last executing test programs: 20.465888558s ago: executing program 1 (id=12805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x5}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a0001", 0x37}], 0x1}, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) connect$802154_dgram(r2, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r2, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b0000"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x2, 0x200001}, 0x50) 20.197207644s ago: executing program 3 (id=12808): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 19.378629214s ago: executing program 1 (id=12813): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0003090004000000a60c6eec00be00fb2ffffe8000000000000000000000000000aaff02"], 0x131) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000025bd7000000c0400"/22], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd0, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x44}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x20}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008050}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) 19.191276864s ago: executing program 2 (id=12814): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000180), 0x19) r1 = socket(0x2, 0x3, 0x6) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060102000000000000000000000000090002"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x58, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff01"], 0x24}, 0x1, 0x0, 0x0, 0x44000014}, 0x4c884) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f00000000c0)=0xfff) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x88, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000005e00010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="039600009311664d8e837e5c9a822aea819dcd4b13f5af65baa00185efc5d9540a5e43c55de16d067430cbcc51e2ab35d12f3d67a15470ae7a7720ea77b9ff3f5ebcbf60ea64c8cd7ddbcbd2977a1b6e010801570f688b6b2394ba81341ebc3b56d6df1c8d6e8ad181b463e1a94b276ad44d7671cb703eb9f017e54a9cd1fbda074de0d5e57fb0435ff52c456212748777bffbfecb245893b8357577407b4aac46f1974b685bff2949138d063ea55391f430ce4aefe030dd941b34df35a33d41e21c41b89db92cc06b282e4046855be054003d5fec02c4bc79fa176b27789b5c7788eec390bc249cb22c8534e619c3b9d18d5c132f8cf7b4ea84641c2637c4df9b54bb472e9f9d7f437d93d40e595852923db1cd5e373bcd035f5200d3d92fccc5801da957548bd3550e1c0f106b9a429c7cbfe7bd5d51b66892af73c4de8f8150fc569c34110471ec254b249b58e762b6eab872e0fb1cebf138152b69b8bd1c72ba3fbc28eda523755d1eef78dbbfc3c178e3c46ac892d9e7e8f92a", @ANYRES32=r5, @ANYRESOCT=r6], 0x1c}}, 0x884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 19.174262753s ago: executing program 3 (id=12815): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x341601, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2dc, 0x10, 0x1, 0x201, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x9}, [@generic="1f92217798e070fd7c168974beefd991429cd476fbbda9ffae29f4e24e1e9dec659bbfb04f8aaec759f4d96d3ddf6ec04cc62e2c6e964add4a517412", @generic="9aa6bec5c20ffd275c6e394d1f95c40f1eb45cb6b9c3dd222e451503ed53871e0ba42ca5a4edccafedd4549aa0b5ca1cda8e7ce9123d954116ded632b8945f66331e6092df", @nested={0xcc, 0xaa, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x64}, @generic="8eb3396eadee57d221297f00ad9a63b561804eb4adc110acd39e54ec70095195776ede0ee6741b18620cb7fa3058362dc57ae79f18d6232f2ff1b51b9d7d0a2d77fa46f51f87de9d3041a1e13a5612b3d78cab4d97067640574d430a271c5cbb086adea6ba88cbf5457d71ee9167374c0cf1f49cbcf7821bf1c09a1938d60969a79a839b8078b43a9bd84a6e95e26cbc7da53b210f1bb10d1b2f2ca40f6a462e3d5561f1aff4280720fc1416b41d748dd7db89c45d53e852a70d0a4e"]}, @typed={0x9a, 0x84, 0x0, 0x0, @binary="97f52be56f3e503f088d5d19e4ff4c9bd7ee2fa670785172b8fc3927662590a59c2535dcb4ae6b85bb012717766974b62c4db02b673ff45896632eaf75eef3ec06f20115518af0c0b28cd05452ed0f0973ee2fc5515a52b1b21cec2a5469287cba5598d3885b7cee03109daf02f4f64115e831a1280f5e9ae8db3d73883b2bc655ec7968b2aa8137c4cf963f868e5ac5781fde61e118"}, @nested={0x34, 0x152, 0x0, 0x1, [@typed={0x6, 0xa5, 0x0, 0x0, @str='&\x00'}, @generic="a13e2526635711ef268d373a155152475cad84aa40c3c36f00de4651f2488689b2deed048aac0139"]}, @nested={0x9d, 0x104, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x123}, @generic="6f6629f2f246e780daacc83229ad456dcbda30c57ac745847a84bbcac685e1a37ec20ce35667ac225d3922e8b9a450c536362ac52b6fef2bd35aac55f845e9eb4cbb191b9991f3beb10225de8a606756ec2ee169f91cb18370db2f30856a467b535e73cabb5c5863162976517155c2234b02c73c5b77acb5c688ca98853f9cb04a939beff1", @typed={0x6, 0x7a, 0x0, 0x0, @str='\'\x00'}]}, @typed={0x8, 0xd6, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x400c010}, 0x48084) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) (async) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000440)=0x10001) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000004c0)={0x3, 0x1000, 0x8, 0x0, 0x1}, 0x14) (async) ppoll(&(0x7f0000000500)=[{r0, 0x11}, {r2, 0x14a0}, {r1}, {r1, 0x2000}, {r1, 0x20}], 0x5, &(0x7f0000000540)={0x0, 0x989680}, &(0x7f0000000580)={[0xe4bc]}, 0x8) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x5, 0x7, 0x14, @empty, @loopback, 0x10, 0x20, 0x6, 0x2}}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x2, 0xfff3}, {0x8, 0xd}, {0xe, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0xe20bebe6b9ee74ce) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r7, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1e}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048004}, 0x4c848) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x0, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, &(0x7f0000000900), {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x2, 0x0, 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x500, {0xffffffffffff1968}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "f93b"}}, @common=@unspec=@cgroup0={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xe}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0xe}, 0xff000000, 0xff000000, 'pim6reg\x00', 'dummy0\x00', {}, {0xff}, 0x8, 0x2, 0x2a}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0x7, 0x8}}, @common=@ah={{0x30}, {[0x8, 0x256], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x2, 0x3, 0x1, 0x1, 0x4], 0x2, 0x2}, {0x2, [0x2, 0x5, 0xd43e43705f4d9b76, 0x3, 0x5, 0x1], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) socket$kcm(0x29, 0x2, 0x0) (async) r10 = socket(0x27, 0x800, 0x4) bind$tipc(r10, &(0x7f0000000d40)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4, 0x4}}, 0x10) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000d80)={@dev={0xfe, 0x80, '\x00', 0x24}, 0x1, 0x2, 0x1, 0x3, 0x1, 0x2}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000e00)=0x100000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x202303, 0x0) (async) setsockopt$packet_int(r10, 0x107, 0x13, &(0x7f0000000e80)=0x6, 0x4) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000ec0)={0x4, 0x497, 0x3, 0x6, 0x3ff}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r12, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r13, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x10}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004891}, 0x0) 18.926592704s ago: executing program 0 (id=12816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x4056) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='e', 0x1) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080)=r2, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1a, 0x16, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @tracing=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff135d}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x15, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2c, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, 0x0, 0x0) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6}, 0x18) sendmmsg(r5, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000000340)="10959e9532e962b76f8969437a35e7ba8d36dcbd62c4f83390e3d57669194bfa4beb0549525e3e0e7dc2c8880095ad26cdacdd8b95a2ff80cf20418ac0ed6839ae0849da4a675b64ee66c632", 0x4c}, {&(0x7f00000003c0)="4571aadfb14e9d7355b8df590c8050941373b9d5ab64986159012bdc2e3eb13e5d13bbc7939a2702891ba0002552c057c76c345947881be110ed7f1fe1d314e531b86efa2173cf30c5906dc26a579006450a6e2c2e2f267234e155bdec2bf0a0781a669f2cc5a28b7717d2ebac09f55e69", 0x71}, {0x0}, {0x0}], 0x4}}], 0x2, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfe, 0x0, 0x0) close(r4) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010127bd7002fbdbdf251000000008000300", @ANYRES32, @ANYBLOB="08000600", @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 18.629971111s ago: executing program 3 (id=12817): unshare(0x6020400) close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000004340), r1) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000004700)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4890) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f00000055c0)={&(0x7f0000005400)=[&(0x7f0000000000)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f00000000c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000000100)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000000140)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000000280)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x8, 0x4}, {0x979}, {0x5, 0x8}, {0x7, 0x536}, {0x1000, 0xb4d}, {0x81, 0xfffffffffffffff9}, {0x4, 0x6}, {0xff, 0x3ff}, {0x1, 0x3}, {0x5, 0x4}, {0x7, 0x9d}, {0x13800000, 0x3}, {0x9b59, 0x1}, {0x1, 0xe80b}, {0xfffffffffffffff9, 0xf5}, {0xf, 0x1}, {0x2, 0x80}, {0xf, 0x2f0}, {0x3, 0x1}, {0x9, 0xbcb}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x2}, {0x0, 0x5}, {0x6, 0x80}, {0x1, 0x5}, {0x4, 0xffff}, {0xfffffffffffffffd, 0x200}, {0xfffffffffffffff8}, {0x7ff, 0x73}, {0x2, 0x3}, {0x6, 0x9}, {0x4, 0x2}, {0x1, 0x2}, {0xf8}, {0x101, 0x4}, {}, {0x5, 0x6}, {0x8, 0x84}, {0x5, 0x401}, {0x186b, 0x9}, {0x8, 0x2}, {0xb7f, 0x1}, {0x3, 0x8}, {0x100000001, 0x8}, {0x8000000000000000}, {0x7fffffff, 0x8000000000000000}, {0x2fc0, 0x400}, {0x0, 0xffff}, {0x1, 0x3}, {0xfffffffffffffffd, 0x6}, {0x9, 0xfffffffffffffffa}, {0x7ff, 0xffffffffffffffff}, {0x4, 0x8}, {0x400, 0x16a9}, {0x63, 0x1}, {0x4, 0x7fff}, {0x8, 0x1}, {0x401, 0x200}, {0xffffffffffffc579, 0x8001}, {0x5, 0x100}, {0x1, 