last executing test programs: 21.061351191s ago: executing program 4 (id=900): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000005b00)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000005b40)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000005c80)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000005d00)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x30}, 0x1, 0x900}, 0x2000000) 20.488104537s ago: executing program 3 (id=912): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000004000), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000004040), 0x10) accept$phonet_pipe(r1, &(0x7f0000004080), &(0x7f00000040c0)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000003d40)={@empty}, 0x14) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000003d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)=ANY=[@ANYBLOB="4784ab7a", @ANYRES16=r4, @ANYBLOB="00022abd7000fbdbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4051}, 0x8800) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x30) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000003d80)={'syzkaller1\x00', 0x302}) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000004100)={@loopback={0x600}, 0x8000000, 0x1, 0xff, 0x0, 0x4}, 0x20) sendto$inet6(r6, &(0x7f00000000c0)="2ae0e710", 0x4, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000340)=0x6, 0x4) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003f80)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000003fc0)) recvmmsg(r6, &(0x7f0000003ac0)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/26, 0x1a}], 0x1, &(0x7f0000000380)=""/170, 0xaa}, 0xda}, {{&(0x7f0000000440)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f00000005c0)=""/106, 0x6a}], 0x2, &(0x7f0000000680)=""/40, 0x28}, 0x5}, {{&(0x7f00000006c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/157, 0x9d}], 0x1, &(0x7f0000000840)=""/154, 0x9a}, 0xfffffffb}, {{&(0x7f0000000900)=@caif, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000980)=""/52, 0x34}, {&(0x7f00000009c0)=""/227, 0xe3}, {&(0x7f0000000ac0)=""/12, 0xc}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/226, 0xe2}], 0x5, &(0x7f0000001c80)=""/168, 0xa8}, 0x127b}, {{0x0, 0x0, &(0x7f0000001ec0)}, 0x7ff}, {{&(0x7f0000001f00)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002380)=[{&(0x7f0000001f80)=""/94, 0x5e}, {&(0x7f0000002000)=""/145, 0x91}, {&(0x7f00000020c0)=""/193, 0xc1}, {&(0x7f00000021c0)=""/151, 0x97}, {&(0x7f0000002280)=""/213, 0xd5}], 0x5, &(0x7f0000002400)=""/170, 0xaa}, 0x5}, {{&(0x7f00000024c0)=@isdn, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003c80)=""/105, 0x69}, {&(0x7f00000025c0)=""/170, 0xaa}, {&(0x7f0000002680)=""/234, 0xea}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/180, 0xb4}, {&(0x7f0000003840)=""/28, 0x1c}, {&(0x7f0000003880)=""/18, 0x12}, {&(0x7f00000038c0)=""/66, 0x42}, {&(0x7f0000003940)=""/175, 0xaf}], 0x9}, 0x8001}], 0x7, 0x2000, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003dc0)={0x6, 0x3, &(0x7f0000003e80)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000003ec0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003f00)={r9, 0x5, 0xffffffffffffff3d, 0x0, &(0x7f0000003f80), 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) socket$igmp6(0xa, 0x3, 0x2) 19.870379692s ago: executing program 4 (id=918): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000040000c0000000000010060851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000300)=""/222}, 0x78) 19.853857788s ago: executing program 3 (id=919): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000b40)={0x1, 'netdevsim0\x00', {}, 0x88b}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='io.stat\x00', 0x26e1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r2, 0x2000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'syz_tun\x00', &(0x7f0000000b80)=@ethtool_coalesce={0x33, 0x0, 0x0, 0x7f01b2d5, 0x8, 0x2, 0xd2d2, 0xfffffffe, 0x6, 0x0, 0x91, 0xdfffffff, 0xb83, 0x8000, 0x0, 0x8000, 0x0, 0xfffffffe, 0x0, 0x9a, 0x8, 0xc}}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'syz_tun\x00', &(0x7f0000000b80)=@ethtool_coalesce={0x33, 0x0, 0x0, 0x7f01b2d5, 0x8, 0x2, 0xd2d2, 0xfffffffe, 0x6, 0x0, 0x91, 0xdfffffff, 0xb83, 0x8000, 0x0, 0x8000, 0x0, 0xfffffffe, 0x0, 0x9a, 0x8, 0xc}}) close(r1) (async) close(r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000009c0), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000000020000000000020000000000"], 0x0, 0x1a}, 0x28) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000a80)=ANY=[@ANYRES16=r4], 0xa) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000800)=[@in6={0xa, 0x4e23, 0xffffffff, @local, 0x1}]}, &(0x7f0000000840)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000800)=[@in6={0xa, 0x4e23, 0xffffffff, @local, 0x1}]}, &(0x7f0000000840)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e23, 0x0, @local, 0x1}}, 0x8, 0x2003, 0x7, 0x38, 0xa}, &(0x7f0000000940)=0x98) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e23, 0x0, @local, 0x1}}, 0x8, 0x2003, 0x7, 0x38, 0xa}, &(0x7f0000000940)=0x98) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000300)={@multicast1, 0x0, 0x0, 0xb0, 0x0, [{@empty}, {@dev}, {@local}, {@loopback}, {@loopback}, {@dev}, {@local}, {@multicast1}, {@initdev}, {@broadcast}, {@dev}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000300)={@multicast1, 0x0, 0x0, 0xb0, 0x0, [{@empty}, {@dev}, {@local}, {@loopback}, {@loopback}, {@dev}, {@local}, {@multicast1}, {@initdev}, {@broadcast}, {@dev}]}}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000240)=0xfffffe73) getsockopt$inet_buf(r5, 0x0, 0x2b, &(0x7f0000000080)=""/74, &(0x7f0000000100)=0x4a) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018400000f9ffffff0000000000000000851000000000000085100000060000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x81, 0x75, &(0x7f0000000540)=""/117, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000600)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f0000000640)=[{0x9, 0x1, 0x6, 0x1}, {0x2, 0x3, 0x7}, {0x4, 0x1, 0x3, 0x9}, {0x4, 0x1, 0xb, 0x7}, {0x5, 0x2, 0x5, 0x46c8a728951eb019}, {0x5, 0x4, 0x6}, {0x0, 0x3, 0xf}, {0x5, 0x803, 0x4, 0x7}, {0x0, 0x5, 0xf, 0xb}]}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018400000f9ffffff0000000000000000851000000000000085100000060000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x81, 0x75, &(0x7f0000000540)=""/117, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000600)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f0000000640)=[{0x9, 0x1, 0x6, 0x1}, {0x2, 0x3, 0x7}, {0x4, 0x1, 0x3, 0x9}, {0x4, 0x1, 0xb, 0x7}, {0x5, 0x2, 0x5, 0x46c8a728951eb019}, {0x5, 0x4, 0x6}, {0x0, 0x3, 0xf}, {0x5, 0x803, 0x4, 0x7}, {0x0, 0x5, 0xf, 0xb}]}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000007c0)=r9, 0x4) unshare(0x8000400) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x640400d9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="8c981b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000001100)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @private=0xa010100}}}}) 19.791033058s ago: executing program 2 (id=920): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x3a2, &(0x7f0000000940)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x36c, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e340600"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 19.705099045s ago: executing program 2 (id=922): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0xfdff, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) 19.68321898s ago: executing program 4 (id=923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) pselect6(0x40, &(0x7f0000001380)={0x3ffffffc, 0x80000000, 0x100000001, 0xb, 0x4, 0x2, 0x9, 0xebc}, &(0x7f00000013c0)={0x4, 0xfffffffffffff931, 0x3ff, 0x8, 0x7f, 0xfc9, 0x9, 0x6}, &(0x7f0000001440)={0x4, 0x6, 0xa92, 0xa, 0xffffffffffff0000, 0x7f, 0x5, 0x1}, &(0x7f0000001480), &(0x7f0000001500)={&(0x7f00000014c0)={[0x559]}, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'vlan1\x00', {}, 0x31fb}) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304, 0x36}, "00257059cb008000", "8b3de2aabceef22f419e59f30000000004000000000200", "07350080", "000000d900"}, 0x38) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "b398a992143a240d", "d036788c4aaf9c6ef96dda7201d2d2a5", "1a13ecde", "0597b7f1463f0f33"}, 0x28) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000001300)=@req3={0x10000, 0x10000001, 0x100, 0x100}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) r6 = accept4$bt_l2cap(r2, &(0x7f0000001540)={0x1f, 0x0, @none}, &(0x7f0000001580)=0xe, 0x80800) getsockopt$IP_SET_OP_GET_BYNAME(r6, 0x1, 0x53, &(0x7f00000015c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000001600)=0x28) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) sendmsg$sock(r3, &(0x7f0000001400)={&(0x7f0000000200)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000280)="dac5d661d71bee87919e23663a8af5a6fd924b0b55f100a36626c3c9a301440f53ef8a603a3b6de28ad47b2ebf852c1f7c", 0x31}, {&(0x7f0000000340)="b320d9e1bb0c01e1cf1ee4b9c7cc27362f516971c074b090c3c2e95ccaeef1b2864f7eacd10ba5a94fdfa526809df3ff79ffb42ecf8c553c9761cedee2a6c471483a862a0517e6a81367ffe49d2baeecfb7f318c85a060e334190598934dbc0c838042ba713587febfa09533f1b629b6c1fb9998013d8190829b36b086f34cf3bdd5646cd6795bc89dd93cebfe7351ff40f9e32fa0d7997a9b889b5185bd36d830254a4bed2e729239a5f555f832c65530f26bded302ef1c4ce18f31aa41e55d5b15918744267eb2a308846860e28556535642678ce1cd22912ea43192448566b164691dcd7b5af575b2ed4d4c40b380366405b79ed333e5c4424736751f11e8cb181c98c10a17abe9d552c747bd1b5a0a39885f1d1d0fbd93d5b9ea7d6d675825d2e97cae878cfb236c5e4d6253ce8fdafac328ff8dd3aa14aff46d54698fd54178da0fb2185f8769578395b8ecb8bd9165a9d9ec9b90b97f832c4bc86a46723b241bef99e1bd95d80ce69d2840267787190868dd81f71d3cf2695f77c69c4101803e3ea61cc17e4801a98ca89db09fb6760942a787c34bf86b5efac8e5ee1ed9eb8d49828fa5eeef536db708a10daf6231aa04e90bc893e273cbc8cfae7d3e446820d17f87a5e92c5da4d272b0008ef7c77ae24d976fbcb6ef50ea501a229e160766d4b749a68acaaa5217f1365f237e97ba577506527f02217200c502224977d90cf586055d5f7f057997c687e1e655044a440652db2c3151147435b2dc5a22faa0c139e3f47094afc4407b1c90cd92b0c78f7940d39751146d01b389179832dc3ed37bef1834e44f1dd6f729e5bd95c6a4f98c08c72e8829b4cf43cf926cdd6a4764e6ee7d5fd8643df318f0a075c3a595dc634a728057c168b18c19f2adc705c6d973832b47fde119e9fc6bc61641b5af0ecbfb5858df17df8c336c0ff8da3da10e5a8e30d7b2f850fc2577d1ea9e0b7813e9e372d907f5ec0104c5ae902fa5eb1b397109873478a7bc7ff9653f39de00220f00182884620e2ac6bfa4bd635b34505ca95f0d95f3db4e5ea11a6298fa3606ac51c3411365fbd7d5280f9048c8e2a885e7998c25f8766a338b57523be2b7e0f87521aa400e3623d8abe43cfbe68c8e6b85057f35b6ba7556bb0930b164612da20705869f39e0568501824231fccd950bd43648493e62b942660a4dfc3894dda7afd5dd772b8693f60812b1d6b15e6604a3b3b004daf0fc8c5f299ca566ca6581f5ab1135924ebb607f49c648ac214363f04595edb60ecb045aa9cda88b2ec567462d3ff6f14f6e528c40078e1bc561262a83c2b062ad9878eb2aa05e83168daaea47af5adf4319666be90d0ebafa11f4a7794ae5ee9214412b3c36aa370dc89d318f457a9dd71f831c3a66bf781ca73ed07e61292eefb7c8765e5a346d9ddbd81ff45779f3eda3344dc0f34e2643b995513fb395801d0479e3d772c1f3cdccb34e7b7cfff0c14519b0c99cba5bb337679d5f4d07e5e1a8d4d93adb0475c9d925db41bb6e86a00a8f79592037183918764892cf30f151d18ce42500d9ec53439c5e543969bc3f27bc64b08126092d1be2050f54e2f0c34c1ad7ef67b520f564b8dfd0e502194e26ae69b94c9746280448756640c0f9d2cad7f14ddc76103c9b84378797aa5bb7c2541bf3dbaae65eaab57f7b128f14c746973849d6cd3214516aee590bec6532f0670b57080ba5e7fd7b2749201398d25b0a06e1acb2a3965e5b6728d00c4e9f1e2e34d8043b7011814cc8788c279386d48a49327b1c6e86e8a297295e7808ba2323d86f3997d57cf76908f7a74fc9ef131b05375effc6392c9d082b46a8818121c927730617ac0f073ebdd6b0f5a7ac403e7fef037abb7dc33780c5e4b01610a76778979e3739c6258384e8d6af4ad5ffacaadcf21a6e1fe6693a8aa5352bc826f99c746ec9bc94d92b36ea7931e02772b313b6eb64dee9259103af506218149cf7ff14eb4d42af61e9bd5f059bbd8ea5e1b89a6bb0f873ca0b4efb0579a04f57cc5a347ed844a5476fba80d1d60d15f9295f69ef143ec406598a5cf23e15a7bd4fa9e91f882b9918f51d9f5ee5dd61bf5091a8fd6ed60a69f327397fb2625333db53cd2959d4e7fa4ea1fd16871b19a379d701808f693678c879086f7e7601d960cb50c196e2d0ad122559dac126a0330e4e78cdbcae6326e1b1b8518693e3557f04134519f9d82ed4165211343b96c34d065d1e3d2575ac38cd03504ecdc62f5c79e6af7b9762bc94b6e1ef129fcdd81ec6d3cb0bd4149f4577dc61ca9dee094c6d9e2a185d28b437a8ed202553304109d10e366197894827a7b2ea69f32640237daf7147181550c3f051b73544c1e87532db1860161cd43c2a79cd8c3cc81e1e3bd8d183ea11e9139d1e2cf6ca72dc3cf15a0d6b2b8842a6c3f3ea8e1535d15ed9e18ff84159a60b69de3fe30161c2953e109f407d9051f8c603a17734030f2809dd3f4396da53df5967f978852d2b25282f4339966f6c31d638a7723edd6ebf6cb3ab67ee13ebf8438c978446bd9912aaa11ef4ab343a9b6c31453ff317083e66568473a4abdf4e2bd2cbea59efed5c61b1c5e9af583495fde75f5fd359c4f7250b998e4ea6c175b15a2be3d5a250798ff4021d027f0453be155af7cdc3f1b08eff6ba187cc7ea73c1f2c2bb9b0090e83cb9df0528ac5bd62ef96a1a774fa697dd726e2709ec706fd58a791163465bf13802a2cc5db4dd189d401cd46ec28610cd01251273c9f5924012817613b74c8fa2ef240a2d07b239d435358bef06c78b15f24ca0004b378903d25cab588e8e515c5456ee167eaaabab94157f79d59c2a9295ee1efdf790f57cc9e5f05dae5c8c2758e38b661e5a1db5ee09ac7ddf98559a70887dfddde26b1a80eb5873806cd285cc7ea2bf46d755535caad2c030c43fbca294a8dc32a583aca1722a1b2679ae764c45a7d0e9f0687aa842e3e8dca41298a0b9ad1a9a6d593136e7a7977d29cf9a69a02c4c76e3a7d21d8a1e5af031bc9508be5edaf922aad98d6809801d13f295cbc1904aead305f8ea6c00e0f300d21c8e496c9805fdb0f7423d1386bc101c69b154b571dd795094ea675574690dea5c3fbc18f826f04b278e7a19a1f0aee34d8dbe766c681173685cbc6056a88e1662546506857072411be68a68800fa3e86e7c1bc54492c5b2b7ba618f1f6ac6595860c5d84322bdbfb71ef8618e0138b9ec18a75fdc41ba4882558db2723f921a094f9784aa07483bf0754ab0da419ebe06712330f2184a21a9c3624ea5997dfafb8540944d2ffd6549419cb0fee994a539b0ba7dadfbcf05bdc414c26b1db717726a75b34d1edf86e8123095b69b3f2706cc4a1093ddb7d0e3b85ad57e7363f50a50e8816afbfb2c615a51e5f7ec1adbde745361a284bfe5cf3d8ca97a1403895aecf60c5e3fdd9022b7800affc6c91bee7b294eefd165cc36ed3f62afd62e70c602a64f2189288ef34327b17a8bf20d3a8e0fd4194d62e190c70b4648bd098ed9f7963b3e56ebe3662b085770f790bad031699db2d146a13a760101b83697715acc9315a1c4f2ab3d30dbd4c56b6c0e5bfb3d239d103b4b0fc3e357241411f5cb113b2b19d1d3fa5b13db9179becf34f93d49b49c5c312c61360139b7a1dca4b05321338c39a14df4067ecadd23eaca4f42636702f7cb99096eb106968b14274b27dfa8653ee13bcfa3b47260c799de6065f5dbc1a72c9564f1cebe655ef0c9978f4a47fe8648d261df00de55eb55e9b188f3a7c832515e891c2d1226bc1bd78e731d2fa448086c873167a7dfe3b279c5a084d6e64ea8584875ab78e7a3d951cca81833e95d3a97031e94c6efd995c8ea662ee2b61530fa9c7d6172b1ac389715e8eceadd3be83c6f08c09b636caf9f4aab97e116115ce4cdd23bf95a71c9bd4929adf193a0924de3778987bdd8430132af8214f32b1587859486503dd345b83e1814254a9d5b62d979dd9557c2f76f838987a7933b453c5717743249f7d531996e43cf351ead5d02fbae91395b8a3b20cc1865c651ec590865958e25938d333b152aa699b0a772b801c04f17cf44f04ff277bbfa2f8763814d5626b1f2d1932df7fa9fe319e31d1abfa298f0040cf74acac04c5038b7e295d41da677c3d6416f021d40c7c5a7aa9015dd1c0bbb61558838f0cb1b635db630abf3d2b586fb34e44b53d1e5c5c5806a891b520416dae02e16b8bc01913e1e4f5de4134a43cea019d2f789eeb131a254fe63596ecc78171b694a9f6f9d11b779fba23aaf66f60a7c40a7e620f3b18f9c5ded2bb0139db83862689dc3096cc93b22ea395dec591903d8feb39e1baa18caad55f0dc3fe080464dfc2d62ad7efc29e4c026525151d15729b4c5fe7f1ebb675f6ee529daa2a562f2fbf6a08bbfe7c3040d56c7c0dcd507c3e1ca2ab8fd1989d44a6ae981a1e93e6838c7b6d50bb746ab58e45339c500117b1d918dce19e2776ceecfe57137dad067bc86fc143654531be95a3accb8bd4a7bfe5c860186bbf9049eeada529e2593d2792038935ea109512c63a71fd2bc8d67e1660a0caf1d69f52e649a4f655b9ada172589125b3a72293780b104e0727f785eb7324a639fed503c49fe903d80290d7acfcc400fbabe72108a058aa4068a3898fee77809a8e8d193722e61d0bbab01179e34c94c0a0537c6c4df89656a50409641fafda06fd7dff9ca12f3a5438f32bba4c8df1646963c20079d14c6f6693328d9595ae9edf4ea70238301e0ac7cef0adae75b53ec8d9358c966e387fbdf10e49f9732c9a35f5c9bbb3f1ad20f8499d8d4e5403082be0024783e3f49d001429d83551237d5211430b0b75a994889a912a0ccc30a60f9fb9f28b7baa2c1391436e195a971495ff1ad22b5b507d98962d1c4be725a8f218e82c48e5795c94ace7902e0e00616a2d9903422ec1022aef513db858160306ab02bd0577be283538579fa4f6c3f75ea14c23784bdfc3b3d3fc4aeeffa3d09640af6a41dd4e1ac82465e428563eaafc08b9e1c4576e03c3f7af3b452353e3a54ecb449091996b4f6fed30d640a59b6831099daebaa798371190ca7e3291bffcdcbe3340de193bf1676bcaa660a716b44f9858ed4152bd26fb3c298667b0253e997252f8a790c6cfd24d52bce98eaf03a7acf08dcf4abc06e37beb79903fc04d63985e9a78823d5d8734d76f09f590b30140100a81ebf901dfd700020d40e61b9f13a8302193be0724e6f112feb7e71c068d0b9036a6015b4350ae77d5581345d5d4874f3829a1f9d6b2d0c7dbb8be4636be97c462040d43183863fe7ec974cb20bcdf37df7fc319dcc8691a99f63e79d598001519f46b2fb100c761e85c08281d37efcf44d7b46a73b9c4ab076a6261e02f5c106abfa757efb6686d5e414f3f0ecff353c18236d9420d0fdb0f152982f73414e986e75219f1e246c1fcf34cbefbaa14adfcc1ce90bcfd04ef256c909400a05d1d44b61bccc914688ea75b53fed55739b19881bb60b08a2aa106023fb357d1943816b34a77e04c309f50a92e028013fae92326f0c10f489a9b53973d3d4cff398dd4cdbb3089428164616d5ef47502b9e157f1528c346c6c96b1ab2035c3a14cd94f2c5a8df7d19466c73c80c15192237ac9b663f36a8c4a21a4708d080e918878fc5922ea97640024cbe3e49f497e417ab90004216cf0", 0xfc0}], 0x2}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)={0x38, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 19.58295123s ago: executing program 2 (id=924): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f0000000500)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0xffffffffffffffba, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r3, r6, 0x25, 0x0, @void}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r8) getsockname$packet(r8, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x66) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r9, @ANYBLOB="280012800900010076657468"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, 0x0, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1122"}]}]}}}, {0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x0) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r12, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19.300693228s ago: executing program 0 (id=926): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000880)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000008c0)=0x200, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x10010) 19.181652519s ago: executing program 0 (id=927): r0 = socket$netlink(0x10, 0x3, 0x9) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x1, r2, 0x9, r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f00000000c0), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b00)=@newtfilter={0xe90, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xe60, 0x2, [@TCA_BASIC_ACT={0xe5c, 0x3, [@m_ctinfo={0x108, 0x1c, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfef}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2b, 0x5, 0x30000009, 0x3ff}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}]}, {0xac, 0x6, "9d39900473ba27545c01bf03509192e9cd73b3afde5612974bef26538cbf796189ca1cfeb942a64d55878124df387e7b82b029b1801a430b5d084c1982dbd587a9616a5023847bcd6522bfc559eb88812982b064ed9e50b9dc4f0b88fb377d92332e8b3893db1738fcd81b64e4b8f0627cd0dc40f9847ef92b24be1b71ff95012404716b2778ae86a350e086112e9c57a843cf39f0c1f93c21eda8c9c122312a29c7de71e0448af8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xd0, 0xf, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x80, 0x2, 0x2, 0x8}, 0x800}}]}, {0x83, 0x6, "64b1eef4324b3b50593d65d8db7a88a30d0d66a869e2d74f278eaa4148a57337049d6ca75cc92cb492fec215645d91edce360d436ea065f426a4921cb7b83ff065076412d2a2d9b47b7f48bda88b1d256c4409b8c5b4d3c88b691d16fb57435c22acb9b1765f4f41a7e9d610d2de0135c53f7c29ae44c634c874feb0b5c296"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x16c, 0x1e, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x10000, 0x6, 0x80, 0x9}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0xf2, 0x6, "48c15265a669506633892ba93f628cb5637003c09853d4fbdb0cddb1a7022894817f7a160f72cd01af67288af2307f61cd69cc3e71028f5725a1a731f24ca2df8fc85bf1dfdeb1bc1beaff39b6cfc6c3a5d50e2b80db27258d2820678ce92c2a965f688fcd72e68c9610299d925862be8f5b7ae2f1ea138a50f6228fed4011094b3fdbb81290aee46554b347c0f8d00315279f21fb61712bfb6b7e42c5c81d733b713f9619e370276978850b7c59b5ac41680f219f861fa03a7581c9dd17fcfcc01072e9e95af066e090ea6f4074b9b398ee6a6457893acf5ed065b4f3253f9b58bb162975fc91ae914355ee2385"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0xc8, 0xd, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x8, 0x1, 0xfffffff1, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0xd, 0x8, 0xa9, 0x3ff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7fffffff, 0x0, 0x9, 0xe29}}, @TCA_DEF_DATA={0xc, 0x3, '(^[-&-\'\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'TIPC\x00'}, @TCA_DEF_DATA={0xe, 0x3, '-\\^\\/$\x85@/\x00'}, @TCA_DEF_DATA={0xd, 0x3, 'udp:syz2\x00'}]}, {0x1b, 0x6, "53e7d44f939fea2b435f64b31226f808c08c71b7f800a5"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x80, 0x3, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0x49, 0x6, "d1d639330769c37012fd7c52e36fb650f122aebafe45a71b866d9978c47078b18ecdaa62fc94a7da0fef2b9d2bf31713d2e6b32ecc5ff91520e9a1107c956a784d9d06dc4e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0xf8, 0x8, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x660, 0xe6f2200, 0x4, 0x4, 0x6}, @private=0xa010100, @remote, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x8, 0x7, 0x8}, @broadcast, @private=0xa010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x784d6823, 0x10000000, 0x2, 0x6}, @local, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5b36, 0x0, 0x20000000, 0x9, 0x1}, @multicast2, @private=0xa010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb403, 0x74c, 0x3, 0x401, 0xe8}, @multicast2, @local, 0xffffff00, 0x1}}]}, {0x8, 0x6, "f931d955"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x90, 0x1, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xe97, 0x1, 0x2, 0xb01}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x10000, 0x10000000, 0x7, 0x6}, 0x3}}]}, {0x1c, 0x6, "aae7fac194b9b7aabc7044869aff25ed869f847792356b3b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x168, 0x1c, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x2, 0x3, 0xd, 0xeee1}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x3, 0x6, 0x6, 0x7}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x4, 0x80, 0x52b7fdb5}, 0x3}}]}, {0xd9, 0x6, "9356dd6d2b870d3faad6c4bcb25f6aa3ad55db85648381af9dfe017dc67488c403fa25c80e1757fceaac9bc1ded95f71810e664c933a150e129e502927590c13918ed8fb838c1060fe8f16a6d93a91ef6a3c72310cfd8d54fc2b435e33f2f08f2ea28a7ebe4b0b5e6209bd41b755e4ce5c05be6c1e0f566d4e8963b82aa458deba99763a879016927ca9f281aa7e59090e3ec310c6eb2619684df037b2956c954f6fc56e908b4ad41b1bc23e5c85f4db38f9b25fda1112936068ff07a4b19cc7cdfca0748a8638710eea5fca8f0f3909d12dab1289"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x58c, 0xa, 0x0, 0x0, {{0xb}, {0x488, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x8be}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6a06, 0x8, 0xc, 0x7, 0x67, 0x9, 0x7ff, 0x3a36f20d, 0x7ff, 0x2, 0x7, 0x2, 0x3, 0xe, 0x10, 0x2, 0x80000000, 0x3, 0x4, 0x4, 0x9, 0x7fffffff, 0xfffffffc, 0x3, 0xfffffff0, 0xf2, 0x9, 0x40, 0x4, 0x4, 0xfffffffa, 0x10000, 0x32ff, 0x9, 0x6, 0x9, 0x8, 0x3, 0x0, 0x3e1, 0x6, 0x2da7, 0x100, 0xfffffffd, 0x5, 0x0, 0x62, 0x7, 0x3, 0x6, 0xfffffffa, 0xffffffff, 0x0, 0xe, 0x1, 0x8, 0xffffffff, 0x4, 0x6, 0x4c, 0xf2, 0x0, 0x3, 0xf, 0xffff27ef, 0x4, 0x0, 0x6b5, 0x9, 0x400, 0x5, 0x5, 0xf, 0x7, 0x8, 0x0, 0x80, 0x2, 0x1, 0x8, 0x5, 0x5, 0x3, 0xfffffff5, 0xfffffffc, 0x82, 0x8, 0x7, 0x2, 0x9, 0x0, 0x2, 0xf, 0xa0, 0x7, 0x80000000, 0x93ff, 0xffff7f1b, 0x5, 0x3, 0x4, 0x2, 0x8, 0x7, 0x0, 0x2, 0x0, 0x9, 0x2, 0x1, 0x5, 0x7, 0x7ff, 0x20, 0xfffffff8, 0xfffffffc, 0x4, 0x1, 0x101, 0x8, 0x9, 0x7, 0xff, 0x6, 0x1ff, 0x9, 0x3, 0x2, 0x2e, 0xfffffff7, 0x40, 0x0, 0x0, 0x0, 0x6, 0x6, 0x9, 0x8, 0x6, 0x5415, 0x7, 0xfff, 0x7, 0xc, 0xffff, 0x7, 0x1ff, 0x6, 0x0, 0x80000001, 0xff, 0xffff8000, 0x4, 0x800, 0x91, 0x2, 0x7, 0x5, 0x7bb, 0x5ce, 0x3, 0x6, 0x100, 0x9, 0x80000001, 0x6, 0x9, 0x80, 0x2, 0x6, 0x2, 0x1, 0x4, 0x2, 0x9, 0x100000, 0x80, 0x100, 0xffffffdf, 0x5, 0x795, 0x8, 0x9, 0x4, 0x6, 0x2, 0xbe1, 0xfffffff9, 0x0, 0x9, 0x2, 0x10001, 0x80000001, 0x1, 0x0, 0x2, 0x4, 0x6, 0xfffffffc, 0x7, 0x101, 0x0, 0x96, 0x80, 0x5, 0x8, 0x8, 0x3, 0x7f, 0xf0ee, 0x10001, 0x1, 0x5, 0x2, 0x7f, 0x2, 0x6, 0x7, 0x8, 0x80, 0x6, 0x1, 0x5, 0x1ff, 0x5, 0x5, 0x4, 0xa, 0x8, 0x742f, 0x0, 0x0, 0x5, 0x4, 0xfffffffe, 0x6, 0x2, 0xc4e0, 0x6, 0xfffffff8, 0xfffffff9, 0x3, 0xfffffff7, 0x0, 0x8, 0x7, 0xd59, 0x75, 0x3, 0x9, 0x7, 0x3ff, 0x2c61, 0x3, 0x1ff, 0x8f]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff7fffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x3, 0x0, 0xa2, 0x7, {0x0, 0x0, 0x800, 0x40, 0x4}, {0x1, 0x0, 0x5, 0x5, 0xbd89, 0x6}, 0x0, 0x9, 0x40000000}}]]}, {0xd9, 0x6, "75b3b21c34fc7144d19cfd01e8594e0f92fe3ce030c98a80dbca92332f84dc3b45345c2440a245615c7d692937a6b781f116c4a93ac01a7d462db1980682c82091af2eb12d60ccf6b5405d0c2fc01b83a1a866f3ea0a806bb0dc31b02e2075207fdee4bc9131a4f8aced2365c1d531918e1b45406db9106c399771a10971153fccc04987724beda43cb28a1f3ac6b199e355803b85d16901100f0d584c5775b2ac16bdf894ea1379dab84981aeb2f6337b977544c5b1534e78dcabe62a20719ad22bf95519eef394278a9c757ef50ae55cd1e7f0c2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x150, 0x0, 0x0, 0x0, {{0xb}, {0xbc, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x600, 0xffffffff, 0x4, 0x4, 0x8}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x0, 0x20000000, 0x80000000, 0x3}}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x2, 0x2, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7f, 0x7, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10001, 0x5, 0x0, 0x2, 0x8}}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfff, 0x7, 0x2, 0xc}}]}, {0x6b, 0x6, "b2fa5171b15d32e54d4df05642af22cedc299cbbfc24cff4ebc30ed520cca5f4bc7e0b2d969fcf13258b8200f6bdadb5b2a37d6699393154cfa22e22d3e391ae265a20d96c87c12040d0a99ef1e25905383258f65d105a1b850e310ba3c9e53f4ef0521fdbb48a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6}}}}]}]}}]}, 0xe90}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001a000100000000000000000081000000000000000000000014000200fe88000000000000000000000000000126cb41461547bda391341f9d3812b05b80ec53f07fa9b3d22b0f412158eb9b3b0f31a150abc8d90d823cb503f5a2b0b57bfba0eed4401d55103be39f80fc6cf18953f67ad62d204b70f3bd7a01931071b9d38df724a0d656d9acee9f0ada13605aba4ee5b9f770d3419f2bcca19b24371b3d52a4a09d2cdf03b7397184c06193253947eaecede684342f42dca3b792ef946edba3e7"], 0x30}}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @isdn={0x22, 0x1, 0x0, 0x9, 0x7}, @vsock={0x28, 0x0, 0x2710, @host}, @xdp={0x2c, 0x8, r2, 0x36}, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xae9e, 0x1c0000000000, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) recvmmsg(r14, 0x0, 0x0, 0x0, 0x0) 18.898876741s ago: executing program 2 (id=928): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000840)="178d048604bf0bfb1945d7530008", 0x0, 0x501, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 18.853901396s ago: executing program 3 (id=930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) close(r0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x2, 0x8, 0xffb}, 0x4, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x95}, 0x8080) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000640), 0x56) sendmsg$kcm(r7, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x4000, r6, 0x42, 0x4000}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 18.687231931s ago: executing program 2 (id=931): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b80)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x25dfdbfe, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x5, 0x7}, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r0, 0x323, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000040}, 0x40010) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0e0000000400000004000000020000000000000087dfa8f9c2e8c3dbe9ab0af717fb9e8aac42a64eda060d34644ec2636807a86f7a8dc264437be5792edc9d849f38b66d3ffc58857916849eebbf7ccd494606daab82ab951135", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f00000007c0)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c010000100001002bbc700004000004fc000000000000000000000000000001ac14143d00000000000000000000002300002008000300050a00600000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1e01010000000032000000ac141432000000000000000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000000020004006c000000000000004c00020063626328626c6f77666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020"], 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x44050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0xa, 0x3, &(0x7f0000001100)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x2000, 0x71, 0x10, 0x48}}, &(0x7f0000001140)='syzkaller\x00'}, 0x94) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000800)={0x0, 0x10, &(0x7f0000000840)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000880)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000008c0)={0x1, [0x0]}, &(0x7f0000000900)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000940)={r8, 0x8001}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000001440)={r8, 0xbb, "6a92e4936c0d367d724a51a58fd1a610d5a9fdcd8e4ee745fc20b172ad036c2e42725506811241ab6dcaca3d2b6f2c860425a2444e50c00851fbe575bf987d569d4676813c90097f033f6bbf23cf9dc92348308555f5dfe8dc81faf24cf6ed0962e52f95f8f89e450ef6ea8ffdf75480a04e0eec8c98a717f62dd27e39554b6e218a506b95d397ca7676e679be900c168184609c08ab98906d51407326c69ae6485a37c94fa8d2cbbde0740235144ed0de72df49842f67ff84a20b"}, &(0x7f0000001540)=0xc3) 18.686662509s ago: executing program 0 (id=932): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x3a2, &(0x7f0000000940)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x36c, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e340600"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 18.574240796s ago: executing program 4 (id=933): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000001900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce}, 0x94) (fail_nth: 7) 18.562717158s ago: executing program 0 (id=934): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x48, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffcffff03400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x81, 0x8, 0x0, @private1, @remote, 0x8, 0x80, 0x3, 0x401}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'tunl0\x00', &(0x7f0000000900)={'gretap0\x00', 0x0, 0x1, 0x10, 0x0, 0x3, {{0x18, 0x4, 0x2, 0x0, 0x60, 0x68, 0x0, 0x3, 0x2f, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0x37, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x6}, {@rand_addr=0x64010102, 0x4}, {@empty, 0xfffffffa}, {@loopback, 0x8}]}, @lsrr={0x83, 0x27, 0x11, [@multicast2, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x37}]}]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000bc0)={'ip6gre0\x00', &(0x7f0000000b40)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x40, 0x2, 0x8, @mcast1, @loopback, 0x20, 0x40, 0xc1, 0xb45c}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000c80)={'gretap0\x00', &(0x7f0000000c00)={'ip_vti0\x00', 0x0, 0x10, 0x40, 0xfffff001, 0x7, {{0xa, 0x4, 0x2, 0x8, 0x28, 0x64, 0x0, 0xd, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0xc, 0x38, 0x1, 0xb, [{@empty, 0x5}]}, @lsrr={0x83, 0x7, 0x84, [@empty]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000ec0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x1b8, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000}, 0x24004000) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40000002) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r13, &(0x7f0000000380), 0x492492492492627, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x50, r15, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]]}, 0x50}}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 18.302361364s ago: executing program 4 (id=935): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket(0xa, 0x3, 0x87) sendto(r2, 0x0, 0x0, 0x800, &(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) listen(r1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0x2710}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000380)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x8}, 0x1c, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000440)=ANY=[], 0x50, 0x4855}, 0x24000052) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000ac0)={{}, "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"}) recvfrom(r3, &(0x7f0000001ac0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f0000001b00)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000001b40)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000600)="320dfdc648f2dc421b614a37118fcf7bf8b999c897712ada4787d3e677078246776560e1be4b6e5d2855d0345323a23597e69a7149d3d59c8bec7e173003f0ca597728de1f402a5370f75c12fe1623e10851709448", 0x55}, {&(0x7f0000000080)="aed9f84c4ac56dfdb6d76acf0356be77a7d501beb2580a70b6e79e842be304d6b7e9296e352040943cd97b502545545b32664a7e35124c7bec66d9c6b2156ab18c35f79c02e2582e4e3884830a1e5915ef9954fdcc3a1beaeb4de404ab43722201cff2d185033c44c7ceb415b1a831a5795a1757c6046a6a9bf100e0f723", 0x7e}], 0x2}}], 0x1, 0x20008000) 18.164231165s ago: executing program 3 (id=936): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x28, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={0x0, 0x50}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000001c80), 0x400000000000235, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80800) ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f00000002c0)={0x32, "752376a34b32535a12397d042e8663e957e7b473b587e47e923a96f9ff337953fff5de8176b14dd69965c2fb4d74e796d4ace24b2026cb88308243188d67bc9e087c4807cb76092c425c33be74998a5bb9bdbc487c4636da87e5f50f4239651c5ecca9e6bde3e0498598c2a19933153ba2c1382791c1364e083d756a56c751af"}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf250300000050000180040002800d0001007564703a73797a300000feff37000400200001000a004e200000000100000000000000000000ffef64010100040000002700020002004e20ac1e01010000000000000000dc80bbd815ee56ad2ae31651dc2e156b29307f6d4756943c0aad3bfa2d18beb16e1ff525a88a0e21a2772bb6494f304be6f8927e9a8603ea044a14d3"], 0x64}}, 0x810) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240, 0x3}, 0xe) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000380)=""/199, &(0x7f0000000480)=0xc7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000003b3a6df50000d443018f5994013a000000119078000000000000000000004e20"], 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000540)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f00000019c0)="2a000200010078", 0x7) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f00000005c0)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 18.089449873s ago: executing program 0 (id=937): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x40, 0x107, 0x70bd27, 0xfffffdfe, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000840)="178d048604bf0bfb1945d7530008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 17.90219858s ago: executing program 0 (id=938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79a82dbd7000ffdbdf2501000000000000000c4100000007001473797a"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x24000084) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = socket(0x2, 0x3, 0x100000001) setsockopt(r6, 0xff, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010225bd7000fddbdf250300000005000a00000000000c0006000100000000000000100007800c00018008000100", @ANYRES32=r5, @ANYBLOB="08000100000000000c00050002000000000000000c000800210c00000000000005000a00280000000c000200ff000000000000000800010000000000100007800c000180080001", @ANYRES32=r6, @ANYBLOB="6d8f16533671bc9391003359a91a0d55594d037380439f4d62a52c00fb7f4d5cc31cd2d862282fcd9a95d571568742fbc02604e748a7821d8e3d78be2280acf436c47874689d014a6dfe9c3d867f753049cadec4e8b4f974136e466b920c33a7e1ce"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x44) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x1c, r1, 0x301, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008084}, 0x8004) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x2, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x215, 0x2, [0x4, 0x8000a001, 0x7fffffff, 0xc265, 0xe3df, 0xc265, 0x2, 0x800, 0x101, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x1ff, 0x2, 0x6, 0x8918, 0x0, 0x3, 0x4, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x107a, 0x5, 0x5, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x80000001, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0x80ff, 0x1400, 0x7, 0x3, 0x7ff, 0x807fff, 0x0, 0x4, 0x0, 0x2, 0x8, 0x79, 0x0, 0x3ff8000, 0x3, 0x57, 0x8, 0x7fff, 0x4f, 0x0, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0x0, 0x2, 0xfffffffa, 0x100, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x103, 0xd4a, 0xe5ad, 0x0, 0x7ff, 0x7, 0x9, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0xffffffff, 0x5, 0x0, 0x6, 0xa0, 0x7, 0x6, 0x100, 0x100, 0x200, 0x0, 0x5, 0xffff, 0x5, 0x1, 0x2, 0x3, 0x6335, 0x2, 0x6, 0x200, 0x3, 0x48, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x4, 0x3, 0x80000001, 0x7fffffff, 0x408, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff7, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff8d, 0xfff, 0x3, 0x9, 0x5, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca41, 0x5, 0x3, 0x6, 0x0, 0x6, 0x5, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x6, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x6, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x9, 0x2, 0x2, 0x9, 0x100007, 0x40, 0x3, 0x400, 0x8, 0x2, 0x401, 0x20000006, 0x9982, 0x6, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x3f8, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x2, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x4, 0x200, 0x100000c4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0x4, 0x0, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x4000006}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) 17.898991364s ago: executing program 3 (id=939): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000280), 0x56) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xf, 0x8}, {0xc, 0xfffe}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xe7b}}}]}, 0x3c}}, 0x4048090) sendmsg$kcm(r6, &(0x7f00000004c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (fail_nth: 1) 17.759184015s ago: executing program 2 (id=941): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@security={'security\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1a0, 0xd0, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x81, 0x0, [0x26, 0x40, 0x3, 0x1c, 0x2, 0x3e, 0x3e, 0x1a, 0xa, 0xe, 0xc, 0x8, 0x1f, 0xc, 0xe, 0x10], 0x2, 0x0, 0x81}}}, {{@ip={@rand_addr=0x64010100, @remote, 0x0, 0xffffffff, 'wlan1\x00', 'gre0\x00', {0xff}, {0xff}, 0x89}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x7, 0x0, 0x0, 0x1, 0x4], 0x0, 0x1}, {0x4, [0x1, 0x6, 0x0, 0x4, 0x5, 0x1], 0x5, 0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0xffffff00, 'wg0\x00', '\x00', {}, {}, 0x11, 0x0, 0x6c}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x80, 0x430, 0x0, 0x1}}, @common=@set={{0x40}, {{0x1, [0x4, 0x4, 0x2, 0x2, 0x1, 0x1], 0x3, 0x2}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x8000, 0x995, 0x4, 0x6, 0x200, 0xe8d, 0x9]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x58}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) 17.555756371s ago: executing program 3 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x14, 0xe, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x24000041}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffc}}, 0x10) bind$tipc(r6, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x40, 0x801}}}, 0x10) bind$tipc(r6, &(0x7f0000000900)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x38, r4, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r10 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x240880c0, &(0x7f00000006c0)={0xa, 0xe20, 0x20, @mcast2}, 0x1c) sendto$inet6(r10, &(0x7f0000000700)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r10, 0x29, 0x17, &(0x7f0000000800)=0x3, 0x4) sendto$inet6(r10, 0x0, 0x60, 0x40012, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="28000e0080000000ffffffffffff080211000000080211000000000d00b3f6000000000064000100080026006c09000008000c006400000008000d00000000000a00340002020202020200000800350000000000040005017490c5157fc9d005e415878f08aac4dbd15be8a882f3c367f1880d918fe4254c25c51bff6c3fe4665ed2b5173fa7229f0acbd4"], 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x11c, r8, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x566, 0x55}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6ff0472fcc2420567d5235e139d687f5b71613ffe29cf9f9"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d06b3ddbb9f06020451f757c8b8d59fdfc6e655237d55cf8"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x4008814) socket$netlink(0x10, 0x3, 0x10) 17.151720533s ago: executing program 4 (id=943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) pselect6(0x40, &(0x7f0000001380)={0x3ffffffc, 0x80000000, 0x100000001, 0xb, 0x4, 0x2, 0x9, 0xebc}, &(0x7f00000013c0)={0x4, 0xfffffffffffff931, 0x3ff, 0x8, 0x7f, 0xfc9, 0x9, 0x6}, &(0x7f0000001440)={0x4, 0x6, 0xa92, 0xa, 0xffffffffffff0000, 0x7f, 0x5, 0x1}, &(0x7f0000001480), &(0x7f0000001500)={&(0x7f00000014c0)={[0x559]}, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'vlan1\x00', {}, 0x31fb}) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304, 0x36}, "00257059cb008000", "8b3de2aabceef22f419e59f30000000004000000000200", "07350080", "000000d900"}, 0x38) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "b398a992143a240d", "d036788c4aaf9c6ef96dda7201d2d2a5", "1a13ecde", "0597b7f1463f0f33"}, 0x28) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000001300)=@req3={0x10000, 0x10000001, 0x100, 0x100}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) r6 = accept4$bt_l2cap(r2, &(0x7f0000001540)={0x1f, 0x0, @none}, &(0x7f0000001580)=0xe, 0x80800) getsockopt$IP_SET_OP_GET_BYNAME(r6, 0x1, 0x53, &(0x7f00000015c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000001600)=0x28) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) sendmsg$sock(r3, &(0x7f0000001400)={&(0x7f0000000200)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000280)="dac5d661d71bee87919e23663a8af5a6fd924b0b55f100a36626c3c9a301440f53ef8a603a3b6de28ad47b2ebf852c1f7c", 0x31}, {&(0x7f0000000340)="b320d9e1bb0c01e1cf1ee4b9c7cc27362f516971c074b090c3c2e95ccaeef1b2864f7eacd10ba5a94fdfa526809df3ff79ffb42ecf8c553c9761cedee2a6c471483a862a0517e6a81367ffe49d2baeecfb7f318c85a060e334190598934dbc0c838042ba713587febfa09533f1b629b6c1fb9998013d8190829b36b086f34cf3bdd5646cd6795bc89dd93cebfe7351ff40f9e32fa0d7997a9b889b5185bd36d830254a4bed2e729239a5f555f832c65530f26bded302ef1c4ce18f31aa41e55d5b15918744267eb2a308846860e28556535642678ce1cd22912ea43192448566b164691dcd7b5af575b2ed4d4c40b380366405b79ed333e5c4424736751f11e8cb181c98c10a17abe9d552c747bd1b5a0a39885f1d1d0fbd93d5b9ea7d6d675825d2e97cae878cfb236c5e4d6253ce8fdafac328ff8dd3aa14aff46d54698fd54178da0fb2185f8769578395b8ecb8bd9165a9d9ec9b90b97f832c4bc86a46723b241bef99e1bd95d80ce69d2840267787190868dd81f71d3cf2695f77c69c4101803e3ea61cc17e4801a98ca89db09fb6760942a787c34bf86b5efac8e5ee1ed9eb8d49828fa5eeef536db708a10daf6231aa04e90bc893e273cbc8cfae7d3e446820d17f87a5e92c5da4d272b0008ef7c77ae24d976fbcb6ef50ea501a229e160766d4b749a68acaaa5217f1365f237e97ba577506527f02217200c502224977d90cf586055d5f7f057997c687e1e655044a440652db2c3151147435b2dc5a22faa0c139e3f47094afc4407b1c90cd92b0c78f7940d39751146d01b389179832dc3ed37bef1834e44f1dd6f729e5bd95c6a4f98c08c72e8829b4cf43cf926cdd6a4764e6ee7d5fd8643df318f0a075c3a595dc634a728057c168b18c19f2adc705c6d973832b47fde119e9fc6bc61641b5af0ecbfb5858df17df8c336c0ff8da3da10e5a8e30d7b2f850fc2577d1ea9e0b7813e9e372d907f5ec0104c5ae902fa5eb1b397109873478a7bc7ff9653f39de00220f00182884620e2ac6bfa4bd635b34505ca95f0d95f3db4e5ea11a6298fa3606ac51c3411365fbd7d5280f9048c8e2a885e7998c25f8766a338b57523be2b7e0f87521aa400e3623d8abe43cfbe68c8e6b85057f35b6ba7556bb0930b164612da20705869f39e0568501824231fccd950bd43648493e62b942660a4dfc3894dda7afd5dd772b8693f60812b1d6b15e6604a3b3b004daf0fc8c5f299ca566ca6581f5ab1135924ebb607f49c648ac214363f04595edb60ecb045aa9cda88b2ec567462d3ff6f14f6e528c40078e1bc561262a83c2b062ad9878eb2aa05e83168daaea47af5adf4319666be90d0ebafa11f4a7794ae5ee9214412b3c36aa370dc89d318f457a9dd71f831c3a66bf781ca73ed07e61292eefb7c8765e5a346d9ddbd81ff45779f3eda3344dc0f34e2643b995513fb395801d0479e3d772c1f3cdccb34e7b7cfff0c14519b0c99cba5bb337679d5f4d07e5e1a8d4d93adb0475c9d925db41bb6e86a00a8f79592037183918764892cf30f151d18ce42500d9ec53439c5e543969bc3f27bc64b08126092d1be2050f54e2f0c34c1ad7ef67b520f564b8dfd0e502194e26ae69b94c9746280448756640c0f9d2cad7f14ddc76103c9b84378797aa5bb7c2541bf3dbaae65eaab57f7b128f14c746973849d6cd3214516aee590bec6532f0670b57080ba5e7fd7b2749201398d25b0a06e1acb2a3965e5b6728d00c4e9f1e2e34d8043b7011814cc8788c279386d48a49327b1c6e86e8a297295e7808ba2323d86f3997d57cf76908f7a74fc9ef131b05375effc6392c9d082b46a8818121c927730617ac0f073ebdd6b0f5a7ac403e7fef037abb7dc33780c5e4b01610a76778979e3739c6258384e8d6af4ad5ffacaadcf21a6e1fe6693a8aa5352bc826f99c746ec9bc94d92b36ea7931e02772b313b6eb64dee9259103af506218149cf7ff14eb4d42af61e9bd5f059bbd8ea5e1b89a6bb0f873ca0b4efb0579a04f57cc5a347ed844a5476fba80d1d60d15f9295f69ef143ec406598a5cf23e15a7bd4fa9e91f882b9918f51d9f5ee5dd61bf5091a8fd6ed60a69f327397fb2625333db53cd2959d4e7fa4ea1fd16871b19a379d701808f693678c879086f7e7601d960cb50c196e2d0ad122559dac126a0330e4e78cdbcae6326e1b1b8518693e3557f04134519f9d82ed4165211343b96c34d065d1e3d2575ac38cd03504ecdc62f5c79e6af7b9762bc94b6e1ef129fcdd81ec6d3cb0bd4149f4577dc61ca9dee094c6d9e2a185d28b437a8ed202553304109d10e366197894827a7b2ea69f32640237daf7147181550c3f051b73544c1e87532db1860161cd43c2a79cd8c3cc81e1e3bd8d183ea11e9139d1e2cf6ca72dc3cf15a0d6b2b8842a6c3f3ea8e1535d15ed9e18ff84159a60b69de3fe30161c2953e109f407d9051f8c603a17734030f2809dd3f4396da53df5967f978852d2b25282f4339966f6c31d638a7723edd6ebf6cb3ab67ee13ebf8438c978446bd9912aaa11ef4ab343a9b6c31453ff317083e66568473a4abdf4e2bd2cbea59efed5c61b1c5e9af583495fde75f5fd359c4f7250b998e4ea6c175b15a2be3d5a250798ff4021d027f0453be155af7cdc3f1b08eff6ba187cc7ea73c1f2c2bb9b0090e83cb9df0528ac5bd62ef96a1a774fa697dd726e2709ec706fd58a791163465bf13802a2cc5db4dd189d401cd46ec28610cd01251273c9f5924012817613b74c8fa2ef240a2d07b239d435358bef06c78b15f24ca0004b378903d25cab588e8e515c5456ee167eaaabab94157f79d59c2a9295ee1efdf790f57cc9e5f05dae5c8c2758e38b661e5a1db5ee09ac7ddf98559a70887dfddde26b1a80eb5873806cd285cc7ea2bf46d755535caad2c030c43fbca294a8dc32a583aca1722a1b2679ae764c45a7d0e9f0687aa842e3e8dca41298a0b9ad1a9a6d593136e7a7977d29cf9a69a02c4c76e3a7d21d8a1e5af031bc9508be5edaf922aad98d6809801d13f295cbc1904aead305f8ea6c00e0f300d21c8e496c9805fdb0f7423d1386bc101c69b154b571dd795094ea675574690dea5c3fbc18f826f04b278e7a19a1f0aee34d8dbe766c681173685cbc6056a88e1662546506857072411be68a68800fa3e86e7c1bc54492c5b2b7ba618f1f6ac6595860c5d84322bdbfb71ef8618e0138b9ec18a75fdc41ba4882558db2723f921a094f9784aa07483bf0754ab0da419ebe06712330f2184a21a9c3624ea5997dfafb8540944d2ffd6549419cb0fee994a539b0ba7dadfbcf05bdc414c26b1db717726a75b34d1edf86e8123095b69b3f2706cc4a1093ddb7d0e3b85ad57e7363f50a50e8816afbfb2c615a51e5f7ec1adbde745361a284bfe5cf3d8ca97a1403895aecf60c5e3fdd9022b7800affc6c91bee7b294eefd165cc36ed3f62afd62e70c602a64f2189288ef34327b17a8bf20d3a8e0fd4194d62e190c70b4648bd098ed9f7963b3e56ebe3662b085770f790bad031699db2d146a13a760101b83697715acc9315a1c4f2ab3d30dbd4c56b6c0e5bfb3d239d103b4b0fc3e357241411f5cb113b2b19d1d3fa5b13db9179becf34f93d49b49c5c312c61360139b7a1dca4b05321338c39a14df4067ecadd23eaca4f42636702f7cb99096eb106968b14274b27dfa8653ee13bcfa3b47260c799de6065f5dbc1a72c9564f1cebe655ef0c9978f4a47fe8648d261df00de55eb55e9b188f3a7c832515e891c2d1226bc1bd78e731d2fa448086c873167a7dfe3b279c5a084d6e64ea8584875ab78e7a3d951cca81833e95d3a97031e94c6efd995c8ea662ee2b61530fa9c7d6172b1ac389715e8eceadd3be83c6f08c09b636caf9f4aab97e116115ce4cdd23bf95a71c9bd4929adf193a0924de3778987bdd8430132af8214f32b1587859486503dd345b83e1814254a9d5b62d979dd9557c2f76f838987a7933b453c5717743249f7d531996e43cf351ead5d02fbae91395b8a3b20cc1865c651ec590865958e25938d333b152aa699b0a772b801c04f17cf44f04ff277bbfa2f8763814d5626b1f2d1932df7fa9fe319e31d1abfa298f0040cf74acac04c5038b7e295d41da677c3d6416f021d40c7c5a7aa9015dd1c0bbb61558838f0cb1b635db630abf3d2b586fb34e44b53d1e5c5c5806a891b520416dae02e16b8bc01913e1e4f5de4134a43cea019d2f789eeb131a254fe63596ecc78171b694a9f6f9d11b779fba23aaf66f60a7c40a7e620f3b18f9c5ded2bb0139db83862689dc3096cc93b22ea395dec591903d8feb39e1baa18caad55f0dc3fe080464dfc2d62ad7efc29e4c026525151d15729b4c5fe7f1ebb675f6ee529daa2a562f2fbf6a08bbfe7c3040d56c7c0dcd507c3e1ca2ab8fd1989d44a6ae981a1e93e6838c7b6d50bb746ab58e45339c500117b1d918dce19e2776ceecfe57137dad067bc86fc143654531be95a3accb8bd4a7bfe5c860186bbf9049eeada529e2593d2792038935ea109512c63a71fd2bc8d67e1660a0caf1d69f52e649a4f655b9ada172589125b3a72293780b104e0727f785eb7324a639fed503c49fe903d80290d7acfcc400fbabe72108a058aa4068a3898fee77809a8e8d193722e61d0bbab01179e34c94c0a0537c6c4df89656a50409641fafda06fd7dff9ca12f3a5438f32bba4c8df1646963c20079d14c6f6693328d9595ae9edf4ea70238301e0ac7cef0adae75b53ec8d9358c966e387fbdf10e49f9732c9a35f5c9bbb3f1ad20f8499d8d4e5403082be0024783e3f49d001429d83551237d5211430b0b75a994889a912a0ccc30a60f9fb9f28b7baa2c1391436e195a971495ff1ad22b5b507d98962d1c4be725a8f218e82c48e5795c94ace7902e0e00616a2d9903422ec1022aef513db858160306ab02bd0577be283538579fa4f6c3f75ea14c23784bdfc3b3d3fc4aeeffa3d09640af6a41dd4e1ac82465e428563eaafc08b9e1c4576e03c3f7af3b452353e3a54ecb449091996b4f6fed30d640a59b6831099daebaa798371190ca7e3291bffcdcbe3340de193bf1676bcaa660a716b44f9858ed4152bd26fb3c298667b0253e997252f8a790c6cfd24d52bce98eaf03a7acf08dcf4abc06e37beb79903fc04d63985e9a78823d5d8734d76f09f590b30140100a81ebf901dfd700020d40e61b9f13a8302193be0724e6f112feb7e71c068d0b9036a6015b4350ae77d5581345d5d4874f3829a1f9d6b2d0c7dbb8be4636be97c462040d43183863fe7ec974cb20bcdf37df7fc319dcc8691a99f63e79d598001519f46b2fb100c761e85c08281d37efcf44d7b46a73b9c4ab076a6261e02f5c106abfa757efb6686d5e414f3f0ecff353c18236d9420d0fdb0f152982f73414e986e75219f1e246c1fcf34cbefbaa14adfcc1ce90bcfd04ef256c909400a05d1d44b61bccc914688ea75b53fed55739b19881bb60b08a2aa106023fb357d1943816b34a77e04c309f50a92e028013fae92326f0c10f489a9b53973d3d4cff398dd4cdbb3089428164616d5ef47502b9e157f1528c346c6c96b1ab2035c3a14cd94f2c5a8df7d19466c73c80c15192237ac9b663f36a8c4a21a4708d080e918878fc5922ea97640024cbe3e49f497e417ab90004216cf0", 0xfc0}], 0x2}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)={0x38, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 16.826084083s ago: executing program 1 (id=945): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000200900010073797a310000000014000000020a0104000000000000000007000000540000001f0a030000000000000000000300000008000340000000000900010073797a310000000009000200", @ANYRESHEX], 0xb0}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) 16.679443312s ago: executing program 1 (id=946): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0xffe4}, 0x50) 16.52654394s ago: executing program 1 (id=947): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x8000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000c40)={0x1, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0x1}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) recvfrom$phonet(r1, &(0x7f0000000b40)=""/19, 0x13, 0x40010041, &(0x7f0000000b80)={0x23, 0x5, 0xd, 0x8}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000c80)=@newtfilter={0xfffffde5, 0x2c, 0x601, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xe}, {0x5, 0xffff}, {0x6, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x0, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x400}, {0x0, 0x3c77, 0x4, 0x10000}}}, @TCF_EM_CMP={0x0, 0x2, 0x0, 0x0, {{0x7}, {0x401, 0x1, 0x8, 0x4, 0x5, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR]}]}}]}, 0x50}}, 0x0) sendmmsg$alg(r1, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d030037250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000006c0)="66f7", 0x2}, {&(0x7f0000000700)='l3', 0x2}], 0x3}], 0x4924924924925b9, 0x8001) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000980)={0x0, 0x0}, 0x8) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r7, 0x4) unshare(0x22020400) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d40)={r8, 0x20, &(0x7f0000000d80)={0x0, 0x0, 0x0, &(0x7f0000000dc0)=""/4096, 0x1000}}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)='o', 0x1}], 0x1}}], 0xa06aa2b7985d4e60, 0x640400d9) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000bc0), &(0x7f0000000c00)=0x10) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000b00)={0x1, 0x1, 0x8, r11, 0x3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x11, &(0x7f0000001dc0)=ANY=[@ANYRESHEX=r3, @ANYRES8=r10, @ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x7b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 16.329014406s ago: executing program 1 (id=948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @rand_addr=0x64010102}, 0x2}}, 0x2e) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000000000000000000001000100181208000000000095"], &(0x7f00000015c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x3, 0x2}}, 0x26) (async) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x2, 0x3, &(0x7f0000001340)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0xffffffffffffffff}, 0x94) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001400)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x7d, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000012c0)=@broute={'broute\x00', 0x20, 0x5, 0xf40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000380], 0x0, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}, 0xfb0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 16.248431684s ago: executing program 1 (id=949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="2000000011000100000000040000000000000000", @ANYRES32=r3], 0x20}}, 0x0) 16.07488662s ago: executing program 1 (id=950): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000004000), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000004040), 