T25084] veth0: left promiscuous mode [ 433.756930][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 433.768020][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 433.778521][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 433.787379][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 433.797341][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 434.435638][T25139] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 434.451306][T25104] lo speed is unknown, defaulting to 1000 [ 434.465447][T25104] lo speed is unknown, defaulting to 1000 [ 434.750900][T25153] net_ratelimit: 43 callbacks suppressed [ 434.750922][T25153] openvswitch: netlink: Flow key attr not present in new flow. [ 434.968333][T25162] sit0: entered promiscuous mode [ 435.001146][T25162] netlink: 'syz.0.5792': attribute type 1 has an invalid length. [ 435.030454][T25162] __nla_validate_parse: 74 callbacks suppressed [ 435.030474][T25162] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5792'. [ 435.047441][T25165] netlink: 'syz.1.5793': attribute type 1 has an invalid length. [ 435.094470][T25165] bond17: entered promiscuous mode [ 435.112782][T25165] 8021q: adding VLAN 0 to HW filter on device bond17 [ 435.121924][T25167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5792'. [ 435.159469][T25167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5792'. [ 435.198983][T25167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5792'. [ 435.274331][T25182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5795'. [ 435.290646][T25104] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.307601][T25104] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.321542][T25104] bridge_slave_0: entered allmulticast mode [ 435.329592][T25104] bridge_slave_0: entered promiscuous mode [ 435.338682][T25104] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.346593][T25104] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.354665][T25104] bridge_slave_1: entered allmulticast mode [ 435.362695][T25104] bridge_slave_1: entered promiscuous mode [ 435.389317][T25188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5795'. [ 435.406365][T25104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.431923][T25104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.532085][T25104] team0: Port device team_slave_0 added [ 435.564730][T25104] team0: Port device team_slave_1 added [ 435.653323][T25104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.674266][T25104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.752589][T25104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.788452][T25104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.813054][T25104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.864272][ T50] Bluetooth: hci3: command tx timeout [ 435.915368][T25104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.961651][T25104] hsr_slave_0: entered promiscuous mode [ 435.969867][T25104] hsr_slave_1: entered promiscuous mode [ 435.976733][T25104] debugfs: 'hsr0' already exists in 'hsr' [ 435.982589][T25104] Cannot create hsr debugfs directory [ 436.126582][T25218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5806'. [ 436.237769][T25104] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.268080][T25104] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.356916][T25104] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.371182][T25104] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.511009][T25104] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.538606][T25104] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.545672][T25240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5812'. [ 436.597370][T25240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5812'. [ 436.635595][T25104] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.664309][T25104] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.720049][T25253] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5814'. [ 436.902171][T25104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 436.939708][T25262] x_tables: duplicate underflow at hook 2 [ 436.956945][T25104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 436.982715][T25104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 437.004448][T25269] netlink: 'syz.0.5820': attribute type 29 has an invalid length. [ 437.027129][T25104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.056994][T25104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 437.099686][T25104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 437.179894][T25264] erspan0: entered allmulticast mode [ 437.217949][T25104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 437.250872][T25104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 437.533208][T25104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.564947][T25104] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.590315][ T7547] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.597519][ T7547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.618752][T25300] netlink: 'syz.3.5830': attribute type 1 has an invalid length. [ 437.664053][T16210] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.671275][T16210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.815898][T25309] veth0_to_bond: default FDB implementation only supports local addresses [ 437.943727][ T50] Bluetooth: hci3: command tx timeout [ 438.153013][T25329] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 438.173316][T25329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.329393][T25337] netlink: 'syz.1.5840': attribute type 4 has an invalid length. [ 438.335372][T25338] netlink: 'syz.1.5840': attribute type 2 has an invalid length. [ 438.542611][T25348] xt_SECMARK: invalid mode: 9 [ 438.567835][T25344] syzkaller0: entered promiscuous mode [ 438.586833][T25344] syzkaller0: entered allmulticast mode [ 438.653226][T25353] netlink: 'syz.1.5844': attribute type 21 has an invalid length. [ 438.841042][T25362] IPv6: NLM_F_CREATE should be specified when creating new route [ 438.874941][T25362] netlink: 'syz.4.5848': attribute type 1 has an invalid length. [ 438.912463][T25360] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 438.980802][T25360] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 438.999761][T25360] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.038975][T25369] xt_hashlimit: size too large, truncated to 1048576 [ 439.065195][T25104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.217588][T25104] veth0_vlan: entered promiscuous mode [ 439.241000][T25104] veth1_vlan: entered promiscuous mode [ 439.338518][T25104] veth0_macvtap: entered promiscuous mode [ 439.387724][T25104] veth1_macvtap: entered promiscuous mode [ 439.461113][T25104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.527764][T25104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.591192][ T7547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.602700][ T7547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.615051][ T7547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.637830][ T7547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.660662][T25407] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 439.876621][T25424] xt_SECMARK: invalid mode: 9 [ 440.023817][ T50] Bluetooth: hci3: command tx timeout [ 440.037789][T25437] openvswitch: netlink: EtherType 0 is less than min 600 [ 440.107887][ T5282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.127058][T25445] __nla_validate_parse: 13 callbacks suppressed [ 440.127073][T25445] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5870'. [ 440.145712][T25445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5870'. [ 440.155386][T25445] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5870'. [ 440.165286][T25445] netlink: 'syz.3.5870': attribute type 3 has an invalid length. [ 440.173286][T25445] netlink: 'syz.3.5870': attribute type 2 has an invalid length. [ 440.181476][T25445] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5870'. [ 440.230752][T25451] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 440.239129][T25451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.440573][T25464] bridge0: port 4(vlan3) entered blocking state [ 440.447647][T25464] bridge0: port 4(vlan3) entered disabled state [ 440.454455][T25464] vlan3: entered allmulticast mode [ 440.460803][T25464] vlan3: entered promiscuous mode [ 440.471897][T25465] team0: left allmulticast mode [ 440.478062][T25465] team_slave_0: left allmulticast mode [ 440.484525][T25465] team_slave_1: left allmulticast mode [ 440.490353][T25465] team0: left promiscuous mode [ 440.495589][T25465] team_slave_0: left promiscuous mode [ 440.501354][T25465] team_slave_1: left promiscuous mode [ 440.509518][T25465] bridge0: port 3(team0) entered disabled state [ 440.520756][T25465] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.531360][T25465] bridge_slave_1: left allmulticast mode [ 440.537897][T25465] bridge_slave_1: left promiscuous mode [ 440.544321][T25465] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.554826][T25465] bond7: (slave veth0_to_bond): Releasing active interface [ 440.567269][T25465] bond0: (slave bond_slave_0): Releasing backup interface [ 440.576085][T25465] bond_slave_0: left allmulticast mode [ 440.586464][T25465] bond0: (slave bond_slave_1): Releasing backup interface [ 440.596288][T25465] bond_slave_1: left allmulticast mode [ 440.612057][T25465] team0: Port device team_slave_0 removed [ 440.622829][T25465] team0: Port device team_slave_1 removed [ 440.629812][T25465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.637745][T25465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.647822][T25465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.655657][T25465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.668065][T25465] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 441.634683][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 441.635820][T25394] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 441.647627][T25394] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 442.103669][ T50] Bluetooth: hci3: command tx timeout [ 442.442533][T25394] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 442.450972][T25394] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 442.461492][T25394] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 442.469023][T25394] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 442.485022][T25394] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 442.491312][T25394] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 442.603496][T16203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.630117][T16203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.646203][T25478] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5880'. [ 442.672217][T25481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5882'. [ 442.682151][T25478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5880'. [ 442.695237][T25478] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5880'. [ 442.695366][T25482] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 442.714458][T25478] netlink: 'syz.3.5880': attribute type 3 has an invalid length. [ 442.724264][T25478] netlink: 'syz.3.5880': attribute type 2 has an invalid length. [ 442.732305][T25478] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5880'. [ 442.739669][T25482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.794400][T25481] bond18: entered promiscuous mode [ 442.800480][T25481] 8021q: adding VLAN 0 to HW filter on device bond18 [ 442.809534][T16203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.837880][T16203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.858218][T25484] bridge15: entered promiscuous mode [ 442.891258][T25484] bond18: (slave bridge15): Enslaving as an active interface with an up link [ 442.930230][ T30] audit: type=1800 audit(1781806523.475:7): pid=25492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5886" name="memory.events" dev="tmpfs" ino=2647 res=0 errno=0 [ 443.131772][T25513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.186434][T25518] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5893'. [ 443.244107][T25518] netlink: 'syz.2.5893': attribute