last executing test programs: 27.186678267s ago: executing program 4 (id=2994): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="18080020000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000900)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000940)=""/222, 0x0, 0x8}, 0x78) 18.631483544s ago: executing program 1 (id=3043): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_delrule={0x30, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'caif0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f00000000c0), 0x0}, 0x20) connect$inet6(r1, &(0x7f0000000400)={0xa, 0xfffe, 0x0, @mcast1={0xff, 0x4}}, 0x1c) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x0) 18.411030011s ago: executing program 1 (id=3047): bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="d300000010010000180a00000000000000000000000000009500000000000000"], &(0x7f00000010c0)='GPL\x00', 0x4, 0xc, &(0x7f0000001100)=""/195}, 0x23) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0xa, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)='Q', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x40408d1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0x0, 0x10, &(0x7f0000000e40)}, 0x42) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c010000100013"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x40080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x419cb969}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x24004000) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000500)="96fbaf098095f360099219b2f0b3f019b75b597793a9ed7be067cfb1cd14b95b4f4ae3074b6eb3a2addfa61060458a2f4ec7785bc42bbf7c99cdd364bf9537c4933b9fa3dcd386c9669c2dd4bc618fca36e038915655c5cdf45e6d19113a722fda5b3d29e0697194f4a56484904db1368a60f7d4e2d075d28b2158b1e95fe9f76cc8a65bde9d33553ed0116d584167a216d64a23480d2b169723ff182db1d36424722f029bdc6f8358f8fadb441834c7487ab948c1789f1bf6c4e48b5c6e5311aa634d7ba0a6bb2f50c91d09c47e3c7521905b02ad3fa3039ea3", 0xda}], 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000340)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000d90400000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB='\x00\x00\x00\x00;\x00\x00\x00\x00\x00\x00\x00!'], 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f00000002c0)="020000000080ffff", 0x8) syz_emit_ethernet(0x18d, &(0x7f0000000640)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "67a1b0", 0x157, 0x21, 0xff, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0x88, 0x3, '\x00', [@generic={0x8f, 0x5, "a52164d674"}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x6}]}, @fragment={0x6c, 0x0, 0x5, 0x1, 0x0, 0x8, 0x65}, @srh={0x2, 0xc, 0x4, 0x6, 0x10, 0x8, 0xffff, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x31}, @empty, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @local]}, @srh={0x89, 0xa, 0x4, 0x5, 0xf8, 0x28, 0x10, [@mcast2, @private2, @mcast1, @loopback, @mcast1]}, @fragment={0xc, 0x0, 0x10, 0x1, 0x0, 0x9, 0x65}, @routing={0x0, 0x2, 0x1, 0x8, 0x0, [@mcast2]}, @fragment={0x2c, 0x0, 0x0, 0x1, 0x0, 0x2, 0x63}], {{0x4e24, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x1, 0x2, "2cb88e", 0x6, "7e65bf"}, "1fddd66b9638ddb596fc1eff433bbe68c70c68f3b07ab7fd326886f3d721ae15c6a6924dc218076fc5603debc43c82"}}}}}}, 0x0) 17.946933763s ago: executing program 2 (id=3049): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000ac0)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1001}, 0x1c, 0x0}}], 0x1, 0x1) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000540)={0x10, 0x0, "10d16f698cc0251832aedf5fd71a6372"}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000480)={'dummy0\x00', &(0x7f00000004c0)=@ethtool_cmd={0x2c, 0x0, 0xffffffff, 0x4, 0x0, 0x2, 0x4, 0x5, 0x1, 0xfc, 0x0, 0x1, 0x6, 0x68, 0x9, 0xab, [0x6, 0x1001]}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x2}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000940)={0x41, 0x12}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000980)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000009c0)={0x41, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000a00)={0x41}, 0x1be) bind$tipc(r5, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000a40)={&(0x7f0000000a80)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x7, 0xb}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000840)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000008c0)="bad330fbc93f0700000000ea0756a85d86ddbe5dc25eb6c43848678a5aafaf629e8212ecccbb27a97b379d7390f08bb649c882a400e6e7f543db", 0x3a, 0x0, &(0x7f0000000900)={0x11, 0x8100, r11, 0x1, 0xdb, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/307], &(0x7f0000000180)='GPL\x00', 0x2, 0xba, &(0x7f0000000200)=""/186, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) 17.806631771s ago: executing program 1 (id=3050): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x1205, 0x0, &(0x7f00000002c0), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x56}, 0x28) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x18, 0x107, 0x70bd25, 0x0, {0x4b, 0x7c, 0x3f}, [@typed={0x8, 0x4ba, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48801}, 0x8840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x17, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000008c00000000000000c50e000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0920000000000055090100ffffffff950000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff9702000008000000b7035e00080091000000000000b7020000030000008500000085000000b700000000ffffffff00000000000000"], &(0x7f0000000c80)='GPL\x00', 0xf, 0x1002, &(0x7f0000000cc0)=""/4098, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) 17.622268846s ago: executing program 1 (id=3053): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) (async) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) epoll_create1(0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x3ff, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0x4}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xffffffffffffffff}]}}]}, 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000005f00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152cd2d6cd25956eaec876858a5f5f9da686ab52bf54d62de5ea1ed7375970525d7b079986a72530b1244ac7bff4ea6e092cfac6d8f55339db56379dd861b80aa3b800"/154, 0x9a}, {&(0x7f0000000600)="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", 0xea7}], 0x2, 0x0, 0x0, 0x4040000}], 0x1, 0x800) (async) sendmmsg$inet_sctp(r2, &(0x7f0000005f00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152cd2d6cd25956eaec876858a5f5f9da686ab52bf54d62de5ea1ed7375970525d7b079986a72530b1244ac7bff4ea6e092cfac6d8f55339db56379dd861b80aa3b800"/154, 0x9a}, {&(0x7f0000000600)="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", 0xea7}], 0x2, 0x0, 0x0, 0x4040000}], 0x1, 0x800) socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x44, 0xc, "092441c20949e0afc65b"}]}}}], 0x40}, 0x20002800) (async) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x44, 0xc, "092441c20949e0afc65b"}]}}}], 0x40}, 0x20002800) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$unix(0x1, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) write$tun(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08003800001c00006000002f"], 0x2e) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r11], 0x20}, 0x1, 0x0, 0x0, 0x20004044}, 0x10) bind$packet(r2, &(0x7f0000000080)={0x11, 0xf7, r11, 0x1, 0xfd, 0x6, @broadcast}, 0x14) (async) bind$packet(r2, &(0x7f0000000080)={0x11, 0xf7, r11, 0x1, 0xfd, 0x6, @broadcast}, 0x14) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r12 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r12, 0x0, 0x0, 0x60, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 17.296678738s ago: executing program 2 (id=3055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048820) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@gettclass={0x24, 0x2a, 0x129, 0x2, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0xc}, {0xfff3, 0xfff3}}}, 0x24}}, 0x40004) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}, 0xffff}, {{0x0, 0x0, 0x0}, 0x40}], 0x2, 0x10040, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r6) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x840) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r8 = socket$netlink(0x10, 0x3, 0x5) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f0000000780)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_emit_ethernet(0x74, &(0x7f00000007c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=@newtaction={0xd4, 0x30, 0x9, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_bpf={0xbc, 0x1, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x9, 0x2, 0x9, 0x4}, {0x7, 0x2, 0x4d}, {0x129, 0x8, 0x7, 0x3}, {0x5, 0x1, 0x1, 0x5}, {0xfff, 0x40, 0xfd}, {0x6, 0x3, 0xbf}, {0x5, 0x2, 0x7}]}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61, 0x0, 0x2, 0x20}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=@newtaction={0xd4, 0x30, 0x9, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_bpf={0xbc, 0x1, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x9, 0x2, 0x9, 0x4}, {0x7, 0x2, 0x4d}, {0x129, 0x8, 0x7, 0x3}, {0x5, 0x1, 0x1, 0x5}, {0xfff, 0x40, 0xfd}, {0x6, 0x3, 0xbf}, {0x5, 0x2, 0x7}]}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61, 0x0, 0x2, 0x20}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}}, 0x0) 17.194834519s ago: executing program 4 (id=2999): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ff"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/9, 0x9}], 0x1, 0x0, 0x18}, 0xb7}], 0x1, 0x40002021, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x5, 0xb, &(0x7f0000000b40)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0xb, &(0x7f0000000c80)=ANY=[], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000d80)="14051b5ae730a16b38ec3c25a36f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000200)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f00000003c0)=ANY=[], 0x98) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f00000004c0)=@fragment={0x12, 0x0, 0x48, 0x0, 0x0, 0x1b, 0x67}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000940)={0x0, 0x1c, &(0x7f0000000c80)=[@in6={0xa, 0x4e21, 0x44, @remote, 0x5}]}, &(0x7f0000000dc0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000e00)={r5, 0xffff}, &(0x7f0000000e40)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="d5e1310ae4abb8d9bf85b5da5611c4d33b5bab4a744c5449c0809ba6b25f00873d04e7a06e4b88195315c7924709af5200436abb822e71c77ec8961a4196434fafd74bf705d8896829820557b6df002be16a79ee18905820c7ea8589a2354710baacb0130e95119a54b35e1554eb1d832ba6cb2d9bf5239ea5bd0e10b704118c9a20b217f2c16beabc226dea98f9ff7b9f1e0550d5425476cdc7f6742ca4ab553db15d1445eed7e3cc6e4138ad08ed9c6ff27b51fd8b03414e18505feebd3925acf53e19b0cf24eb8675c3998092207854bfd8997971ba3f3fd648135eb4a33beeab78ea92990a881b10", @ANYRES32=r7, @ANYRESDEC=r6, @ANYRES32=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000940)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000a40)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000003d1c00000500000018ee00801400020073797a5f74756e00000000000000000005000200fc0000000800090002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x40000) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r11, 0x3a, 0x1, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000040)={'macvtap0\x00', @ifru_settings={0xffffffff, 0x80000000, @cisco=&(0x7f0000000000)={0xc7, 0x2}}}) 16.930625346s ago: executing program 3 (id=3056): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x18, 0x107, 0x70bd25, 0x0, {0x4a, 0x7c, 0x3f}, [@typed={0xc, 0xb8, 0x0, 0x0, @u64=0x1000006}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040811}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x24}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 16.844121704s ago: executing program 3 (id=3057): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000800)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0xfffffffd, 0x4, 0x9, 0xcc26, 0x0, 0xae, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x6, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x5, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0xce, 0x4009, 0x0, 0x4, 0x1000, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x4, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x8, 0x20006, 0x5, 0x6, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da3, 0x1fc, 0x3, 0x4]}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a80)={'veth1\x00', &(0x7f0000002180)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0xfffffffd, 0x4, 0x9, 0xcc26, 0x0, 0xae, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x6, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x5, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0xce, 0x4009, 0x0, 0x4, 0x1000, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x4, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x8, 0x20006, 0x5, 0x6, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da3, 0x1fc, 0x3, 0x4]}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000023c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000002400)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002440)=@raw={'raw\x00', 0xe501, 0x3, 0x200, 0x0, 0xa, 0x1000000, 0xd8, 0x0, 0x1c0, 0x230, 0x230, 0x1c0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x200, 0x9, 0xfffffffe, 'syz1\x00', 'syz0\x00', {0x8290}}}}, {{@ip={@empty, @loopback, 0xff, 0xffffff00, 'team_slave_1\x00', 'vlan0\x00', {0xff}, {0xff}, 0x88, 0x1, 0x48}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000a80)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0xe501, 0x3, 0x200, 0x0, 0xa, 0x1000000, 0xd8, 0x0, 0x1c0, 0x230, 0x230, 0x1c0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x200, 0x9, 0xfffffffe, 'syz1\x00', 'syz0\x00', {0x8290}}}}, {{@ip={@empty, @loopback, 0xff, 0xffffff00, 'team_slave_1\x00', 'vlan0\x00', {0xff}, {0xff}, 0x88, 0x1, 0x48}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x4002}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000240)="0b68f3", 0x3}, {&(0x7f0000000280)='\x00\x00\x00', 0x3}, {&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x800}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x3, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000580000005800000002000000000000000200000d0a00000001000000030000000500000002000000000000000002000604"], &(0x7f0000000f40)=""/4079, 0x72, 0xfef, 0x1, 0x410}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000300)={0x2, 0xffffffffffffffff, 0x81000}, &(0x7f0000000340)=0xc) r8 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r8, &(0x7f0000002140)={&(0x7f0000000540)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000580)="483971ac079df1c8c36ee05450ca019950240f", 0x13}, {&(0x7f0000000d40)="c2e9a366a33a85374f6aa6a1a0f4a154da791cb418495a4be1e814453c7915ef04138651b94bb17ccab6f2df51dd2386bccfba7702c5beff37a3c943f3ec9e4fa128c9d6c96c1f8c092e92c80b29332ed458e4b02e9f927656384d74f2565b442cb010ebd114d926e0872573ad52", 0x6e}, {&(0x7f0000000dc0)="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", 0xfe}, {&(0x7f0000000ec0)="d0e77d937920a3371c7214d61722575210c045be689481fb0da03c6aaf82dc97ed9bfc9b3184459dd69057ed44569a62d2e49a33167f8d7c18aeabe3a086653a64aedefce932c828fe3941059d7fbe3fff", 0x51}], 0x4, &(0x7f0000001f80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x2e}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1bd}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@rr={0x7, 0x17, 0xd5, [@rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, @rand_addr=0x64010101]}, @noop, @timestamp_prespec={0x44, 0x14, 0xf4, 0x3, 0x8, [{@rand_addr=0x64010102, 0x9}, {@multicast1, 0x9}]}, @timestamp_addr={0x44, 0xc, 0x5e, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x2}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x4a, 0x3, 0x4, [{@private=0xa010100, 0xe}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x80}, {@local, 0x4}]}, @generic={0x86, 0x6, "4a3f018d"}]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@rr={0x7, 0x13, 0x21, [@private=0xa010100, @private=0xa010102, @remote, @empty]}, @ssrr={0x89, 0x17, 0xf0, [@empty, @broadcast, @private=0xa010102, @broadcast, @multicast2]}, @cipso={0x86, 0x26, 0x0, [{0x3, 0x6, "e9c77f70"}, {0x5, 0x9, "5efdb2ca1995d6"}, {0x2, 0x3, '<'}, {0x5, 0xe, "b47150251a128de7c8376f9e"}]}, @ssrr={0x89, 0x7, 0x7b, [@local]}]}}}], 0x190}, 0x0) r9 = epoll_create1(0x0) pwritev(r9, &(0x7f00000007c0)=[{&(0x7f00000004c0)="64556d10d8e18d155ebd1205a67f6479a826bf96476cc4570e56b2e85700ffc472ab918d3a7fbc28a042ba9a6a6bde", 0x2f}, {&(0x7f0000000600)="3af13a9540be7285ba41672e0f8cae87e41d972c06c3b29e4f0f443da29cbaba05adb9ed392b776012152426e429808298edf743a34fbea56affe00e99dbc6e81eb334a4edc9b135a89acc49338222e12773d2836d85c99d089bef4f838fcbad56957c8edf1589497ce3aeacb4a534c043b749bf4f8ac744dfe38ec41831b5fb211164c5619865080dbc943af71c1fc68871eb7efa9705dda55e737dc31d8cbbd11d0ad21f1f46fd17219bfcf88e60a26d616e1c878cfe8cbbca8c251fd691c165477d56", 0xc4}, {&(0x7f0000000700)="29c570b353e5ac79958cae78da24541d6de3f019cf18f07d3f787e5597dbabc360067851a919b674c653441de4a4f911836e2d671b455bbb5de8c1ef3cac96fc63fb6932f0fa28581adf624c81444d783135f20050f66397df2d19577e2e7fcb43133ac9acc49c7bd95007ef4152daa615c71e545f2c56df4cb1d1e61c00605bf0e39aee4437efa748bf370fb20f73d3dab2465446dd9c9c2ddf2dc0f1bf468612", 0xa1}], 0x3, 0x800, 0x2) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={0x2, 0x5, 0x0, 0x200, 0x14a3, 0xa4, 0x1000, 0x4, {0x2, @in6={{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x2}}, 0x400, 0x5, 0x1, 0x9, 0x80}}, &(0x7f0000000440)=0xb0) setsockopt$inet_sctp6_SCTP_EVENT(r7, 0x84, 0x7f, &(0x7f0000000480)={r10, 0x0, 0x1}, 0x8) 16.535176842s ago: executing program 3 (id=3059): r0 = socket(0xa, 0x1, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x1, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000140)=0x2, &(0x7f00000003c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r3, &(0x7f0000000440)}, 0x20) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x81, @loopback, 0xfffffe01}}}, 0x108) close(0x3) 16.533560592s ago: executing program 1 (id=3060): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.49518059s ago: executing program 2 (id=3061): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x30, 0x1, 0x4, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x17, 0x0, 0x0, {{0x9}, {0x58}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0xc0000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x8c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa], [0x3]}}]}}]}, 0x8c}}, 0x0) r3 = socket(0x2b, 0x1, 0x1) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r5, 0xf, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0}, 0x40) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0x8000000, 0x0, 0xff, 0x18, 0x4, 0x96}, 0x22) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 16.457999908s ago: executing program 0 (id=3062): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="7ba1c371bc8cb36d22f6aabfcf1d4af106e1afbcfbd9e9f767c6908b25a6a9509159993c9f0223c05a65694c0edfda58854a6132b2cc8a19e60874a294c192ac7699bfd50a12776df81088fcbe1d368610d42cddfeb56db9ebd47176faefe10de99c6ebe", 0x64}], 0x1}, 0x20000084) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000004c0)={0xa, 0xe22, 0x0, @rand_addr, 0xfffffffe}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000500)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000600)=0xfffc, 0x4) bind$inet6(r2, &(0x7f0000000580)={0xa, 0xe22, 0x8000}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f00000005c0)="ed6606c370a5", 0x6) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100099b6f9cd9230", @ANYRES32=r6, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r6, @ANYBLOB="0800020001"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000000440)={0x7, 0x7, 0x3}, &(0x7f0000000480)=0x28) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffc, '\x00', 0x0, r8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x1c, &(0x7f0000000a80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf1}}}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.358402375s ago: executing program 3 (id=3063): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=@newtaction={0x488, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x5, 0x3, 0x4, 0xfffffff7, 0x1ff, 0x0, 0x8, 0x8, 0x1, 0x5, 0x43, 0x4, 0x5, 0x7ff, 0xc, 0x8, 0x0, 0x4, 0x6cf, 0xfffffff8, 0x57, 0x4, 0x5, 0xb781, 0x124, 0x8, 0x8, 0x4a, 0x3, 0x5, 0x3, 0x401, 0x6, 0xc37e, 0x7, 0x9d, 0xe5, 0x3, 0x6, 0xfffffbff, 0xffff4863, 0x3, 0x5, 0x1, 0x1, 0x1, 0x8, 0x5, 0x1, 0x3, 0x81, 0x9, 0x8001, 0x100, 0x400, 0x200, 0x0, 0x0, 0x9, 0x5, 0x917c, 0x6, 0xc, 0x9, 0x80000001, 0x1, 0xb, 0x4, 0x8a, 0x9, 0x5, 0x2, 0x0, 0x8000, 0x3, 0x52, 0x4, 0x0, 0xfadb, 0x0, 0x5, 0xfffeffff, 0x9, 0x8, 0xf, 0x5, 0x8, 0x200, 0x2, 0x9, 0x1, 0x200, 0x7, 0xf, 0xfffffd97, 0x6, 0x40, 0x5, 0xc000000, 0x70c5daea, 0x5, 0x7, 0x8, 0x6, 0x800, 0x4, 0x5b, 0x2, 0x91b, 0xd4, 0xd6, 0x4, 0x0, 0x6, 0x61, 0x55, 0x7, 0x9, 0xfffffffe, 0x10, 0x6, 0xba, 0x9, 0x81, 0x5, 0x4, 0x4, 0x4, 0x800, 0x72d, 0xb2, 0x8, 0x4, 0x10000, 0x9, 0x1, 0x1, 0x5, 0x5, 0x1, 0xd, 0xffffffff, 0x800, 0x2, 0xe, 0x3, 0x7, 0x0, 0x200, 0x8, 0x3, 0x6, 0xf, 0x7, 0x8, 0x40, 0xe1, 0x3, 0xf, 0x8, 0xa, 0x7, 0xffffffff, 0x4a0e6426, 0x6, 0xffffffff, 0xc0000000, 0x1, 0x3d505a8, 0x4, 0xfcf, 0xe2, 0x7fff, 0xa, 0x7, 0x0, 0x4, 0x4, 0x6, 0x59, 0x32, 0x3, 0x1, 0xff, 0x40, 0x3, 0x80000001, 0x7, 0x5, 0xc, 0x4, 0xfffffffc, 0x9, 0x2, 0xfffffff8, 0x3, 0x2, 0xfffffff7, 0x0, 0x8, 0x3, 0x100, 0x0, 0x7, 0x6, 0x0, 0x0, 0x40, 0x9, 0x7, 0x101, 0x60000000, 0x1, 0x3, 0x8, 0x101, 0x7fff, 0x0, 0x679900, 0x3, 0xbe, 0x1, 0x80000000, 0x7, 0x6, 0x40800, 0x4, 0xfa9, 0x10, 0x5, 0x63, 0x7, 0x9, 0x8000, 0x82, 0x6, 0x2, 0x0, 0x101, 0x9, 0xf85b, 0x7fffffff, 0x600000, 0x5, 0x0, 0x83, 0x8000, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x4, 0xfffffffc, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x2, 0x3, 0x8, {0xb0, 0x0, 0xfeb4, 0x7, 0x100, 0x6}, {0x0, 0x2, 0xb, 0x8001, 0x4, 0x200}, 0xb, 0x7, 0x5}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x488}}, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000e80)={&(0x7f0000000e00)=[{&(0x7f0000000b40)="7fcb6db482b0237720c0c8416e881c8ad5f93f1630e294ffe2bffe1214b53156733167ca49cfa3fedec2c210c989a9a7e5fe86fe6d3a96b54890f975b5c7c216b42363fbd96d1e8b5ce45d79d3a4ec723392a3c81bbc490aa9cde7a7269b4979de366bd4e392", 