last executing test programs: 17.607503791s ago: executing program 0 (id=2092): r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d4", 0x1}], 0x1}, 0x40) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, {[@fastopen={0x22, 0x6, "269042f6"}]}}}}}}}}, 0x0) 17.532281838s ago: executing program 0 (id=2095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000980)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {}, {0x1, 0x0, 0x0, 0xfffffffffffffffd}}}, 0xb8}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000480)={0xffffffff}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001200010a4fdd7a6ccb2535880a0d"], 0x26}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r2) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f0000001c80)) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xb0, r4, 0x200, 0x70bd2b, 0x8, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x27ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa7}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xbf}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2c9}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40015}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="900000001900010000000000000000001d0109002900838025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f880000004d000f"], 0x90}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000000) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x48040) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r8, 0x84, 0x75, &(0x7f0000000b40)=""/4062, &(0x7f0000001b40)=0xfde) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0x76, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x9, 0x6, 'EAC', 0x8000, 0x0, 0x0, @private2, @private2, [@hopopts={0x89}], "98efd03a7e60b623"}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x0, 0x2}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000001e00)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001e40)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000001e80)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) accept4(r9, 0x0, 0x0, 0x0) 17.51863848s ago: executing program 3 (id=2096): clock_gettime(0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x0, 0x0) 17.358541295s ago: executing program 0 (id=2098): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0xbf, 0x4c}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0xd, @remote, 0x7}, 0x1c, 0x0}, 0x40080) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0xbf, 0x4c}]}]}, 0xfc}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0xd, @remote, 0x7}, 0x1c, 0x0}, 0x40080) (async) 17.357707838s ago: executing program 3 (id=2099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x44, r1, 0x4, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x20000801) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x138, r1, 0x600, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xc6, 0xa8, @random="940bf402f74c13c0ca896710c741aae9872bd6e0cf357c9ba4f36ed5b191c66bf45b5b41d790963a9cf42a5c5c1449750fea1fbc07851bebe8b5b6b9ecc2ab169051e1b215f3dbc15e275c535441fd4d077dccde0bf48a697c2c2cc2ce94f6afc1fdc0209a45966028b04b66ee57a063e543cddc20026adbea018fdb3e36384f4158c20adbcdc7b07e3d64f0e540acd6328c18d69f7e4d852bcf21a446894ec8cf6f2dc59ac7d22838c116af272fc9aa03386f04fc6741988425933c400e2721960a"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x138}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000047c0)=@nat={'nat\x00', 0x19, 0x3, 0xcd0, [0x200000003980, 0x0, 0x0, 0x2000000039b0, 0x200000004548], 0x0, 0x0, &(0x7f0000003980)=ANY=[@ANYBLOB="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"]}, 0xd44) 17.345524102s ago: executing program 2 (id=2101): r0 = socket(0x10, 0x3, 0x3) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x4e22, 0x367f3b02, @mcast1, 0xfffffff5}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x100, 0x1}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="e5da077b", @ANYRES16=r3, @ANYBLOB="00042cbd7000ffdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x44) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x220142, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000540)={&(0x7f0000000580)=""/74, 0x33e000, 0x1000}, 0x20) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001340)={'ip6gretap0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x18c, 0x203, 0x158, 0x19030000, 0x2d8, 0x2e0, 0x2e0, 0x2d8, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xf0, 0x158, 0x0, {0x1000000}, [@common=@unspec=@limit={{0x48}, {0x2000007a, 0x7f, 0x40, 0x8, 0xe6, 0x75800a43, 0xfffffffffffffff9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x15, 0x8, 0x6, 0x462, 'syz1\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@remote, @mcast2, [0xff, 0x0, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0xff, 0xffffff00], 'nr0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x33, 0x0, 0x3, 0x3d}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x8, 0x5, 0x9, 0x81, @private0, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0x0, 0xffffffff, 0xff000000], [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffff00], 0x46}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6cb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000600)=0x1000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000640)=0x1, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000680)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000006c0)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000700)={0x2c, 0x0, r5}, 0x10) bind$xdp(r2, &(0x7f0000000740)={0x2c, 0x1, r5, 0x0, r6}, 0x10) getpeername$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000001380)=0x7f, 0x4) sendmsg$nl_route(r9, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRES32=0x0, @ANYBLOB="00040000"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffe, {{@in=@multicast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, {@in=@broadcast, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x15c}}, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004004000040000000a040000000080005e63008000000000000000000000b26686f60677308b7afec28aa61ffd743252b26cba68bbf947ef56d40b2f9c7e55cf0464000000802e2d8a173395b5bd0e4b366c87bc0da8a3f6720cc73ce082d8ecfcc0161529cda4e45a0868f8060f3029565c1ded9472ff5635c2cba93c51bdcaf66f58ab791385f64cdebddace98d059f1c53003a8c1c9776b4206290c51a954790fbbe3394840f31364c80d79394a2ff8b93dea9884c190c07424ddfb02a8a3a393b0", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x10, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 17.338239248s ago: executing program 1 (id=2102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a310000000014000580080001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2004}]}, 0x24}, 0x1, 0x0, 0x0, 0x408d5}, 0x4000080) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1d, 0x5, 0x470, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000080)={'wlan0\x00', @ifru_mtu=0x34f}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a310000000014000580080001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2004}]}, 0x24}, 0x1, 0x0, 0x0, 0x408d5}, 0x4000080) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1d, 0x5, 0x470, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (async) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) (async) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000080)={'wlan0\x00', @ifru_mtu=0x34f}) (async) 17.170603665s ago: executing program 3 (id=2103): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f00000003c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000) ppoll(&(0x7f0000000400)=[{r4}], 0x1, &(0x7f0000000440), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r2, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x63}}}}, [@NL80211_ATTR_KEY_SEQ={0x8, 0xa, "54ba39f2"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9690b5ec45a58a47a67ac31e8b"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe88fffa000000000000000000000001aca80c0000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000200000ffffffffffffffff000000000000000000000000000000000000000000000000d72a0c5700000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e9ecdcb0a336629600000000000000002001040000004b00000000000000000064010102000000000000000000000000000000050000000302002000000000f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c0000000a000000ffffffff00000000000000000000000000000000000308"], 0xfc}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000005c0)=[{{&(0x7f0000000640)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000006c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000700)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000780)="92", 0x1}], 0x1}}], 0x2, 0x4000090) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000007c0), &(0x7f0000000800)=0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b80000001900010000000000000000002001000000895d000000000000000000ac1414aa00000000000000000000000000000005000000000a00005800000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000002000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/112], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="a00000002100010000000000feffffff7f00000100000000000000000000000000000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc0200000020000000000000000000007688f27e0000000000040000dd4231fd00000000000000000000ffffffffffffffffffff0000000000000000000000006c0100000435"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000002dc0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='a', 0x1}], 0x1}, 0x240280d1) 16.989287003s ago: executing program 2 (id=2105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000710"], 0x1c}}, 0x0) 16.976534722s ago: executing program 1 (id=2106): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000240)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="746d7381c3000000000000599afc582a505dc8d7d9ec5c130f7caa17cf70d058f1f8f2578ea3c7", @ANYRES16=r3, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xde6}, 0x8) 16.714465945s ago: executing program 2 (id=2107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaaaaaaa68322ec14bbaaaaaaaaaa00ac1414aa"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000380)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, &(0x7f0000000280)='N', 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x3}, 0x31) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200230500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000efff002100010007031c000a"], 0x70}}, 0x0) 16.71406363s ago: executing program 1 (id=2108): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x6, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req={0x3, 0x0, 0x0, 0x4}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000003c0), 0x10) sendmsg$can_bcm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000940)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20008040) sendmsg$can_bcm(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYRES16=r2], 0x48}}, 0x40800) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$XFS_IOC_INUMBERS(r4, 0x80405880, &(0x7f0000000000)={{0x10, 0x4, 0x0, 0x9, 0x400}, [{0x3, 0x4, 0x4, 0x80}]}) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000380)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000400)="410309fc1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="c40100fe", @ANYRES16=r7, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x20040880}, 0x8000) 16.623603212s ago: executing program 3 (id=2109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000a00)=0x6, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000a40), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000080), 0x4) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f0000000580)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f00000005c0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) (async) syz_emit_ethernet(0x3b6, &(0x7f0000000c40)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="4c000000000101040d0000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001"], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x0) 16.553945344s ago: executing program 4 (id=2110): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001000000018000180140002007665746830000000000000000f00000005000d"], 0x34}}, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xf, &(0x7f00000009c0)=0x2, &(0x7f0000000a00)=0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000a40)={0x0, 0x0, "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", "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"}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00008ba6abed9940584a000007010000f8ffffffb702000000000000b703e00ff7b30000850000007000008ee97713d49ca743c62bb67e5a7861f0f29b20c83a245d611c7a1ec15ef0e8d27fc1b9106584baf783ef476f12132b9c8b6f97f1eb94417d45e92c43503f1a7eb57cb597f62d948797f8e08dcd416176fa186fb0320f993a7b4ea73ae6e3567592128fb85dd168c08fca909537bbceb285aa769e5d7ed8be6e91aabc82"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000380)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000380)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x38, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0xfffd, 0x3, 0x3, 0x5, 0xca, 0x6]}}]}]}]}, 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x38, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0xfffd, 0x3, 0x3, 0x5, 0xca, 0x6]}}]}]}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f00000005c0)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000600)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)={@ifindex, r12, 0x11}, 0xa) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)={@ifindex, r12, 0x11}, 0xa) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) 16.482400445s ago: executing program 2 (id=2111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000012c0), 0x199200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000e80)="06ff03076844268cb89e14f0080060e0ffff00feb2bec41177fb86dd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000001080)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r0, @ANYBLOB="010000000000000000002f00000018000380100003800c00018005000208000000000400010018000180140002007369743000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000001140)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2175012}, 0xc, &(0x7f0000001100)={&(0x7f0000001480)=ANY=[@ANYBLOB="f800ffff78255218b4603da3f5b6df2d1bfb942ca5368c6c0792bdf1f77f35442ba2c566a32eddc994179ccc4c3bd8c8aeddbf9f310eebc8509f2a68b5b3eda7bf42a50ccdd03863096f8f625125b16245de8c80cdde7e67590a7363aaba93aede3c87f60329952d51b7e1e9d2d5558ab9b9faef38daa5ceecd62b5d4be61f98ba2bbb9ad96356d53f477bb0c68228faed7bb12ec64ddef3da0b0819271f567c9e46907f62", @ANYRES16=r6, @ANYBLOB="00022cbd7000fcdbdf250e00000004000180c400028004000100ba0005009eeb17bd63d54af85ebe84ab717b510c215dd2b0b5cd0a2d8dcaa545668aa9ce7a0ea7f1ad5b4e74f223c309fa31cd1672af2036a3a211baec804c1e4b50e9fdff67140bdc8769c1da167c1af7ce83a5f627e2265d42e9791a86de6a15865b39e84c56969d26076fc5356593a56be9ea93145bc98c31723af46e1d8209fde7c34e96e1b07fc168ddf1896a3cac372982f9c7a1e041a0fc93b9e6fd788e1f3685d199cfae0b0eea840ea55137845fc1a6cec7af41b76b00001c000180080003000300000008000100", @ANYRES32=r3, @ANYBLOB="0800030003000000"], 0xf8}, 0x1, 0x0, 0x0, 0x40040c5}, 0x4000000) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="05a329bd7000fedbdf250d00000008000300", @ANYRES32=r9, @ANYBLOB="2dd70874c5fdf1e01961766735f67da287cd1f34720217ec879aed30fc6f8b26a83fb509b9d4feb101f0b580c7089e701b8cd7c4f84114ca8e5f3f61e0fa6e932253ce78baad9603f99e2ebb69dd738109361b79734bd472975ae96dc369f8fc7653ce703d5801ec221804a348"], 0x1c}}, 0x20008000) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x480d4) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000002640), 0x8) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r11, 0x84, 0x7c, &(0x7f0000002c80)=""/4111, &(0x7f0000003cc0)=0x100f) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000026c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002700)={0x1b, 0x0, 0x0, 0x4de, 0x0, 0xffffffffffffffff, 0x8, '\x00', r3, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002780), &(0x7f00000027c0)=r4}, 0x20) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002840)={0x1b, 0x0, 0x0, 0x40, 0x0, 0x1, 0x7, '\x00', r9, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000028c0), &(0x7f0000002900)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000002980), &(0x7f00000029c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002a40), &(0x7f0000002a80)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002bc0)={0xa, 0x1, &(0x7f0000001000)=@raw=[@generic={0x4, 0x2, 0x3, 0x5, 0x6}], &(0x7f0000001040)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000001640)=""/4096, 0x1f00, 0x48, '\x00', r9, @fallback=0x33, r10, 0x8, &(0x7f0000002680)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x7, &(0x7f0000002b00)=[r12, r13, r14, r15, r16, r17, r18], &(0x7f0000002b40)=[{0x5, 0x3, 0x5}, {0x5, 0x2, 0x8, 0xa}, {0x2, 0x4, 0x7}, {0x0, 0x5, 0x1, 0x7}, {0x0, 0x4}, {0x2, 0x2, 0x7, 0x1}, {0x5, 0x5, 0x1, 0x8}], 0x10, 0x6}, 0x94) 16.360352591s ago: executing program 1 (id=2112): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1437c0b97b9646a5, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15, 0x3028}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000200)={'ip6erspan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 16.321753601s ago: executing program 3 (id=2113): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x1008}], 0x1, 0xf) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x331a3, 0x3}, [@IFLA_GROUP={0xffffffffffffffcc}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xf2ac}]}, 0x30}, 0x1, 0xffffffc3, 0x0, 0x4000045}, 0x4040000) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000580)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000006c0)={'filter\x00', 0x30, "aa9a6cd8e1ebd2dc60e1b29461443068925b4985196863b44727deb35b5bdbe8fa4eb80208ead13a29bcd390d3f26fc0"}, &(0x7f0000000740)=0x54) close(0x4) socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000100)={0x1, 0xffffffffffffffff, 0x80000}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x8, 0x9, [0x1000, 0x5, 0x9, 0x0, 0xb, 0x3, 0x6, 0x3ff, 0x4]}, 0x1a) 16.317103356s ago: executing program 0 (id=2114): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}}, 0x20}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1401000029000100000000000000000003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f0000000040)) 16.150393289s ago: executing program 4 (id=2115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="a7e12cbd700dace2b6fec9fa08e0"], 0x14}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000440)=@broute={'broute\x00', 0x70, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x200000000740, 0x200000000770], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x68, 0xf6, 'ip6gre0\x00', 'veth0\x00', 'batadv_slave_1\x00', 'vcan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, [0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@log={'log\x00', 0x28, {{0x1, "a0dc11f19decb43ff21c10155f449a592b9dc96dc562d69734af7b924c28", 0x8}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1c8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000780)={{r0}, "8a18048b679984a967e34ace2429edf8dd84ad0bad636f05725ba7efad744b12435f186763de0cba901d5d10db5f21b9579b2e698da623d0d1074661a4b1b77aab138bf3a7920ae9166ec989f0a57a7b165a6e47bc70835b71657b21dff7c1943c675bb8b0ae328123f3f201539b778b9af212e3b4657064a941b67bf5040758cd2e26a7db65fa151622877f684c5ff64a7727fc5a802bf482b24092674e79ff9f48a563d6ca65b58d94b29e0f649b6f89d93a118b9130afeb6f7d99977ebe9005053076abe7ef42526af886bd070aa9fa42df6ff825b6662e6cfaf5a8371642ad5fcad684dd402d2fd6d900dfa507bbd1d7ca8453698309d0b82553f8f4bd76165f73f4c25a2c752551c6c95b6ae9b0db304f9c3089d77f3529c730bda36c4068577ca7ac6970a472873ed93c00eda84571422a16e402ce7c184819811ae75117344fb0f74d902fc27c3e545c8003e842adcf2016c91ea026cfd615954601d795099b5653f7a9022d932eeded79a8ce92094c5444edfa80e1aa9cf7873135e9f85c6094957a394a9a6c9a54da2e73b424b386e786148d3597ff323964ca2253df9969e7e81afcc0b1058317e9ed26fcae05902bf8fa4355846bffb57be7903e24a129f51235ad2f2a7fd34cfad270062eb658d15db6f855ccbcb93e25f970a4444a3c73da8b6061e9f6625906525ac5f2efee068e106ac1ee31808d12e4250fd81594b8b648f72746217cf08a0a43b5586defbaf41c7d75ceff56e761790675501dfb2f7c186fb51c08e106490072ad7f76f1d3847c8a52e79e7bd0ed91abcee645405550774c4f8e892f16b4693ef5bd97c0afc0f37a776bebc98c34fc688d00473937b99b728584709efa3f833fde5b421548bac3fd1c5dd482db62398beb2daa70af3250a88a9d3ebb7757a9eb8c8426c6ee3ab94a0a52e0cd3e0692a81fc7afa62d7a90fea4a4608923dfde4539ae4ee026586c756d262d26630eab82626409bd41d92a7c6648776c5351f3722a303684dd5a839a5771e1fbc950012b3e35545e333657cc0e77533c218a85f0bb1c6b4797f4057fe3132989caa87f52fa0e9853c5d0f3c6f856a0d090f2ad54afe81227204ae6f8e396c3ba136e499a48ba88e49aa2e35ecfe0c78614ee6c2200b82f8df455337e9d2216fe8a3d6043200c4a4c75b0c4a9ba28c09e5a75f54d7da6b1ca93bfd3811c08b3dd270a72e05554318b830aed68a0c832b524f71dad43be50e36ac0911aa7af4ba15c9eacc4a835d7eac1b12b676fa39caebedc50e2d15c70d58694351f24a3e6583d923efb02c1d4d7bd3bcae90c8791352abe097aeacd97d0bdf6993124737a761e69e0b5da4349a5341d026ea200541a14dcb679156bb05e012ed3ab5e11e56ff48486dc6a8691ca1a5794ce34c40b35d6f7c4b64ff2bb3ce448c48c640eaa8da1ecadd9cf55865330b1f1c631e9974173b7ce7c01009ec34bc013484a6355564b7882eb785012083a56f71623636a0fb5e6df50c9ff125941519b382b8c9905ab0e5f11664bf5a3677fb5946794857004dd98263610fb50da851b8698eba94eb13f9b0425923b6a80dcb7fac73e84a467314e2739c244ec7f9f8763379f1f19179dfd93fe61ba806082304736b09151ea5c1159431f26aa6e3e3c7e4f0d1e6c9c50881ec9179cc625fee085aeadd2fc0da6d133b999818398b1b64155f8501d692727977b3206ce8958691eb5941275b5a2a9bf111d589260f71a1ecc7783307d4e68a2a7bfdb609152d65e489dcd5cc69d6f1360914d7f04d3a19f2114914a3b689fe37efe98e9b775466831c597cd6c7f31e7871d36acab9c275eec5e0ffa4f1e3a30e00abde09c753c7991c1d0a8a83eeaac1caed5ef63bef04f87045e335fb7111e851d5d4690981ea9b07fc8bb9031fe1a2ed2928c986dff99a8911e5018842f9334ce63c120ce4b13dc38bb3a405e934bed37ba5bb467d49a918af99813b1cc97e2c1a7df8f63fd5743fe26340783c0fe4b2defaed59301cd6a4dae1b8e4ba032668d6b9b5b33e8f7a60fac79e2919d06c57be13085f97ffd8d618bfa077f872688ea25048e8619560a87ad751587d46b56cc16718f1b7210ce01356e13616652f5e9071a448b5f8ac26826420dcd3139fe189562f4c672fa022ff50aef049972d434680bbbcfbcae26b24abc0945e38ab115ce55e050a76adcab3bb6374d350c2ad0c36ac9ae0aca5f407924d606984f9c9069bf0e70209a8b7630c42d2e1a5533ad79ef46f78d2413933a352b236d6110405a418e552582b75b0c69a83d0ace70b425c23e893331823fd29107e7003093d392ae8133169677328f07b2c24a0b9cff40f4b2ab7df7fefc99ae7ff2019596f41be8312a9c29e3dd04d2436695274941d1562d8b286962f0bdb3f92771d64262dd462177ba80e2505e5db87e96c29800e5610c3df4473c1206f22b55a7c0e8cdd7a5a315e950f62aa0c413131bd2cd104d76f3bf62a9c15f5320cb25bbaa711c9476598109ae98e1d4c29296ecfb509bdeba61d54c20a8d42b03b1c038520b55b801bc721111a776d0b3e330dc5ebdb7e458ad496f5dffee20f058e10d472983632361e4ccd642e371f7723ea8400f77f0fa12e4ce693858d3f7629d427be6802d7dc3e897ae39a4dd769dcb07eb60a92a12b7d4bd57474f2879e9d92492eca660d05f65e81f8f923922af4117e03b51b32f24beada75847db37459c6f67ba71eea3b3a2fb05fc5d30f966911186b3f33bac814fd34da8ac9994034281c3f9dccd6ac42d25d0fa8040d63728baa6a5a623fe156d8b97b99e8a9ebc4cc984fa535c99c8e1d785d135ab19a4f8ec898290ac6608a16d2c4f1d5ea748d3116600bcbe220af58dcdf66f7ae16c6b572137ddb8efaa4178b0be445ab7542f9cb17631cc64b4e0d2da8233cf328338e6c13d315a4787d5c91b9855ebe53bb79b332bd3297373205a3d5e355d3452bf330330319da7aec16e8f3e68257fc4a477a758a4d9e5c184dfd0982e62c2fbfb0f16b04f8be94d8097bd608360e6bb8056b8012eff0a635e3f9902830560c71fe54e62af102a7f6930486009b70f294791b371a510c29f4459381e890c096660f2a3143361359b40c70e9936925b1dd3f222c70e35c901a7d28ba8b51541d10e10f1781e9f0bf4f75ea80fcd1248bd37594d793855a5322b0402c949a53c61075866833a480e4546d9d6826be42b0ba58e827e9d78dd90a5cb500953efa20edefa5ba8d213ecae335ef0bdb4237309dd429a841523da6664c15a001ca21335eaf135b25b93d8a1a8270eed8826fa882af9cf8e14d6fe5d7026c045391afff8568a6843784a1d33d6c91b9db15628590d69a41fc5a7f629b86f0770132ab815b19fc843365f3aba0da488a5c4311482344e1b6c6950475b5e923f343037441798df1370e587ad54d2bb3e8823745e41d5660fd1c6d2720f4b40722bd2002a4dd288a02b629f23a66eae9191f1806fa6a8dcd92342b1251e32ee00b376ac302624bf52ccf220ec9ebefe1adbd02eff1bf5a0fd97d8effe71dc17ee3a49f0c18ad518959e2d677963dfd35c4aa581ead9d16e12d772defbb0404bd533b2644abc1d2c4276b949fa2d64f273fca2e7f2e48fa2f438753cd719d3035970fd8a5a9cc383e841a8133848f2fb7bf98bbb5f60ff6eeb880ef55bba782df94498a1caf374b37b5f3b7bdfa0ca9d75dda4e063d20abd8a25029b5512c0a3bf8b1793c294b12fa081d7b55238a1692e4bcaca7fe8b26315fa0f9a131b8de727bb74f6b44c69f58b4cc6b0d81d24792b94201673fbb2cb0ae79959fbcdae101a74e558c61d74d897406f6e81337edb7fda5151c5cec57ae045044761a7863f47bff3b37c6bb5bf8d28af2bfea6b5f04f84135d68b07cddc181cbfc844bdd58019de131f61e004403aca7036e68a12578f7f2581a091b888a3aafef06bebd18f1e657aee74bcb74834639a87a3b784fe40bc50d811eaf40f450ab824ba2fff09a2812e4b901f4811a13d78130cf787b132782454792f610fd20964d46644cf4c5c49ec71c66b865f226d01c3ba1934faf6428c4ad7081f73219d8180c846b1aa6c9cc46ef41cd66655c38ee498870b06174ae8b9c9fd64cb4b6a5b21cb6fafc694beede0069d9e715718de83bbb439cd5afe26f7edf463883a022c40d4843e4bf64ae1f0fc9861b0f8331b68dd197caadcbca0eb2d48619f75de866973aa3854b92050a66766d8ebd17a43f016e4c0ee50bf10736b0b9d02bf679f7865c38f42480bc58740090904da608795056071ce125123f72cb851016c97f1912baa813504af81ca6ec91bbb4ecdad296756c4ea9e266c6549027a598c5f75ec6ad2a78025bb8f634a6de010ce671982109a11acb6b5711ffafa1f118f303d5f30de766b65c1744cf1caa8baf2a870fb12537a93f6a4589a1eed5cb3d6504cbcd7ced688262c97380cb9dc36deb63d2467176de1749b0bf2a7ee3c19edb9810081c8cc9215ffe09285f23be8d5ccadefa0eb275f5f5064d3e00d8c56f2467e9a2b4e93de06d51ad63f393c197be1c0164d8e5b9c1644512f119861040111e86c94e755756c55f8ca26304279acf123a9f39a3d2d1165d84f218d98289cdb2b85b8e5673ca5a01a6549fa6441df2a75214abd6638945962f5427cc9b77e7000346ff672191c77dd95de7a31d508638014d909627eea29bbdea6c667200b9343b7a1cb4b40e9d96e3310a4fb4cd47f0f6047c9d79fd16b820a7b1839f83d8e3f5e4fe62a2b7ad9c4d2f00f3a59ec0f6723d94325f5ea8b5314deba534c65f198ece6e3e298f96192dd46d625911770d7e0745cbd174486f4a922f0b9214186eae7546611007292d6ac01ffffed5765dc9df81989ff1a4a4469b1e7021df23a910434702783993bc23b4f765cbeb4040a38a360499a10931fe1de4eac5db6fd72885d0f28c828eab3453bf80ec6d7900670f39ffd6cb0551fc2c79afb8de40812ef199350d1dbff55eeecc00eef416b6ee749f2a2b23acca80859bd72ae53fb6b59b588f96c83864a5f9da43db1ea99e8dd5ddca15ed5bd52fade4009b7a38ecd03bf016e1baf4ac023357fb2489a5f835aac62b9abfffa5cd93eada7bab473f77533d71c2f9ba6e2d213741d1468b51344ceb1b43c8caed0f19b5100a6f1eda092de6a882aa56c45b1edfa65921a032af043bbce80bf65c6dbdfc12fb1e09d6d42b31bece2d2d3ea4f17031187985b18fb816602d7c5f3a2c19621118f2d84b50d6c7e74efc08e8746345aa204b67335a367af042e37e1d5e118ac2a330f00c0e1f789f87fb6b7db2c9bba858b13e421e9afcae09d6334dd6b337811ec8068908849b032035c90e7a5b50383d14a91f7c3da30e2b02230d335ec79170125bff58a35edc0b9974592d74185c6fe901411b8d801151fb0e4a56bf80eb83ec3d3067db4a3420db4ce87892b20c9b6a8c738b09dfc2e7f718789e1a0dda84f23c5d54c4013af5f4c1a5fa6c3a2ff76d529a53222aa1fa078feac255edd3b8b8478f9834b30dac0a45a34af6bcd26090a71f279ac30e97254514aec88552a71255dbacccb9efcb85a2d98e770db0e0430f00db50c9abbce4e64ee5557410b4f15c7b958e1ab918db19ad6a2c0c07b0d8e94a89e4082645f7b13a3660087a707f65f502c874a380d8fcacf1cb74e3d41a3e6f1453eb4a14cf6bb60fe2d54dbc711fecb764fc0db633039d0df5b336569425cf69891c3bf4c5da10a998cc711760beb962c3401b48bfbf"}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000060a010400000000000000000a000001090001005f0474c300000000180004801400017c850001006d6574610000000000140000001100010000000000000000000100000a00"/108], 0x6c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x104, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}}, 0x0) 16.128820718s ago: executing program 2 (id=2116): socket$inet6(0xa, 0x800000000000002, 0x0) (async) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f0000000000)='\a', 0x1) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910442000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 16.115003144s ago: executing program 0 (id=2117): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0), 0xffffffffffffffd2, 0x10, 0x0, 0x38}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0800090000000000080008f2ffffffff130001"], 0x64}}, 0x0) socket(0x27, 0x3, 0x100) 16.039158046s ago: executing program 1 (id=2118): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000003ff6)='GPL\x00', 0x40d225, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020002000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r3, &(0x7f0000000600)=[{{0x0, 0x4b, &(0x7f0000000640), 0x1}}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="b5e729bd7000fbdbb50f040000000c0001800800030001"], 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x80, 0x401, 0x44, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, 0x7800, 0x10}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, r4, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4091}, 0x4c090) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$l2tp6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x20) 15.950423418s ago: executing program 3 (id=2119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000340)={@loopback, @remote}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3d2}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf251800000008000300", @ANYRES32=r5, @ANYBLOB="24003080200001800800010000000000140003800800020803ecffff050001"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r6) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, r7, 0x301}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x40) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x20878, 0x1a201}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x18, 0x27, 0x1, 0x70bd30, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000890) 15.942447035s ago: executing program 0 (id=2120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x340, r1, 0x212, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf504}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4cd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde8c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_LINK={0x118, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d25}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbaf2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3727}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1000, @mcast1, 0xb3a}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}]}]}, 0x340}, 0x1, 0x0, 0x0, 0xc041}, 0x40000) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000440)={0x5, 0xe}) r3 = accept(r0, &(0x7f0000000480)=@tipc, &(0x7f0000000500)=0x80) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000540)={0x0, 0xd, 0xa2, 0x4}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x88a}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x5]}]}, 0x34}, 0x1, 0x0, 0x0, 0x488c0}, 0x40) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4804}, 0x4004801) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "5cee73a34a18f96d9e78a124a5be"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1e}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r3, 0x84, 0x7a, &(0x7f0000000a80)={0x1, 0xffffffffffffffff, 0x800}, &(0x7f0000000ac0)=0xc) write(r2, &(0x7f0000000b00)="d15705704628caa14a303698f154012c18ab7bb23afc62d063536f3ea1c15abc336af3ee5cf9c0bbdd91910984ef1b15d9450be90342b4a56476ee56e816f75db9f5a91f060a3fe1963af0e8a9eda16b8fdae73b0f3869471e20cff6d75769e015fc30751755b51200f3dbaf2ebfde1fae03fbdf559d9159f1690d292a5c49477ae1ad8566ad073241b2b05fd6b2a84464148d26a8a830758bf19b0bf14f990722eb9d354f1e5788f66bb4b914651fecb6f547fb41e0a20c027a21fd10da781a25340dcb873bb6e7433a3f2002f7a53a223bd70c416014655d11c3", 0xdb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0], 0x0, 0x6d, &(0x7f0000000d40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000c00)="36ba330fa0008b0b3bf202d556a1de309543ebeb9d5ec790076cf8ad62d5a255019f4355e861e71737ddfc15719f3f2962ee3dc4d6423994388b011edbc599ed7d8601caf78ffd09063d0a8c0e2669112364e866da05854c139d7532d30c62b52e3346", 0x63, 0x1, &(0x7f0000000f80)={0x11, 0x10, r7, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x70, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\x823+@'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'eth\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000001140)) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000001180)={@private0, r7}, 0x14) sendmsg$NLBL_UNLABEL_C_ACCEPT(r8, &(0x7f00000012c0)={&(0x7f00000011c0), 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x44, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40d0}, 0x20048010) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001340)=0x0) sendmsg$nl_route(r3, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)=@dellink={0x50, 0x11, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x300c4, 0x20}, [@IFLA_NET_NS_PID={0x8, 0x13, r10}, @IFLA_EXT_MASK={0x8, 0x1d, 0x3b08f85d}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x50}, 0x1, 0x0, 0x0, 0x9bde8b423bdc2210}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x38, r4, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x14}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x10) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000001600)={'dvmrp1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 15.866439887s ago: executing program 2 (id=2121): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b7050000000400007910a800000000005d0a0000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000480)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x1f3, 0x10, &(0x7f0000000580), 0xfffffffffffffc79}, 0x2a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r4, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b7050000000400007910a800000000005d0a0000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000480)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x1f3, 0x10, &(0x7f0000000580), 0xfffffffffffffc79}, 0x2a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r4, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}}, 0x0) (async) 15.852801203s ago: executing program 4 (id=2122): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) close(r0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000004c0)='syzkaller\x00'}, 0x90) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r4], 0x48) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000540)={r6, &(0x7f0000000580)}, 0x20) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=@newtfilter={0x80, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x20, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x84}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) (async) write$tun(r0, &(0x7f0000000400)=ANY=[], 0xfdef) 15.823414432s ago: executing program 1 (id=2123): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x13, {0x0, "fea22255b36d2a6f2096c248b30c"}}]}, 0x30}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000280)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f00000003c0)="0b031260feffffff02005400f6086086dd4803008e15d62467ff55f90ebc0df150b1bcd642d7323bf9df2a97b5ff", 0x2e, 0x0, &(0x7f0000000400)={0x11, 0x3, r2}, 0x14) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getstats={0x1c, 0x5e, 0xc36, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x5}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x60040044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20040055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000140)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f00000005c0), &(0x7f0000000600)=r4}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x44, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$ETHTOOL_MSG_STATS_GET(r4, &(0x7f0000000c40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x88030011}, 0xc, &(0x7f0000000c00)={&(0x7f0000000880)={0x37c, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STATS_GROUPS={0x130, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8a, 0x4, "04eaaa0f9e4e68c111c8c412bb1686a8ba8f741602726757a827fa6bcef82ac2a93e52f16e8ac3eba9a23a4d5d122fbca557f3864c1cfbbcaf0bff14c25ea90e6b4303720d2f835fb89644ae2827e0dc9d0e07ba8382f33159c4477d2ee66cd32d3d5f12b82ad6a5a91efaf87991c7788afd724dac6681f405de1771a73c5e3a571f223f81e6"}, @ETHTOOL_A_BITSET_MASK={0x59, 0x5, "c0979272d654f7dacea9cc4b098dba721db63bc2c30f607f36f88aecf2c4b8f365b94d4890f3188efe6808bcf5c47b8cfc03ec87e6923fbbe3ca087dcfd3e1d130fdc77054c2c1ca73ccf8786f6fb68e16ada5b373"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x3e, 0x4, "52bf60db9fa0e6edd984f757ee40c34ae6ffee85e3f4ddc100ff9393dbb5926b2d59802f4a89787d306b7fb41e6cd27de07ae5e0a6d25d608cb7"}]}, @ETHTOOL_A_STATS_GROUPS={0x228, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb3, 0x4, "4b19410b4e73c6897516255ce863c1b1d5c5f239a12f4fd2b2b79e278cb0bd26df58a551a49f22bfb576634700800fd9f2758f3454fd736c8bc97339019a72d1a5f758c3089137493f245b0bacbe88fee6d43c009b5debf5a0b014eb694295c82ff4449196d9129093be670513bacc4ad8a875e578333ceaa1f7fc3ce6471559f4ce239e5e5e5ac257877c8d61ec440df6da58481443ff5859c88ea24e189fbc3f1385f5cfa36aba8639de5487bf68"}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '#[{,$(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',\x1f.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fq_pie\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fq_pie\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fq_pie\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&\'+,!+\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcb}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7c}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fq_pie\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&:/#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}]}]}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x2}, @ETHTOOL_A_STATS_SRC={0x8}]}, 0x37c}}, 0x240008d0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.350569772s ago: executing program 4 (id=2124): bpf$MAP_UPDATE_BATCH(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newsa={0x14c, 0x10, 0x1, 0x70bc2c, 0x0, {{@in=@remote, @in=@broadcast, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@private2, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x7fff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000, 0x0, 0xfffffffe}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x59, 0x2, {{'cbc(camellia)\x00'}, 0x88, "1a000b000000366a6a849a7390450024f3"}}]}, 0x14c}}, 0x44050) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_BATCH(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newsa={0x14c, 0x10, 0x1, 0x70bc2c, 0x0, {{@in=@remote, @in=@broadcast, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@private2, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x7fff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000, 0x0, 0xfffffffe}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x59, 0x2, {{'cbc(camellia)\x00'}, 0x88, "1a000b000000366a6a849a7390450024f3"}}]}, 0x14c}}, 0x44050) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x26e1, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000200)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) 15.289458352s ago: executing program 4 (id=2125): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26765ba5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbdf8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d9447c4df6e21ee0e54f8be072e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd"], &(0x7f0000000a40)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000b00)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000b70000000200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.219237083s ago: executing program 4 (id=2126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0xc554}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x6, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r6, @ANYBLOB="200003800400010010000400004017b40200000000eb00000800020049"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0xc554}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x6, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00'}) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r6, @ANYBLOB="200003800400010010000400004017b40200000000eb00000800020049"], 0x40}}, 0x0) (async) 199.909265ms ago: executing program 32 (id=2120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x340, r1, 0x212, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf504}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4cd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde8c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_LINK={0x118, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d25}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbaf2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3727}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1000, @mcast1, 0xb3a}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}]}]}, 0x340}, 0x1, 0x0, 0x0, 0xc041}, 0x40000) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000440)={0x5, 0xe}) r3 = accept(r0, &(0x7f0000000480)=@tipc, &(0x7f0000000500)=0x80) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000540)={0x0, 0xd, 0xa2, 0x4}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x88a}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x5]}]}, 0x34}, 0x1, 0x0, 0x0, 0x488c0}, 0x40) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4804}, 0x4004801) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "5cee73a34a18f96d9e78a124a5be"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1e}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r3, 0x84, 0x7a, &(0x7f0000000a80)={0x1, 0xffffffffffffffff, 0x800}, &(0x7f0000000ac0)=0xc) write(r2, &(0x7f0000000b00)="d15705704628caa14a303698f154012c18ab7bb23afc62d063536f3ea1c15abc336af3ee5cf9c0bbdd91910984ef1b15d9450be90342b4a56476ee56e816f75db9f5a91f060a3fe1963af0e8a9eda16b8fdae73b0f3869471e20cff6d75769e015fc30751755b51200f3dbaf2ebfde1fae03fbdf559d9159f1690d292a5c49477ae1ad8566ad073241b2b05fd6b2a84464148d26a8a830758bf19b0bf14f990722eb9d354f1e5788f66bb4b914651fecb6f547fb41e0a20c027a21fd10da781a25340dcb873bb6e7433a3f2002f7a53a223bd70c416014655d11c3", 0xdb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0], 0x0, 0x6d, &(0x7f0000000d40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000c00)="36ba330fa0008b0b3bf202d556a1de309543ebeb9d5ec790076cf8ad62d5a255019f4355e861e71737ddfc15719f3f2962ee3dc4d6423994388b011edbc599ed7d8601caf78ffd09063d0a8c0e2669112364e866da05854c139d7532d30c62b52e3346", 0x63, 0x1, &(0x7f0000000f80)={0x11, 0x10, r7, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x70, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\x823+@'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'eth\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000001140)) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000001180)={@private0, r7}, 0x14) sendmsg$NLBL_UNLABEL_C_ACCEPT(r8, &(0x7f00000012c0)={&(0x7f00000011c0), 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x44, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40d0}, 0x20048010) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001340)=0x0) sendmsg$nl_route(r3, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)=@dellink={0x50, 0x11, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x300c4, 0x20}, [@IFLA_NET_NS_PID={0x8, 0x13, r10}, @IFLA_EXT_MASK={0x8, 0x1d, 0x3b08f85d}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x50}, 0x1, 0x0, 0x0, 0x9bde8b423bdc2210}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x38, r4, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x14}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x10) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000001600)={'dvmrp1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 157.647335ms ago: executing program 33 (id=2123): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x13, {0x0, "fea22255b36d2a6f2096c248b30c"}}]}, 0x30}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000280)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f00000003c0)="0b031260feffffff02005400f6086086dd4803008e15d62467ff55f90ebc0df150b1bcd642d7323bf9df2a97b5ff", 0x2e, 0x0, &(0x7f0000000400)={0x11, 0x3, r2}, 0x14) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getstats={0x1c, 0x5e, 0xc36, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x5}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x60040044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20040055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000140)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f00000005c0), &(0x7f0000000600)=r4}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x44, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$ETHTOOL_MSG_STATS_GET(r4, &(0x7f0000000c40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x88030011}, 0xc, &(0x7f0000000c00)={&(0x7f0000000880)={0x37c, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STATS_GROUPS={0x130, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8a, 0x4, "04eaaa0f9e4e68c111c8c412bb1686a8ba8f741602726757a827fa6bcef82ac2a93e52f16e8ac3eba9a23a4d5d122fbca557f3864c1cfbbcaf0bff14c25ea90e6b4303720d2f835fb89644ae2827e0dc9d0e07ba8382f33159c4477d2ee66cd32d3d5f12b82ad6a5a91efaf87991c7788afd724dac6681f405de1771a73c5e3a571f223f81e6"}, @ETHTOOL_A_BITSET_MASK={0x59, 0x5, "c0979272d654f7dacea9cc4b098dba721db63bc2c30f607f36f88aecf2c4b8f365b94d4890f3188efe6808bcf5c47b8cfc03ec87e6923fbbe3ca087dcfd3e1d130fdc77054c2c1ca73ccf8786f6fb68e16ada5b373"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x3e, 0x4, "52bf60db9fa0e6edd984f757ee40c34ae6ffee85e3f4ddc100ff9393dbb5926b2d59802f4a89787d306b7fb41e6cd27de07ae5e0a6d25d608cb7"}]}, @ETHTOOL_A_STATS_GROUPS={0x228, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb3, 0x4, "4b19410b4e73c6897516255ce863c1b1d5c5f239a12f4fd2b2b79e278cb0bd26df58a551a49f22bfb576634700800fd9f2758f3454fd736c8bc97339019a72d1a5f758c3089137493f245b0bacbe88fee6d43c009b5debf5a0b014eb694295c82ff4449196d9129093be670513bacc4ad8a875e578333ceaa1f7fc3ce6471559f4ce239e5e5e5ac257877c8d61ec440df6da58481443ff5859c88ea24e189fbc3f1385f5cfa36aba8639de5487bf68"}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '#[{,$(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',\x1f.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fq_pie\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fq_pie\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fq_pie\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&\'+,!