0x10) accept$phonet_pipe(r1, &(0x7f0000004080), &(0x7f00000040c0)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000003d40)={@empty}, 0x14) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000003d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)=ANY=[@ANYBLOB="4784ab7a", @ANYRES16=r4, @ANYBLOB="00022abd7000fbdbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4051}, 0x8800) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x30) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000003d80)={'syzkaller1\x00', 0x302}) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000004100)={@loopback={0x600}, 0x8000000, 0x1, 0xff, 0x0, 0x4}, 0x20) sendto$inet6(r6, &(0x7f00000000c0)="2ae0e710", 0x4, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000340)=0x6, 0x4) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003f80)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000003fc0)) recvmmsg(r6, &(0x7f0000003ac0)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/26, 0x1a}], 0x1, &(0x7f0000000380)=""/170, 0xaa}, 0xda}, {{&(0x7f0000000440)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f00000005c0)=""/106, 0x6a}], 0x2, &(0x7f0000000680)=""/40, 0x28}, 0x5}, {{&(0x7f00000006c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/157, 0x9d}], 0x1, &(0x7f0000000840)=""/154, 0x9a}, 0xfffffffb}, {{&(0x7f0000000900)=@caif, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000980)=""/52, 0x34}, {&(0x7f00000009c0)=""/227, 0xe3}, {&(0x7f0000000ac0)=""/12, 0xc}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/226, 0xe2}], 0x5, &(0x7f0000001c80)=""/168, 0xa8}, 0x127b}, {{0x0, 0x0, &(0x7f0000001ec0)}, 0x7ff}, {{&(0x7f0000001f00)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002380)=[{&(0x7f0000001f80)=""/94, 0x5e}, {&(0x7f0000002000)=""/145, 0x91}, {&(0x7f00000020c0)=""/193, 0xc1}, {&(0x7f00000021c0)=""/151, 0x97}, {&(0x7f0000002280)=""/213, 0xd5}], 0x5, &(0x7f0000002400)=""/170, 0xaa}, 0x5}, {{&(0x7f00000024c0)=@isdn, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003c80)=""/105, 0x69}, {&(0x7f00000025c0)=""/170, 0xaa}, {&(0x7f0000002680)=""/234, 0xea}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/180, 0xb4}, {&(0x7f0000003840)=""/28, 0x1c}, {&(0x7f0000003880)=""/18, 0x12}, {&(0x7f00000038c0)=""/66, 0x42}, {&(0x7f0000003940)=""/175, 0xaf}], 0x9}, 0x8001}], 0x7, 0x2000, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003dc0)={0x6, 0x3, &(0x7f0000003e80)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000003ec0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003f00)={r9, 0x5, 0xffffffffffffff3d, 0x0, &(0x7f0000003f80), 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) socket$igmp6(0xa, 0x3, 0x2) 2.634733163s ago: executing program 32 (id=938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79a82dbd7000ffdbdf2501000000000000000c4100000007001473797a"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x24000084) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = socket(0x2, 0x3, 0x100000001) setsockopt(r6, 0xff, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010225bd7000fddbdf250300000005000a00000000000c0006000100000000000000100007800c00018008000100", @ANYRES32=r5, @ANYBLOB="08000100000000000c00050002000000000000000c000800210c00000000000005000a00280000000c000200ff000000000000000800010000000000100007800c000180080001", @ANYRES32=r6, @ANYBLOB="6d8f16533671bc9391003359a91a0d55594d037380439f4d62a52c00fb7f4d5cc31cd2d862282fcd9a95d571568742fbc02604e748a7821d8e3d78be2280acf436c47874689d014a6dfe9c3d867f753049cadec4e8b4f974136e466b920c33a7e1ce"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x44) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x1c, r1, 0x301, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008084}, 0x8004) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x2, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x215, 0x2, [0x4, 0x8000a001, 0x7fffffff, 0xc265, 0xe3df, 0xc265, 0x2, 0x800, 0x101, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x1ff, 0x2, 0x6, 0x8918, 0x0, 0x3, 0x4, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x107a, 0x5, 0x5, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x80000001, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0x80ff, 0x1400, 0x7, 0x3, 0x7ff, 0x807fff, 0x0, 0x4, 0x0, 0x2, 0x8, 0x79, 0x0, 0x3ff8000, 0x3, 0x57, 0x8, 0x7fff, 0x4f, 0x0, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0x0, 0x2, 0xfffffffa, 0x100, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x103, 0xd4a, 0xe5ad, 0x0, 0x7ff, 0x7, 0x9, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0xffffffff, 0x5, 0x0, 0x6, 0xa0, 0x7, 0x6, 0x100, 0x100, 0x200, 0x0, 0x5, 0xffff, 0x5, 0x1, 0x2, 0x3, 0x6335, 0x2, 0x6, 0x200, 0x3, 0x48, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x4, 0x3, 0x80000001, 0x7fffffff, 0x408, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff7, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff8d, 0xfff, 0x3, 0x9, 0x5, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca41, 0x5, 0x3, 0x6, 0x0, 0x6, 0x5, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x6, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x6, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x9, 0x2, 0x2, 0x9, 0x100007, 0x40, 0x3, 0x400, 0x8, 0x2, 0x401, 0x20000006, 0x9982, 0x6, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x3f8, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x2, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x4, 0x200, 0x100000c4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0x4, 0x0, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x4000006}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) 2.558712225s ago: executing program 33 (id=941): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@security={'security\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1a0, 0xd0, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x81, 0x0, [0x26, 0x40, 0x3, 0x1c, 0x2, 0x3e, 0x3e, 0x1a, 0xa, 0xe, 0xc, 0x8, 0x1f, 0xc, 0xe, 0x10], 0x2, 0x0, 0x81}}}, {{@ip={@rand_addr=0x64010100, @remote, 0x0, 0xffffffff, 'wlan1\x00', 'gre0\x00', {0xff}, {0xff}, 0x89}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x7, 0x0, 0x0, 0x1, 0x4], 0x0, 0x1}, {0x4, [0x1, 0x6, 0x0, 0x4, 0x5, 0x1], 0x5, 0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0xffffff00, 'wg0\x00', '\x00', {}, {}, 0x11, 0x0, 0x6c}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x80, 0x430, 0x0, 0x1}}, @common=@set={{0x40}, {{0x1, [0x4, 0x4, 0x2, 0x2, 0x1, 0x1], 0x3, 0x2}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x8000, 0x995, 0x4, 0x6, 0x200, 0xe8d, 0x9]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x58}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) 1.589755495s ago: executing program 34 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x14, 0xe, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x24000041}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffc}}, 0x10) bind$tipc(r6, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x40, 0x801}}}, 0x10) bind$tipc(r6, &(0x7f0000000900)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x38, r4, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r10 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x240880c0, &(0x7f00000006c0)={0xa, 0xe20, 0x20, @mcast2}, 0x1c) sendto$inet6(r10, &(0x7f0000000700)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r10, 0x29, 0x17, &(0x7f0000000800)=0x3, 0x4) sendto$inet6(r10, 0x0, 0x60, 0x40012, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="28000e0080000000ffffffffffff080211000000080211000000000d00b3f6000000000064000100080026006c09000008000c006400000008000d00000000000a00340002020202020200000800350000000000040005017490c5157fc9d005e415878f08aac4dbd15be8a882f3c367f1880d918fe4254c25c51bff6c3fe4665ed2b5173fa7229f0acbd4"], 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x11c, r8, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x566, 0x55}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6ff0472fcc2420567d5235e139d687f5b71613ffe29cf9f9"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d06b3ddbb9f06020451f757c8b8d59fdfc6e655237d55cf8"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x4008814) socket$netlink(0x10, 0x3, 0x10) 1.482456868s ago: executing program 35 (id=943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) pselect6(0x40, &(0x7f0000001380)={0x3ffffffc, 0x80000000, 0x100000001, 0xb, 0x4, 0x2, 0x9, 0xebc}, &(0x7f00000013c0)={0x4, 0xfffffffffffff931, 0x3ff, 0x8, 0x7f, 0xfc9, 0x9, 0x6}, &(0x7f0000001440)={0x4, 0x6, 0xa92, 0xa, 0xffffffffffff0000, 0x7f, 0x5, 0x1}, &(0x7f0000001480), &(0x7f0000001500)={&(0x7f00000014c0)={[0x559]}, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'vlan1\x00', {}, 0x31fb}) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304, 0x36}, "00257059cb008000", "8b3de2aabceef22f419e59f30000000004000000000200", "07350080", "000000d900"}, 0x38) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "b398a992143a240d", "d036788c4aaf9c6ef96dda7201d2d2a5", "1a13ecde", "0597b7f1463f0f33"}, 0x28) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000001300)=@req3={0x10000, 0x10000001, 0x100, 0x100}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) r6 = accept4$bt_l2cap(r2, &(0x7f0000001540)={0x1f, 0x0, @none}, &(0x7f0000001580)=0xe, 0x80800) getsockopt$IP_SET_OP_GET_BYNAME(r6, 0x1, 0x53, &(0x7f00000015c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000001600)=0x28) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) sendmsg$sock(r3, &(0x7f0000001400)={&(0x7f0000000200)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000280)="dac5d661d71bee87919e23663a8af5a6fd924b0b55f100a36626c3c9a301440f53ef8a603a3b6de28ad47b2ebf852c1f7c", 0x31}, {&(0x7f0000000340)="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", 0xfc0}], 0x2}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)={0x38, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 0s ago: executing program 36 (id=950): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000004000), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000004040), 0x10) accept$phonet_pipe(r1, &(0x7f0000004080), &(0x7f00000040c0)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000003d40)={@empty}, 0x14) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000003d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)=ANY=[@ANYBLOB="4784ab7a", @ANYRES16=r4, @ANYBLOB="00022abd7000fbdbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4051}, 0x8800) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x30) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000003d80)={'syzkaller1\x00', 0x302}) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000004100)={@loopback={0x600}, 0x8000000, 0x1, 0xff, 0x0, 0x4}, 0x20) sendto$inet6(r6, &(0x7f00000000c0)="2ae0e710", 0x4, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000340)=0x6, 0x4) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003f80)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000003fc0)) recvmmsg(r6, &(0x7f0000003ac0)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/26, 0x1a}], 0x1, &(0x7f0000000380)=""/170, 0xaa}, 0xda}, {{&(0x7f0000000440)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f00000005c0)=""/106, 0x6a}], 0x2, &(0x7f0000000680)=""/40, 0x28}, 0x5}, {{&(0x7f00000006c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/157, 0x9d}], 0x1, &(0x7f0000000840)=""/154, 0x9a}, 0xfffffffb}, {{&(0x7f0000000900)=@caif, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000980)=""/52, 0x34}, {&(0x7f00000009c0)=""/227, 0xe3}, {&(0x7f0000000ac0)=""/12, 0xc}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/226, 0xe2}], 0x5, &(0x7f0000001c80)=""/168, 0xa8}, 0x127b}, {{0x0, 0x0, &(0x7f0000001ec0)}, 0x7ff}, {{&(0x7f0000001f00)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002380)=[{&(0x7f0000001f80)=""/94, 0x5e}, {&(0x7f0000002000)=""/145, 0x91}, {&(0x7f00000020c0)=""/193, 0xc1}, {&(0x7f00000021c0)=""/151, 0x97}, {&(0x7f0000002280)=""/213, 0xd5}], 0x5, &(0x7f0000002400)=""/170, 0xaa}, 0x5}, {{&(0x7f00000024c0)=@isdn, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003c80)=""/105, 0x69}, {&(0x7f00000025c0)=""/170, 0xaa}, {&(0x7f0000002680)=""/234, 0xea}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/180, 0xb4}, {&(0x7f0000003840)=""/28, 0x1c}, {&(0x7f0000003880)=""/18, 0x12}, {&(0x7f00000038c0)=""/66, 0x42}, {&(0x7f0000003940)=""/175, 0xaf}], 0x9}, 0x8001}], 0x7, 0x2000, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003dc0)={0x6, 0x3, &(0x7f0000003e80)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000003ec0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003f00)={r9, 0x5, 0xffffffffffffff3d, 0x0, &(0x7f0000003f80), 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) socket$igmp6(0xa, 0x3, 0x2) kernel console output (not intermixed with test programs): ab9fb19 [ 115.778771][ T6731] RDX: 0000000000000094 RSI: 0000200000001d40 RDI: 0000000000000005 [ 115.778783][ T6731] RBP: 00007fc17baae090 R08: 0000000000000000 R09: 0000000000000000 [ 115.778794][ T6731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.778805][ T6731] R13: 00007fc17ae26038 R14: 00007fc17ae25fa0 R15: 00007ffedc8c6df8 [ 115.778835][ T6731] [ 116.136244][ T6742] tipc: Invalid UDP bearer configuration [ 116.136297][ T6742] tipc: Enabling of bearer rejected, failed to enable media [ 116.142062][ T6743] syzkaller0: entered promiscuous mode [ 116.142085][ T6743] syzkaller0: entered allmulticast mode [ 116.517056][ T6759] FAULT_INJECTION: forcing a failure. [ 116.517056][ T6759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.517088][ T6759] CPU: 1 UID: 0 PID: 6759 Comm: syz.1.285 Not tainted syzkaller #0 PREEMPT(full) [ 116.517110][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 116.517121][ T6759] Call Trace: [ 116.517129][ T6759] [ 116.517138][ T6759] dump_stack_lvl+0xe8/0x150 [ 116.517177][ T6759] should_fail_ex+0x3eb/0x540 [ 116.517206][ T6759] _copy_from_iter+0x1d3/0x1680 [ 116.517227][ T6759] ? __alloc_skb+0x27a/0x7a0 [ 116.517258][ T6759] ? __alloc_skb+0x27a/0x7a0 [ 116.517288][ T6759] ? __alloc_skb+0x27a/0x7a0 [ 116.517316][ T6759] ? __pfx__copy_from_iter+0x10/0x10 [ 116.517334][ T6759] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 116.517355][ T6759] ? __alloc_skb+0x27a/0x7a0 [ 116.517384][ T6759] ? __alloc_skb+0x27a/0x7a0 [ 116.517417][ T6759] ? netlink_sendmsg+0x64f/0xb20 [ 116.517446][ T6759] ? skb_put+0x112/0x210 [ 116.517467][ T6759] netlink_sendmsg+0x6bb/0xb20 [ 116.517500][ T6759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.517533][ T6759] ? aa_sock_msg_perm+0x144/0x210 [ 116.517559][ T6759] ? apparmor_socket_sendmsg+0x98/0x360 [ 116.517590][ T6759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.517618][ T6759] sock_sendmsg_nosec+0x14e/0x190 [ 116.517646][ T6759] ____sys_sendmsg+0x54e/0x850 [ 116.517673][ T6759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.517702][ T6759] ? import_iovec+0x73/0xa0 [ 116.517730][ T6759] ___sys_sendmsg+0x2a5/0x360 [ 116.517749][ T6759] ? __lock_acquire+0x747/0x2de0 [ 116.517780][ T6759] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.517841][ T6759] ? __fget_files+0x3a2/0x420 [ 116.517863][ T6759] ? __fget_files+0x2a/0x420 [ 116.517897][ T6759] __x64_sys_sendmsg+0x1b1/0x290 [ 116.517922][ T6759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.517976][ T6759] do_syscall_64+0x166/0x520 [ 116.517999][ T6759] ? trace_irq_disable+0x3b/0x140 [ 116.518025][ T6759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.518044][ T6759] ? clear_bhb_loop+0x70/0xc0 [ 116.518069][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.518089][ T6759] RIP: 0033:0x7f8f8cf9fb19 [ 116.518109][ T6759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.518126][ T6759] RSP: 002b:00007f8f8ddfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.518149][ T6759] RAX: ffffffffffffffda RBX: 00007f8f8d225fa0 RCX: 00007f8f8cf9fb19 [ 116.518164][ T6759] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 116.518177][ T6759] RBP: 00007f8f8ddfb090 R08: 0000000000000000 R09: 0000000000000000 [ 116.518189][ T6759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.518201][ T6759] R13: 00007f8f8d226038 R14: 00007f8f8d225fa0 R15: 00007ffd6da137e8 [ 116.518234][ T6759] [ 116.644222][ T6762] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 116.705861][ T6765] netlink: 'syz.4.287': attribute type 1 has an invalid length. [ 116.779807][ T6762] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.821938][ T6767] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 116.911638][ T6771] syzkaller0: entered promiscuous mode [ 116.911665][ T6771] syzkaller0: entered allmulticast mode [ 117.100731][ T6779] x_tables: duplicate underflow at hook 4 [ 117.699580][ T6803] bond3: entered promiscuous mode [ 117.700106][ T6803] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.797010][ T6803] vlan2: entered allmulticast mode [ 117.797035][ T6803] bond3: entered allmulticast mode [ 118.134959][ T6823] netlink: 'syz.4.299': attribute type 1 has an invalid length. [ 118.170662][ T6823] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.197211][ T6820] bond2: (slave geneve2): making interface the new active one [ 118.199928][ T6820] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 118.414115][ T6827] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 118.462349][ T6829] netlink: 'syz.4.301': attribute type 1 has an invalid length. [ 118.548872][ T6833] __nla_validate_parse: 12 callbacks suppressed [ 118.548894][ T6833] netlink: 136 bytes leftover after parsing attributes in process `syz.3.303'. [ 118.576781][ T6829] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.608569][ T6831] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 118.643092][ T6829] syzkaller0: entered promiscuous mode [ 118.643118][ T6829] syzkaller0: entered allmulticast mode [ 119.075320][ T6859] netlink: 964 bytes leftover after parsing attributes in process `syz.3.310'. [ 119.075350][ T6859] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 120.277502][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 120.277525][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 120.282772][ T6887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.316'. [ 120.282812][ T6887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.316'. [ 120.357658][ T6888] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 120.357658][ T6888] Please contact the netfilter-devel mailing list or update your nftables rules. [ 120.677623][ T6894] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 120.694607][ T6894] 8021q: adding VLAN 0 to HW filter on device bond4 [ 120.706697][ T6894] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 120.714343][ T6894] syzkaller0: entered promiscuous mode [ 120.714359][ T6894] syzkaller0: entered allmulticast mode [ 120.824815][ T6897] syzkaller0: entered promiscuous mode [ 120.824832][ T6897] syzkaller0: entered allmulticast mode [ 121.788418][ T6843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.373382][ T6923] netlink: 'syz.3.329': attribute type 1 has an invalid length. [ 122.447606][ T6923] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.482508][ T6925] bond2: (slave veth0_to_bond): Releasing backup interface [ 122.509880][ T6925] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 122.567694][ T6923] syzkaller0: entered promiscuous mode [ 122.567720][ T6923] syzkaller0: entered allmulticast mode [ 122.756455][ T6941] sctp: [Deprecated]: syz.2.334 (pid 6941) Use of int in max_burst socket option. [ 122.756455][ T6941] Use struct sctp_assoc_value instead [ 122.905193][ T6948] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 123.385490][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.386255][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.525942][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.577843][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.584724][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.713052][ T6975] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 123.922161][ T6987] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 123.932288][ T6975] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.977415][ T6978] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 124.037458][ T6978] syzkaller0: entered promiscuous mode [ 124.038029][ T6978] syzkaller0: entered allmulticast mode [ 124.066952][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.067304][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.067342][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.067378][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.455439][ T7004] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 124.523809][ T7007] ip_tables: iptables: counters copy to user failed while replacing table [ 124.601069][ T7010] netlink: 'syz.3.360': attribute type 12 has an invalid length. [ 124.605509][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 124.642919][ T1170] IPVS: starting estimator thread 0... [ 124.644477][ T7010] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 124.725941][ T7016] IPVS: using max 23 ests per chain, 55200 per kthread [ 124.868187][ T7020] netlink: 276 bytes leftover after parsing attributes in process `syz.2.362'. [ 125.117881][ T7035] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 125.139171][ T7035] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.154150][ T7035] syzkaller0: entered promiscuous mode [ 125.154168][ T7035] syzkaller0: entered allmulticast mode [ 125.296693][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 125.732923][ T7046] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 127.337557][ T6999] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.566475][ T7058] FAULT_INJECTION: forcing a failure. [ 127.566475][ T7058] name failslab, interval 1, probability 0, space 0, times 0 [ 127.566510][ T7058] CPU: 0 UID: 0 PID: 7058 Comm: syz.3.376 Not tainted syzkaller #0 PREEMPT(full) [ 127.566532][ T7058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 127.566544][ T7058] Call Trace: [ 127.566552][ T7058] [ 127.566561][ T7058] dump_stack_lvl+0xe8/0x150 [ 127.566601][ T7058] should_fail_ex+0x3eb/0x540 [ 127.566632][ T7058] should_failslab+0xa8/0x100 [ 127.566664][ T7058] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 127.566690][ T7058] ? __kasan_kmalloc+0x93/0xb0 [ 127.566718][ T7058] ? __request_module+0x2ec/0x630 [ 127.566736][ T7058] ? __request_module+0x2ec/0x630 [ 127.566757][ T7058] ? __kmalloc_cache_noprof+0x148/0x600 [ 127.566786][ T7058] kstrdup+0x42/0x100 [ 127.566811][ T7058] __request_module+0x2ec/0x630 [ 127.566832][ T7058] ? trace_kmem_cache_alloc+0x29/0xe0 [ 127.566854][ T7058] ? __sock_create+0x321/0xac0 [ 127.566881][ T7058] ? __pfx___request_module+0x10/0x10 [ 127.566899][ T7058] ? make_kgid+0x1d1/0x6a0 [ 127.566926][ T7058] ? security_inode_alloc+0x39/0x310 [ 127.566955][ T7058] ? lock_acquire+0x115/0x350 [ 127.566993][ T7058] pppox_create+0x9d/0x1b0 [ 127.567027][ T7058] __sock_create+0x4b5/0xac0 [ 127.567063][ T7058] __sys_socket+0xd6/0x1b0 [ 127.567096][ T7058] __x64_sys_socket+0x7a/0x90 [ 127.567126][ T7058] do_syscall_64+0x166/0x520 [ 127.567149][ T7058] ? trace_irq_disable+0x3b/0x140 [ 127.567176][ T7058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.567197][ T7058] ? clear_bhb_loop+0x70/0xc0 [ 127.567222][ T7058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.567243][ T7058] RIP: 0033:0x7f47f819fb19 [ 127.567263][ T7058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.567280][ T7058] RSP: 002b:00007f47f9018028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 127.567304][ T7058] RAX: ffffffffffffffda RBX: 00007f47f8425fa0 RCX: 00007f47f819fb19 [ 127.567319][ T7058] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000018 [ 127.567331][ T7058] RBP: 00007f47f9018090 R08: 0000000000000000 R09: 0000000000000000 [ 127.567344][ T7058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.567355][ T7058] R13: 00007f47f8426038 R14: 00007f47f8425fa0 R15: 00007fff4ec67998 [ 127.567399][ T7058] [ 127.649723][ T7056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.375'. [ 127.649756][ T7056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.375'. [ 127.679429][ T7060] netlink: 152 bytes leftover after parsing attributes in process `syz.0.373'. [ 127.810885][ T7063] netlink: 19 bytes leftover after parsing attributes in process `syz.4.375'. [ 127.810909][ T7063] tipc: Invalid UDP bearer configuration [ 127.810956][ T7063] tipc: Enabling of bearer rejected, failed to enable media [ 127.889086][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 127.913148][ T7068] FAULT_INJECTION: forcing a failure. [ 127.913148][ T7068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.913181][ T7068] CPU: 0 UID: 0 PID: 7068 Comm: syz.1.377 Not tainted syzkaller #0 PREEMPT(full) [ 127.913204][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 127.913216][ T7068] Call Trace: [ 127.913224][ T7068] [ 127.913232][ T7068] dump_stack_lvl+0xe8/0x150 [ 127.913272][ T7068] should_fail_ex+0x3eb/0x540 [ 127.913304][ T7068] _copy_from_user+0x2d/0xb0 [ 127.913330][ T7068] map_update_elem+0x573/0xa80 [ 127.913363][ T7068] __sys_bpf+0x9f4/0xe00 [ 127.913402][ T7068] ? __pfx___sys_bpf+0x10/0x10 [ 127.913436][ T7068] ? __fget_files+0x2a/0x420 [ 127.913492][ T7068] ? ksys_write+0x242/0x270 [ 127.913522][ T7068] ? __pfx_ksys_write+0x10/0x10 [ 127.913555][ T7068] __x64_sys_bpf+0xba/0xd0 [ 127.913589][ T7068] do_syscall_64+0x166/0x520 [ 127.913613][ T7068] ? trace_irq_disable+0x3b/0x140 [ 127.913640][ T7068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.913662][ T7068] ? clear_bhb_loop+0x70/0xc0 [ 127.913688][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.913709][ T7068] RIP: 0033:0x7f8f8cf9fb19 [ 127.913729][ T7068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.913745][ T7068] RSP: 002b:00007f8f8ddfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.913768][ T7068] RAX: ffffffffffffffda RBX: 00007f8f8d225fa0 RCX: 00007f8f8cf9fb19 [ 127.913783][ T7068] RDX: 0000000000000020 RSI: 0000200000000680 RDI: 0000000000000002 [ 127.913796][ T7068] RBP: 00007f8f8ddfb090 R08: 0000000000000000 R09: 0000000000000000 [ 127.913808][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.913820][ T7068] R13: 00007f8f8d226038 R14: 00007f8f8d225fa0 R15: 00007ffd6da137e8 [ 127.913855][ T7068] [ 128.075221][ T7070] netlink: 'syz.4.379': attribute type 1 has an invalid length. [ 128.204943][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 128.208932][ T7070] 8021q: adding VLAN 0 to HW filter on device bond4 [ 128.214682][ T7073] netlink: 'syz.0.380': attribute type 12 has an invalid length. [ 128.271838][ T13] IPVS: starting estimator thread 0... [ 128.273033][ T7073] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 128.355758][ T7084] IPVS: using max 27 ests per chain, 64800 per kthread [ 128.773962][ T7081] syzkaller0: entered promiscuous mode [ 128.773991][ T7081] syzkaller0: entered allmulticast mode [ 128.851508][ T7093] syzkaller0: entered promiscuous mode [ 128.851536][ T7093] syzkaller0: entered allmulticast mode [ 129.158353][ T7113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.389'. [ 129.201701][ T7116] netlink: 'syz.1.388': attribute type 1 has an invalid length. [ 129.201728][ T7116] netlink: 'syz.1.388': attribute type 1 has an invalid length. [ 129.217132][ T7119] tipc: Invalid UDP bearer configuration [ 129.217180][ T7119] tipc: Enabling of bearer rejected, failed to enable media [ 129.308168][ T7121] pimreg0: tun_chr_ioctl cmd 1074025677 [ 129.308262][ T7121] pimreg0: linktype set to 768 [ 129.353978][ T7123] pimreg0: tun_chr_ioctl cmd 1074818688 [ 129.357170][ T7122] pimreg0: tun_chr_ioctl cmd 1074025677 [ 129.357279][ T7122] pimreg0: linktype set to 768 [ 129.357913][ T7121] pimreg0: tun_chr_ioctl cmd 1074025673 [ 129.461734][ T7131] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 129.742161][ T7143] __nla_validate_parse: 2 callbacks suppressed [ 129.742183][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 129.774365][ T7143] Bluetooth: MGMT ver 1.23 [ 129.792553][ T7143] ip_tables: iptables: counters copy to user failed while replacing table [ 130.277422][ T7158] netlink: 'syz.3.403': attribute type 1 has an invalid length. [ 130.277451][ T7158] netlink: 'syz.3.403': attribute type 1 has an invalid length. [ 130.443543][ T7165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.404'. [ 130.443581][ T7165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.404'. [ 130.508528][ T7169] netlink: 19 bytes leftover after parsing attributes in process `syz.0.404'. [ 130.508552][ T7169] tipc: Invalid UDP bearer configuration [ 130.508602][ T7169] tipc: Enabling of bearer rejected, failed to enable media [ 130.564476][ T7167] Bluetooth: hci0: unsupported parameter 5135 [ 130.564504][ T7167] Bluetooth: hci0: unsupported parameter 8192 [ 130.564517][ T7167] Bluetooth: hci0: unsupported parameter 5135 [ 130.564529][ T7167] Bluetooth: hci0: unsupported parameter 8192 [ 130.568314][ T7167] Cannot find del_set index 4 as target [ 130.753993][ T7178] netlink: 'syz.0.408': attribute type 8 has an invalid length. [ 130.884800][ T7173] netlink: 32 bytes leftover after parsing attributes in process `syz.0.408'. [ 130.885028][ T7173] netlink: 32 bytes leftover after parsing attributes in process `syz.0.408'. [ 130.915490][ T7186] ip_tables: iptables: counters copy to user failed while replacing table [ 131.320742][ T7199] netlink: 964 bytes leftover after parsing attributes in process `syz.4.417'. [ 131.320761][ T7199] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 131.380219][ T7201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.418'. [ 131.380246][ T7201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.418'. [ 131.606734][ T5765] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 132.006157][ T5765] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 132.481626][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 132.481921][ T7212] FAULT_INJECTION: forcing a failure. [ 132.481921][ T7212] name failslab, interval 1, probability 0, space 0, times 0 [ 132.481939][ T7212] CPU: 0 UID: 0 PID: 7212 Comm: syz.3.422 Not tainted syzkaller #0 PREEMPT(full) [ 132.481954][ T7212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 132.481961][ T7212] Call Trace: [ 132.481966][ T7212] [ 132.481972][ T7212] dump_stack_lvl+0xe8/0x150 [ 132.481997][ T7212] should_fail_ex+0x3eb/0x540 [ 132.482016][ T7212] should_failslab+0xa8/0x100 [ 132.482036][ T7212] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 132.482051][ T7212] ? __kasan_kmalloc+0x93/0xb0 [ 132.482068][ T7212] ? __request_module+0x2ec/0x630 [ 132.482079][ T7212] ? __request_module+0x2ec/0x630 [ 132.482090][ T7212] ? __kmalloc_cache_noprof+0x148/0x600 [ 132.482107][ T7212] kstrdup+0x42/0x100 [ 132.482121][ T7212] __request_module+0x2ec/0x630 [ 132.482136][ T7212] ? __pfx___request_module+0x10/0x10 [ 132.482147][ T7212] ? __up_read+0x29c/0x930 [ 132.482171][ T7212] ? crypto_alg_lookup+0x3d3/0x450 [ 132.482196][ T7212] crypto_alg_mod_lookup+0xa2/0x5d0 [ 132.482217][ T7212] crypto_add_alg+0x22d/0x3a0 [ 132.482231][ T7212] crypto_user_rcv_msg+0x497/0x600 [ 132.482259][ T7212] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 132.482282][ T7212] ? __mutex_trylock_common+0x15f/0x270 [ 132.482303][ T7212] ? __pfx___mutex_trylock_common+0x10/0x10 [ 132.482323][ T7212] ? rcu_is_watching+0x16/0xb0 [ 132.482341][ T7212] ? trace_contention_end+0x3d/0x140 [ 132.482364][ T7212] netlink_rcv_skb+0x226/0x4a0 [ 132.482387][ T7212] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 132.482407][ T7212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.482432][ T7212] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.482449][ T7212] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.482469][ T7212] crypto_netlink_rcv+0x2a/0x40 [ 132.482480][ T7212] netlink_unicast+0x8ef/0xa80 [ 132.482513][ T7212] netlink_sendmsg+0x7f0/0xb20 [ 132.482534][ T7212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.482554][ T7212] ? aa_sock_msg_perm+0x144/0x210 [ 132.482575][ T7212] ? apparmor_socket_sendmsg+0x98/0x360 [ 132.482598][ T7212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.482615][ T7212] sock_sendmsg_nosec+0x14e/0x190 [ 132.482634][ T7212] ____sys_sendmsg+0x54e/0x850 [ 132.482651][ T7212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.482670][ T7212] ? import_iovec+0x73/0xa0 [ 132.482687][ T7212] ___sys_sendmsg+0x2a5/0x360 [ 132.482699][ T7212] ? __lock_acquire+0x747/0x2de0 [ 132.482717][ T7212] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.482757][ T7212] ? __fget_files+0x3a2/0x420 [ 132.482772][ T7212] ? __fget_files+0x2a/0x420 [ 132.482792][ T7212] __x64_sys_sendmsg+0x1b1/0x290 [ 132.482807][ T7212] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.482834][ T7212] do_syscall_64+0x166/0x520 [ 132.482848][ T7212] ? trace_irq_disable+0x3b/0x140 [ 132.482865][ T7212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.482877][ T7212] ? clear_bhb_loop+0x70/0xc0 [ 132.482892][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.482904][ T7212] RIP: 0033:0x7f47f819fb19 [ 132.482917][ T7212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.482927][ T7212] RSP: 002b:00007f47f9018028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.482943][ T7212] RAX: ffffffffffffffda RBX: 00007f47f8425fa0 RCX: 00007f47f819fb19 [ 132.482952][ T7212] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 132.482959][ T7212] RBP: 00007f47f9018090 R08: 0000000000000000 R09: 0000000000000000 [ 132.482967][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.482974][ T7212] R13: 00007f47f8426038 R14: 00007f47f8425fa0 R15: 00007fff4ec67998 [ 132.482993][ T7212] [ 133.126787][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.953975][ T7188] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.178056][ T7231] FAULT_INJECTION: forcing a failure. [ 134.178056][ T7231] name failslab, interval 1, probability 0, space 0, times 0 [ 134.178088][ T7231] CPU: 1 UID: 0 PID: 7231 Comm: syz.1.427 Not tainted syzkaller #0 PREEMPT(full) [ 134.178112][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 134.178124][ T7231] Call Trace: [ 134.178132][ T7231] [ 134.178140][ T7231] dump_stack_lvl+0xe8/0x150 [ 134.178178][ T7231] should_fail_ex+0x3eb/0x540 [ 134.178209][ T7231] should_failslab+0xa8/0x100 [ 134.178240][ T7231] __kvmalloc_node_noprof+0x171/0x820 [ 134.178268][ T7231] ? bpf_compute_idoms+0x307/0x1940 [ 134.178287][ T7231] ? bpf_compute_idoms+0x307/0x1940 [ 134.178315][ T7231] bpf_compute_idoms+0x307/0x1940 [ 134.178346][ T7231] ? __pfx_bpf_compute_subprog_ret_regs+0x10/0x10 [ 134.178370][ T7231] ? prepare_subprog_args+0x40f/0x450 [ 134.178409][ T7231] bpf_check+0x2cc3/0x34e0 [ 134.178444][ T7231] ? ktime_get_with_offset+0x93/0x2d0 [ 134.178473][ T7231] ? ktime_get_with_offset+0x93/0x2d0 [ 134.178502][ T7231] ? __pfx_bpf_check+0x10/0x10 [ 134.178526][ T7231] ? bpf_obj_name_cpy+0x194/0x1e0 [ 134.178556][ T7231] bpf_prog_load+0x14da/0x1c60 [ 134.178591][ T7231] ? __pfx_bpf_prog_load+0x10/0x10 [ 134.178629][ T7231] ? __might_fault+0xaf/0x130 [ 134.178656][ T7231] __sys_bpf+0xd86/0xe00 [ 134.178687][ T7231] ? __pfx___sys_bpf+0x10/0x10 [ 134.178718][ T7231] ? __fget_files+0x2a/0x420 [ 134.178764][ T7231] ? ksys_write+0x242/0x270 [ 134.178793][ T7231] ? __pfx_ksys_write+0x10/0x10 [ 134.178825][ T7231] __x64_sys_bpf+0xba/0xd0 [ 134.178858][ T7231] do_syscall_64+0x166/0x520 [ 134.178880][ T7231] ? trace_irq_disable+0x3b/0x140 [ 134.178905][ T7231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.178926][ T7231] ? clear_bhb_loop+0x70/0xc0 [ 134.178952][ T7231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.178972][ T7231] RIP: 0033:0x7f8f8cf9fb19 [ 134.178994][ T7231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.179010][ T7231] RSP: 002b:00007f8f8ddfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.179034][ T7231] RAX: ffffffffffffffda RBX: 00007f8f8d225fa0 RCX: 00007f8f8cf9fb19 [ 134.179049][ T7231] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 134.179061][ T7231] RBP: 00007f8f8ddfb090 R08: 0000000000000000 R09: 0000000000000000 [ 134.179074][ T7231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.179086][ T7231] R13: 00007f8f8d226038 R14: 00007f8f8d225fa0 R15: 00007ffd6da137e8 [ 134.179119][ T7231] [ 134.543361][ T7248] netlink: 'syz.4.434': attribute type 13 has an invalid length. [ 134.543388][ T7248] netlink: 'syz.4.434': attribute type 12 has an invalid length. [ 134.994699][ T7270] syzkaller0: entered promiscuous mode [ 134.994720][ T7270] syzkaller0: entered allmulticast mode [ 137.610751][ T7250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.826382][ T7284] syzkaller0: entered promiscuous mode [ 137.826408][ T7284] syzkaller0: entered allmulticast mode [ 138.245860][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 138.442545][ T7321] netlink: 'syz.1.462': attribute type 1 has an invalid length. [ 138.500945][ T7321] bond5: (slave geneve2): making interface the new active one [ 138.501670][ T7321] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 138.514383][ T64] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.514431][ T64] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.514466][ T64] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.514500][ T64] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.516557][ T7325] __nla_validate_parse: 6 callbacks suppressed [ 138.516573][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.463'. [ 138.516598][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.463'. [ 138.584534][ T7326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.462'. [ 138.786841][ T7329] Cannot find set identified by id 0 to match [ 138.788810][ T7329] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 138.828563][ T7331] netlink: 'syz.0.465': attribute type 2 has an invalid length. [ 138.899682][ T7333] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 139.052390][ T7336] syzkaller0: entered promiscuous mode [ 139.052417][ T7336] syzkaller0: entered allmulticast mode [ 139.562948][ T7343] syzkaller0: entered promiscuous mode [ 139.562973][ T7343] syzkaller0: entered allmulticast mode [ 141.386877][ T7315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.683793][ T7367] syzkaller0: entered promiscuous mode [ 141.683819][ T7367] syzkaller0: entered allmulticast mode [ 141.766625][ T7372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.836085][ T5830] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 141.880267][ T7372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 142.054454][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 142.143594][ T7386] nbd0: detected capacity change from 0 to 63 [ 142.156046][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.197584][ T7378] xt_TCPMSS: Only works on TCP SYN packets [ 142.202621][ T54] block nbd0: Receive control failed (result -104) [ 142.398784][ T5828] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 142.500971][ T7401] netlink: 'syz.2.493': attribute type 1 has an invalid length. [ 142.610474][ T7401] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.631322][ T7400] syzkaller0: entered promiscuous mode [ 142.631347][ T7400] syzkaller0: entered allmulticast mode [ 142.673749][ T7404] syzkaller0: entered promiscuous mode [ 142.673775][ T7404] syzkaller0: entered allmulticast mode [ 142.874569][ T7414] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 143.006042][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.498'. [ 143.154930][ T7419] bond5: entered promiscuous mode [ 143.155484][ T7419] 8021q: adding VLAN 0 to HW filter on device bond5 [ 143.194174][ T7424] vlan2: entered allmulticast mode [ 143.194199][ T7424] bond5: entered allmulticast mode [ 143.195572][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.501'. [ 143.195965][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.501'. [ 143.345227][ T7430] netlink: 19 bytes leftover after parsing attributes in process `syz.0.501'. [ 143.345252][ T7430] tipc: Invalid UDP bearer configuration [ 143.345299][ T7430] tipc: Enabling of bearer rejected, failed to enable media [ 143.424877][ T7434] syzkaller0: entered promiscuous mode [ 143.424900][ T7434] syzkaller0: entered allmulticast mode [ 143.702374][ T7442] syzkaller0: entered promiscuous mode [ 143.702401][ T7442] syzkaller0: entered allmulticast mode [ 144.086374][ T7449] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 144.129058][ T7453] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 144.259394][ T7455] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 144.323620][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.323742][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.690662][ T7471] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 144.969488][ T7476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.518'. [ 145.033067][ T7486] syzkaller0: entered promiscuous mode [ 145.033176][ T7486] syzkaller0: entered allmulticast mode [ 145.199935][ T7491] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 145.399470][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.528'. [ 145.399510][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.528'. [ 145.500838][ T7499] syzkaller0: entered promiscuous mode [ 145.500867][ T7499] syzkaller0: entered allmulticast mode [ 145.504049][ T7505] netlink: 19 bytes leftover after parsing attributes in process `syz.2.528'. [ 145.504087][ T7505] tipc: Invalid UDP bearer configuration [ 145.504130][ T7505] tipc: Enabling of bearer rejected, failed to enable media [ 146.081358][ T7522] netlink: 32 bytes leftover after parsing attributes in process `syz.3.534'. [ 147.458797][ T7535] vlan3: entered allmulticast mode [ 147.458822][ T7535] bond0: entered allmulticast mode [ 147.458836][ T7535] bond_slave_0: entered allmulticast mode [ 147.458853][ T7535] bond_slave_1: entered allmulticast mode [ 147.547229][ T7528] rxe_eth0 speed is unknown, defaulting to 1000 [ 147.689391][ T7549] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 147.758468][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 147.815368][ T7552] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 147.840095][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 147.865530][ T7549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.884685][ T7549] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.184186][ T7567] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 148.205252][ T54] Bluetooth: hci3: link tx timeout [ 148.205274][ T54] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 148.210036][ T54] Bluetooth: hci3: link tx timeout [ 148.210056][ T54] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.210224][ T54] Bluetooth: hci3: link tx timeout [ 148.210235][ T54] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 148.210249][ T54] Bluetooth: hci3: link tx timeout [ 148.210257][ T54] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.294022][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 148.299471][ T7568] netlink: 27 bytes leftover after parsing attributes in process `syz.1.544'. [ 148.598987][ T7592] Bluetooth: hci0: unsupported parameter 5135 [ 148.599015][ T7592] Bluetooth: hci0: unsupported parameter 8192 [ 148.599061][ T7592] Bluetooth: hci0: unsupported parameter 5135 [ 148.599075][ T7592] Bluetooth: hci0: unsupported parameter 8192 [ 148.634922][ T7592] Cannot find del_set index 4 as target [ 149.064649][ T7602] netlink: 256 bytes leftover after parsing attributes in process `syz.4.555'. [ 149.378128][ T7607] syzkaller0: entered promiscuous mode [ 149.378154][ T7607] syzkaller0: entered allmulticast mode [ 149.964780][ T7621] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 150.023223][ T7625] __nla_validate_parse: 1 callbacks suppressed [ 150.023246][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 150.047405][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 150.129391][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.562'. [ 150.249286][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 150.276984][ T7642] netlink: 'syz.4.568': attribute type 12 has an invalid length. [ 150.277987][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'. [ 150.282901][ T491] IPVS: starting estimator thread 0... [ 150.361329][ T7640] netlink: 'syz.0.566': attribute type 1 has an invalid length. [ 150.376320][ T7648] IPVS: using max 25 ests per chain, 60000 per kthread [ 150.496146][ T7647] syzkaller0: entered promiscuous mode [ 150.496172][ T7647] syzkaller0: entered allmulticast mode [ 150.603321][ T7662] ip_tables: iptables: counters copy to user failed while replacing table [ 150.645584][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.573'. [ 150.768954][ T7664] macvlan2: entered promiscuous mode [ 150.768979][ T7664] macvlan2: entered allmulticast mode [ 150.771393][ T7664] bond4: entered promiscuous mode [ 150.773466][ T7664] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 150.800487][ T7664] bond4: left promiscuous mode [ 150.831485][ T7671] batadv1: entered promiscuous mode [ 150.832405][ T7671] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 150.841514][ T7669] syzkaller0: entered promiscuous mode [ 150.841534][ T7669] syzkaller0: entered allmulticast mode [ 150.953476][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.539110][ T7703] syzkaller0: entered promiscuous mode [ 151.539136][ T7703] syzkaller0: entered allmulticast mode [ 151.743915][ T7713] netlink: 'syz.4.593': attribute type 12 has an invalid length. [ 151.754801][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 151.765473][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 151.781101][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'. [ 152.094418][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 152.111727][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 152.327377][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 152.370801][ T7744] FAULT_INJECTION: forcing a failure. [ 152.370801][ T7744] name failslab, interval 1, probability 0, space 0, times 0 [ 152.370833][ T7744] CPU: 0 UID: 0 PID: 7744 Comm: syz.3.605 Not tainted syzkaller #0 PREEMPT(full) [ 152.370856][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 152.370869][ T7744] Call Trace: [ 152.370877][ T7744] [ 152.370886][ T7744] dump_stack_lvl+0xe8/0x150 [ 152.370925][ T7744] should_fail_ex+0x3eb/0x540 [ 152.370958][ T7744] should_failslab+0xa8/0x100 [ 152.370991][ T7744] __kmalloc_noprof+0xf9/0x710 [ 152.371017][ T7744] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 152.371042][ T7744] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 152.371076][ T7744] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 152.371111][ T7744] genl_family_rcv_msg_doit+0xda/0x340 [ 152.371151][ T7744] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 152.371182][ T7744] ? apparmor_capable+0x126/0x170 [ 152.371211][ T7744] ? bpf_lsm_capable+0x9/0x20 [ 152.371230][ T7744] ? security_capable+0x7e/0x2c0 [ 152.371266][ T7744] genl_rcv_msg+0x614/0x7a0 [ 152.371298][ T7744] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.371317][ T7744] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 152.371337][ T7744] ? __pfx_nl80211_set_multicast_to_unicast+0x10/0x10 [ 152.371358][ T7744] ? __pfx_nl80211_post_doit+0x10/0x10 [ 152.371384][ T7744] ? __asan_memcpy+0x40/0x70 [ 152.371415][ T7744] netlink_rcv_skb+0x226/0x4a0 [ 152.371443][ T7744] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.371466][ T7744] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.371515][ T7744] ? down_read+0x2b9/0x320 [ 152.371545][ T7744] genl_rcv+0x28/0x40 [ 152.371564][ T7744] netlink_unicast+0x8ef/0xa80 [ 152.371608][ T7744] netlink_sendmsg+0x7f0/0xb20 [ 152.371643][ T7744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.371675][ T7744] ? aa_sock_msg_perm+0x144/0x210 [ 152.371699][ T7744] ? apparmor_socket_sendmsg+0x18b/0x360 [ 152.371729][ T7744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.371755][ T7744] sock_sendmsg_nosec+0x14e/0x190 [ 152.371785][ T7744] ____sys_sendmsg+0x54e/0x850 [ 152.371812][ T7744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.371843][ T7744] ? import_iovec+0x73/0xa0 [ 152.371872][ T7744] ___sys_sendmsg+0x2a5/0x360 [ 152.371892][ T7744] ? __lock_acquire+0x747/0x2de0 [ 152.371924][ T7744] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.371990][ T7744] ? __fget_files+0x3a2/0x420 [ 152.372014][ T7744] ? __fget_files+0x2a/0x420 [ 152.372049][ T7744] __x64_sys_sendmsg+0x1b1/0x290 [ 152.372074][ T7744] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.372122][ T7744] do_syscall_64+0x166/0x520 [ 152.372152][ T7744] ? trace_irq_disable+0x3b/0x140 [ 152.372180][ T7744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.372202][ T7744] ? clear_bhb_loop+0x70/0xc0 [ 152.372228][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.372249][ T7744] RIP: 0033:0x7f47f819fb19 [ 152.372270][ T7744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.372287][ T7744] RSP: 002b:00007f47f9018028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.372311][ T7744] RAX: ffffffffffffffda RBX: 00007f47f8425fa0 RCX: 00007f47f819fb19 [ 152.372326][ T7744] RDX: 0000000020000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 152.372339][ T7744] RBP: 00007f47f9018090 R08: 0000000000000000 R09: 0000000000000000 [ 152.372351][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.372363][ T7744] R13: 00007f47f8426038 R14: 00007f47f8425fa0 R15: 00007fff4ec67998 [ 152.372399][ T7744] [ 152.768599][ T7754] netlink: 'syz.2.607': attribute type 12 has an invalid length. [ 153.093451][ T7771] syz_tun: entered allmulticast mode [ 153.132873][ T7777] sctp: [Deprecated]: syz.2.616 (pid 7777) Use of int in maxseg socket option. [ 153.132873][ T7777] Use struct sctp_assoc_value instead [ 153.179715][ T7771] pimreg: entered allmulticast mode [ 153.320089][ T7779] syzkaller0: entered promiscuous mode [ 153.320114][ T7779] syzkaller0: entered allmulticast mode [ 153.699351][ T7788] netlink: 'syz.2.623': attribute type 12 has an invalid length. [ 153.701643][ T7795] hsr0: entered allmulticast mode [ 153.701676][ T7795] hsr_slave_0: entered allmulticast mode [ 153.701694][ T7795] hsr_slave_1: entered allmulticast mode [ 154.474317][ T7786] hsr0: left allmulticast mode [ 154.474343][ T7786] hsr_slave_0: left allmulticast mode [ 154.474394][ T7786] hsr_slave_1: left allmulticast mode [ 154.578488][ T7825] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 154.908716][ T7833] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.912285][ T7833] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.974162][ T7833] bond5: left promiscuous mode [ 155.037767][ T7839] ipip0: entered allmulticast mode [ 155.055956][ T7840] netlink: 'syz.0.639': attribute type 12 has an invalid length. [ 155.057099][ T7840] __nla_validate_parse: 7 callbacks suppressed [ 155.057116][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'. [ 155.261550][ T7851] netlink: 'syz.1.643': attribute type 11 has an invalid length. [ 155.432065][ T7859] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 155.814369][ T7873] netlink: 'syz.0.652': attribute type 12 has an invalid length. [ 155.815036][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 155.912817][ T7880] FAULT_INJECTION: forcing a failure. [ 155.912817][ T7880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.912836][ T7880] CPU: 0 UID: 0 PID: 7880 Comm: syz.0.653 Not tainted syzkaller #0 PREEMPT(full) [ 155.912860][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 155.912866][ T7880] Call Trace: [ 155.912870][ T7880] [ 155.912874][ T7880] dump_stack_lvl+0xe8/0x150 [ 155.912895][ T7880] should_fail_ex+0x3eb/0x540 [ 155.912910][ T7880] _copy_to_user+0x31/0xb0 [ 155.912924][ T7880] bpf_verifier_vlog+0x496/0x900 [ 155.912940][ T7880] verbose+0x11d/0x1a0 [ 155.912953][ T7880] ? rcu_is_watching+0x16/0xb0 [ 155.912969][ T7880] ? __pfx_verbose+0x10/0x10 [ 155.912981][ T7880] ? sort_subprogs_topo+0xf4/0x1130 [ 155.912996][ T7880] ? __kvmalloc_node_noprof+0x340/0x820 [ 155.913010][ T7880] ? sort_subprogs_topo+0xf4/0x1130 [ 155.913023][ T7880] sort_subprogs_topo+0xfbf/0x1130 [ 155.913043][ T7880] bpf_check+0x2c4c/0x34e0 [ 155.913058][ T7880] ? ktime_get_with_offset+0x93/0x2d0 [ 155.913071][ T7880] ? ktime_get_with_offset+0x93/0x2d0 [ 155.913084][ T7880] ? __pfx_bpf_check+0x10/0x10 [ 155.913095][ T7880] ? bpf_obj_name_cpy+0x194/0x1e0 [ 155.913109][ T7880] bpf_prog_load+0x14da/0x1c60 [ 155.913124][ T7880] ? __pfx_bpf_prog_load+0x10/0x10 [ 155.913141][ T7880] ? __might_fault+0xaf/0x130 [ 155.913159][ T7880] __sys_bpf+0xd86/0xe00 [ 155.913172][ T7880] ? __pfx___sys_bpf+0x10/0x10 [ 155.913186][ T7880] ? __fget_files+0x2a/0x420 [ 155.913206][ T7880] ? ksys_write+0x242/0x270 [ 155.913219][ T7880] ? __pfx_ksys_write+0x10/0x10 [ 155.913234][ T7880] __x64_sys_bpf+0xba/0xd0 [ 155.913249][ T7880] do_syscall_64+0x166/0x520 [ 155.913261][ T7880] ? trace_irq_disable+0x3b/0x140 [ 155.913274][ T7880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.913284][ T7880] ? clear_bhb_loop+0x70/0xc0 [ 155.913295][ T7880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.913304][ T7880] RIP: 0033:0x7fc17ab9fb19 [ 155.913314][ T7880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.913322][ T7880] RSP: 002b:00007fc17baae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.913334][ T7880] RAX: ffffffffffffffda RBX: 00007fc17ae25fa0 RCX: 00007fc17ab9fb19 [ 155.913341][ T7880] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 155.913351][ T7880] RBP: 00007fc17baae090 R08: 0000000000000000 R09: 0000000000000000 [ 155.913360][ T7880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.913369][ T7880] R13: 00007fc17ae26038 R14: 00007fc17ae25fa0 R15: 00007ffedc8c6df8 [ 155.913395][ T7880] [ 156.203717][ T7884] pimreg: entered allmulticast mode [ 156.321827][ T7888] pimreg: left allmulticast mode [ 156.407213][ T7895] Cannot find add_set index 0 as target [ 156.470542][ T7898] raw_sendmsg: syz.4.662 forgot to set AF_INET. Fix it! [ 156.563100][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 156.655175][ T7908] FAULT_INJECTION: forcing a failure. [ 156.655175][ T7908] name