0x66}, {&(0x7f0000000bc0)="82f59f572ff16a22fb098cae412eb7c9383c97656dbf3ff88d816ce8b2423322903a9e884f88a30f", 0x28}, {&(0x7f0000000c00)="e022d11f4b3b2e2b29eb09435bf8937fe1ab17ea70362971c169bebff7c5aed2a0dd051464021c9dc02286b36782fa7ce3ac7c7dc9207be6e9abe21334b5f7db2d0a0836004659001d7c1bede86809fccabafec40af451d109dd79519a4e5966cec72d2914a737679c1eaea26975a28ec4ef704aa000d94a79a8b5101fa196fc3a78dd18", 0x84}, {&(0x7f0000000cc0)="db2297552c0c526305b06791a8ac9b7a7caa13a1a3a14bc2f6e716227ed741192b04277094f2fdf07b0188895650db5f803bc52fbfa736617b90dba76ac9772c753551404ed5198af92e09c194f4f0eff0f3e668c5ea2c3a94f1af461b0d7b460e29131a6685f80a8c77bbdd805e93983c0db7c276f44894014d2ee277cc327c8b8be8db0ece4fbb34597d62be68062993e2d4b67f6c950e5524f103f9b7a9084d939cc4cade927529aad9b6fc5107f6251b0f2f46c760236475ea14e9", 0xbd}, {&(0x7f0000000d80)="76e33031975753febfbf05ada00d6785afac85c8c24a7fef3b07d40bcfaa6187e322f92c64661889efd89a53e39c42b194245d723c9c", 0x36}, {&(0x7f0000000dc0)="9aefb8d7d42726df7476e87622424dc56702ef2ee14ac43da575443b21532a6799bc", 0x22}], 0x6, 0x316, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x79}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="58000000020601020000000000000000000000080c000780080012400006000211000300686173683a6e65742c6e65740000000005000500020001000500040000000000090002007327e9310000000005000100070000009ac2bc1c69b138765426ffebb6dce6d6c14682b12bf75d36aa08067000a4bcf7dfaea9e56f1040a14fa2aab53e88d4c7d8e18b856a81c7bd9b86896e00ba4ed10e50c666ca50b786664103b9c0fdeccc5338c2fe4c32af922c94ecb417860439db5e5a9dd56546ab84444380f5d3b730177cf5797f13afb902de4a3f3b0fbab1a7602a66"], 0x58}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000012c0), r4) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[@ANYBLOB="eb88000e", @ANYRES16=r5, @ANYBLOB="b3f82abd7000fcdbdf251200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x800) syz_genetlink_get_family_id$net_dm(&(0x7f0000001280), r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff0000}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x3, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=@delchain={0x3c, 0x65, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xb}, {0x1, 0x6}, {0x10, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x5}]}}]}, 0x3c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740), &(0x7f0000001780), 0xf501, r8}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800), 0x0, 0x7, r8}, 0x38) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001080)=@bpf_lsm={0x6, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000001180)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000011c0)={{r7}, &(0x7f0000001200), &(0x7f0000001240)=r9}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={0xffffffffffffffff, 0x18000000000002a0, 0x36, 0x0, &(0x7f00000015c0)="b9fe030768045c8c989a14f088a8657986ddd510e921ff2e03d235c95a9ed6fcd93f99fa71a5ba17f82f9e63908527e23589fdad7fac", 0x0, 0x9b, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000001"], 0x122}}, 0x0) 16.236140964s ago: executing program 2 (id=3064): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r0, 0xb1b, 0x70bd2a, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x2, [0x0, 0x9]}}) 16.192450568s ago: executing program 4 (id=3065): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1546], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 16.12148829s ago: executing program 2 (id=3066): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000540)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000580)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x5}, 0x5f) sendmmsg$inet6(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)='/', 0x1}], 0x1}}], 0x1, 0x4001c00) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0], 0x0, 0x2e, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000e00)={@ipv4={'\x00', '\xff\xff', @empty}, 0x69, r4}) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10048010}, 0x4850) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000a00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r6, &(0x7f0000000a40)=[{{&(0x7f0000000b00)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x0, 0x3, 0x1, 0x3, {0xa, 0x4e22, 0xffffffff, @local, 0x80}}}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="100000000000001e0c7e420000000000"], 0x10}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000bc0)=@ll={0x11, 0x11, 0x0, 0x1, 0x6, 0x6, @link_local}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c80)="f9c62f9548987c8f3bd75d285bf2ec7a8de660ff12d5df1d38dba8194038dd7d8165d826", 0x24}, {&(0x7f0000000cc0)}], 0x2}}], 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@ipv6_getmulticast={0x14, 0x3a, 0x800, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000540)={0x200000000000001}, 0x8) (async) connect$inet6(r3, &(0x7f0000000580)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x5}, 0x5f) (async) sendmmsg$inet6(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)='/', 0x1}], 0x1}}], 0x1, 0x4001c00) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0], 0x0, 0x2e, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) (async) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000e00)={@ipv4={'\x00', '\xff\xff', @empty}, 0x69, r4}) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10048010}, 0x4850) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(r6, &(0x7f0000000a00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmmsg(r6, &(0x7f0000000a40)=[{{&(0x7f0000000b00)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x0, 0x3, 0x1, 0x3, {0xa, 0x4e22, 0xffffffff, @local, 0x80}}}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="100000000000001e0c7e420000000000"], 0x10}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000bc0)=@ll={0x11, 0x11, 0x0, 0x1, 0x6, 0x6, @link_local}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c80)="f9c62f9548987c8f3bd75d285bf2ec7a8de660ff12d5df1d38dba8194038dd7d8165d826", 0x24}, {&(0x7f0000000cc0)}], 0x2}}], 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x94) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@ipv6_getmulticast={0x14, 0x3a, 0x800, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) (async) 16.062384896s ago: executing program 4 (id=3067): unshare(0x2a020400) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x100, 0x4) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xffffffffffffffcf, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x80) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'veth1_macvtap\x00', &(0x7f0000000b80)=@ethtool_eeprom={0x43, 0x2, 0x9, 0xf1, "481639f8fad0d2bc5c4b96d0429129aee41f83c49c9bf507ea077e14876fe7be54e60b268a3984738e25f0973fedd43a40909345139fb91468893c080905f1be13e76f42f11bf1ed814363526e61bba014b19a6c1aaa12790bce1b2f55f8c2b732be5833f8c29c417c2a94a6f6faaeb5ebc16b5f350ab8fdf709372b3cb32c506d9738cf339bd75f0759b72a6dc5e1fe715f4074ba6a638425357851f1137503e956ea866319b9a0984e24ce1c78243c027b7f227cc0369e2be92fe9ad3a73ba31b2ee04a0b7a41c4af4e7b2a35774038ca89904a6926cd6b1419594401f5e21ec7b1f4431465e04c71345b4b8488aa907"}}) recvmmsg$unix(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x100, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x1c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x3}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={r3, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x6, 0x7}, &(0x7f0000000440)=0x90) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, 0x0, &(0x7f00000000c0)=0x37) setsockopt(r0, 0x11b, 0x9, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, 0xffffa897}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000003744337625d2000000000085000000a8000000850000", @ANYRES8=r1], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000940)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000a40)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000b40)=0x2, 0xf6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000800)={r5, 0x0, 0x0}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cgroup.controllers\x00', 0x275a, 0x0) 16.028229911s ago: executing program 0 (id=3068): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "bb2cd9893bc31f80718336d9bd3517076db9ad1f52120d8be6bbf81cd81ec27500d000", 0xf}, 0x60) (async) unshare(0x2c020400) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xd2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x1, 0x5}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x2400c800) (async) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) writev(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000020000000000000070029dd7d9fb0239009000"/32], &(0x7f0000000080)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 15.839187483s ago: executing program 0 (id=3069): unshare(0x600) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb090000000000000000000c0000000c000000d80000000000000000100000000000000000"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x100000, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000400)=""/177}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000d25000000000000000000000181100000d2540e2f1be2fa16aaf257bdb80bccba7eb5441cbb38b28615ba78eaa6400d464e2a501e4d1910be9fcb998d6dcfb73e2c6ff11529791ae3f2da781e34b296fade3d6bb65bb6cea7d95d081e2b10f7c97375eff9ee1251d4ffa6da76c28c5c94aa9bdb5f1a6efc95702c32833fcb13479ab7ff86f5535ca4fd56a56031d6dae38a9eaf3cf6007c1069e361756a2db66949dd2a9c2386ad3f0dcd774be586fb11299716e0d8e30cfe1e61b358dae01c02160e0eee23235b001c8874debc100db7d0dd463ec", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time_for_children\x00') r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$NS_GET_PARENT(r3, 0x8004b709, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r2}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x1, 0xffffffffffffffff, 0x80000}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000100)={0x1, 0x8001}, &(0x7f0000000140)=0x8) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000780)=0x0) bind$nfc_llcp(r7, &(0x7f00000007c0)={0x27, r9, 0xffffffffffffffff, 0x6, 0x0, 0xff, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f5237c9c58a8f60d4f1700000000000200000000001900", 0x3c}, 0x60) listen(r7, 0x40) accept4$nfc_llcp(r7, 0x0, 0x0, 0x80800) clock_gettime(0xfffffffb, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r10, 0x29, 0x4, &(0x7f00000008c0)=0x4, 0x4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'sit0\x00', 0x0}) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000940)=0xf3f, 0x4) sendto$packet(r11, &(0x7f0000000980)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000a00)={0xc9, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) close(r8) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000180)={r6, 0x1, 0x6, 0xd09}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 15.732443619s ago: executing program 3 (id=3070): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x114, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x103, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff73", @typed={0xc, 0xe9, 0x0, 0x0, @u64=0xd0}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d8e3484d9c5998b3"}}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000000000)="11c9064268e9", 0x6}], 0x2}, 0x40) (async) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_CARRIER={0x5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000740)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_opts(r11, 0x0, 0xd, 0x0, 0x0) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r12, 0x0, 0x2e, &(0x7f0000000340)={0x0, {{0x2, 0xfffe, @multicast1}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) (async) sendfile(r5, r5, 0x0, 0x9) 15.554887604s ago: executing program 1 (id=3071): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)='syzkaller\x00'}, 0x48) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, 0x34}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bind$unix(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r6 = socket(0x2, 0x3, 0x100000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r7 = socket$inet6(0x10, 0x800, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000001400090527bd7000fcdbdf25021f2200", @ANYRES32=r9, @ANYBLOB="080004f06301010408000800000100000800e8c01f570200e0000002080001000000000008000a0000000000d7c6e3e2025b0cf15d206dc586bec85a3b3353c7b417d99c00bbc4031450952c759d6f21a6cd0da909473b8162114ffa1192ba1aa46847455dea0bbbaf49b14f3974c6c4774445be121ba3701dd07343b8606026"], 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0) sendto$inet6(r7, &(0x7f0000000640)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt(r6, 0xff, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010225bd7000fddbdf250300000005000a00000000000c0006000100000000000000100007800c00018008000100", @ANYRES32=r5, @ANYBLOB="08000100000000000c00050002000000000000000c000800210c00000000000005000a00280000000c000200ff000000000000000800010000000000100007800c000180080001", @ANYRES32=r6, @ANYBLOB="6d8f16533671bc9391003359a91a0d55594d037380439f4d62a52c00fb7f4d5cc31cd2d862282fcd9a95d571568742fbc02604e748a7821d8e3d78be2280acf436c47874689d014a6dfe9c3d867f753049cadec4e8b4f974136e466b920c33a7e1ce"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x44) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000a00000000000007000000080005007f000001"], 0x1c}}, 0x0) listen(r3, 0x5c) 15.51055315s ago: executing program 4 (id=3072): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000200)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x11, 0x3}]}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x37, 0x3026}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000000240), 0x400000000000159, 0x40840) 15.46874582s ago: executing program 2 (id=3073): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @empty, 0xfffffffe}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000340)="78be47b0", 0x4}], 0x1}}], 0x1, 0x20080058) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x18, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) (async) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @empty, 0xfffffffe}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000340)="78be47b0", 0x4}], 0x1}}], 0x1, 0x20080058) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x18, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) 15.454193772s ago: executing program 3 (id=3074): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080), 0x4) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0x8000000, 0x0, 0xff, 0x18, 0x4, 0x96}, 0x22) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 15.318508296s ago: executing program 4 (id=3075): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000080000000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r4}, &(0x7f0000000840), &(0x7f0000000880)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000180300002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff06b702000008000000b70300000f00000085000000060000007a0af0ff0000000018110000", @ANYRES32=r4, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000b00)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b80)={r5}, 0xc) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000", @ANYRES16=r7, @ANYBLOB="ad4300000000000000000f"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000440)={0x18, r7, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4100}, 0x48800) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$inet6(0xa, 0x3, 0x5) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) (async) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000cc0)=@assoc_value, &(0x7f0000000d00)=0x8) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d40)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r13, &(0x7f0000000d80)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r13, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r14, 0x401c5820, &(0x7f0000000e00)) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01fffc00000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0) (async) sendmmsg(r9, &(0x7f0000000600)=[{{&(0x7f0000000680)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000700)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r9], 0x108}}], 0x2, 0xc040) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000580)={0x3, &(0x7f00000005c0)=[{0x2d, 0x0, 0x1, 0xfffff038}, {0x28, 0x0, 0xfd, 0x1}, {0x6}]}, 0x10) 14.970628732s ago: executing program 0 (id=3076): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea34502) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x2, 0x80805, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/146, 0x92}], 0x1) 14.913858533s ago: executing program 0 (id=3077): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x1a, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x75af}, @jmp={0x5, 0x0, 0x0, 0x5, 0x1, 0x6, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @alu={0x0, 0x0, 0x7, 0xf, 0x5, 0xfffffffffffffff4, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @generic={0x4, 0x0, 0x8, 0x4, 0xff}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x8e, &(0x7f0000000180)=""/142, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xb, 0x100, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 14.826840884s ago: executing program 0 (id=3078): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x33c) close(0x3) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150102000000002018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)='\x00\x00\b[\x00'/14, 0x0, 0xd6f6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(0xffffffffffffffff, 0x2) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xb, &(0x7f00000004c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x8b}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 141.55943ms ago: executing program 32 (id=3071): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)='syzkaller\x00'}, 0x48) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, 0x34}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bind$unix(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r6 = socket(0x2, 0x3, 0x100000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r7 = socket$inet6(0x10, 0x800, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000001400090527bd7000fcdbdf25021f2200", @ANYRES32=r9, @ANYBLOB="080004f06301010408000800000100000800e8c01f570200e0000002080001000000000008000a0000000000d7c6e3e2025b0cf15d206dc586bec85a3b3353c7b417d99c00bbc4031450952c759d6f21a6cd0da909473b8162114ffa1192ba1aa46847455dea0bbbaf49b14f3974c6c4774445be121ba3701dd07343b8606026"], 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0) sendto$inet6(r7, &(0x7f0000000640)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt(r6, 0xff, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010225bd7000fddbdf250300000005000a00000000000c0006000100000000000000100007800c00018008000100", @ANYRES32=r5, @ANYBLOB="08000100000000000c00050002000000000000000c000800210c00000000000005000a00280000000c000200ff000000000000000800010000000000100007800c000180080001", @ANYRES32=r6, @ANYBLOB="6d8f16533671bc9391003359a91a0d55594d037380439f4d62a52c00fb7f4d5cc31cd2d862282fcd9a95d571568742fbc02604e748a7821d8e3d78be2280acf436c47874689d014a6dfe9c3d867f753049cadec4e8b4f974136e466b920c33a7e1ce"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x44) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000a00000000000007000000080005007f000001"], 0x1c}}, 0x0) listen(r3, 0x5c) 102.727434ms ago: executing program 33 (id=3073): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @empty, 0xfffffffe}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000340)="78be47b0", 0x4}], 0x1}}], 0x1, 0x20080058) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x18, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) (async) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @empty, 0xfffffffe}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000340)="78be47b0", 0x4}], 0x1}}], 0x1, 0x20080058) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x18, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) 59.96345ms ago: executing program 34 (id=3074): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080), 0x4) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0x8000000, 0x0, 0xff, 0x18, 0x4, 0x96}, 0x22) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 0s ago: executing program 35 (id=3075): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000080000000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r4}, &(0x7f0000000840), &(0x7f0000000880)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000180300002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff06b702000008000000b70300000f00000085000000060000007a0af0ff0000000018110000", @ANYRES32=r4, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000b00)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b80)={r5}, 0xc) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000", @ANYRES16=r7, @ANYBLOB="ad4300000000000000000f"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000440)={0x18, r7, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4100}, 0x48800) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$inet6(0xa, 0x3, 0x5) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) (async) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000cc0)=@assoc_value, &(0x7f0000000d00)=0x8) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d40)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r13, &(0x7f0000000d80)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r13, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r14, 0x401c5820, &(0x7f0000000e00)) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01fffc00000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0) (async) sendmmsg(r9, &(0x7f0000000600)=[{{&(0x7f0000000680)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000700)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r9], 0x108}}], 0x2, 0xc040) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000580)={0x3, &(0x7f00000005c0)=[{0x2d, 0x0, 0x1, 0xfffff038}, {0x28, 0x0, 0xfd, 0x1}, {0x6}]}, 0x10) kernel console output (not intermixed with test programs): tive_file:43414 isolated_file:0 [ 356.119323][T16121] unevictable:0 dirty:82 writeback:0 [ 356.119323][T16121] slab_reclaimable:12033 slab_unreclaimable:111184 [ 