+\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcb}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7c}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fq_pie\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&:/#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}]}]}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x2}, @ETHTOOL_A_STATS_SRC={0x8}]}, 0x37c}}, 0x240008d0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 119.411292ms ago: executing program 34 (id=2121): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b7050000000400007910a800000000005d0a0000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000480)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x1f3, 0x10, &(0x7f0000000580), 0xfffffffffffffc79}, 0x2a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r4, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b7050000000400007910a800000000005d0a0000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000480)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x1f3, 0x10, &(0x7f0000000580), 0xfffffffffffffc79}, 0x2a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r4, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}}, 0x0) (async) 63.560612ms ago: executing program 35 (id=2119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000340)={@loopback, @remote}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3d2}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf251800000008000300", @ANYRES32=r5, @ANYBLOB="24003080200001800800010000000000140003800800020803ecffff050001"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r6) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, r7, 0x301}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x40) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x20878, 0x1a201}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x18, 0x27, 0x1, 0x70bd30, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000890) 0s ago: executing program 36 (id=2126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0xc554}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x6, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r6, @ANYBLOB="200003800400010010000400004017b40200000000eb00000800020049"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0xc554}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x6, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00'}) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r6, @ANYBLOB="200003800400010010000400004017b40200000000eb00000800020049"], 0x40}}, 0x0) (async) kernel console output (not intermixed with test programs): sge=6 [ 400.258377][ T9555] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 400.321861][ T9555] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 400.398154][ T9561] syzkaller0: entered promiscuous mode [ 400.398177][ T9561] syzkaller0: entered allmulticast mode [ 400.575787][ T9573] netlink: 'syz.3.922': attribute type 1 has an invalid length. [ 400.575811][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 400.575823][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 400.575833][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 400.575844][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 400.575854][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 400.576251][ T9573] netlink: 'syz.3.922': attribute type 1 has an invalid length. [ 400.576703][ T9573] netlink: 'syz.3.922': attribute type 1 has an invalid length. [ 400.590716][ T9573] netlink: 'syz.3.922': attribute type 1 has an invalid length. [ 400.630250][ T9573] netlink: 'syz.3.922': attribute type 1 has an invalid length. [ 400.659547][ T9570] gretap0: entered promiscuous mode [ 400.748762][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 400.748781][ T30] audit: type=1800 audit(1792422291.065:44): pid=9578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.924" name="memory.events" dev="tmpfs" ino=1007 res=0 errno=0 [ 401.171280][ T9610] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 401.174543][ T9610] bond2 (unregistering): Released all slaves [ 401.263555][ T9619] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 401.268317][ T9619] bond2 (unregistering): Released all slaves [ 402.003984][ T9646] tipc: Started in network mode [ 402.004007][ T9646] tipc: Node identity 4, cluster identity 4711 [ 402.004018][ T9646] tipc: Node number set to 4 [ 402.594791][ T9666] 0·: renamed from hsr0 (while UP) [ 402.632077][ T9666] 0·: entered allmulticast mode [ 402.632101][ T9666] hsr_slave_0: entered allmulticast mode [ 402.632115][ T9666] hsr_slave_1: entered allmulticast mode [ 402.632533][ T9666] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 402.796481][ T9675] Cannot find del_set index 0 as target [ 402.983365][ T9671] gre2: entered promiscuous mode [ 403.054517][ T9683] bond2: Invalid ad_actor_system MAC address. [ 403.054537][ T9683] bond2: option ad_actor_system: invalid value (1) [ 403.055650][ T9683] bond2 (unregistering): Released all slaves [ 403.215777][ T9701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.247052][ T9699] syzkaller0: entered promiscuous mode [ 403.247072][ T9699] syzkaller0: entered allmulticast mode [ 403.454572][ T9713] validate_nla: 61 callbacks suppressed [ 403.454592][ T9713] netlink: 'syz.0.963': attribute type 142 has an invalid length. [ 403.751909][ T9739] batadv_slave_1: entered promiscuous mode [ 403.789020][ T9735] batadv_slave_1: left promiscuous mode [ 403.895946][ T9750] x_tables: unsorted underflow at hook 2 [ 403.899193][ T9751] x_tables: unsorted underflow at hook 2 [ 404.211627][ T4945] block nbd0: Possible stuck request ffff888027dc5080: control (read@0,4096B). Runtime 30 seconds [ 404.398063][ T9788] __nla_validate_parse: 399 callbacks suppressed [ 404.398082][ T9788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.981'. [ 404.435448][ T9786] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 404.435468][ T9786] netlink: 224 bytes leftover after parsing attributes in process `syz.3.979'. [ 404.496581][ T9790] bridge0: entered allmulticast mode [ 404.497193][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 404.604202][ T9793] Bluetooth: MGMT ver 1.23 [ 404.610054][ T9794] sctp: Trying to GSO but underlying device doesn't support it. [ 404.719360][ T9800] syzkaller1: entered promiscuous mode [ 404.719384][ T9800] syzkaller1: entered allmulticast mode [ 404.815506][ T5669] Bluetooth: hci4: link tx timeout [ 404.815520][ T5669] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 404.981034][ T9826] netlink: 56 bytes leftover after parsing attributes in process `syz.1.988'. [ 404.990208][ T9826] openvswitch: netlink: Flow key attribute not present in set flow. [ 405.244342][ T9833] netlink: 44 bytes leftover after parsing attributes in process `syz.2.990'. [ 405.327126][ T9840] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 405.382607][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.995'. [ 405.579680][ T9853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1000'. [ 405.604623][ T9853] tipc: New replicast peer: 172.20.20.187 [ 405.604955][ T9853] tipc: Enabled bearer , priority 10 [ 405.682481][ T9854] tipc: Enabling of bearer rejected, failed to enable media [ 405.689323][ T9854] --map-set only usable from mangle table [ 405.749050][ T9854] netlink: 36 bytes leftover after parsing attributes in process `syz.0.998'. [ 405.761968][ T9859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1002'. [ 405.762203][ T9859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1002'. [ 406.012064][ T9872] ip6t_hbh: Not strict - not implemented [ 406.631237][ T9874] bridge0: entered allmulticast mode [ 406.721026][ T5767] tipc: Node number set to 1284133723 [ 406.850765][ T5665] Bluetooth: hci4: command 0x0405 tx timeout [ 407.178886][ T9916] ovs-s: entered promiscuous mode [ 407.415334][ T9929] bond3: entered promiscuous mode [ 407.415350][ T9929] bond3: entered allmulticast mode [ 407.416828][ T9932] 8021q: adding VLAN 0 to HW filter on device bond3 [ 407.778227][ T9950] syzkaller0: entered promiscuous mode [ 407.778251][ T9950] syzkaller0: entered allmulticast mode [ 407.946768][ T9964] netlink: 'syz.0.1030': attribute type 1 has an invalid length. [ 408.080352][ T9968] bond2: entered promiscuous mode [ 408.080960][ T9968] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.081660][ T9972] netlink: 'syz.0.1033': attribute type 1 has an invalid length. [ 408.139548][ T9972] bond6: entered promiscuous mode [ 408.146675][ T9972] 8021q: adding VLAN 0 to HW filter on device bond6 [ 408.181712][ T9981] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 408.182297][ T9981] tipc: Can't bind to reserved service type 2 [ 408.189349][ T9968] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.189728][ T9968] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 408.225718][ T9968] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 408.581714][T10009] netlink: NAT attribute has 8 unknown bytes [ 408.581751][T10009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.064662][ T9997] __nla_validate_parse: 12 callbacks suppressed [ 410.064682][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 410.241971][T10022] netlink: 'syz.0.1044': attribute type 8 has an invalid length. [ 410.300259][T10021] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1046'. [ 410.300311][T10021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1046'. [ 410.300325][T10021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1046'. [ 410.346865][T10029] openvswitch: netlink: Flow actions attr not present in new flow. [ 410.434894][T10039] openvswitch: netlink: Flow actions attr not present in new flow. [ 410.459502][T10030] 8021q: adding VLAN 0 to HW filter on device bond3 [ 410.477645][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 410.490531][T10037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1049'. [ 410.821620][T10065] veth0: entered promiscuous mode [ 410.863404][T10064] veth0: left promiscuous mode [ 411.016360][T10073] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1054'. [ 411.133745][T10078] tap0: tun_chr_ioctl cmd 1074025672 [ 411.133767][T10078] tap0: ignored: set checksum disabled [ 411.134687][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1056'. [ 411.186976][T10081] wlan1 speed is unknown, defaulting to 1000 [ 411.187048][T10081] wlan1 speed is unknown, defaulting to 1000 [ 411.187978][T10081] wlan1 speed is unknown, defaulting to 1000 [ 411.193490][T10081] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 411.193520][T10081] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 411.193556][T10081] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 411.206734][T10081] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 411.255250][T10085] netlink: 'syz.2.1059': attribute type 83 has an invalid length. [ 411.332948][T10081] wlan1 speed is unknown, defaulting to 1000 [ 411.341817][T10081] wlan1 speed is unknown, defaulting to 1000 [ 411.347164][T10081] wlan1 speed is unknown, defaulting to 1000 [ 411.356133][T10081] wlan1 speed is unknown, defaulting to 1000 [ 411.368382][T10081] wlan1 speed is unknown, defaulting to 1000 [ 411.428303][T10095] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1062'. [ 411.433855][T10093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.743631][T10119] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1065'. [ 411.847323][T10125] sch_fq: defrate 0 ignored. [ 411.885987][T10129] ip_tables: iptables: counters copy to user failed while replacing table [ 411.886354][T10133] x_tables: duplicate underflow at hook 1 [ 411.917364][T10134] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 412.170125][T10146] bond7: option fail_over_mac: invalid value (16) [ 412.186667][T10146] bond7 (unregistering): Released all slaves [ 412.432535][T10156] dvmrp1: entered allmulticast mode [ 412.595732][T10165] ip6t_hbh: too many supported opts specified [ 412.729814][T10170] openvswitch: netlink: Flow key attr not present in new flow. [ 413.012650][T10194] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 413.085341][T10203] syzkaller0: entered promiscuous mode [ 413.085364][T10203] syzkaller0: entered allmulticast mode [ 413.385920][T10220] bridge_slave_0: left allmulticast mode [ 413.385945][T10220] bridge_slave_0: left promiscuous mode [ 413.388267][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.406429][T10220] bridge_slave_1: left allmulticast mode [ 413.406453][T10220] bridge_slave_1: left promiscuous mode [ 413.406653][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.433197][T10220] .`: (slave bond_slave_0): Releasing backup interface [ 413.449440][T10220] .`: (slave bond_slave_1): Releasing backup interface [ 413.468690][T10220] team0: Port device team_slave_0 removed [ 413.476163][T10220] team0: Port device team_slave_1 removed [ 413.476835][T10220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.476853][T10220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.486617][T10220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.486639][T10220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.500850][T10220] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 413.899972][T10242] bond4: entered allmulticast mode [ 413.900359][T10242] 8021q: adding VLAN 0 to HW filter on device bond4 [ 414.097565][T10262] netlink: 'syz.3.1109': attribute type 1 has an invalid length. [ 414.215036][T10268] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 414.399761][T10276] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 414.426014][T10277] ebt_limit: overflow, try lower: 0/0 [ 414.764836][T10303] openvswitch: netlink: ct_state flags ffffffff unsupported [ 414.853145][T10307] pimreg3: entered allmulticast mode [ 415.013263][T10322] netlink: 'syz.1.1125': attribute type 3 has an invalid length. [ 415.150134][T10326] __nla_validate_parse: 8 callbacks suppressed [ 415.150153][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1127'. [ 415.150170][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1127'. [ 415.228838][T10333] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 415.386216][T10343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1132'. [ 415.391604][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1132'. [ 415.616704][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'. [ 415.678947][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'. [ 415.767251][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1142'. [ 416.015287][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 416.050092][T10391] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 416.221121][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1145'. [ 416.282723][T10391] 8021q: adding VLAN 0 to HW filter on device bond7 [ 416.336545][T10398] bond7: (slave geneve2): making interface the new active one [ 416.353393][T10398] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 416.488420][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'. [ 416.528339][T10408] bond8: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 416.543465][T10408] bond8 (unregistering): Released all slaves [ 416.567337][T10416] block nbd1: Unsupported socket: should be TCP or UNIX. [ 416.982412][T10423] vlan3: entered promiscuous mode [ 416.982433][T10423] bridge0: entered promiscuous mode [ 416.982568][T10423] vlan3: entered allmulticast mode [ 416.983969][T10423] bridge0: entered allmulticast mode [ 417.313495][T10462] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 417.355191][T10465] netlink: 'syz.0.1163': attribute type 2 has an invalid length. [ 417.377184][T10466] xt_l2tp: invalid flags combination: 0 [ 417.405471][T10466] TCP: TCP_TX_DELAY enabled [ 417.489412][T10476] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 418.281467][T10523] netlink: 'syz.2.1177': attribute type 2 has an invalid length. [ 418.336055][T10523] : entered promiscuous mode [ 418.490870][T10536] netlink: 'syz.2.1181': attribute type 2 has an invalid length. [ 418.690342][T10548] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 419.058710][T10564] vlan0: entered promiscuous mode [ 419.058736][T10564] bond0: entered promiscuous mode [ 419.634315][T10600] netlink: 'syz.1.1196': attribute type 83 has an invalid length. [ 419.715718][T10604] syzkaller0: entered promiscuous mode [ 419.715741][T10604] syzkaller0: entered allmulticast mode [ 419.780306][T10604] syzkaller0: left promiscuous mode [ 419.780328][T10604] syzkaller0: left allmulticast mode [ 420.037353][T10630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.090837][ T309] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.095493][ T309] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.150885][ T6565] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.151097][ T6565] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.153321][T10620] __nla_validate_parse: 24 callbacks suppressed [ 420.153336][T10620] netlink: 872 bytes leftover after parsing attributes in process `syz.3.1203'. [ 420.154354][T10620] netlink: 872 bytes leftover after parsing attributes in process `syz.3.1203'. [ 420.154870][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'. [ 420.155987][T10620] netlink: 872 bytes leftover after parsing attributes in process `syz.3.1203'. [ 420.198653][T10620] netlink: 872 bytes leftover after parsing attributes in process `syz.3.1203'. [ 420.199465][T10620] netlink: 872 bytes leftover after parsing attributes in process `syz.3.1203'. [ 420.203347][T10620] netlink: 872 bytes leftover after parsing attributes in process `syz.3.1203'. [ 420.203900][T10620] netlink: 872 bytes leftover after parsing attributes in process `syz.3.1203'. [ 420.204455][T10620] netlink: 872 bytes leftover after parsing attributes in process `syz.3.1203'. [ 420.206954][T10620] netlink: 872 bytes leftover after parsing attributes in process `syz.3.1203'. [ 420.254042][T10636] x_tables: duplicate underflow at hook 1 [ 420.404483][T10641] tipc: Enabling of bearer rejected, failed to enable media [ 420.632402][T10651] syzkaller0: entered promiscuous mode [ 420.632438][T10651] syzkaller0: entered allmulticast mode [ 420.659217][T10650] veth0_to_bridge: entered allmulticast mode [ 420.984754][T10666] veth1_macvtap: entered promiscuous mode [ 421.054651][T10666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.088693][T10666] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.574927][T10704] openvswitch: netlink: Message has 4 unknown bytes. [ 421.795409][T10718] netlink: 'syz.3.1229': attribute type 2 has an invalid length. [ 421.905524][T10728] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 422.277323][T10745] netlink: 'syz.3.1235': attribute type 1 has an invalid length. [ 422.302412][T10745] bond2: entered promiscuous mode [ 422.304091][T10745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.347415][T10748] netlink: 'syz.1.1236': attribute type 4 has an invalid length. [ 422.350582][T10751] netlink: 'syz.1.1236': attribute type 4 has an invalid length. [ 422.756229][T10774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 422.765842][T10786] IPVS: set_ctl: invalid protocol: 175 127.0.0.1:19 [ 423.596629][T10835] netlink: 'syz.0.1261': attribute type 49 has an invalid length. [ 423.684694][T10835] ip6gretap0: entered promiscuous mode [ 423.684786][T10835] ip6gretap0: entered allmulticast mode [ 423.798123][T10844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.857567][T10846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.914111][T10849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.998560][T10853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.086768][T10857] netlink: 'syz.3.1265': attribute type 1 has an invalid length. [ 424.111545][T10857] 8021q: adding VLAN 0 to HW filter on device bond3 [ 424.127657][T10857] bond3: (slave gretap3): making interface the new active one [ 424.129547][T10857] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 424.963334][T10913] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 424.964744][T10913] batman_adv: batadv0: Adding interface: gretap4 [ 424.964756][T10913] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.964780][T10913] batman_adv: batadv0: Interface activated: gretap4 [ 424.981292][T10916] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 425.254700][T10932] __nla_validate_parse: 58 callbacks suppressed [ 425.254719][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1286'. [ 426.084169][T10976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1298'. [ 426.237991][T10995] netlink: 4912 bytes leftover after parsing attributes in process `syz.2.1301'. [ 426.559107][T11005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1303'. [ 426.680157][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1306'. [ 426.799020][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1310'. [ 426.836832][T11024] 8021q: adding VLAN 0 to HW filter on device bond5 [ 426.922770][T11032] ip_tables: iptables: counters copy to user failed while replacing table [ 426.942671][T11034] 0: reclassify loop, rule prio 0, protocol 800 [ 427.071206][T11040] xt_IDLETIMER: timeout value is zero [ 427.311238][T11049] netlink: 'syz.1.1318': attribute type 2 has an invalid length. [ 427.313490][T11051] FAULT_INJECTION: forcing a failure. [ 427.313490][T11051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.313553][T11051] CPU: 1 UID: 0 PID: 11051 Comm: syz.0.1316 Not tainted syzkaller #0 PREEMPT(full) [ 427.313570][T11051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.313583][T11051] Call Trace: [ 427.313592][T11051] [ 427.313599][T11051] dump_stack_lvl+0xe8/0x150 [ 427.313634][T11051] should_fail_ex+0x410/0x560 [ 427.313658][T11051] _copy_from_user+0x2d/0xb0 [ 427.313681][T11051] kstrtouint_from_user+0xd6/0x180 [ 427.313702][T11051] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 427.313727][T11051] ? lock_acquire+0x115/0x350 [ 427.313747][T11051] proc_fail_nth_write+0x8e/0x210 [ 427.313765][T11051] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 427.313789][T11051] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 427.313807][T11051] vfs_write+0x296/0xba0 [ 427.313830][T11051] ? __pfx_vfs_write+0x10/0x10 [ 427.313846][T11051] ? __fget_files+0x2a/0x420 [ 427.313864][T11051] ? __fget_files+0x3a2/0x420 [ 427.313876][T11051] ? __fget_files+0x2a/0x420 [ 427.313896][T11051] ksys_write+0x150/0x270 [ 427.313914][T11051] ? __pfx_ksys_write+0x10/0x10 [ 427.313940][T11051] do_syscall_64+0x166/0x520 [ 427.313958][T11051] ? trace_irq_disable+0x3b/0x140 [ 427.313974][T11051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.313991][T11051] ? clear_bhb_loop+0x70/0xc0 [ 427.314009][T11051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.314023][T11051] RIP: 0033:0x7f8f0d15ed8e [ 427.314037][T11051] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 427.314048][T11051] RSP: 002b:00007f8f0e015fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.314064][T11051] RAX: ffffffffffffffda RBX: 00007f8f0e0166c0 RCX: 00007f8f0d15ed8e [ 427.314074][T11051] RDX: 0000000000000001 RSI: 00007f8f0e0160a0 RDI: 0000000000000004 [ 427.314084][T11051] RBP: 00007f8f0e016090 R08: 0000000000000000 R09: 0000000000000000 [ 427.314093][T11051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.314101][T11051] R13: 00007f8f0d426038 R14: 00007f8f0d425fa0 R15: 00007ffedc40d7f8 [ 427.314128][T11051] [ 427.690950][T11066] syzkaller0: entered promiscuous mode [ 427.690972][T11066] syzkaller0: entered allmulticast mode [ 427.713465][T11066] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1324'. [ 428.257917][T11090] IPv6: NLM_F_CREATE should be specified when creating new route [ 428.847017][T11117] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1335'. [ 428.871322][T11116] netlink: 'syz.4.1336': attribute type 1 has an invalid length. [ 