0x9}, {0x28000000, 0xd68}, {0xffff}, {0x100000001, 0x2}, {0x6}, {0x6d9accd0, 0x3}, {0x7f, 0x7ff}, {0x9, 0x3}, {0x2, 0x9904}, {0x1, 0x7fffffff}, {0x7fffffffffffffff, 0x2}, {0xe, 0xfffffffffffff001}, {0x1, 0x80000001}, {0x401, 0x79}, {0x2, 0x9}, {0x1, 0xfffffffffffff001}, {0x10000, 0x5}, {0x4, 0x5}, {0x80000000, 0x2}, {0x9, 0x6}, {0xeac, 0x8001}, {0x7, 0x2}, {0x100, 0x401}, {0x9, 0x92}, {0x9, 0x81}, {}, {0x5, 0xc2}, {0x1, 0x7}, {0x3, 0x3}, {0x2, 0x9}, {0x4, 0x1}, {0x8, 0xf}, {0x2, 0x1}, {0x7, 0x86}, {0x7, 0x3}, {0x806a, 0x784}, {0xfff, 0x100}, {0x8, 0x6c}, {0x200, 0x3}, {0x8, 0x8}, {0x40, 0x9}, {0x7, 0x4}, {0x100000001, 0x3}, {0x9, 0x10001}, {0x5, 0x1ff}, {0x82, 0x7}, {0x600000000, 0x4}, {0x3, 0x7}, {0x65a, 0x4}, {0x100, 0xf}, {0x6, 0xffff}, {0x30, 0xe3}, {0x5, 0x5c8a16ad}, {0x8, 0xfffffffffffffffc}, {0x80, 0x1}, {0x10001, 0x9}, {0xf0, 0x101}, {0xa, 0xb47}, {0xffff, 0x3}, {0x5, 0x8}, {0x0, 0xfffffffffffffff7}, {0x7, 0xf0}, {0x8001, 0x1}, {0xffffffffffffffff, 0x8000}, {0x9, 0x1}, {0x1, 0x5}, {0xef, 0x80}, {0x72, 0xa9}, {0x3, 0x4}, {0x5, 0x1}, {0x800, 0x5}, {0xffff, 0x10}, {0x6, 0x2}, {0x9, 0xfffffffffffffffc}, {0x5, 0x8}, {0x50000000, 0x4}, {0x8001, 0x1}, {0x3, 0xcd86}, {0x0, 0x100}, {0x1, 0x2e3}, {0xa, 0xdc}, {0x2, 0x362}, {0x3, 0x1bf}, {0x0, 0x8001}, {0x6, 0x8}, {0x1, 0xfffffffffffffff7}, {0x7, 0xff}, {0x5, 0xfa6}, {0x80000001, 0x5}, {0xfdfe, 0x3}, {0x80, 0xc}, {0x8001, 0x6}, {0x7, 0x7f}, {0x80000001, 0x8}, {0x7e, 0xff}, {0x4}, {0x7, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1ea, 0x8001}, {0x4, 0x3}, {0x5, 0x3}, {0x2, 0x9}, {0xfffffffffffffffc, 0x8001}, {0x9, 0x1}, {0x2, 0x5}, {0x7ff, 0xfff}, {0xf5, 0x2}, {0x1f8a, 0x9}, {0xa38, 0x7ff}, {0x6, 0xfffffffffffffff9}, {0x10001, 0xfffffffffffffff7}, {0xd1, 0x7}, {0x3ff, 0x19616e05}, {0x400, 0x74}, {0x7, 0x3}, {0x1, 0x1}, {0xffffffff, 0xd2d}, {0x2, 0x5035}, {0x9, 0x8000000000000001}, {0xd, 0x1}, {0x800, 0x6}, {0x9}, {0x4, 0x97c}, {0x1, 0x6}, {0x4, 0xc}, {0x8000000000000001, 0x7fffffffffffffff}, {0x8001, 0xffffffffffff3405}, {0x8, 0xffffffffffffffff}, {0x5a, 0x2}, {0xf8c8, 0xfffffffffffffff1}, {0x2, 0x9}, {0xe, 0x8}, {0x401, 0x2}, {0x6, 0x3}, {0x0, 0x7fffffffffffffff}, {0x1000, 0x7}, {0x3, 0x6}, {0x9, 0x401}, {0x1, 0xf}, {0x3f, 0x5}, {0x7, 0x3}, {0x7, 0x27f8}, {0x4, 0x2}, {0x0, 0x8}, {0x10, 0x9}, {0x1, 0x1}, {0x7cb, 0x3}, {0x9, 0x9}, {0x2c9c, 0x2c85}, {0x2, 0xfffffffffffffffe}, {0x5, 0x7}, {0x0, 0x5}, {0x9, 0x4}, {0x0, 0x8}, {0x80, 0x1}, {0x8, 0xd2}, {0x3, 0x9}, {0x3, 0x3}, {0xfffffffeffffffff, 0x4}, {0x2, 0x29e}, {0xfffffffffffffff1, 0x10}, {0x8, 0x8000}, {0x0, 0x8}, {0x6, 0x7}, {0x275, 0x5f3}, {0x3, 0x8}, {0x1, 0x7}, {0x813d, 0x1}, {0x6, 0x2}, {0x0, 0x7e}, {0xe37d, 0x4}, {0x5, 0x3ff}, {0xa, 0xb9}, {0x0, 0x9}, {0x0, 0x7fffffffffffffff}, {0x6a1e7309, 0x10000}, {0xfff, 0x33}, {0xfffffffffffffff7, 0xfffffffffffffffb}, {0x1000}, {0x5, 0x2}, {0x9, 0x8}, {0x0, 0x7}, {0x100, 0x3}, {0x3, 0x6}, {0x0, 0x6}, {0x1000000000000000, 0x4}, {0xbb44, 0x3}, {0x8, 0x7f}, {0x0, 0xda}, {0x8001, 0x8}, {0x6, 0xfe1}, {0x2, 0x7ff}, {0x2, 0x5}]}, &(0x7f00000012c0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000001340)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000001380)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0xffffffffffffff81, 0x1}, {0x8, 0x2}, {0x9, 0x6}, {0x8, 0x695f}, {0x100000000}, {0x5, 0x100}, {0x3, 0xfffffffffffff69c}, {0x7, 0x3ff}, {0x8000000000000000, 0x3}, {0x9, 0x5}, {0x401, 0xffffffffffff6b88}, {0x9, 0x2}, {0x7, 0x1}, {0x43, 0x4}, {0x6, 0x101}, {0x2, 0x10000}, {0x0, 0x9ca3}, {0x2}, {0x2000000, 0x6}, {0x3, 0x5}, {0xc, 0x200}, {0x7, 0x9}, {0x4}, {0x401, 0x8000000000000001}, {0x2, 0x7fff}, {0x4, 0x4}, {0x3, 0x991}, {0x4, 0xffffffff}, {0x8, 0x7}, {0x3, 0x7f}, {0x400, 0x6}, {0xd, 0xa539}, {0x2, 0x800}, {0x50, 0x7}, {0xfffffffffffffff9, 0x10}, {0x7, 0x8}, {0x8, 0x1ff}, {0x1, 0x7}, {0x9bc, 0x4}, {0xf7c3, 0x8}, {0x7, 0x4}, {0x4, 0xfffffffffffffff9}, {0x7, 0x2}, {0x5, 0x81}, {0x6, 0x7f}, {0x8, 0x8100000000000}, {0xcd88, 0x6}, {}, {0x8001, 0x100000000}, {0x80000001, 0x7f}, {0x7, 0x101}, {0x3ff, 0x1}, {0x4, 0x6}, {0x8, 0xfffffffffffffff8}, {0x5a2, 0x8}, {0x1, 0x1}, {0x2, 0x3}, {0x4, 0x8}, {0x0, 0x3ff}, {0x400, 0x7}, {0x7, 0xffffffff}, {0x5, 0x6}, {0xf, 0xcfa9}, {0x8, 0x685e}, {0x16e, 0x7d18}, {0x3, 0x4}, {0x6, 0x4}, {0x0, 0x4}, {0xfffffffffffffff9, 0x4}, {0x8, 0x5}, {0x3, 0x5}, {0x1, 0x80000000}, {0xfffffffffffff0ad, 0x648b}, {0x5, 0x5}, {0x5, 0x401}, {0x200, 0x100000000}, {0xcdc1, 0x2}, {0x727d}, {0x8, 0x56}, {0x1, 0x101}, {0x43, 0x7}, {0xffffffffffffff88, 0xb3}, {0xa4, 0x8}, {0x3, 0x9}, {0xe50, 0xffffffffffffffdc}, {0x7, 0x3d}, {0xad, 0x1}, {0x8, 0xfff}, {0x9, 0x2}, {0x4, 0x101}, {0x4108000000000000, 0xffffffffffffff27}, {0x6, 0x6}, {0x2}, {0x1000, 0x8}, {0x6, 0x2}, {0xffffffff, 0x1000}, {0x4, 0x3}, {0x41e, 0x8}, {0x2, 0x9}, {0x5, 0x4}, {0x3, 0x10001}, {0x0, 0x9}, {0x80, 0x37c1}, {0x19, 0x3}, {0xfffffffffffffffb, 0x1}, {0xfff, 0x3}, {0x6, 0x3aaf0cd4}, {0xa, 0xb}, {0x400, 0x8000000000000001}, {0x7fffffff, 0x6}, {0x1, 0x3}, {0x6, 0x7fc}, {0x3, 0x4ab2de1d}, {0x6, 0x6589}, {0x0, 0x9}, {0x80, 0x10001}, {0x4, 0x1}, {0x1, 0xf}, {0xfd, 0x80000000}, {0x6, 0xc0000000}, {0x3, 0xb}, {0xd149, 0x3}, {0x8, 0x8}, {0x44, 0x7ff}, {0x7, 0x7}, {0x3, 0x4}, {0x9, 0x8}, {0x4, 0x9}, {0x5, 0x3}, {0xf192, 0xb19}, {0x4, 0x4}, {0x2, 0xe000000}, {0x8, 0x4c8}, {0x2, 0x66a}, {0x1d, 0x3}, {0x8000000000000000, 0x1}, {0x2, 0xfffffffffffffffc}, {0x5, 0x8}, {0x3, 0x9}, {0x1, 0x2858}, {0x14d, 0x10}, {0x0, 0x5}, {0x8, 0xffffffffffffffff}, {0x100000000, 0x5d}, {0x100, 0x7fffffff}, {0x9, 0x2}, {0xba, 0x3}, {0xffffffffffffffa7, 0x9}, {0x6}, {0x7, 0x5}, {0x9, 0xd}, {0xcb8a, 0x39170eda}, {0xe877, 0xc}, {0xe9, 0xa0a1}, {0xc8, 0x7}, {0x6, 0xb}, {0x5055, 0xf28}, {0x10001, 0x5a8}, {0x2, 0x8}, {0x0, 0x100000000}, {0x2, 0xa9}, {0x5, 0x57a8}, {0x2, 0x8}, {0x800}, {0xc1, 0x1}, {0x9, 0x5}, {0x9, 0x3ff}, {0x4, 0x4}, {0xf0, 0x8}, {0x7fffffffffffffff, 0x92f}, {0x4, 0x4}, {0x80000000, 0x7}, {0x2, 0x9cd5}, {0x2ac, 0x1}, {0x9, 0xe}, {0x101, 0x2}, {0x7, 0x2}, {0x7}, {0x2, 0xffffffff}, {0xfffffffffffffff7, 0xc}, {0x5, 0x100}, {0x1, 0x200}, {0x9, 0x3}, {0x0, 0x40}, {0x4, 0x5}, {0x71f, 0x9}, {0x7, 0x6}, {0x8000000000000001, 0x1}, {0xe0a, 0x7fff}, {0xdfc8, 0x1000}, {0xfff, 0x9}, {0x5, 0x2}, {0x6, 0x10000}, {0x3fe0000, 0x9}, {0xfffffffffffffff9, 0x8}, {0x4000000000000000, 0xdd3d}, {0x8, 0x7}, {0xffff, 0x6}, {0x1, 0x7}, {0x8, 0x1}, {0x64c, 0x4}, {0x1000, 0xf1}, {0x1200000000, 0x2}, {0x7885, 0x800}, {0x1, 0x5}, {0x7fffffffffffffff, 0x86}, {0x1, 0xc79}, {0xbc, 0x10}, {0x8, 0x1ff}, {0x80000000000000, 0xf}, {0x0, 0x2}, {0x1, 0x1}, {0x5, 0x7}, {0x1}, {0x0, 0xd538}, {0x1, 0x5}, {0xe3c, 0x46}, {0x100000001, 0x7fffffffffffffff}, {0x0, 0x9}, {0x9, 0x10001}, {0x27, 0x8}, {0x0, 0x80000000}, {0x7fff}, {0x1, 0x62}, {0x7fff}, {0x8, 0x2}, {0x5, 0x2}, {0x6}, {0x3ff}, {0xf, 0x2}, {0x400, 0xb}, {0x5}, {0x4}, {0x2, 0xffffffffffffffff}, {0x6, 0xc23}, {0xff, 0x8}, {0x2, 0x4391}, {0x7ff, 0x800}, {0x72, 0x2}, {0xc7, 0x6}, {0x9, 0x6}, {0x7, 0x1}, {0x3, 0x2}, {0x7, 0x5}, {0x9, 0x81}, {0x3, 0xff}, {0x3, 0x800}, {0x6, 0x59bbe562}, {0x5, 0xffff}, {0x0, 0xfffffffffffffffa}, {0x5, 0xa}, {0x100000000, 0xffff}, {0x6bc7, 0x1000}, {0x2, 0x7f}, {0x8, 0x2}]}, &(0x7f00000023c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000002400)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000002440)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000002480)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000002500)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x7f}, &(0x7f0000002640)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000002680)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f00000026c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000002700)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000002740)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000002780)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000002800)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000002880)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f00000028c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x100000001}}, &(0x7f0000002900)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000002940)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x60000001}}, &(0x7f0000002980)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}}, &(0x7f0000002ac0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x80000000}, {0x8, 0xffffffff7fffffff}, {0x800000000000002, 0x2b2e}, {0x3, 0x7f}, {0xfb, 0xff}, {0xb3b, 0x8}, {0xffff, 0x2}, {0x0, 0xffffffffffffffff}, {0x3, 0xfffffffffffffff8}, {0xffff, 0x6}, {0x6c4b, 0x9}, {0x2, 0x8}, {0x4, 0xffffffff}, {0x7, 0x17d}, {0xffff, 0xfde9}, {0x5, 0x6}, {0xfffffffffffeffff}, {0x2}, {0x80, 0x401}, {0xd3, 0xffffffffffffff81}, {0x4}, {0x0, 0x3}, {0x81, 0x10000}, {0xc, 0x6}, {0x100000000, 0xffffffffffffff97}, {0x8, 0xd2}, {0x1, 0x4}, {0x7, 0x2}, {0x2, 0xff}, {0x40, 0x81}, {0xfffffffffffffff5, 0x3}, {0x4, 0x67e}, {0x3ff, 0x6}, {0x80b9, 0x2}, {0x5, 0x3}, {0x1ff, 0x7f}, {0x1, 0x9}, {0x8, 0x2}, {0x9}, {0x4, 0x6}, {0x7fffffff, 0x8}, {0xf, 0x5}, {0x0, 0x9}, {0xd8, 0x3ff}, {0x1, 0x6e62}, {0x10, 0x2}, {0xe38b, 0x4}, {0x6, 0x8000000000000001}, {0x100000000, 0x4}, {0x922, 0x6}, {0xd, 0x5}, {0x8, 0x6}, {0x0, 0x8}, {0x1, 0x5}, {0x1}, {0x4, 0xee1}, {0x6, 0x8}, {0x39, 0x100}, {0x2, 0x1}, {0x7, 0x4}, {0x1, 0x3}, {0xffff, 0x6}, {0x7, 0xdd}, {0xf, 0x7}, {0x10, 0xffffffff}, {0x8, 0x5}, {0x80000000, 0xffffffff}, {0x8, 0x3}, {0x10, 0x6}, {0x1, 0x6}, {0x0, 0x5e}, {0x80000000, 0x5}, {0x7, 0x3c6}, {0x2, 0x6}, {0xc}, {}, {0x0, 0x2}, {0xfffffffffffff800, 0x8}, {0x1, 0x2}, {0x3, 0xdb19}, {0x101, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x7, 0x8}, {0xe10, 0x4}, {0x11db, 0x5}, {0x9}, {0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x9, 0x9}, {0x2, 0x5}, {0x81, 0x6}, {0x6c2, 0x5}, {0x575d, 0x3}, {0x2, 0x3}, {0x7, 0x3}, {0xfffffffffffffa11, 0xfffffffffffffffc}, {0x2, 0x4}, {0x509e, 0x7}, {0x1, 0x9}, {0x2, 0x4}, {0x9, 0x7ff}, {0x58bf57e6, 0x61}, {0x0, 0xfffffffffffffffa}, {0x6, 0xae4}, {0x1, 0x30000000000}, {0x6718c680, 0x5}, {0x6, 0xf7}, {0x3, 0x1}, {0x9, 0x80000001}, {0x200, 0x3}, {0x3, 0x8000000000000001}, {0x1, 0xff}, {0x7, 0x1}, {0x7, 0x4}, {0x8, 0x9}, {0x1, 0xc}, {0x40, 0x2}, {0x2808, 0xdbc}, {0x2, 0x8}, {0x8, 0xab}, {0x837, 0x3}, {0x1, 