356.119323][T16121] mapped:29389 shmem:529 pagetables:3599 [ 356.119323][T16121] sec_pagetables:0 bounce:0 [ 356.119323][T16121] kernel_misc_reclaimable:0 [ 356.119323][T16121] free:1299651 free_pcp:11914 free_cma:0 [ 356.119371][T16121] Node 0 active_anon:25040kB inactive_anon:24kB active_file:0kB inactive_file:173460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117556kB dirty:328kB writeback:0kB shmem:2116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15840kB pagetables:14264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 356.119422][T16121] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 356.119468][T16121] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.119520][T16121] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 356.119552][T16121] Node 0 DMA32 free:1252128kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25040kB inactive_anon:24kB active_file:0kB inactive_file:173460kB unevictable:0kB writepending:328kB zspages:0kB present:3129332kB managed:2522828kB mlocked:0kB bounce:0kB free_pcp:46876kB local_pcp:26632kB free_cma:0kB [ 356.119606][T16121] lowmem_reserve[]: 0 0 1 1 1 [ 356.119635][T16121] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 356.119684][T16121] lowmem_reserve[]: 0 0 0 0 0 [ 356.119714][T16121] Node 1 Normal free:3931116kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:776kB local_pcp:776kB free_cma:0kB [ 356.119766][T16121] lowmem_reserve[]: 0 0 0 0 0 [ 356.119796][T16121] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 356.119902][T16121] Node 0 DMA32: 3611*4kB (UM) 3215*8kB (UME) 2031*16kB (UME) 1467*32kB (UME) 936*64kB (UME) 818*128kB (UME) 475*256kB (UME) 235*512kB (UME) 49*1024kB (UE) 8*2048kB (UM) 161*4096kB (UM) = 1252148kB [ 356.120030][T16121] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 356.120112][T16121] Node 1 Normal: 4*4kB (UM) 4*8kB (UM) 9*16kB (UM) 13*32kB (UM) 5*64kB (UM) 1*128kB (M) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3931168kB [ 356.120273][T16121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.120288][T16121] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 356.120303][T16121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.120317][T16121] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 356.120331][T16121] 43939 total pagecache pages [ 356.120339][T16121] 0 pages in swap cache [ 356.120344][T16121] Free swap = 124996kB [ 356.120351][T16121] Total swap = 124996kB [ 356.120358][T16121] 2097051 pages RAM [ 356.120364][T16121] 0 pages HighMem/MovableOnly [ 356.120371][T16121] 434380 pages reserved [ 356.120377][T16121] 0 pages cma reserved [ 356.149216][T16117] ip_tables: iptables: counters copy to user failed while replacing table [ 357.034145][T16133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2458'. [ 357.078649][T16141] netlink: 'syz.0.2461': attribute type 1 has an invalid length. [ 357.078670][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2461'. [ 357.079821][T16141] netlink: 'syz.0.2461': attribute type 11 has an invalid length. [ 357.200314][T16154] veth1_macvtap: left promiscuous mode [ 357.200623][T16154] macvtap0: left promiscuous mode [ 357.213602][T16154] geneve0: left promiscuous mode [ 357.213902][T16154] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 357.214043][T16154] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 357.214168][T16154] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 357.214285][T16154] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 357.214404][T16154] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 357.214642][T16154] syzkaller0: left promiscuous mode [ 357.214830][T16154] bond4: left promiscuous mode [ 357.214843][T16154] bond5: left promiscuous mode [ 357.215108][T16154] erspan1: left promiscuous mode [ 357.215222][T16154] ipvlan2: left promiscuous mode [ 357.215365][T16154] ipvlan3: left promiscuous mode [ 357.215564][T16154] vlan3: left promiscuous mode [ 357.215576][T16154] bond7: left promiscuous mode [ 357.215587][T16154] geneve3: left promiscuous mode [ 357.524298][T16172] sctp: [Deprecated]: syz.0.2467 (pid 16172) Use of int in max_burst socket option. [ 357.524298][T16172] Use struct sctp_assoc_value instead [ 357.615434][T16174] __nla_validate_parse: 1 callbacks suppressed [ 357.615452][T16174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2469'. [ 357.671692][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2469'. [ 357.677153][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2469'. [ 357.677407][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2469'. [ 357.828340][T16187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.828476][T16187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.828725][T16187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.829011][T16186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.829132][T16186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.830621][T16185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.044916][T16197] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2474'. [ 358.044948][T16197] netlink: 'syz.3.2474': attribute type 8 has an invalid length. [ 358.089761][T16197] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.089785][T16197] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.090183][T16197] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2474'. [ 358.090208][T16197] netlink: 'syz.3.2474': attribute type 8 has an invalid length. [ 358.114898][T16197] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.114919][T16197] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.115282][T16197] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2474'. [ 358.115304][T16197] netlink: 'syz.3.2474': attribute type 8 has an invalid length. [ 358.164635][T16197] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.164742][T16197] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.165109][T16197] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2474'. [ 358.165134][T16197] netlink: 'syz.3.2474': attribute type 8 has an invalid length. [ 358.198207][T16197] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.198227][T16197] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.200360][T16197] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2474'. [ 358.200387][T16197] netlink: 'syz.3.2474': attribute type 8 has an invalid length. [ 358.231924][T16197] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.231944][T16197] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.232302][T16197] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2474'. [ 358.232325][T16197] netlink: 'syz.3.2474': attribute type 8 has an invalid length. [ 358.273781][T16197] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.273805][T16197] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.274277][T16197] netlink: 'syz.3.2474': attribute type 8 has an invalid length. [ 358.314221][T16197] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.314242][T16197] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.314603][T16197] netlink: 'syz.3.2474': attribute type 8 has an invalid length. [ 358.349171][T16197] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.349190][T16197] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.349548][T16197] netlink: 'syz.3.2474': attribute type 8 has an invalid length. [ 358.384750][T16197] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.384764][T16197] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.386662][T16197] netlink: 'syz.3.2474': attribute type 8 has an invalid length. [ 358.426467][T16197] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.426486][T16197] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.426815][T16197] netlink: 'syz.3.2474': attribute type 8 has an invalid length. [ 358.464700][T16197] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.464720][T16197] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.465081][T16197] netlink: 'syz.3.2474': attribute type 8 has an invalid length. [ 358.508110][T16197] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.508131][T16197] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.508475][T16197] netlink: 'syz.3.2474': attribute type 8 has an invalid length. [ 358.534044][T16197] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.534065][T16197] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.567158][T16197] bridge15: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.567179][T16197] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.584710][T16197] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.584729][T16197] bridge16: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.598589][T16197] bridge17: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.598610][T16197] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.612132][T16197] bridge18: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.612152][T16197] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.623923][T16197] bridge19: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.623942][T16197] bridge19: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.636606][T16197] bridge20: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.636625][T16197] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.647967][T16197] bridge21: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.647986][T16197] bridge21: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.681023][T16197] bridge22: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.681043][T16197] bridge22: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.694706][T16197] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.694727][T16197] bridge23: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.707177][T16197] bridge24: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.707196][T16197] bridge24: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.720223][T16197] bridge25: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.720242][T16197] bridge25: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.731657][T16197] bridge26: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.731677][T16197] bridge26: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.744395][T16197] bridge27: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.744439][T16197] bridge27: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.757576][T16197] bridge28: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.757595][T16197] bridge28: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.775462][T16197] bridge29: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.775482][T16197] bridge29: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.789805][T16197] bridge30: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.789825][T16197] bridge30: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.802186][T16197] bridge31: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.802206][T16197] bridge31: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.827719][T16197] bridge32: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.827739][T16197] bridge32: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.850362][T16197] bridge33: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.850381][T16197] bridge33: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.885856][T16197] bridge34: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.885876][T16197] bridge34: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 359.241561][T16215] 8021q: adding VLAN 0 to HW filter on device bond16 [ 359.276680][T16215] 8021q: adding VLAN 0 to HW filter on device bond16 [ 359.276959][T16215] bond16: (slave gre3): The slave device specified does not support setting the MAC address [ 359.277684][T16215] bond16: (slave gre3): Error -95 calling set_mac_address [ 359.330841][T16213] 8021q: adding VLAN 0 to HW filter on device bond17 [ 359.333860][T16213] bond16: (slave bond17): Enslaving as an active interface with a down link [ 359.338224][T16213] bond16 (unregistering): (slave bond17): Releasing active interface [ 359.366667][T16213] bond16 (unregistering): Released all slaves [ 360.426418][T16166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 360.691326][T16224] bridge0: port 4(ip6gretap0) entered disabled state [ 360.691515][T16224] bridge0: port 3(syz_tun) entered disabled state [ 360.692074][T16224] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.692330][T16224] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.811963][T10325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.896146][T16243] syzkaller0: Caught tx_queue_len zero misconfig [ 361.018873][T16250] 8021q: adding VLAN 0 to HW filter on device bond14 [ 361.652205][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.694493][T16228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.803838][T16278] validate_nla: 22 callbacks suppressed [ 363.803857][T16278] netlink: 'syz.4.2494': attribute type 6 has an invalid length. [ 363.997091][T16290] sctp: [Deprecated]: syz.4.2498 (pid 16290) Use of int in max_burst socket option. [ 363.997091][T16290] Use struct sctp_assoc_value instead [ 364.228769][T16297] tipc: Enabled bearer , priority 10 [ 365.040085][T16348] __nla_validate_parse: 31 callbacks suppressed [ 365.040107][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2515'. [ 365.369487][ T9] tipc: Node number set to 2683893614 [ 365.420121][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2522'. [ 365.730306][T16383] syzkaller1: entered promiscuous mode [ 365.730328][T16383] syzkaller1: entered allmulticast mode [ 365.824504][T16387] netlink: 'syz.3.2526': attribute type 21 has an invalid length. [ 365.893098][T16386] netlink: 'syz.4.2527': attribute type 13 has an invalid length. [ 365.893118][T16386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2527'. [ 366.743285][T16419] syzkaller1: entered promiscuous mode [ 366.743307][T16419] syzkaller1: entered allmulticast mode [ 366.745608][T16419] 0: reclassify loop, rule prio 0, protocol 03 [ 366.747824][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'. [ 366.825637][T16421] x_tables: duplicate underflow at hook 3 [ 366.964704][T16429] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2539'. [ 367.127199][T16438] netlink: 'syz.4.2542': attribute type 4 has an invalid length. [ 367.127221][T16438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2542'. [ 367.309509][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2546'. [ 367.376080][T16459] netlink: 'syz.4.2547': attribute type 11 has an invalid length. [ 367.437682][T16468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2549'. [ 367.437710][T16468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2549'. [ 367.502492][T16471] bridge0: port 4(ip6gretap0) entered blocking state [ 367.502628][T16471] bridge0: port 4(ip6gretap0) entered forwarding state [ 367.502928][T16471] bridge0: port 3(syz_tun) entered blocking state [ 367.503043][T16471] bridge0: port 3(syz_tun) entered forwarding state [ 367.503285][T16471] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.503556][T16471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.512136][T16471] 8021q: adding VLAN 0 to HW filter on device  [ 367.558281][T16471] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 367.565370][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.565525][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.696773][T16479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2552'. [ 368.574817][T16519] ip_tables: iptables: counters copy to user failed while replacing table [ 368.879599][T16528] bridge37: entered promiscuous mode [ 368.879622][T16528] bridge37: entered allmulticast mode [ 368.904091][T16528] team0: Port device bridge37 added [ 369.016770][T16532] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.030320][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.227778][T16547] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 369.257353][T16547] syzkaller0: entered promiscuous mode [ 369.257744][T16547] batman_adv: batadv0: Interface activated: syzkaller0 [ 369.508966][T16558] FAULT_INJECTION: forcing a failure. [ 369.508966][T16558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.509001][T16558] CPU: 1 UID: 0 PID: 16558 Comm: syz.2.2575 Not tainted syzkaller #0 PREEMPT(full) [ 369.509020][T16558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 369.509034][T16558] Call Trace: [ 369.509042][T16558] [ 369.509050][T16558] dump_stack_lvl+0xe8/0x150 [ 369.509086][T16558] should_fail_ex+0x3eb/0x540 [ 369.509113][T16558] _copy_from_user+0x2d/0xb0 [ 369.509249][T16558] __sys_bpf+0x2e7/0xe00 [ 369.509278][T16558] ? __pfx___sys_bpf+0x10/0x10 [ 369.509307][T16558] ? __fget_files+0x2a/0x420 [ 369.509402][T16558] ? rcu_is_watching+0x16/0xb0 [ 369.509434][T16558] __x64_sys_bpf+0xba/0xd0 [ 369.509463][T16558] do_syscall_64+0x166/0x520 [ 369.509486][T16558] ? trace_irq_disable+0x3b/0x140 [ 369.509508][T16558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.509526][T16558] ? clear_bhb_loop+0x70/0xc0 [ 369.509548][T16558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.509569][T16558] RIP: 0033:0x7f80b3f9fb19 [ 369.509586][T16558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.509601][T16558] RSP: 002b:00007f80b21d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.509620][T16558] RAX: ffffffffffffffda RBX: 00007f80b4226090 RCX: 00007f80b3f9fb19 [ 369.509633][T16558] RDX: 0000000000000078 RSI: 0000200000000780 RDI: 0000000000000005 [ 369.509643][T16558] RBP: 00007f80b21d5090 R08: 0000000000000000 R09: 0000000000000000 [ 369.509653][T16558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.509662][T16558] R13: 00007f80b4226128 R14: 00007f80b4226090 R15: 00007ffcbd1b6668 [ 369.509691][T16558] [ 369.614980][T16560] Bluetooth: hci0: unsupported parameter 5135 [ 369.615000][T16560] Bluetooth: hci0: unsupported parameter 65 [ 369.615010][T16560] Bluetooth: hci0: unsupported parameter 5135 [ 369.615019][T16560] Bluetooth: hci0: unsupported parameter 65 [ 369.616488][T16560] netlink: 'syz.4.2578': attribute type 5 has an invalid length. [ 369.726126][T16562] netlink: 'syz.0.2577': attribute type 1 has an invalid length. [ 370.133031][T16578] __nla_validate_parse: 2 callbacks suppressed [ 370.133052][T16578] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2583'. [ 370.133068][T16578] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 370.384067][T16589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2588'. [ 370.496701][T16605] ip_tables: iptables: counters copy to user failed while replacing table [ 370.679461][T16617] ip_tables: iptables: counters copy to user failed while replacing table [ 370.919595][T16630] hsr0: entered allmulticast mode [ 370.919626][T16630] hsr_slave_0: entered allmulticast mode [ 370.919643][T16630] hsr_slave_1: entered allmulticast mode [ 371.373178][T16650] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2594'. [ 373.923980][T16625] hsr0: left allmulticast mode [ 373.924004][T16625] hsr_slave_0: left allmulticast mode [ 373.924019][T16625] hsr_slave_1: left allmulticast mode [ 374.125065][T16661] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2598'. [ 374.140355][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2599'. [ 374.303692][T16668] mac80211_hwsim hwsim7 wlan1: Caught tx_queue_len zero misconfig [ 374.310004][T16664] syz.0.2600: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 374.310084][T16664] CPU: 0 UID: 0 PID: 16664 Comm: syz.0.2600 Not tainted syzkaller #0 PREEMPT(full) [ 374.310106][T16664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 374.310117][T16664] Call Trace: [ 374.310124][T16664] [ 374.310132][T16664] dump_stack_lvl+0xe8/0x150 [ 374.310166][T16664] warn_alloc+0x24d/0x270 [ 374.310188][T16664] ? stack_depot_save_flags+0x33/0x810 [ 374.310219][T16664] ? __pfx_warn_alloc+0x10/0x10 [ 374.310239][T16664] ? kasan_save_track+0x4f/0x80 [ 374.310261][T16664] ? __kasan_kmalloc+0x93/0xb0 [ 374.310285][T16664] ? xsk_init_queue+0x8a/0xe0 [ 374.310305][T16664] ? xsk_setsockopt+0x52a/0x960 [ 374.310325][T16664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.310368][T16664] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 374.310421][T16664] ? rcu_is_watching+0x16/0xb0 [ 374.310454][T16664] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 374.310475][T16664] ? __kmalloc_cache_noprof+0x31c/0x600 [ 374.310499][T16664] ? __kmalloc_cache_noprof+0x148/0x600 [ 374.310523][T16664] ? xskq_create+0x56/0x220 [ 374.310549][T16664] xskq_create+0x148/0x220 [ 374.310574][T16664] ? xsk_init_queue+0x8a/0xe0 [ 374.310598][T16664] xsk_init_queue+0x8a/0xe0 [ 374.310622][T16664] xsk_setsockopt+0x52a/0x960 [ 374.310647][T16664] ? __pfx_xsk_setsockopt+0x10/0x10 [ 374.310667][T16664] ? __pfx_aa_sk_perm+0x10/0x10 [ 374.310703][T16664] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 374.310725][T16664] ? __pfx_xsk_setsockopt+0x10/0x10 [ 374.310745][T16664] do_sock_setsockopt+0x17c/0x1b0 [ 374.310769][T16664] __x64_sys_setsockopt+0x13d/0x1b0 [ 374.310795][T16664] do_syscall_64+0x166/0x520 [ 374.310819][T16664] ? trace_irq_disable+0x3b/0x140 [ 374.310841][T16664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.310860][T16664] ? clear_bhb_loop+0x70/0xc0 [ 374.310883][T16664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.310900][T16664] RIP: 0033:0x7fb6e8f9fb19 [ 374.310918][T16664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.310933][T16664] RSP: 002b:00007fb6e9d84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 374.310952][T16664] RAX: ffffffffffffffda RBX: 00007fb6e9225fa0 RCX: 00007fb6e8f9fb19 [ 374.310965][T16664] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 374.310976][T16664] RBP: 00007fb6e9037b70 R08: 0000000000000004 R09: 0000000000000000 [ 374.310988][T16664] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 374.310999][T16664] R13: 00007fb6e9226038 R14: 00007fb6e9225fa0 R15: 00007fff49dd9548 [ 374.311033][T16664] [ 374.316679][T16664] Mem-Info: [ 374.316693][T16664] active_anon:7275 inactive_anon:6 isolated_anon:0 [ 374.316693][T16664] active_file:0 inactive_file:43422 isolated_file:0 [ 374.316693][T16664] unevictable:0 dirty:92 writeback:0 [ 374.316693][T16664] slab_reclaimable:12312 slab_unreclaimable:113075 [ 