type 3 has an invalid length. [ 443.268360][T25518] netlink: 'syz.2.5893': attribute type 2 has an invalid length. [ 443.412211][T25530] bond11: entered promiscuous mode [ 443.440709][T25530] 8021q: adding VLAN 0 to HW filter on device bond11 [ 443.513020][T25545] xt_SECMARK: invalid mode: 9 [ 443.520162][T25539] bridge13: entered promiscuous mode [ 443.527178][T25539] bond11: (slave bridge13): Enslaving as an active interface with an up link [ 443.649118][T25553] 8021q: adding VLAN 0 to HW filter on device bond12 [ 443.658560][T25553] bond12: entered allmulticast mode [ 443.665580][T25553] bond0: (slave bond12): Enslaving as an active interface with an up link [ 443.682262][T25557] dvmrp0: entered allmulticast mode [ 443.706721][T25563] netlink: 'syz.2.5908': attribute type 26 has an invalid length. [ 443.737051][T25563] 8021q: VLANs not supported on lo [ 443.777616][T25569] netlink: 'syz.0.5909': attribute type 3 has an invalid length. [ 443.797743][T25569] netlink: 'syz.0.5909': attribute type 2 has an invalid length. [ 443.963205][T25584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 443.970629][T25584] IPv6: NLM_F_CREATE should be set when creating new route [ 443.979284][T25585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 444.037985][T25589] bond13: entered promiscuous mode [ 444.044191][T25589] 8021q: adding VLAN 0 to HW filter on device bond13 [ 444.049672][T25592] xt_SECMARK: invalid mode: 9 [ 444.068845][T25589] bridge9: entered promiscuous mode [ 444.075224][T25589] bond13: (slave bridge9): Enslaving as an active interface with an up link [ 444.125769][T25597] netlink: 'syz.0.5920': attribute type 1 has an invalid length. [ 444.136060][T25597] netlink: 'syz.0.5920': attribute type 1 has an invalid length. [ 444.354196][T25613] sctp: [Deprecated]: syz.4.5925 (pid 25613) Use of int in maxseg socket option. [ 444.354196][T25613] Use struct sctp_assoc_value instead [ 444.422439][T25620] syzkaller0: entered promiscuous mode [ 444.429653][T25620] syzkaller0: entered allmulticast mode [ 444.722363][T25632] bond10: entered promiscuous mode [ 444.729702][T25632] 8021q: adding VLAN 0 to HW filter on device bond10 [ 444.755889][T25637] bridge9: entered promiscuous mode [ 444.762308][T25637] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 445.253892][T25688] xt_SECMARK: invalid mode: 9 [ 445.269679][T25687] bond19: option packets_per_slave: invalid value (18446744073709551615) [ 445.280376][T25687] bond19: option packets_per_slave: allowed values 0 - 65535 [ 445.292234][T25687] bond19 (unregistering): Released all slaves [ 445.355641][T25698] __nla_validate_parse: 30 callbacks suppressed [ 445.355660][T25698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5952'. [ 445.397691][T25698] team1: entered promiscuous mode [ 445.402986][T25698] team1: entered allmulticast mode [ 445.459724][T25702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5953'. [ 445.478875][T25704] syz.0.5954: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 445.508351][T25704] CPU: 0 UID: 0 PID: 25704 Comm: syz.0.5954 Not tainted syzkaller #0 PREEMPT(full) [ 445.508385][T25704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 445.508401][T25704] Call Trace: [ 445.508411][T25704] [ 445.508422][T25704] dump_stack_lvl+0xe8/0x150 [ 445.508455][T25704] warn_alloc+0x249/0x340 [ 445.508490][T25704] ? __pfx_stack_trace_save+0x10/0x10 [ 445.508527][T25704] ? __pfx_warn_alloc+0x10/0x10 [ 445.508562][T25704] ? __kasan_kmalloc+0x93/0xb0 [ 445.508593][T25704] ? __kmalloc_cache_noprof+0x318/0x660 [ 445.508625][T25704] ? xskq_create+0x56/0x170 [ 445.508761][T25704] ? xsk_init_queue+0x8a/0xe0 [ 445.508787][T25704] ? xsk_setsockopt+0x52a/0x960 [ 445.508812][T25704] ? do_sock_setsockopt+0x17c/0x1b0 [ 445.508844][T25704] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 445.508876][T25704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.508904][T25704] __vmalloc_node_range_noprof+0x12c/0x1730 [ 445.508953][T25704] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 445.508989][T25704] ? __kasan_kmalloc+0x93/0xb0 [ 445.509024][T25704] vmalloc_user_noprof+0xad/0xe0 [ 445.509055][T25704] ? xskq_create+0xbf/0x170 [ 445.509084][T25704] xskq_create+0xbf/0x170 [ 445.509113][T25704] xsk_init_queue+0x8a/0xe0 [ 445.509140][T25704] xsk_setsockopt+0x52a/0x960 [ 445.509168][T25704] ? __pfx_xsk_setsockopt+0x10/0x10 [ 445.509192][T25704] ? __pfx_aa_sk_perm+0x10/0x10 [ 445.509237][T25704] ? lock_release+0x4b/0x3c0 [ 445.509272][T25704] ? aa_sock_opt_perm+0xff/0x1a0 [ 445.509295][T25704] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 445.509324][T25704] ? __pfx_xsk_setsockopt+0x10/0x10 [ 445.509349][T25704] do_sock_setsockopt+0x17c/0x1b0 [ 445.509385][T25704] __x64_sys_setsockopt+0x13d/0x1b0 [ 445.509420][T25704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.509445][T25704] do_syscall_64+0x174/0x580 [ 445.509476][T25704] ? clear_bhb_loop+0x40/0x90 [ 445.509503][T25704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.509527][T25704] RIP: 0033:0x7fc1f3b9ce59 [ 445.509549][T25704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.509570][T25704] RSP: 002b:00007fc1f4a7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 445.509596][T25704] RAX: ffffffffffffffda RBX: 00007fc1f3e15fa0 RCX: 00007fc1f3b9ce59 [ 445.509615][T25704] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 445.509630][T25704] RBP: 00007fc1f3c32e6f R08: 0000000000000004 R09: 0000000000000000 [ 445.509655][T25704] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.509671][T25704] R13: 00007fc1f3e16038 R14: 00007fc1f3e15fa0 R15: 00007ffe363df4c8 [ 445.509701][T25704] [ 445.509731][T25704] Mem-Info: [ 445.815172][T25704] active_anon:5857 inactive_anon:0 isolated_anon:0 [ 445.815172][T25704] active_file:3470 inactive_file:40113 isolated_file:0 [ 445.815172][T25704] unevictable:768 dirty:143 writeback:0 [ 445.815172][T25704] slab_reclaimable:11974 slab_unreclaimable:114963 [ 445.815172][T25704] mapped:29705 shmem:1287 pagetables:3618 [ 445.815172][T25704] sec_pagetables:0 bounce:0 [ 445.815172][T25704] kernel_misc_reclaimable:0 [ 445.815172][T25704] free:1293579 free_pcp:16900 free_cma:0 [ 445.872307][T25704] Node 0 active_anon:23428kB inactive_anon:0kB active_file:13880kB inactive_file:160256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122920kB dirty:572kB writeback:0kB shmem:3612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16612kB pagetables:14336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 445.940976][T25704] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 446.034007][T25704] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.081829][T25704] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 446.088045][T25704] Node 0 DMA32 free:1196512kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23528kB inactive_anon:0kB active_file:13880kB inactive_file:160256kB unevictable:1536kB writepending:572kB zspages:0kB present:3129332kB managed:2552584kB mlocked:0kB bounce:0kB free_pcp:66312kB local_pcp:35524kB free_cma:0kB [ 446.125809][T25704] lowmem_reserve[]: 0 0 0 0 0 [ 446.133713][T25704] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 446.171048][T25704] lowmem_reserve[]: 0 0 0 0 0 [ 446.180960][T25704] Node 1 Normal free:3941540kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:944kB local_pcp:944kB free_cma:0kB [ 446.224368][T25704] lowmem_reserve[]: 0 0 0 0 0 [ 446.230978][T25704] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 446.245383][T25704] Node 0 DMA32: 5270*4kB (UME) 5672*8kB (UME) 3355*16kB (UME) 812*32kB (UME) 533*64kB (UME) 403*128kB (UME) 479*256kB (UM) 232*512kB (UM) 107*1024kB (UME) 10*2048kB (UME) 144*4096kB (M) = 1193096kB [ 446.278112][T25704] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 446.305143][T25728] netlink: 'syz.3.5961': attribute type 25 has an invalid length. [ 446.316517][T25704] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 3*32kB (UM) 3*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941592kB [ 446.351188][T25704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.365850][T25704] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.396586][T25704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.411043][T25704] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.422055][T25704] 44866 total pagecache pages [ 446.478986][T25704] 0 pages in swap cache [ 446.483225][T25704] Free swap = 124996kB [ 446.487969][T25704] Total swap = 124996kB [ 446.492246][T25704] 2097051 pages RAM [ 446.499633][T25704] 0 pages HighMem/MovableOnly [ 446.506545][T25704] 427124 pages reserved [ 446.516430][T25704] 0 pages cma reserved [ 446.576396][T25736] xt_SECMARK: invalid mode: 9 [ 446.634670][T25732] netlink: 176100 bytes leftover after parsing attributes in process `syz.4.5964'. [ 446.666457][T25738] pim6reg: entered allmulticast mode [ 446.749394][ T1738] block nbd0: Possible stuck request ffff88802784e000: control (read@0,1024B). Runtime 150 seconds [ 446.762416][ T1738] block nbd0: Possible stuck request ffff88802784e1c0: control (read@1024,1024B). Runtime 150 seconds [ 446.774690][ T1738] block nbd0: Possible stuck request ffff88802784e380: control (read@2048,1024B). Runtime 150 seconds [ 446.832364][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 446.840751][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 446.850050][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 446.858775][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 446.867174][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 447.182639][T25771] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5974'. [ 447.207821][T25771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5974'. [ 447.230768][T25771] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5974'. [ 447.243314][T25762] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5971'. [ 447.245325][T25771] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5974'. [ 447.413783][T25779] xt_SECMARK: invalid mode: 9 [ 447.565569][T25752] lo speed is unknown, defaulting to 1000 [ 447.582757][T25752] lo speed is unknown, defaulting to 1000 [ 447.655077][T25797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5980'. [ 447.706697][T25799] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 447.744741][T25799] bond0: (slave lo): Error: Device can not be enslaved while up [ 447.756444][T25801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.765136][T25801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.774767][T25801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.782740][T25801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.016357][T25826] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 448.028442][T25826] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 448.042317][T25826] gretap2: entered promiscuous mode [ 448.048842][T25826] gretap2: entered allmulticast mode [ 448.071830][T25828] syzkaller0: entered promiscuous mode [ 448.078776][T25828] syzkaller0: entered allmulticast mode [ 448.132937][T25830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5992'. [ 448.179089][T25752] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.188092][T25752] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.196258][T25752] bridge_slave_0: entered allmulticast mode [ 448.205291][T25752] bridge_slave_0: entered promiscuous mode [ 448.214918][T25752] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.222237][T25752] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.230089][T25752] bridge_slave_1: entered allmulticast mode [ 448.238832][T25752] bridge_slave_1: entered promiscuous mode [ 448.269594][T25752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.286155][T25752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.325984][T25752] team0: Port device team_slave_0 added [ 448.334770][T25752] team0: Port device team_slave_1 added [ 448.360442][T25752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.381374][T25752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.412323][T25752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.452885][T25752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.479457][T25752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.515564][T25752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.561203][T25752] hsr_slave_0: entered promiscuous mode [ 448.568576][T25752] hsr_slave_1: entered promiscuous mode [ 448.597944][T25752] debugfs: 'hsr0' already exists in 'hsr' [ 448.616845][T25752] Cannot create hsr debugfs directory [ 448.650019][T25845] validate_nla: 2 callbacks suppressed [ 448.650043][T25845] netlink: 'syz.1.5996': attribute type 3 has an invalid length. [ 448.684129][T25845] netlink: 'syz.1.5996': attribute type 2 has an invalid length. [ 448.903464][ T50] Bluetooth: hci5: command tx timeout [ 449.136375][T19869] IPVS: starting estimator thread 0... [ 449.148096][T25875] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 449.189124][T25879] netlink: 'syz.4.6008': attribute type 3 has an invalid length. [ 449.197453][T25879] netlink: 'syz.4.6008': attribute type 2 has an invalid length. [ 449.244079][T25876] IPVS: using max 38 ests per chain, 91200 per kthread [ 449.328254][T25752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 449.346423][T25752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.356712][T25752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 449.368652][T25752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.394288][T25752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 449.410824][T25752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.419895][T25752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 449.434315][T25752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 449.457439][T25897] netlink: 'syz.4.6014': attribute type 29 has an invalid length. [ 449.488730][T25897] netlink: 'syz.4.6014': attribute type 29 has an invalid length. [ 449.561455][T25897] netlink: 'syz.4.6014': attribute type 3 has an invalid length. [ 449.629804][T25752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.666280][T25752] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.691440][T16198] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.699024][T16198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.761951][T16198] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.769180][T16198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.996128][T25933] netlink: 'syz.1.6027': attribute type 39 has an invalid length. [ 450.442037][T25970] xt_hashlimit: max too large, truncated to 1048576 [ 450.481767][T25973] syzkaller1: entered promiscuous mode [ 450.494524][T25973] syzkaller1: entered allmulticast mode [ 450.542043][T25977] veth0: entered promiscuous mode [ 450.598257][T25978] vlan6: entered promiscuous mode [ 450.610954][T25978] erspan0: entered promiscuous mode [ 450.650218][T25976] veth0: left promiscuous mode [ 450.650684][T25984] netlink: 'syz.4.6044': attribute type 4 has an invalid length. [ 450.665819][T25984] __nla_validate_parse: 17 callbacks suppressed [ 450.665839][T25984] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6044'. [ 450.698302][T25752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.708509][T25985] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.6044'. [ 450.785760][T25752] veth0_vlan: entered promiscuous mode [ 450.820523][T25752] veth1_vlan: entered promiscuous mode [ 450.867132][T25752] veth0_macvtap: entered promiscuous mode [ 450.900459][T25752] veth1_macvtap: entered promiscuous mode [ 450.952546][T25752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.967876][T25752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.983067][T26004] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6051'. [ 450.993863][ T50] Bluetooth: hci5: command tx timeout [ 451.007322][ T7547] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.019878][T26004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6051'. [ 451.034519][ T7547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.046059][ T7547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.059579][T26004] netlink: 31 bytes leftover after parsing attributes in process `syz.3.6051'. [ 451.063771][ T7547] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.083114][T26004] netlink: 'syz.3.6051': attribute type 3 has an invalid length. [ 451.091446][T26004] netlink: 31 bytes leftover after parsing attributes in process `syz.3.6051'. [ 451.101176][T26007] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6052'. [ 451.111026][T26007] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6052'. [ 451.121607][T26007] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6052'. [ 451.132883][T26007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6052'. [ 451.202998][T26011] veth0: entered promiscuous mode [ 451.232913][T16203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.253488][T16203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.271753][T26010] veth0: left promiscuous mode [ 451.291761][T16203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.302589][T16203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.401887][T26024] x_tables: duplicate underflow at hook 1 [ 451.410100][T26024] sctp: [Deprecated]: syz.0.5966 (pid 26024) Use of int in max_burst socket option. [ 451.410100][T26024] Use struct sctp_assoc_value instead [ 451.504690][T26029] netlink: 'syz.0.6060': attribute type 11 has an invalid length. [ 451.535463][T26032] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 451.952209][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 451.966676][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 451.975439][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 451.983410][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 451.990963][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 452.468272][T26083] xt_CT: No such helper "snmp" [ 452.549590][T26103] xt_SECMARK: invalid mode: 9 [ 452.689280][T26060] lo speed is unknown, defaulting to 1000 [ 452.704702][T26060] lo speed is unknown, defaulting to 1000 [ 452.842851][T26111] openvswitch: netlink: IP tunnel dst address not specified [ 453.075023][ T5636] Bluetooth: hci5: command tx timeout [ 453.231772][T26144] sctp: [Deprecated]: syz.2.6089 (pid 26144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.231772][T26144] Use struct sctp_sack_info instead [ 453.340054][T26060] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.347731][T26060] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.356245][T26060] bridge_slave_0: entered allmulticast mode [ 453.365228][T26060] bridge_slave_0: entered promiscuous mode [ 453.375549][T26060] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.383147][T26060] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.392143][T26060] bridge_slave_1: entered allmulticast mode [ 453.400250][T26060] bridge_slave_1: entered promiscuous mode [ 453.434391][T26060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.449010][T26060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.491140][T26060] team0: Port device team_slave_0 added [ 453.500119][T26060] team0: Port device team_slave_1 added [ 453.536336][T26060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.545525][T26060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.573648][T26060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.588070][T26060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.595736][T26060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.623247][T26060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.726834][T26060] hsr_slave_0: entered promiscuous mode [ 453.734698][T26060] hsr_slave_1: entered promiscuous mode [ 453.741270][T26060] debugfs: 'hsr0' already exists in 'hsr' [ 453.747883][T26060] Cannot create hsr debugfs directory [ 453.939578][T26060] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 453.978903][T26060] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 453.996137][T26060] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.014870][T26172] ve: renamed from veth0_vlan (while UP) [ 454.024300][ T5636] Bluetooth: hci1: command tx timeout [ 454.045595][T26172] openvswitch: netlink: IPv4 tun info is not correct [ 454.069291][T26060] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 454.097213][T26060] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 454.108158][T26060] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.153504][T26060] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 454.178220][T26060] netdevsim netdevsim3  (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 454.204690][T26060] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.270859][T26189] IPv6: sit1: Disabled Multicast RS [ 454.277788][T26189] sit1: entered allmulticast mode [ 454.571573][T26205] validate_nla: 3 callbacks suppressed [ 454.571589][T26205] netlink: 'syz.2.6102': attribute type 1 has an invalid length. [ 455.063521][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.071112][ C1] bridge0: topology change detected, propagating [ 455.078045][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.085465][ C1] bridge0: topology change detected, propagating [ 455.092190][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 455.143781][ T5636] Bluetooth: hci5: command tx timeout [ 456.103652][ T5636] Bluetooth: hci1: command tx timeout [ 457.774648][ T4987] udevd[4987]: worker [6724] /devices/virtual/block/nbd0 is taking a long time [ 458.183813][ T5636] Bluetooth: hci1: command tx timeout [ 460.263520][ T5636] Bluetooth: hci1: command tx timeout [ 468.812662][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 468.820686][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 468.829997][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 468.839435][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 468.848328][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 468.857459][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 468.865243][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 468.873696][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 468.882490][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 468.890755][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 469.139762][T26213] lo speed is unknown, defaulting to 1000 [ 469.151645][T26213] lo speed is unknown, defaulting to 1000 [ 469.174983][T26215] lo speed is unknown, defaulting to 1000 [ 469.236205][T26215] lo speed is unknown, defaulting to 1000 [ 469.439459][T26213] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.447747][T26213] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.456179][T26213] bridge_slave_0: entered allmulticast mode [ 469.463937][T26213] bridge_slave_0: entered promiscuous mode [ 469.476607][T26213] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.484526][T26213] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.492831][T26213] bridge_slave_1: entered allmulticast mode [ 469.500785][T26213] bridge_slave_1: entered promiscuous mode [ 469.539352][T26213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.552796][T26213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.589681][T26213] team0: Port device team_slave_0 added [ 469.598985][T26213] team0: Port device team_slave_1 added [ 469.630493][T26213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.637750][T26213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.665468][T26213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.685077][T26213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.692842][T26213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.719954][T26213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.875720][T26213] hsr_slave_0: entered promiscuous mode [ 469.888035][T26213] hsr_slave_1: entered promiscuous mode [ 469.904250][T26213] debugfs: 'hsr0' already exists in 'hsr' [ 469.914920][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 469.918154][T26213] Cannot create hsr debugfs directory [ 469.927967][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 469.937333][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 469.940574][T26215] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.962198][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 469.969365][T26215] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.969610][T26215] bridge_slave_0: entered allmulticast mode [ 469.984512][T26215] bridge_slave_0: entered promiscuous mode [ 469.991052][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 