0x8000}, {0x55, 0x6}, {0x4, 0x80000000}, {0xeaee, 0x8}, {0x2, 0x5d0c}, {0x2, 0x5}, {0x2, 0x4}, {0x9, 0x2}, {0x3, 0x4}, {0x0, 0x1}, {0x9a7c, 0x3}, {0x4, 0xaee9}, {0x2665, 0x9}, {0x92b6}, {0xae, 0x6cd}, {0x7fff, 0xfffffffffffff000}, {0x70185fb3, 0x7}, {0xcce0, 0x3}, {0xf0, 0x40}, {0x4, 0x10}, {0x7fff}, {0x7, 0x4a}, {0xffff}, {0x3, 0x10}, {0xfffffffffffffffd, 0x1}, {0x80000000, 0xb6e}, {0x1, 0x2}, {0x80, 0x1}, {0x0, 0x8}, {0x1, 0xf}, {0x1, 0x6}, {0x0, 0xda}, {0xbd8b, 0x1}, {0x5, 0x2}, {0x6, 0x7fff}, {0xfffffffffffffff1, 0x80}, {0x6, 0x73}, {0x0, 0x5}, {0xfff, 0x7ff}, {0x3, 0x1}, {0x7f, 0xfffffffffffffff7}, {0x9, 0x7}, {0x5, 0x6}, {0x19}, {0x1, 0x4}, {0x8, 0x1}, {0x6, 0x93}, {0x94, 0xe0}, {0x3, 0x4}, {0x68fa, 0xbb20}, {0x4e6f, 0x3}, {0x1, 0xffffffffffffffff}, {0x5, 0x1000}, {0x8e8d, 0xc}, {0xec7d, 0x10001}, {0x81, 0x5}, {0x28, 0x56}, {0x8, 0x8}, {0x0, 0xf}, {0x8, 0x1}, {0x5, 0x3e3}, {0x4caa91f, 0xb8}, {0xfffffffffffffff9, 0x4}, {0xfffffffffffffff7, 0x200}, {0x3e99, 0x100000001}, {0x6, 0x3}, {0x3, 0x9}, {0x4, 0x3}, {0x38d, 0x5d7}, {0x3, 0xfffffffffffffffa}, {0x1, 0x100}, {0x4, 0xacb}, {0x1, 0x9}, {0x80, 0x7}, {0x27e9, 0xfff}, {0xffffffff, 0x2c7}, {0x1000}, {0x10001, 0x100}, {0x3, 0x8}, {0x1, 0x6e1d00000000000}, {0xa46, 0x9}, {0x4, 0x3}, {0x0, 0x64}, {0x5, 0xfffffffffffffffe}, {0x8, 0x9}, {0x0, 0x7fffffffffffffff}, {0x1, 0x2}, {0x40, 0x240}, {0x5, 0x10001000000000}, {0x3ff, 0x8c45}, {0x1, 0x8}, {0x0, 0x8000000000000001}, {0x8, 0x965}, {0xfffffffffffffff8, 0xfffffffffffff800}, {0x800, 0xa}, {0x0, 0x7}, {0x6, 0x9}, {0xdd8, 0x7fffffffffffffff}, {0x9, 0x7}, {0xdf, 0x8000}, {0x23, 0x29}, {0x7, 0x20629981}, {0x3, 0x67}, {0x2, 0x2}, {0x2, 0x7}, {0x1000, 0x5}, {0xfffffffffffffff9, 0xc00000000}, {0xfffffffffffffffe, 0x5}, {0x7, 0xba59}, {0x5, 0x800}, {0x3, 0xfffffffffffffff8}, {0x9, 0x91}, {0xe2f}, {0xfffffffffffffffb, 0x100000000}, {0x7fffffffffffffff, 0x3}, {0x6628, 0x3eb8}, {0x7fffffffffffffff, 0xca842a6}, {0x1000, 0x200}, {0x2, 0x8000000000000000}, {0x9, 0x8}, {0x3, 0x9}, {0x0, 0xffffffff}, {0xffffffffffffff90, 0x8000000000000000}, {0xe, 0xffffffffffffff79}, {0x1, 0xff}, {0x8000000000000000}, {0x1ff, 0x3}, {0x6, 0x5}, {0x1ff, 0x5}, {0x2a, 0xfff}, {0x0, 0x81}, {0x8, 0xeb32}]}, &(0x7f0000003b00)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000003b40)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000001}}, &(0x7f0000003b80)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000003bc0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000003c00)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000003c40)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000003cc0)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000003d00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000003d40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000003d80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000001}}, &(0x7f0000003dc0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}}, &(0x7f0000003f00)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000003f40)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x7, 0xfffffffffffffeff}, {0x21a, 0x2a}, {0x8, 0x5}, {0x5, 0x101}, {0x5, 0x5}, {0x3, 0x6}, {0x2, 0x5dd}, {0x41, 0x10000}, {0x7ff}, {0x1, 0x8}, {0x2, 0x1}, {0x1c000000000000, 0x12}, {0x74, 0x7ff}, {0xffffffff00000001}, {0x0, 0x8000000000000000}, {0x5, 0xa}, {0x4, 0x4}, {0x3, 0x1ff}, {0x400, 0xd8d7}, {0x7, 0x3}, {0x2, 0x40}, {0x400}, {0x1, 0xfff}, {0x2, 0x8}, {0x79, 0x5}, {0x200, 0x7}, {0x4, 0x9}, {0xf, 0x5}, {0xac28, 0xfffffffffffffff9}, {0xc1c, 0x1}, {0x4, 0x8000000000000000}, {0x7fffffffffffffff, 0xffffffffffff6ea8}, {0xfff, 0x5000000}, {0x0, 0x5}, {0x9, 0x2}, {0x6, 0x8}, {0x7, 0x5}, {0x4d, 0x1000}, {0x8, 0x9}, {0x8, 0xfffffffffffff268}, {0x6, 0x5}, {0x4, 0x2}, {0x4, 0x5}, {0x9}, {0x4, 0x2}, {0x4, 0x100000000}, {0x2, 0x8000000000000001}, {0x5, 0x4}, {0x1, 0x4}, {0x1, 0x2}, {0x7fffffffffffffff, 0xbf0}, {}, {0xe, 0x5}, {0x9, 0xb}, {0x3, 0x5}, {0x400, 0x680}, {0xb9f4, 0x2}, {0x400, 0x8}, {0x8, 0x3ff}, {0x662f, 0x983}, {0x1, 0xf}, {0x8, 0x45c}, {0x0, 0x6a5cf1ac}, {0x80000001, 0x1}, {0xffffffff, 0x86cc}, {0x0, 0x4}, {0x3ff, 0x9}, {0x3, 0xc}, {0x8, 0x8d2}, {0xc, 0x80000000}, {0x7, 0x7}, {0x8ed7, 0x2}, {0x3, 0x4}, {0x0, 0x200}, {0x9, 0x7fffffffffffffff}, {0x903d, 0x7}, {0x1ff, 0x9}, {0x2, 0x7b7}, {0x34a7576, 0x1}, {0x8000, 0x200}, {0x0, 0x8000}, {0x9, 0x684}, {0x6, 0x9}, {0x4, 0x8000000000000000}, {0x5, 0x1}, {0x2000000000, 0x1ff}, {0x800, 0x28}, {0x3ff, 0x8}, {0x5, 0x3}, {0x419, 0x4}, {0x7, 0x5}, {0x1, 0x3de0}, {0x3, 0x25}, {0x1, 0xd285}, {0x1}, {0xa, 0xffffffff00000000}, {0x1, 0x9}, {0x6, 0xfffffffffffffff7}, {0x1ff, 0x2}, {0x7fffffff, 0x2}, {0x8000, 0x8}, {0x1, 0x1}, {0x2, 0x3}, {0x3, 0x4}, {0x8, 0x8}, {0x3, 0x8000}, {0x4, 0x2d7}, {0x2, 0xfff}, {0x7, 0x8}, {0x7, 0x5}, {0x8001, 0x8d9c}, {0x8, 0x7f}, {0x7, 0xdbf4}, {0x10, 0x7}, {0x4, 0x1}, {0x81, 0x1e}, {0x0, 0x3}, {0x9, 0x100000000}, {0x19, 0x4}, {0x2, 0x8}, {0x3ff, 0x3}, {0x3, 0x5}, {0x9, 0xfffffffffffffffc}, {0x5, 0x5}, {0x41, 0xfffffffffffff96e}, {0x9, 0xa9}, {0xbea, 0x10}, {0x1, 0x99}, {0x1000, 0x8}, {0xfffffffffffffff8, 0x5}, {0x2, 0xdf}, {0x2, 0x1000}, {0x5de, 0x5}, {0xa, 0x8}, {0x1, 0x6}, {0xfffffffffffffffa, 0x9a53}, {0x9, 0x1}, {0x6, 0x3}, {0x9, 0x2dd}, {0x4, 0x6}, {0xffffffff, 0x45479225}, {0x9, 0x7}, {0xb, 0x5a}, {0xfffffffffffffffd, 0x6}, {0x1, 0xc7ae}, {0x80000001, 0x6}, {0x80000001, 0x7}, {0xe98, 0x5}, {0x7fffffffffffffff, 0x2}, {0x8, 0x40}, {0x4, 0xa}, {0x3, 0x3}, {0x8, 0x6}, {0x757, 0x3}, {0xd1b, 0x40}, {0xffff}, {0xfffffffffffffff7, 0x1}, {0x3, 0x4}, {0x5, 0x6}, {0x10001, 0x800}, {0x101, 0x9}, {0x6a, 0x7}, {0x1, 0x8}, {0xe, 0xaee}, {0xa}, {0x4, 0x5}, {0x8, 0x401}, {0xa021, 0x2}, {0xbf, 0x10}, {0x0, 0x101}, {0x0, 0x4}, {0x2, 0x9}, {0xa4, 0x8}, {0xffffffffffffffff, 0x9}, {0x4, 0x9}, {0x3, 0x6}, {0x7, 0x6}, {0x81, 0x5}, {0x5, 0xfffffffffffffffa}, {0x3ff, 0xa9}, {0xfffffffffffff327, 0x7}, {0x1000, 0xe}, {0x6, 0xffffffff}, {0x6, 0xffffffffffffffff}, {0xffffffffffff8000, 0xfffffffffffffff7}, {0x1800000000000000, 0xffffffffffff8000}, {0x1ff, 0x8}, {0x2, 0x1}, {0x2, 0x8000}, {0xe60b, 0xe7d2}, {0xffffffff, 0x6}, {0x13, 0x3}, {0xfff, 0x6}, {0x8, 0x8}, {0x100000000, 0x70ce}, {0x5, 0x4}, {0x3, 0x9}, {0x9, 0x5}, {0xffffffffffffffff, 0x1}, {0x8, 0x43eb}, {0x200, 0x3}, {0x2, 0x100000000}, {0x7fffffffffffffff, 0x3}, {0x67, 0x21a1}, {0x6, 0x6}, {0x80000000000, 0x3ff}, {0xffff, 0x5}, {0x40, 0x4}, {0x0, 0x4}, {0x3000000000000, 0x20}, {0x2, 0x35ab101b}, {0x0, 0xbd}, {0x90, 0x7fff}, {0x7, 0x1}, {0x7, 0x219}, {0x100, 0x7ff}, {0xff, 0xe}, {0x5, 0x10000}, {0x9, 0x4}, {0x6, 0x5}, {0x2, 0x2}, {0x7f, 0x2}, {0x8}, {0x109d}, {0x7fffffff, 0x7}, {0x5, 0x8000000000000000}, {0x9, 0xffffffffffff33b1}, {0x400000000000, 0x400}, {0x9, 0x8}, {0xcdc9, 0xd}, {0x5, 0x401}, {0x5, 0x8}, {0xb4f, 0x9}, {0x4ddde181, 0x6}, {0x8001, 0x4}, {0x4, 0xa86}, {0x2, 0x7}, {0x1b0, 0x3}, {0x0, 0x6}, {0x438000, 0x400}, {0x7fff, 0x5}, {0xfffffffffffffff9, 0x9}, {0xab, 0x400}, {0x10, 0x4}, {0x1}, {0x6, 0x4}, {0x1, 0x29}, {0x4, 0xffffffffffffffff}, {0x1ff, 0x3}, {0x7fffffffffffffff, 0x8001}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0x4}, {0x8, 0xfffffffffffffff2}, {0x100, 0x4}]}, &(0x7f0000004f80)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x9}, &(0x7f00000050c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x180000000}}, &(0x7f0000005100)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000005140)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f00000051c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000005200)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f0000005240)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000005280)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000005300)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000005380)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f00000053c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}], 0x32}) 18.379403753s ago: executing program 1 (id=12820): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000030601020000000000000000070000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000001c0)={@any, 0xff, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xffffffff}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)}, 0x811) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000080), &(0x7f00000001c0), 0x2000000}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x20, r8, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="040028bd7000fcdbdf250002000200000008100200020000000800010000000000"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x840) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) recvmmsg(0xffffffffffffffff, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}, 0x60}], 0x1, 0x22, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 18.330788343s ago: executing program 2 (id=12821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x3, 0x1, 0x100009, 0x7, 0x4, 0x9, 0x400009, 0xfb, 0xfffffbfe, 0xd, 0x7, 0x10001, 0x2, 0x7ffffffd, 0x8, 0x80000001, 0x8, 0x800, 0x5}}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000080)='bridge0\x00', 0x200340, &(0x7f00000000c0)={@align=0x1, {0xa, 0x3, 0xfffff1a1}}, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) shutdown(r2, 0x1) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r3}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e0000005800028014000600200100000000000000000000000000020500160001000000140007"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtclass={0x3c, 0x28, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x19}, {0xe, 0x7}, {0xffff, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x6}}, @TCA_RATE={0x6, 0x5, {0x46, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48008}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x2, 0xffff}, {0xa}}, [@TCA_RATE={0x6, 0x5, {0x70, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048084}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2], 0x40}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) close(r2) close(r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18.327386696s ago: executing program 4 (id=12822): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002300090025bd7000ffd3df2501000000080001007f00000108000b"], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x0) 