428.974723][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1336'. [ 429.183112][T11116] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 429.190278][T11125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 429.275646][T11130] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 429.278198][T11130] bond6 (unregistering): Released all slaves [ 429.303828][T11144] netlink: 'syz.2.1342': attribute type 11 has an invalid length. [ 429.303847][T11144] netlink: 'syz.2.1342': attribute type 4 has an invalid length. [ 429.303858][T11144] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1342'. [ 429.806987][T11176] vlan0: entered promiscuous mode [ 430.024190][T11194] bond4: entered promiscuous mode [ 430.024251][T11194] bond4: entered allmulticast mode [ 430.024645][T11194] 8021q: adding VLAN 0 to HW filter on device bond4 [ 430.082064][T11197] bond5: entered promiscuous mode [ 430.082088][T11197] bond5: entered allmulticast mode [ 430.082499][T11197] 8021q: adding VLAN 0 to HW filter on device bond5 [ 430.261845][T11165] __nla_validate_parse: 51 callbacks suppressed [ 430.261866][T11165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1349'. [ 430.261997][T11165] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1349'. [ 430.277258][T11165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1349'. [ 430.277683][T11165] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1349'. [ 430.336071][T11165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1349'. [ 430.336231][T11165] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1349'. [ 430.336930][T11165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1349'. [ 430.337090][T11165] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1349'. [ 430.337649][T11165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1349'. [ 430.337802][T11165] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1349'. [ 430.514528][T11216] ipt_ECN: cannot use operation on non-tcp rule [ 431.001846][T11242] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 431.134612][T11244] openvswitch: netlink: EtherType 101 is less than min 600 [ 431.158338][T11252] openvswitch: netlink: EtherType 101 is less than min 600 [ 431.307565][T11269] netlink: 'syz.1.1378': attribute type 1 has an invalid length. [ 431.403816][T11278] nbd: illegal input index -8454144 [ 431.423129][T11276] erspan0: entered promiscuous mode [ 431.445620][T11279] gretap0: entered promiscuous mode [ 431.457066][T11281] 0ªî{X¹¦: renamed from gretap0 [ 431.473052][T11281] 0ªî{X¹¦: left promiscuous mode [ 431.473073][T11281] 0ªî{X¹¦: entered allmulticast mode [ 431.503290][T11281] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 431.504938][T11281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 431.539755][T11281] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 431.563678][T11278] C: renamed from lo [ 431.566194][T11278] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 431.595160][T11279] 1ªî{X¹¦: entered promiscuous mode [ 431.595183][T11279] 1ªî{X¹¦: left allmulticast mode [ 431.652640][T11281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 431.656246][T11281] 0ªî{X¹¦: left promiscuous mode [ 431.656266][T11281] 0ªî{X¹¦: entered allmulticast mode [ 431.659721][T11281] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 431.719608][T11279] 0ªî{X¹¦: entered promiscuous mode [ 431.719630][T11279] 0ªî{X¹¦: left allmulticast mode [ 431.738571][T11281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 431.744364][T11281] 1ªî{X¹¦: left promiscuous mode [ 431.744384][T11281] 1ªî{X¹¦: entered allmulticast mode [ 431.746415][T11281] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 431.763869][T11279] 1ªî{X¹¦: entered promiscuous mode [ 431.763891][T11279] 1ªî{X¹¦: left allmulticast mode [ 431.779951][T11281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 431.790827][T11281] 0ªî{X¹¦: left promiscuous mode [ 431.790847][T11281] 0ªî{X¹¦: entered allmulticast mode [ 431.792628][T11281] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 431.802216][T11279] 0ªî{X¹¦: entered promiscuous mode [ 431.802236][T11279] 0ªî{X¹¦: left allmulticast mode [ 431.856483][T11281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 431.878870][T11281] 1ªî{X¹¦: left promiscuous mode [ 431.878919][T11281] 1ªî{X¹¦: entered allmulticast mode [ 431.894434][T11281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 431.915628][T11279] 0ªî{X¹¦: entered promiscuous mode [ 431.915649][T11279] 0ªî{X¹¦: left allmulticast mode [ 431.947970][T11281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 431.954317][T11281] 1ªî{X¹¦: left promiscuous mode [ 431.954337][T11281] 1ªî{X¹¦: entered allmulticast mode [ 431.959186][T11281] net_ratelimit: 2 callbacks suppressed [ 431.959202][T11281] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 431.967166][T11279] 1ªî{X¹¦: entered promiscuous mode [ 431.967406][T11279] 1ªî{X¹¦: left allmulticast mode [ 431.977634][T11281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 431.991234][T11281] 0ªî{X¹¦: left promiscuous mode [ 431.991255][T11281] 0ªî{X¹¦: entered allmulticast mode [ 431.993508][T11281] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 432.000004][T11279] 0ªî{X¹¦: entered promiscuous mode [ 432.000022][T11279] 0ªî{X¹¦: left allmulticast mode [ 432.009873][T11281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 432.021578][T11281] 1ªî{X¹¦: left promiscuous mode [ 432.021599][T11281] 1ªî{X¹¦: entered allmulticast mode [ 432.027210][T11281] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 432.029325][T11281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 432.042454][T11281] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 432.098078][T11279] 0ªî{X¹¦: entered promiscuous mode [ 432.098101][T11279] 0ªî{X¹¦: left allmulticast mode [ 432.104943][T11281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 432.118562][T11281] 1ªî{X¹¦: left promiscuous mode [ 432.118582][T11281] 1ªî{X¹¦: entered allmulticast mode [ 432.144312][T11281] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 432.150132][T11279] 1ªî{X¹¦: entered promiscuous mode [ 432.150154][T11279] 1ªî{X¹¦: left allmulticast mode [ 432.182703][T11281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 432.185452][T11281] 0ªî{X¹¦: left promiscuous mode [ 432.185471][T11281] 0ªî{X¹¦: entered allmulticast mode [ 432.187542][T11281] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 432.187838][T11281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 432.229033][T11281] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 432.241235][T11279] 1ªî{X¹¦: entered promiscuous mode [ 432.241257][T11279] 1ªî{X¹¦: left allmulticast mode [ 432.257268][T11281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 432.264843][T11281] 0ªî{X¹¦: left promiscuous mode [ 432.264862][T11281] 0ªî{X¹¦: entered allmulticast mode [ 432.266542][T11281] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 432.269136][T11279] 0ªî{X¹¦: entered promiscuous mode [ 432.269153][T11279] 0ªî{X¹¦: left allmulticast mode [ 432.379663][T11316] netlink: 'syz.3.1389': attribute type 1 has an invalid length. [ 432.425531][T11316] 8021q: adding VLAN 0 to HW filter on device bond6 [ 432.463277][T11316] bond6: (slave geneve2): making interface the new active one [ 432.464651][T11316] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 432.585129][T11329] siw: device registration error -23 [ 432.673303][T11332] netlink: 'syz.3.1394': attribute type 4 has an invalid length. [ 432.688550][T11332] netlink: 'syz.3.1394': attribute type 4 has an invalid length. [ 434.292484][ T4945] block nbd0: Possible stuck request ffff888027dc5080: control (read@0,4096B). Runtime 60 seconds [ 434.504802][T11290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 434.735864][ T5669] block nbd1: Receive control failed (result -32) [ 434.763122][T11376] netlink: 'syz.0.1405': attribute type 7 has an invalid length. [ 434.763144][T11376] netlink: 'syz.0.1405': attribute type 8 has an invalid length. [ 434.919239][T11384] pim6reg: left allmulticast mode [ 434.919354][T11384] bridge0: left allmulticast mode [ 435.036862][T11392] nftables ruleset with unbound chain [ 435.193042][T11397] netlink: 'syz.2.1411': attribute type 32 has an invalid length. [ 435.392727][T11397] bond4: option coupled_control: invalid value (192) [ 435.393926][T11397] bond4 (unregistering): Released all slaves [ 435.749695][T11433] __nla_validate_parse: 143 callbacks suppressed [ 435.749718][T11433] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1421'. [ 435.893664][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1425'. [ 435.922951][T11456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1425'. [ 436.260798][T11471] ip_tables: iptables: counters copy to user failed while replacing table [ 436.265781][T11472] ip_tables: iptables: counters copy to user failed while replacing table [ 437.739480][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 437.761445][T11498] netlink: 'syz.3.1435': attribute type 3 has an invalid length. [ 437.802514][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'. [ 437.818249][T11498] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 437.855659][T11502] netlink: 'syz.3.1435': attribute type 3 has an invalid length. [ 437.871771][T11505] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 437.954283][T11513] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 437.957850][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1439'. [ 438.062284][T11517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1440'. [ 438.067462][T11511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.158382][T11521] FAULT_INJECTION: forcing a failure. [ 438.158382][T11521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.158415][T11521] CPU: 0 UID: 0 PID: 11521 Comm: syz.2.1441 Not tainted syzkaller #0 PREEMPT(full) [ 438.158436][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.158447][T11521] Call Trace: [ 438.158454][T11521] [ 438.158463][T11521] dump_stack_lvl+0xe8/0x150 [ 438.158496][T11521] should_fail_ex+0x410/0x560 [ 438.158527][T11521] _copy_from_user+0x2d/0xb0 [ 438.158557][T11521] ___sys_sendmsg+0x1c6/0x360 [ 438.158577][T11521] ? __lock_acquire+0x747/0x2de0 [ 438.158604][T11521] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.158661][T11521] ? __fget_files+0x2a/0x420 [ 438.158678][T11521] ? __fget_files+0x3a2/0x420 [ 438.158714][T11521] __x64_sys_sendmsg+0x1b1/0x290 [ 438.158737][T11521] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.158780][T11521] do_syscall_64+0x166/0x520 [ 438.158802][T11521] ? trace_irq_disable+0x3b/0x140 [ 438.158821][T11521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.158841][T11521] ? clear_bhb_loop+0x70/0xc0 [ 438.158864][T11521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.158883][T11521] RIP: 0033:0x7fdc13d9e559 [ 438.158900][T11521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.158914][T11521] RSP: 002b:00007fdc14cc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.158932][T11521] RAX: ffffffffffffffda RBX: 00007fdc14025fa0 RCX: 00007fdc13d9e559 [ 438.158943][T11521] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 438.158954][T11521] RBP: 00007fdc14cc2090 R08: 0000000000000000 R09: 0000000000000000 [ 438.158963][T11521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.158971][T11521] R13: 00007fdc14026038 R14: 00007fdc14025fa0 R15: 00007fffd6ba41a8 [ 438.159000][T11521] [ 438.328593][T11537] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1443'. [ 438.485926][T11539] wireguard0: entered promiscuous mode [ 438.543611][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1447'. [ 439.018537][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'. [ 439.019943][T11543] ip_tables: iptables: counters copy to user failed while replacing table [ 439.349327][T11594] bridge0: port 3(batadv1) entered blocking state [ 439.349509][T11594] bridge0: port 3(batadv1) entered disabled state [ 439.349673][T11594] batadv1: entered allmulticast mode [ 439.359866][T11594] batadv1: entered promiscuous mode [ 439.487811][T11600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.527582][T11603] netlink: 'syz.0.1464': attribute type 4 has an invalid length. [ 439.545429][T11603] netlink: 'syz.0.1464': attribute type 4 has an invalid length. [ 439.828042][T11630] FAULT_INJECTION: forcing a failure. [ 439.828042][T11630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.828073][T11630] CPU: 1 UID: 0 PID: 11630 Comm: syz.4.1472 Not tainted syzkaller #0 PREEMPT(full) [ 439.828093][T11630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.828103][T11630] Call Trace: [ 439.828110][T11630] [ 439.828118][T11630] dump_stack_lvl+0xe8/0x150 [ 439.828152][T11630] should_fail_ex+0x410/0x560 [ 439.828183][T11630] _copy_from_iter+0x1d3/0x1660 [ 439.828208][T11630] ? __alloc_skb+0x27a/0x7a0 [ 439.828236][T11630] ? __alloc_skb+0x27a/0x7a0 [ 439.828262][T11630] ? __alloc_skb+0x27a/0x7a0 [ 439.828288][T11630] ? __pfx__copy_from_iter+0x10/0x10 [ 439.828307][T11630] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 439.828326][T11630] ? __alloc_skb+0x27a/0x7a0 [ 439.828349][T11630] ? __alloc_skb+0x27a/0x7a0 [ 439.828379][T11630] ? netlink_sendmsg+0x650/0xb40 [ 439.828402][T11630] ? skb_put+0x112/0x210 [ 439.828421][T11630] netlink_sendmsg+0x6c0/0xb40 [ 439.828453][T11630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.828482][T11630] ? apparmor_socket_sendmsg+0x98/0x360 [ 439.828509][T11630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.828529][T11630] sock_sendmsg_nosec+0x13a/0x180 [ 439.828554][T11630] ____sys_sendmsg+0x54e/0x850 [ 439.828577][T11630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.828605][T11630] ? import_iovec+0x73/0xa0 [ 439.828635][T11630] ___sys_sendmsg+0x2a5/0x360 [ 439.828653][T11630] ? __lock_acquire+0x747/0x2de0 [ 439.828676][T11630] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.828729][T11630] ? __fget_files+0x2a/0x420 [ 439.828746][T11630] ? __fget_files+0x3a2/0x420 [ 439.828770][T11630] __x64_sys_sendmsg+0x1b1/0x290 [ 439.828800][T11630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.828839][T11630] do_syscall_64+0x166/0x520 [ 439.828858][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578857 [ 439.828858][T11630] ? trace_irq_disable+0x3b/0x140 [ 439.828878][T11630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.828881][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578856 [ 439.828898][T11630] ? clear_bhb_loop+0x70/0xc0 [ 439.828901][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578855 [ 439.828921][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578854 [ 439.828922][T11630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.828940][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578853 [ 439.828943][T11630] RIP: 0033:0x7ff469b9e559 [ 439.828959][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578852 [ 439.828961][T11630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.828975][T11630] RSP: 002b:00007ff46a99e028 EFLAGS: 00000246 [ 439.828979][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578851 [ 439.828986][T11630] ORIG_RAX: 000000000000002e [ 439.828994][T11630] RAX: ffffffffffffffda RBX: 00007ff469e26090 RCX: 00007ff469b9e559 [ 439.828999][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578850 [ 439.829008][T11630] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 439.829019][T11630] RBP: 00007ff46a99e090 R08: 0000000000000000 R09: 0000000000000000 [ 439.829019][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578849 [ 439.829030][T11630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.829038][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578848 [ 439.829041][T11630] R13: 00007ff469e26128 R14: 00007ff469e26090 R15: 00007fffce470128 [ 439.829058][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578847 [ 439.829072][T11630] [ 439.829103][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578846 [ 439.829121][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578845 [ 439.829138][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578844 [ 439.829156][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578843 [ 439.829173][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578842 [ 439.829191][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578841 [ 439.829209][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578840 [ 439.829227][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578839 [ 439.829245][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578838 [ 439.829264][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578837 [ 439.829289][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578836 [ 439.829307][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578835 [ 439.829326][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578834 [ 439.829344][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578833 [ 439.829362][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578832 [ 439.829381][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578831 [ 439.829399][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578830 [ 439.829418][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578829 [ 439.829436][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578828 [ 439.829453][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578827 [ 439.829471][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578826 [ 439.829490][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578825 [ 439.829509][T11632] tipc: Failed to remove unknown binding: 66,0,0/1284133723:3563578823/3563578824 [ 439.845156][ T5673] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 439.845173][ T5673] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 440.251891][ T4983] udevd[4983]: worker [7854] /devices/virtual/block/nbd0 is taking a long time [ 440.606956][T11655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.774516][T11677] netlink: 'syz.2.1479': attribute type 1 has an invalid length. [ 440.852513][T11655] xt_TCPMSS: Only works on TCP SYN packets [ 441.059145][T11679] veth5: entered allmulticast mode [ 441.075697][T11679] bond4: (slave veth5): Enslaving as an active interface with a down link [ 441.108843][T11665] bond4: (slave veth0_to_bond): making interface the new active one [ 441.118901][T11665] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 441.458562][T11708] __nla_validate_parse: 2 callbacks suppressed [ 441.458583][T11708] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1484'. [ 441.538963][ T6554] tipc: Subscription rejected, illegal request [ 441.641199][ T5669] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10 [ 441.641278][ T5669] Bluetooth: unknown link type 128 [ 441.641432][ T5669] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10 [ 441.641445][ T5669] Bluetooth: unknown link type 128 [ 441.641524][ T5669] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10 [ 441.641535][ T5669] Bluetooth: unknown link type 128 [ 441.641614][ T5669] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10 [ 441.641628][ T5669] Bluetooth: unknown link type 128 [ 441.641965][ T5669] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10 [ 441.641982][ T5669] Bluetooth: unknown link type 128 [ 441.642065][ T5669] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10 [ 441.642078][ T5669] Bluetooth: unknown link type 128 [ 441.642154][ T5669] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10 [ 441.642196][ T5669] Bluetooth: unknown link type 128 [ 441.642276][ T5669] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10 [ 441.642290][ T5669] Bluetooth: unknown link type 128 [ 441.642375][ T5669] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10 [ 441.642389][ T5669] Bluetooth: unknown link type 128 [ 441.642473][ T5669] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10 [ 441.642487][ T5669] Bluetooth: unknown link type 128 [ 441.642581][ T5669] Bluetooth: unknown link type 128 [ 441.642722][ T5669] Bluetooth: unknown link type 128 [ 441.642808][ T5669] Bluetooth: unknown link type 128 [ 441.643983][ T5669] Bluetooth: unknown link type 128 [ 441.644082][ T5669] Bluetooth: unknown link type 128 [ 441.644192][ T5669] Bluetooth: unknown link type 128 [ 441.644280][ T5669] Bluetooth: unknown link type 128 [ 441.644366][ T5669] Bluetooth: unknown link type 128 [ 441.644452][ T5669] Bluetooth: unknown link type 128 [ 441.644544][ T5669] Bluetooth: unknown link type 128 [ 441.644630][ T5669] Bluetooth: unknown link type 128 [ 441.644714][ T5669] Bluetooth: unknown link type 128 [ 441.644798][ T5669] Bluetooth: unknown link type 128 [ 441.644884][ T5669] Bluetooth: unknown link type 128 [ 441.644970][ T5669] Bluetooth: unknown link type 128 [ 441.645059][ T5669] Bluetooth: unknown link type 128 [ 441.645142][ T5669] Bluetooth: unknown link type 128 [ 441.645253][ T5669] Bluetooth: unknown link type 128 [ 441.645340][ T5669] Bluetooth: unknown link type 128 [ 441.645424][ T5669] Bluetooth: unknown link type 128 [ 441.645537][ T5669] Bluetooth: unknown link type 128 [ 441.645622][ T5669] Bluetooth: unknown link type 128 [ 441.645707][ T5669] Bluetooth: unknown link type 128 [ 441.645792][ T5669] Bluetooth: unknown link type 128 [ 441.645876][ T5669] Bluetooth: unknown link type 128 [ 441.645962][ T5669] Bluetooth: unknown link type 128 [ 441.646042][ T5669] Bluetooth: unknown link type 128 [ 441.646118][ T5669] Bluetooth: unknown link type 128 [ 441.646220][ T5669] Bluetooth: unknown link type 128 [ 441.646344][ T5669] Bluetooth: unknown link type 128 [ 441.646428][ T5669] Bluetooth: unknown link type 128 [ 441.646522][ T5669] Bluetooth: unknown link type 128 [ 441.646608][ T5669] Bluetooth: unknown link type 128 [ 441.646695][ T5669] Bluetooth: unknown link type 128 [ 441.646779][ T5669] Bluetooth: unknown link type 128 [ 441.646855][ T5669] Bluetooth: unknown link type 128 [ 441.646940][ T5669] Bluetooth: unknown link type 128 [ 441.647025][ T5669] Bluetooth: unknown link type 128 [ 441.647106][ T5669] Bluetooth: unknown link type 128 [ 441.647211][ T5669] Bluetooth: unknown link type 128 [ 441.647296][ T5669] Bluetooth: unknown link type 128 [ 441.647379][ T5669] Bluetooth: unknown link type 128 [ 441.647463][ T5669] Bluetooth: unknown link type 128 [ 441.647563][ T5669] Bluetooth: unknown link type 128 [ 441.647648][ T5669] Bluetooth: unknown link type 128 [ 441.647725][ T5669] Bluetooth: unknown link type 128 [ 441.647800][ T5669] Bluetooth: unknown link type 128 [ 441.647883][ T5669] Bluetooth: unknown link type 128 [ 441.647967][ T5669] Bluetooth: unknown link type 128 [ 441.648050][ T5669] Bluetooth: unknown link type 128 [ 441.648134][ T5669] Bluetooth: unknown link type 128 [ 441.648248][ T5669] Bluetooth: unknown link type 128 [ 441.648334][ T5669] Bluetooth: unknown link type 128 [ 441.711965][ T5669] Bluetooth: unknown link type 128 [ 441.712073][ T5669] Bluetooth: unknown link type 128 [ 442.036217][T11733] syzkaller0: entered promiscuous mode [ 442.036238][T11733] syzkaller0: entered allmulticast mode [ 442.229514][T11743] veth11: entered promiscuous mode [ 442.229538][T11743] veth11: entered allmulticast mode [ 444.573917][T11722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.787681][T11758] IPVS: length: 1152 != 8 [ 444.819612][T11759] vlan3: entered allmulticast mode [ 444.819635][T11759] bond0: entered allmulticast mode [ 444.819648][T11759] bond_slave_0: entered allmulticast mode [ 444.819665][T11759] bond_slave_1: entered allmulticast mode [ 445.004017][T11773] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1499'. [ 445.065373][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1501'. [ 445.084828][T11780] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1502'. [ 445.141157][T11784] netlink: 'syz.1.1504': attribute type 5 has an invalid length. [ 445.148582][T11785] netlink: 'syz.1.1504': attribute type 5 has an invalid length. [ 445.470136][T11807] netlink: 'syz.4.1510': attribute type 11 has an invalid length. [ 445.470157][T11807] netlink: 'syz.4.1510': attribute type 11 has an invalid length. [ 445.470169][T11807] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1510'. [ 445.578129][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'. [ 445.732588][ T5669] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 445.733121][ T5669] Bluetooth: hci1: Injecting HCI hardware error event [ 445.928377][T11828] netlink: 'syz.3.1516': attribute type 15 has an invalid length. [ 446.078406][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'. [ 446.078564][T11845] FAULT_INJECTION: forcing a failure. [ 446.078564][T11845] name failslab, interval 1, probability 0, space 0, times 0 [ 446.078588][T11845] CPU: 1 UID: 0 PID: 11845 Comm: syz.3.1521 Not tainted syzkaller #0 PREEMPT(full) [ 446.078609][T11845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 446.078619][T11845] Call Trace: [ 446.078627][T11845] [ 446.078634][T11845] dump_stack_lvl+0xe8/0x150 [ 446.078667][T11845] should_fail_ex+0x410/0x560 [ 446.078699][T11845] should_failslab+0xa8/0x100 [ 446.078723][T11845] ? skb_clone+0x212/0x3a0 [ 446.078751][T11845] kmem_cache_alloc_noprof+0xa1/0x600 [ 446.078772][T11845] ? skb_clone+0x212/0x3a0 [ 446.078796][T11845] skb_clone+0x212/0x3a0 [ 446.078819][T11845] __netlink_deliver_tap+0x413/0x860 [ 446.078853][T11845] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.078875][T11845] netlink_deliver_tap+0x19c/0x1b0 [ 446.078897][T11845] netlink_sendskb+0x68/0x140 [ 446.078920][T11845] netlink_rcv_skb+0x2a4/0x4a0 [ 446.078942][T11845] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.078970][T11845] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 446.079009][T11845] ? down_read+0x2be/0x330 [ 446.079038][T11845] genl_rcv+0x28/0x40 [ 446.079061][T11845] netlink_unicast+0x8ef/0xa80 [ 446.079100][T11845] netlink_sendmsg+0x813/0xb40 [ 446.079131][T11845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.079160][T11845] ? apparmor_socket_sendmsg+0x98/0x360 [ 446.079185][T11845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.079208][T11845] sock_sendmsg_nosec+0x13a/0x180 [ 446.079235][T11845] ____sys_sendmsg+0x54e/0x850 [ 446.079260][T11845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.079289][T11845] ? import_iovec+0x73/0xa0 [ 446.079320][T11845] ___sys_sendmsg+0x2a5/0x360 [ 446.079339][T11845] ? __lock_acquire+0x747/0x2de0 [ 446.079365][T11845] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.079423][T11845] ? __fget_files+0x2a/0x420 [ 446.079440][T11845] ? __fget_files+0x3a2/0x420 [ 446.079468][T11845] __x64_sys_sendmsg+0x1b1/0x290 [ 446.079490][T11845] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.079534][T11845] do_syscall_64+0x166/0x520 [ 446.079556][T11845] ? trace_irq_disable+0x3b/0x140 [ 446.079575][T11845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.079594][T11845] ? clear_bhb_loop+0x70/0xc0 [ 446.079618][T11845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.079636][T11845] RIP: 0033:0x7f219c19e559 [ 446.079654][T11845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.079669][T11845] RSP: 002b:00007f219d0a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.079689][T11845] RAX: ffffffffffffffda RBX: 00007f219c425fa0 RCX: 00007f219c19e559 [ 446.079702][T11845] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 446.079714][T11845] RBP: 00007f219d0a0090 R08: 0000000000000000 R09: 0000000000000000 [ 446.079726][T11845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.079745][T11845] R13: 00007f219c426038 R14: 00007f219c425fa0 R15: 00007ffdc6ac1598 [ 446.079778][T11845] [ 446.125374][T11848] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1523'. [ 446.129630][T11850] sock: sock_timestamping_bind_phc: sock not bind to device [ 446.244152][T11846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1520'. [ 446.539299][T11867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1522'. [ 446.539340][T11867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1522'. [ 446.586556][T11873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1527'. [ 446.614332][T11875] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1522'. [ 446.857965][T11887] netlink: 'syz.0.1528': attribute type 23 has an invalid length. [ 447.067694][T11908] bond0: Error: Cannot enslave bond to itself. [ 447.081930][T11908] netlink: 'syz.2.1533': attribute type 3 has an invalid length. [ 447.096720][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 447.096740][T11908] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1533'. [ 447.170301][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1535'. [ 447.191213][T11910] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 447.257247][ T5669] Bluetooth: hci3: command 0x0406 tx timeout [ 447.257295][ T5669] Bluetooth: hci2: command 0x0406 tx timeout [ 447.317293][T11920] bond0: (slave ip6tnl0): refused to change device type [ 447.321953][ T5665] Bluetooth: hci1: hardware error 0x00 [ 447.388746][T11923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1539'. [ 447.737944][T11947] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 447.774156][T11945] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1546'. [ 447.774411][T11945] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1546'. [ 448.862912][T11980] sctp: [Deprecated]: syz.0.1555 (pid 11980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 448.862912][T11980] Use struct sctp_sack_info instead [ 448.898352][T11977] bond6: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 448.916510][T11977] bond6 (unregistering): Released all slaves [ 449.012642][T11984] bond6: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 449.026676][T11984] bond6 (unregistering): Released all slaves [ 449.224972][T11993] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.277720][T12007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.413045][ T5665] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 449.467328][T12019] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 449.529855][T12019] 8021q: adding VLAN 0 to HW filter on device bond8 [ 449.629314][T12031] bond7: option xmit_hash_policy: invalid value (64) [ 449.646483][T12031] bond7 (unregistering): Released all slaves [ 449.663375][T12037] netlink: 'syz.0.1564': attribute type 10 has an invalid length. [ 449.754426][T12019] bond8: (slave dummy0): making interface the new active one [ 449.755954][T12019] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 449.756201][T12037] dummy0: entered promiscuous mode [ 449.759124][T12037] bond8: (slave dummy0): Releasing active interface [ 449.904124][T12046] netlink: 'syz.2.1568': attribute type 1 has an invalid length. [ 450.258371][T12072] rxe_eth0 speed is unknown, defaulting to 1000 [ 450.787298][T12085] netlink: 'syz.2.1582': attribute type 13 has an invalid length. [ 450.803313][ T5665] block nbd2: Receive control failed (result -32) [ 450.869133][T12072] wlan1 speed is unknown, defaulting to 1000 [ 451.211133][T12095] netlink: 'syz.2.1586': attribute type 64 has an invalid length. [ 451.298956][T12092] veth5: entered promiscuous mode [ 451.298979][T12092] veth5: entered allmulticast mode [ 451.304472][T12094] macvlan1: mtu less than device minimum [ 451.564565][T12105] __nla_validate_parse: 69 callbacks suppressed [ 451.564585][T12105] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1589'. [ 451.566755][T12105] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 451.623962][T12105] 0ªî{X¹¦: entered allmulticast mode [ 451.624447][T12105] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 451.929981][T12120] xfrm1: entered allmulticast mode [ 452.028779][ T30] audit: type=1800 audit(1792422342.345:45): pid=12132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1597" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1665 res=0 errno=0 [ 452.394796][T12157] SET target dimension over the limit! [ 452.439350][T12161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.445810][T12161] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 452.592085][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1609'. [ 452.674290][T12172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1608'. [ 452.745558][T12172] syzkaller0: entered promiscuous mode [ 452.745580][T12172] syzkaller0: entered allmulticast mode [ 453.589874][T12214] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1616'. [ 455.348126][T12212] syzkaller1: entered promiscuous mode [ 455.348150][T12212] syzkaller1: entered allmulticast mode [ 455.467661][T12228] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1620'. [ 455.680618][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1623'. [ 455.755889][T12240] bond7: option fail_over_mac: invalid value (16) [ 456.424099][T12247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'. [ 456.424123][T12247] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1626'. [ 456.473170][T12240] bond7 (unregistering): Released all slaves [ 456.599476][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1628'. [ 457.027955][T12278] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1637'. [ 457.029009][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1637'. [ 457.032147][T12276] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 457.068451][T12279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1637'. [ 457.087707][T12276] 8021q: adding VLAN 0 to HW filter on device bond5 [ 457.143378][T12284] bond5: (slave veth7): Enslaving as an active interface with a down link [ 457.146031][T12286] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1638'. [ 457.164579][T12276] bond5: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 457.403844][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'. [ 457.473142][T12302] netlink: 'syz.1.1643': attribute type 3 has an invalid length. [ 457.588488][T12306] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 457.597965][T12306] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 457.883260][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1651'. [ 458.137169][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1657'. [ 458.225898][T12363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1657'. [ 458.266103][T12367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1660'. [ 458.479885][T12374] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 458.549385][T12377] veth0: entered promiscuous mode [ 458.952050][ T5665] block nbd3: Receive control failed (result -32) [ 458.952791][ T5655] block nbd3: Receive control failed (result -32) [ 458.954494][T12376] veth0: left promiscuous mode [ 459.176548][T12425] netlink: 'syz.0.1673': attribute type 1 has an invalid length. [ 459.176572][T12425] netlink: 'syz.0.1673': attribute type 2 has an invalid length. [ 459.572837][T12443] ip_tables: iptables: counters copy to user failed while replacing table [ 459.847766][T12461] netlink: 'syz.2.1681': attribute type 14 has an invalid length. [ 461.095415][T12534] netlink: 'syz.3.1699': attribute type 1 has an invalid length. [ 461.165052][T12534] bond7: option mode: invalid value (7) [ 461.170314][T12534] bond7 (unregistering): Released all slaves [ 461.198854][T12544] Cannot find del_set index 2 as target [ 461.204934][T12544] netlink: 'syz.3.1699': attribute type 5 has an invalid length. [ 461.579912][T12552] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 461.613567][T12552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.798853][T12558] __nla_validate_parse: 83 callbacks suppressed [ 461.798875][T12558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1706'. [ 461.799465][T12558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1706'. [ 462.164791][T12575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1709'. [ 462.589095][T12595] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1716'. [ 462.611835][T12595] syzkaller1: entered promiscuous mode [ 462.611860][T12595] syzkaller1: entered allmulticast mode [ 462.809837][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 462.809861][T12603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1719'. [ 462.928519][T12605] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1720'. [ 463.034530][T12611] : renamed from bond0 (while UP) [ 463.108371][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1726'. [ 463.146125][ T5655] Bluetooth: hci3: Unexpected cc 0x2753 with no status [ 463.424559][T12625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1729'. [ 463.500801][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1731'. [ 463.500829][T12640] block nbd4: Unsupported socket: should be TCP or UNIX. [ 463.695904][T12653] netlink: 'syz.0.1734': attribute type 1 has an invalid length. [ 463.751073][T12657] team0: Port device xfrm0 added [ 463.752804][T12657] tipc: Enabled bearer , priority 0 [ 463.782844][T12661] tipc: Enabling of bearer rejected, already enabled [ 464.143935][T12695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.373782][ T4945] block nbd0: Possible stuck request ffff888027dc5080: control (read@0,4096B). Runtime 90 seconds [ 464.792180][T12724] netlink: 'syz.4.1755': attribute type 5 has an invalid length. [ 464.839953][T12724] geneve2: entered promiscuous mode [ 464.839977][T12724] geneve2: entered allmulticast mode [ 464.840024][T12732] netlink: 'syz.3.1758': attribute type 9 has an invalid length. [ 464.932230][ T6565] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 464.932277][ T6565] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 464.932308][ T6565] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 464.932338][ T6565] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 464.959855][T12735] netlink: 'syz.0.1759': attribute type 12 has an invalid length. [ 464.959875][T12735] netlink: 'syz.0.1759': attribute type 29 has an invalid length. [ 465.202685][T12758] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 465.347128][T12756] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 465.404184][T12763] netlink: get zone limit has 4 unknown bytes [ 466.585308][T12828] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 466.686023][ T6570] bond3: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 466.688741][ T6570] bond3: (slave veth0_to_bond): making interface the new active one [ 466.720629][ T6570] bond3: active interface up! [ 466.879776][T12876] __nla_validate_parse: 14 callbacks suppressed [ 466.879798][T12876] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1792'. [ 466.879813][T12876] openvswitch: netlink: Flow key attr not present in new flow. [ 466.986342][T12878] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1793'. [ 466.986801][T12879] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1793'. [ 467.180825][T12900] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1796'. [ 467.287731][T12912] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1796'. [ 467.587387][T12923] x_tables: duplicate entry at hook 1 [ 467.589765][T12923] veth0: entered promiscuous mode [ 467.595746][T12923] Bluetooth: MGMT ver 1.23 [ 467.673296][T12922] veth0: left promiscuous mode [ 467.675481][T12925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1805'. [ 467.957119][T12953] macsec0: entered allmulticast mode [ 467.957203][T12953] veth1_macvtap: entered allmulticast mode [ 468.022004][T12958] bond0: Error: Cannot enslave bond to itself. [ 468.026547][T12958] sctp: [Deprecated]: syz.0.1815 (pid 12958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.026547][T12958] Use struct sctp_sack_info instead [ 468.251117][T12971] netlink: 'syz.4.1820': attribute type 2 has an invalid length. [ 468.253378][T12971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1820'. [ 468.331171][T12977] netlink: 524 bytes leftover after parsing attributes in process `syz.3.1822'. [ 468.339679][T12971] bond6: option fail_over_mac: invalid value (16) [ 468.342576][T12971] bond6 (unregistering): Released all slaves [ 468.390618][T12974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.391675][T12974] sock: sock_timestamping_bind_phc: sock not bind to device [ 468.640154][T12995] netlink: 'syz.4.1826': attribute type 23 has an invalid length. [ 468.706005][T12991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1826'. [ 468.706040][T12991] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 468.752765][T13002] netlink: 'syz.1.1830': attribute type 2 has an invalid length. [ 468.769452][T13002] ip6erspan0: entered allmulticast mode [ 469.222620][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1836'. [ 469.223335][ T30] audit: type=1107 audit(1792422359.545:46): pid=13032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='É%y#f·ˆ}ìa dI‰âÝLðô’Œ^ø/?PgIKm$dãßîC¼_ªö~LÁ3˜˜“ÏPÂ7)ÎI5á3`Zq¦M%£8“ï0³`ôÂD¨ÁÉØ‹0CÁqU šæe³f¨õ³:¾E©•ðð÷³N[_Ķ¨*mn*åL‡àD”ŠÒËeï`µñm]Ù;‹þMË ØȎÚ¬Ä [ 469.223335][ T30] à<,kKÕåü|îV&YFh rejected, already enabled [ 476.581564][T13497] syzkaller1: entered promiscuous mode [ 476.581590][T13497] syzkaller1: entered allmulticast mode [ 476.597015][T13497] netlink: 'syz.3.1953': attribute type 4 has an invalid length. [ 476.907571][T13531] netlink: 'syz.3.1962': attribute type 21 has an invalid length. [ 477.016344][T13533] bond6: entered promiscuous mode [ 477.016367][T13533] bond6: entered allmulticast mode [ 477.217642][T13546] __nla_validate_parse: 13 callbacks suppressed [ 477.217661][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1968'. [ 477.479220][T13566] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1973'. [ 477.607306][T13578] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1978'. [ 477.960071][T13600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1984'. [ 478.166858][T13618] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1991'. [ 478.234659][T13614] gretap0: entered allmulticast mode [ 478.303961][T13631] netlink: 'syz.4.1994': attribute type 6 has an invalid length. [ 478.417976][T13635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1995'. [ 478.938835][T13671] netlink: 'syz.4.2000': attribute type 10 has an invalid length. [ 478.961261][T13671] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.966566][T13671] team0: entered promiscuous mode [ 478.974432][T13671] bond0: (slave team0): Enslaving as an active interface with an up link [ 479.020629][T13677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2003'. [ 479.046710][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'. [ 479.098677][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'. [ 481.773862][T13660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.956712][T13717] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2012'. [ 481.971355][T13717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.154497][T13728] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 482.159521][T13732] netlink: 'syz.1.2014': attribute type 2 has an invalid length. [ 482.207763][T13736] netlink: 'syz.0.2019': attribute type 28 has an invalid length. [ 482.207784][T13736] netlink: 'syz.0.2019': attribute type 3 has an invalid length. [ 482.233935][T13738] netlink: 'syz.4.2016': attribute type 21 has an invalid length. [ 482.233992][T13738] __nla_validate_parse: 2 callbacks suppressed [ 482.234004][T13738] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2016'. [ 482.359789][T13748] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 482.359821][T13748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.398430][T13751] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 482.398463][T13751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.482202][T13763] netlink: 'syz.2.2024': attribute type 1 has an invalid length. [ 482.503466][T13761] bond7: Unable to set up delay as MII monitoring is disabled [ 482.505978][T13761] bond7 (unregistering): Released all slaves [ 482.673023][T13763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.741939][T13767] bond0: (slave veth9): Enslaving as an active interface with a down link [ 483.371612][T13823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2036'. [ 483.614022][T13836] 8021q: adding VLAN 0 to HW filter on device .