failslab, interval 1, probability 0, space 0, times 0 [ 156.655207][ T7908] CPU: 0 UID: 0 PID: 7908 Comm: syz.1.663 Not tainted syzkaller #0 PREEMPT(full) [ 156.655229][ T7908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 156.655241][ T7908] Call Trace: [ 156.655249][ T7908] [ 156.655257][ T7908] dump_stack_lvl+0xe8/0x150 [ 156.655307][ T7908] should_fail_ex+0x3eb/0x540 [ 156.655336][ T7908] should_failslab+0xa8/0x100 [ 156.655365][ T7908] ? skb_clone+0x212/0x3a0 [ 156.655387][ T7908] kmem_cache_alloc_noprof+0x9c/0x600 [ 156.655412][ T7908] ? skb_clone+0x212/0x3a0 [ 156.655441][ T7908] skb_clone+0x212/0x3a0 [ 156.655466][ T7908] __netlink_deliver_tap+0x355/0x6e0 [ 156.655515][ T7908] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.655547][ T7908] netlink_deliver_tap+0x19c/0x1b0 [ 156.655579][ T7908] netlink_sendskb+0x68/0x140 [ 156.655607][ T7908] netlink_rcv_skb+0x2a4/0x4a0 [ 156.655636][ T7908] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.655660][ T7908] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.655701][ T7908] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.655728][ T7908] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.655760][ T7908] netlink_unicast+0x8ef/0xa80 [ 156.655805][ T7908] netlink_sendmsg+0x7f0/0xb20 [ 156.655842][ T7908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.655876][ T7908] ? aa_sock_msg_perm+0x144/0x210 [ 156.655902][ T7908] ? apparmor_socket_sendmsg+0x98/0x360 [ 156.655934][ T7908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.655962][ T7908] sock_sendmsg_nosec+0x14e/0x190 [ 156.655994][ T7908] ____sys_sendmsg+0x54e/0x850 [ 156.656022][ T7908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.656054][ T7908] ? import_iovec+0x73/0xa0 [ 156.656085][ T7908] ___sys_sendmsg+0x2a5/0x360 [ 156.656105][ T7908] ? __lock_acquire+0x747/0x2de0 [ 156.656137][ T7908] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.656157][ T7908] ? __lock_acquire+0x747/0x2de0 [ 156.656187][ T7908] ? kstrtouint+0x6e/0xe0 [ 156.656264][ T7908] __sys_sendmmsg+0x273/0x4e0 [ 156.656293][ T7908] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.656335][ T7908] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.656377][ T7908] ? ksys_write+0x242/0x270 [ 156.656408][ T7908] ? __pfx_ksys_write+0x10/0x10 [ 156.656443][ T7908] __x64_sys_sendmmsg+0xa0/0xc0 [ 156.656468][ T7908] do_syscall_64+0x166/0x520 [ 156.656491][ T7908] ? trace_irq_disable+0x3b/0x140 [ 156.656519][ T7908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.656540][ T7908] ? clear_bhb_loop+0x70/0xc0 [ 156.656568][ T7908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.656588][ T7908] RIP: 0033:0x7f8f8cf9fb19 [ 156.656609][ T7908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.656627][ T7908] RSP: 002b:00007f8f8ddb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.656651][ T7908] RAX: ffffffffffffffda RBX: 00007f8f8d226180 RCX: 00007f8f8cf9fb19 [ 156.656666][ T7908] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 156.656680][ T7908] RBP: 00007f8f8ddb9090 R08: 0000000000000000 R09: 0000000000000000 [ 156.656693][ T7908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.656706][ T7908] R13: 00007f8f8d226218 R14: 00007f8f8d226180 R15: 00007ffd6da137e8 [ 156.656741][ T7908] [ 157.014424][ T7916] pimreg: entered allmulticast mode [ 157.529482][ T7933] hsr0: entered allmulticast mode [ 157.529510][ T7933] hsr_slave_0: entered allmulticast mode [ 157.529527][ T7933] hsr_slave_1: entered allmulticast mode [ 157.545758][ T7939] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 158.427813][ T7958] netlink: 'syz.0.681': attribute type 12 has an invalid length. [ 158.428726][ T7930] hsr0: left allmulticast mode [ 158.428786][ T7930] hsr_slave_0: left allmulticast mode [ 158.428802][ T7930] hsr_slave_1: left allmulticast mode [ 158.431867][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 158.477273][ T7958] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 158.606265][ T7963] netlink: 56 bytes leftover after parsing attributes in process `syz.4.682'. [ 158.870539][ T7975] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 159.225352][ T7986] syzkaller0: entered promiscuous mode [ 159.225378][ T7986] syzkaller0: entered allmulticast mode [ 159.307651][ T7988] hsr0: entered allmulticast mode [ 159.307676][ T7988] hsr_slave_0: entered allmulticast mode [ 159.307696][ T7988] hsr_slave_1: entered allmulticast mode [ 159.311261][ T7992] netlink: 'syz.4.691': attribute type 1 has an invalid length. [ 159.337711][ T7992] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.339790][ T7992] FAULT_INJECTION: forcing a failure. [ 159.339790][ T7992] name failslab, interval 1, probability 0, space 0, times 0 [ 159.339815][ T7992] CPU: 1 UID: 0 PID: 7992 Comm: syz.4.691 Not tainted syzkaller #0 PREEMPT(full) [ 159.339836][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 159.339847][ T7992] Call Trace: [ 159.339855][ T7992] [ 159.339863][ T7992] dump_stack_lvl+0xe8/0x150 [ 159.339899][ T7992] should_fail_ex+0x3eb/0x540 [ 159.339928][ T7992] should_failslab+0xa8/0x100 [ 159.339956][ T7992] __kmalloc_cache_noprof+0x9e/0x600 [ 159.339980][ T7992] ? inet6_dump_fib+0x327/0xd10 [ 159.340004][ T7992] ? inet6_dump_fib+0x327/0xd10 [ 159.340036][ T7992] inet6_dump_fib+0x327/0xd10 [ 159.340064][ T7992] ? inet6_dump_fib+0x135/0xd10 [ 159.340094][ T7992] ? __pfx_inet6_dump_fib+0x10/0x10 [ 159.340117][ T7992] ? inet_dump_fib+0x138/0x970 [ 159.340141][ T7992] ? rtnl_dumpit+0x92/0x200 [ 159.340168][ T7992] ? __pfx_inet6_dump_fib+0x10/0x10 [ 159.340192][ T7992] rtnl_dump_all+0x324/0x550 [ 159.340221][ T7992] ? __pfx_rtnl_dump_all+0x10/0x10 [ 159.340244][ T7992] rtnl_dumpit+0xa2/0x200 [ 159.340268][ T7992] netlink_dump+0x74d/0xf20 [ 159.340307][ T7992] ? __pfx_netlink_dump+0x10/0x10 [ 159.340343][ T7992] ? netlink_lookup+0x30/0x200 [ 159.340366][ T7992] ? netlink_lookup+0x30/0x200 [ 159.340397][ T7992] __netlink_dump_start+0x589/0x7b0 [ 159.340430][ T7992] rtnetlink_rcv_msg+0xa48/0xc00 [ 159.340451][ T7992] ? __pfx_rtnl_dump_all+0x10/0x10 [ 159.340470][ T7992] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 159.340488][ T7992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.340506][ T7992] ? __pfx_rtnl_dumpit+0x10/0x10 [ 159.340523][ T7992] ? __pfx_rtnl_dump_all+0x10/0x10 [ 159.340556][ T7992] netlink_rcv_skb+0x226/0x4a0 [ 159.340583][ T7992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.340604][ T7992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.340644][ T7992] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.340676][ T7992] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.340708][ T7992] netlink_unicast+0x8ef/0xa80 [ 159.340751][ T7992] netlink_sendmsg+0x7f0/0xb20 [ 159.340784][ T7992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.340814][ T7992] ? aa_sock_msg_perm+0x144/0x210 [ 159.340839][ T7992] ? apparmor_socket_sendmsg+0x98/0x360 [ 159.340863][ T7992] ? lock_acquire+0x115/0x350 [ 159.340887][ T7992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.340911][ T7992] sock_sendmsg_nosec+0x14e/0x190 [ 159.340940][ T7992] sock_write_iter+0x2de/0x3e0 [ 159.340966][ T7992] ? __pfx_sock_write_iter+0x10/0x10 [ 159.340998][ T7992] ? bpf_lsm_file_permission+0x9/0x20 [ 159.341022][ T7992] ? security_file_permission+0x75/0x260 [ 159.341056][ T7992] vfs_write+0x612/0xba0 [ 159.341091][ T7992] ? __pfx_vfs_write+0x10/0x10 [ 159.341117][ T7992] ? do_sys_openat2+0x18d/0x200 [ 159.341134][ T7992] ? kmem_cache_free+0x182/0x650 [ 159.341163][ T7992] ? fdget+0x16b/0x250 [ 159.341194][ T7992] ksys_write+0x150/0x270 [ 159.341220][ T7992] ? __pfx_ksys_write+0x10/0x10 [ 159.341258][ T7992] do_syscall_64+0x166/0x520 [ 159.341280][ T7992] ? trace_irq_disable+0x3b/0x140 [ 159.341307][ T7992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.341327][ T7992] ? clear_bhb_loop+0x70/0xc0 [ 159.341353][ T7992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.341373][ T7992] RIP: 0033:0x7ff46df9fb19 [ 159.341393][ T7992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.341410][ T7992] RSP: 002b:00007ff46ef0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.341433][ T7992] RAX: ffffffffffffffda RBX: 00007ff46e225fa0 RCX: 00007ff46df9fb19 [ 159.341448][ T7992] RDX: 000000000000001c RSI: 0000200000000cc0 RDI: 0000000000000008 [ 159.341460][ T7992] RBP: 00007ff46ef0b090 R08: 0000000000000000 R09: 0000000000000000 [ 159.341473][ T7992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.341486][ T7992] R13: 00007ff46e226038 R14: 00007ff46e225fa0 R15: 00007ffd53f6d038 [ 159.341521][ T7992] [ 159.436020][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 159.801170][ T8006] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 159.877599][ T8008] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 160.164913][ T8006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.292204][ T7987] hsr0: left allmulticast mode [ 160.292231][ T7987] hsr_slave_0: left allmulticast mode [ 160.292250][ T7987] hsr_slave_1: left allmulticast mode [ 160.322779][ T8012] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 160.516260][ T8018] syzkaller0: entered promiscuous mode [ 160.516288][ T8018] syzkaller0: entered allmulticast mode [ 160.666229][ T8030] syzkaller0: entered promiscuous mode [ 160.666254][ T8030] syzkaller0: entered allmulticast mode [ 160.790229][ T8036] netlink: 'syz.4.708': attribute type 9 has an invalid length. [ 160.790257][ T8036] netlink: 'syz.4.708': attribute type 4 has an invalid length. [ 161.094166][ T8044] hsr0: entered allmulticast mode [ 161.094192][ T8044] hsr_slave_0: entered allmulticast mode [ 161.094211][ T8044] hsr_slave_1: entered allmulticast mode [ 161.102982][ T8046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.713'. [ 161.103016][ T8046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.713'. [ 161.177241][ T8051] netlink: 19 bytes leftover after parsing attributes in process `syz.2.713'. [ 161.177268][ T8051] tipc: Invalid UDP bearer configuration [ 161.177317][ T8051] tipc: Enabling of bearer rejected, failed to enable media [ 161.297756][ T8058] syzkaller0: entered promiscuous mode [ 161.297783][ T8058] syzkaller0: entered allmulticast mode [ 162.523223][ T8043] hsr0: left allmulticast mode [ 162.523247][ T8043] hsr_slave_0: left allmulticast mode [ 162.523263][ T8043] hsr_slave_1: left allmulticast mode [ 162.708372][ T8081] syz_tun: entered allmulticast mode [ 162.797818][ T8077] syzkaller0: entered promiscuous mode [ 162.797845][ T8077] syzkaller0: entered allmulticast mode [ 162.871912][ T8083] netlink: 'syz.1.723': attribute type 4 has an invalid length. [ 162.871937][ T8083] netlink: 156 bytes leftover after parsing attributes in process `syz.1.723'. [ 162.913827][ T8083] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 162.923793][ T8086] netlink: 'syz.1.723': attribute type 4 has an invalid length. [ 162.923815][ T8086] netlink: 156 bytes leftover after parsing attributes in process `syz.1.723'. [ 162.927589][ T8094] pim6reg99999999: entered allmulticast mode [ 162.927798][ T8086] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 163.077107][ T8094] netlink: 32 bytes leftover after parsing attributes in process `syz.0.726'. [ 163.163007][ T8103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.728'. [ 163.163047][ T8103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.728'. [ 163.324001][ T8107] netlink: 19 bytes leftover after parsing attributes in process `syz.1.728'. [ 163.324018][ T8107] tipc: Invalid UDP bearer configuration [ 163.324044][ T8107] tipc: Enabling of bearer rejected, failed to enable media [ 163.754570][ T8130] syzkaller0: entered promiscuous mode [ 163.754597][ T8130] syzkaller0: entered allmulticast mode [ 163.867101][ T8131] syzkaller1: entered promiscuous mode [ 163.867128][ T8131] syzkaller1: entered allmulticast mode [ 163.988895][ T8138] syzkaller0: entered promiscuous mode [ 163.989992][ T8138] syzkaller0: entered allmulticast mode [ 164.022265][ T8135] hsr0: entered allmulticast mode [ 164.022293][ T8135] hsr_slave_0: entered allmulticast mode [ 164.022312][ T8135] hsr_slave_1: entered allmulticast mode [ 164.375179][ T8155] FAULT_INJECTION: forcing a failure. [ 164.375179][ T8155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.375212][ T8155] CPU: 1 UID: 0 PID: 8155 Comm: syz.1.737 Not tainted syzkaller #0 PREEMPT(full) [ 164.375236][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 164.375249][ T8155] Call Trace: [ 164.375258][ T8155] [ 164.375267][ T8155] dump_stack_lvl+0xe8/0x150 [ 164.375306][ T8155] should_fail_ex+0x3eb/0x540 [ 164.375338][ T8155] _copy_from_user+0x2d/0xb0 [ 164.375365][ T8155] ___sys_sendmsg+0x1c6/0x360 [ 164.375386][ T8155] ? __lock_acquire+0x747/0x2de0 [ 164.375421][ T8155] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.375485][ T8155] ? __fget_files+0x3a2/0x420 [ 164.375510][ T8155] ? __fget_files+0x2a/0x420 [ 164.375545][ T8155] __x64_sys_sendmsg+0x1b1/0x290 [ 164.375572][ T8155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.375615][ T8155] do_syscall_64+0x166/0x520 [ 164.375639][ T8155] ? trace_irq_disable+0x3b/0x140 [ 164.375675][ T8155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.375694][ T8155] ? clear_bhb_loop+0x70/0xc0 [ 164.375718][ T8155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.375738][ T8155] RIP: 0033:0x7f8f8cf9fb19 [ 164.375757][ T8155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.375774][ T8155] RSP: 002b:00007f8f8b1d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.375798][ T8155] RAX: ffffffffffffffda RBX: 00007f8f8d226450 RCX: 00007f8f8cf9fb19 [ 164.375814][ T8155] RDX: 0000000000004005 RSI: 00002000000007c0 RDI: 0000000000000006 [ 164.375828][ T8155] RBP: 00007f8f8b1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 164.375840][ T8155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.375852][ T8155] R13: 00007f8f8d2264e8 R14: 00007f8f8d226450 R15: 00007ffd6da137e8 [ 164.375888][ T8155] [ 165.347855][ T8144] syzkaller0: entered promiscuous mode [ 165.347883][ T8144] syzkaller0: entered allmulticast mode [ 165.661346][ T8177] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20003 [ 166.405789][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 168.179904][ T8133] hsr0: left allmulticast mode [ 168.179928][ T8133] hsr_slave_0: left allmulticast mode [ 168.179946][ T8133] hsr_slave_1: left allmulticast mode [ 168.180355][ T8164] syzkaller0: entered promiscuous mode [ 168.180377][ T8164] syzkaller0: entered allmulticast mode [ 168.255351][ T8190] ip6gretap1: entered allmulticast mode [ 168.268743][ T8190] batman_adv: batadv0: Adding interface: ip6gretap1 [ 168.268762][ T8190] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.268791][ T8190] batman_adv: batadv0: Interface activated: ip6gretap1 [ 168.483458][ T8201] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.583501][ T8205] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.622473][ T8201] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.632672][ T8206] syz_tun: left allmulticast mode [ 168.635521][ T8214] syzkaller0: entered promiscuous mode [ 168.635546][ T8214] syzkaller0: entered allmulticast mode [ 168.853822][ T8218] netlink: 'syz.3.752': attribute type 12 has an invalid length. [ 168.869288][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 168.915547][ T8218] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 168.988273][ T8228] syz_tun: entered allmulticast mode [ 169.020859][ T8228] pimreg: entered allmulticast mode [ 169.233302][ T8239] hsr0: entered allmulticast mode [ 169.233327][ T8239] hsr_slave_0: entered allmulticast mode [ 169.233345][ T8239] hsr_slave_1: entered allmulticast mode [ 169.462674][ T8250] syzkaller0: entered promiscuous mode [ 169.462700][ T8250] syzkaller0: entered allmulticast mode [ 169.673163][ T8257] pimreg: left allmulticast mode [ 171.369714][ T8238] hsr0: left allmulticast mode [ 171.369740][ T8238] hsr_slave_0: left allmulticast mode [ 171.369757][ T8238] hsr_slave_1: left allmulticast mode [ 171.679604][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 171.749196][ T8316] netlink: 'syz.1.768': attribute type 12 has an invalid length. [ 171.751876][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.768'. [ 171.799562][ T8316] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 171.822366][ T8331] netlink: 'syz.4.770': attribute type 4 has an invalid length. [ 171.822390][ T8331] netlink: 152 bytes leftover after parsing attributes in process `syz.4.770'. [ 171.823382][ T8331] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 172.168452][ T1976] block nbd0: Possible stuck request ffff8880285e5080: control (read@0,1024B). Runtime 30 seconds [ 172.168886][ T1976] block nbd0: Possible stuck request ffff8880285e5240: control (read@1024,1024B). Runtime 30 seconds [ 172.168919][ T1976] block nbd0: Possible stuck request ffff8880285e5400: control (read@2048,2048B). Runtime 30 seconds [ 172.207418][ T8346] netlink: 'syz.3.777': attribute type 1 has an invalid length. [ 172.233465][ T8349] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 172.268209][ T8346] 8021q: adding VLAN 0 to HW filter on device bond5 [ 172.326332][ T8353] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 172.369609][ T8349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.371484][ T8349] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.392738][ T8349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.459669][ T8349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.459855][ T8361] netlink: 228 bytes leftover after parsing attributes in process `syz.0.782'. [ 172.463012][ T8349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.470825][ T8349] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.470851][ T8349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.478031][ T8349] veth1_vlan: left promiscuous mode [ 172.479552][ T8349] veth0_vlan: left promiscuous mode [ 172.481580][ T8349] veth0_vlan: entered promiscuous mode [ 172.484595][ T8349] veth1_vlan: entered promiscuous mode [ 172.491908][ T8349] veth1_macvtap: left promiscuous mode [ 172.498168][ T8349] veth0_macvtap: left promiscuous mode [ 172.499924][ T8349] veth0_macvtap: entered promiscuous mode [ 172.501293][ T8349] veth1_macvtap: entered promiscuous mode [ 172.516854][ T8349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.519319][ T8349] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.522614][ T8349] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.526638][ T8349] 8021q: adding VLAN 0 to HW filter on device eth0 [ 172.529499][ T8349] 8021q: adding VLAN 0 to HW filter on device eth1 [ 172.532057][ T8349] 8021q: adding VLAN 0 to HW filter on device eth2 [ 172.534480][ T8349] 8021q: adding VLAN 0 to HW filter on device eth3 [ 172.545852][ T44] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.545914][ T44] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.545949][ T44] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.545981][ T44] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.635281][ T8351] bond3: (slave veth0_to_bond): Releasing backup interface [ 172.720072][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.720200][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.747039][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.747167][ T3328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.945026][ T8363] syzkaller0: entered promiscuous mode [ 172.945051][ T8363] syzkaller0: entered allmulticast mode [ 173.134870][ T8377] TC_ACT_REPEAT abuse ? [ 173.178152][ T8373] syzkaller1: entered promiscuous mode [ 173.178179][ T8373] syzkaller1: entered allmulticast mode [ 173.287258][ T8391] IPv4: Oversized IP packet from 127.202.26.0 [ 173.390944][ T8391] netlink: 'syz.2.788': attribute type 49 has an invalid length. [ 173.837811][ T8407] ip_tables: iptables: counters copy to user failed while replacing table [ 174.262991][ T8417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.796'. [ 174.384006][ T8417] netlink: 32 bytes leftover after parsing attributes in process `syz.2.796'. [ 174.424077][ T8421] syzkaller0: entered promiscuous mode [ 174.424103][ T8421] syzkaller0: entered allmulticast mode [ 174.738591][ T8423] FAULT_INJECTION: forcing a failure. [ 174.738591][ T8423] name failslab, interval 1, probability 0, space 0, times 0 [ 174.738623][ T8423] CPU: 0 UID: 0 PID: 8423 Comm: syz.0.799 Not tainted syzkaller #0 PREEMPT(full) [ 174.738645][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 174.738658][ T8423] Call Trace: [ 174.738666][ T8423] [ 174.738676][ T8423] dump_stack_lvl+0xe8/0x150 [ 174.738716][ T8423] should_fail_ex+0x3eb/0x540 [ 174.738748][ T8423] should_failslab+0xa8/0x100 [ 174.738776][ T8423] ? skb_clone+0x212/0x3a0 [ 174.738798][ T8423] kmem_cache_alloc_noprof+0x9c/0x600 [ 174.738825][ T8423] ? skb_clone+0x212/0x3a0 [ 174.738855][ T8423] skb_clone+0x212/0x3a0 [ 174.738881][ T8423] __netlink_deliver_tap+0x355/0x6e0 [ 174.738921][ T8423] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.738951][ T8423] netlink_deliver_tap+0x19c/0x1b0 [ 174.738981][ T8423] netlink_unicast+0x8c1/0xa80 [ 174.739028][ T8423] netlink_sendmsg+0x7f0/0xb20 [ 174.739064][ T8423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.739098][ T8423] ? aa_sock_msg_perm+0x144/0x210 [ 174.739124][ T8423] ? apparmor_socket_sendmsg+0x98/0x360 [ 174.739156][ T8423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.739184][ T8423] sock_sendmsg_nosec+0x14e/0x190 [ 174.739216][ T8423] ____sys_sendmsg+0x54e/0x850 [ 174.739244][ T8423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.739277][ T8423] ? import_iovec+0x73/0xa0 [ 174.739308][ T8423] ___sys_sendmsg+0x2a5/0x360 [ 174.739327][ T8423] ? __lock_acquire+0x747/0x2de0 [ 174.739358][ T8423] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.739422][ T8423] ? __fget_files+0x3a2/0x420 [ 174.739446][ T8423] ? __fget_files+0x2a/0x420 [ 174.739481][ T8423] __x64_sys_sendmsg+0x1b1/0x290 [ 174.739507][ T8423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.739564][ T8423] do_syscall_64+0x166/0x520 [ 174.739589][ T8423] ? trace_irq_disable+0x3b/0x140 [ 174.739617][ T8423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.739638][ T8423] ? clear_bhb_loop+0x70/0xc0 [ 174.739662][ T8423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.739680][ T8423] RIP: 0033:0x7fc17ab9fb19 [ 174.739700][ T8423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.739716][ T8423] RSP: 002b:00007fc17baae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.739739][ T8423] RAX: ffffffffffffffda RBX: 00007fc17ae25fa0 RCX: 00007fc17ab9fb19 [ 174.739754][ T8423] RDX: 00000000000000c0 RSI: 0000200000000140 RDI: 0000000000000005 [ 174.739768][ T8423] RBP: 00007fc17baae090 R08: 0000000000000000 R09: 0000000000000000 [ 174.739781][ T8423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.739793][ T8423] R13: 00007fc17ae26038 R14: 00007fc17ae25fa0 R15: 00007ffedc8c6df8 [ 174.739829][ T8423] [ 174.744737][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.799'. [ 176.071010][ T8472] syzkaller0: entered promiscuous mode [ 176.071038][ T8472] syzkaller0: entered allmulticast mode [ 176.117899][ T8475] netlink: 'syz.0.816': attribute type 5 has an invalid length. [ 176.117923][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'. [ 176.585393][ T8495] syz_tun: entered allmulticast mode [ 176.605996][ T8495] pimreg: entered allmulticast mode [ 176.712420][ T8501] netlink: 'syz.3.826': attribute type 1 has an invalid length. [ 176.712451][ T8501] netlink: 'syz.3.826': attribute type 1 has an invalid length. [ 176.814885][ T8503] openvswitch: netlink: Multiple metadata blocks provided [ 176.842230][ T8506] netlink: 'syz.3.828': attribute type 5 has an invalid length. [ 176.842253][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.828'. [ 176.979548][ T8510] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 177.454591][ T8529] team_slave_0: entered allmulticast mode [ 177.495495][ T8531] netlink: 'syz.1.839': attribute type 5 has an invalid length. [ 177.495520][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.839'. [ 177.748322][ T8537] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.841526][ T8536] openvswitch: netlink: Message has -1 unknown bytes. [ 177.843394][ T8536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.840'. [ 177.844791][ T8536] ip_tables: iptables: counters copy to user failed while replacing table [ 177.862297][ T8538] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.892239][ T8534] netlink: 'syz.1.840': attribute type 11 has an invalid length. [ 178.157521][ T8548] netlink: 'syz.2.845': attribute type 2 has an invalid length. [ 178.369937][ T8562] netlink: 'syz.2.850': attribute type 12 has an invalid length. [ 178.384465][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 178.411712][ T8562] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 178.673419][ T8573] ip_tables: iptables: counters copy to user failed while replacing table [ 178.871225][ T8580] Cannot find add_set index 0 as target [ 179.081934][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.861'. [ 181.832763][ T8651] ip_tables: iptables: counters copy to user failed while replacing table [ 181.833277][ T8651] syzkaller1: entered promiscuous mode [ 181.833289][ T8651] syzkaller1: entered allmulticast mode [ 182.157852][ T8596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.334945][ T8658] tipc: Started in network mode [ 182.334982][ T8658] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 182.351574][ T8658] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 182.354760][ T8658] tipc: Enabled bearer , priority 10 [ 182.363788][ T8662] syz_tun: entered allmulticast mode [ 182.371273][ T8662] pimreg: entered allmulticast mode [ 182.943788][ T8686] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 183.467434][ T5828] tipc: Node number set to 1 [ 183.709100][ T8711] sctp: [Deprecated]: syz.2.905 (pid 8711) Use of int in max_burst socket option deprecated. [ 183.709100][ T8711] Use struct sctp_assoc_value instead [ 183.782850][ T8714] syzkaller0: entered promiscuous mode [ 183.782877][ T8714] syzkaller0: entered allmulticast mode [ 183.950730][ T8720] netlink: 'syz.2.909': attribute type 11 has an invalid length. [ 183.979232][ T8720] openvswitch: netlink: Message has -1 unknown bytes. [ 184.277140][ T8741] FAULT_INJECTION: forcing a failure. [ 184.277140][ T8741] name failslab, interval 1, probability 0, space 0, times 0 [ 184.278857][ T8741] CPU: 1 UID: 0 PID: 8741 Comm: syz.2.916 Not tainted syzkaller #0 PREEMPT(full) [ 184.278884][ T8741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 184.278897][ T8741] Call Trace: [ 184.278906][ T8741] [ 184.278916][ T8741] dump_stack_lvl+0xe8/0x150 [ 184.278955][ T8741] should_fail_ex+0x3eb/0x540 [ 184.278987][ T8741] should_failslab+0xa8/0x100 [ 184.279020][ T8741] __kvmalloc_node_noprof+0x171/0x820 [ 184.279049][ T8741] ? __kvmalloc_node_noprof+0x340/0x820 [ 184.279074][ T8741] ? bpf_compute_postorder+0xd3/0x9a0 [ 184.279100][ T8741] ? bpf_compute_postorder+0xd3/0x9a0 [ 184.279133][ T8741] bpf_compute_postorder+0xd3/0x9a0 [ 184.279162][ T8741] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 184.279184][ T8741] ? check_unwind_insns+0x670/0x910 [ 184.279218][ T8741] bpf_check+0x298f/0x34e0 [ 184.279252][ T8741] ? ktime_get_with_offset+0x93/0x2d0 [ 184.279282][ T8741] ? ktime_get_with_offset+0x93/0x2d0 [ 184.279310][ T8741] ? __pfx_bpf_check+0x10/0x10 [ 184.279334][ T8741] ? bpf_obj_name_cpy+0x194/0x1e0 [ 184.279365][ T8741] bpf_prog_load+0x14da/0x1c60 [ 184.279400][ T8741] ? __pfx_bpf_prog_load+0x10/0x10 [ 184.279439][ T8741] ? __might_fault+0xaf/0x130 [ 184.279469][ T8741] __sys_bpf+0xd86/0xe00 [ 184.279499][ T8741] ? __pfx___sys_bpf+0x10/0x10 [ 184.279532][ T8741] ? __fget_files+0x2a/0x420 [ 184.279585][ T8741] ? ksys_write+0x242/0x270 [ 184.279615][ T8741] ? __pfx_ksys_write+0x10/0x10 [ 184.279648][ T8741] __x64_sys_bpf+0xba/0xd0 [ 184.279680][ T8741] do_syscall_64+0x166/0x520 [ 184.279704][ T8741] ? trace_irq_disable+0x3b/0x140 [ 184.279731][ T8741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.279752][ T8741] ? clear_bhb_loop+0x70/0xc0 [ 184.279779][ T8741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.279800][ T8741] RIP: 0033:0x7fcfb539fb19 [ 184.279821][ T8741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.279839][ T8741] RSP: 002b:00007fcfb6249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.279863][ T8741] RAX: ffffffffffffffda RBX: 00007fcfb5625fa0 RCX: 00007fcfb539fb19 [ 184.279882][ T8741] RDX: 0000000000000094 RSI: 0000200000001d40 RDI: 0000000000000005 [ 184.279896][ T8741] RBP: 00007fcfb6249090 R08: 0000000000000000 R09: 0000000000000000 [ 184.279909][ T8741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.279922][ T8741] R13: 00007fcfb5626038 R14: 00007fcfb5625fa0 R15: 00007fffe1dd0b28 [ 184.279957][ T8741] [ 184.928238][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'. [ 184.980921][ T8760] tipc: Started in network mode [ 184.980967][ T8760] tipc: Node identity 66703bd3a092, cluster identity 4711 [ 184.981219][ T8760] tipc: Enabled bearer , priority 0 [ 185.043712][ T8760] syzkaller0: entered promiscuous mode [ 185.043741][ T8760] syzkaller0: entered allmulticast mode [ 185.050204][ T8755] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 185.054276][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 185.054315][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.924'. [ 185.183601][ T8763] veth3: entered allmulticast mode [ 185.205116][ T8763] bond6: (slave veth3): Enslaving as an active interface with an up link [ 185.244380][ T8767] bond6 (unregistering): (slave veth3): Releasing backup interface [ 185.259982][ T8767] bond6 (unregistering): Released all slaves [ 185.318632][ T8755] tipc: Resetting bearer [ 185.402384][ T8760] tipc: Resetting bearer [ 185.461827][ T8760] tipc: Disabling bearer [ 185.783865][ T8783] syzkaller0: entered promiscuous mode [ 185.783890][ T8783] syzkaller0: entered allmulticast mode [ 185.900331][ T8793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.934'. [ 185.981542][ T8798] FAULT_INJECTION: forcing a failure. [ 185.981542][ T8798] name failslab, interval 1, probability 0, space 0, times 0 [ 185.981579][ T8798] CPU: 1 UID: 0 PID: 8798 Comm: syz.4.933 Not tainted syzkaller #0 PREEMPT(full) [ 185.981601][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 185.981614][ T8798] Call Trace: [ 185.981622][ T8798] [ 185.981631][ T8798] dump_stack_lvl+0xe8/0x150 [ 185.981680][ T8798] should_fail_ex+0x3eb/0x540 [ 185.981714][ T8798] should_failslab+0xa8/0x100 [ 185.981746][ T8798] __kmalloc_cache_noprof+0x9e/0x600 [ 185.981772][ T8798] ? bpf_prog_alloc_no_stats+0xd8/0x550 [ 185.981790][ T8798] ? bpf_prog_alloc_no_stats+0xd8/0x550 [ 185.981818][ T8798] bpf_prog_alloc_no_stats+0xd8/0x550 [ 185.981835][ T8798] ? bpf_prog_alloc+0x2a/0x1a0 [ 185.981856][ T8798] bpf_prog_alloc+0x3c/0x1a0 [ 185.981878][ T8798] bpf_prog_load+0x7f8/0x1c60 [ 185.981912][ T8798] ? __pfx_bpf_prog_load+0x10/0x10 [ 185.981950][ T8798] ? __might_fault+0xaf/0x130 [ 185.981978][ T8798] __sys_bpf+0xd86/0xe00 [ 185.982007][ T8798] ? __pfx___sys_bpf+0x10/0x10 [ 185.982022][ T8798] ? lock_acquire+0x115/0x350 [ 185.982059][ T8798] ? ktime_get+0x45/0x220 [ 185.982105][ T8798] ? __pfx_clockevents_program_event+0x10/0x10 [ 185.982141][ T8798] __x64_sys_bpf+0xba/0xd0 [ 185.982172][ T8798] do_syscall_64+0x166/0x520 [ 185.982196][ T8798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.982216][ T8798] ? clear_bhb_loop+0x70/0xc0 [ 185.982242][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.982261][ T8798] RIP: 0033:0x7ff46df9fb19 [ 185.982281][ T8798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.982298][ T8798] RSP: 002b:00007ff46ef0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.982320][ T8798] RAX: ffffffffffffffda RBX: 00007ff46e225fa0 RCX: 00007ff46df9fb19 [ 185.982335][ T8798] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 185.982348][ T8798] RBP: 00007ff46ef0b090 R08: 0000000000000000 R09: 0000000000000000 [ 185.982360][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.982372][ T8798] R13: 00007ff46e226038 R14: 00007ff46e225fa0 R15: 00007ffd53f6d038 [ 185.982406][ T8798] [ 186.357255][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.936'. [ 186.357298][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.936'. [ 186.437270][ T8808] tipc: Enabling of bearer rejected, already enabled [ 186.583708][ T8815] syzkaller0: entered promiscuous mode [ 186.583734][ T8815] syzkaller0: entered allmulticast mode [ 186.602420][ T8815] FAULT_INJECTION: forcing a failure. [ 186.602420][ T8815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.602439][ T8815] CPU: 1 UID: 0 PID: 8815 Comm: syz.3.939 Not tainted syzkaller #0 PREEMPT(full) [ 186.602451][ T8815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 186.602458][ T8815] Call Trace: [ 186.602464][ T8815] [ 186.602468][ T8815] dump_stack_lvl+0xe8/0x150 [ 186.602488][ T8815] should_fail_ex+0x3eb/0x540 [ 186.602506][ T8815] _copy_from_user+0x2d/0xb0 [ 186.602520][ T8815] ___sys_sendmsg+0x1c6/0x360 [ 186.602530][ T8815] ? __lock_acquire+0x747/0x2de0 [ 186.602545][ T8815] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.602587][ T8815] ? __fget_files+0x3a2/0x420 [ 186.602606][ T8815] ? __fget_files+0x2a/0x420 [ 186.602631][ T8815] __x64_sys_sendmsg+0x1b1/0x290 [ 186.602651][ T8815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.602688][ T8815] do_syscall_64+0x166/0x520 [ 186.602709][ T8815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.602727][ T8815] ? clear_bhb_loop+0x70/0xc0 [ 186.602754][ T8815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.602775][ T8815] RIP: 0033:0x7f47f819fb19 [ 186.602796][ T8815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.602814][ T8815] RSP: 002b:00007f47f9018028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.602838][ T8815] RAX: ffffffffffffffda RBX: 00007f47f8425fa0 RCX: 00007f47f819fb19 [ 186.602854][ T8815] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000008 [ 186.602868][ T8815] RBP: 00007f47f9018090 R08: 0000000000000000 R09: 0000000000000000 [ 186.602880][ T8815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.602893][ T8815] R13: 00007f47f8426038 R14: 00007f47f8425fa0 R15: 00007fff4ec67998 [ 186.602929][ T8815] [ 186.728483][ T8822] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.729589][ T8822] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.764380][ T3328] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 190.885789][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.568820][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.045794][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 202.003577][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 202.006090][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 202.021432][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 202.033313][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 202.035009][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 202.131846][ T5645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 202.134280][ T5645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 202.142959][ T5645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 202.159298][ T5645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 202.165364][ T5645] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 202.252926][ T1976] block nbd0: Possible stuck request ffff8880285e5080: control (read@0,1024B). Runtime 60 seconds [ 202.252972][ T1976] block nbd0: Possible stuck request ffff8880285e5240: control (read@1024,1024B). Runtime 60 seconds [ 202.252998][ T1976] block nbd0: Possible stuck request ffff8880285e5400: control (read@2048,2048B). Runtime 60 seconds [ 202.934420][ T8862] rxe_eth0 speed is unknown, defaulting to 1000 [ 203.284694][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 203.296411][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 203.299377][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 203.303780][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 203.304958][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 203.381266][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 203.384668][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 203.402756][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 203.418184][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 203.419461][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 203.455919][ T8865] rxe_eth0 speed is unknown, defaulting to 1000 [ 204.086710][ T54] Bluetooth: hci5: command tx timeout [ 204.245711][ T54] Bluetooth: hci6: command tx timeout [ 204.497850][ T8862] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.498381][ T8862] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.498728][ T8862] bridge_slave_0: entered allmulticast mode [ 204.505838][ T8862] bridge_slave_0: entered promiscuous mode [ 204.594605][ T8862] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.595158][ T8862] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.595535][ T8862] bridge_slave_1: entered allmulticast mode [ 204.603888][ T8862] bridge_slave_1: entered promiscuous mode [ 204.759470][ T5645] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 204.762883][ T5645] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 204.763587][ T5645] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 204.764628][ T5645] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 204.765283][ T5645] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 204.995284][ T8886] rxe_eth0 speed is unknown, defaulting to 1000 [ 205.022069][ T8862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.061751][ T8862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.314743][ T8862] team0: Port device team_slave_0 added [ 205.347609][ T8862] team0: Port device team_slave_1 added [ 205.368730][ T54] Bluetooth: hci7: command tx timeout [ 205.447567][ T54] Bluetooth: hci8: command tx timeout [ 205.694661][ T8862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.694681][ T8862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.694707][ T8862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.822743][ T8862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.822763][ T8862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.822790][ T8862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.158052][ T8884] rxe_eth0 speed is unknown, defaulting to 1000 [ 206.172901][ T54] Bluetooth: hci5: command tx timeout [ 206.328323][ T54] Bluetooth: hci6: command tx timeout [ 206.332825][ T8862] hsr_slave_0: entered promiscuous mode [ 206.334283][ T8862] hsr_slave_1: entered promiscuous mode [ 206.335054][ T8862] debugfs: 'hsr0' already exists in 'hsr' [ 206.335074][ T8862] Cannot create hsr debugfs directory [ 206.888752][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 206.889030][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 206.889060][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 206.965804][ T4952] Bluetooth: hci9: command tx timeout [ 207.021810][ T8911] rxe_eth0 speed is unknown, defaulting to 1000 [ 207.122017][ T8865] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.123730][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.124216][ T8865] bridge_slave_0: entered allmulticast mode [ 207.147512][ T8865] bridge_slave_0: entered promiscuous mode [ 207.279903][ T8865] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.280091][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.280565][ T8865] bridge_slave_1: entered allmulticast mode [ 207.283695][ T8865] bridge_slave_1: entered promiscuous mode [ 207.446800][ T4952] Bluetooth: hci7: command tx timeout [ 207.537259][ T4952] Bluetooth: hci8: command tx timeout [ 207.573830][ T8865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.619131][ T8865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.742830][ T8865] team0: Port device team_slave_0 added [ 207.803509][ T8865] team0: Port device team_slave_1 added [ 207.984630][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.984650][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.984676][ T8865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.095559][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.095822][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.095851][ T8865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.245765][ T4952] Bluetooth: hci5: command tx timeout [ 208.406009][ T4952] Bluetooth: hci6: command tx timeout [ 208.407659][ T8865] hsr_slave_0: entered promiscuous mode [ 208.408771][ T8865] hsr_slave_1: entered promiscuous mode [ 208.409543][ T8865] debugfs: 'hsr0' already exists in 'hsr' [ 208.409563][ T8865] Cannot create hsr debugfs directory [ 208.409931][ T8886] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.410768][ T8886] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.411246][ T8886] bridge_slave_0: entered allmulticast mode [ 208.413085][ T8886] bridge_slave_0: entered promiscuous mode [ 208.519976][ T8886] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.520107][ T8886] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.520260][ T8886] bridge_slave_1: entered allmulticast mode [ 208.523385][ T8886] bridge_slave_1: entered promiscuous mode [ 208.607877][ T8884] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.608005][ T8884] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.608210][ T8884] bridge_slave_0: entered allmulticast mode [ 208.610389][ T8884] bridge_slave_0: entered promiscuous mode [ 208.679053][ T8884] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.680301][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.680446][ T8884] bridge_slave_1: entered allmulticast mode [ 208.682399][ T8884] bridge_slave_1: entered promiscuous mode [ 208.723311][ T8886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.816979][ T8886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.906725][ T8884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.910568][ T8884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.942579][ T8886] team0: Port device team_slave_0 added [ 209.007454][ T8886] team0: Port device team_slave_1 added [ 209.046725][ T4952] Bluetooth: hci9: command tx timeout [ 209.108265][ T8884] team0: Port device team_slave_0 added [ 209.148656][ T8886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.148677][ T8886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.148703][ T8886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.213280][ T8884] team0: Port device team_slave_1 added [ 209.229743][ T8886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.229761][ T8886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.229787][ T8886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.415408][ T8884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.415428][ T8884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.415451][ T8884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.492456][ T8886] hsr_slave_0: entered promiscuous mode [ 209.493595][ T8886] hsr_slave_1: entered promiscuous mode [ 209.494344][ T8886] debugfs: 'hsr0' already exists in 'hsr' [ 209.494364][ T8886] Cannot create hsr debugfs directory [ 209.511170][ T8884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.511186][ T8884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.511210][ T8884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.551876][ T4952] Bluetooth: hci7: command tx timeout [ 209.605937][ T4952] Bluetooth: hci8: command tx timeout [ 209.626242][ T8884] hsr_slave_0: entered promiscuous mode [ 209.627381][ T8884] hsr_slave_1: entered promiscuous mode [ 209.628156][ T8884] debugfs: 'hsr0' already exists in 'hsr' [ 209.628175][ T8884] Cannot create hsr debugfs directory [ 209.830092][ T8911] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.830472][ T8911] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.830930][ T8911] bridge_slave_0: entered allmulticast mode [ 209.832873][ T8911] bridge_slave_0: entered promiscuous mode [ 209.892422][ T8911] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.892564][ T8911] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.893014][ T8911] bridge_slave_1: entered allmulticast mode [ 209.896925][ T8911] bridge_slave_1: entered promiscuous mode [ 210.020876][ T8911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.051184][ T8911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.155118][ T8911] team0: Port device team_slave_0 added [ 210.191944][ T8911] team0: Port device team_slave_1 added [ 210.267494][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.267513][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.267539][ T8911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.335049][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.335069][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.335094][ T8911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.336202][ T4952] Bluetooth: hci5: command tx timeout [ 210.462803][ T8911] hsr_slave_0: entered promiscuous mode [ 210.464039][ T8911] hsr_slave_1: entered promiscuous mode [ 210.464797][ T8911] debugfs: 'hsr0' already exists in 'hsr' [ 210.464817][ T8911] Cannot create hsr debugfs directory [ 210.493014][ T4952] Bluetooth: hci6: command tx timeout [ 211.127178][ T4952] Bluetooth: hci9: command tx timeout [ 211.606439][ T4952] Bluetooth: hci7: command tx timeout [ 211.685904][ T4952] Bluetooth: hci8: command tx timeout [ 213.206225][ T4952] Bluetooth: hci9: command tx timeout [ 213.956430][ T5002] udevd[5002]: worker [6903] /devices/virtual/block/nbd0 is taking a long time [ 215.048330][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 225.286080][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 232.333313][ T1976] block nbd0: Possible stuck request ffff8880285e5080: control (read@0,1024B). Runtime 90 seconds [ 232.333360][ T1976] block nbd0: Possible stuck request ffff8880285e5240: control (read@1024,1024B). Runtime 90 seconds [ 232.333387][ T1976] block nbd0: Possible stuck request ffff8880285e5400: control (read@2048,2048B). Runtime 90 seconds [ 247.045770][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 256.010169][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.017954][ T5647] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 262.020590][ T5647] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 262.021286][ T5647] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 262.022261][ T5647] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 262.022926][ T5647] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 262.407959][ T1976] block nbd0: Possible stuck request ffff8880285e5080: control (read@0,1024B). Runtime 120 seconds [ 262.408005][ T1976] block nbd0: Possible stuck request ffff8880285e5240: control (read@1024,1024B). Runtime 120 seconds [ 262.408032][ T1976] block nbd0: Possible stuck request ffff8880285e5400: control (read@2048,2048B). Runtime 120 seconds [ 262.573892][ T8956] rxe_eth0 speed is unknown, defaulting to 1000 [ 262.688650][ T5647] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 262.691971][ T5647] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 262.693663][ T5647] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 262.695387][ T5647] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 262.728522][ T5647] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 263.663159][ T8956] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.663370][ T8956] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.663561][ T8956] bridge_slave_0: entered allmulticast mode [ 263.672824][ T8956] bridge_slave_0: entered promiscuous mode [ 263.685154][ T8956] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.685937][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.686094][ T8956] bridge_slave_1: entered allmulticast mode [ 263.692627][ T8956] bridge_slave_1: entered promiscuous mode [ 263.792526][ T4952] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 263.797843][ T4952] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 263.799590][ T4952] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 263.802071][ T4952] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 263.802689][ T4952] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 263.830774][ T8956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.834888][ T8956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.834952][ T8967] rxe_eth0 speed is unknown, defaulting to 1000 [ 264.001470][ T5647] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 264.003686][ T5647] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 264.006452][ T5647] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 264.014512][ T8956] team0: Port device team_slave_0 added [ 264.037168][ T5647] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 264.038019][ T5647] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 264.068789][ T8956] team0: Port device team_slave_1 added [ 264.086501][ T4952] Bluetooth: hci10: command tx timeout [ 264.237503][ T8956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.237522][ T8956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.237821][ T8956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.254103][ T8956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.254122][ T8956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.254148][ T8956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.478271][ T8956] hsr_slave_0: entered promiscuous mode [ 264.482558][ T8956] hsr_slave_1: entered promiscuous mode [ 264.488578][ T8956] debugfs: 'hsr0' already exists in 'hsr' [ 264.488611][ T8956] Cannot create hsr debugfs directory [ 264.808672][ T4952] Bluetooth: hci11: command tx timeout [ 265.324905][ T8986] rxe_eth0 speed is unknown, defaulting to 1000 [ 265.558971][ T5647] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 265.573419][ T5647] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 265.576215][ T5647] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 265.592010][ T5647] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 265.595383][ T5647] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 265.926157][ T5647] Bluetooth: hci12: command tx timeout [ 266.087559][ T5647] Bluetooth: hci13: command tx timeout [ 266.136346][ T8989] rxe_eth0 speed is unknown, defaulting to 1000 [ 266.167501][ T5647] Bluetooth: hci10: command tx timeout [ 266.184599][ T8967] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.184730][ T8967] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.184908][ T8967] bridge_slave_0: entered allmulticast mode [ 266.208355][ T8967] bridge_slave_0: entered promiscuous mode [ 266.223864][ T8967] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.232776][ T8967] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.232972][ T8967] bridge_slave_1: entered allmulticast mode [ 266.255782][ T8967] bridge_slave_1: entered promiscuous mode [ 266.680626][ T8967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.781441][ T8967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.886606][ T5647] Bluetooth: hci11: command tx timeout [ 267.034790][ T8967] team0: Port device team_slave_0 added [ 267.062464][ T8967] team0: Port device team_slave_1 added [ 267.208969][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.208990][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.209015][ T8967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.268281][ T9009] rxe_eth0 speed is unknown, defaulting to 1000 [ 267.324861][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.324881][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.324907][ T8967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.662599][ T8967] hsr_slave_0: entered promiscuous mode [ 267.672292][ T8967] hsr_slave_1: entered promiscuous mode [ 267.673210][ T8967] debugfs: 'hsr0' already exists in 'hsr' [ 267.673231][ T8967] Cannot create hsr debugfs directory [ 267.689491][ T5647] Bluetooth: hci14: command tx timeout [ 268.005850][ T5647] Bluetooth: hci12: command tx timeout [ 268.166592][ T5647] Bluetooth: hci13: command tx timeout [ 268.256751][ T5647] Bluetooth: hci10: command tx timeout [ 268.330589][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.331057][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.331213][ T8986] bridge_slave_0: entered allmulticast mode [ 268.333505][ T8986] bridge_slave_0: entered promiscuous mode [ 268.454895][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.455097][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.455238][ T8986] bridge_slave_1: entered allmulticast mode [ 268.461187][ T8986] bridge_slave_1: entered promiscuous mode [ 268.588784][ T8986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.661573][ T8986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.774455][ T8986] team0: Port device team_slave_0 added [ 268.774908][ T8989] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.775261][ T8989] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.775406][ T8989] bridge_slave_0: entered allmulticast mode [ 268.778333][ T8989] bridge_slave_0: entered promiscuous mode [ 268.793383][ T8986] team0: Port device team_slave_1 added [ 268.793591][ T8989] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.793812][ T8989] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.794240][ T8989] bridge_slave_1: entered allmulticast mode [ 268.796584][ T8989] bridge_slave_1: entered promiscuous mode [ 268.941231][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.941251][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.941277][ T8986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.956614][ T8989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.961885][ T8989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.962628][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.962641][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.962681][ T8986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.990703][ T5647] Bluetooth: hci11: command tx timeout [ 269.131803][ T8989] team0: Port device