18.252943746s ago: executing program 4 (id=12823): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff0500000003000000fc000000", 0x0, 0x7fff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) 18.174125307s ago: executing program 2 (id=12824): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="6eb56da56e6aea6b7ee72d0700bb", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 18.033343924s ago: executing program 0 (id=12825): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 17.964911243s ago: executing program 1 (id=12826): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 17.963846119s ago: executing program 4 (id=12827): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0xfffffffffffffffe, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 17.868571533s ago: executing program 2 (id=12828): write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f9007eb3a85c91fddf080001000501009f0800028001000000", 0x24) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r3 = socket$inet6(0xa, 0x800, 0x101) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) ioctl$int_in(r3, 0x5452, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) socket$tipc(0x1e, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r7) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r8, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a300000000028000480240001800a0001407175657565000000140002800600024000010000060001400002000014000000110001"], 0xdc}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={r2, 0x7}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r2, 0x9}, 0x8) 17.849512518s ago: executing program 1 (id=12829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x5}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a0001", 0x37}], 0x1}, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) connect$802154_dgram(r2, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r2, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x2, 0x200001}, 0x50) 17.78426487s ago: executing program 3 (id=12830): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x60600) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x9, @loopback, 0x40}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x11a, 0x4, 0x0, 0x0) 17.663371632s ago: executing program 0 (id=12831): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101800, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000200)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) sendmsg$nl_route_sched(r1, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0xffffffffffffffa9, 0x5a, 0x301, 0x8000, 0x0, {0x2}}, 0x14}}, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) r4 = getpid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000240)=r4) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x1, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x8c}]}}}], 0x18}, 0x804) ioctl$TUNDETACHFILTER(r0, 0x8903, 0x1000000000000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x20010, 0xffffffffffffffff, 0x0) r6 = socket(0x2c, 0x3, 0x0) r7 = epoll_create1(0x80000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)={0x10000000}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f00000005c0)={0x2000a210}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}], &(0x7f0000000040)='syzkaller\x00', 0xa, 0xff6, &(0x7f0000001cc0)=""/4086, 0x41000, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 17.482554032s ago: executing program 3 (id=12832): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41102, 0x29, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e) 17.32647381s ago: executing program 0 (id=12833): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x8, 0x80000001, 0x7}, 0x24}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff", 0x13}], 0x1}, 0x4005) syz_emit_ethernet(0x289, &(0x7f0000000440)={@random="7a71ed15fb4e", @multicast, @void, {@mpls_mc={0x8848, {[{0xffff}, {0x977b, 0x0, 0x1}, {0xd0f0, 0x0, 0x1}], @ipv6=@dccp_packet={0xe, 0x6, "5d929c", 0x247, 0x21, 0x1, @private0, @private2, {[@srh={0x73, 0x2, 0x4, 0x1, 0xf9, 0x8, 0x2, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x3b, 0x22, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x82}, @generic={0x3, 0xbe, "b6cefd2921d81295d274dbd2f8782f6e77a3a222fee95ea539430208e6b4bce63f7fe56313db65f97344c97640689a83a856957f484d44b9e224bfff3d02bafe23f8501fa439a40a80dc7d521b47fbcd9f3d2d8c7592d0627c54d566d734640f71bf67c469c95a5e23622c085dd1258e65822fa4f12ccde395880279f1a275d31dd0e6cc7a04ad0b2e264717afe5ef274b73fa99a01690386921ab0821ac4065ed9db38d0f03d6ad45fa1d2c5ebadbb28b6a1c9c285a413eee042a0c5111"}, @calipso={0x7, 0x38, {0x741946a13db81d45, 0xc, 0x2, 0x46c9, [0x5, 0x9, 0x2, 0x5, 0x7, 0x1000000000000]}}]}, @dstopts={0x0, 0x6, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x4, 0x5, [0x9c1, 0x81, 0xb, 0x5, 0x2]}}]}, @srh={0x1, 0x8, 0x4, 0x4, 0x1, 0x0, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @local, @mcast1, @rand_addr=' \x01\x00']}, @routing={0x87, 0x4, 0x0, 0x9, 0x0, [@rand_addr=' \x01\x00', @loopback]}], {{0x4e24, 0x4e23, 0x4, 0x1, 0xd, 0x0, 0x0, 0x5, 0x1, "bab169", 0x9, "08e19b"}, "c3d59cd4789543f16f3bf5e922b0fbf7d925c2c5fad206cf0a1d28f0f2be4d38d3e1b589cce58d893e558fa4545beb65e3d6837fea61a9571b95e83f84a5bd9b3c73b79b225aba58f0a8f43538c8fb"}}}}}}}, &(0x7f0000000700)={0x1, 0x4, [0x2fa, 0x78a, 0x64f, 0x8d7]}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x3, {0xa, 0x4e24, 0x7, @mcast2, 0xd}}}, 0x32) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000003ffffffffffff000d00000000110200003e66d7967f52f87672b8790274554711b7ed562a13a70f955ffde472b8cf703c825b7646c79c46b4fa6c679ecc6a321a391bd9f610acd54f926d0406f9f7d290"], 0x0) 17.308349937s ago: executing program 2 (id=12834): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000d40)={0x0, 0x1, 0x20, 0x7, 0x7b1e}, &(0x7f0000000d80)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000dc0)={0x0, 0xd841}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000e40)={0x0, @in6={{0xa, 0x4e22, 0x6, @private0, 0x7}}, 0x9, 0x1, 0x0, 0xb2, 0x40, 0x1, 0x9}, &(0x7f0000000f00)=0x9c) sendmmsg$inet_sctp(r1, &(0x7f0000001240)=[{&(0x7f00000000c0)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000340)="89101b59c60481ab4c3043", 0xb}, {&(0x7f0000000600)="1edd5babf49c21afa97144d3eb1d10e944020a80d390066b8b27d3f9e1962036e88c21e5312155a74a7a9dab7208c1179e1e19a5dca0d0711f072fcd41cc11c15d8ebb6eee9b4e2cba00059094c567a40b76a1b2085e50b59412eb8f7bec1e6343a4285850772c8ff6939bab821b90c56787a9a6fb8d0f560cbbe97dcd5546a3cb2cea86079bdad9e78de79b6a584ed416cf8388c2eb6884e36c858242dd40ca9715c79480c58d1fc094330c6281f7607399b502951bf8372fe1fea1bfdc5de6a54f48f1b0f83de422f3994c41bae5179178a5ab5ee7797cb4c490", 0xdb}, {&(0x7f0000000700)="85f6a5fa12d53452f122800142467697e20551c6505066023b62b5afe761903d668b8f41ec57a771732252f1244ce3a6f9", 0x31}, {&(0x7f0000000740)="dd890bd167f0a2eee6c0621523d71b11103bc7a355409fef76d4496614ee071040551cb031f7f702df9ccbd37720bd48e9f8ff3438cbcd0ae616962bc7fe67c4b7808e651ffd959ad9b18eae3fcebd3297e47c40ba94f2b7bae619bc448593ae151d340dfad7163853065fc07ccd982c7bc6d26dac4c2d465ab1b83f0859cf5331c580da9c3d1d4cd76626153cf175e0c0ab8266e8afa2e9aff61cd4c38f67b8f8dbe05497cd48746c17255eab48908cf5dee5929616945fba334c6c3dabff4d810cee9f7855aef0b726887d971122dfe6167fef3fe5297dd8eb368bd04455fb937e", 0xe2}, {&(0x7f0000000840)="f791511184740ef7231a520af9dfa646b11d9bf8b9e4fa7e1ddb81136123dd61f7ef65e6089740752924b3d6aae78bb03552314aaedb24e2290a23a65859790471a9837362280917024ee8c4aadf28a8ec3896eb6dee6e0abc2b46580452c638ba76193b29646d07e6dbc370ac1cb014c96eb3b427b4f99033d3272b3df6c114a5b203a0fee8233d17169a19a144", 0x8e}, {&(0x7f0000000900)="6e366f3c9381a5aeeeedd4c6416f181e54ef5df9d0d2e4e5f9a0c551ccafa7dd0a2e0e35f4e2842a8dc40d7aac87f77c75098eba6cbd86cbedb86e8deecbe312ba67d8afbc4eb7fbc0bc1bec72803e1931252522bbf61339390fa48ec8d71d46abf493835272049eadfdb9cda4678aa93e7851efbbba14932fbe8076eb413b4e8bc55e73066b6e6bbcd0549f15d7de76931c3cb89642e0236d2373c45a61c284ea89b228c37d5806a2c95e3592610865fae23befdf611b88241cf9dbaa4a9c8573ebc9e9f90a0e69c99f382aad1b8b5e9c20f87cab54fa99fe189e", 0xdb}, {&(0x7f0000000a00)="e98bac9b661ecf5d05c9c9b94d7c7d84a1b7b85574163cd8d0ac45e463f3e14c01b39428d8ea65fd11442756ef365176fffedd4ed23a0f0aa162f6d8e5d4fa7a3ae5293b05f32597d04caab12154b7ecac3d77e3e09de334b0415d24a889ba661cea342ff0a777b1431a7a02d6a29ae8a3f94b0d6e3870381b4f283c83ed591ecd6b5f8cd7dd61c450e38d6bd5246864153a92835aba988e647a7f6da93b348d162d92ed6e6ec37e497b4b289960ca830f84c3f8dd84d2b1b4fef7b1ae3a32abee72d64d5089", 0xc6}, {&(0x7f0000000b00)="df70ee306163d2b77074a2af3aa65a8f7ae588e0de25d14632e2d3ce727bb0a57184b79ab5f739412dd784703ef8f12d29bbd39817d1f3cca9f995dadc762972d51b1179c2ded8bdd8f093a4fe5f4486297ca06434082ebaf3e80203503b1f01dacfec3cbc6ce6beaa37088b00f47dff602ceb01cf5ffa623894c9bbc0a91ac7cda94fdd389b3234b1ff65646a612c7dac101b5e3d04cbb51bf02b0a95967468846988629f4bcf0cceedd52ed9cab4c859b494a31aaaa0c31130bb4901b916e70a3cfc02c55d713d225bbd85a7b046a94a8352bca2d310421f69a1b94f9c1cb9f13e8ce855c32c098b3620a8db", 0xed}, {&(0x7f0000000c00)="3634b9b6872cae96caec9ca899d289ad74bb129d21bb70c51f98fb6f0b80380e27ee147cf83981186265072501adaaf83c779f568445b07a85aa34c2892c8f43d42f042e86f73388cdf3", 0x4a}], 0x9, &(0x7f0000000f40)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x22fb5e97}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x0, 0x2, 0x4, r4}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x0, 0x8001, 0x0, 0x0, 0x93, 0x4, 0xfe8, r5}}, @init={0x18, 0x84, 0x0, {0x6a6, 0x0, 0x5000, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x5ceb, 0x1, 0x40, 0x2, 0x102, 0x1, 0xc, r5}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x10000}}], 0xc8, 0x8000}, {&(0x7f0000001040)=@in6={0xa, 0x4e23, 0x2, @private0, 0x3}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000001080)="666f42f19aa588e729a9f6b9a982c6b310d63c25dbb1732aeff4e2336a1bc49f73d329232ebf5a6c2f744957ccc2cb12d7bd2ca36f5ae2ab3f449b3ee50dded512ecd1c79f78876172c8ae0413e90093d554c81958dc2506f133e1d89d215c8e2fb9f816d3b3045d697dab37e231188a18791a9fed4f650cf59e6f254c9f", 0x7e}, {&(0x7f0000001100)="4903630493769eb61be7142e1cf4ced053ac3f48b35091a89fd0a3e86e698d55d6d3216738c905151ffdbb3c1d213eac543424d24c212abbbe3d77d870138b0cba47aad00757feab4262ecab4a2ec3fcd62bf7310c1875f3a9162979af7de951d42026b20f466c980c165b86e2a38811dd68715dad322ed08863bf512f59df9bc378834dbdc028b09e317090635767d50f9539b9628c8ff095db8cba9b08d0b6f79f3c8af1", 