` [ 483.615574][T13836] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.616218][T13836] tipc: Resetting bearer [ 483.642694][T13836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.681272][T13836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.683404][T13836] 8021q: adding VLAN 0 to HW filter on device bond2 [ 483.758726][T13836] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 483.817793][ T6544] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 483.973880][T13844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2044'. [ 484.042476][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 484.132195][T13857] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 484.132607][T13857] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2048'. [ 484.223267][T13866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2051'. [ 484.274252][T13861] netlink: 'syz.0.2050': attribute type 12 has an invalid length. [ 484.391767][T13876] openvswitch: netlink: IPv4 tunnel dst address is zero [ 484.413338][T13874] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 484.544713][T13884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2058'. [ 484.549806][T13883] netlink: 1108 bytes leftover after parsing attributes in process `syz.1.2058'. [ 484.549827][T13883] openvswitch: netlink: Flow key attr not present in new flow. [ 484.555922][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2058'. [ 484.556315][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2058'. [ 484.628501][T13889] syzkaller1: entered promiscuous mode [ 484.628524][T13889] syzkaller1: entered allmulticast mode [ 484.777497][T13896] netlink: 'syz.1.2062': attribute type 1 has an invalid length. [ 484.797304][T13896] netlink: 'syz.1.2062': attribute type 1 has an invalid length. [ 485.031516][T13903] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 485.330539][ T5665] Bluetooth: hci4: command 0x0405 tx timeout [ 485.605745][ T6540] nci: nci_ntf_packet: unknown ntf opcode 0x102 [ 485.659943][T13956] netlink: 'syz.0.2077': attribute type 1 has an invalid length. [ 486.722026][T14008] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 488.062262][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 488.486700][T13936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.869202][T14065] __nla_validate_parse: 15 callbacks suppressed [ 488.869223][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2102'. [ 488.905756][T14065] mac80211_hwsim hwsim0 O: renamed from wlan0 (while UP) [ 488.929525][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2102'. [ 489.041242][T14068] xt_recent: Unsupported userspace flags (000000b1) [ 489.049063][T14068] xt_limit: Overflow, try lower: 536871034/127 [ 489.117693][T14086] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 489.140524][T14087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2103'. [ 489.568129][T14109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2108'. [ 489.756163][T14115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2109'. [ 489.871071][T14121] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2110'. [ 489.878541][T14130] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2114'. [ 489.879989][T14122] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2110'. [ 490.031645][T14136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2113'. [ 490.138643][T14142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2115'. [ 490.445784][T14168] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 490.676646][T14184] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 490.788385][T14197] lo: entered promiscuous mode [ 490.793083][T14197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.796284][T14199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.450907][ T4945] block nbd0: Possible stuck request ffff888027dc5080: control (read@0,4096B). Runtime 120 seconds [ 496.371126][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 506.238223][ T5659] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 506.246116][ T5659] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 506.252659][ T4933] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 506.259365][ T5659] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 506.259956][ T5659] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 506.265358][ T5659] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 506.281268][ T5659] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 506.281572][ T5659] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 506.282664][ T5659] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 506.310719][ T5655] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 506.434229][ T5655] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 506.439329][ T5655] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 506.441757][ T5655] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 506.457781][ T5655] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 506.461302][ T5655] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 506.595462][ T5655] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 506.598718][ T5655] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 506.618666][ T5655] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 506.632151][ T5655] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 506.635434][ T5655] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 506.709180][ T5665] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 506.716523][ T5665] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 506.718959][ T5665] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 506.738892][ T5665] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 506.739556][ T5665] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 507.188921][T14224] rxe_eth0 speed is unknown, defaulting to 1000 [ 507.554072][T14232] rxe_eth0 speed is unknown, defaulting to 1000 [ 507.555870][T14224] wlan1 speed is unknown, defaulting to 1000 [ 507.758586][T14225] rxe_eth0 speed is unknown, defaulting to 1000 [ 507.774972][T14232] wlan1 speed is unknown, defaulting to 1000 [ 507.978032][T14224] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.978677][T14224] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.978806][T14224] bridge_slave_0: entered allmulticast mode [ 507.981857][T14224] bridge_slave_0: entered promiscuous mode [ 508.008468][T14224] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.008573][T14224] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.009533][T14224] bridge_slave_1: entered allmulticast mode [ 508.016478][T14224] bridge_slave_1: entered promiscuous mode [ 508.043043][T14237] rxe_eth0 speed is unknown, defaulting to 1000 [ 508.086424][T14224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.086483][T14225] wlan1 speed is unknown, defaulting to 1000 [ 508.136726][T14224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.253379][T14224] team0: Port device team_slave_0 added [ 508.275744][T14224] team0: Port device team_slave_1 added [ 508.352287][T14243] rxe_eth0 speed is unknown, defaulting to 1000 [ 508.353027][T14224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.353040][T14224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.353062][T14224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.356803][T14237] wlan1 speed is unknown, defaulting to 1000 [ 508.371008][ T5665] Bluetooth: hci6: command tx timeout [ 508.373978][ T5665] Bluetooth: hci5: command tx timeout [ 508.463186][T14224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.463204][T14224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.463227][T14224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.531338][ T5655] Bluetooth: hci7: command tx timeout [ 508.626220][T14232] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.626312][T14232] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.626376][T14232] bridge_slave_0: entered allmulticast mode [ 508.627333][T14232] bridge_slave_0: entered promiscuous mode [ 508.647545][T14243] wlan1 speed is unknown, defaulting to 1000 [ 508.688874][T14224] hsr_slave_0: entered promiscuous mode [ 508.689884][T14224] hsr_slave_1: entered promiscuous mode [ 508.690515][ T5655] Bluetooth: hci8: command tx timeout [ 508.697809][T14224] debugfs: 'hsr0' already exists in 'hsr' [ 508.697830][T14224] Cannot create hsr debugfs directory [ 508.698143][T14232] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.698283][T14232] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.698400][T14232] bridge_slave_1: entered allmulticast mode [ 508.703728][T14232] bridge_slave_1: entered promiscuous mode [ 508.813682][T14232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.847240][T14232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.860621][ T5655] Bluetooth: hci9: command tx timeout [ 508.922056][T14232] team0: Port device team_slave_0 added [ 508.951534][T14232] team0: Port device team_slave_1 added [ 509.054492][T14232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.054510][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.054528][T14232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.099665][T14232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.099680][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.099701][T14232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.108572][T14225] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.108935][T14225] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.109316][T14225] bridge_slave_0: entered allmulticast mode [ 509.111365][T14225] bridge_slave_0: entered promiscuous mode [ 509.194112][T14225] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.195748][T14225] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.196013][T14225] bridge_slave_1: entered allmulticast mode [ 509.197081][T14225] bridge_slave_1: entered promiscuous mode [ 509.363733][T14232] hsr_slave_0: entered promiscuous mode [ 509.364759][T14232] hsr_slave_1: entered promiscuous mode [ 509.365497][T14232] debugfs: 'hsr0' already exists in 'hsr' [ 509.365515][T14232] Cannot create hsr debugfs directory [ 509.369986][T14225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.403141][T14225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.481640][T14225] team0: Port device team_slave_0 added [ 509.516707][T14225] team0: Port device team_slave_1 added [ 509.605930][T14237] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.606090][T14237] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.606483][T14237] bridge_slave_0: entered allmulticast mode [ 509.607916][T14237] bridge_slave_0: entered promiscuous mode [ 509.618833][T14237] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.618930][T14237] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.619296][T14237] bridge_slave_1: entered allmulticast mode [ 509.624160][T14237] bridge_slave_1: entered promiscuous mode [ 509.643793][T14225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.643809][T14225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.643831][T14225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.721491][T14225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.721508][T14225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.721530][T14225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.761389][T14237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.778778][T14243] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.778950][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.779067][T14243] bridge_slave_0: entered allmulticast mode [ 509.782155][T14243] bridge_slave_0: entered promiscuous mode [ 509.809783][T14237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.825386][T14243] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.825560][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.825651][T14243] bridge_slave_1: entered allmulticast mode [ 509.826674][T14243] bridge_slave_1: entered promiscuous mode [ 509.906277][T14237] team0: Port device team_slave_0 added [ 509.927162][T14243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.937100][T14237] team0: Port device team_slave_1 added [ 509.953533][T14225] hsr_slave_0: entered promiscuous mode [ 509.954169][T14225] hsr_slave_1: entered promiscuous mode [ 509.954570][T14225] debugfs: 'hsr0' already exists in 'hsr' [ 509.954589][T14225] Cannot create hsr debugfs directory [ 509.956740][T14243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.998861][T14237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.998873][T14237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.998887][T14237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.054618][T14237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.054634][T14237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.054653][T14237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.062927][T14243] team0: Port device team_slave_0 added [ 510.065722][T14243] team0: Port device team_slave_1 added [ 510.139259][T14243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.139277][T14243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.139296][T14243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.197226][T14243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.197242][T14243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.197262][T14243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.233618][T14237] hsr_slave_0: entered promiscuous mode [ 510.234769][T14237] hsr_slave_1: entered promiscuous mode [ 510.238013][T14237] debugfs: 'hsr0' already exists in 'hsr' [ 510.238032][T14237] Cannot create hsr debugfs directory [ 510.342017][T14243] hsr_slave_0: entered promiscuous mode [ 510.342907][T14243] hsr_slave_1: entered promiscuous mode [ 510.343361][T14243] debugfs: 'hsr0' already exists in 'hsr' [ 510.343380][T14243] Cannot create hsr debugfs directory [ 510.451908][ T5655] Bluetooth: hci5: command tx timeout [ 510.451944][ T5655] Bluetooth: hci6: command tx timeout [ 510.610806][ T5665] Bluetooth: hci7: command tx timeout [ 510.771188][ T5665] Bluetooth: hci8: command tx timeout [ 510.940792][ T5665] Bluetooth: hci9: command tx timeout [ 512.530553][ T5665] Bluetooth: hci6: command tx timeout [ 512.530590][ T5665] Bluetooth: hci5: command tx timeout [ 512.691448][ T5665] Bluetooth: hci7: command tx timeout [ 512.850572][ T5665] Bluetooth: hci8: command tx timeout [ 513.010692][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 513.012062][ T5665] Bluetooth: hci9: command tx timeout [ 514.610564][ T5665] Bluetooth: hci6: command tx timeout [ 514.610580][ T5655] Bluetooth: hci5: command tx timeout [ 514.770961][ T5655] Bluetooth: hci7: command tx timeout [ 514.931001][ T5655] Bluetooth: hci8: command tx timeout [ 515.100676][ T5655] Bluetooth: hci9: command tx timeout [ 524.531818][ T4945] block nbd0: Possible stuck request ffff888027dc5080: control (read@0,4096B). Runtime 150 seconds [ 545.010615][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 554.610803][ T4945] block nbd0: Possible stuck request ffff888027dc5080: control (read@0,4096B). Runtime 180 seconds [ 555.826861][ T4983] udevd[4983]: worker [7854] /devices/virtual/block/nbd0 timeout; kill it [ 555.828108][ T4983] udevd[4983]: seq 12180 '/devices/virtual/block/nbd0' killed [ 566.615454][ T5665] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 566.619632][ T5665] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 566.637760][ T5665] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 566.651651][ T5665] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 566.656367][ T5665] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 566.784900][ T5655] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 566.801701][ T5655] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 566.808587][ T5655] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 566.826396][ T5659] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 566.837098][ T5659] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 566.842029][ T4933] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 566.845195][ T4933] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 566.846626][ T4933] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 566.847485][ T4933] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 566.848060][ T4933] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 566.965093][ T5665] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 566.975019][ T5665] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 566.979377][ T5665] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 566.996651][ T5665] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 566.997318][ T5665] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 567.125842][ T5659] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 567.133555][ T5659] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 567.140040][ T5659] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 567.145170][ T5659] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 567.146260][ T5659] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 567.792055][T14318] rxe_eth0 speed is unknown, defaulting to 1000 [ 568.024727][T14314] rxe_eth0 speed is unknown, defaulting to 1000 [ 568.026427][T14318] wlan1 speed is unknown, defaulting to 1000 [ 568.248396][T14331] rxe_eth0 speed is unknown, defaulting to 1000 [ 568.298502][T14314] wlan1 speed is unknown, defaulting to 1000 [ 568.425252][T14318] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.425419][T14318] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.425597][T14318] bridge_slave_0: entered allmulticast mode [ 568.427557][T14318] bridge_slave_0: entered promiscuous mode [ 568.463667][T14320] rxe_eth0 speed is unknown, defaulting to 1000 [ 568.473535][T14331] wlan1 speed is unknown, defaulting to 1000 [ 568.492351][T14318] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.492529][T14318] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.492694][T14318] bridge_slave_1: entered allmulticast mode [ 568.496414][T14318] bridge_slave_1: entered promiscuous mode [ 568.580801][T14318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.609869][T14318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.681120][T14318] team0: Port device team_slave_0 added [ 568.707698][T14318] team0: Port device team_slave_1 added [ 568.733286][T14325] rxe_eth0 speed is unknown, defaulting to 1000 [ 568.763575][T14320] wlan1 speed is unknown, defaulting to 1000 [ 568.770758][ T5659] Bluetooth: hci10: command tx timeout [ 568.776432][T14318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.776449][T14318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.776471][T14318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.861512][T14318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.861529][T14318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.861552][T14318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.930636][ T5665] Bluetooth: hci11: command tx timeout [ 568.931333][ T5659] Bluetooth: hci12: command tx timeout [ 569.069667][T14318] hsr_slave_0: entered promiscuous mode [ 569.076604][T14318] hsr_slave_1: entered promiscuous mode [ 569.077139][T14318] debugfs: 'hsr0' already exists in 'hsr' [ 569.077158][T14318] Cannot create hsr debugfs directory [ 569.093536][ T5659] Bluetooth: hci13: command tx timeout [ 569.094453][T14325] wlan1 speed is unknown, defaulting to 1000 [ 569.261017][ T5659] Bluetooth: hci14: command tx timeout [ 569.337752][T14314] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.337912][T14314] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.338035][T14314] bridge_slave_0: entered allmulticast mode [ 569.339530][T14314] bridge_slave_0: entered promiscuous mode [ 569.343253][T14314] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.343351][T14314] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.343795][T14314] bridge_slave_1: entered allmulticast mode [ 569.345558][T14314] bridge_slave_1: entered promiscuous mode [ 569.466343][T14314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.488396][T14331] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.488751][T14331] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.488836][T14331] bridge_slave_0: entered allmulticast mode [ 569.489888][T14331] bridge_slave_0: entered promiscuous mode [ 569.517032][T14314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.543208][T14331] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.543268][T14331] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.543351][T14331] bridge_slave_1: entered allmulticast mode [ 569.544361][T14331] bridge_slave_1: entered promiscuous mode [ 569.618958][T14314] team0: Port device team_slave_0 added [ 569.636028][T14331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.644359][T14314] team0: Port device team_slave_1 added [ 569.713297][T14331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.736107][T14314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.736125][T14314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.736146][T14314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.809059][T14314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.809077][T14314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.809129][T14314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.859821][T14331] team0: Port device team_slave_0 added [ 569.864754][T14331] team0: Port device team_slave_1 added [ 569.917860][T14331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.917877][T14331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.917898][T14331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.969424][T14331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.969440][T14331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.969462][T14331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.041504][T14314] hsr_slave_0: entered promiscuous mode [ 570.042149][T14314] hsr_slave_1: entered promiscuous mode [ 570.042586][T14314] debugfs: 'hsr0' already exists in 'hsr' [ 570.042604][T14314] Cannot create hsr debugfs directory [ 570.067306][T14320] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.067482][T14320] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.067861][T14320] bridge_slave_0: entered allmulticast mode [ 570.069582][T14320] bridge_slave_0: entered promiscuous mode [ 570.072539][T14320] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.072635][T14320] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.072995][T14320] bridge_slave_1: entered allmulticast mode [ 570.074652][T14320] bridge_slave_1: entered promiscuous mode [ 570.164375][T14320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.215134][T14320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.242415][T14331] hsr_slave_0: entered promiscuous mode [ 570.243220][T14331] hsr_slave_1: entered promiscuous mode [ 570.243663][T14331] debugfs: 'hsr0' already exists in 'hsr' [ 570.243680][T14331] Cannot create hsr debugfs directory [ 570.299910][T14320] team0: Port device team_slave_0 added [ 570.335429][T14320] team0: Port device team_slave_1 added [ 570.422283][T14325] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.422459][T14325] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.422598][T14325] bridge_slave_0: entered allmulticast mode [ 570.424218][T14325] bridge_slave_0: entered promiscuous mode [ 570.440283][T14320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.440355][T14320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.440377][T14320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.459373][T14325] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.459537][T14325] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.459662][T14325] bridge_slave_1: entered allmulticast mode [ 570.467225][T14325] bridge_slave_1: entered promiscuous mode [ 570.501634][T14320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.501664][T14320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.501687][T14320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.589216][T14325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.631915][T14325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.644055][T14320] hsr_slave_0: entered promiscuous mode [ 570.645128][T14320] hsr_slave_1: entered promiscuous mode [ 570.645845][T14320] debugfs: 'hsr0' already exists in 'hsr' [ 570.645870][T14320] Cannot create hsr debugfs directory [ 570.735714][T14325] team0: Port device team_slave_0 added [ 570.766443][T14325] team0: Port device team_slave_1 added [ 570.839805][T14325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.839823][T14325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.839853][T14325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.881539][ T5659] Bluetooth: hci10: command tx timeout [ 570.907441][T14325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.907458][T14325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.907480][T14325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.994093][T14325] hsr_slave_0: entered promiscuous mode [ 570.994749][T14325] hsr_slave_1: entered promiscuous mode [ 570.995184][T14325] debugfs: 'hsr0' already exists in 'hsr' [ 570.995201][T14325] Cannot create hsr debugfs directory [ 571.012890][ T5659] Bluetooth: hci12: command tx timeout [ 571.012920][ T5659] Bluetooth: hci11: command tx timeout [ 571.170457][ T5665] Bluetooth: hci13: command tx timeout [ 571.330507][ T5665] Bluetooth: hci14: command tx timeout [ 572.930751][ T5665] Bluetooth: hci10: command tx timeout [ 573.090687][ T5659] Bluetooth: hci12: command tx timeout [ 573.090781][ T5665] Bluetooth: hci11: command tx timeout [ 573.250644][ T5665] Bluetooth: hci13: command tx timeout [ 573.410954][ T5665] Bluetooth: hci14: command tx timeout [ 575.010704][ T5665] Bluetooth: hci10: command tx timeout [ 575.170510][ T5665] Bluetooth: hci11: command tx timeout [ 575.170546][ T5665] Bluetooth: hci12: command tx timeout [ 575.250636][ T5655] Bluetooth: hci4: command 0x0405 tx timeout [ 575.340773][ T5659] Bluetooth: hci13: command tx timeout [ 575.490734][ T5659] Bluetooth: hci14: command tx timeout [ 584.690774][ T4945] block nbd0: Possible stuck request