374.316693][T16664] mapped:29414 shmem:1504 pagetables:3624 [ 374.316693][T16664] sec_pagetables:0 bounce:0 [ 374.316693][T16664] kernel_misc_reclaimable:0 [ 374.316693][T16664] free:1297486 free_pcp:11188 free_cma:0 [ 374.316749][T16664] Node 0 active_anon:29100kB inactive_anon:24kB active_file:0kB inactive_file:173492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117656kB dirty:368kB writeback:0kB shmem:6016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15620kB pagetables:14364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 374.316799][T16664] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 374.316845][T16664] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 374.316898][T16664] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 374.316929][T16664] Node 0 DMA32 free:1243144kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:29100kB inactive_anon:24kB active_file:0kB inactive_file:173492kB unevictable:0kB writepending:368kB zspages:0kB present:3129332kB managed:2522828kB mlocked:0kB bounce:0kB free_pcp:44248kB local_pcp:20872kB free_cma:0kB [ 374.317086][T16664] lowmem_reserve[]: 0 0 1 1 1 [ 374.317118][T16664] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 374.317168][T16664] lowmem_reserve[]: 0 0 0 0 0 [ 374.317198][T16664] Node 1 Normal free:3931440kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:500kB free_cma:0kB [ 374.317250][T16664] lowmem_reserve[]: 0 0 0 0 0 [ 374.317281][T16664] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 374.317411][T16664] Node 0 DMA32: 3304*4kB (UM) 2932*8kB (UME) 1719*16kB (UM) 684*32kB (UME) 966*64kB (UME) 816*128kB (UME) 494*256kB (UME) 242*512kB (UME) 55*1024kB (UME) 10*2048kB (UM) 162*4096kB (UM) = 1243056kB [ 374.317553][T16664] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 374.317638][T16664] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 5*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 959*4096kB (UM) = 3931436kB [ 374.317768][T16664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 374.317783][T16664] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 374.317797][T16664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 374.317810][T16664] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 374.317824][T16664] 44922 total pagecache pages [ 374.317836][T16664] 0 pages in swap cache [ 374.317842][T16664] Free swap = 124996kB [ 374.317848][T16664] Total swap = 124996kB [ 374.317855][T16664] 2097051 pages RAM [ 374.317861][T16664] 0 pages HighMem/MovableOnly [ 374.317867][T16664] 434380 pages reserved [ 374.317873][T16664] 0 pages cma reserved [ 374.436263][T16678] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2600'. [ 374.477852][T16664] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 374.801866][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.015199][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2605'. [ 375.105293][T16702] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2608'. [ 375.171591][T16689] tunl0: Caught tx_queue_len zero misconfig [ 375.349971][T16722] openvswitch: netlink: nsh attr 0 has unexpected len 94 expected 0 [ 375.605742][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2613'. [ 375.618616][T16732] xfrm2: entered promiscuous mode [ 375.618638][T16732] xfrm2: entered allmulticast mode [ 375.619084][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2613'. [ 375.739586][T16734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2615'. [ 376.164570][T16748] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2618'. [ 376.166295][T16748] syzkaller0: entered promiscuous mode [ 376.166314][T16748] syzkaller0: entered allmulticast mode [ 376.548824][T16769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2623'. [ 376.919602][T16764] ip_tables: iptables: counters copy to user failed while replacing table [ 376.998836][T16765] syzkaller0: MTU not usable for tipc bearer [ 376.998875][T16765] tipc: Enabling of bearer rejected, failed to enable media [ 377.119650][T16782] ip_tables: iptables: counters copy to user failed while replacing table [ 377.334114][T16798] A link change request failed with some changes committed already. Interface 04±ÿ may have been left with an inconsistent configuration, please check. [ 377.429355][T16810] openvswitch: netlink: Actions may not be safe on all matching packets [ 377.479400][T16818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2637'. [ 377.683583][T16830] netlink: 'syz.1.2639': attribute type 5 has an invalid length. [ 377.986256][T16842] netlink: 'syz.2.2643': attribute type 30 has an invalid length. [ 378.055036][T16841] netlink: 5740 bytes leftover after parsing attributes in process `syz.3.2642'. [ 378.055332][T16843] netlink: 5740 bytes leftover after parsing attributes in process `syz.3.2642'. [ 378.414782][T16853] netlink: 'syz.3.2646': attribute type 6 has an invalid length. [ 378.481036][T16860] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2647'. [ 378.483550][T16860] veth1_macvtap: left promiscuous mode [ 378.607149][T16860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2647'. [ 379.242091][T16886] syzkaller0: entered promiscuous mode [ 379.242114][T16886] syzkaller0: entered allmulticast mode [ 379.398044][ T5641] block nbd1: Receive control failed (result -32) [ 379.400258][ T53] block nbd1: Receive control failed (result -32) [ 379.705573][T16902] batadv_slave_1: Caught tx_queue_len zero misconfig [ 380.151392][T16916] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:0 [ 380.532810][ T2002] block nbd0: Possible stuck request ffff888079147000: control (read@0,1024B). Runtime 90 seconds [ 380.532852][ T2002] block nbd0: Possible stuck request ffff8880791471c0: control (read@1024,1024B). Runtime 90 seconds [ 380.532896][ T2002] block nbd0: Possible stuck request ffff888079147380: control (read@2048,1024B). Runtime 90 seconds [ 380.532919][ T2002] block nbd0: Possible stuck request ffff888079147540: control (read@3072,1024B). Runtime 90 seconds [ 380.614788][T16924] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 380.616710][T16924] bond10: (slave macvlan2): Enslaving as a backup interface with a down link [ 380.822907][T16947] __nla_validate_parse: 8 callbacks suppressed [ 380.822924][T16947] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2675'. [ 380.942249][T16949] x_tables: duplicate underflow at hook 1 [ 381.074028][T16959] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 381.401710][T16956] tipc: Resetting bearer [ 382.103108][ T6885] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.103142][ T6885] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.103474][ T6885] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.103497][ T6885] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.103530][ T6885] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.103552][ T6885] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.103591][ T6885] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.103613][ T6885] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.299531][ T29] audit: type=1800 audit(1794139664.385:11): pid=16976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2684" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2851 res=0 errno=-22 [ 382.550062][T16988] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 382.594060][T17002] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2689'. [ 383.182397][T17016] openvswitch: netlink: Actions may not be safe on all matching packets [ 383.265746][T17026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2696'. [ 383.371878][T17030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2696'. [ 383.371935][T17030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2696'. [ 383.385002][T17030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2696'. [ 383.387046][T17030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2696'. [ 383.411435][T17036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2700'. [ 383.442443][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2699'. [ 383.524132][T17045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2702'. [ 383.624120][T17046] netlink: 'syz.4.2698': attribute type 1 has an invalid length. [ 384.706489][T17096] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 384.953103][T17109] syzkaller0: MTU not usable for tipc bearer [ 384.953142][T17109] tipc: Enabling of bearer rejected, failed to enable media [ 385.509359][T17133] SET target dimension over the limit! [ 385.955858][T17130] syzkaller0: entered promiscuous mode [ 385.955883][T17130] syzkaller0: entered allmulticast mode [ 388.972109][T17200] __nla_validate_parse: 3 callbacks suppressed [ 388.972129][T17200] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2739'. [ 389.138845][T17205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2741'. [ 389.201919][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2741'. [ 389.249719][T17205] bridge7: entered promiscuous mode [ 389.324186][T17213] netlink: 'syz.1.2742': attribute type 1 has an invalid length. [ 389.324207][T17213] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2742'. [ 389.393750][T17214] sctp: [Deprecated]: syz.4.2744 (pid 17214) Use of int in max_burst socket option. [ 389.393750][T17214] Use struct sctp_assoc_value instead [ 389.430032][T17224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2747'. [ 389.535401][T17230] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 389.668231][T17235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2753'. [ 389.669479][T17235] batman_adv: batadv0: Adding interface: veth0 [ 389.669495][T17235] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.669709][T17235] batman_adv: batadv0: Interface activated: veth0 [ 389.723485][T17235] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2753'. [ 389.723509][T17235] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 389.821957][T17241] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3760 [ 390.326638][T17265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2761'. [ 390.677167][ T29] audit: type=1800 audit(1794139672.765:12): pid=17290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2766" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2918 res=0 errno=-22 [ 390.752948][T17296] smc: net device macvtap0 applied user defined pnetid SYZ0 [ 390.792994][T17298] tipc: Enabling of bearer rejected, failed to enable media [ 390.866102][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 390.866137][T17303] netlink: 'syz.3.2772': attribute type 30 has an invalid length. [ 390.890163][T17304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 390.890197][T17304] netlink: 'syz.3.2772': attribute type 30 has an invalid length. [ 390.916030][T17303] vxlan1: entered promiscuous mode [ 390.916052][T17303] vxlan1: entered allmulticast mode [ 390.917258][ T120] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.917640][ T120] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.917698][ T120] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.917755][ T120] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.959417][T17304] vxlan2: entered promiscuous mode [ 390.959438][T17304] vxlan2: entered allmulticast mode [ 391.188052][T17323] netlink: 'syz.1.2777': attribute type 2 has an invalid length. [ 392.047473][ T29] audit: type=1804 audit(1794139674.135:13): pid=17357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2785" name="/newroot/579/cgroup.controllers" dev="tmpfs" ino=2979 res=1 errno=0 [ 392.047519][ T29] audit: type=1800 audit(1794139674.135:14): pid=17357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2785" name="cgroup.controllers" dev="tmpfs" ino=2979 res=0 errno=-22 [ 392.243776][T17357] netlink: 'syz.3.2785': attribute type 10 has an invalid length. [ 392.244288][T17357] netlink: 'syz.3.2785': attribute type 10 has an invalid length. [ 392.487738][T17389] netlink: 'syz.4.2793': attribute type 1 has an invalid length. [ 392.898305][T17421] netlink: 'syz.3.2799': attribute type 1 has an invalid length. [ 393.023897][T17421] 8021q: adding VLAN 0 to HW filter on device bond16 [ 393.056659][T17423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.864826][T17479] Unknown options in mask 6 [ 394.160361][T17499] __nla_validate_parse: 11 callbacks suppressed [ 394.160381][T17499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2817'. [ 394.263849][T17498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.270189][T17498] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.272606][T17498] tipc: Resetting bearer [ 394.281612][T17506] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 394.313245][T17498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.428711][T17498] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 394.428736][T17498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.469623][T17498] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 394.490344][T17498] tipc: Resetting bearer [ 394.563324][T17498] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 394.582835][T17499] netlink: 'syz.0.2817': attribute type 3 has an invalid length. [ 394.582988][T17499] netlink: 'syz.0.2817': attribute type 3 has an invalid length. [ 394.768425][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2823'. [ 394.785183][T17498] tipc: Resetting bearer [ 394.799231][T17498] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 394.823236][T17498] tipc: Resetting bearer [ 394.836469][T17498] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 394.896681][T17498] tipc: Resetting bearer [ 394.917332][T17531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2823'. [ 394.919213][T17498] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 394.954743][T17498] tipc: Resetting bearer [ 394.978239][T17498] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 395.037252][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 395.039231][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 395.041813][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.065543][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.066897][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 395.105001][T17533] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2824'. [ 395.339196][T17546] netlink: 'syz.0.2825': attribute type 4 has an invalid length. [ 395.339218][T17546] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2825'. [ 395.568783][T17557] netlink: 'syz.1.2827': attribute type 1 has an invalid length. [ 395.647659][T17557] bond7: entered promiscuous mode [ 395.660350][T17557] 8021q: adding VLAN 0 to HW filter on device bond7 [ 395.793949][T17561] 8021q: adding VLAN 0 to HW filter on device bond8 [ 395.809814][T17561] bond7: (slave bond8): making interface the new active one [ 395.809836][T17561] bond8: entered promiscuous mode [ 395.819555][T17561] bond7: (slave bond8): Enslaving as an active interface with an up link [ 395.892167][ T5641] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 395.973446][T17581] ipip0: entered promiscuous mode [ 396.066222][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2831'. [ 396.109188][T17588] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 396.156791][T17586] 8021q: adding VLAN 0 to HW filter on device bond9 [ 396.176981][T17589] lo: entered promiscuous mode [ 396.178223][T17589] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 396.209691][T17589] 8021q: adding VLAN 0 to HW filter on device bond9 [ 396.223930][T17589] bond9: (slave lo): Enslaving as an active interface with an up link [ 396.472467][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2833'. [ 396.490967][T17610] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 396.616469][T17616] netlink: 'syz.4.2836': attribute type 21 has an invalid length. [ 396.616491][T17616] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.656615][T17619] netlink: 'syz.3.2838': attribute type 1 has an invalid length. [ 396.656636][T17619] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2838'. [ 396.762198][T17624] xt_hashlimit: size too large, truncated to 1048576 [ 397.106401][T17534] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.106502][T17534] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.106654][T17534] bridge_slave_0: entered allmulticast mode [ 397.109940][T17534] bridge_slave_0: entered promiscuous mode [ 397.145250][T17534] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.145347][T17534] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.145486][T17534] bridge_slave_1: entered allmulticast mode [ 397.148119][T17534] bridge_slave_1: entered promiscuous mode [ 397.175951][ T53] Bluetooth: hci5: command tx timeout [ 397.241306][T17534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.257042][T17643] tipc: Resetting bearer [ 397.284832][T17643] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 397.313985][T17534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.336673][T17646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2847'. [ 397.369493][T17648] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 397.409400][T17534] team0: Port device team_slave_0 added [ 397.417784][T17648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2848'. [ 397.419587][T17534] team0: Port device team_slave_1 added [ 397.467611][T17534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.467628][T17534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.467650][T17534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.469874][T17534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.469885][T17534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.469905][T17534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.659324][T17534] hsr_slave_0: entered promiscuous mode [ 397.667290][T17534] hsr_slave_1: entered promiscuous mode [ 397.677508][T17534] debugfs: 'hsr0' already exists in 'hsr' [ 397.677545][T17534] Cannot create hsr debugfs directory [ 397.718325][T17668] IPVS: set_ctl: invalid protocol: 29 172.20.20.20:20004 [ 397.899513][T17671] netlink: 'syz.0.2853': attribute type 5 has an invalid length. [ 398.162648][T17534] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.162681][T17534] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 399.251381][ T5641] Bluetooth: hci5: command tx timeout [ 399.992415][T17534] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.992449][T17534] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 400.027299][T17694] netlink: 'syz.0.2858': attribute type 11 has an invalid length. [ 400.027319][T17694] __nla_validate_parse: 1 callbacks suppressed [ 400.027329][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2858'. [ 400.225483][T17534] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.225515][T17534] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 400.503250][T17719] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2867'. [ 400.581583][T17720] netlink: 'syz.3.2866': attribute type 5 has an invalid length. [ 400.674986][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2869'. [ 400.675007][T17725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2869'. [ 400.752252][T17725] macvtap1: entered allmulticast mode [ 400.752274][T17725] erspan0: entered allmulticast mode [ 400.779412][T17534] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.164227][T17534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.259297][T17534] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.297519][T17534] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.306279][T17534] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.331277][ T5641] Bluetooth: hci5: command tx timeout [ 401.331825][T17534] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.336337][T17534] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.363829][T17534] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.377742][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2872'. [ 401.431590][T17735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 401.739404][T17750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2875'. [ 401.790361][T17534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.820505][T17534] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.838393][ T6893] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.838500][ T6893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.872900][T17755] netlink: set zone limit has 4 unknown bytes [ 401.881947][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.882049][ T6899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.211309][T17770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2882'. [ 402.234784][T17770] vlan3: entered allmulticast mode [ 402.234807][T17770] dummy0: entered allmulticast mode [ 402.242956][T17770] bridge0: port 1(vlan3) entered blocking state [ 402.243191][T17770] bridge0: port 1(vlan3) entered disabled state [ 402.247739][T17770] vlan3: entered promiscuous mode [ 402.247760][T17770] dummy0: entered promiscuous mode [ 402.607388][T17787] netlink: 'syz.1.2885': attribute type 5 has an invalid length. [ 402.718073][T17792] netlink: 'syz.4.2886': attribute type 11 has an invalid length. [ 402.718095][T17792] netlink: 'syz.4.2886': attribute type 4 has an invalid length. [ 402.718107][T17792] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2886'. [ 402.996857][T17534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.245454][T17534] veth0_vlan: entered promiscuous mode [ 403.277908][T17534] veth1_vlan: entered promiscuous mode [ 403.411070][ T5641] Bluetooth: hci5: command tx timeout [ 403.421680][T17534] veth0_macvtap: entered promiscuous mode [ 403.440603][T17534] veth1_macvtap: entered promiscuous mode [ 403.469789][T17813] netlink: 'syz.3.2889': attribute type 8 has an invalid length. [ 403.492109][T17534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.556498][T17534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.633215][ T6899] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.633570][ T6899] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.633635][ T6899] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.633665][ T6899] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.099119][ T6885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.099140][ T6885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.189027][ T342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.189049][ T342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.207843][T17828] netlink: 'syz.1.2894': attribute type 1 has an invalid length. [ 404.207864][T17828] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2894'. [ 404.503819][T17849] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2899'. [ 404.504227][T17849] netlink: get zone limit has 4 unknown bytes [ 405.036396][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 405.039188][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 405.039956][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 405.064796][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 405.073152][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 405.279995][T17888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2912'. [ 405.460609][T17901] ip_tables: iptables: counters copy to user failed while replacing table [ 405.529449][T17905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2915'. [ 405.593593][ T6885] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.766060][T17913] netlink: 'syz.1.2918': attribute type 3 has an invalid length. [ 405.772589][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2919'. [ 405.829882][ T6885] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.946185][ T6885] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.018209][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'. [ 406.030962][T17931] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2921'. [ 406.047852][T17923] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.2920'. [ 406.049483][T17930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2922'. [ 406.128424][ T6885] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.148398][T17923] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 406.155128][T17923] 0ªX¹¦Dö»: entered allmulticast mode [ 406.159730][T17930] veth0: left allmulticast mode [ 406.159752][T17930] veth0: left promiscuous mode [ 406.159976][T17930] bridge0: port 4(veth0) entered disabled state [ 406.193533][T17930] batman_adv: batadv0: Adding interface: veth0 [ 406.193550][T17930] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.193576][T17930] batman_adv: batadv0: Interface activated: veth0 [ 406.194056][T17930] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2922'. [ 406.194074][T17930] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 406.255075][T17937] IPv6: sit2: Disabled Multicast RS [ 406.313247][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2920'. [ 406.331931][T17923] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2920'. [ 406.488495][T17933] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 406.492724][T17933] bond1 (unregistering): Released all slaves [ 406.682648][T17962] netlink: 'syz.1.2930': attribute type 2 has an invalid length. [ 406.791909][T17968] syzkaller1: entered promiscuous mode [ 406.791931][T17968] syzkaller1: entered allmulticast mode [ 407.180930][ T53] Bluetooth: hci3: command tx timeout [ 407.530479][ T6885] tipc: Resetting bearer [ 407.568665][T18003] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 407.702186][T18005] netlink: 'syz.1.2937': attribute type 5 has an invalid length. [ 407.875849][T18012] netlink: 'syz.4.2938': attribute type 1 has an invalid length. [ 408.055965][ T6885] ip6gretap0 (unregistering): left promiscuous mode [ 408.100585][ T6885] tipc: Disabling bearer [ 408.267796][ T6885] bond3 (unregistering): (slave gretap1): Releasing active interface [ 408.304310][ T6885] bond10 (unregistering): (slave gretap2): Releasing backup interface [ 408.461894][ T6885] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 408.633085][ T6885] bond1 (unregistering): Released all slaves [ 408.643237][ T6885] bond2 (unregistering): Released all slaves [ 408.657148][ T6885] bond3 (unregistering): (slave bond4): Releasing active interface [ 408.657755][ T6885] bond3 (unregistering): Released all slaves [ 408.672932][ T6885] bond4 (unregistering): Released all slaves [ 408.701225][ T6885] bond5 (unregistering): left promiscuous mode [ 408.701244][ T6885] bond5 (unregistering): left allmulticast mode [ 408.701945][ T6885] team0: Port device bond5 removed [ 408.702386][ T6885] bond5 (unregistering): Released all slaves [ 408.710222][ T6885] bond6 (unregistering): Released all slaves [ 408.733763][ T6885] bond7 (unregistering): Released all slaves [ 408.754278][ T6885] bond8 (unregistering): Released all slaves [ 408.763182][ T6885] bond9 (unregistering): Released all slaves [ 408.776972][ T6885] bond0 (unregistering): Released all slaves [ 408.789436][ T6885] bond10 (unregistering): (slave bond11): Releasing backup interface [ 408.790219][ T6885] bond10 (unregistering): Released all slaves [ 408.807523][ T6885] bond11 (unregistering): Released all slaves [ 408.829757][ T6885] bond12 (unregistering): (slave veth13): Releasing active interface [ 408.831350][ T6885] bond12 (unregistering): Released all slaves [ 408.845062][ T6885] bond13 (unregistering): Released all slaves [ 408.856638][ T6885] bond14 (unregistering): Released all slaves [ 408.869822][ T6885] bond15 (unregistering): Released all slaves [ 408.880650][ T6885] bond17 (unregistering): Released all slaves [ 408.899590][ T6885] bond16 (unregistering): Released all slaves [ 408.938225][T17997] vlan2: entered allmulticast mode [ 408.938248][T17997] dummy0: entered allmulticast mode [ 408.938782][T17997] bridge0: port 3(vlan2) entered blocking state [ 408.938925][T17997] bridge0: port 3(vlan2) entered disabled state [ 408.943193][T17997] vlan2: entered promiscuous mode [ 408.943214][T17997] dummy0: entered promiscuous mode [ 408.949786][T18012] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 408.991030][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 409.251368][ T53] Bluetooth: hci3: command tx timeout [ 409.315574][T18032] xt_hashlimit: size too large, truncated to 1048576 [ 409.381145][ T6885] tipc: Left network mode [ 409.447891][ T6885] IPVS: stopping backup sync thread 11376 ... [ 409.544090][T18037] veth7: entered allmulticast mode [ 409.888947][T18055] netlink: 'syz.1.2943': attribute type 1 has an invalid length. [ 409.979741][T18065] sctp: [Deprecated]: syz.1.2943 (pid 18065) Use of int in max_burst socket option. [ 409.979741][T18065] Use struct sctp_assoc_value instead [ 410.179339][ T5297] 8021q: adding VLAN 0 to HW filter on device eth4 [ 410.325628][T17880] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.325724][T17880] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.325858][T17880] bridge_slave_0: entered allmulticast mode [ 410.329191][T17880] bridge_slave_0: entered promiscuous mode [ 410.361338][T17880] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.362277][T17880] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.362430][T17880] bridge_slave_1: entered allmulticast mode [ 410.367936][T17880] bridge_slave_1: entered promiscuous mode [ 410.495564][T18085] netlink: 'syz.1.2950': attribute type 5 has an invalid length. [ 410.525425][T17880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.528813][T17880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.620119][ T2002] block nbd0: Possible stuck request ffff888079147000: control (read@0,1024B). Runtime 120 seconds [ 410.620167][ T2002] block nbd0: Possible stuck request ffff8880791471c0: control (read@1024,1024B). Runtime 120 seconds [ 410.620192][ T2002] block nbd0: Possible stuck request ffff888079147380: control (read@2048,1024B). Runtime 120 seconds [ 410.620214][ T2002] block nbd0: Possible stuck request ffff888079147540: control (read@3072,1024B). Runtime 120 seconds [ 410.685132][T17880] team0: Port device team_slave_0 added [ 410.693646][T17880] team0: Port device team_slave_1 added [ 410.757989][T18098] __nla_validate_parse: 8 callbacks suppressed [ 410.758009][T18098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2952'. [ 410.893915][T17880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.893931][T17880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.893949][T17880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.896076][T17880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.896092][T17880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.896112][T17880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.079341][T18104] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2953'. [ 411.274419][T17880] hsr_slave_0: entered promiscuous mode [ 411.275487][T17880] hsr_slave_1: entered promiscuous mode [ 411.276218][T17880] debugfs: 'hsr0' already exists in 'hsr' [ 411.276232][T17880] Cannot create hsr debugfs directory [ 411.331187][ T53] Bluetooth: hci3: command tx timeout [ 411.699365][T18126] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2956'. [ 411.773589][ T5297] 8021q: adding VLAN 0 to HW filter on device eth5 [ 411.801059][T18126] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 411.978508][ T6885] hsr_slave_0: left promiscuous mode [ 411.993190][ T6885] hsr_slave_1: left promiscuous mode [ 412.093211][T18139] netlink: 'syz.2.2961': attribute type 8 has an invalid length. [ 412.205146][T18145] netlink: 'syz.2.2964': attribute type 1 has an invalid length. [ 412.205165][T18145] netlink: 'syz.2.2964': attribute type 268 has an invalid length. [ 412.205176][T18145] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2964'. [ 412.478213][ T6885] smc: removing net device macvtap0 with user defined pnetid SYZ0 [ 413.411099][ T53] Bluetooth: hci3: command tx timeout [ 413.672546][T18184] ip_tables: iptables: counters copy to user failed while replacing table [ 413.778556][T18187] netlink: 'syz.1.2966': attribute type 1 has an invalid length. [ 413.867814][T18187] 8021q: adding VLAN 0 to HW filter on device bond10 [ 413.953081][T18198] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 414.078411][T18202] netlink: 'syz.2.2972': attribute type 5 has an invalid length. [ 414.182677][ T6885] IPVS: stop unused estimator thread 0... [ 414.624980][T18220] syzkaller0: left promiscuous mode [ 414.625002][T18220] syzkaller0: left allmulticast mode [ 414.692071][T18223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2976'. [ 414.881665][T18228] netlink: 'syz.4.2977': attribute type 1 has an invalid length. [ 414.946071][T18233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2978'. [ 414.986923][T18228] bond11: entered promiscuous mode [ 414.987344][T18228] 8021q: adding VLAN 0 to HW filter on device bond11 [ 415.229950][T18241] bond13: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 415.245014][T18241] bond13 (unregistering): Released all slaves [ 415.304022][T17880] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 415.308573][T17880] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.309739][T17880] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 415.348097][T17880] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.348867][T17880] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 415.367580][T17880] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.368939][T17880] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 415.387162][T17880] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.643034][T18271] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2983'. [ 415.717110][T18274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2984'. [ 415.717140][T18274] openvswitch: netlink: ufid size 27 bytes exceeds the range (1, 16) [ 415.717157][T18274] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 415.740224][T18274] openvswitch: netlink: ct_state flags ffffffff unsupported [ 415.780565][T17880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.883164][T17880] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.919509][ T6901] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.919637][ T6901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.927681][T18283] netlink: 'syz.2.2984': attribute type 6 has an invalid length. [ 415.977909][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.978071][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.120666][T18269] syzkaller1: entered promiscuous mode [ 416.120688][T18269] syzkaller1: entered allmulticast mode [ 417.119479][T18319] netlink: 'syz.2.2989': attribute type 5 has an invalid length. [ 417.299088][T18321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.570068][T17880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.609417][T18338] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 417.804988][T17880] veth0_vlan: entered promiscuous mode [ 417.853213][T17880] veth1_vlan: entered promiscuous mode [ 418.018018][T17880] veth0_macvtap: entered promiscuous mode [ 418.039445][T17880] veth1_macvtap: entered promiscuous mode [ 418.097407][T17880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.121069][T17880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.341243][ T342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.341286][ T342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.341315][ T342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.353540][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.503585][ T342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.503607][ T342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.666087][ T342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.666108][ T342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.677394][T18351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2995'. [ 419.583583][ T5641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 419.585835][ T5641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 419.589087][ T5641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 419.598283][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 419.620509][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 419.858394][T18390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3001'. [ 420.174100][ T5631] tipc: Disabling bearer [ 420.295279][T18408] vcan2: entered promiscuous mode [ 420.295304][T18408] vcan2: entered allmulticast mode [ 420.922634][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 421.036287][T18437] netlink: 'syz.2.3006': attribute type 5 has an invalid length. [ 421.359190][T18454] Bluetooth: MGMT ver 1.23 [ 421.542307][T18454] tipc: Resetting bearer [ 421.557601][T18454] veth1_vlan: left promiscuous mode [ 421.559158][T18454] veth0_vlan: left promiscuous mode [ 421.561279][T18454] veth0_vlan: entered promiscuous mode [ 421.563777][T18454] veth1_vlan: entered promiscuous mode [ 421.569006][T18454] veth1_macvtap: left promiscuous mode [ 421.570261][T18454] veth0_macvtap: left promiscuous mode [ 421.575657][T18454] veth0_macvtap: entered promiscuous mode [ 421.576903][T18454] veth1_macvtap: entered promiscuous mode [ 421.589915][T18454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.601966][T18454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.606993][T18454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.615983][T18454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.638498][T18454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.666081][T18454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.669317][T18454] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.731693][ T53] Bluetooth: hci0: command tx timeout [ 421.774421][T18454] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 421.805720][ T6887] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.805750][ T6887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.860608][T18383] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.861496][T18383] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.861738][T18383] bridge_slave_0: entered allmulticast mode [ 421.865924][T18383] bridge_slave_0: entered promiscuous mode [ 421.898241][ T6887] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 421.900134][ T6887] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 421.917092][T18383] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.917778][T18383] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.917937][T18383] bridge_slave_1: entered allmulticast mode [ 421.921448][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 421.947352][T18383] bridge_slave_1: entered promiscuous mode [ 421.950947][ T6899] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.950976][ T6899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.951012][ T6899] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.951033][ T6899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.951063][ T6899] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.951084][ T6899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.221615][T18383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.240108][T18383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.314220][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 422.416537][T18383] team0: Port device team_slave_0 added [ 422.428369][T18383] team0: Port device team_slave_1 added [ 422.472667][T18489] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3013'. [ 422.472719][T18489] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 422.525805][T18494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3012'. [ 422.554533][T18383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.554551][T18383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.554573][T18383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.568084][T18383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.568099][T18383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.568120][T18383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.731106][T18502] ip_tables: iptables: counters copy to user failed while replacing table [ 422.786944][T18383] hsr_slave_0: entered promiscuous mode [ 422.787992][T18383] hsr_slave_1: entered promiscuous mode [ 422.788770][T18383] debugfs: 'hsr0' already exists in 'hsr' [ 422.788784][T18383] Cannot create hsr debugfs directory [ 422.932194][ T8203] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 422.974784][T18509] netlink: 440 bytes leftover after parsing attributes in process `syz.1.3015'. [ 422.978549][T18513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3015'. [ 423.346482][T18519] syzkaller0: entered promiscuous mode [ 423.346504][T18519] syzkaller0: entered allmulticast mode [ 423.368913][T18519] tipc: Started in network mode [ 423.368943][T18519] tipc: Node identity 9661bf0e0599, cluster identity 4711 [ 423.369378][T18519] tipc: Enabled bearer , priority 0 [ 423.375251][T18519] syzkaller0: mtu greater than device maximum [ 423.375973][T18519] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3017'. [ 423.435832][T18519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3017'. [ 423.602884][T18519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.668012][T18539] ip_tables: iptables: counters copy to user failed while replacing table [ 423.692628][T18539] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3021'. [ 423.699937][T18541] ip_tables: iptables: counters copy to user failed while replacing table [ 423.711945][ T62] tipc: Resetting bearer [ 423.728459][T18546] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3021'. [ 423.808872][ T62] tipc: Disabling bearer [ 423.812597][ T53] Bluetooth: hci0: command tx timeout [ 423.904828][T18552] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3022'. [ 424.092368][T18383] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 424.112880][T18383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 424.114642][T18383] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 424.143777][T18383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 424.145120][T18383] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 424.171297][T18383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 424.173191][T18383] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 424.182973][T18383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 424.345733][T18572] netlink: 'syz.2.3025': attribute type 5 has an invalid length. [ 424.437816][T18577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3027'. [ 424.727276][T18383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.789224][T18383] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.838784][ T6893] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.838893][ T6893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.884962][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.885069][ T6899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.094406][T18599] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3030'. [ 425.094435][T18599] openvswitch: netlink: Missing key (keys=40, expected=100) [ 425.405112][T18609] netlink: 'syz.1.3031': attribute type 2 has an invalid length. [ 425.698237][T18620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3033'. [ 425.891530][ T53] Bluetooth: hci0: command tx timeout [ 426.240417][T18644] ip_tables: iptables: counters copy to user failed while replacing table [ 426.291020][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 426.358985][T18383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.705069][T18661] netlink: 'syz.3.3040': attribute type 1 has an invalid length. [ 426.705131][T18661] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3040'. [ 426.705148][T18661] nbd: must specify at least one socket [ 426.708830][T18665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3042'. [ 426.759408][T18665] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3042'. [ 427.054843][T18383] veth0_vlan: entered promiscuous mode [ 427.084550][T18383] veth1_vlan: entered promiscuous mode [ 427.092683][ T8203] page_pool_release_retry() stalled pool shutdown: id 113, 1 inflight 60 sec [ 427.219634][T18684] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3047'. [ 427.364245][T18383] veth0_macvtap: entered promiscuous mode [ 427.396868][T18383] veth1_macvtap: entered promiscuous mode [ 427.427403][T18383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.454948][T18383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.515470][ T6887] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.534747][ T6893] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.555046][ T6893] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.557825][ T342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.694804][ T6901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.694826][ T6901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.746580][ T6893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.746600][ T6893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.796736][T18705] syzkaller0: entered promiscuous mode [ 427.796758][T18705] syzkaller0: entered allmulticast mode [ 427.971539][ T53] Bluetooth: hci0: command tx timeout [ 428.832434][T18760] can: request_module (can-proto-0) failed. [ 428.995091][T18780] __nla_validate_parse: 3 callbacks suppressed [ 428.995124][T18780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3062'. [ 429.033406][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3062'. [ 429.209262][T18786] ip_tables: iptables: counters copy to user failed while replacing table [ 429.334764][T18795] ip_tables: iptables: counters copy to user failed while replacing table [ 429.377187][T18787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3063'. [ 429.665321][T18813] netlink: 'syz.3.3070': attribute type 2 has an invalid length. [ 429.665343][T18813] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3070'. [ 429.754597][T18817] netlink: 'syz.3.3070': attribute type 10 has an invalid length. [ 429.756477][T18813] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 429.798922][T18817] team0: Port device dummy0 added [ 429.908752][T18825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3071'. [ 430.712374][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 430.716004][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 430.717497][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 430.718499][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 430.719105][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 431.250499][T18852] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.250614][T18852] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.250691][T18852] bridge_slave_0: entered allmulticast mode [ 431.254189][T18852] bridge_slave_0: entered promiscuous mode [ 431.257018][T18852] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.257199][T18852] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.257319][T18852] bridge_slave_1: entered allmulticast mode [ 431.259259][T18852] bridge_slave_1: entered promiscuous mode [ 431.296795][T18852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.300393][T18852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.333041][T18852] team0: Port device team_slave_0 added [ 431.335163][T18852] team0: Port device team_slave_1 added [ 431.361408][T18852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.361423][T18852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.361444][T18852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.362786][T18852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.362798][T18852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.362811][T18852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.405416][T18852] hsr_slave_0: entered promiscuous mode [ 431.406474][T18852] hsr_slave_1: entered promiscuous mode [ 431.407242][T18852] debugfs: 'hsr0' already exists in 'hsr' [ 431.407257][T18852] Cannot create hsr debugfs directory [ 431.576126][T18852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.576150][T18852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.653638][T18852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.653660][T18852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.721076][T18852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.721097][T18852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.776304][T18852] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 431.778587][T18852] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.778607][T18852] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.772030][ T53] Bluetooth: hci1: command tx timeout [ 434.851765][ T53] Bluetooth: hci1: command tx timeout [ 435.572440][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 436.930921][ T53] Bluetooth: hci1: command tx timeout [ 439.011321][ T53] Bluetooth: hci1: command tx timeout [ 440.693228][ T2002] block nbd0: Possible stuck request ffff888079147000: control (read@0,1024B). Runtime 150 seconds [ 440.693269][ T2002] block nbd0: Possible stuck request ffff8880791471c0: control (read@1024,1024B). Runtime 150 seconds [ 440.693293][ T2002] block nbd0: Possible stuck request ffff888079147380: control (read@2048,1024B). Runtime 150 seconds [ 440.693314][ T2002] block nbd0: Possible stuck request ffff888079147540: control (read@3072,1024B). Runtime 150 seconds [ 445.402226][ T5641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 445.407373][ T5641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 445.408159][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 445.419313][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 445.434219][ T5641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 445.575731][ T5641] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 445.577732][ T5640] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 445.592296][ T5640] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 445.595749][ T5640] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 445.596672][ T5640] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 445.597253][ T5640] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 445.606737][ T5636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 445.613609][ T5636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 445.659923][ T5640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 445.660534][ T5640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 445.715106][ T5640] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 445.716773][ T5640] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 445.717540][ T5640] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 445.719992][ T5640] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 445.720642][ T5640] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 446.972529][T18873] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.972677][T18873] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.972802][T18873] bridge_slave_0: entered allmulticast mode [ 446.973909][T18873] bridge_slave_0: entered promiscuous mode [ 447.028168][T18873] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.028290][T18873] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.028415][T18873] bridge_slave_1: entered allmulticast mode [ 447.030105][T18873] bridge_slave_1: entered promiscuous mode [ 447.125785][T18873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.159565][T18873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.256464][T18873] team0: Port device team_slave_0 added [ 447.256684][T18876] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.256802][T18876] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.256921][T18876] bridge_slave_0: entered allmulticast mode [ 447.258221][T18876] bridge_slave_0: entered promiscuous mode [ 447.259405][T18877] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.259509][T18877] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.259636][T18877] bridge_slave_0: entered allmulticast mode [ 447.272128][T18877] bridge_slave_0: entered promiscuous mode [ 447.275726][T18877] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.275806][T18877] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.275937][T18877] bridge_slave_1: entered allmulticast mode [ 447.277545][T18877] bridge_slave_1: entered promiscuous mode [ 447.304284][T18873] team0: Port device team_slave_1 added [ 447.304771][T18876] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.304928][T18876] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.305047][T18876] bridge_slave_1: entered allmulticast mode [ 447.306931][T18876] bridge_slave_1: entered promiscuous mode [ 447.407771][T18877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.423881][T18873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.423894][T18873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.423912][T18873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.441838][T18876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.446428][T18877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.460757][T18873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.460772][T18873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.460794][T18873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.476584][T18882] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.476753][T18882] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.476874][T18882] bridge_slave_0: entered allmulticast mode [ 447.479243][T18882] bridge_slave_0: entered promiscuous mode [ 447.483084][T18882] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.483183][T18882] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.483354][T18882] bridge_slave_1: entered allmulticast mode [ 447.485017][T18882] bridge_slave_1: entered promiscuous mode [ 447.489292][T18876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.501188][ T53] Bluetooth: hci4: command tx timeout [ 447.544181][T18877] team0: Port device team_slave_0 added [ 447.592985][T18882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.620432][T18877] team0: Port device team_slave_1 added [ 447.636553][T18882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.651002][ T53] Bluetooth: hci7: command tx timeout [ 447.654625][T18876] team0: Port device team_slave_0 added [ 447.658720][T18873] hsr_slave_0: entered promiscuous mode [ 447.659319][T18873] hsr_slave_1: entered promiscuous mode [ 447.659720][T18873] debugfs: 'hsr0' already exists in 'hsr' [ 447.659734][T18873] Cannot create hsr debugfs directory [ 447.713526][T18876] team0: Port device team_slave_1 added [ 447.715903][T18882] team0: Port device team_slave_0 added [ 447.716617][T18877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.716631][T18877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.716651][T18877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.718861][T18882] team0: Port device team_slave_1 added [ 447.742484][ T53] Bluetooth: hci6: command tx timeout [ 447.753151][T18877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.753165][T18877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.753186][T18877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.831308][ T53] Bluetooth: hci8: command tx timeout [ 447.842919][T18882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.842935][T18882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.842955][T18882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.844859][T18876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.844872][T18876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.844892][T18876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.861459][T18882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.861474][T18882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.861495][T18882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.886786][T18876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.886802][T18876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.886824][T18876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.950583][T18877] hsr_slave_0: entered promiscuous mode [ 447.952295][T18877] hsr_slave_1: entered promiscuous mode [ 447.954952][T18877] debugfs: 'hsr0' already exists in 'hsr' [ 447.954969][T18877] Cannot create hsr debugfs directory [ 448.054150][T18882] hsr_slave_0: entered promiscuous mode [ 448.054761][T18882] hsr_slave_1: entered promiscuous mode [ 448.055165][T18882] debugfs: 'hsr0' already exists in 'hsr' [ 448.055179][T18882] Cannot create hsr debugfs directory [ 448.070923][T18876] hsr_slave_0: entered promiscuous mode [ 448.071916][T18876] hsr_slave_1: entered promiscuous mode [ 448.072620][T18876] debugfs: 'hsr0' already exists in 'hsr' [ 448.072633][T18876] Cannot create hsr debugfs directory [ 449.571106][ T53] Bluetooth: hci4: command tx timeout [ 449.731081][ T53] Bluetooth: hci7: command tx timeout [ 449.820927][ T53] Bluetooth: hci6: command tx timeout [ 449.901123][ T53] Bluetooth: hci8: command tx timeout [ 450.301081][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 451.653395][ T53] Bluetooth: hci4: command tx timeout [ 451.811021][ T53] Bluetooth: hci7: command tx timeout [ 451.891040][ T53] Bluetooth: hci6: command tx timeout [ 451.972351][ T53] Bluetooth: hci8: command tx timeout [ 453.731031][ T53] Bluetooth: hci4: command tx timeout [ 453.891186][ T53] Bluetooth: hci7: command tx timeout [ 453.971224][ T53] Bluetooth: hci6: command tx timeout [ 454.051023][ T53] Bluetooth: hci8: command tx timeout [ 454.131820][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 470.773343][ T2002] block nbd0: Possible stuck request ffff888079147000: control (read@0,1024B). Runtime 180 seconds [ 470.773397][ T2002] block nbd0: Possible stuck request ffff8880791471c0: control (read@1024,1024B). Runtime 180 seconds [ 470.773465][ T2002] block nbd0: Possible stuck request ffff888079147380: control (read@2048,1024B). Runtime 180 seconds [ 470.773487][ T2002] block nbd0: Possible stuck request ffff888079147540: control (read@3072,1024B). Runtime 180 seconds [ 472.656609][ T5002] udevd[5002]: worker [13552] /devices/virtual/block/nbd0 timeout; kill it [ 472.656691][ T5002] udevd[5002]: seq 16203 '/devices/virtual/block/nbd0' killed [ 489.332110][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 491.334349][ T5640] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 491.335109][ T5640] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 491.335821][ T5640] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 491.336805][ T5640] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 491.337431][ T5640] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 491.759399][T18944] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.759510][T18944] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.759582][T18944] bridge_slave_0: entered allmulticast mode [ 491.760549][T18944] bridge_slave_0: entered promiscuous mode [ 491.765882][T18944] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.765982][T18944] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.766389][T18944] bridge_slave_1: entered allmulticast mode [ 491.768053][T18944] bridge_slave_1: entered promiscuous mode [ 491.809129][T18944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.814442][T18944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.842404][T18944] team0: Port device team_slave_0 added [ 491.844159][T18944] team0: Port device team_slave_1 added [ 491.868087][T18944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.868103][T18944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.868124][T18944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.869274][T18944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.869285][T18944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.869306][T18944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.922255][T18944] hsr_slave_0: entered promiscuous mode [ 491.923239][T18944] hsr_slave_1: entered promiscuous mode [ 491.924035][T18944] debugfs: 'hsr0' already exists in 'hsr' [ 491.924050][T18944] Cannot create hsr debugfs directory [ 493.411109][ T53] Bluetooth: hci9: command tx timeout [ 495.490897][ T53] Bluetooth: hci9: command tx timeout [ 497.571087][ T53] Bluetooth: hci9: command tx timeout [ 499.650847][ T53] Bluetooth: hci9: command tx timeout [ 500.854420][ T2002] block nbd0: Possible stuck request ffff888079147000: control (read@0,1024B). Runtime 210 seconds [ 500.854452][ T2002] block nbd0: Possible stuck request ffff8880791471c0: control (read@1024,1024B). Runtime 210 seconds [ 500.854466][ T2002] block nbd0: Possible stuck request ffff888079147380: control (read@2048,1024B). Runtime 210 seconds [ 500.854479][ T2002] block nbd0: Possible stuck request ffff888079147540: control (read@3072,1024B). Runtime 210 seconds [ 505.401388][ T5640] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 505.403749][ T5640] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 505.406520][ T5640] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 505.417525][ T5636] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 505.420565][ T5636] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 505.420965][ T5636] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 505.421736][ T5636] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 505.422594][ T5636] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 505.423170][ T5636] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 505.436529][T18970] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 506.056714][ T5641] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 506.059053][ T5641] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 506.059818][ T5641] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 506.061434][ T5641] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 506.081915][ T5641] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 506.083111][ T5641] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 506.098157][T18970] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 506.109326][ T5641] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 506.109629][ T5641] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 506.111483][ T5640] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 506.793585][T18966] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.793775][T18966] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.793891][T18966] bridge_slave_0: entered allmulticast mode [ 506.797170][T18966] bridge_slave_0: entered promiscuous mode [ 506.800213][T18966] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.800311][T18966] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.800428][T18966] bridge_slave_1: entered allmulticast mode [ 506.802647][T18966] bridge_slave_1: entered promiscuous mode [ 506.835395][T18966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.838374][T18966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.906667][T18966] team0: Port device team_slave_0 added [ 506.909247][T18966] team0: Port device team_slave_1 added [ 506.933953][T18968] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.934089][T18968] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.934179][T18968] bridge_slave_0: entered allmulticast mode [ 506.935117][T18968] bridge_slave_0: entered promiscuous mode [ 506.964726][T18968] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.964788][T18968] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.965043][T18968] bridge_slave_1: entered allmulticast mode [ 506.965969][T18968] bridge_slave_1: entered promiscuous mode [ 506.993875][T18966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.993890][T18966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.993911][T18966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.038487][T18966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.038502][T18966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.038523][T18966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.043866][T18968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.077002][T18968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.150313][T18968] team0: Port device team_slave_0 added [ 507.158991][T18968] team0: Port device team_slave_1 added [ 507.173169][T18966] hsr_slave_0: entered promiscuous mode [ 507.174404][T18966] hsr_slave_1: entered promiscuous mode [ 507.175036][T18966] debugfs: 'hsr0' already exists in 'hsr' [ 507.175050][T18966] Cannot create hsr debugfs directory [ 507.215042][T18968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.215058][T18968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.215077][T18968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.258384][T18968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.258400][T18968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.258422][T18968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.374606][T18968] hsr_slave_0: entered promiscuous mode [ 507.375213][T18968] hsr_slave_1: entered promiscuous mode [ 507.375646][T18968] debugfs: 'hsr0' already exists in 'hsr' [ 507.375660][T18968] Cannot create hsr debugfs directory [ 507.491360][ T53] Bluetooth: hci11: command tx timeout [ 507.571229][ T53] Bluetooth: hci10: command tx timeout [ 507.744715][T18989] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.744869][T18989] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.745273][T18989] bridge_slave_0: entered allmulticast mode [ 507.746735][T18989] bridge_slave_0: entered promiscuous mode [ 507.788998][T18989] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.789137][T18989] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.789217][T18989] bridge_slave_1: entered allmulticast mode [ 507.790140][T18989] bridge_slave_1: entered promiscuous mode [ 507.862032][T18989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.882855][T18989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.926560][T18990] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.926781][T18990] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.926905][T18990] bridge_slave_0: entered allmulticast mode [ 507.928411][T18990] bridge_slave_0: entered promiscuous mode [ 507.930445][T18990] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.930522][T18990] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.930612][T18990] bridge_slave_1: entered allmulticast mode [ 507.942064][T18990] bridge_slave_1: entered promiscuous mode [ 507.945578][T18989] team0: Port device team_slave_0 added [ 507.948865][T18989] team0: Port device team_slave_1 added [ 508.017777][T18990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.022305][T18990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.036547][T18989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.036563][T18989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.036585][T18989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.078024][T18989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.078041][T18989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.078063][T18989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.132494][ T53] Bluetooth: hci13: command tx timeout [ 508.173614][T18990] team0: Port device team_slave_0 added [ 508.176878][T18990] team0: Port device team_slave_1 added [ 508.193304][T18989] hsr_slave_0: entered promiscuous mode [ 508.193982][T18989] hsr_slave_1: entered promiscuous mode [ 508.194382][T18989] debugfs: 'hsr0' already exists in 'hsr' [ 508.194396][T18989] Cannot create hsr debugfs directory [ 508.213880][ T53] Bluetooth: hci12: command tx timeout [ 508.272131][T18990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.272149][T18990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.272170][T18990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.273939][T18990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.273953][T18990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.273975][T18990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.373847][T18990] hsr_slave_0: entered promiscuous mode [ 508.374545][T18990] hsr_slave_1: entered promiscuous mode [ 508.374972][T18990] debugfs: 'hsr0' already exists in 'hsr' [ 508.374987][T18990] Cannot create hsr debugfs directory [ 509.571015][ T53] Bluetooth: hci11: command tx timeout [ 509.650886][ T53] Bluetooth: hci10: command tx timeout [ 510.211063][ T53] Bluetooth: hci13: command tx timeout [ 510.291012][ T53] Bluetooth: hci12: command tx timeout [ 511.651028][ T53] Bluetooth: hci11: command tx timeout [ 511.732366][ T53] Bluetooth: hci10: command tx timeout [ 512.291014][ T53] Bluetooth: hci13: command tx timeout [ 512.371202][ T53] Bluetooth: hci12: command tx timeout [ 513.731041][ T53] Bluetooth: hci11: command tx timeout [ 513.810912][ T53] Bluetooth: hci10: command tx timeout [ 514.370989][ T53] Bluetooth: hci13: command tx timeout [ 514.451212][ T53] Bluetooth: hci12: command tx timeout [ 518.931477][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 529.172384][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 530.934567][ T2002] block nbd0: Possible stuck request ffff888079147000: control (read@0,1024B). Runtime 240 seconds [ 530.934607][ T2002] block nbd0: Possible stuck request ffff8880791471c0: control (read@1024,1024B). Runtime 240 seconds [ 530.934631][ T2002] block nbd0: Possible stuck request ffff888079147380: control (read@2048,1024B). Runtime 240 seconds [ 530.934678][ T2002] block nbd0: Possible stuck request ffff888079147540: control (read@3072,1024B). Runtime 240 seconds [ 551.888508][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 551.893487][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 551.899322][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 551.906727][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 551.909533][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 552.324763][T19040] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.324914][T19040] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.324984][T19040] bridge_slave_0: entered allmulticast mode [ 552.325851][T19040] bridge_slave_0: entered promiscuous mode [ 552.328467][T19040] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.328566][T19040] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.328674][T19040] bridge_slave_1: entered allmulticast mode [ 552.330284][T19040] bridge_slave_1: entered promiscuous mode [ 552.393934][T19040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.396051][T19040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.421344][T19040] team0: Port device team_slave_0 added [ 552.423150][T19040] team0: Port device team_slave_1 added [ 552.445252][T19040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.445267][T19040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.445289][T19040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.446393][T19040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.446404][T19040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.446425][T19040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.489040][T19040] hsr_slave_0: entered promiscuous mode [ 552.489935][T19040] hsr_slave_1: entered promiscuous mode [ 552.490574][T19040] debugfs: 'hsr0' already exists in 'hsr' [ 552.490587][T19040] Cannot create hsr debugfs directory [ 553.980944][ T5640] Bluetooth: hci14: command tx timeout [ 554.774054][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 554.774098][ T5640] Bluetooth: hci0: command 0x0406 tx timeout [ 556.051251][ T5641] Bluetooth: hci14: command tx timeout [ 557.821771][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 558.132820][ T5641] Bluetooth: hci14: command tx timeout [ 560.211205][ T5641] Bluetooth: hci14: command tx timeout [ 561.012998][ T2002] block nbd0: Possible stuck request ffff888079147000: control (read@0,1024B). Runtime 270 seconds [ 561.013037][ T2002] block nbd0: Possible stuck request ffff8880791471c0: control (read@1024,1024B). Runtime 270 seconds [ 561.013061][ T2002] block nbd0: Possible stuck request ffff888079147380: control (read@2048,1024B). Runtime 270 seconds [ 561.013083][ T2002] block nbd0: Possible stuck request ffff888079147540: control (read@3072,1024B). Runtime 270 seconds [ 565.446582][T18970] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 565.448884][T18970] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 565.452304][T18970] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 565.453422][T18970] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 565.454005][T18970] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 565.479622][T18970] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 565.484295][T18970] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 565.485126][T18970] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 565.485980][T18970] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 565.486567][T18970] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 566.279912][T19062] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.280091][T19062] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.280330][T19062] bridge_slave_0: entered allmulticast mode [ 566.282550][T19062] bridge_slave_0: entered promiscuous mode [ 566.285707][T19062] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.285806][T19062] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.285912][T19062] bridge_slave_1: entered allmulticast mode [ 566.287561][T19062] bridge_slave_1: entered promiscuous mode [ 566.349292][T19064] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.350338][T19064] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.370309][T19064] bridge_slave_0: entered allmulticast mode [ 566.382586][T19064] bridge_slave_0: entered promiscuous mode [ 566.403629][T19062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.406127][T19064] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.406232][T19064] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.406356][T19064] bridge_slave_1: entered allmulticast mode [ 566.436246][T19064] bridge_slave_1: entered promiscuous mode [ 566.453666][T19062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.522943][T19062] team0: Port device team_slave_0 added [ 566.526526][T19064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.529654][T19062] team0: Port device team_slave_1 added [ 566.553154][T19064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.556459][ T5641] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 566.559877][ T5641] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 566.560853][ T5641] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 566.562517][ T5641] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 566.563119][ T5641] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 566.709633][T19062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.709673][T19062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.709696][T19062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.725136][T19064] team0: Port device team_slave_0 added [ 566.727956][T19062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.727972][T19062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.727994][T19062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.769209][T19064] team0: Port device team_slave_1 added [ 566.833386][ T5641] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 566.836993][ T5641] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 566.837877][ T5641] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 566.840987][ T5641] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 566.844928][ T5641] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 566.938392][T19062] hsr_slave_0: entered promiscuous mode [ 566.940401][T19062] hsr_slave_1: entered promiscuous mode [ 566.941666][T19062] debugfs: 'hsr0' already exists in 'hsr' [ 566.941681][T19062] Cannot create hsr debugfs directory [ 566.947419][T19064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.947434][T19064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.947455][T19064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.018960][T19064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.018976][T19064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.018997][T19064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.204681][T19064] hsr_slave_0: entered promiscuous mode [ 567.205659][T19064] hsr_slave_1: entered promiscuous mode [ 567.206352][T19064] debugfs: 'hsr0' already exists in 'hsr' [ 567.206366][T19064] Cannot create hsr debugfs directory [ 567.491128][ T5641] Bluetooth: hci16: command tx timeout [ 567.571032][ T5641] Bluetooth: hci15: command tx timeout [ 568.024714][T19099] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.024846][T19099] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.025175][T19099] bridge_slave_0: entered allmulticast mode [ 568.026743][T19099] bridge_slave_0: entered promiscuous mode [ 568.038986][T19099] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.039126][T19099] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.039506][T19099] bridge_slave_1: entered allmulticast mode [ 568.043236][T19099] bridge_slave_1: entered promiscuous mode [ 568.131392][T19099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.148735][T19104] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.148905][T19104] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.149278][T19104] bridge_slave_0: entered allmulticast mode [ 568.151617][T19104] bridge_slave_0: entered promiscuous mode [ 568.155127][T19104] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.155227][T19104] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.155334][T19104] bridge_slave_1: entered allmulticast mode [ 568.156870][T19104] bridge_slave_1: entered promiscuous mode [ 568.209493][T19099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.235948][T19104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.253681][T19104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.275764][T19099] team0: Port device team_slave_0 added [ 568.278762][T19099] team0: Port device team_slave_1 added [ 568.323397][T19104] team0: Port device team_slave_0 added [ 568.324104][T19099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.324117][T19099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.324138][T19099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.326479][T19104] team0: Port device team_slave_1 added [ 568.327097][T19099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.327105][T19099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.327118][T19099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.417739][T19104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.417756][T19104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.417777][T19104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.422532][T19104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.422546][T19104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.422567][T19104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.445202][T19099] hsr_slave_0: entered promiscuous mode [ 568.446566][T19099] hsr_slave_1: entered promiscuous mode [ 568.447296][T19099] debugfs: 'hsr0' already exists in 'hsr' [ 568.447310][T19099] Cannot create hsr debugfs directory [ 568.529074][T19104] hsr_slave_0: entered promiscuous mode [ 568.537076][T19104] hsr_slave_1: entered promiscuous mode [ 568.540510][T19104] debugfs: 'hsr0' already exists in 'hsr' [ 568.540526][T19104] Cannot create hsr debugfs directory [ 568.612862][T19132] Bluetooth: hci17: command tx timeout [ 568.852405][T19132] Bluetooth: hci18: command tx timeout [ 569.570877][T19132] Bluetooth: hci16: command tx timeout [ 569.651127][T19132] Bluetooth: hci15: command tx timeout [ 570.130963][T19132] Bluetooth: hci4: command 0x0406 tx timeout [ 570.131061][T19132] Bluetooth: hci6: command 0x0406 tx timeout [ 570.131100][T19132] Bluetooth: hci7: command 0x0406 tx timeout [ 570.131139][T19132] Bluetooth: hci8: command 0x0406 tx timeout [ 570.690976][ T53] Bluetooth: hci17: command tx timeout [ 570.931723][ T53] Bluetooth: hci18: command tx timeout [ 571.650975][ T53] Bluetooth: hci16: command tx timeout [ 571.740944][ T53] Bluetooth: hci15: command tx timeout [ 572.771188][ T53] Bluetooth: hci17: command tx timeout [ 573.011052][ T53] Bluetooth: hci18: command tx timeout [ 573.730898][ T53] Bluetooth: hci16: command tx timeout [ 573.811782][ T53] Bluetooth: hci15: command tx timeout [ 574.851041][ T53] Bluetooth: hci17: command tx timeout [ 575.091328][ T53] Bluetooth: hci18: command tx timeout [ 577.011218][ T31] INFO: task syz.1.3071:18825 blocked for more than 143 seconds. [ 577.011242][ T31] Not tainted syzkaller #0 [ 577.011251][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.011261][ T31] task:syz.1.3071 state:D stack:26408 pid:18825 tgid:18820 ppid:5633 task_flags:0x480140 flags:0x00080002 [ 577.011310][ T31] Call Trace: [ 577.011317][ T31] [ 577.011331][ T31] __schedule+0x17dd/0x5830 [ 577.011441][ T31] ? __lock_acquire+0x747/0x2de0 [ 577.011508][ T31] ? __pfx___schedule+0x10/0x10 [ 577.011526][ T31] ? lock_acquire+0x115/0x350 [ 577.011555][ T31] ? schedule+0x90/0x2b0 [ 577.011579][ T31] schedule+0x164/0x2b0 [ 577.011601][ T31] blk_mq_freeze_queue_wait+0xfc/0x180 [ 577.011718][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 577.011742][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 577.011798][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 577.011875][ T31] nbd_set_size+0x4c5/0x7d0 [ 577.011961][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 577.012004][ T31] ? nla_memcpy+0x5b/0xc0 [ 577.012041][ T31] nbd_genl_reconfigure+0x7e1/0x1040 [ 577.012073][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 577.012095][ T31] ? __kmalloc_noprof+0x387/0x710 [ 577.012122][ T31] ? __nla_parse+0x40/0x60 [ 577.012152][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 577.012270][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 577.012300][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 577.012332][ T31] ? __lock_acquire+0x747/0x2de0 [ 577.012365][ T31] genl_rcv_msg+0x614/0x7a0 [ 577.012394][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.012416][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 577.012450][ T31] netlink_rcv_skb+0x226/0x4a0 [ 577.012681][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.012705][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.012747][ T31] ? down_read+0x2b9/0x320 [ 577.012776][ T31] genl_rcv+0x28/0x40 [ 577.012795][ T31] netlink_unicast+0x8ef/0xa80 [ 577.012847][ T31] netlink_sendmsg+0x7f0/0xb20 [ 577.012873][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.012895][ T31] ? aa_sock_msg_perm+0x144/0x210 [ 577.012920][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 577.012986][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.013003][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 577.013099][ T31] ____sys_sendmsg+0x54e/0x850 [ 577.013126][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.013158][ T31] ? import_iovec+0x73/0xa0 [ 577.013212][ T31] ___sys_sendmsg+0x2a5/0x360 [ 577.013230][ T31] ? __lock_acquire+0x747/0x2de0 [ 577.013263][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.013285][ T31] ? futex_wait+0x2a2/0x390 [ 577.013329][ T31] ? __fget_files+0x3a2/0x420 [ 577.013345][ T31] ? __fget_files+0x2a/0x420 [ 577.013362][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 577.013375][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.013399][ T31] do_syscall_64+0x166/0x520 [ 577.013412][ T31] ? trace_irq_disable+0x3b/0x140 [ 577.013426][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.013437][ T31] ? clear_bhb_loop+0x70/0xc0 [ 577.013450][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.013460][ T31] RIP: 0033:0x7f714d39fb19 [ 577.013471][ T31] RSP: 002b:00007f714e306028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.013483][ T31] RAX: ffffffffffffffda RBX: 00007f714d626090 RCX: 00007f714d39fb19 [ 577.013490][ T31] RDX: 0000000000000044 RSI: 0000200000000500 RDI: 0000000000000004 [ 577.013497][ T31] RBP: 00007f714d437b70 R08: 0000000000000000 R09: 0000000000000000 [ 577.013503][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.013508][ T31] R13: 00007f714d626128 R14: 00007f714d626090 R15: 00007ffe97282d28 [ 577.013526][ T31] [ 577.013531][ T31] INFO: task syz.1.3071:18829 blocked for more than 143 seconds. [ 577.013539][ T31] Not tainted syzkaller #0 [ 577.013544][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.013549][ T31] task:syz.1.3071 state:D stack:28248 pid:18829 tgid:18820 ppid:5633 task_flags:0x400040 flags:0x00080002 [ 577.013580][ T31] Call Trace: [ 577.013584][ T31] [ 577.013590][ T31] __schedule+0x17dd/0x5830 [ 577.013618][ T31] ? __pfx___schedule+0x10/0x10 [ 577.013657][ T31] ? schedule+0x90/0x2b0 [ 577.013672][ T31] schedule+0x164/0x2b0 [ 577.013684][ T31] schedule_preempt_disabled+0x13/0x30 [ 577.013695][ T31] __mutex_lock+0x7c4/0x15a0 [ 577.013711][ T31] ? __mutex_lock+0x5cd/0x15a0 [ 577.013725][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 577.013739][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 577.013755][ T31] ? __lock_acquire+0x747/0x2de0 [ 577.013769][ T31] ? radix_tree_lookup+0x240/0x290 [ 577.013810][ T31] genl_rcv_msg+0x10b/0x7a0 [ 577.013826][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.013852][ T31] netlink_rcv_skb+0x226/0x4a0 [ 577.013867][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.013880][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.013903][ T31] ? down_read+0x2b9/0x320 [ 577.013918][ T31] genl_rcv+0x28/0x40 [ 577.013929][ T31] netlink_unicast+0x8ef/0xa80 [ 577.013952][ T31] netlink_sendmsg+0x7f0/0xb20 [ 577.013966][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.013978][ T31] ? aa_sock_msg_perm+0x144/0x210 [ 577.013991][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 577.014006][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.014015][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 577.014030][ T31] ____sys_sendmsg+0x54e/0x850 [ 577.014044][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.014081][ T31] ? import_iovec+0x73/0xa0 [ 577.014096][ T31] ___sys_sendmsg+0x2a5/0x360 [ 577.014106][ T31] ? __lock_acquire+0x747/0x2de0 [ 577.014121][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.014134][ T31] ? tomoyo_path_number_perm+0x219/0x5f0 [ 577.014208][ T31] ? __fget_files+0x3a2/0x420 [ 577.014220][ T31] ? __fget_files+0x2a/0x420 [ 577.014237][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 577.014250][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.014260][ T31] ? kfree+0x4d/0x650 [ 577.014277][ T31] ? __pfx_kcov_ioctl+0x10/0x10 [ 577.014301][ T31] do_syscall_64+0x166/0x520 [ 577.014313][ T31] ? trace_irq_disable+0x3b/0x140 [ 577.014326][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.014335][ T31] ? clear_bhb_loop+0x70/0xc0 [ 577.014351][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.014361][ T31] RIP: 0033:0x7f714d39fb19 [ 577.014370][ T31] RSP: 002b:00007f714e2e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.014380][ T31] RAX: ffffffffffffffda RBX: 00007f714d626180 RCX: 00007f714d39fb19 [ 577.014387][ T31] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 577.014394][ T31] RBP: 00007f714d437b70 R08: 0000000000000000 R09: 0000000000000000 [ 577.014400][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.014405][ T31] R13: 00007f714d626218 R14: 00007f714d626180 R15: 00007ffe97282d28 [ 577.014422][ T31] [ 577.014427][ T31] INFO: task syz.2.3073:18828 blocked for more than 143 seconds. [ 577.014435][ T31] Not tainted syzkaller #0 [ 577.014440][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.014444][ T31] task:syz.2.3073 state:D stack:25896 pid:18828 tgid:18827 ppid:17534 task_flags:0x400040 flags:0x00080002 [ 577.014473][ T31] Call Trace: [ 577.014477][ T31] [ 577.014483][ T31] __schedule+0x17dd/0x5830 [ 577.014511][ T31] ? __pfx___schedule+0x10/0x10 [ 577.014527][ T31] ? schedule+0x90/0x2b0 [ 577.014541][ T31] schedule+0x164/0x2b0 [ 577.014558][ T31] schedule_preempt_disabled+0x13/0x30 [ 577.014569][ T31] __mutex_lock+0x7c4/0x15a0 [ 577.014584][ T31] ? __mutex_lock+0x5cd/0x15a0 [ 577.014599][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 577.014612][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 577.014625][ T31] ? __dev_queue_xmit+0x29b/0x3920 [ 577.014704][ T31] ? radix_tree_lookup+0x240/0x290 [ 577.014718][ T31] genl_rcv_msg+0x10b/0x7a0 [ 577.014733][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.014755][ T31] netlink_rcv_skb+0x226/0x4a0 [ 577.014769][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.014782][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.014805][ T31] ? down_read+0x2b9/0x320 [ 577.014821][ T31] genl_rcv+0x28/0x40 [ 577.014831][ T31] netlink_unicast+0x8ef/0xa80 [ 577.014861][ T31] netlink_sendmsg+0x7f0/0xb20 [ 577.014874][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.014886][ T31] ? aa_sock_msg_perm+0x144/0x210 [ 577.014898][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 