0xa5}], 0x2, 0x0, 0x0, 0x20000000}], 0x2, 0x84) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000080), 0x12) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@srh={0x89, 0x0, 0x4, 0x0, 0x6, 0x20, 0x3}]}}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000200)={r6, 0x6, 0xd, 0x9}) connect$x25(r6, &(0x7f00000002c0), 0x12) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xd, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0xd9, &(0x7f0000000340)=""/217, 0x0, 0x8}, 0x94) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000180)={'security\x00', 0x0, [0x0, 0x0, 0x4, 0x6, 0x7fffffff]}, &(0x7f0000000280)=0x54) 17.261956343s ago: executing program 4 (id=12835): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x4056) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='e', 0x1) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080)=r2, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1a, 0x16, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @tracing=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff135d}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x15, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2c, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, 0x0, 0x0) sendmmsg(r5, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000000340)="10959e9532e962b76f8969437a35e7ba8d36dcbd62c4f83390e3d57669194bfa4beb0549525e3e0e7dc2c8880095ad26cdacdd8b95a2ff80cf20418ac0ed6839ae0849da4a675b64ee66c632", 0x4c}, {&(0x7f00000003c0)="4571aadfb14e9d7355b8df590c8050941373b9d5ab64986159012bdc2e3eb13e5d13bbc7939a2702891ba0002552c057c76c345947881be110ed7f1fe1d314e531b86efa2173cf30c5906dc26a579006450a6e2c2e2f267234e155bdec2bf0a0781a669f2cc5a28b7717d2ebac09f55e69", 0x71}, {0x0}, {0x0}], 0x4}}], 0x2, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfe, 0x0, 0x0) close(r4) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010127bd7002fbdbdf251000000008000300", @ANYRES32, @ANYBLOB="08000600", @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 17.254101089s ago: executing program 1 (id=12836): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r1, 0xd19, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004090}, 0x4000080) 17.096365364s ago: executing program 3 (id=12837): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0380c20000000180c20000000800450020180000000000019078ac1e0001ac1414aa0000907800000000"], 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0xd, 0x0, &(0x7f0000001bc0)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000f59ffc)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x4000, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$rxrpc(0x21, 0x2, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000400)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaeb62797ee75c30a59943c15152a84342c21ef9052ca370e360409c23597a0463d2a0a2801e275046632d176d754e", 0x4f}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000340)="17199dce5817b0f57f659aa8d4fd38ca01c162da040db329c064116e4c6f710000e6c368b0b4643ecd2634baa095b8c291e285758f9b875a9b7bfbc9207536", 0x3f}], 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r8 = getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x120, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x2a8, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1d76fcb8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x40}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0xd0, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xc}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_DESC={0x18c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7b}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_DESC_CONCAT={0x98, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x65}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1cb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x30}]}]}, @NFTA_SET_DESC_CONCAT={0x74, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6b92}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xed}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, @NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}]}], {0x14}}, 0x2d0}, 0x1, 0x0, 0x0, 0x20004000}, 0x240008d4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x383cd, 0x35b21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MAP={0x24, 0xe, {0x40, 0x7fffffffffffffff, 0x65738ba9, 0xd569, 0x4, 0x99}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x48880) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r10, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="20062abd7000fedbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e65746465760400000000000000027464657673696d3000000d0087006c325f64726f707300000000"], 0x70}, 0x1, 0x0, 0x0, 0xc044}, 0x4050) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, &(0x7f0000000000)=[0x4, 0x2], 0x2) 16.867689364s ago: executing program 0 (id=12838): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdc01, {0x7, 0x0, 0x0, 0x0, 0x81, 0x6e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x4040000) 16.308927612s ago: executing program 0 (id=12839): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x24, 0x301, 0x270bda5, 0x25dfdbfa, {0x3}}, 0x14}}, 0x80) 16.29608383s ago: executing program 4 (id=12840): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x4000040) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x64) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) shutdown(0xffffffffffffffff, 0x1) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) write$rfkill(r4, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000002780)={{r5}, r6, 0x4, @inherit={0x68, &(0x7f0000000580)={0x0, 0x4, 0xa5b, 0x4, {0x9, 0x1, 0xfffffffffffffff9, 0x8, 0x5}, [0x2, 0xb, 0x6, 0x4]}}, @name="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"}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r8, 0x0, &(0x7f0000001780)=""/4096}, 0x20) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000001200), 0x0, 0x200000000000, 0x20000000000001bc}}, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 16.135595737s ago: executing program 2 (id=12841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)="b4f9", 0x2}], 0x1}}], 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x14, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000001100"/20, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r5}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4}, &(0x7f0000000280), &(0x7f00000003c0)=r6}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socketpair(0x1f, 0x2, 0xc6, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20009825}, 0x40040c0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000040)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x181c00, 0x0) readv(r10, &(0x7f0000000280), 0x37) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev, @in=@dev}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f00000000c0)={0x1d, r12}, 0x18) connect$can_j1939(r11, &(0x7f0000000140)={0x1d, r12}, 0x18) 15.362808619s ago: executing program 4 (id=12842): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180", @ANYRES32], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000a0c10000000000fff000000", 0x58}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbfb, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xfffffffffffffe1b, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x9c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, 0x0, &(0x7f00000002c0)=0x37) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0600010018000000000c0000000c0000000000000eac05425627c6000000000000000004001000000000000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) 2.0561512s ago: executing program 32 (id=12836): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r1, 0xd19, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004090}, 0x4000080) 2.019256362s ago: executing program 33 (id=12837): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0380c20000000180c20000000800450020180000000000019078ac1e0001ac1414aa0000907800000000"], 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0xd, 0x0, &(0x7f0000001bc0)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000f59ffc)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x4000, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$rxrpc(0x21, 0x2, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000400)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaeb62797ee75c30a59943c15152a84342c21ef9052ca370e360409c23597a0463d2a0a2801e275046632d176d754e", 0x4f}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000340)="17199dce5817b0f57f659aa8d4fd38ca01c162da040db329c064116e4c6f710000e6c368b0b4643ecd2634baa095b8c291e285758f9b875a9b7bfbc9207536", 0x3f}], 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r8 = getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x120, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x2a8, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1d76fcb8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x40}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0xd0, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xc}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_DESC={0x18c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7b}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_DESC_CONCAT={0x98, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x65}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1cb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x30}]}]}, @NFTA_SET_DESC_CONCAT={0x74, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6b92}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xed}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, @NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}]}], {0x14}}, 0x2d0}, 0x1, 0x0, 0x0, 0x20004000}, 0x240008d4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x383cd, 0x35b21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MAP={0x24, 0xe, {0x40, 0x7fffffffffffffff, 0x65738ba9, 0xd569, 0x4, 