team_slave_0 added [ 269.149288][ T8986] hsr_slave_0: entered promiscuous mode [ 269.150535][ T8986] hsr_slave_1: entered promiscuous mode [ 269.151366][ T8986] debugfs: 'hsr0' already exists in 'hsr' [ 269.151386][ T8986] Cannot create hsr debugfs directory [ 269.156907][ T8989] team0: Port device team_slave_1 added [ 269.268686][ T8989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.268707][ T8989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.268734][ T8989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.344077][ T8989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.344097][ T8989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.344125][ T8989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.543052][ T9009] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.543267][ T9009] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.543818][ T9009] bridge_slave_0: entered allmulticast mode [ 269.555902][ T9009] bridge_slave_0: entered promiscuous mode [ 269.600411][ T9009] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.600871][ T9009] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.601015][ T9009] bridge_slave_1: entered allmulticast mode [ 269.602982][ T9009] bridge_slave_1: entered promiscuous mode [ 269.613212][ T8989] hsr_slave_0: entered promiscuous mode [ 269.614397][ T8989] hsr_slave_1: entered promiscuous mode [ 269.615180][ T8989] debugfs: 'hsr0' already exists in 'hsr' [ 269.615199][ T8989] Cannot create hsr debugfs directory [ 269.751355][ T9009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.766655][ T5647] Bluetooth: hci14: command tx timeout [ 269.796818][ T9009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.929257][ T9009] team0: Port device team_slave_0 added [ 269.941536][ T9009] team0: Port device team_slave_1 added [ 270.043028][ T9009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.043050][ T9009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.043076][ T9009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.045439][ T9009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.045454][ T9009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.045480][ T9009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.095900][ T5647] Bluetooth: hci12: command tx timeout [ 270.171192][ T9009] hsr_slave_0: entered promiscuous mode [ 270.172458][ T9009] hsr_slave_1: entered promiscuous mode [ 270.174323][ T9009] debugfs: 'hsr0' already exists in 'hsr' [ 270.174344][ T9009] Cannot create hsr debugfs directory [ 270.246311][ T5647] Bluetooth: hci13: command tx timeout [ 270.325981][ T5647] Bluetooth: hci10: command tx timeout [ 271.046601][ T5647] Bluetooth: hci11: command tx timeout [ 271.846435][ T5647] Bluetooth: hci14: command tx timeout [ 272.165974][ T5647] Bluetooth: hci12: command tx timeout [ 272.325818][ T5647] Bluetooth: hci13: command tx timeout [ 273.926788][ T4952] Bluetooth: hci14: command tx timeout [ 292.488098][ T1976] block nbd0: Possible stuck request ffff8880285e5080: control (read@0,1024B). Runtime 150 seconds [ 292.488144][ T1976] block nbd0: Possible stuck request ffff8880285e5240: control (read@1024,1024B). Runtime 150 seconds [ 292.488171][ T1976] block nbd0: Possible stuck request ffff8880285e5400: control (read@2048,2048B). Runtime 150 seconds [ 312.325751][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.451203][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.090327][ T4952] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 322.093977][ T4952] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 322.094839][ T4952] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 322.113167][ T4952] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 322.129455][ T4952] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 322.573518][ T1976] block nbd0: Possible stuck request ffff8880285e5080: control (read@0,1024B). Runtime 180 seconds [ 322.573565][ T1976] block nbd0: Possible stuck request ffff8880285e5240: control (read@1024,1024B). Runtime 180 seconds [ 322.573592][ T1976] block nbd0: Possible stuck request ffff8880285e5400: control (read@2048,2048B). Runtime 180 seconds [ 322.715266][ T5645] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 322.729291][ T5645] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 322.730362][ T5645] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 322.732106][ T5645] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 322.743041][ T5645] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 322.835491][ T9051] rxe_eth0 speed is unknown, defaulting to 1000 [ 323.682314][ T9062] rxe_eth0 speed is unknown, defaulting to 1000 [ 323.897433][ T5647] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 323.900156][ T5647] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 323.902425][ T5647] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 323.904994][ T5647] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 323.915343][ T5647] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 324.216204][ T5647] Bluetooth: hci15: command tx timeout [ 324.227444][ T9051] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.231102][ T9051] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.232829][ T9051] bridge_slave_0: entered allmulticast mode [ 324.262230][ T9051] bridge_slave_0: entered promiscuous mode [ 324.283904][ T9051] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.293140][ T9051] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.303877][ T9051] bridge_slave_1: entered allmulticast mode [ 324.330476][ T9051] bridge_slave_1: entered promiscuous mode [ 324.519413][ T5645] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 324.520737][ T5645] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 324.521399][ T5645] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 324.522372][ T5645] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 324.523037][ T5645] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 324.591689][ T9051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.647095][ T5645] Bluetooth: hci6: command 0x0406 tx timeout [ 324.647188][ T5645] Bluetooth: hci5: command 0x0406 tx timeout [ 324.657121][ T9051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.805956][ T4952] Bluetooth: hci16: command tx timeout [ 324.814917][ T9051] team0: Port device team_slave_0 added [ 324.868227][ T9051] team0: Port device team_slave_1 added [ 325.086873][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.086895][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.086921][ T9051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.156947][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.156967][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.156995][ T9051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.417368][ T9051] hsr_slave_0: entered promiscuous mode [ 325.418578][ T9051] hsr_slave_1: entered promiscuous mode [ 325.424326][ T9051] debugfs: 'hsr0' already exists in 'hsr' [ 325.424351][ T9051] Cannot create hsr debugfs directory [ 325.601687][ T5640] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 325.604542][ T5640] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 325.624803][ T5640] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 325.643639][ T5640] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 325.658376][ T5640] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 325.943714][ T9078] rxe_eth0 speed is unknown, defaulting to 1000 [ 326.005887][ T4952] Bluetooth: hci17: command tx timeout [ 326.245852][ T4952] Bluetooth: hci15: command tx timeout [ 326.567031][ T4952] Bluetooth: hci18: command tx timeout [ 326.602826][ T9087] rxe_eth0 speed is unknown, defaulting to 1000 [ 326.751030][ T9062] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.751252][ T9062] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.751431][ T9062] bridge_slave_0: entered allmulticast mode [ 326.755076][ T9062] bridge_slave_0: entered promiscuous mode [ 326.808768][ T9062] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.808892][ T9062] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.809073][ T9062] bridge_slave_1: entered allmulticast mode [ 326.813452][ T9062] bridge_slave_1: entered promiscuous mode [ 326.886762][ T4952] Bluetooth: hci16: command tx timeout [ 327.004466][ T9062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.039401][ T9062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.192229][ T9062] team0: Port device team_slave_0 added [ 327.215480][ T9062] team0: Port device team_slave_1 added [ 327.304262][ T9062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.304291][ T9062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.304318][ T9062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.305435][ T9102] rxe_eth0 speed is unknown, defaulting to 1000 [ 327.451756][ T9062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.451776][ T9062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.451805][ T9062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.766050][ T4952] Bluetooth: hci19: command tx timeout [ 328.086247][ T4952] Bluetooth: hci17: command tx timeout [ 328.172026][ T9062] hsr_slave_0: entered promiscuous mode [ 328.190793][ T9062] hsr_slave_1: entered promiscuous mode [ 328.191643][ T9062] debugfs: 'hsr0' already exists in 'hsr' [ 328.191664][ T9062] Cannot create hsr debugfs directory [ 328.326614][ T4952] Bluetooth: hci15: command tx timeout [ 328.646943][ T4952] Bluetooth: hci18: command tx timeout [ 328.966029][ T4952] Bluetooth: hci16: command tx timeout [ 329.027883][ T9078] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.028074][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.028254][ T9078] bridge_slave_0: entered allmulticast mode [ 329.033212][ T9078] bridge_slave_0: entered promiscuous mode [ 329.095240][ T9078] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.097609][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.097976][ T9078] bridge_slave_1: entered allmulticast mode [ 329.100524][ T9078] bridge_slave_1: entered promiscuous mode [ 329.268781][ T9078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.340120][ T9078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.523911][ T9078] team0: Port device team_slave_0 added [ 329.560018][ T9078] team0: Port device team_slave_1 added [ 329.560271][ T9087] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.560679][ T9087] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.561197][ T9087] bridge_slave_0: entered allmulticast mode [ 329.563317][ T9087] bridge_slave_0: entered promiscuous mode [ 329.669567][ T9087] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.669684][ T9087] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.669834][ T9087] bridge_slave_1: entered allmulticast mode [ 329.672365][ T9087] bridge_slave_1: entered promiscuous mode [ 329.705450][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.705468][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.705495][ T9078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.770239][ T4952] Bluetooth: hci9: command 0x0406 tx timeout [ 329.770307][ T4952] Bluetooth: hci8: command 0x0406 tx timeout [ 329.770349][ T4952] Bluetooth: hci7: command 0x0406 tx timeout [ 329.774056][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.774075][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.774102][ T9078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.846095][ T5645] Bluetooth: hci19: command tx timeout [ 330.084954][ T9087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.104936][ T9078] hsr_slave_0: entered promiscuous mode [ 330.112411][ T9078] hsr_slave_1: entered promiscuous mode [ 330.113310][ T9078] debugfs: 'hsr0' already exists in 'hsr' [ 330.113329][ T9078] Cannot create hsr debugfs directory [ 330.166189][ T5647] Bluetooth: hci17: command tx timeout [ 330.203106][ T9087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.255074][ T9102] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.255619][ T9102] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.256089][ T9102] bridge_slave_0: entered allmulticast mode [ 330.277398][ T9102] bridge_slave_0: entered promiscuous mode [ 330.317320][ T9087] team0: Port device team_slave_0 added [ 330.352409][ T9102] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.352985][ T9102] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.353163][ T9102] bridge_slave_1: entered allmulticast mode [ 330.355186][ T9102] bridge_slave_1: entered promiscuous mode [ 330.396332][ T9087] team0: Port device team_slave_1 added [ 330.416274][ T5647] Bluetooth: hci15: command tx timeout [ 330.533004][ T9102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.547584][ T9102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.567468][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.567487][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.567513][ T9087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.647932][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.647952][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.647979][ T9087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.726044][ T5647] Bluetooth: hci18: command tx timeout [ 330.754990][ T9102] team0: Port device team_slave_0 added [ 330.786741][ T9102] team0: Port device team_slave_1 added [ 330.892493][ T9087] hsr_slave_0: entered promiscuous mode [ 330.893664][ T9087] hsr_slave_1: entered promiscuous mode [ 330.894440][ T9087] debugfs: 'hsr0' already exists in 'hsr' [ 330.894460][ T9087] Cannot create hsr debugfs directory [ 330.928906][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.928925][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.928951][ T9102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.931845][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.931860][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.931885][ T9102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.046641][ T5647] Bluetooth: hci16: command tx timeout [ 331.265202][ T9102] hsr_slave_0: entered promiscuous mode [ 331.267674][ T9102] hsr_slave_1: entered promiscuous mode [ 331.268475][ T9102] debugfs: 'hsr0' already exists in 'hsr' [ 331.268494][ T9102] Cannot create hsr debugfs directory [ 331.926258][ T5647] Bluetooth: hci19: command tx timeout [ 332.247091][ T5647] Bluetooth: hci17: command tx timeout [ 332.809172][ T5647] Bluetooth: hci18: command tx timeout [ 334.005837][ T5647] Bluetooth: hci19: command tx timeout [ 335.517662][ T5002] udevd[5002]: worker [6903] /devices/virtual/block/nbd0 timeout; kill it [ 335.517764][ T5002] udevd[5002]: seq 11811 '/devices/virtual/block/nbd0' killed [ 337.925761][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 343.056234][ T32] INFO: task syz.0.938:8813 blocked for more than 143 seconds. [ 343.056264][ T32] Not tainted syzkaller #0 [ 343.056275][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.056300][ T32] task:syz. ** replaying previous printk message ** [ 343.056300][ T32] task:syz.0.938 state:D stack:25728 pid:8813 tgid:8812 ppid:5634 task_flags:0x480140 flags:0x00080002 [ 343.056364][ T32] Call Trace: [ 343.056372][ T32] [ 343.056386][ T32] __schedule+0x17dd/0x5830 [ 343.056416][ T32] ? __lock_acquire+0x747/0x2de0 [ 343.056471][ T32] ? __pfx___schedule+0x10/0x10 [ 343.056491][ T32] ? lock_acquire+0x115/0x350 [ 343.056527][ T32] ? schedule+0x90/0x2b0 [ 343.056552][ T32] schedule+0x164/0x2b0 [ 343.056576][ T32] blk_mq_freeze_queue_wait+0xfc/0x180 [ 343.056605][ T32] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 343.056632][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 343.056679][ T32] queue_limits_commit_update_frozen+0x55/0xd0 [ 343.056715][ T32] nbd_set_size+0x4c5/0x7d0 [ 343.056742][ T32] ? __pfx_nbd_set_size+0x10/0x10 [ 343.056796][ T32] ? nla_memcpy+0x5b/0xc0 [ 343.056836][ T32] nbd_genl_reconfigure+0x7e1/0x1040 [ 343.056881][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 343.056917][ T32] ? __kmalloc_noprof+0x387/0x710 [ 343.056946][ T32] ? __nla_parse+0x40/0x60 [ 343.056979][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 343.057014][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 343.057045][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 343.057081][ T32] ? __lock_acquire+0x747/0x2de0 [ 343.057117][ T32] genl_rcv_msg+0x614/0x7a0 [ 343.057147][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.057170][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 343.057216][ T32] netlink_rcv_skb+0x226/0x4a0 [ 343.057247][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.057269][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.057311][ T32] ? down_read+0x2b9/0x320 [ 343.057341][ T32] genl_rcv+0x28/0x40 [ 343.057362][ T32] netlink_unicast+0x8ef/0xa80 [ 343.057409][ T32] netlink_sendmsg+0x7f0/0xb20 [ 343.057445][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.057478][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 343.057504][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 343.057535][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.057562][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 343.057592][ T32] ____sys_sendmsg+0x54e/0x850 [ 343.057621][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.057654][ T32] ? import_iovec+0x73/0xa0 [ 343.058296][ T32] ___sys_sendmsg+0x2a5/0x360 [ 343.058320][ T32] ? __lock_acquire+0x747/0x2de0 [ 343.058351][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.058378][ T32] ? futex_wait+0x2a2/0x390 [ 343.058439][ T32] ? __fget_files+0x3a2/0x420 [ 343.058463][ T32] ? __fget_files+0x2a/0x420 [ 343.058499][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 343.058539][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.058587][ T32] do_syscall_64+0x166/0x520 [ 343.058610][ T32] ? trace_irq_disable+0x3b/0x140 [ 343.058636][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.058658][ T32] ? clear_bhb_loop+0x70/0xc0 [ 343.058684][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.058704][ T32] RIP: 0033:0x7fc17ab9fb19 [ 343.058724][ T32] RSP: 002b:00007fc17baae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.058746][ T32] RAX: ffffffffffffffda RBX: 00007fc17ae25fa0 RCX: 00007fc17ab9fb19 [ 343.058770][ T32] RDX: 0000000000000044 RSI: 00002000000001c0 RDI: 0000000000000005 [ 343.058783][ T32] RBP: 00007fc17ac37b70 R08: 0000000000000000 R09: 0000000000000000 [ 343.058797][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.058809][ T32] R13: 00007fc17ae26038 R14: 00007fc17ae25fa0 R15: 00007ffedc8c6df8 [ 343.058845][ T32] [ 343.058854][ T32] INFO: task syz.0.938:8818 blocked for more than 143 seconds. [ 343.058870][ T32] Not tainted syzkaller #0 [ 343.058880][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.058889][ T32] task:syz.0.938 state:D stack:28248 pid:8818 tgid:8812 ppid:5634 task_flags:0x400040 flags:0x00080002 [ 343.058950][ T32] Call Trace: [ 343.058957][ T32] [ 343.058970][ T32] __schedule+0x17dd/0x5830 [ 343.059024][ T32] ? __pfx___schedule+0x10/0x10 [ 343.059057][ T32] ? schedule+0x90/0x2b0 [ 343.059082][ T32] schedule+0x164/0x2b0 [ 343.059105][ T32] schedule_preempt_disabled+0x13/0x30 [ 343.059127][ T32] __mutex_lock+0x7c4/0x15a0 [ 343.059156][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 343.059185][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 343.059209][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 343.059241][ T32] ? __lock_acquire+0x747/0x2de0 [ 343.059270][ T32] ? radix_tree_lookup+0x240/0x290 [ 343.059297][ T32] genl_rcv_msg+0x10b/0x7a0 [ 343.059326][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.059368][ T32] netlink_rcv_skb+0x226/0x4a0 [ 343.059397][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.059422][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.059467][ T32] ? down_read+0x2b9/0x320 [ 343.059497][ T32] genl_rcv+0x28/0x40 [ 343.059517][ T32] netlink_unicast+0x8ef/0xa80 [ 343.059563][ T32] netlink_sendmsg+0x7f0/0xb20 [ 343.059599][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.059631][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 343.059657][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 343.059688][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.059715][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 343.059777][ T32] ____sys_sendmsg+0x54e/0x850 [ 343.059807][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.059840][ T32] ? import_iovec+0x73/0xa0 [ 343.059869][ T32] ___sys_sendmsg+0x2a5/0x360 [ 343.059889][ T32] ? __lock_acquire+0x747/0x2de0 [ 343.059919][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.059946][ T32] ? tomoyo_path_number_perm+0x219/0x5f0 [ 343.060009][ T32] ? __fget_files+0x3a2/0x420 [ 343.060031][ T32] ? __fget_files+0x2a/0x420 [ 343.060066][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 343.060092][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.060111][ T32] ? kfree+0x4d/0x650 [ 343.060155][ T32] do_syscall_64+0x166/0x520 [ 343.060178][ T32] ? trace_irq_disable+0x3b/0x140 [ 343.060204][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.060224][ T32] ? clear_bhb_loop+0x70/0xc0 [ 343.060250][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.060269][ T32] RIP: 0033:0x7fc17ab9fb19 [ 343.060286][ T32] RSP: 002b:00007fc17ba8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.060307][ T32] RAX: ffffffffffffffda RBX: 00007fc17ae26090 RCX: 00007fc17ab9fb19 [ 343.060321][ T32] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000005 [ 343.060334][ T32] RBP: 00007fc17ac37b70 R08: 0000000000000000 R09: 0000000000000000 [ 343.060347][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.060360][ T32] R13: 00007fc17ae26128 R14: 00007fc17ae26090 R15: 00007ffedc8c6df8 [ 343.060395][ T32] [ 343.060403][ T32] INFO: task syz.0.938:8819 blocked for more than 143 seconds. [ 343.060417][ T32] Not tainted syzkaller #0 [ 343.060427][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.060436][ T32] task:syz.0.938 state:D stack:27168 pid:8819 tgid:8812 ppid:5634 task_flags:0x400140 flags:0x00080002 [ 343.060493][ T32] Call Trace: [ 343.060500][ T32] [ 343.060513][ T32] __schedule+0x17dd/0x5830 [ 343.060567][ T32] ? __pfx___schedule+0x10/0x10 [ 343.060599][ T32] ? schedule+0x90/0x2b0 [ 343.060625][ T32] schedule+0x164/0x2b0 [ 343.060649][ T32] schedule_preempt_disabled+0x13/0x30 [ 343.060669][ T32] __mutex_lock+0x7c4/0x15a0 [ 343.060698][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 343.060726][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 343.060751][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 343.060784][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 343.060820][ T32] ? radix_tree_lookup+0x240/0x290 [ 343.060846][ T32] genl_rcv_msg+0x10b/0x7a0 [ 343.060875][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.060906][ T32] ? __asan_memcpy+0x40/0x70 [ 343.060938][ T32] netlink_rcv_skb+0x226/0x4a0 [ 343.060968][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.060993][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.061039][ T32] ? down_read+0x2b9/0x320 [ 343.061070][ T32] genl_rcv+0x28/0x40 [ 343.061090][ T32] netlink_unicast+0x8ef/0xa80 [ 343.061136][ T32] netlink_sendmsg+0x7f0/0xb20 [ 343.061172][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.061204][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 343.061230][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 343.061261][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.061288][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 343.061318][ T32] ____sys_sendmsg+0x54e/0x850 [ 343.061347][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.061380][ T32] ? import_iovec+0x73/0xa0 [ 343.061409][ T32] ___sys_sendmsg+0x2a5/0x360 [ 343.061429][ T32] ? __lock_acquire+0x747/0x2de0 [ 343.061460][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.061487][ T32] ? tomoyo_path_number_perm+0x219/0x5f0 [ 343.061551][ T32] ? __fget_files+0x3a2/0x420 [ 343.061573][ T32] ? __fget_files+0x2a/0x420 [ 343.061609][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 343.061634][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.061655][ T32] ? kfree+0x4d/0x650 [ 343.061684][ T32] ? __pfx_kcov_ioctl+0x10/0x10 [ 343.061723][ T32] do_syscall_64+0x166/0x520 [ 343.061745][ T32] ? trace_irq_disable+0x3b/0x140 [ 343.061778][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.061798][ T32] ? clear_bhb_loop+0x70/0xc0 [ 343.061824][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.061844][ T32] RIP: 0033:0x7fc17ab9fb19 [ 343.061861][ T32] RSP: 002b:00007fc17ba6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.061880][ T32] RAX: ffffffffffffffda RBX: 00007fc17ae26180 RCX: 00007fc17ab9fb19 [ 343.061895][ T32] RDX: 0000000000008004 RSI: 00002000000005c0 RDI: 0000000000000003 [ 343.061908][ T32] RBP: 00007fc17ac37b70 R08: 0000000000000000 R09: 0000000000000000 [ 343.061922][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.061934][ T32] R13: 00007fc17ae26218 R14: 00007fc17ae26180 R15: 00007ffedc8c6df8 [ 343.061970][ T32] [ 343.061977][ T32] INFO: task syz.0.938:8823 blocked for more than 143 seconds. [ 343.061992][ T32] Not tainted syzkaller #0 [ 343.062002][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.062011][ T32] task:syz.0.938 state:D stack:27840 pid:8823 tgid:8812 ppid:5634 task_flags:0x400040 flags:0x00080002 [ 343.062069][ T32] Call Trace: [ 343.062076][ T32] [ 343.062089][ T32] __schedule+0x17dd/0x5830 [ 343.062143][ T32] ? __pfx___schedule+0x10/0x10 [ 343.062175][ T32] ? schedule+0x90/0x2b0 [ 343.062200][ T32] schedule+0x164/0x2b0 [ 343.062224][ T32] schedule_preempt_disabled+0x13/0x30 [ 343.062244][ T32] __mutex_lock+0x7c4/0x15a0 [ 343.062272][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 343.062301][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 343.062326][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 343.062351][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 343.062387][ T32] ? radix_tree_lookup+0x240/0x290 [ 343.062413][ T32] genl_rcv_msg+0x10b/0x7a0 [ 343.062441][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.062471][ T32] ? __asan_memcpy+0x40/0x70 [ 343.062503][ T32] netlink_rcv_skb+0x226/0x4a0 [ 343.062532][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.062557][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.062601][ T32] ? down_read+0x2b9/0x320 [ 343.062631][ T32] genl_rcv+0x28/0x40 [ 343.062652][ T32] netlink_unicast+0x8ef/0xa80 [ 343.062697][ T32] netlink_sendmsg+0x7f0/0xb20 [ 343.062733][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.062773][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 343.062799][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 343.062830][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.062858][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 343.062887][ T32] __sys_sendto+0x408/0x5a0 [ 343.062924][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 343.062983][ T32] ? fd_install+0x95/0x4e0 [ 343.063015][ T32] __x64_sys_sendto+0xde/0x100 [ 343.063049][ T32] do_syscall_64+0x166/0x520 [ 343.063071][ T32] ? trace_irq_disable+0x3b/0x140 [ 343.063097][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.063117][ T32] ? clear_bhb_loop+0x70/0xc0 [ 343.063142][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.063162][ T32] RIP: 0033:0x7fc17ab6034e [ 343.063179][ T32] RSP: 002b:00007fc17ba49e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 343.063199][ T32] RAX: ffffffffffffffda RBX: 00007fc17ba4b6c0 RCX: 00007fc17ab6034e [ 343.063214][ T32] RDX: 0000000000000028 RSI: 00007fc17ba4a000 RDI: 0000000000000008 [ 343.063226][ T32] RBP: 0000000000000000 R08: 00007fc17ba49f04 R09: 000000000000000c [ 343.063239][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 343.063252][ T32] R13: 00007fc17ba49f58 R14: 00007fc17ba4a000 R15: 0000000000000000 [ 343.063286][ T32] [ 343.063295][ T32] INFO: task syz.2.941:8822 blocked for more than 143 seconds. [ 343.063309][ T32] Not tainted syzkaller #0 [ 343.063319][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.063327][ T32] task:syz.2.941 state:D stack:22664 pid:8822 tgid:8821 ppid:5636 task_flags:0x400140 flags:0x00080002 [ 343.063378][ T32] Call Trace: [ 343.063385][ T32] [ 343.063398][ T32] __schedule+0x17dd/0x5830 [ 343.063452][ T32] ? __pfx___schedule+0x10/0x10 [ 343.063483][ T32] ? schedule+0x90/0x2b0 [ 343.063508][ T32] schedule+0x164/0x2b0 [ 343.063533][ T32] schedule_preempt_disabled+0x13/0x30 [ 343.063554][ T32] __mutex_lock+0x7c4/0x15a0 [ 343.063583][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 343.063612][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 343.063637][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 343.063662][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 343.063697][ T32] ? __lock_acquire+0x747/0x2de0 [ 343.063720][ T32] ? radix_tree_lookup+0x240/0x290 [ 343.063746][ T32] genl_rcv_msg+0x10b/0x7a0 [ 343.063783][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.063824][ T32] netlink_rcv_skb+0x226/0x4a0 [ 343.063854][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.063878][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.063923][ T32] ? down_read+0x2b9/0x320 [ 343.063954][ T32] genl_rcv+0x28/0x40 [ 343.063974][ T32] netlink_unicast+0x8ef/0xa80 [ 343.064020][ T32] netlink_sendmsg+0x7f0/0xb20 [ 343.064055][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.064087][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 343.064113][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 343.064144][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.064171][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 343.064201][ T32] __sys_sendto+0x408/0x5a0 [ 343.064237][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 343.064298][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 343.064331][ T32] __x64_sys_sendto+0xde/0x100 [ 343.064365][ T32] do_syscall_64+0x166/0x520 [ 343.064387][ T32] ? trace_irq_disable+0x3b/0x140 [ 343.064413][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.064434][ T32] ? clear_bhb_loop+0x70/0xc0 [ 343.064460][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.064479][ T32] RIP: 0033:0x7fcfb536034e [ 343.064496][ T32] RSP: 002b:00007fcfb6247e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 343.064516][ T32] RAX: ffffffffffffffda RBX: 00007fcfb62496c0 RCX: 00007fcfb536034e [ 343.064530][ T32] RDX: 0000000000000020 RSI: 00007fcfb6248000 RDI: 0000000000000008 [ 343.064544][ T32] RBP: 0000000000000000 R08: 00007fcfb6247f04 R09: 000000000000000c [ 343.064557][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 343.064569][ T32] R13: 00007fcfb6247f58 R14: 00007fcfb6248000 R15: 0000000000000000 [ 343.064604][ T32] [ 343.064612][ T32] INFO: task syz.3.942:8826 blocked for more than 143 seconds. [ 343.064626][ T32] Not tainted syzkaller #0 [ 343.064636][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.064644][ T32] task:syz.3.942 state:D stack:25128 pid:8826 tgid:8825 ppid:5635 task_flags:0x400140 flags:0x00080002 [ 343.064699][ T32] Call Trace: [ 343.064705][ T32] [ 343.064719][ T32] __schedule+0x17dd/0x5830 [ 343.064780][ T32] ? __pfx___schedule+0x10/0x10 [ 343.064813][ T32] ? schedule+0x90/0x2b0 [ 343.064838][ T32] schedule+0x164/0x2b0 [ 343.064862][ T32] schedule_preempt_disabled+0x13/0x30 [ 343.064883][ T32] __mutex_lock+0x7c4/0x15a0 [ 343.064912][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 343.064941][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 343.064965][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 343.064991][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 343.065026][ T32] ? __lock_acquire+0x747/0x2de0 [ 343.065049][ T32] ? radix_tree_lookup+0x240/0x290 [ 343.065075][ T32] genl_rcv_msg+0x10b/0x7a0 [ 343.065104][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.065146][ T32] netlink_rcv_skb+0x226/0x4a0 [ 343.065175][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.065199][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.065245][ T32] ? down_read+0x2b9/0x320 [ 343.065275][ T32] genl_rcv+0x28/0x40 [ 343.065295][ T32] netlink_unicast+0x8ef/0xa80 [ 343.065341][ T32] netlink_sendmsg+0x7f0/0xb20 [ 343.065376][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.065410][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 343.065436][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 343.065466][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.065493][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 343.067322][ T32] __sys_sendto+0x408/0x5a0 [ 343.067363][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 343.067420][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 343.067450][ T32] __x64_sys_sendto+0xde/0x100 [ 343.067482][ T32] do_syscall_64+0x166/0x520 [ 343.067502][ T32] ? trace_irq_disable+0x3b/0x140 [ 343.067526][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.067545][ T32] ? clear_bhb_loop+0x70/0xc0 [ 343.067568][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.067587][ T32] RIP: 0033:0x7f47f816034e [ 343.067603][ T32] RSP: 002b:00007f47f9016e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 343.067622][ T32] RAX: ffffffffffffffda RBX: 00007f47f90186c0 RCX: 00007f47f816034e [ 343.067636][ T32] RDX: 0000000000000020 RSI: 00007f47f9017000 RDI: 0000000000000007 [ 343.067648][ T32] RBP: 0000000000000000 R08: 00007f47f9016f04 R09: 000000000000000c [ 343.067660][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 343.067671][ T32] R13: 00007f47f9016f58 R14: 00007f47f9017000 R15: 0000000000000000 [ 343.067703][ T32] [ 343.067710][ T32] INFO: task syz.3.942:8828 blocked for more than 143 seconds. [ 343.067724][ T32] Not tainted syzkaller #0 [ 343.067733][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.067741][ T32] task:syz.3.942 state:D stack:26720 pid:8828 tgid:8825 ppid:5635 task_flags:0x400040 flags:0x00080002 [ 343.067800][ T32] Call Trace: [ 343.067807][ T32] [ 343.067819][ T32] __schedule+0x17dd/0x5830 [ 343.067868][ T32] ? __pfx___schedule+0x10/0x10 [ 343.067897][ T32] ? schedule+0x90/0x2b0 [ 343.067921][ T32] schedule+0x164/0x2b0 [ 343.067942][ T32] schedule_preempt_disabled+0x13/0x30 [ 343.067961][ T32] __mutex_lock+0x7c4/0x15a0 [ 343.067988][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 343.068014][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 343.068037][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 343.068060][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 343.068092][ T32] ? radix_tree_lookup+0x240/0x290 [ 343.068116][ T32] genl_rcv_msg+0x10b/0x7a0 [ 343.068144][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.068171][ T32] ? __asan_memcpy+0x40/0x70 [ 343.068200][ T32] netlink_rcv_skb+0x226/0x4a0 [ 343.068227][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.068249][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.068291][ T32] ? down_read+0x2b9/0x320 [ 343.068318][ T32] genl_rcv+0x28/0x40 [ 343.068337][ T32] netlink_unicast+0x8ef/0xa80 [ 343.068379][ T32] netlink_sendmsg+0x7f0/0xb20 [ 343.068412][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.068441][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 343.068466][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 343.068495][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.068519][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 343.068547][ T32] __sys_sendto+0x408/0x5a0 [ 343.068580][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 343.068634][ T32] ? fd_install+0x95/0x4e0 [ 343.068664][ T32] __x64_sys_sendto+0xde/0x100 [ 343.068695][ T32] do_syscall_64+0x166/0x520 [ 343.068715][ T32] ? trace_irq_disable+0x3b/0x140 [ 343.068738][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.068764][ T32] ? clear_bhb_loop+0x70/0xc0 [ 343.068788][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.069191][ T32] RIP: 0033:0x7f47f816034e [ 343.069210][ T32] RSP: 002b:00007f47f8ff5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 343.069228][ T32] RAX: ffffffffffffffda RBX: 00007f47f8ff76c0 RCX: 00007f47f816034e [ 343.069241][ T32] RDX: 0000000000000020 RSI: 00007f47f8ff6000 RDI: 000000000000000a [ 343.069253][ T32] RBP: 0000000000000000 R08: 00007f47f8ff5f04 R09: 000000000000000c [ 343.069265][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 343.069277][ T32] R13: 00007f47f8ff5f58 R14: 00007f47f8ff6000 R15: 0000000000000000 [ 343.069309][ T32] [ 343.069316][ T32] INFO: task syz.4.943:8833 blocked for more than 143 seconds. [ 343.069330][ T32] Not tainted syzkaller #0 [ 343.069339][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.069346][ T32] task:syz.4.943 state:D stack:25464 pid:8833 tgid:8832 ppid:5637 task_flags:0x400140 flags:0x00080002 [ 343.069397][ T32] Call Trace: [ 343.069403][ T32] [ 343.069415][ T32] __schedule+0x17dd/0x5830 [ 343.069464][ T32] ? __pfx___schedule+0x10/0x10 [ 343.069494][ T32] ? schedule+0x90/0x2b0 [ 343.069517][ T32] schedule+0x164/0x2b0 [ 343.069539][ T32] schedule_preempt_disabled+0x13/0x30 [ 343.069557][ T32] __mutex_lock+0x7c4/0x15a0 [ 343.069584][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 343.069610][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 343.069632][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 343.069655][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 343.069688][ T32] ? radix_tree_lookup+0x240/0x290 [ 343.069711][ T32] genl_rcv_msg+0x10b/0x7a0 [ 343.069738][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.069773][ T32] ? __asan_memcpy+0x40/0x70 [ 343.069803][ T32] netlink_rcv_skb+0x226/0x4a0 [ 343.069830][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.069852][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.069894][ T32] ? down_read+0x2b9/0x320 [ 343.069921][ T32] genl_rcv+0x28/0x40 [ 343.069940][ T32] netlink_unicast+0x8ef/0xa80 [ 343.069981][ T32] netlink_sendmsg+0x7f0/0xb20 [ 343.070015][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.070045][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 343.070069][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 343.070097][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.070121][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 343.070149][ T32] __sys_sendto+0x408/0x5a0 [ 343.070182][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 343.070239][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 343.070267][ T32] __x64_sys_sendto+0xde/0x100 [ 343.070299][ T32] do_syscall_64+0x166/0x520 [ 343.070319][ T32] ? trace_irq_disable+0x3b/0x140 [ 343.070342][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.070361][ T32] ? clear_bhb_loop+0x70/0xc0 [ 343.070399][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.070418][ T32] RIP: 0033:0x7ff46df6034e [ 343.070433][ T32] RSP: 002b:00007ff46ef09e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 343.070451][ T32] RAX: ffffffffffffffda RBX: 00007ff46ef0b6c0 RCX: 00007ff46df6034e [ 343.070464][ T32] RDX: 0000000000000020 RSI: 00007ff46ef0a000 RDI: 000000000000000b [ 343.070476][ T32] RBP: 0000000000000000 R08: 00007ff46ef09f04 R09: 000000000000000c [ 343.070488][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 343.070499][ T32] R13: 00007ff46ef09f58 R14: 00007ff46ef0a000 R15: 0000000000000000 [ 343.070530][ T32] [ 343.070538][ T32] INFO: task syz.1.950:8855 blocked for more than 143 seconds. [ 343.070551][ T32] Not tainted syzkaller #0 [ 343.070559][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.070567][ T32] task:syz.1.950 state:D stack:27440 pid:8855 tgid:8854 ppid:5633 task_flags:0x400140 flags:0x00080002 [ 343.070619][ T32] Call Trace: [ 343.070625][ T32] [ 343.070637][ T32] __schedule+0x17dd/0x5830 [ 343.070686][ T32] ? __pfx___schedule+0x10/0x10 [ 343.070715][ T32] ? schedule+0x90/0x2b0 [ 343.073817][ T32] schedule+0x164/0x2b0 [ 343.073845][ T32] schedule_preempt_disabled+0x13/0x30 [ 343.073864][ T32] __mutex_lock+0x7c4/0x15a0 [ 343.073890][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 343.073916][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 343.073939][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 343.073962][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 343.073995][ T32] ? radix_tree_lookup+0x240/0x290 [ 343.074018][ T32] genl_rcv_msg+0x10b/0x7a0 [ 343.074045][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.074073][ T32] ? __asan_memcpy+0x40/0x70 [ 343.074102][ T32] netlink_rcv_skb+0x226/0x4a0 [ 343.074129][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.074151][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.074193][ T32] ? down_read+0x2b9/0x320 [ 343.074221][ T32] genl_rcv+0x28/0x40 [ 343.074238][ T32] netlink_unicast+0x8ef/0xa80 [ 343.074280][ T32] netlink_sendmsg+0x7f0/0xb20 [ 343.074313][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.074343][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 343.074367][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 343.074395][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.074420][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 343.074447][ T32] __sys_sendto+0x408/0x5a0 [ 343.074480][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 343.074537][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 343.074566][ T32] __x64_sys_sendto+0xde/0x100 [ 343.074596][ T32] do_syscall_64+0x166/0x520 [ 343.074616][ T32] ? trace_irq_disable+0x3b/0x140 [ 343.074640][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.074660][ T32] ? clear_bhb_loop+0x70/0xc0 [ 343.074683][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.074702][ T32] RIP: 0033:0x7f8f8cf6034e [ 343.074718][ T32] RSP: 002b:00007f8f8ddf9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 343.074737][ T32] RAX: ffffffffffffffda RBX: 00007f8f8ddfb6c0 RCX: 00007f8f8cf6034e [ 343.074751][ T32] RDX: 0000000000000020 RSI: 00007f8f8ddfa000 RDI: 0000000000000008 [ 343.074771][ T32] RBP: 0000000000000000 R08: 00007f8f8ddf9f04 R09: 000000000000000c [ 343.074783][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 343.074794][ T32] R13: 00007f8f8ddf9f58 R14: 00007f8f8ddfa000 R15: 0000000000000000 [ 343.074826][ T32] [ 343.074872][ T32] [ 343.074872][ T32] Showing all locks held in the system: [ 343.074882][ T32] locks held by pr/ttyS0/31: 2, last CPU#1: [ 343.074896][ T32] #0: ffffffff8fe33dd8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 343.074963][ T32] #1: ffffffff9bfef6d8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 343.075015][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 343.075028][ T32] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 343.075100][ T32] locks held by getty/5390: 2, on CPU#1: [ 343.075113][ T32] #0: ffff88803806c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 343.075162][ T32] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 343.075229][ T32] locks held by udevd/6903: 1, on CPU#0: [ 343.075241][ T32] #0: ffff88802844d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 343.075296][ T32] locks held by syz.0.938/8813: 6, on CPU#0: [ 343.075309][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.078349][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.078398][ T32] #2: ffff888028435218 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 343.078452][ T32] #3: ffff888027be6d08 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 343.078496][ T32] #4: ffff888027be66d0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 343.078571][ T32] #5: ffff888027be6708 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 343.078632][ T32] locks held by syz.0.938/8818: 2, on CPU#1: [ 343.078645][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.078689][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.078745][ T32] locks held by syz.0.938/8819: 2, on CPU#1: [ 343.078764][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.078808][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.078853][ T32] locks held by syz.0.938/8823: 2, on CPU#1: [ 343.078866][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.078909][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.078955][ T32] locks held by syz.2.941/8822: 2, on CPU#1: [ 343.078967][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.079010][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.079056][ T32] locks held by syz.3.942/8826: 2, on CPU#0: [ 343.079068][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.079112][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.079157][ T32] locks held by syz.3.942/8828: 2, on CPU#0: [ 343.079170][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.079213][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.079258][ T32] locks held by syz.4.943/8833: 2, on CPU#0: [ 343.079271][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.079315][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.079360][ T32] locks held by syz.1.950/8855: 2, on CPU#0: [ 343.079373][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.079416][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.079461][ T32] locks held by syz-executor/8862: 2, on CPU#1: [ 343.079474][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.079517][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.079563][ T32] locks held by syz-executor/8865: 2, on CPU#0: [ 343.079576][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.079619][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.079664][ T32] locks held by syz-executor/8884: 2, on CPU#0: [ 343.079677][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.079721][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.079774][ T32] locks held by syz-executor/8886: 2, on CPU#0: [ 343.079786][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.079830][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.081584][ T32] locks held by syz-executor/8911: 2, on CPU#0: [ 343.081599][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.081643][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.081690][ T32] locks held by syz-executor/8956: 2, on CPU#0: [ 343.081703][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.081745][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.081798][ T32] locks held by syz-executor/8967: 2, on CPU#0: [ 343.081810][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.081851][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.081895][ T32] locks held by syz-executor/8986: 2, on CPU#0: [ 343.081908][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.081950][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.081994][ T32] locks held by syz-executor/8989: 2, on CPU#0: [ 343.082007][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.082049][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.082093][ T32] locks held by syz-executor/9009: 2, on CPU#0: [ 343.082106][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.082147][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.082193][ T32] locks held by syz-executor/9051: 2, on CPU#0: [ 343.082205][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.082248][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.082292][ T32] locks held by syz-executor/9062: 2, on CPU#0: [ 343.082304][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.082346][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.082390][ T32] locks held by syz-executor/9078: 2, on CPU#0: [ 343.082403][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.082445][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.082490][ T32] locks held by syz-executor/9087: 2, on CPU#0: [ 343.082502][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.082543][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.082588][ T32] locks held by syz-executor/9102: 2, on CPU#0: [ 343.082601][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.082642][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 343.087350][ T32] [ 343.087356][ T32] ============================================= [ 343.087356][ T32] [ 343.087366][ T32] NMI backtrace for cpu 0 [ 343.087380][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 343.087401][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 343.087413][ T32] Call Trace: [ 343.087421][ T32] [ 343.087429][ T32] dump_stack_lvl+0xe8/0x150 [ 343.087465][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 343.087485][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 343.087512][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 343.087547][ T32] sys_info+0x135/0x170 [ 343.087578][ T32] watchdog+0x1073/0x10f0 [ 343.087615][ T32] ? watchdog+0x209/0x10f0 [ 343.087650][ T32] kthread+0x38b/0x480 [ 343.087674][ T32] ? __pfx_watchdog+0x10/0x10 [ 343.087699][ T32] ? __pfx_kthread+0x10/0x10 [ 343.087724][ T32] ret_from_fork+0x514/0xb70 [ 343.087750][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 343.087782][ T32] ? __switch_to+0xc78/0x1410 [ 343.087816][ T32] ? __pfx_kthread+0x10/0x10 [ 343.087841][ T32] ret_from_fork_asm+0x1a/0x30 [ 343.087881][ T32] [ 343.087901][ T32] Sending NMI from CPU 0 to CPUs 1: [ 343.087929][ C1] NMI backtrace for cpu 1 [ 343.087943][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 343.087964][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 343.087975][ C1] RIP: 0010:__lock_acquire+0x4fd/0x2de0 [ 343.088001][ C1] Code: 24 45 8b a6 a0 0b 00 00 41 8d 4c 24 ff 83 f9 ff 41 bd ff ff ff ff 44 0f 4c e9 41 ff c5 41 8d 5c 24 01 49 ff cc 89 d9 83 c1 fe <78> 41 45 89 e7 41 81 e7 ff ff ff 7f 83 f9 31 73 1d 4b 8d 0c bf 41 [ 343.088017][ C1] RSP: 0018:ffffc900001d7478 EFLAGS: 00000057 [ 343.088033][ C1] RAX: 1100000000022007 RBX: 0000000000000002 RCX: 0000000000000000 [ 343.088046][ C1] RDX: 0000000000000003 RSI: 0000000000022000 RDI: 1100000000000000 [ 343.088059][ C1] RBP: ffff88801f2c0bd8 R08: ffffffff817879cf R09: 0000000000000000 [ 343.088071][ C1] R10: ffffc900001d7758 R11: ffffffff81b3a880 R12: 0000000000000000 [ 343.088083][ C1] R13: 0000000000000000 R14: ffff88801f2c0000 R15: ffff88801f2c0000 [ 343.088097][ C1] FS: 0000000000000000(0000) GS:ffff88812371f000(0000) knlGS:0000000000000000 [ 343.088112][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.088125][ C1] CR2: 00007f74f5e5fe9c CR3: 000000007af02000 CR4: 00000000003526f0 [ 343.088143][ C1] Call Trace: [ 343.088149][ C1] [ 343.088158][ C1] ? kasan_save_track+0x4f/0x80 [ 343.088182][ C1] ? __kasan_slab_free+0x5c/0x80 [ 343.088204][ C1] ? kmem_cache_free+0x182/0x650 [ 343.088226][ C1] ? __netif_receive_skb_core+0x2b8a/0x30f0 [ 343.088251][ C1] ? process_backlog+0x727/0x18b0 [ 343.088309][ C1] ? lock_acquire+0x115/0x350 [ 343.088331][ C1] lock_acquire+0x115/0x350 [ 343.088351][ C1] ? unwind_next_frame+0x8f/0x2550 [ 343.088379][ C1] ? unwind_next_frame+0x8f/0x2550 [ 343.088402][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 343.088419][ C1] ? unwind_next_frame+0x8f/0x2550 [ 343.088443][ C1] unwind_next_frame+0xac/0x2550 [ 343.088466][ C1] ? unwind_next_frame+0x8f/0x2550 [ 343.088491][ C1] ? ret_from_fork+0x514/0xb70 [ 343.088510][ C1] ? unwind_next_frame+0x8f/0x2550 [ 343.088534][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 343.088557][ C1] arch_stack_walk+0x11b/0x150 [ 343.088582][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 343.088602][ C1] stack_trace_save+0xa9/0x100 [ 343.088623][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 343.088647][ C1] ? __lock_acquire+0x747/0x2de0 [ 343.088670][ C1] kasan_save_track+0x3e/0x80 [ 343.088691][ C1] ? kasan_save_track+0x3e/0x80 [ 343.088712][ C1] ? kasan_save_free_info+0x40/0x50 [ 343.088730][ C1] ? __kasan_slab_free+0x5c/0x80 [ 343.088752][ C1] ? kmem_cache_free+0x182/0x650 [ 343.088772][ C1] ? dst_destroy+0x22f/0x340 [ 343.088794][ C1] ? rcu_core+0x92e/0x1230 [ 343.088819][ C1] ? handle_softirqs+0x265/0x8d0 [ 343.088842][ C1] ? run_ksoftirqd+0x36/0x60 [ 343.088866][ C1] ? smpboot_thread_fn+0x5f8/0xb30 [ 343.088883][ C1] ? kthread+0x38b/0x480 [ 343.088901][ C1] ? ret_from_fork+0x514/0xb70 [ 343.088919][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 343.088954][ C1] ? dst_destroy+0x22f/0x340 [ 343.088975][ C1] kasan_save_free_info+0x40/0x50 [ 343.088994][ C1] __kasan_slab_free+0x5c/0x80 [ 343.089017][ C1] kmem_cache_free+0x182/0x650 [ 343.089041][ C1] dst_destroy+0x22f/0x340 [ 343.089063][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 343.089086][ C1] ? rcu_core+0x8b0/0x1230 [ 343.089109][ C1] rcu_core+0x92e/0x1230 [ 343.089137][ C1] ? __pfx_rcu_core+0x10/0x10 [ 343.089167][ C1] handle_softirqs+0x265/0x8d0 [ 343.089195][ C1] run_ksoftirqd+0x36/0x60 [ 343.089219][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 343.089238][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 343.089265][ C1] kthread+0x38b/0x480 [ 343.089285][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 343.089301][ C1] ? __pfx_kthread+0x10/0x10 [ 343.089321][ C1] ret_from_fork+0x514/0xb70 [ 343.089345][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 343.089364][ C1] ? __switch_to+0xc78/0x1410 [ 343.089391][ C1] ? __pfx_kthread+0x10/0x10 [ 343.089411][ C1] ret_from_fork_asm+0x1a/0x30 [ 343.089435][ C1] [ 343.092209][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 346.862460][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 346.871591][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 346.881657][ T32] Call Trace: [ 346.884957][ T32] [ 346.887905][ T32] vpanic+0x26f/0x710 [ 346.892002][ T32] panic+0xc5/0xd0 [ 346.895737][ T32] ? __pfx_panic+0x10/0x10 [ 346.900166][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 346.905642][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 346.911041][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 346.917228][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 346.923412][ T32] watchdog+0x10e7/0x10f0 [ 346.927776][ T32] ? watchdog+0x209/0x10f0 [ 346.932224][ T32] kthread+0x38b/0x480 [ 346.936414][ T32] ? __pfx_watchdog+0x10/0x10 [ 346.941199][ T32] ? __pfx_kthread+0x10/0x10 [ 346.945808][ T32] ret_from_fork+0x514/0xb70 [ 346.950422][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 346.955550][ T32] ? __switch_to+0xc78/0x1410 [ 346.960255][ T32] ? __pfx_kthread+0x10/0x10 [ 346.964866][ T32] ret_from_fork_asm+0x1a/0x30 [ 346.969662][ T32] [ 346.972981][ T32] Kernel Offset: disabled [ 346.977299][ T32] Rebooting in 86400 seconds..