577.014913][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.014922][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 577.014937][ T31] ____sys_sendmsg+0x54e/0x850 [ 577.014951][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.014967][ T31] ? import_iovec+0x73/0xa0 [ 577.014982][ T31] ___sys_sendmsg+0x2a5/0x360 [ 577.014992][ T31] ? __lock_acquire+0x747/0x2de0 [ 577.015006][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.015019][ T31] ? futex_wake+0x51b/0x5f0 [ 577.015048][ T31] ? __fget_files+0x3a2/0x420 [ 577.015059][ T31] ? __fget_files+0x2a/0x420 [ 577.015077][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 577.015089][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.015113][ T31] do_syscall_64+0x166/0x520 [ 577.015125][ T31] ? trace_irq_disable+0x3b/0x140 [ 577.015137][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.015147][ T31] ? clear_bhb_loop+0x70/0xc0 [ 577.015159][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.015169][ T31] RIP: 0033:0x7f4e9c99fb19 [ 577.015178][ T31] RSP: 002b:00007f4e9d83a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.015191][ T31] RAX: ffffffffffffffda RBX: 00007f4e9cc25fa0 RCX: 00007f4e9c99fb19 [ 577.015198][ T31] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000004 [ 577.015204][ T31] RBP: 00007f4e9ca37b70 R08: 0000000000000000 R09: 0000000000000000 [ 577.015210][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.015215][ T31] R13: 00007f4e9cc26038 R14: 00007f4e9cc25fa0 R15: 00007ffe5ec764b8 [ 577.015233][ T31] [ 577.015236][ T31] INFO: task syz.2.3073:18839 blocked for more than 143 seconds. [ 577.015243][ T31] Not tainted syzkaller #0 [ 577.015248][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.015253][ T31] task:syz.2.3073 state:D stack:27168 pid:18839 tgid:18827 ppid:17534 task_flags:0x400040 flags:0x00080002 [ 577.015281][ T31] Call Trace: [ 577.015285][ T31] [ 577.015291][ T31] __schedule+0x17dd/0x5830 [ 577.015318][ T31] ? __pfx___schedule+0x10/0x10 [ 577.015335][ T31] ? schedule+0x90/0x2b0 [ 577.015352][ T31] schedule+0x164/0x2b0 [ 577.015365][ T31] schedule_preempt_disabled+0x13/0x30 [ 577.015376][ T31] __mutex_lock+0x7c4/0x15a0 [ 577.015391][ T31] ? __mutex_lock+0x5cd/0x15a0 [ 577.015405][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 577.015418][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 577.015431][ T31] ? __dev_queue_xmit+0x29b/0x3920 [ 577.015449][ T31] ? radix_tree_lookup+0x240/0x290 [ 577.015463][ T31] genl_rcv_msg+0x10b/0x7a0 [ 577.015477][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.015498][ T31] netlink_rcv_skb+0x226/0x4a0 [ 577.015513][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.015525][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.015548][ T31] ? down_read+0x2b9/0x320 [ 577.015563][ T31] genl_rcv+0x28/0x40 [ 577.015574][ T31] netlink_unicast+0x8ef/0xa80 [ 577.015597][ T31] netlink_sendmsg+0x7f0/0xb20 [ 577.015609][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.015621][ T31] ? aa_sock_msg_perm+0x144/0x210 [ 577.015647][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 577.015662][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.015671][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 577.015686][ T31] ____sys_sendmsg+0x54e/0x850 [ 577.015700][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.015716][ T31] ? import_iovec+0x73/0xa0 [ 577.015730][ T31] ___sys_sendmsg+0x2a5/0x360 [ 577.015744][ T31] ? __lock_acquire+0x747/0x2de0 [ 577.015760][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.015773][ T31] ? futex_wait+0x2a2/0x390 [ 577.015802][ T31] ? __fget_files+0x3a2/0x420 [ 577.015813][ T31] ? __fget_files+0x2a/0x420 [ 577.015830][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 577.015849][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.015872][ T31] do_syscall_64+0x166/0x520 [ 577.015883][ T31] ? trace_irq_disable+0x3b/0x140 [ 577.015896][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.015906][ T31] ? clear_bhb_loop+0x70/0xc0 [ 577.015918][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.015928][ T31] RIP: 0033:0x7f4e9c99fb19 [ 577.015936][ T31] RSP: 002b:00007f4e9d819028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.015945][ T31] RAX: ffffffffffffffda RBX: 00007f4e9cc26090 RCX: 00007f4e9c99fb19 [ 577.015952][ T31] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000004 [ 577.015958][ T31] RBP: 00007f4e9ca37b70 R08: 0000000000000000 R09: 0000000000000000 [ 577.015964][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.015970][ T31] R13: 00007f4e9cc26128 R14: 00007f4e9cc26090 R15: 00007ffe5ec764b8 [ 577.015987][ T31] [ 577.015992][ T31] INFO: task syz.3.3074:18832 blocked for more than 143 seconds. [ 577.015999][ T31] Not tainted syzkaller #0 [ 577.016004][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.016008][ T31] task:syz.3.3074 state:D stack:27840 pid:18832 tgid:18831 ppid:17880 task_flags:0x400140 flags:0x00080002 [ 577.016037][ T31] Call Trace: [ 577.016040][ T31] [ 577.016046][ T31] __schedule+0x17dd/0x5830 [ 577.016074][ T31] ? __pfx___schedule+0x10/0x10 [ 577.016103][ T31] ? schedule+0x90/0x2b0 [ 577.016116][ T31] schedule+0x164/0x2b0 [ 577.016129][ T31] schedule_preempt_disabled+0x13/0x30 [ 577.016140][ T31] __mutex_lock+0x7c4/0x15a0 [ 577.016155][ T31] ? __mutex_lock+0x5cd/0x15a0 [ 577.016169][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 577.016182][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 577.016195][ T31] ? __dev_queue_xmit+0x29b/0x3920 [ 577.016217][ T31] ? radix_tree_lookup+0x240/0x290 [ 577.016236][ T31] genl_rcv_msg+0x10b/0x7a0 [ 577.016251][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.016277][ T31] netlink_rcv_skb+0x226/0x4a0 [ 577.016292][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.016305][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.016327][ T31] ? down_read+0x2b9/0x320 [ 577.016345][ T31] genl_rcv+0x28/0x40 [ 577.016358][ T31] netlink_unicast+0x8ef/0xa80 [ 577.016381][ T31] netlink_sendmsg+0x7f0/0xb20 [ 577.016394][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.016406][ T31] ? aa_sock_msg_perm+0x144/0x210 [ 577.016418][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 577.016433][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.016441][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 577.016456][ T31] __sys_sendto+0x408/0x5a0 [ 577.016470][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 577.016496][ T31] ? do_user_addr_fault+0xd3f/0x1480 [ 577.016524][ T31] __x64_sys_sendto+0xde/0x100 [ 577.016536][ T31] do_syscall_64+0x166/0x520 [ 577.016548][ T31] ? trace_irq_disable+0x3b/0x140 [ 577.016560][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.016570][ T31] ? clear_bhb_loop+0x70/0xc0 [ 577.016582][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.016592][ T31] RIP: 0033:0x7f2ce596034e [ 577.016600][ T31] RSP: 002b:00007f2ce68c0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 577.016610][ T31] RAX: ffffffffffffffda RBX: 00007f2ce68c26c0 RCX: 00007f2ce596034e [ 577.016617][ T31] RDX: 0000000000000024 RSI: 00007f2ce68c1000 RDI: 0000000000000007 [ 577.016623][ T31] RBP: 0000000000000000 R08: 00007f2ce68c0f04 R09: 000000000000000c [ 577.016643][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 577.016649][ T31] R13: 00007f2ce68c0f58 R14: 00007f2ce68c1000 R15: 0000000000000000 [ 577.016665][ T31] [ 577.016669][ T31] INFO: task syz.4.3075:18836 blocked for more than 143 seconds. [ 577.016676][ T31] Not tainted syzkaller #0 [ 577.016681][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.016685][ T31] task:syz.4.3075 state:D stack:27168 pid:18836 tgid:18833 ppid:18383 task_flags:0x400140 flags:0x00080002 [ 577.016714][ T31] Call Trace: [ 577.016717][ T31] [ 577.016723][ T31] __schedule+0x17dd/0x5830 [ 577.016751][ T31] ? __pfx___schedule+0x10/0x10 [ 577.016768][ T31] ? schedule+0x90/0x2b0 [ 577.016781][ T31] schedule+0x164/0x2b0 [ 577.016794][ T31] schedule_preempt_disabled+0x13/0x30 [ 577.016805][ T31] __mutex_lock+0x7c4/0x15a0 [ 577.016820][ T31] ? __mutex_lock+0x5cd/0x15a0 [ 577.016834][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 577.016853][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 577.016866][ T31] ? __dev_queue_xmit+0x29b/0x3920 [ 577.016884][ T31] ? radix_tree_lookup+0x240/0x290 [ 577.016898][ T31] genl_rcv_msg+0x10b/0x7a0 [ 577.016912][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.016933][ T31] netlink_rcv_skb+0x226/0x4a0 [ 577.016948][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.016960][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.016983][ T31] ? down_read+0x2b9/0x320 [ 577.016998][ T31] genl_rcv+0x28/0x40 [ 577.017009][ T31] netlink_unicast+0x8ef/0xa80 [ 577.017032][ T31] netlink_sendmsg+0x7f0/0xb20 [ 577.017045][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.017056][ T31] ? aa_sock_msg_perm+0x144/0x210 [ 577.017068][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 577.017083][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.017092][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 577.017107][ T31] __sys_sendto+0x408/0x5a0 [ 577.017120][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 577.017146][ T31] ? do_user_addr_fault+0xd3f/0x1480 [ 577.017160][ T31] __x64_sys_sendto+0xde/0x100 [ 577.017172][ T31] do_syscall_64+0x166/0x520 [ 577.017184][ T31] ? trace_irq_disable+0x3b/0x140 [ 577.017196][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.017206][ T31] ? clear_bhb_loop+0x70/0xc0 [ 577.017218][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.017228][ T31] RIP: 0033:0x7fe917b6034e [ 577.017236][ T31] RSP: 002b:00007fe918a43e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 577.017245][ T31] RAX: ffffffffffffffda RBX: 00007fe918a456c0 RCX: 00007fe917b6034e [ 577.017252][ T31] RDX: 0000000000000020 RSI: 00007fe918a44000 RDI: 000000000000000a [ 577.017258][ T31] RBP: 0000000000000000 R08: 00007fe918a43f04 R09: 000000000000000c [ 577.017264][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 577.017269][ T31] R13: 00007fe918a43f58 R14: 00007fe918a44000 R15: 0000000000000000 [ 577.017286][ T31] [ 577.017290][ T31] INFO: task syz-executor:18852 blocked for more than 143 seconds. [ 577.017296][ T31] Not tainted syzkaller #0 [ 577.017301][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.017305][ T31] task:syz-executor state:D stack:22984 pid:18852 tgid:18852 ppid:1 task_flags:0x400140 flags:0x00080002 [ 577.017331][ T31] Call Trace: [ 577.017334][ T31] [ 577.017342][ T31] __schedule+0x17dd/0x5830 [ 577.017372][ T31] ? __pfx___schedule+0x10/0x10 [ 577.017388][ T31] ? schedule+0x90/0x2b0 [ 577.017401][ T31] schedule+0x164/0x2b0 [ 577.017414][ T31] schedule_preempt_disabled+0x13/0x30 [ 577.017425][ T31] __mutex_lock+0x7c4/0x15a0 [ 577.017440][ T31] ? __mutex_lock+0x5cd/0x15a0 [ 577.017454][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 577.017467][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 577.017484][ T31] ? __lock_acquire+0x747/0x2de0 [ 577.017498][ T31] ? radix_tree_lookup+0x240/0x290 [ 577.017512][ T31] genl_rcv_msg+0x10b/0x7a0 [ 577.017527][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.017548][ T31] netlink_rcv_skb+0x226/0x4a0 [ 577.017562][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.017575][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.017598][ T31] ? down_read+0x2b9/0x320 [ 577.017613][ T31] genl_rcv+0x28/0x40 [ 577.017623][ T31] netlink_unicast+0x8ef/0xa80 [ 577.017660][ T31] netlink_sendmsg+0x7f0/0xb20 [ 577.017674][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.017685][ T31] ? aa_sock_msg_perm+0x144/0x210 [ 577.017698][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 577.017713][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.017721][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 577.017736][ T31] __sys_sendto+0x408/0x5a0 [ 577.017751][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 577.017776][ T31] ? fd_install+0x95/0x4e0 [ 577.017791][ T31] __x64_sys_sendto+0xde/0x100 [ 577.017804][ T31] do_syscall_64+0x166/0x520 [ 577.017815][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.017825][ T31] ? clear_bhb_loop+0x70/0xc0 [ 577.017838][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.017852][ T31] RIP: 0033:0x7f933d56034e [ 577.017860][ T31] RSP: 002b:00007fff9ad54cd8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 577.017869][ T31] RAX: ffffffffffffffda RBX: 000055557d988500 RCX: 00007f933d56034e [ 577.017876][ T31] RDX: 0000000000000020 RSI: 00007f933e354670 RDI: 0000000000000005 [ 577.017882][ T31] RBP: 0000000000000001 R08: 00007fff9ad54d54 R09: 000000000000000c [ 577.017888][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 577.017893][ T31] R13: 00007fff9ad54da8 R14: 00007f933e354670 R15: 0000000000000000 [ 577.017910][ T31] [ 577.017948][ T31] [ 577.017948][ T31] Showing all locks held in the system: [ 577.017987][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 577.018045][ T31] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 577.018129][ T31] locks held by getty/5389: 2, on CPU#1: [ 577.018136][ T31] #0: ffff8880268810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 577.018194][ T31] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 577.018229][ T31] locks held by udevd/13552: 1, on CPU#1: [ 577.018236][ T31] #0: ffff88802ac1d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 577.018292][ T31] locks held by syz.1.3071/18825: 6, on CPU#1: [ 577.018299][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.018323][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.018347][ T31] #2: ffff88807ce1ca60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 577.018372][ T31] #3: ffff888027513e78 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 577.018395][ T31] #4: ffff888027513840 (&q->q_usage_counter(io)#71){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 577.018426][ T31] #5: ffff888027513878 (&q->q_usage_counter(queue)#54){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 577.018457][ T31] locks held by syz.1.3071/18829: 2, on CPU#1: [ 577.018464][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.018486][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.018510][ T31] locks held by syz.2.3073/18828: 2, on CPU#0: [ 577.018517][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.018539][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.018563][ T31] locks held by syz.2.3073/18839: 2, on CPU#0: [ 577.018569][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.018592][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.018615][ T31] locks held by syz.3.3074/18832: 2, on CPU#1: [ 577.018622][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.018661][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.018684][ T31] locks held by syz.4.3075/18836: 2, on CPU#0: [ 577.018691][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.018713][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.018737][ T31] locks held by syz-executor/18852: 2, on CPU#1: [ 577.018743][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.018766][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.018796][ T31] locks held by syz-executor/18873: 2, on CPU#1: [ 577.018803][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.018825][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.018855][ T31] locks held by syz-executor/18876: 2, on CPU#0: [ 577.018861][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.018884][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.018907][ T31] locks held by syz-executor/18877: 2, on CPU#1: [ 577.018914][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.018936][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.018959][ T31] locks held by syz-executor/18882: 2, on CPU#1: [ 577.018966][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.018988][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.019014][ T31] locks held by syz-executor/18944: 2, on CPU#1: [ 577.019020][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.019042][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.019066][ T31] locks held by syz-executor/18966: 2, on CPU#0: [ 577.019073][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.019095][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.019118][ T31] locks held by syz-executor/18968: 2, on CPU#0: [ 577.019125][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.019148][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.019171][ T31] locks held by syz-executor/18989: 2, on CPU#0: [ 577.019178][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.019200][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.019223][ T31] locks held by syz-executor/18990: 2, on CPU#0: [ 577.019230][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.019252][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.019277][ T31] locks held by syz-executor/19040: 2, on CPU#1: [ 577.019284][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.019306][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.019330][ T31] locks held by syz-executor/19062: 2, on CPU#1: [ 577.019337][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.019359][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.019382][ T31] locks held by syz-executor/19064: 2, on CPU#1: [ 577.019388][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.019411][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.019435][ T31] locks held by syz-executor/19099: 2, on CPU#0: [ 577.019442][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.019464][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.019489][ T31] locks held by syz-executor/19104: 2, on CPU#0: [ 577.019496][ T31] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 577.019519][ T31] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 577.019544][ T31] [ 577.019546][ T31] ============================================= [ 577.019546][ T31] [ 577.019556][ T31] NMI backtrace for cpu 1 [ 577.019563][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 577.019574][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 577.019580][ T31] Call Trace: [ 577.019585][ T31] [ 577.019589][ T31] dump_stack_lvl+0xe8/0x150 [ 577.019605][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 577.019617][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 577.019637][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 577.019650][ T31] sys_info+0x135/0x170 [ 577.019659][ T31] watchdog+0x1073/0x10f0 [ 577.019677][ T31] ? watchdog+0x209/0x10f0 [ 577.019693][ T31] kthread+0x38b/0x480 [ 577.019709][ T31] ? __pfx_watchdog+0x10/0x10 [ 577.019720][ T31] ? __pfx_kthread+0x10/0x10 [ 577.019732][ T31] ret_from_fork+0x514/0xb70 [ 577.019756][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 577.019767][ T31] ? __switch_to+0xc78/0x1410 [ 577.019784][ T31] ? __pfx_kthread+0x10/0x10 [ 577.019795][ T31] ret_from_fork_asm+0x1a/0x30 [ 577.019814][ T31] [ 577.019830][ T31] Sending NMI from CPU 1 to CPUs 0: [ 577.019879][ C0] NMI backtrace for cpu 0 [ 577.019892][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 577.019912][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 577.019922][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 577.019992][ C0] Code: 7b 92 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 1a 24 00 fb f4 3c 17 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 577.020007][ C0] RSP: 0018:ffffffff8fe07ca0 EFLAGS: 00000242 [ 577.020023][ C0] RAX: 0000000000248023 RBX: ffffffff819c9950 RCX: 8000000000000001 [ 577.020036][ C0] RDX: 0000000000000001 RSI: ffffffff8e6a8ac6 RDI: ffffffff8c8ea180 [ 577.020049][ C0] RBP: ffffffff8fe07d78 R08: ffff8880b8233d9b R09: 1ffff110170467b3 [ 577.020062][ C0] R10: dffffc0000000000 R11: ffffed10170467b4 R12: 0000000000000000 [ 577.020075][ C0] R13: 1ffffffff1fd1df8 R14: 1ffffffff1fc0f9c R15: dffffc0000000000 [ 577.020089][ C0] FS: 0000000000000000(0000) GS:ffff88812340a000(0000) knlGS:0000000000000000 [ 577.020104][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.020116][ C0] CR2: 000055f829f70f20 CR3: 000000000ff48000 CR4: 00000000003526f0 [ 577.020133][ C0] Call Trace: [ 577.020140][ C0] [ 577.020146][ C0] default_idle+0x9/0x20 [ 577.020170][ C0] default_idle_call+0x72/0xb0 [ 577.020196][ C0] do_idle+0x2e0/0x540 [ 577.020227][ C0] ? __pfx_do_idle+0x10/0x10 [ 577.020248][ C0] ? do_idle+0x10/0x540 [ 577.020271][ C0] cpu_startup_entry+0x43/0x60 [ 577.020292][ C0] rest_init+0x378/0x3a0 [ 577.020307][ C0] ? __pfx_rest_init+0x10/0x10 [ 577.020328][ C0] ? __pfx_kernel_init+0x10/0x10 [ 577.020354][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 577.020413][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 577.020466][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 577.020494][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 577.020576][ C0] start_kernel+0x392/0x3e0 [ 577.020703][ C0] x86_64_start_reservations+0x24/0x30 [ 577.020752][ C0] x86_64_start_kernel+0x137/0x1b0 [ 577.020775][ C0] common_startup_64+0x13e/0x157 [ 577.020809][ C0] [ 577.020912][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 579.981144][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 579.990248][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 580.000294][ T31] Call Trace: [ 580.003564][ T31] [ 580.006485][ T31] vpanic+0x26f/0x710 [ 580.010458][ T31] panic+0xc5/0xd0 [ 580.014165][ T31] ? __pfx_panic+0x10/0x10 [ 580.018571][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 580.024022][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 580.029397][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 580.035548][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 580.041692][ T31] watchdog+0x10e7/0x10f0 [ 580.046025][ T31] ? watchdog+0x209/0x10f0 [ 580.050434][ T31] kthread+0x38b/0x480 [ 580.054493][ T31] ? __pfx_watchdog+0x10/0x10 [ 580.059159][ T31] ? __pfx_kthread+0x10/0x10 [ 580.063740][ T31] ret_from_fork+0x514/0xb70 [ 580.068317][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 580.073419][ T31] ? __switch_to+0xc78/0x1410 [ 580.078098][ T31] ? __pfx_kthread+0x10/0x10 [ 580.082681][ T31] ret_from_fork_asm+0x1a/0x30 [ 580.087459][ T31] [ 580.090619][ T31] Kernel Offset: disabled [ 580.095046][ T31] Rebooting in 86400 seconds..