0x99}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x48880) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r10, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="20062abd7000fedbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e65746465760400000000000000027464657673696d3000000d0087006c325f64726f707300000000"], 0x70}, 0x1, 0x0, 0x0, 0xc044}, 0x4050) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, &(0x7f0000000000)=[0x4, 0x2], 0x2) 550.979119ms ago: executing program 34 (id=12839): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x24, 0x301, 0x270bda5, 0x25dfdbfa, {0x3}}, 0x14}}, 0x80) 465.11579ms ago: executing program 35 (id=12841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)="b4f9", 0x2}], 0x1}}], 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x14, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000001100"/20, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r5}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4}, &(0x7f0000000280), &(0x7f00000003c0)=r6}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socketpair(0x1f, 0x2, 0xc6, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20009825}, 0x40040c0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000040)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x181c00, 0x0) readv(r10, &(0x7f0000000280), 0x37) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev, @in=@dev}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f00000000c0)={0x1d, r12}, 0x18) connect$can_j1939(r11, &(0x7f0000000140)={0x1d, r12}, 0x18) 0s ago: executing program 36 (id=12842): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180", @ANYRES32], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000a0c10000000000fff000000", 0x58}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbfb, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xfffffffffffffe1b, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x9c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, 0x0, &(0x7f00000002c0)=0x37) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0600010018000000000c0000000c0000000000000eac05425627c6000000000000000004001000000000000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) kernel console output (not intermixed with test programs): 135 [ 1728.853361][T13283] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 1729.312231][T13295] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1729.372861][T13297] syzkaller0: entered promiscuous mode [ 1729.372888][T13297] syzkaller0: entered allmulticast mode [ 1729.388771][T13297] tipc: Enabled bearer , priority 0 [ 1729.426735][T13297] tipc: Resetting bearer [ 1729.468733][T13297] tipc: Disabling bearer [ 1729.489477][T13304] netlink: 'syz.0.12265': attribute type 19 has an invalid length. [ 1729.640762][T13308] ip_tables: iptables: counters copy to user failed while replacing table [ 1729.792000][T13319] netlink: 'syz.3.12273': attribute type 1 has an invalid length. [ 1729.873232][T13312] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1729.879691][T13312] bond3 (unregistering): Released all slaves [ 1730.187054][T13332] __nla_validate_parse: 7 callbacks suppressed [ 1730.187078][T13332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12276'. [ 1730.488101][T13340] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12279'. [ 1730.945991][ T31] audit: type=1800 audit(1791180225.170:38): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12285" name=680B20 dev="tmpfs" ino=1380 res=0 errno=0 [ 1731.240714][T13368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12284'. [ 1731.278113][T13367] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1731.413628][T13376] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1731.480831][T13378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12290'. [ 1731.553669][T13367] netlink: 'syz.3.12287': attribute type 19 has an invalid length. [ 1731.687649][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12288'. [ 1731.760102][T13387] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12292'. [ 1732.135814][T13397] bond3 (unregistering): Released all slaves [ 1732.275931][T13396] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12294'. [ 1732.409815][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12300'. [ 1732.592452][T13416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12301'. [ 1732.594058][T13416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12301'. [ 1732.659329][T13419] ip_tables: iptables: counters copy to user failed while replacing table [ 1732.759544][T13424] FAULT_INJECTION: forcing a failure. [ 1732.759544][T13424] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.759588][T13424] CPU: 1 UID: 0 PID: 13424 Comm: syz.4.12304 Not tainted syzkaller #0 PREEMPT(full) [ 1732.759612][T13424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1732.759624][T13424] Call Trace: [ 1732.759634][T13424] [ 1732.759647][T13424] dump_stack_lvl+0xe8/0x150 [ 1732.759683][T13424] should_fail_ex+0x410/0x560 [ 1732.759778][T13424] should_failslab+0xa8/0x100 [ 1732.759805][T13424] __kvmalloc_node_noprof+0x176/0x820 [ 1732.759831][T13424] ? __kvmalloc_node_noprof+0x345/0x820 [ 1732.759851][T13424] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 1732.759874][T13424] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 1732.759903][T13424] bpf_test_run_xdp_live+0x220/0x1c20 [ 1732.759930][T13424] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 1732.759955][T13424] ? __mutex_unlock_slowpath+0x731/0x900 [ 1732.759990][T13424] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1732.760021][T13424] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1732.760039][T13424] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1732.760065][T13424] ? 0xffffffffa0403c38 [ 1732.760075][T13424] ? 0xffffffffa0403c90 [ 1732.760102][T13424] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1732.760121][T13424] ? _copy_from_user+0x94/0xb0 [ 1732.760137][T13424] ? bpf_test_init+0x113/0x150 [ 1732.760148][T13424] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1732.760163][T13424] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1732.760186][T13424] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1732.760209][T13424] ? __fget_files+0x2a/0x420 [ 1732.760236][T13424] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1732.760255][T13424] bpf_prog_test_run+0x2c5/0x340 [ 1732.760279][T13424] __sys_bpf+0xa22/0xd90 [ 1732.760299][T13424] ? __pfx___sys_bpf+0x10/0x10 [ 1732.760321][T13424] ? __fget_files+0x2a/0x420 [ 1732.760348][T13424] ? ksys_write+0x242/0x270 [ 1732.760368][T13424] ? __pfx_ksys_write+0x10/0x10 [ 1732.760398][T13424] __x64_sys_bpf+0xba/0xd0 [ 1732.760421][T13424] do_syscall_64+0x166/0x520 [ 1732.760449][T13424] ? trace_irq_disable+0x3b/0x140 [ 1732.760462][T13424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.760475][T13424] ? clear_bhb_loop+0x70/0xc0 [ 1732.760490][T13424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.760502][T13424] RIP: 0033:0x7f65a799e159 [ 1732.760516][T13424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1732.760527][T13424] RSP: 002b:00007f65a8892028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1732.760542][T13424] RAX: ffffffffffffffda RBX: 00007f65a7c25fa0 RCX: 00007f65a799e159 [ 1732.760552][T13424] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1732.760560][T13424] RBP: 00007f65a8892090 R08: 0000000000000000 R09: 0000000000000000 [ 1732.760568][T13424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1732.760576][T13424] R13: 00007f65a7c26038 R14: 00007f65a7c25fa0 R15: 00007fff8a50fa78 [ 1732.760596][T13424] [ 1732.955499][ T8988] Bluetooth: hci4: command 0x0406 tx timeout [ 1733.215002][T13439] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1733.232721][T13440] dummy0: entered promiscuous mode [ 1733.232799][T13440] dummy0: entered allmulticast mode [ 1733.379919][T13442] netlink: 'syz.1.12309': attribute type 19 has an invalid length. [ 1733.635602][T13447] bond1 (unregistering): Released all slaves [ 1734.366735][T13474] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1734.813940][T13493] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input30 [ 1734.843492][T13494] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1735.215654][T13494] netlink: 'syz.2.12329': attribute type 19 has an invalid length. [ 1735.379290][T13496] __nla_validate_parse: 13 callbacks suppressed [ 1735.379315][T13496] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12330'. [ 1735.472238][T13518] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12336'. [ 1735.472798][T13518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12336'. [ 1735.506940][T13518] SET target dimension over the limit! [ 1735.746140][T13522] netlink: 'syz.3.12338': attribute type 4 has an invalid length. [ 1736.069323][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12340'. [ 1736.812520][T13550] nbd1: detected capacity change from 0 to 63 [ 1736.879985][T17025] block nbd1: Receive control failed (result -104) [ 1736.993600][T13553] syzkaller0: entered promiscuous mode [ 1736.993627][T13553] syzkaller0: entered allmulticast mode [ 1737.009094][T13553] tipc: Enabled bearer , priority 0 [ 1737.025841][T13552] tipc: Resetting bearer [ 1737.085537][T13557] netlink: 'syz.2.12351': attribute type 1 has an invalid length. [ 1737.102575][T13552] tipc: Disabling bearer [ 1737.134491][T13557] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1737.340095][T13557] bond7: (slave veth11): Enslaving as an active interface with a down link [ 1737.604401][T13570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12355'. [ 1737.604451][T13570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12355'. [ 1737.664522][T13581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1737.665273][T13581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1737.665820][T13581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1737.666364][T13581] xt_policy: output policy not valid in PREROUTING and INPUT [ 1737.805732][T13583] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input31 [ 1737.964133][T13587] Bluetooth: hci0: unsupported parameter 5135 [ 1737.964158][T13587] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 1738.456210][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12371'. [ 1738.754688][T13626] x_tables: unsorted entry at hook 4 [ 