470.020023][T26215] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.028451][T26215] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.036780][T26215] bridge_slave_1: entered allmulticast mode [ 470.045053][T26215] bridge_slave_1: entered promiscuous mode [ 470.055551][ T4936] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 470.073679][ T4936] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 470.081359][ T4936] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 470.091307][ T4936] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 470.099496][ T4936] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 470.145607][T26215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.157811][T26215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.214605][T26215] team0: Port device team_slave_0 added [ 470.241985][T26215] team0: Port device team_slave_1 added [ 470.300489][T26215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.307795][T26215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.336225][T26215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.374237][T26215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.394418][T26215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.424317][T26215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.485332][T26215] hsr_slave_0: entered promiscuous mode [ 470.492197][T26215] hsr_slave_1: entered promiscuous mode [ 470.501627][T26215] debugfs: 'hsr0' already exists in 'hsr' [ 470.509588][T26215] Cannot create hsr debugfs directory [ 470.682469][T26249] lo speed is unknown, defaulting to 1000 [ 470.692256][T26249] lo speed is unknown, defaulting to 1000 [ 470.719096][T26252] lo speed is unknown, defaulting to 1000 [ 470.788380][T26252] lo speed is unknown, defaulting to 1000 [ 470.908841][ T50] Bluetooth: hci6: command tx timeout [ 470.908865][ T4936] Bluetooth: hci4: command tx timeout [ 471.014792][T26249] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.022210][T26249] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.030718][T26249] bridge_slave_0: entered allmulticast mode [ 471.038396][T26249] bridge_slave_0: entered promiscuous mode [ 471.050516][T26249] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.058673][T26249] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.067508][T26249] bridge_slave_1: entered allmulticast mode [ 471.075033][T26249] bridge_slave_1: entered promiscuous mode [ 471.116011][T26249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.130776][T26249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.168129][T26249] team0: Port device team_slave_0 added [ 471.178205][T26249] team0: Port device team_slave_1 added [ 471.203981][T26249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.211109][T26249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.239579][T26249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.255189][T26249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.262265][T26249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.290668][T26249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.361233][T26249] hsr_slave_0: entered promiscuous mode [ 471.368413][T26249] hsr_slave_1: entered promiscuous mode [ 471.375514][T26249] debugfs: 'hsr0' already exists in 'hsr' [ 471.381361][T26249] Cannot create hsr debugfs directory [ 471.405389][T26252] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.413126][T26252] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.421380][T26252] bridge_slave_0: entered allmulticast mode [ 471.429186][T26252] bridge_slave_0: entered promiscuous mode [ 471.446148][T26252] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.454639][T26252] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.462667][T26252] bridge_slave_1: entered allmulticast mode [ 471.471192][T26252] bridge_slave_1: entered promiscuous mode [ 471.510659][T26252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.526423][T26252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.568431][T26252] team0: Port device team_slave_0 added [ 471.581046][T26252] team0: Port device team_slave_1 added [ 471.618790][T26252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.626394][T26252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.653988][T26252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.670975][T26252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.679071][T26252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.706556][T26252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.761346][T26252] hsr_slave_0: entered promiscuous mode [ 471.768739][T26252] hsr_slave_1: entered promiscuous mode [ 471.776603][T26252] debugfs: 'hsr0' already exists in 'hsr' [ 471.782638][T26252] Cannot create hsr debugfs directory [ 472.023627][ T4936] Bluetooth: hci7: command tx timeout [ 472.184190][ T4936] Bluetooth: hci8: command tx timeout [ 472.984657][ T50] Bluetooth: hci6: command tx timeout [ 472.984657][ T4936] Bluetooth: hci4: command tx timeout [ 474.103754][ T4936] Bluetooth: hci7: command tx timeout [ 474.264392][ T4936] Bluetooth: hci8: command tx timeout [ 475.064287][ T4936] Bluetooth: hci4: command tx timeout [ 475.064582][ T50] Bluetooth: hci6: command tx timeout [ 476.184037][ T50] Bluetooth: hci7: command tx timeout [ 476.343828][ T50] Bluetooth: hci8: command tx timeout [ 476.825477][ T1738] block nbd0: Possible stuck request ffff88802784e000: control (read@0,1024B). Runtime 180 seconds [ 476.837308][ T1738] block nbd0: Possible stuck request ffff88802784e1c0: control (read@1024,1024B). Runtime 180 seconds [ 476.849485][ T1738] block nbd0: Possible stuck request ffff88802784e380: control (read@2048,1024B). Runtime 180 seconds [ 477.143813][ T4936] Bluetooth: hci6: command tx timeout [ 477.145798][ T50] Bluetooth: hci4: command tx timeout [ 477.914022][ T4987] udevd[4987]: worker [6724] /devices/virtual/block/nbd0 timeout; kill it [ 477.923082][ T4987] udevd[4987]: seq 24126 '/devices/virtual/block/nbd0' killed [ 478.264131][ T50] Bluetooth: hci7: command tx timeout [ 478.424172][ T50] Bluetooth: hci8: command tx timeout [ 506.906706][ T1738] block nbd0: Possible stuck request ffff88802784e000: control (read@0,1024B). Runtime 210 seconds [ 506.918671][ T1738] block nbd0: Possible stuck request ffff88802784e1c0: control (read@1024,1024B). Runtime 210 seconds [ 506.931261][ T1738] block nbd0: Possible stuck request ffff88802784e380: control (read@2048,1024B). Runtime 210 seconds [ 511.871293][ T4936] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 511.878872][ T4936] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 511.886892][ T4936] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 511.895064][ T4936] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 511.902782][ T4936] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 512.117715][T26284] lo speed is unknown, defaulting to 1000 [ 512.125455][T26284] lo speed is unknown, defaulting to 1000 [ 512.341341][T26284] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.349435][T26284] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.357718][T26284] bridge_slave_0: entered allmulticast mode [ 512.365509][T26284] bridge_slave_0: entered promiscuous mode [ 512.373472][T26284] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.381064][T26284] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.389562][T26284] bridge_slave_1: entered allmulticast mode [ 512.397105][T26284] bridge_slave_1: entered promiscuous mode [ 512.418954][T26284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.431916][T26284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.457439][T26284] team0: Port device team_slave_0 added [ 512.466033][T26284] team0: Port device team_slave_1 added [ 512.485772][T26284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.492751][T26284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.520427][T26284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.533018][T26284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.540169][T26284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.567568][T26284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.601598][T26284] hsr_slave_0: entered promiscuous mode [ 512.608541][T26284] hsr_slave_1: entered promiscuous mode [ 512.615373][T26284] debugfs: 'hsr0' already exists in 'hsr' [ 512.621123][T26284] Cannot create hsr debugfs directory [ 513.945636][ T50] Bluetooth: hci9: command tx timeout [ 516.024118][ T50] Bluetooth: hci9: command tx timeout [ 518.103581][ T50] Bluetooth: hci9: command tx timeout [ 520.184375][ T50] Bluetooth: hci9: command tx timeout [ 522.264413][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 528.996012][ T4936] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 529.005679][ T4936] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 529.013677][ T4936] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 529.022570][ T4936] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 529.032974][ T4936] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 529.051615][ T50] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 529.061326][ T50] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 529.070515][ T50] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 529.080216][ T50] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 529.089080][ T50] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 529.369365][T26303] lo speed is unknown, defaulting to 1000 [ 529.377685][T26303] lo speed is unknown, defaulting to 1000 [ 529.410436][T26305] lo speed is unknown, defaulting to 1000 [ 529.471004][T26305] lo speed is unknown, defaulting to 1000 [ 529.731811][T26303] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.741187][T26303] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.748938][T26303] bridge_slave_0: entered allmulticast mode [ 529.757099][T26303] bridge_slave_0: entered promiscuous mode [ 529.769028][T26303] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.776602][T26303] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.785209][T26303] bridge_slave_1: entered allmulticast mode [ 529.792359][T26303] bridge_slave_1: entered promiscuous mode [ 529.834000][T26303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.850400][T26303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.927821][T26303] team0: Port device team_slave_0 added [ 529.955682][T26303] team0: Port device team_slave_1 added [ 529.962567][T26305] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.972235][T26305] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.980360][T26305] bridge_slave_0: entered allmulticast mode [ 529.989731][T26305] bridge_slave_0: entered promiscuous mode [ 530.010779][T26305] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.018702][T26305] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.035623][T26305] bridge_slave_1: entered allmulticast mode [ 530.056380][T26305] bridge_slave_1: entered promiscuous mode [ 530.064876][ T4936] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 530.074274][ T4936] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 530.081907][ T4936] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 530.090592][ T4936] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 530.099070][ T4936] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 530.143298][ T50] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 530.151647][ T50] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 530.161390][ T50] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 530.171357][ T50] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 530.179824][ T50] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 530.189956][T26303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.202240][T26303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.230552][T26303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.244767][T26305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.256684][T26303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.265315][T26303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.298655][T26303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.312666][T26305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.360994][T26305] team0: Port device team_slave_0 added [ 530.379398][T26305] team0: Port device team_slave_1 added [ 530.390661][T26303] hsr_slave_0: entered promiscuous mode [ 530.397541][T26303] hsr_slave_1: entered promiscuous mode [ 530.404347][T26303] debugfs: 'hsr0' already exists in 'hsr' [ 530.410342][T26303] Cannot create hsr debugfs directory [ 530.459422][T26305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.466767][T26305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.497425][T26305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.520156][T26305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.528788][T26305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.556102][T26305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.682433][T26305] hsr_slave_0: entered promiscuous mode [ 530.689503][T26305] hsr_slave_1: entered promiscuous mode [ 530.696315][T26305] debugfs: 'hsr0' already exists in 'hsr' [ 530.702190][T26305] Cannot create hsr debugfs directory [ 530.832782][T26339] lo speed is unknown, defaulting to 1000 [ 530.853024][T26339] lo speed is unknown, defaulting to 1000 [ 530.886318][T26342] lo speed is unknown, defaulting to 1000 [ 530.952420][T26342] lo speed is unknown, defaulting to 1000 [ 531.065418][ T4936] Bluetooth: hci10: command tx timeout [ 531.144282][ T4936] Bluetooth: hci11: command tx timeout [ 531.202278][T26339] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.210061][T26339] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.218188][T26339] bridge_slave_0: entered allmulticast mode [ 531.226452][T26339] bridge_slave_0: entered promiscuous mode [ 531.240833][T26339] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.248683][T26339] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.256696][T26339] bridge_slave_1: entered allmulticast mode [ 531.264194][T26339] bridge_slave_1: entered promiscuous mode [ 531.306296][T26339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.319574][T26339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.374778][T26339] team0: Port device team_slave_0 added [ 531.392392][T26339] team0: Port device team_slave_1 added [ 531.420886][T26339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.428360][T26339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.455553][T26339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.476603][T26339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.484432][T26339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.511791][T26339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.592596][T26342] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.600670][T26342] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.609159][T26342] bridge_slave_0: entered allmulticast mode [ 531.617167][T26342] bridge_slave_0: entered promiscuous mode [ 531.625326][T26342] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.632573][T26342] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.641112][T26342] bridge_slave_1: entered allmulticast mode [ 531.648641][T26342] bridge_slave_1: entered promiscuous mode [ 531.659530][T26339] hsr_slave_0: entered promiscuous mode [ 531.667526][T26339] hsr_slave_1: entered promiscuous mode [ 531.674627][T26339] debugfs: 'hsr0' already exists in 'hsr' [ 531.681023][T26339] Cannot create hsr debugfs directory [ 531.725264][T26342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.741608][T26342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.784510][T26342] team0: Port device team_slave_0 added [ 531.796666][T26342] team0: Port device team_slave_1 added [ 531.832589][T26342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.839906][T26342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.868417][T26342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.888854][T26342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.896487][T26342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.924582][T26342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.982690][T26342] hsr_slave_0: entered promiscuous mode [ 531.990145][T26342] hsr_slave_1: entered promiscuous mode [ 531.997529][T26342] debugfs: 'hsr0' already exists in 'hsr' [ 532.003561][T26342] Cannot create hsr debugfs directory [ 532.183616][ T4936] Bluetooth: hci12: command tx timeout [ 532.264079][ T4936] Bluetooth: hci13: command tx timeout [ 533.144496][ T4936] Bluetooth: hci10: command tx timeout [ 533.224275][ T4936] Bluetooth: hci11: command tx timeout [ 534.263687][ T4936] Bluetooth: hci12: command tx timeout [ 534.343866][ T4936] Bluetooth: hci13: command tx timeout [ 535.223554][ T4936] Bluetooth: hci10: command tx timeout [ 535.304085][ T4936] Bluetooth: hci11: command tx timeout [ 536.344272][ T4936] Bluetooth: hci12: command tx timeout [ 536.423742][ T4936] Bluetooth: hci13: command tx timeout [ 536.984833][ T1738] block nbd0: Possible stuck request ffff88802784e000: control (read@0,1024B). Runtime 240 seconds [ 536.997188][ T1738] block nbd0: Possible stuck request ffff88802784e1c0: control (read@1024,1024B). Runtime 240 seconds [ 537.009142][ T1738] block nbd0: Possible stuck request ffff88802784e380: control (read@2048,1024B). Runtime 240 seconds [ 537.303570][ T4936] Bluetooth: hci10: command tx timeout [ 537.384720][ T4936] Bluetooth: hci11: command tx timeout [ 538.424048][ T4936] Bluetooth: hci12: command tx timeout [ 538.504211][ T4936] Bluetooth: hci13: command tx timeout [ 567.070257][ T1738] block nbd0: Possible stuck request ffff88802784e000: control (read@0,1024B). Runtime 270 seconds [ 567.081884][ T1738] block nbd0: Possible stuck request ffff88802784e1c0: control (read@1024,1024B). Runtime 270 seconds [ 567.094640][ T1738] block nbd0: Possible stuck request ffff88802784e380: control (read@2048,1024B). Runtime 270 seconds [ 570.424452][ T4936] Bluetooth: hci5: command 0x0406 tx timeout [ 572.042271][ T4936] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 572.051276][ T4936] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 572.060680][ T4936] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 572.069212][ T4936] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 572.078237][ T4936] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 572.303187][T26374] lo speed is unknown, defaulting to 1000 [ 572.310914][T26374] lo speed is unknown, defaulting to 1000 [ 572.548403][T26374] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.556377][T26374] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.565174][T26374] bridge_slave_0: entered allmulticast mode [ 572.574128][T26374] bridge_slave_0: entered promiscuous mode [ 572.582718][T26374] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.591063][T26374] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.599474][T26374] bridge_slave_1: entered allmulticast mode [ 572.607574][T26374] bridge_slave_1: entered promiscuous mode [ 572.636831][T26374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.649706][T26374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.677473][T26374] team0: Port device team_slave_0 added [ 572.685890][T26374] team0: Port device team_slave_1 added [ 572.706954][T26374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.714488][T26374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.741607][T26374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.755702][T26374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.763025][T26374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.791307][T26374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.829206][T26374] hsr_slave_0: entered promiscuous mode [ 572.836299][T26374] hsr_slave_1: entered promiscuous mode [ 572.842583][T26374] debugfs: 'hsr0' already exists in 'hsr' [ 572.849111][T26374] Cannot create hsr debugfs directory [ 574.103656][ T50] Bluetooth: hci14: command tx timeout [ 575.544334][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 576.184238][ T4936] Bluetooth: hci14: command tx timeout [ 578.263663][ T4936] Bluetooth: hci14: command tx timeout [ 580.344067][ T4936] Bluetooth: hci14: command tx timeout [ 589.098149][ T50] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 589.108163][ T50] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 589.117732][ T50] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 589.127197][ T50] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 589.135912][ T50] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 589.149483][ T5636] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 589.161826][ T5628] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 589.174976][ T5628] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 589.185633][ T5628] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 589.194240][ T5628] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 589.471599][T26393] lo speed is unknown, defaulting to 1000 [ 589.479064][T26393] lo speed is unknown, defaulting to 1000 [ 589.491180][T26395] lo speed is unknown, defaulting to 1000 [ 589.562018][T26395] lo speed is unknown, defaulting to 1000 [ 589.785069][T26393] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.792467][T26393] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.801016][T26393] bridge_slave_0: entered allmulticast mode [ 589.809252][T26393] bridge_slave_0: entered promiscuous mode [ 589.822037][T26393] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.829678][T26393] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.837707][T26393] bridge_slave_1: entered allmulticast mode [ 589.845864][T26393] bridge_slave_1: entered promiscuous mode [ 589.882590][T26393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.896354][T26393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.930755][T26393] team0: Port device team_slave_0 added [ 589.942871][T26393] team0: Port device team_slave_1 added [ 589.981827][T26393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.990075][T26393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.017030][T26393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.039650][T26393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.047781][T26393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.088883][T26393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.205842][ T5628] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 590.215835][ T5628] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 590.216070][T26393] hsr_slave_0: entered promiscuous mode [ 590.225033][ T5628] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 590.236996][T26393] hsr_slave_1: entered promiscuous mode [ 590.239526][T26393] debugfs: 'hsr0' already exists in 'hsr' [ 590.249041][ T5628] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 590.249066][T26393] Cannot create hsr debugfs directory [ 590.263031][ T5628] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 590.360038][ T5628] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 590.371936][ T5628] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 590.381447][ T5628] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 590.390916][T26395] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.392152][ T5628] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 590.401566][T26395] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.409235][ T5628] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 590.425179][T26395] bridge_slave_0: entered allmulticast mode [ 590.437647][T26395] bridge_slave_0: entered promiscuous mode [ 590.454221][T26395] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.474058][T26395] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.490691][T26395] bridge_slave_1: entered allmulticast mode [ 590.502383][T26395] bridge_slave_1: entered promiscuous mode [ 590.575115][T26395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.612421][T26395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.665743][T26395] team0: Port device team_slave_0 added [ 590.692075][T26395] team0: Port device team_slave_1 added [ 590.767907][T26395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.775786][T26395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.805336][T26395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.818401][T26395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.827157][T26395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.855722][T26395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.926946][T26429] lo