ffff888027dc5080: control (read@0,4096B). Runtime 210 seconds [ 609.010599][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 614.774426][ T4945] block nbd0: Possible stuck request ffff888027dc5080: control (read@0,4096B). Runtime 240 seconds [ 627.205338][ T5655] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 627.210602][ T5655] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 627.230714][ T5655] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 627.234812][ T5655] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 627.235464][ T5655] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 627.318185][ T5659] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 627.328221][ T5659] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 627.328983][ T5659] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 627.330409][ T5659] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 627.339390][ T5659] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 627.431871][ T5659] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 627.437598][ T5659] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 627.439707][ T5659] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 627.456548][ T5659] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 627.471231][ T5659] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 627.638231][ T5659] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 627.643767][ T5659] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 627.644507][ T5659] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 627.646690][ T5659] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 627.647315][ T5659] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 627.723560][ T5665] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 627.744351][ T5655] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 627.746875][ T5655] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 627.767890][ T5655] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 627.768683][ T5655] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 628.252767][T14408] rxe_eth0 speed is unknown, defaulting to 1000 [ 628.598682][T14404] rxe_eth0 speed is unknown, defaulting to 1000 [ 628.601074][T14408] wlan1 speed is unknown, defaulting to 1000 [ 628.838121][T14412] rxe_eth0 speed is unknown, defaulting to 1000 [ 628.858798][T14404] wlan1 speed is unknown, defaulting to 1000 [ 628.987048][T14408] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.987534][T14408] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.987939][T14408] bridge_slave_0: entered allmulticast mode [ 628.989831][T14408] bridge_slave_0: entered promiscuous mode [ 629.017863][T14408] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.017978][T14408] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.018308][T14408] bridge_slave_1: entered allmulticast mode [ 629.025191][T14408] bridge_slave_1: entered promiscuous mode [ 629.087995][T14408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.088642][T14418] rxe_eth0 speed is unknown, defaulting to 1000 [ 629.094235][T14408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.143715][T14412] wlan1 speed is unknown, defaulting to 1000 [ 629.146069][T14408] team0: Port device team_slave_0 added [ 629.186004][T14408] team0: Port device team_slave_1 added [ 629.250602][ T5659] Bluetooth: hci15: command tx timeout [ 629.269587][T14408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.269603][T14408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.269623][T14408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.335216][T14408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.335229][T14408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.335243][T14408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.409369][T14420] rxe_eth0 speed is unknown, defaulting to 1000 [ 629.410820][ T5659] Bluetooth: hci16: command tx timeout [ 629.472954][T14418] wlan1 speed is unknown, defaulting to 1000 [ 629.570751][ T52] Bluetooth: hci17: command tx timeout [ 629.585734][T14408] hsr_slave_0: entered promiscuous mode [ 629.586831][T14408] hsr_slave_1: entered promiscuous mode [ 629.587594][T14408] debugfs: 'hsr0' already exists in 'hsr' [ 629.587612][T14408] Cannot create hsr debugfs directory [ 629.704812][T14420] wlan1 speed is unknown, defaulting to 1000 [ 629.820616][ T52] Bluetooth: hci19: command tx timeout [ 629.821402][ T52] Bluetooth: hci18: command tx timeout [ 629.827479][T14404] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.827645][T14404] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.827781][T14404] bridge_slave_0: entered allmulticast mode [ 629.829745][T14404] bridge_slave_0: entered promiscuous mode [ 629.886765][T14404] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.886904][T14404] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.886987][T14404] bridge_slave_1: entered allmulticast mode [ 629.887957][T14404] bridge_slave_1: entered promiscuous mode [ 629.969499][T14404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.017243][T14404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.113813][T14404] team0: Port device team_slave_0 added [ 630.162761][T14404] team0: Port device team_slave_1 added [ 630.263785][T14404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.263802][T14404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.263824][T14404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.269842][T14412] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.269988][T14412] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.270096][T14412] bridge_slave_0: entered allmulticast mode [ 630.272748][T14412] bridge_slave_0: entered promiscuous mode [ 630.285349][T14404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.285363][T14404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.285385][T14404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.320991][T14412] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.321102][T14412] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.321237][T14412] bridge_slave_1: entered allmulticast mode [ 630.324554][T14412] bridge_slave_1: entered promiscuous mode [ 630.460028][T14412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.473292][T14412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.542387][T14404] hsr_slave_0: entered promiscuous mode [ 630.543492][T14404] hsr_slave_1: entered promiscuous mode [ 630.544261][T14404] debugfs: 'hsr0' already exists in 'hsr' [ 630.544281][T14404] Cannot create hsr debugfs directory [ 630.548800][T14418] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.548901][T14418] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.549284][T14418] bridge_slave_0: entered allmulticast mode [ 630.571356][T14418] bridge_slave_0: entered promiscuous mode [ 630.576505][T14418] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.576602][T14418] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.579336][T14418] bridge_slave_1: entered allmulticast mode [ 630.589809][T14418] bridge_slave_1: entered promiscuous mode [ 630.612377][T14412] team0: Port device team_slave_0 added [ 630.648625][T14412] team0: Port device team_slave_1 added [ 630.702700][T14418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.739185][T14418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.781770][T14412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.781788][T14412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.781806][T14412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.845788][T14412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.845806][T14412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.845827][T14412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.854837][T14418] team0: Port device team_slave_0 added [ 630.914372][T14418] team0: Port device team_slave_1 added [ 631.013033][T14412] hsr_slave_0: entered promiscuous mode [ 631.013738][T14412] hsr_slave_1: entered promiscuous mode [ 631.014178][T14412] debugfs: 'hsr0' already exists in 'hsr' [ 631.014196][T14412] Cannot create hsr debugfs directory [ 631.017313][T14420] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.017410][T14420] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.017550][T14420] bridge_slave_0: entered allmulticast mode [ 631.019358][T14420] bridge_slave_0: entered promiscuous mode [ 631.025407][T14420] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.025568][T14420] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.025704][T14420] bridge_slave_1: entered allmulticast mode [ 631.027436][T14420] bridge_slave_1: entered promiscuous mode [ 631.029861][T14418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.029874][T14418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.029895][T14418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.105836][T14418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.105852][T14418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.105875][T14418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.160168][T14420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.222485][T14420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.301646][T14418] hsr_slave_0: entered promiscuous mode [ 631.302349][T14418] hsr_slave_1: entered promiscuous mode [ 631.302760][T14418] debugfs: 'hsr0' already exists in 'hsr' [ 631.302778][T14418] Cannot create hsr debugfs directory [ 631.304679][T14420] team0: Port device team_slave_0 added [ 631.333678][T14420] team0: Port device team_slave_1 added [ 631.335369][T14467] Bluetooth: hci15: command tx timeout [ 631.442301][T14420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.442320][T14420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.442340][T14420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.458085][T14420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.458100][T14420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.458118][T14420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.496705][T14467] Bluetooth: hci16: command tx timeout [ 631.563779][T14420] hsr_slave_0: entered promiscuous mode [ 631.564438][T14420] hsr_slave_1: entered promiscuous mode [ 631.564847][T14420] debugfs: 'hsr0' already exists in 'hsr' [ 631.564865][T14420] Cannot create hsr debugfs directory [ 631.577076][T14467] Bluetooth: hci6: command 0x0406 tx timeout [ 631.577134][T14467] Bluetooth: hci7: command 0x0406 tx timeout [ 631.577175][T14467] Bluetooth: hci9: command 0x0406 tx timeout [ 631.577187][T14474] Bluetooth: hci5: command 0x0406 tx timeout [ 631.577198][T14467] Bluetooth: hci8: command 0x0406 tx timeout [ 631.650680][ T4933] Bluetooth: hci17: command tx timeout [ 631.892847][ T5669] Bluetooth: hci18: command tx timeout [ 631.892881][ T5669] Bluetooth: hci19: command tx timeout [ 633.410705][ T5659] Bluetooth: hci15: command tx timeout [ 633.570615][ T5659] Bluetooth: hci16: command tx timeout [ 633.730490][ T5659] Bluetooth: hci17: command tx timeout [ 633.971016][ T5669] Bluetooth: hci19: command tx timeout [ 633.971048][ T5669] Bluetooth: hci18: command tx timeout [ 635.490538][ T5659] Bluetooth: hci15: command tx timeout [ 635.650534][ T5659] Bluetooth: hci16: command tx timeout [ 635.810676][ T5659] Bluetooth: hci17: command tx timeout [ 636.052106][ T5659] Bluetooth: hci18: command tx timeout [ 636.052122][ T5665] Bluetooth: hci19: command tx timeout [ 644.851412][ T4945] block nbd0: Possible stuck request ffff888027dc5080: control (read@0,4096B). Runtime 270 seconds [ 646.770644][ T31] INFO: task dhcpcd:5277 blocked for more than 143 seconds. [ 646.770671][ T31] Not tainted syzkaller #0 [ 646.770695][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.770733][ T31] task:dhcpcd state:D stack:25120 pid:5277 tgid:5277 ppid:1 task_flags:0x400140 flags:0x00080000 [ 646.770783][ T31] Call Trace: [ 646.770791][ T31] [ 646.770804][ T31] __schedule+0x17db/0x58f0 [ 646.771007][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 646.771039][ T31] ? schedule+0x90/0x2b0 [ 646.771061][ T31] schedule+0x164/0x2b0 [ 646.771083][ T31] schedule_preempt_disabled+0x13/0x30 [ 646.771101][ T31] __mutex_lock+0x7c1/0x1550 [ 646.771127][ T31] ? __mutex_lock+0x5d4/0x1550 [ 646.771151][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 646.771239][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 646.771269][ T31] ? __lock_acquire+0x747/0x2de0 [ 646.771296][ T31] ? radix_tree_lookup+0x240/0x290 [ 646.771348][ T31] genl_rcv_msg+0x10b/0x7a0 [ 646.771382][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.771427][ T31] netlink_rcv_skb+0x226/0x4a0 [ 646.771451][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.771480][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.771519][ T31] ? down_read+0x2be/0x330 [ 646.771546][ T31] genl_rcv+0x28/0x40 [ 646.771570][ T31] netlink_unicast+0x8ef/0xa80 [ 646.771610][ T31] netlink_sendmsg+0x813/0xb40 [ 646.771643][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.771676][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 646.771753][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.771775][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 646.771988][ T31] ____sys_sendmsg+0x54e/0x850 [ 646.772004][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.772021][ T31] ? import_iovec+0x73/0xa0 [ 646.772079][ T31] ___sys_sendmsg+0x2a5/0x360 [ 646.772093][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.772103][ T31] ? netdev_run_todo+0xfda/0x1060 [ 646.772141][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 646.772176][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 646.772189][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 646.772211][ T31] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 646.772229][ T31] do_syscall_64+0x166/0x520 [ 646.772267][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.772278][ T31] ? clear_bhb_loop+0x70/0xc0 [ 646.772292][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.772308][ T31] RIP: 0033:0x7f4e87e86407 [ 646.772325][ T31] RSP: 002b:00007fff10013710 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 646.772343][ T31] RAX: ffffffffffffffda RBX: 00007f4e87dfc780 RCX: 00007f4e87e86407 [ 646.772351][ T31] RDX: 0000000000000000 RSI: 00007fff10013790 RDI: 000000000000000e [ 646.772357][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 646.772363][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005644810fae10 [ 646.772370][ T31] R13: 000000000000000e R14: 00007fff1001bcf0 R15: 00005644a7598800 [ 646.772387][ T31] [ 646.772445][ T31] INFO: task syz.0.2120:14153 blocked for more than 143 seconds. [ 646.772454][ T31] Not tainted syzkaller #0 [ 646.772460][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.772464][ T31] task:syz.0.2120 state:D stack:26472 pid:14153 tgid:14152 ppid:5652 task_flags:0x480140 flags:0x00080002 [ 646.772491][ T31] Call Trace: [ 646.772495][ T31] [ 646.772501][ T31] __schedule+0x17db/0x58f0 [ 646.772513][ T31] ? __lock_acquire+0x747/0x2de0 [ 646.772538][ T31] ? __pfx___schedule+0x10/0x10 [ 646.772547][ T31] ? lock_acquire+0x115/0x350 [ 646.772563][ T31] ? schedule+0x90/0x2b0 [ 646.772575][ T31] schedule+0x164/0x2b0 [ 646.772587][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 646.772625][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 646.772636][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 646.772659][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 646.772713][ T31] nbd_set_size+0x4c5/0x7d0 [ 646.772777][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 646.772802][ T31] ? nla_memcpy+0x5b/0xc0 [ 646.772844][ T31] nbd_genl_reconfigure+0x7e1/0x1040 [ 646.772865][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 646.772879][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 646.772893][ T31] ? __nla_parse+0x40/0x60 [ 646.772906][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 646.772927][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 646.772967][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 646.772988][ T31] ? __lock_acquire+0x747/0x2de0 [ 646.773004][ T31] genl_rcv_msg+0x614/0x7a0 [ 646.773022][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.773036][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 646.773057][ T31] netlink_rcv_skb+0x226/0x4a0 [ 646.773069][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.773084][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.773104][ T31] ? down_read+0x2be/0x330 [ 646.773119][ T31] genl_rcv+0x28/0x40 [ 646.773132][ T31] netlink_unicast+0x8ef/0xa80 [ 646.773152][ T31] netlink_sendmsg+0x813/0xb40 [ 646.773169][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.773186][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 646.773201][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.773213][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 646.773229][ T31] ____sys_sendmsg+0x54e/0x850 [ 646.773243][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.773259][ T31] ? import_iovec+0x73/0xa0 [ 646.773276][ T31] ___sys_sendmsg+0x2a5/0x360 [ 646.773286][ T31] ? __lock_acquire+0x747/0x2de0 [ 646.773300][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.773313][ T31] ? futex_wait+0x2a2/0x390 [ 646.773339][ T31] ? __fget_files+0x2a/0x420 [ 646.773348][ T31] ? __fget_files+0x3a2/0x420 [ 646.773364][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 646.773376][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 646.773399][ T31] do_syscall_64+0x166/0x520 [ 646.773410][ T31] ? trace_irq_disable+0x3b/0x140 [ 646.773422][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.773432][ T31] ? clear_bhb_loop+0x70/0xc0 [ 646.773444][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.773454][ T31] RIP: 0033:0x7f8f0d19e559 [ 646.773464][ T31] RSP: 002b:00007f8f0e016028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.773474][ T31] RAX: ffffffffffffffda RBX: 00007f8f0d425fa0 RCX: 00007f8f0d19e559 [ 646.773482][ T31] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000000000000007 [ 646.773488][ T31] RBP: 00007f8f0d235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 646.773494][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.773501][ T31] R13: 00007f8f0d426038 R14: 00007f8f0d425fa0 R15: 00007ffedc40d7f8 [ 646.773517][ T31] [ 646.773523][ T31] INFO: task syz.3.2119:14160 blocked for more than 143 seconds. [ 646.773531][ T31] Not tainted syzkaller #0 [ 646.773536][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.773540][ T31] task:syz.3.2119 state:D stack:28552 pid:14160 tgid:14157 ppid:5657 task_flags:0x400140 flags:0x00080002 [ 646.773566][ T31] Call Trace: [ 646.773569][ T31] [ 646.773576][ T31] __schedule+0x17db/0x58f0 [ 646.773602][ T31] ? __pfx___schedule+0x10/0x10 [ 646.773618][ T31] ? schedule+0x90/0x2b0 [ 646.773630][ T31] schedule+0x164/0x2b0 [ 646.773642][ T31] schedule_preempt_disabled+0x13/0x30 [ 646.773652][ T31] __mutex_lock+0x7c1/0x1550 [ 646.773667][ T31] ? __mutex_lock+0x5d4/0x1550 [ 646.773680][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 646.773695][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 646.773716][ T31] ? __lock_acquire+0x747/0x2de0 [ 646.773730][ T31] ? radix_tree_lookup+0x240/0x290 [ 646.773742][ T31] genl_rcv_msg+0x10b/0x7a0 [ 646.773759][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.773782][ T31] netlink_rcv_skb+0x226/0x4a0 [ 646.773795][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.773811][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.773831][ T31] ? down_read+0x2be/0x330 [ 646.773845][ T31] genl_rcv+0x28/0x40 [ 646.773858][ T31] netlink_unicast+0x8ef/0xa80 [ 646.773879][ T31] netlink_sendmsg+0x813/0xb40 [ 646.773896][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.773913][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 646.773927][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.773955][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 646.773970][ T31] __sys_sendto+0x408/0x5a0 [ 646.773984][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 646.774038][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 646.774051][ T31] __x64_sys_sendto+0xde/0x100 [ 646.774063][ T31] do_syscall_64+0x166/0x520 [ 646.774074][ T31] ? trace_irq_disable+0x3b/0x140 [ 646.774085][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.774095][ T31] ? clear_bhb_loop+0x70/0xc0 [ 646.774108][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.774118][ T31] RIP: 0033:0x7f219c15ed8e [ 646.774126][ T31] RSP: 002b:00007f219d09ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 646.774136][ T31] RAX: ffffffffffffffda RBX: 00007f219d0a06c0 RCX: 00007f219c15ed8e [ 646.774144][ T31] RDX: 0000000000000024 RSI: 00007f219d09f000 RDI: 0000000000000007 [ 646.774150][ T31] RBP: 0000000000000000 R08: 00007f219d09ef04 R09: 000000000000000c [ 646.774156][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 646.774162][ T31] R13: 00007f219d09ef58 R14: 00007f219d09f000 R15: 0000000000000000 [ 646.774178][ T31] [ 646.774183][ T31] INFO: task syz.3.2119:14178 blocked for more than 143 seconds. [ 646.774190][ T31] Not tainted syzkaller #0 [ 646.774195][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.774200][ T31] task:syz.3.2119 state:D stack:28168 pid:14178 tgid:14157 ppid:5657 task_flags:0x400140 flags:0x00080002 [ 646.774225][ T31] Call Trace: [ 646.774228][ T31] [ 646.774235][ T31] __schedule+0x17db/0x58f0 [ 646.774260][ T31] ? __pfx___schedule+0x10/0x10 [ 646.774276][ T31] ? schedule+0x90/0x2b0 [ 646.774288][ T31] schedule+0x164/0x2b0 [ 646.774300][ T31] schedule_preempt_disabled+0x13/0x30 [ 646.774311][ T31] __mutex_lock+0x7c1/0x1550 [ 646.774325][ T31] ? __mutex_lock+0x5d4/0x1550 [ 646.774339][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 646.774354][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 646.774369][ T31] ? __lock_acquire+0x747/0x2de0 [ 646.774382][ T31] ? radix_tree_lookup+0x240/0x290 [ 646.774394][ T31] genl_rcv_msg+0x10b/0x7a0 [ 646.774411][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.774434][ T31] netlink_rcv_skb+0x226/0x4a0 [ 646.774447][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.774462][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.774482][ T31] ? down_read+0x2be/0x330 [ 646.774496][ T31] genl_rcv+0x28/0x40 [ 646.774509][ T31] netlink_unicast+0x8ef/0xa80 [ 646.774530][ T31] netlink_sendmsg+0x813/0xb40 [ 646.774547][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.774564][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 646.774578][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.774590][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 646.774604][ T31] __sys_sendto+0x408/0x5a0 [ 646.774617][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 646.774647][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 646.774660][ T31] __x64_sys_sendto+0xde/0x100 [ 646.774672][ T31] do_syscall_64+0x166/0x520 [ 646.774683][ T31] ? trace_irq_disable+0x3b/0x140 [ 646.774693][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.774709][ T31] ? clear_bhb_loop+0x70/0xc0 [ 646.774721][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.774731][ T31] RIP: 0033:0x7f219c15ed8e [ 646.774739][ T31] RSP: 002b:00007f219d05ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 646.774749][ T31] RAX: ffffffffffffffda RBX: 00007f219d05e6c0 RCX: 00007f219c15ed8e [ 646.774756][ T31] RDX: 0000000000000024 RSI: 00007f219d05d000 RDI: 0000000000000008 [ 646.774762][ T31] RBP: 0000000000000000 R08: 00007f219d05cf04 R09: 000000000000000c [ 646.774768][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 646.774774][ T31] R13: 00007f219d05cf58 R14: 00007f219d05d000 R15: 0000000000000000 [ 646.774790][ T31] [ 646.774795][ T31] INFO: task syz.2.2121:14159 blocked for more than 143 seconds. [ 646.774802][ T31] Not tainted syzkaller #0 [ 646.774807][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.774811][ T31] task:syz.2.2121 state:D stack:26000 pid:14159 tgid:14158 ppid:5651 task_flags:0x400140 flags:0x00080002 [ 646.774836][ T31] Call Trace: [ 646.774839][ T31] [ 646.774845][ T31] __schedule+0x17db/0x58f0 [ 646.774871][ T31] ? __pfx___schedule+0x10/0x10 [ 646.774887][ T31] ? schedule+0x90/0x2b0 [ 646.774899][ T31] schedule+0x164/0x2b0 [ 646.774910][ T31] schedule_preempt_disabled+0x13/0x30 [ 646.774921][ T31] __mutex_lock+0x7c1/0x1550 [ 646.774956][ T31] ? __mutex_lock+0x5d4/0x1550 [ 646.774970][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 646.774985][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 646.774996][ T31] ? __dev_queue_xmit+0x29b/0x3920 [ 646.775041][ T31] ? radix_tree_lookup+0x240/0x290 [ 646.775053][ T31] genl_rcv_msg+0x10b/0x7a0 [ 646.775070][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.775093][ T31] netlink_rcv_skb+0x226/0x4a0 [ 646.775106][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.775121][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.775141][ T31] ? down_read+0x2be/0x330 [ 646.775155][ T31] genl_rcv+0x28/0x40 [ 646.775168][ T31] netlink_unicast+0x8ef/0xa80 [ 646.775189][ T31] netlink_sendmsg+0x813/0xb40 [ 646.775206][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.775223][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 646.775237][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.775248][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 646.775263][ T31] __sys_sendto+0x408/0x5a0 [ 646.775276][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 646.775306][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 646.775319][ T31] __x64_sys_sendto+0xde/0x100 [ 646.775331][ T31] do_syscall_64+0x166/0x520 [ 646.775342][ T31] ? trace_irq_disable+0x3b/0x140 [ 646.775352][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.775362][ T31] ? clear_bhb_loop+0x70/0xc0 [ 646.775374][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.775384][ T31] RIP: 0033:0x7fdc13d5ed8e [ 646.775393][ T31] RSP: 002b:00007fdc14cc0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 646.775403][ T31] RAX: ffffffffffffffda RBX: 00007fdc14cc26c0 RCX: 00007fdc13d5ed8e [ 646.775410][ T31] RDX: 0000000000000024 RSI: 00007fdc14cc1000 RDI: 0000000000000007 [ 646.775417][ T31] RBP: 0000000000000000 R08: 00007fdc14cc0f04 R09: 000000000000000c [ 646.775423][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 646.775429][ T31] R13: 00007fdc14cc0f58 R14: 00007fdc14cc1000 R15: 0000000000000000 [ 646.775445][ T31] [ 646.775450][ T31] INFO: task syz.2.2121:14181 blocked for more than 143 seconds. [ 646.775457][ T31] Not tainted syzkaller #0 [ 646.775462][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.775466][ T31] task:syz.2.2121 state:D stack:27808 pid:14181 tgid:14158 ppid:5651 task_flags:0x400040 flags:0x00080002 [ 646.775490][ T31] Call Trace: [ 646.775494][ T31] [ 646.775500][ T31] __schedule+0x17db/0x58f0 [ 646.775527][ T31] ? __pfx___schedule+0x10/0x10 [ 646.775542][ T31] ? schedule+0x90/0x2b0 [ 646.775554][ T31] schedule+0x164/0x2b0 [ 646.775566][ T31] schedule_preempt_disabled+0x13/0x30 [ 646.775576][ T31] __mutex_lock+0x7c1/0x1550 [ 646.775590][ T31] ? __mutex_lock+0x5d4/0x1550 [ 646.775604][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 646.775619][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 646.775629][ T31] ? __dev_queue_xmit+0x29b/0x3920 [ 646.775648][ T31] ? radix_tree_lookup+0x240/0x290 [ 646.775660][ T31] genl_rcv_msg+0x10b/0x7a0 [ 646.775677][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.775700][ T31] netlink_rcv_skb+0x226/0x4a0 [ 646.775718][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.775733][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.775753][ T31] ? down_read+0x2be/0x330 [ 646.775768][ T31] genl_rcv+0x28/0x40 [ 646.775781][ T31] netlink_unicast+0x8ef/0xa80 [ 646.775801][ T31] netlink_sendmsg+0x813/0xb40 [ 646.775818][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.775835][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 646.775850][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.775861][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 646.775876][ T31] __sys_sendto+0x408/0x5a0 [ 646.775888][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 646.775901][ T31] ? errseq_sample+0x40/0x70 [ 646.775965][ T31] ? fd_install+0x94/0x3d0 [ 646.775979][ T31] ? fd_install+0x309/0x3d0 [ 646.775997][ T31] __x64_sys_sendto+0xde/0x100 [ 646.776009][ T31] do_syscall_64+0x166/0x520 [ 646.776020][ T31] ? trace_irq_disable+0x3b/0x140 [ 646.776030][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.776040][ T31] ? clear_bhb_loop+0x70/0xc0 [ 646.776053][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.776062][ T31] RIP: 0033:0x7fdc13d5ed8e [ 646.776071][ T31] RSP: 002b:00007fdc14c3ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 646.776081][ T31] RAX: ffffffffffffffda RBX: 00007fdc14c3e6c0 RCX: 00007fdc13d5ed8e [ 646.776088][ T31] RDX: 0000000000000024 RSI: 00007fdc14c3d000 RDI: 000000000000000b [ 646.776094][ T31] RBP: 0000000000000000 R08: 00007fdc14c3cf04 R09: 000000000000000c [ 646.776101][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 646.776106][ T31] R13: 00007fdc14c3cf58 R14: 00007fdc14c3d000 R15: 0000000000000000 [ 646.776123][ T31] [ 646.776127][ T31] INFO: task syz.1.2123:14179 blocked for more than 143 seconds. [ 646.776134][ T31] Not tainted syzkaller #0 [ 646.776139][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.776144][ T31] task:syz.1.2123 state:D stack:27808 pid:14179 tgid:14166 ppid:5670 task_flags:0x400140 flags:0x00080002 [ 646.776169][ T31] Call Trace: [ 646.776173][ T31] [ 646.776179][ T31] __schedule+0x17db/0x58f0 [ 646.776205][ T31] ? __pfx___schedule+0x10/0x10 [ 646.776221][ T31] ? schedule+0x90/0x2b0 [ 646.776233][ T31] schedule+0x164/0x2b0 [ 646.776245][ T31] schedule_preempt_disabled+0x13/0x30 [ 646.776255][ T31] __mutex_lock+0x7c1/0x1550 [ 646.776269][ T31] ? __mutex_lock+0x5d4/0x1550 [ 646.776283][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 646.776298][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 646.776309][ T31] ? __dev_queue_xmit+0x29b/0x3920 [ 646.776327][ T31] ? radix_tree_lookup+0x240/0x290 [ 646.776339][ T31] genl_rcv_msg+0x10b/0x7a0 [ 646.776357][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.776380][ T31] netlink_rcv_skb+0x226/0x4a0 [ 646.776392][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.776407][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.776428][ T31] ? down_read+0x2be/0x330 [ 646.776442][ T31] genl_rcv+0x28/0x40 [ 646.776455][ T31] netlink_unicast+0x8ef/0xa80 [ 646.776475][ T31] netlink_sendmsg+0x813/0xb40 [ 646.776493][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.776510][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 646.776524][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.776536][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 646.776550][ T31] __sys_sendto+0x408/0x5a0 [ 646.776563][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 646.776593][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 646.776606][ T31] __x64_sys_sendto+0xde/0x100 [ 646.776618][ T31] do_syscall_64+0x166/0x520 [ 646.776629][ T31] ? trace_irq_disable+0x3b/0x140 [ 646.776639][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.776649][ T31] ? clear_bhb_loop+0x70/0xc0 [ 646.776661][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.776671][ T31] RIP: 0033:0x7f9fb255ed8e [ 646.776679][ T31] RSP: 002b:00007f9fb34a3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 646.776689][ T31] RAX: ffffffffffffffda RBX: 00007f9fb34a56c0 RCX: 00007f9fb255ed8e [ 646.776696][ T31] RDX: 0000000000000020 RSI: 00007f9fb34a4000 RDI: 000000000000000a [ 646.776707][ T31] RBP: 0000000000000000 R08: 00007f9fb34a3f04 R09: 000000000000000c [ 646.776713][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 646.776719][ T31] R13: 00007f9fb34a3f58 R14: 00007f9fb34a4000 R15: 0000000000000000 [ 646.776735][ T31] [ 646.776739][ T31] INFO: task syz.4.2126:14208 blocked for more than 143 seconds. [ 646.776746][ T31] Not tainted syzkaller #0 [ 646.776751][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.776755][ T31] task:syz.4.2126 state:D stack:27808 pid:14208 tgid:14207 ppid:5654 task_flags:0x400040 flags:0x00080002 [ 646.776778][ T31] Call Trace: [ 646.776781][ T31] [ 646.776788][ T31] __schedule+0x17db/0x58f0 [ 646.776813][ T31] ? __pfx___schedule+0x10/0x10 [ 646.776829][ T31] ? schedule+0x90/0x2b0 [ 646.776841][ T31] schedule+0x164/0x2b0 [ 646.776853][ T31] schedule_preempt_disabled+0x13/0x30 [ 646.776863][ T31] __mutex_lock+0x7c1/0x1550 [ 646.776877][ T31] ? __mutex_lock+0x5d4/0x1550 [ 646.776891][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 646.776906][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 646.776916][ T31] ? __dev_queue_xmit+0x29b/0x3920 [ 646.776935][ T31] ? radix_tree_lookup+0x240/0x290 [ 646.776964][ T31] genl_rcv_msg+0x10b/0x7a0 [ 646.776982][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.777005][ T31] netlink_rcv_skb+0x226/0x4a0 [ 646.777017][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.777033][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.777052][ T31] ? down_read+0x2be/0x330 [ 646.777067][ T31] genl_rcv+0x28/0x40 [ 646.777080][ T31] netlink_unicast+0x8ef/0xa80 [ 646.777100][ T31] netlink_sendmsg+0x813/0xb40 [ 646.777117][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.777134][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 646.777148][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.777160][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 646.777174][ T31] __sys_sendto+0x408/0x5a0 [ 646.777187][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 646.777218][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 646.777231][ T31] __x64_sys_sendto+0xde/0x100 [ 646.777243][ T31] do_syscall_64+0x166/0x520 [ 646.777254][ T31] ? trace_irq_disable+0x3b/0x140 [ 646.777264][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.777275][ T31] ? clear_bhb_loop+0x70/0xc0 [ 646.777287][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.777297][ T31] RIP: 0033:0x7ff469b5ed8e [ 646.777305][ T31] RSP: 002b:00007ff46a9bde88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 646.777315][ T31] RAX: ffffffffffffffda RBX: 00007ff46a9bf6c0 RCX: 00007ff469b5ed8e [ 646.777322][ T31] RDX: 0000000000000020 RSI: 00007ff46a9be000 RDI: 0000000000000004 [ 646.777328][ T31] RBP: 0000000000000000 R08: 00007ff46a9bdf04 R09: 000000000000000c [ 646.777334][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 646.777340][ T31] R13: 00007ff46a9bdf58 R14: 00007ff46a9be000 R15: 0000000000000000 [ 646.777356][ T31] [ 646.777360][ T31] INFO: task syz.4.2126:14212 blocked for more than 143 seconds. [ 646.777367][ T31] Not tainted syzkaller #0 [ 646.777372][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.777376][ T31] task:syz.4.2126 state:D stack:27808 pid:14212 tgid:14207 ppid:5654 task_flags:0x400040 flags:0x00080002 [ 646.777400][ T31] Call Trace: [ 646.777403][ T31] [ 646.777409][ T31] __schedule+0x17db/0x58f0 [ 646.777435][ T31] ? __pfx___schedule+0x10/0x10 [ 646.777451][ T31] ? schedule+0x90/0x2b0 [ 646.777463][ T31] schedule+0x164/0x2b0 [ 646.777474][ T31] schedule_preempt_disabled+0x13/0x30 [ 646.777485][ T31] __mutex_lock+0x7c1/0x1550 [ 646.777499][ T31] ? __mutex_lock+0x5d4/0x1550 [ 646.777512][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 646.777527][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 646.777537][ T31] ? __dev_queue_xmit+0x29b/0x3920 [ 646.777556][ T31] ? radix_tree_lookup+0x240/0x290 [ 646.777568][ T31] genl_rcv_msg+0x10b/0x7a0 [ 646.777585][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.777608][ T31] netlink_rcv_skb+0x226/0x4a0 [ 646.777620][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 646.777635][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.777655][ T31] ? down_read+0x2be/0x330 [ 646.777670][ T31] genl_rcv+0x28/0x40 [ 646.777683][ T31] netlink_unicast+0x8ef/0xa80 [ 646.777707][ T31] netlink_sendmsg+0x813/0xb40 [ 646.777724][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.777741][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 646.777756][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.777767][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 646.777781][ T31] __sys_sendto+0x408/0x5a0 [ 646.777794][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 646.777807][ T31] ? errseq_sample+0x40/0x70 [ 646.777830][ T31] ? fd_install+0x94/0x3d0 [ 646.777842][ T31] ? fd_install+0x309/0x3d0 [ 646.777860][ T31] __x64_sys_sendto+0xde/0x100 [ 646.777872][ T31] do_syscall_64+0x166/0x520 [ 646.777882][ T31] ? trace_irq_disable+0x3b/0x140 [ 646.777893][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.777903][ T31] ? clear_bhb_loop+0x70/0xc0 [ 646.777915][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.777925][ T31] RIP: 0033:0x7ff469b5ed8e [ 646.777933][ T31] RSP: 002b:00007ff467df4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 646.777959][ T31] RAX: ffffffffffffffda RBX: 00007ff467df66c0 RCX: 00007ff469b5ed8e [ 646.777967][ T31] RDX: 0000000000000020 RSI: 00007ff467df5000 RDI: 000000000000000a [ 646.777973][ T31] RBP: 0000000000000000 R08: 00007ff467df4f04 R09: 000000000000000c [ 646.777979][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 646.777985][ T31] R13: 00007ff467df4f58 R14: 00007ff467df5000 R15: 0000000000000000 [ 646.778002][ T31] [ 646.778044][ T31] [ 646.778044][ T31] Showing all locks held in the system: [ 646.778054][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 646.778062][ T31] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 646.778113][ T31] locks held by dhcpcd/5277: 2, on CPU#0: [ 646.778120][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.778146][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.778174][ T31] locks held by getty/5371: 2, on CPU#1: [ 646.778181][ T31] #0: ffff888036fb20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 646.778252][ T31] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 646.778293][ T31] locks held by udevd/7854: 1, on CPU#0: [ 646.778299][ T31] #0: ffff888027cbc350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 646.778369][ T31] locks held by syz.0.2120/14153: 6, on CPU#0: [ 646.778377][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.778403][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.778429][ T31] #2: ffff888027cf9a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 646.778456][ T31] #3: ffff888027d1c7c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 646.778482][ T31] #4: ffff888027d1c190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 646.778512][ T31] #5: ffff888027d1c1c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 646.778541][ T31] locks held by syz.3.2119/14160: 2, on CPU#1: [ 646.778548][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.778574][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.778600][ T31] locks held by syz.3.2119/14178: 2, on CPU#1: [ 646.778607][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.778633][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.778659][ T31] locks held by syz.2.2121/14159: 2, on CPU#1: [ 646.778666][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.778692][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.778724][ T31] locks held by syz.2.2121/14181: 2, on CPU#0: [ 646.778732][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.778758][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.778784][ T31] locks held by syz.1.2123/14179: 2, on CPU#0: [ 646.778791][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.778818][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.778852][ T31] locks held by syz.4.2126/14208: 2, on CPU#1: [ 646.778859][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.778884][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.778911][ T31] locks held by syz.4.2126/14212: 2, on CPU#0: [ 646.778918][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.778964][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.778992][ T31] locks held by syz-executor/14224: 2, on CPU#0: [ 646.778999][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.779025][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.779051][ T31] locks held by syz-executor/14225: 2, on CPU#0: [ 646.779058][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.779089][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.779117][ T31] locks held by syz-executor/14232: 2, on CPU#0: [ 646.779124][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.779149][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.779176][ T31] locks held by syz-executor/14237: 2, on CPU#1: [ 646.779183][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.779208][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.779235][ T31] locks held by syz-executor/14243: 2, on CPU#0: [ 646.779242][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.779267][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.779296][ T31] locks held by syz-executor/14314: 2, on CPU#1: [ 646.779303][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.779329][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.779355][ T31] locks held by syz-executor/14318: 2, on CPU#1: [ 646.779362][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.779388][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.779415][ T31] locks held by syz-executor/14320: 2, on CPU#1: [ 646.779421][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.779447][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.779474][ T31] locks held by syz-executor/14325: 2, on CPU#0: [ 646.779481][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.779506][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.779533][ T31] locks held by syz-executor/14331: 2, on CPU#0: [ 646.779540][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.779565][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.779595][ T31] locks held by syz-executor/14404: 2, on CPU#0: [ 646.779601][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.779627][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.779654][ T31] locks held by syz-executor/14408: 2, on CPU#0: [ 646.779660][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.779686][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.779718][ T31] locks held by syz-executor/14412: 2, on CPU#1: [ 646.779725][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.779750][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.779777][ T31] locks held by syz-executor/14418: 2, on CPU#0: [ 646.779784][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.779810][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.779836][ T31] locks held by syz-executor/14420: 2, on CPU#1: [ 646.779843][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 646.779868][ T31] #1: ffffffff912c66c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 646.779898][ T31] [ 646.779901][ T31] ============================================= [ 646.779901][ T31] [ 646.779913][ T31] NMI backtrace for cpu 0 [ 646.779922][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 646.779933][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.779938][ T31] Call Trace: [ 646.779946][ T31] [ 646.779950][ T31] dump_stack_lvl+0xe8/0x150 [ 646.779966][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 646.780011][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 646.780028][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 646.780044][ T31] sys_info+0x135/0x170 [ 646.780057][ T31] watchdog+0xfd7/0x1030 [ 646.780073][ T31] ? watchdog+0x1c7/0x1030 [ 646.780086][ T31] kthread+0x38b/0x480 [ 646.780098][ T31] ? __pfx_watchdog+0x10/0x10 [ 646.780107][ T31] ? __pfx_kthread+0x10/0x10 [ 646.780118][ T31] ret_from_fork+0x514/0xb70 [ 646.780130][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 646.780140][ T31] ? __switch_to+0xc89/0x1420 [ 646.780155][ T31] ? __pfx_kthread+0x10/0x10 [ 646.780165][ T31] ret_from_fork_asm+0x1a/0x30 [ 646.780182][ T31] [ 646.780203][ T31] Sending NMI from CPU 0 to CPUs 1: [ 646.780253][ C1] NMI backtrace for cpu 1 [ 646.780270][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 646.780286][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.780296][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 646.780317][ C1] Code: fb 8a 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 b5 20 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 646.780331][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000242 [ 646.780346][ C1] RAX: 00000000001996cd RBX: ffffffff819bed20 RCX: 8000000000000001 [ 646.780358][ C1] RDX: 0000000000000001 RSI: ffffffff8e469cbf RDI: ffffffff8c6ddb80 [ 646.780368][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8533a1b R09: 1ffff110170a6743 [ 646.780381][ C1] R10: dffffc0000000000 R11: ffffed10170a6744 R12: 0000000000000000 [ 646.780394][ C1] R13: 1ffff11003edabb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 646.780407][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 646.780423][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 646.780436][ C1] CR2: 00007fff959f9ff4 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 646.780453][ C1] Call Trace: [ 646.780459][ C1] [ 646.780466][ C1] default_idle+0x9/0x20 [ 646.780491][ C1] default_idle_call+0x72/0xb0 [ 646.780517][ C1] do_idle+0x2e0/0x540 [ 646.780538][ C1] ? __pfx_do_idle+0x10/0x10 [ 646.780562][ C1] cpu_startup_entry+0x43/0x60 [ 646.780582][ C1] start_secondary+0x101/0x110 [ 646.780609][ C1] common_startup_64+0x13e/0x157 [ 646.780642][ C1] [ 646.830663][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 650.171856][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 650.180954][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 650.190994][ T31] Call Trace: [ 650.194274][ T31] [ 650.197191][ T31] vpanic+0x56d/0xa60 [ 650.201169][ T31] ? __pfx___schedule+0x10/0x10 [ 650.206006][ T31] ? __pfx_vpanic+0x10/0x10 [ 650.210539][ T31] panic+0xc5/0xd0 [ 650.214253][ T31] ? __pfx_panic+0x10/0x10 [ 650.218657][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 650.224103][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 650.229463][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 650.235611][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 650.241760][ T31] watchdog+0x1030/0x1030 [ 650.246085][ T31] ? watchdog+0x1c7/0x1030 [ 650.250495][ T31] kthread+0x38b/0x480 [ 650.254562][ T31] ? __pfx_watchdog+0x10/0x10 [ 650.259219][ T31] ? __pfx_kthread+0x10/0x10 [ 650.263795][ T31] ret_from_fork+0x514/0xb70 [ 650.268378][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 650.273479][ T31] ? __switch_to+0xc89/0x1420 [ 650.278153][ T31] ? __pfx_kthread+0x10/0x10 [ 650.282727][ T31] ret_from_fork_asm+0x1a/0x30 [ 650.287489][ T31] [ 650.290769][ T31] Kernel Offset: disabled [ 650.295086][ T31] Rebooting in 86400 seconds..