1739.113786][T13633] macsec1: entered promiscuous mode [ 1739.113821][T13633] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1739.119884][T13633] macsec1: entered allmulticast mode [ 1739.119914][T13633] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1739.123342][T13633] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1739.166334][T13633] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1739.221854][T13643] ip_tables: iptables: counters copy to user failed while replacing table [ 1739.322980][ T5850] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1739.390427][T13644] bond1 (unregistering): Released all slaves [ 1740.274039][T13674] tipc: Enabling of bearer rejected, failed to enable media [ 1740.290707][T13675] tipc: Enabling of bearer rejected, failed to enable media [ 1741.362662][T13703] syzkaller0: entered promiscuous mode [ 1741.362689][T13703] syzkaller0: entered allmulticast mode [ 1741.408095][T13686] wg2 speed is unknown, defaulting to 1000 [ 1741.721826][T13708] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12398'. [ 1742.236209][T13727] tipc: Enabled bearer , priority 0 [ 1742.571027][T13739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12405'. [ 1742.571070][T13739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12405'. [ 1743.976408][T13727] tipc: Disabling bearer [ 1743.994907][T15556] tipc: Node number set to 3537117852 [ 1743.995198][T13747] hsr0: entered promiscuous mode [ 1744.000301][T13750] FAULT_INJECTION: forcing a failure. [ 1744.000301][T13750] name failslab, interval 1, probability 0, space 0, times 0 [ 1744.000334][T13750] CPU: 1 UID: 0 PID: 13750 Comm: syz.1.12409 Not tainted syzkaller #0 PREEMPT(full) [ 1744.000353][T13750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1744.000364][T13750] Call Trace: [ 1744.000371][T13750] [ 1744.000379][T13750] dump_stack_lvl+0xe8/0x150 [ 1744.000411][T13750] should_fail_ex+0x410/0x560 [ 1744.000435][T13750] should_failslab+0xa8/0x100 [ 1744.000454][T13750] ? security_file_alloc+0x34/0x310 [ 1744.000472][T13750] kmem_cache_alloc_noprof+0xa1/0x600 [ 1744.000496][T13750] ? rcu_is_watching+0x16/0xb0 [ 1744.000536][T13750] ? security_file_alloc+0x34/0x310 [ 1744.000560][T13750] security_file_alloc+0x34/0x310 [ 1744.000581][T13750] init_file+0x90/0x2b0 [ 1744.000605][T13750] alloc_empty_file+0x74/0x1d0 [ 1744.000637][T13750] alloc_file_pseudo+0x115/0x1e0 [ 1744.000666][T13750] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1744.000692][T13750] ? _raw_spin_unlock+0x28/0x50 [ 1744.000717][T13750] ? alloc_fd+0x651/0x6c0 [ 1744.000757][T13750] sock_alloc_file+0xb8/0x2e0 [ 1744.000777][T13750] ? __sys_socket+0x12b/0x1b0 [ 1744.000802][T13750] __sys_socket+0x13f/0x1b0 [ 1744.000830][T13750] __x64_sys_socket+0x7a/0x90 [ 1744.000855][T13750] do_syscall_64+0x166/0x520 [ 1744.000884][T13750] ? trace_irq_disable+0x3b/0x140 [ 1744.000905][T13750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1744.000925][T13750] ? clear_bhb_loop+0x70/0xc0 [ 1744.000949][T13750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1744.000968][T13750] RIP: 0033:0x7f1b30b9f9c7 [ 1744.001001][T13750] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1744.001024][T13750] RSP: 002b:00007f1b3199df98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1744.001046][T13750] RAX: ffffffffffffffda RBX: 00007f1b30e25fa0 RCX: 00007f1b30b9f9c7 [ 1744.001061][T13750] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1744.001074][T13750] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1744.001087][T13750] R10: 0000200000000d00 R11: 0000000000000286 R12: 0000000000000001 [ 1744.001100][T13750] R13: 00007f1b30e26038 R14: 00007f1b30e25fa0 R15: 00007ffd25831888 [ 1744.001142][T13750] [ 1744.214032][T13748] hsr_slave_0: left promiscuous mode [ 1744.255277][T13748] hsr_slave_1: left promiscuous mode [ 1744.347766][T13748] hsr0 (unregistering): left promiscuous mode [ 1745.475545][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12416'. [ 1747.749341][T13758] bond1 (unregistering): Released all slaves [ 1747.900481][T13766] syzkaller0: entered promiscuous mode [ 1747.900502][T13766] syzkaller0: entered allmulticast mode [ 1748.143557][T13790] FAULT_INJECTION: forcing a failure. [ 1748.143557][T13790] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.143594][T13790] CPU: 0 UID: 0 PID: 13790 Comm: syz.2.12418 Not tainted syzkaller #0 PREEMPT(full) [ 1748.143614][T13790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1748.143625][T13790] Call Trace: [ 1748.143634][T13790] [ 1748.143643][T13790] dump_stack_lvl+0xe8/0x150 [ 1748.143677][T13790] should_fail_ex+0x410/0x560 [ 1748.143707][T13790] should_failslab+0xa8/0x100 [ 1748.143735][T13790] __kmalloc_noprof+0xfe/0x720 [ 1748.143754][T13790] ? rcu_is_watching+0x16/0xb0 [ 1748.143779][T13790] ? tomoyo_realpath_from_path+0xef/0x640 [ 1748.143805][T13790] ? tomoyo_realpath_from_path+0xef/0x640 [ 1748.143839][T13790] tomoyo_realpath_from_path+0xef/0x640 [ 1748.143878][T13790] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1748.143903][T13790] tomoyo_path_number_perm+0x246/0x5f0 [ 1748.143930][T13790] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1748.143953][T13790] ? __lock_acquire+0x747/0x2de0 [ 1748.143990][T13790] ? hook_file_ioctl+0x1f2/0x600 [ 1748.144038][T13790] ? __fget_files+0x2a/0x420 [ 1748.144068][T13790] ? __fget_files+0x2a/0x420 [ 1748.144106][T13790] ? __fget_files+0x3a2/0x420 [ 1748.144132][T13790] ? __fget_files+0x2a/0x420 [ 1748.144168][T13790] security_file_ioctl+0xc3/0x2a0 [ 1748.144194][T13790] __se_sys_ioctl+0x47/0x170 [ 1748.144220][T13790] do_syscall_64+0x166/0x520 [ 1748.144249][T13790] ? trace_irq_disable+0x3b/0x140 [ 1748.144270][T13790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.144292][T13790] ? clear_bhb_loop+0x70/0xc0 [ 1748.144317][T13790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.144337][T13790] RIP: 0033:0x7efe58b9e159 [ 1748.144357][T13790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.144375][T13790] RSP: 002b:00007efe59a2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1748.144399][T13790] RAX: ffffffffffffffda RBX: 00007efe58e26090 RCX: 00007efe58b9e159 [ 1748.144414][T13790] RDX: 000000110e22fff6 RSI: 000000004004743d RDI: 0000000000000003 [ 1748.144428][T13790] RBP: 00007efe59a2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.144440][T13790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.144452][T13790] R13: 00007efe58e26128 R14: 00007efe58e26090 R15: 00007ffe065cfbb8 [ 1748.144483][T13790] [ 1748.148205][T13790] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1756.532825][T13811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12425'. [ 1756.532940][T13811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12425'. [ 1756.540233][T13813] netlink: 136 bytes leftover after parsing attributes in process `syz.2.12426'. [ 1756.567344][T13811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12425'. [ 1756.622833][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12426'. [ 1756.622859][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12426'. [ 1756.746208][T13804] netlink: 'syz.4.12424': attribute type 2 has an invalid length. [ 1756.859558][T13828] netlink: 'syz.0.12430': attribute type 1 has an invalid length. [ 1756.859584][T13828] netlink: 232 bytes leftover after parsing attributes in process `syz.0.12430'. [ 1756.859602][T13828] netlink: 'syz.0.12430': attribute type 1 has an invalid length. [ 1756.893135][T13830] bond2: (slave dummy0): Releasing active interface [ 1756.941507][T13826] netlink: 'syz.1.12428': attribute type 10 has an invalid length. [ 1756.941536][T13826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12428'. [ 1756.941801][T13826] dummy0: entered promiscuous mode [ 1757.097760][T13836] syzkaller0: entered promiscuous mode [ 1757.097777][T13836] syzkaller0: entered allmulticast mode [ 1757.285605][T13841] xt_policy: output policy not valid in PREROUTING and INPUT [ 1757.582470][T13859] FAULT_INJECTION: forcing a failure. [ 1757.582470][T13859] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.582507][T13859] CPU: 1 UID: 0 PID: 13859 Comm: syz.2.12442 Not tainted syzkaller #0 PREEMPT(full) [ 1757.582530][T13859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1757.582544][T13859] Call Trace: [ 1757.582553][T13859] [ 1757.582564][T13859] dump_stack_lvl+0xe8/0x150 [ 1757.582601][T13859] should_fail_ex+0x410/0x560 [ 1757.582632][T13859] should_failslab+0xa8/0x100 [ 1757.582662][T13859] __kmalloc_noprof+0xfe/0x720 [ 1757.582692][T13859] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1757.582722][T13859] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1757.582772][T13859] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1757.582811][T13859] genl_family_rcv_msg_doit+0xda/0x340 [ 1757.582847][T13859] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1757.582884][T13859] ? apparmor_capable+0x126/0x170 [ 1757.582918][T13859] ? bpf_lsm_capable+0x9/0x20 [ 1757.582937][T13859] ? security_capable+0x7e/0x2c0 [ 1757.582969][T13859] genl_rcv_msg+0x614/0x7a0 [ 1757.583006][T13859] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1757.583033][T13859] ? __pfx_tipc_nl_node_set_link+0x10/0x10 [ 1757.583313][T13859] netlink_rcv_skb+0x226/0x4a0 [ 1757.583359][T13859] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1757.583390][T13859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1757.583431][T13859] ? down_read+0x2be/0x330 [ 1757.583459][T13859] genl_rcv+0x28/0x40 [ 1757.583485][T13859] netlink_unicast+0x7bd/0x940 [ 1757.583532][T13859] netlink_sendmsg+0x813/0xb40 [ 1757.583567][T13859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.583596][T13859] ? apparmor_socket_sendmsg+0x98/0x360 [ 1757.583618][T13859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1757.583636][T13859] sock_sendmsg_nosec+0x14e/0x190 [ 1757.583667][T13859] ____sys_sendmsg+0x54e/0x850 [ 1757.583702][T13859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1757.583742][T13859] ? import_iovec+0x73/0xa0 [ 1757.583775][T13859] ___sys_sendmsg+0x2a5/0x360 [ 1757.583802][T13859] ? __lock_acquire+0x747/0x2de0 [ 1757.583829][T13859] ? __pfx____sys_sendmsg+0x10/0x10 [ 1757.583897][T13859] ? __fget_files+0x2a/0x420 [ 