speed is unknown, defaulting to 1000 [ 590.937938][T26395] hsr_slave_0: entered promiscuous mode [ 590.947653][T26395] hsr_slave_1: entered promiscuous mode [ 590.955851][T26395] debugfs: 'hsr0' already exists in 'hsr' [ 590.962050][T26395] Cannot create hsr debugfs directory [ 590.968909][T26429] lo speed is unknown, defaulting to 1000 [ 591.025643][T26434] lo speed is unknown, defaulting to 1000 [ 591.115791][T26434] lo speed is unknown, defaulting to 1000 [ 591.223639][ T5628] Bluetooth: hci16: command tx timeout [ 591.229241][ T50] Bluetooth: hci15: command tx timeout [ 591.483266][T26429] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.491605][T26429] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.499853][T26429] bridge_slave_0: entered allmulticast mode [ 591.507950][T26429] bridge_slave_0: entered promiscuous mode [ 591.516986][T26429] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.524871][T26429] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.532543][T26429] bridge_slave_1: entered allmulticast mode [ 591.540746][T26429] bridge_slave_1: entered promiscuous mode [ 591.602789][T26429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.618348][T26434] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.627261][T26434] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.635981][T26434] bridge_slave_0: entered allmulticast mode [ 591.643896][T26434] bridge_slave_0: entered promiscuous mode [ 591.653678][T26429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.671390][T26434] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.679274][T26434] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.687407][T26434] bridge_slave_1: entered allmulticast mode [ 591.695631][T26434] bridge_slave_1: entered promiscuous mode [ 591.736657][T26429] team0: Port device team_slave_0 added [ 591.750225][T26434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.764092][T26434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.775623][T26429] team0: Port device team_slave_1 added [ 591.819458][T26434] team0: Port device team_slave_0 added [ 591.826521][T26429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.833606][T26429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.861344][T26429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.876432][T26434] team0: Port device team_slave_1 added [ 591.883228][T26429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.891227][T26429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.919424][T26429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.952577][T26434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.960105][T26434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.988566][T26434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.002023][T26434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.010218][T26434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.042086][T26434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.078960][T26429] hsr_slave_0: entered promiscuous mode [ 592.085902][T26429] hsr_slave_1: entered promiscuous mode [ 592.092516][T26429] debugfs: 'hsr0' already exists in 'hsr' [ 592.099156][T26429] Cannot create hsr debugfs directory [ 592.142852][T26434] hsr_slave_0: entered promiscuous mode [ 592.150308][T26434] hsr_slave_1: entered promiscuous mode [ 592.157856][T26434] debugfs: 'hsr0' already exists in 'hsr' [ 592.165192][T26434] Cannot create hsr debugfs directory [ 592.344407][ T50] Bluetooth: hci17: command tx timeout [ 592.503590][ T50] Bluetooth: hci18: command tx timeout [ 593.303779][ T50] Bluetooth: hci15: command tx timeout [ 593.304570][ T5628] Bluetooth: hci16: command tx timeout [ 594.424263][T26465] Bluetooth: hci17: command tx timeout [ 594.584150][T26465] Bluetooth: hci18: command tx timeout [ 595.383629][T26465] Bluetooth: hci15: command tx timeout [ 595.385031][T26464] Bluetooth: hci16: command tx timeout [ 596.024674][T26464] Bluetooth: hci6: command 0x0406 tx timeout [ 596.025725][T26396] Bluetooth: hci8: command 0x0406 tx timeout [ 596.031706][T26464] Bluetooth: hci7: command 0x0406 tx timeout [ 596.037739][T26465] Bluetooth: hci4: command 0x0406 tx timeout [ 596.504331][ T50] Bluetooth: hci17: command tx timeout [ 596.674174][ T50] Bluetooth: hci18: command tx timeout [ 597.145831][ T1738] block nbd0: Possible stuck request ffff88802784e000: control (read@0,1024B). Runtime 300 seconds [ 597.157922][ T1738] block nbd0: Possible stuck request ffff88802784e1c0: control (read@1024,1024B). Runtime 300 seconds [ 597.169851][ T1738] block nbd0: Possible stuck request ffff88802784e380: control (read@2048,1024B). Runtime 300 seconds [ 597.464216][ T50] Bluetooth: hci15: command tx timeout [ 597.464232][ T5636] Bluetooth: hci16: command tx timeout [ 598.583693][ T50] Bluetooth: hci17: command tx timeout [ 598.743662][ T50] Bluetooth: hci18: command tx timeout [ 603.544282][ T31] INFO: task dhcpcd:5281 blocked for more than 143 seconds. [ 603.552054][ T31] Not tainted syzkaller #0 [ 603.557832][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 603.567308][ T31] task:dhcpcd state:D stack:25752 pid:5281 tgid:5281 ppid:1 task_flags:0x400140 flags:0x00080000 [ 603.580409][ T31] Call Trace: [ 603.584374][ T31] [ 603.587650][ T31] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 603.592216][ T31] ? lock_release+0x4b/0x3c0 [ 603.598029][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 603.604320][ T31] ? __pfx___schedule+0x10/0x10 [ 603.609426][ T31] ? rcu_is_watching+0x15/0xb0 [ 603.616195][ T31] ? rcu_is_watching+0x15/0xb0 [ 603.621136][ T31] ? lock_release+0x4b/0x3c0 [ 603.626806][ T31] ? rcu_is_watching+0x15/0xb0 [ 603.631916][ T31] schedule+0x164/0x360 [ 603.644417][ T31] schedule_preempt_disabled+0x13/0x30 [ 603.652536][ T31] __mutex_lock+0x7bf/0x1550 [ 603.661772][ T31] ? __mutex_lock+0x5d4/0x1550 [ 603.667203][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 603.671979][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 603.678817][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 603.698577][ T31] ? radix_tree_lookup+0x240/0x290 [ 603.714151][ T31] genl_rcv_msg+0x10b/0x7a0 [ 603.718872][ T31] ? __alloc_skb+0x276/0x7a0 [ 603.725705][ T31] ? netlink_sendmsg+0x5d4/0xb40 [ 603.730837][ T31] ? __x64_sys_sendmsg+0x1b1/0x290 [ 603.738120][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 603.743560][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 603.748753][ T31] ? rcu_is_watching+0x15/0xb0 [ 603.753682][ T31] netlink_rcv_skb+0x226/0x4a0 [ 603.758972][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 603.764911][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 603.770277][ T31] ? down_read+0x2be/0x330 [ 603.775030][ T31] genl_rcv+0x28/0x40 [ 603.779251][ T31] netlink_unicast+0x7bb/0x940 [ 603.784662][ T31] netlink_sendmsg+0x813/0xb40 [ 603.789788][ T31] ? format_decode+0xdc/0xe20 [ 603.795368][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.801046][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 603.806818][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 603.812168][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.818007][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 603.823111][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.829164][ T31] ? import_iovec+0x73/0xa0 [ 603.834804][ T31] ___sys_sendmsg+0x2a5/0x360 [ 603.840270][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.846706][ T31] ? netdev_run_todo+0x1045/0x10d0 [ 603.851978][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 603.858308][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 603.863882][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 603.869702][ T31] ? __secure_computing+0xe7/0x2b0 [ 603.875109][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.881572][ T31] do_syscall_64+0x174/0x580 [ 603.886471][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.892676][ T31] ? clear_bhb_loop+0x40/0x90 [ 603.898268][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.904825][ T31] RIP: 0033:0x7eff4f0ce407 [ 603.909269][ T31] RSP: 002b:00007ffc1e37d110 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 603.918533][ T31] RAX: ffffffffffffffda RBX: 00007eff4f044780 RCX: 00007eff4f0ce407 [ 603.927206][ T31] RDX: 0000000000000000 RSI: 00007ffc1e37d190 RDI: 000000000000000e [ 603.935809][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 603.944763][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e8d80b7e10 [ 603.953161][ T31] R13: 000000000000000e R14: 00007ffc1e391650 R15: 000055e8ebb8b490 [ 603.962047][ T31] [ 603.965823][ T31] INFO: task syz-executor:26060 blocked for more than 143 seconds. [ 603.974746][ T31] Not tainted syzkaller #0 [ 603.979825][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 603.989284][ T31] task:syz-executor state:D stack:22936 pid:26060 tgid:26060 ppid:1 task_flags:0x400140 flags:0x00080002 [ 604.002244][ T31] Call Trace: [ 604.006448][ T31] [ 604.009593][ T31] __schedule+0x17d9/0x56c0 [ 604.014744][ T31] ? rcu_is_watching+0x15/0xb0 [ 604.019676][ T31] ? post_alloc_hook+0x22d/0x280 [ 604.025622][ T31] ? __update_page_owner_handle+0x51a/0x570 [ 604.031751][ T31] ? __pfx___schedule+0x10/0x10 [ 604.037269][ T31] ? rcu_is_watching+0x15/0xb0 [ 604.042528][ T31] ? rcu_is_watching+0x15/0xb0 [ 604.048674][ T31] ? lock_release+0x4b/0x3c0 [ 604.054620][ T31] ? rcu_is_watching+0x15/0xb0 [ 604.059942][ T31] schedule+0x164/0x360 [ 604.065303][ T31] schedule_preempt_disabled+0x13/0x30 [ 604.070842][ T31] __mutex_lock+0x7bf/0x1550 [ 604.076163][ T31] ? __mutex_lock+0x5d4/0x1550 [ 604.081378][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 604.087100][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 604.092607][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 604.098947][ T31] ? radix_tree_lookup+0x240/0x290 [ 604.105213][ T31] genl_rcv_msg+0x10b/0x7a0 [ 604.109931][ T31] ? __alloc_skb+0x276/0x7a0 [ 604.115410][ T31] ? netlink_sendmsg+0x5d4/0xb40 [ 604.120506][ T31] ? do_syscall_64+0x174/0x580 [ 604.126173][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.131760][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 604.137421][ T31] ? rcu_is_watching+0x15/0xb0 [ 604.142444][ T31] netlink_rcv_skb+0x226/0x4a0 [ 604.148120][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.153207][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 604.159004][ T31] ? down_read+0x2be/0x330 [ 604.164102][ T31] genl_rcv+0x28/0x40 [ 604.168868][ T31] netlink_unicast+0x7bb/0x940 [ 604.173813][ T31] netlink_sendmsg+0x813/0xb40 [ 604.178652][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.185575][ T31] ? __might_fault+0xaf/0x130 [ 604.190406][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 604.196076][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 604.201915][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.208001][ T31] __sys_sendto+0x626/0x6c0 [ 604.212720][ T31] ? file_init_path+0x3b/0x5a0 [ 604.218298][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 604.224588][ T31] ? errseq_sample+0x40/0x70 [ 604.229558][ T31] ? rcu_is_watching+0x15/0xb0 [ 604.235140][ T31] ? fd_install+0x94/0x3d0 [ 604.239885][ T31] ? fd_install+0x306/0x3d0 [ 604.245902][ T31] __x64_sys_sendto+0xde/0x100 [ 604.250905][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.258014][ T31] do_syscall_64+0x174/0x580 [ 604.263065][ T31] ? trace_irq_disable+0x3b/0x140 [ 604.268886][ T31] ? clear_bhb_loop+0x40/0x90 [ 604.274453][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.280520][ T31] RIP: 0033:0x7fd5d715d68e [ 604.285754][ T31] RSP: 002b:00007ffd9e97fb68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 604.294980][ T31] RAX: ffffffffffffffda RBX: 0000555574fad500 RCX: 00007fd5d715d68e [ 604.304178][ T31] RDX: 0000000000000020 RSI: 00007fd5d7f44670 RDI: 0000000000000005 [ 604.312493][ T31] RBP: 0000000000000001 R08: 00007ffd9e97fbe4 R09: 000000000000000c [ 604.321618][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 604.331196][ T31] R13: 00007ffd9e97fc38 R14: 00007fd5d7f44670 R15: 0000000000000000 [ 604.340126][ T31] [ 604.344238][ T31] INFO: task syz.1.6088:26142 blocked for more than 144 seconds. [ 604.352428][ T31] Not tainted syzkaller #0 [ 604.358266][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.367592][ T31] task:syz.1.6088 state:D stack:25656 pid:26142 tgid:26141 ppid:15898 task_flags:0x480140 flags:0x00080002 [ 604.380446][ T31] Call Trace: [ 604.384487][ T31] [ 604.387488][ T31] __schedule+0x17d9/0x56c0 [ 604.392032][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 604.397767][ T31] ? rcu_is_watching+0x15/0xb0 [ 604.402653][ T31] ? __pfx___schedule+0x10/0x10 [ 604.408455][ T31] ? schedule+0x90/0x360 [ 604.413186][ T31] ? rcu_is_watching+0x15/0xb0 [ 604.418827][ T31] ? lock_release+0x4b/0x3c0 [ 604.425164][ T31] schedule+0x164/0x360 [ 604.429412][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 604.436417][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 604.443029][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 604.449375][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 604.455951][ T31] nbd_set_size+0x454/0x680 [ 604.460979][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 604.466231][ T31] ? nla_memcpy+0x5b/0xc0 [ 604.470789][ T31] nbd_genl_reconfigure+0x7e9/0x1e80 [ 604.476788][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 604.483022][ T31] ? rcu_is_watching+0x15/0xb0 [ 604.488552][ T31] ? trace_kmalloc+0x2a/0xf0 [ 604.494651][ T31] ? __nla_parse+0x40/0x60 [ 604.499241][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 604.509336][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 604.516486][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 604.522190][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 604.528929][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 604.535010][ T31] genl_rcv_msg+0x614/0x7a0 [ 604.539585][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.545445][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 604.551306][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 604.557421][ T31] ? rcu_is_watching+0x15/0xb0 [ 604.562865][ T31] netlink_rcv_skb+0x226/0x4a0 [ 604.568295][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.574064][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 604.579609][ T31] ? down_read+0x2be/0x330 [ 604.585160][ T31] genl_rcv+0x28/0x40 [ 604.589431][ T31] netlink_unicast+0x7bb/0x940 [ 604.595640][ T31] netlink_sendmsg+0x813/0xb40 [ 604.600837][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.607113][ T31] ? futex_unqueue+0x22/0x240 [ 604.612035][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 604.617895][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 604.623883][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.629215][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 604.634781][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.640228][ T31] ? lock_release+0x4b/0x3c0 [ 604.645485][ T31] ? import_iovec+0x73/0xa0 [ 604.650020][ T31] ___sys_sendmsg+0x2a5/0x360 [ 604.655630][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.661649][ T31] ? futex_wait+0x2a2/0x390 [ 604.667648][ T31] ? __fget_files+0x2a/0x420 [ 604.672447][ T31] ? __fget_files+0x3a2/0x420 [ 604.678136][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 604.684047][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 604.689850][ T31] ? rcu_is_watching+0x15/0xb0 [ 604.695544][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.701836][ T31] do_syscall_64+0x174/0x580 [ 604.707250][ T31] ? trace_irq_disable+0x3b/0x140 [ 604.712397][ T31] ? clear_bhb_loop+0x40/0x90 [ 604.718634][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.725628][ T31] RIP: 0033:0x7fc5d679ce59 [ 604.730289][ T31] RSP: 002b:00007fc5d7673028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.739097][ T31] RAX: ffffffffffffffda RBX: 00007fc5d6a15fa0 RCX: 00007fc5d679ce59 [ 604.747436][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 604.756066][ T31] RBP: 00007fc5d6832e6f R08: 0000000000000000 R09: 0000000000000000 [ 604.765349][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.774609][ T31] R13: 00007fc5d6a16038 R14: 00007fc5d6a15fa0 R15: 00007fff4b8194a8 [ 604.783922][ T31] [ 604.787198][ T31] INFO: task syz.0.6090:26148 blocked for more than 144 seconds. [ 604.801663][ T31] Not tainted syzkaller #0 [ 604.807787][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.817947][ T31] task:syz.0.6090 state:D stack:27568 pid:26148 tgid:26145 ppid:25752 task_flags:0x400040 flags:0x00080002 [ 604.831128][ T31] Call Trace: [ 604.835126][ T31] [ 604.838538][ T31] __schedule+0x17d9/0x56c0 [ 604.843967][ T31] ? trace_irq_enable+0x3b/0x140 [ 604.849998][ T31] ? __pfx___schedule+0x10/0x10 [ 604.855693][ T31] ? rcu_is_watching+0x15/0xb0 [ 604.860636][ T31] ? rcu_is_watching+0x15/0xb0 [ 604.866425][ T31] ? lock_release+0x4b/0x3c0 [ 604.871346][ T31] ? rcu_is_watching+0x15/0xb0 [ 604.876818][ T31] schedule+0x164/0x360 [ 604.881657][ T31] schedule_preempt_disabled+0x13/0x30 [ 604.887950][ T31] __mutex_lock+0x7bf/0x1550 [ 604.893059][ T31] ? __mutex_lock+0x5d4/0x1550 [ 604.899051][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 604.904597][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 604.910133][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 604.916457][ T31] ? radix_tree_lookup+0x240/0x290 [ 604.922054][ T31] genl_rcv_msg+0x10b/0x7a0 [ 604.927419][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.932754][ T31] ? ref_tracker_free+0x689/0x830 [ 604.938767][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 604.945109][ T31] netlink_rcv_skb+0x226/0x4a0 [ 604.950026][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.955956][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 604.961851][ T31] ? down_read+0x2be/0x330 [ 604.967155][ T31] genl_rcv+0x28/0x40 [ 604.971359][ T31] netlink_unicast+0x7bb/0x940 [ 604.977477][ T31] netlink_sendmsg+0x813/0xb40 [ 604.982342][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.988651][ T31] ? __might_fault+0xaf/0x130 [ 604.994372][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 604.999510][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 605.005658][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.011375][ T31] __sys_sendto+0x626/0x6c0 [ 605.016597][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 605.022022][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 605.027766][ T31] __x64_sys_sendto+0xde/0x100 [ 605.032986][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.039371][ T31] do_syscall_64+0x174/0x580 [ 605.044469][ T31] ? trace_irq_disable+0x3b/0x140 [ 605.050639][ T31] ? clear_bhb_loop+0x40/0x90 [ 605.056070][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.062420][ T31] RIP: 0033:0x7fb1f9f5d68e [ 605.067896][ T31] RSP: 002b:00007fb1fad97e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 605.077642][ T31] RAX: ffffffffffffffda RBX: 00007fb1fad996c0 RCX: 00007fb1f9f5d68e [ 605.086430][ T31] RDX: 0000000000000020 RSI: 00007fb1fad98000 RDI: 0000000000000003 [ 605.095196][ T31] RBP: 0000000000000000 R08: 00007fb1fad97f04 R09: 000000000000000c [ 605.104100][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 605.112169][ T31] R13: 00007fb1fad97f58 R14: 00007fb1fad98000 R15: 0000000000000000 [ 605.121224][ T31] [ 605.125129][ T31] INFO: task syz.0.6090:26154 blocked for more than 144 seconds. [ 605.133923][ T31] Not tainted syzkaller #0 [ 605.139029][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.148938][ T31] task:syz.0.6090 state:D stack:28304 pid:26154 tgid:26145 ppid:25752 task_flags:0x400040 flags:0x00080002 [ 605.162454][ T31] Call Trace: [ 605.166685][ T31] [ 605.169748][ T31] __schedule+0x17d9/0x56c0 [ 605.175368][ T31] ? trace_irq_enable+0x3b/0x140 [ 605.180689][ T31] ? __pfx___schedule+0x10/0x10 [ 605.186343][ T31] ? rcu_is_watching+0x15/0xb0 [ 605.191185][ T31] ? rcu_is_watching+0x15/0xb0 [ 605.196671][ T31] ? lock_release+0x4b/0x3c0 [ 605.201677][ T31] ? rcu_is_watching+0x15/0xb0 [ 605.207150][ T31] schedule+0x164/0x360 [ 605.211593][ T31] schedule_preempt_disabled+0x13/0x30 [ 605.217835][ T31] __mutex_lock+0x7bf/0x1550 [ 605.222493][ T31] ? __mutex_lock+0x5d4/0x1550 [ 605.228248][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 605.234135][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 605.239447][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 605.245416][ T31] ? radix_tree_lookup+0x240/0x290 [ 605.251273][ T31] genl_rcv_msg+0x10b/0x7a0 [ 605.256740][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.262107][ T31] ? ref_tracker_free+0x689/0x830 [ 605.268071][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 605.274279][ T31] netlink_rcv_skb+0x226/0x4a0 [ 605.279323][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.285188][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 605.290547][ T31] ? down_read+0x2be/0x330 [ 605.295904][ T31] genl_rcv+0x28/0x40 [ 605.300222][ T31] netlink_unicast+0x7bb/0x940 [ 605.305701][ T31] netlink_sendmsg+0x813/0xb40 [ 605.310558][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.316110][ T31] ? __might_fault+0xaf/0x130 [ 605.320866][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 605.326074][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 605.331684][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.337267][ T31] __sys_sendto+0x626/0x6c0 [ 605.341931][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 605.347980][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 605.354391][ T31] __x64_sys_sendto+0xde/0x100 [ 605.359256][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.366063][ T31] do_syscall_64+0x174/0x580 [ 605.370790][ T31] ? trace_irq_disable+0x3b/0x140 [ 605.376869][ T31] ? clear_bhb_loop+0x40/0x90 [ 605.381615][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.388626][ T31] RIP: 0033:0x7fb1f9f5d68e [ 605.394430][ T31] RSP: 002b:00007fb1fad76e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 605.403928][ T31] RAX: ffffffffffffffda RBX: 00007fb1fad786c0 RCX: 00007fb1f9f5d68e [ 605.412763][ T31] RDX: 0000000000000020 RSI: 00007fb1fad77000 RDI: 0000000000000003 [ 605.421926][ T31] RBP: 0000000000000000 R08: 00007fb1fad76f04 R09: 000000000000000c [ 605.431493][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 605.440322][ T31] R13: 00007fb1fad76f58 R14: 00007fb1fad77000 R15: 0000000000000000 [ 605.449672][ T31] [ 605.452765][ T31] INFO: task syz.4.6100:26193 blocked for more than 145 seconds. [ 605.455166][T16198] bridge_slave_1: left allmulticast mode [ 605.462671][ T31] Not tainted syzkaller #0 [ 605.471785][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.479049][T16198] bridge_slave_1: left promiscuous mode [ 605.484719][ T31] task:syz.4.6100 state:D stack:24856 pid:26193 tgid:26191 ppid:16763 task_flags:0x400140 flags:0x00080002 [ 605.492674][T16198] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.502798][ T31] Call Trace: [ 605.510579][ T31] [ 605.514242][ T31] __schedule+0x17d9/0x56c0 [ 605.519018][ T31] ? trace_irq_enable+0x3b/0x140 [ 605.524963][ T31] ? __pfx___schedule+0x10/0x10 [ 605.530546][ T31] ? rcu_is_watching+0x15/0xb0 [ 605.536491][ T31] ? rcu_is_watching+0x15/0xb0 [ 605.541457][ T31] ? lock_release+0x4b/0x3c0 [ 605.549656][ T31] ? rcu_is_watching+0x15/0xb0 [ 605.555422][ T31] schedule+0x164/0x360 [ 605.559783][ T31] schedule_preempt_disabled+0x13/0x30 [ 605.566682][ T31] __mutex_lock+0x7bf/0x1550 [ 605.571744][ T31] ? __mutex_lock+0x5d4/0x1550 [ 605.577470][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 605.582286][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 605.588072][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 605.594194][ T31] ? radix_tree_lookup+0x240/0x290 [ 605.599385][ T31] genl_rcv_msg+0x10b/0x7a0 [ 605.604748][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.609928][ T31] ? ref_tracker_free+0x689/0x830 [ 605.615594][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 605.621095][ T31] netlink_rcv_skb+0x226/0x4a0 [ 605.626224][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.631336][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 605.637088][ T31] ? down_read+0x2be/0x330 [ 605.641698][ T31] genl_rcv+0x28/0x40 [ 605.646130][ T31] netlink_unicast+0x7bb/0x940 [ 605.651151][ T31] netlink_sendmsg+0x813/0xb40 [ 605.656289][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.661668][ T31] ? __might_fault+0xaf/0x130 [ 605.667015][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 605.672465][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 605.678511][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.684677][ T31] __sys_sendto+0x626/0x6c0 [ 605.689378][ T31] ? file_init_path+0x3b/0x5a0 [ 605.694919][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 605.700098][ T31] ? errseq_sample+0x40/0x70 [ 605.705743][ T31] ? rcu_is_watching+0x15/0xb0 [ 605.710677][ T31] ? fd_install+0x94/0x3d0 [ 605.715988][ T31] ? fd_install+0x306/0x3d0 [ 605.720644][ T31] __x64_sys_sendto+0xde/0x100 [ 605.726146][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.732384][ T31] do_syscall_64+0x174/0x580 [ 605.737677][ T31] ? trace_irq_disable+0x3b/0x140 [ 605.743062][ T31] ? clear_bhb_loop+0x40/0x90 [ 605.748783][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.756114][ T31] RIP: 0033:0x7f37e1b5d68e [ 605.760631][ T31] RSP: 002b:00007f37e2a9fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 605.769859][ T31] RAX: ffffffffffffffda RBX: 00007f37e2aa16c0 RCX: 00007f37e1b5d68e [ 605.778767][ T31] RDX: 0000000000000020 RSI: 00007f37e2aa0000 RDI: 0000000000000006 [ 605.787791][ T31] RBP: 0000000000000000 R08: 00007f37e2a9ff04 R09: 000000000000000c [ 605.796652][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 605.805487][ T31] R13: 00007f37e2a9ff58 R14: 00007f37e2aa0000 R15: 0000000000000000 [ 605.814371][ T31] [ 605.817512][ T31] INFO: task syz.4.6100:26197 blocked for more than 145 seconds. [ 605.826395][ T31] Not tainted syzkaller #0 [ 605.831375][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.841331][ T31] task:syz.4.6100 state:D stack:27568 pid:26197 tgid:26191 ppid:16763 task_flags:0x400040 flags:0x00080002 [ 605.853924][ T31] Call Trace: [ 605.857261][ T31] [ 605.860310][ T31] __schedule+0x17d9/0x56c0 [ 605.865633][ T31] ? trace_irq_enable+0x3b/0x140 [ 605.870688][ T31] ? __pfx___schedule+0x10/0x10 [ 605.876334][ T31] ? rcu_is_watching+0x15/0xb0 [ 605.881298][ T31] ? rcu_is_watching+0x15/0xb0 [ 605.886812][ T31] ? lock_release+0x4b/0x3c0 [ 605.891707][ T31] ? rcu_is_watching+0x15/0xb0 [ 605.897270][ T31] schedule+0x164/0x360 [ 605.901667][ T31] schedule_preempt_disabled+0x13/0x30 [ 605.907840][ T31] __mutex_lock+0x7bf/0x1550 [ 605.912830][ T31] ? __mutex_lock+0x5d4/0x1550 [ 605.918570][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 605.924001][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 605.929583][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 605.935994][ T31] ? radix_tree_lookup+0x240/0x290 [ 605.942150][ T31] genl_rcv_msg+0x10b/0x7a0 [ 605.947346][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.952477][ T31] ? ref_tracker_free+0x689/0x830 [ 605.957718][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 605.963969][ T31] netlink_rcv_skb+0x226/0x4a0 [ 605.969147][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.974918][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 605.980455][ T31] ? down_read+0x2be/0x330 [ 605.985680][ T31] genl_rcv+0x28/0x40 [ 605.989771][ T31] netlink_unicast+0x7bb/0x940 [ 605.995255][ T31] netlink_sendmsg+0x813/0xb40 [ 606.000245][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.006736][ T31] ? __might_fault+0xaf/0x130 [ 606.011867][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 606.017236][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 606.022777][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.029147][ T31] __sys_sendto+0x626/0x6c0 [ 606.034407][ T31] ? file_init_path+0x3b/0x5a0 [ 606.039672][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 606.045681][ T31] ? errseq_sample+0x40/0x70 [ 606.050428][ T31] ? rcu_is_watching+0x15/0xb0 [ 606.056126][ T31] ? fd_install+0x94/0x3d0 [ 606.060621][ T31] ? fd_install+0x306/0x3d0 [ 606.065499][ T31] __x64_sys_sendto+0xde/0x100 [ 606.070525][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.076835][ T31] do_syscall_64+0x174/0x580 [ 606.081667][ T31] ? trace_irq_disable+0x3b/0x140 [ 606.088127][ T31] ? clear_bhb_loop+0x40/0x90 [ 606.094183][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.100266][ T31] RIP: 0033:0x7f37e1b5d68e [ 606.105105][ T31] RSP: 002b:00007f37e2a7ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 606.114537][ T31] RAX: ffffffffffffffda RBX: 00007f37e2a806c0 RCX: 00007f37e1b5d68e [ 606.122670][ T31] RDX: 0000000000000020 RSI: 00007f37e2a7f000 RDI: 0000000000000007 [ 606.131454][ T31] RBP: 0000000000000000 R08: 00007f37e2a7ef04 R09: 000000000000000c [ 606.140505][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 606.149430][ T31] R13: 00007f37e2a7ef58 R14: 00007f37e2a7f000 R15: 0000000000000000 [ 606.158479][ T31] [ 606.161579][ T31] INFO: task syz.2.6104:26209 blocked for more than 145 seconds. [ 606.163129][T16198] bridge_slave_0: left allmulticast mode [ 606.169594][ T31] Not tainted syzkaller #0 [ 606.169608][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 606.169618][ T31] task:syz.2.6104 state:D stack:27568 pid:26209 tgid:26208 ppid:25104 task_flags:0x400140 flags:0x00080002 [ 606.177486][T16198] bridge_slave_0: left promiscuous mode [ 606.181505][ T31] Call Trace: [ 606.192255][T16198] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.206730][ T31] [ 606.224260][ T31] __schedule+0x17d9/0x56c0 [ 606.229127][ T31] ? trace_irq_enable+0x3b/0x140 [ 606.234695][ T31] ? __pfx___schedule+0x10/0x10 [ 606.240053][ T31] ? rcu_is_watching+0x15/0xb0 [ 606.245568][ T31] ? rcu_is_watching+0x15/0xb0 [ 606.251273][ T31] ? lock_release+0x4b/0x3c0 [ 606.256584][ T31] ? rcu_is_watching+0x15/0xb0 [ 606.261464][ T31] schedule+0x164/0x360 [ 606.266708][ T31] schedule_preempt_disabled+0x13/0x30 [ 606.272404][ T31] __mutex_lock+0x7bf/0x1550 [ 606.277676][ T31] ? __mutex_lock+0x5d4/0x1550 [ 606.282831][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 606.288096][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 606.293388][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 606.298892][ T31] ? radix_tree_lookup+0x240/0x290 [ 606.304317][ T31] genl_rcv_msg+0x10b/0x7a0 [ 606.309056][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 606.314818][ T31] ? ref_tracker_free+0x689/0x830 [ 606.320169][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 606.326920][ T31] netlink_rcv_skb+0x226/0x4a0 [ 606.332120][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 606.337804][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 606.344109][ T31] ? down_read+0x2be/0x330 [ 606.348625][ T31] genl_rcv+0x28/0x40 [ 606.352936][ T31] netlink_unicast+0x7bb/0x940 [ 606.358390][ T31] netlink_sendmsg+0x813/0xb40 [ 606.363935][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.369389][ T31] ? futex_unqueue+0x22/0x240 [ 606.374772][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 606.379750][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 606.385787][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.391263][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 606.396708][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.402525][ T31] ? lock_release+0x4b/0x3c0 [ 606.408213][ T31] ? import_iovec+0x73/0xa0 [ 606.412985][ T31] ___sys_sendmsg+0x2a5/0x360 [ 606.418582][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 606.425147][ T31] ? futex_wait+0x2a2/0x390 [ 606.429785][ T31] ? __fget_files+0x2a/0x420 [ 606.435280][ T31] ? __fget_files+0x3a2/0x420 [ 606.440298][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 606.446141][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 606.452785][ T31] ? rcu_is_watching+0x15/0xb0 [ 606.458883][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.466852][ T31] do_syscall_64+0x174/0x580 [ 606.471721][ T31] ? trace_irq_disable+0x3b/0x140 [ 606.477524][ T31] ? clear_bhb_loop+0x40/0x90 [ 606.482885][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.489910][ T31] RIP: 0033:0x7f9e3059ce59 [ 606.494986][ T31] RSP: 002b:00007f9e31505028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.504409][ T31] RAX: ffffffffffffffda RBX: 00007f9e30815fa0 RCX: 00007f9e3059ce59 [ 606.512715][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 606.521365][ T31] RBP: 00007f9e30632e6f R08: 0000000000000000 R09: 0000000000000000 [ 606.530813][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.539446][ T31] R13: 00007f9e30816038 R14: 00007f9e30815fa0 R15: 00007ffd74fe33c8 [ 606.548231][ T31] [ 606.551483][ T31] INFO: lockdep is turned off. [ 606.557479][ T31] NMI backtrace for cpu 1 [ 606.557499][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 606.557522][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 606.557535][ T31] Call Trace: [ 606.557543][ T31] [ 606.557551][ T31] dump_stack_lvl+0xe8/0x150 [ 606.557580][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 606.557604][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 606.557664][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 606.557689][ T31] sys_info+0x135/0x170 [ 606.557707][ T31] watchdog+0xfd7/0x1030 [ 606.557738][ T31] ? watchdog+0x1c7/0x1030 [ 606.557769][ T31] kthread+0x388/0x470 [ 606.557789][ T31] ? __pfx_watchdog+0x10/0x10 [ 606.557815][ T31] ? __pfx_kthread+0x10/0x10 [ 606.557834][ T31] ret_from_fork+0x514/0xb70 [ 606.557857][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 606.557877][ T31] ? __switch_to+0xc89/0x1420 [ 606.557907][ T31] ? __pfx_kthread+0x10/0x10 [ 606.557924][ T31] ret_from_fork_asm+0x1a/0x30 [ 606.557955][ T31] [ 606.557970][ T31] Sending NMI from CPU 1 to CPUs 0: [ 606.677208][ C0] NMI backtrace for cpu 0 [ 606.677230][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 606.677253][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 606.677265][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 606.677298][ C0] Code: fc 7f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 97 21 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 606.677317][ C0] RSP: 0000:ffffffff8e607de0 EFLAGS: 00000246 [ 606.677335][ C0] RAX: ffff88812527c000 RBX: ffffffff819a5170 RCX: 0000000080000001 [ 606.677351][ C0] RDX: 0000000000000001 RSI: ffffffff8c291100 RDI: ffffffff819a5170 [ 606.677365][ C0] RBP: ffffffff8e607eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 606.677381][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 606.677396][ C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000 [ 606.677411][ C0] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 606.677428][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 606.677442][ C0] CR2: 00007ff863200000 CR3: 000000000e746000 CR4: 00000000003526f0 [ 606.677462][ C0] Call Trace: [ 606.677469][ C0] [ 606.677477][ C0] default_idle+0x9/0x20 [ 606.677506][ C0] default_idle_call+0x72/0xb0 [ 606.677535][ C0] do_idle+0x2e0/0x540 [ 606.677567][ C0] ? __pfx_do_idle+0x10/0x10 [ 606.677600][ C0] cpu_startup_entry+0x43/0x60 [ 606.677629][ C0] rest_init+0x2de/0x300 [ 606.677648][ C0] start_kernel+0x38a/0x3e0 [ 606.677814][ C0] x86_64_start_reservations+0x24/0x30 [ 606.677865][ C0] x86_64_start_kernel+0x137/0x1b0 [ 606.677887][ C0] common_startup_64+0x13e/0x157 [ 606.677922][ C0] [ 606.872221][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 606.879708][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 606.889832][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 606.900197][ T31] Call Trace: [ 606.903608][ T31] [ 606.906784][ T31] vpanic+0x56c/0xa60 [ 606.911095][ T31] ? __pfx_vpanic+0x10/0x10 [ 606.915629][ T31] ? rcu_is_watching+0x15/0xb0 [ 606.920435][ T31] ? trace_irq_enable+0x3b/0x140 [ 606.926370][ T31] panic+0xc5/0xd0 [ 606.930484][ T31] ? __pfx_panic+0x10/0x10 [ 606.934940][ T31] watchdog+0x1030/0x1030 [ 606.939387][ T31] ? watchdog+0x1c7/0x1030 [ 606.943925][ T31] kthread+0x388/0x470 [ 606.948321][ T31] ? __pfx_watchdog+0x10/0x10 [ 606.953119][ T31] ? __pfx_kthread+0x10/0x10 [ 606.958181][ T31] ret_from_fork+0x514/0xb70 [ 606.962796][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 606.968104][ T31] ? __switch_to+0xc89/0x1420 [ 606.972984][ T31] ? __pfx_kthread+0x10/0x10 [ 606.977687][ T31] ret_from_fork_asm+0x1a/0x30 [ 606.982575][ T31] [ 606.986254][ T31] Kernel Offset: disabled [ 606.990765][ T31] Rebooting in 86400 seconds..