1757.583922][T13859] ? __fget_files+0x3a2/0x420 [ 1757.583957][T13859] __x64_sys_sendmsg+0x1b1/0x290 [ 1757.583988][T13859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1757.584038][T13859] do_syscall_64+0x166/0x520 [ 1757.584066][T13859] ? trace_irq_disable+0x3b/0x140 [ 1757.584141][T13859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.584163][T13859] ? clear_bhb_loop+0x70/0xc0 [ 1757.584189][T13859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.584211][T13859] RIP: 0033:0x7efe58b9e159 [ 1757.584232][T13859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1757.584249][T13859] RSP: 002b:00007efe59a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1757.584275][T13859] RAX: ffffffffffffffda RBX: 00007efe58e25fa0 RCX: 00007efe58b9e159 [ 1757.584300][T13859] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1757.584321][T13859] RBP: 00007efe59a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1757.584335][T13859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1757.584347][T13859] R13: 00007efe58e26038 R14: 00007efe58e25fa0 R15: 00007ffe065cfbb8 [ 1757.584386][T13859] [ 1757.800649][T13861] batadv_slave_1: entered promiscuous mode [ 1757.848232][T13865] Cannot find add_set index 3 as target [ 1758.024153][T13871] x_tables: duplicate entry at hook 2 [ 1758.113500][T13874] batman_adv: batadv0: Adding interface: syzkaller0 [ 1758.113523][T13874] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1758.113557][T13874] batman_adv: batadv0: Interface activated: syzkaller0 [ 1758.400347][T13854] batadv_slave_1: left promiscuous mode [ 1758.500086][T13891] ip_tables: iptables: counters copy to user failed while replacing table [ 1758.851900][T13869] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1758.918355][T13869] batman_adv: batadv0: Removing interface: syzkaller0 [ 1759.078656][T13912] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input32 [ 1759.430675][T13923] netlink: 'syz.0.12462': attribute type 1 has an invalid length. [ 1759.430817][T13923] netlink: 244 bytes leftover after parsing attributes in process `syz.0.12462'. [ 1759.597807][T13927] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12463'. [ 1760.282493][T13940] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1760.814453][T13960] netlink: 'syz.2.12475': attribute type 1 has an invalid length. [ 1760.899222][T13964] ip_tables: iptables: counters copy to user failed while replacing table [ 1766.376860][T13980] xt_MASQUERADE: bad MAP_IPS. [ 1766.431366][T13982] SET target dimension over the limit! [ 1766.935997][T14000] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input33 [ 1767.341331][T13985] wg2 speed is unknown, defaulting to 1000 [ 1767.369801][ T1930] block nbd1: Possible stuck request ffff888027200000: control (read@0,4096B). Runtime 30 seconds [ 1767.750145][T14014] __nla_validate_parse: 9 callbacks suppressed [ 1767.750170][T14014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12490'. [ 1767.768938][T14014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12490'. [ 1767.816904][T14017] bond1 (unregistering): Released all slaves [ 1768.704744][T14047] bond1 (unregistering): Released all slaves [ 1769.003789][T14053] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1769.004718][ T6427] IPVS: starting estimator thread 0... [ 1769.040248][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12499'. [ 1769.103257][T14057] IPVS: using max 26 ests per chain, 62400 per kthread [ 1769.157162][T14062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12501'. [ 1769.158388][T14062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12501'. [ 1769.237749][T14055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12499'. [ 1769.288293][T14065] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input34 [ 1769.561679][T14073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12505'. [ 1769.581367][T14073] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1769.588310][T14073] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12505'. [ 1769.645723][T14073] tipc: Enabling of bearer rejected, failed to enable media [ 1769.748131][T14077] FAULT_INJECTION: forcing a failure. [ 1769.748131][T14077] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.748178][T14077] CPU: 1 UID: 0 PID: 14077 Comm: syz.1.12509 Not tainted syzkaller #0 PREEMPT(full) [ 1769.748204][T14077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1769.748217][T14077] Call Trace: [ 1769.748226][T14077] [ 1769.748236][T14077] dump_stack_lvl+0xe8/0x150 [ 1769.748271][T14077] should_fail_ex+0x410/0x560 [ 1769.748302][T14077] should_failslab+0xa8/0x100 [ 1769.748331][T14077] __kmalloc_noprof+0xfe/0x720 [ 1769.748350][T14077] ? __kasan_kmalloc+0x93/0xb0 [ 1769.748374][T14077] ? nla_strdup+0x9d/0x140 [ 1769.748399][T14077] ? nla_strdup+0x9d/0x140 [ 1769.748425][T14077] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1769.748452][T14077] nla_strdup+0x9d/0x140 [ 1769.748480][T14077] nf_tables_newchain+0x1aba/0x28b0 [ 1769.748530][T14077] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1769.748599][T14077] ? lock_acquire+0x115/0x350 [ 1769.748622][T14077] ? nfnl_pernet+0x23/0x240 [ 1769.748662][T14077] ? __nla_parse+0x40/0x60 [ 1769.748691][T14077] nfnetlink_rcv+0x1288/0x28c0 [ 1769.748759][T14077] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1769.748842][T14077] ? skb_clone+0x246/0x3a0 [ 1769.748887][T14077] ? netlink_deliver_tap+0x2e/0x1b0 [ 1769.748910][T14077] ? netlink_deliver_tap+0x2e/0x1b0 [ 1769.748938][T14077] netlink_unicast+0x7bd/0x940 [ 1769.748983][T14077] netlink_sendmsg+0x813/0xb40 [ 1769.749017][T14077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1769.749049][T14077] ? apparmor_socket_sendmsg+0x98/0x360 [ 1769.749077][T14077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1769.749098][T14077] sock_sendmsg_nosec+0x14e/0x190 [ 1769.749124][T14077] ____sys_sendmsg+0x54e/0x850 [ 1769.749168][T14077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1769.749209][T14077] ? import_iovec+0x73/0xa0 [ 1769.749237][T14077] ___sys_sendmsg+0x2a5/0x360 [ 1769.749261][T14077] ? __lock_acquire+0x747/0x2de0 [ 1769.749287][T14077] ? __pfx____sys_sendmsg+0x10/0x10 [ 1769.749358][T14077] ? __fget_files+0x2a/0x420 [ 1769.749386][T14077] ? __fget_files+0x3a2/0x420 [ 1769.749427][T14077] __x64_sys_sendmsg+0x1b1/0x290 [ 1769.749458][T14077] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1769.749513][T14077] do_syscall_64+0x166/0x520 [ 1769.749543][T14077] ? trace_irq_disable+0x3b/0x140 [ 1769.749565][T14077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.749587][T14077] ? clear_bhb_loop+0x70/0xc0 [ 1769.749613][T14077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.749635][T14077] RIP: 0033:0x7f1b30b9e159 [ 1769.749656][T14077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1769.749673][T14077] RSP: 002b:00007f1b3199f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1769.749695][T14077] RAX: ffffffffffffffda RBX: 00007f1b30e25fa0 RCX: 00007f1b30b9e159 [ 1769.749711][T14077] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1769.749724][T14077] RBP: 00007f1b3199f090 R08: 0000000000000000 R09: 0000000000000000 [ 1769.749735][T14077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1769.749746][T14077] R13: 00007f1b30e26038 R14: 00007f1b30e25fa0 R15: 00007ffd25831888 [ 1769.749780][T14077] [ 1769.879769][T14080] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 1769.897646][T14084] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1770.049403][T14089] netlink: 'syz.1.12511': attribute type 1 has an invalid length. [ 1770.246717][T14098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1770.282568][T14089] bond3: entered promiscuous mode [ 1770.283006][T14089] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1770.475321][T14089] bond3: (slave bridge1): making interface the new active one [ 1770.475349][T14089] bridge1: entered promiscuous mode [ 1770.479279][T14089] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1771.557292][T14124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12520'. [ 1771.611941][T14110] wg2 speed is unknown, defaulting to 1000 [ 1771.737625][T14131] x_tables: duplicate entry at hook 2 [ 1771.749682][T14132] netlink: 'syz.3.12523': attribute type 1 has an invalid length. [ 1771.749708][T14132] netlink: 200 bytes leftover after parsing attributes in process `syz.3.12523'. [ 1771.749724][T14132] netlink: 'syz.3.12523': attribute type 1 has an invalid length. [ 1771.803479][T14132] set match dimension is over the limit! [ 1771.996028][T14138] netlink: 'syz.4.12525': attribute type 1 has an invalid length. [ 1772.083036][T14138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1772.176064][T14148] netlink: 'syz.4.12525': attribute type 10 has an invalid length. [ 1772.177174][T14145] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1772.354153][T14152] ip_tables: iptables: counters copy to user failed while replacing table [ 1772.376588][T14144] macsec1: entered promiscuous mode [ 1772.726012][T14138] dummy0: left promiscuous mode [ 1772.726507][T14148] dummy0: entered promiscuous mode [ 1772.925613][T14145] tipc: Enabling of bearer rejected, failed to enable media [ 1773.148082][T14166] __nla_validate_parse: 2 callbacks suppressed [ 1773.148107][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12531'. [ 1773.276189][T14168] openvswitch: netlink: Flow actions attr not present in new flow. [ 1773.492184][T14175] xt_hashlimit: size too large, truncated to 1048576 [ 1773.492210][T14175] xt_hashlimit: max too large, truncated to 1048576 [ 1773.704330][T14179] Bluetooth: hci0: unsupported parameter 5135 [ 1773.704357][T14179] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 1774.166375][T14183] Bluetooth: hci0: unsupported parameter 5135 [ 1774.166403][T14183] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 1774.263013][T14187] FAULT_INJECTION: forcing a failure. [ 1774.263013][T14187] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.263048][T14187] CPU: 0 UID: 0 PID: 14187 Comm: syz.3.12538 Not tainted syzkaller #0 PREEMPT(full) [ 1774.263073][T14187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1774.263085][T14187] Call Trace: [ 1774.263095][T14187] [ 1774.263105][T14187] dump_stack_lvl+0xe8/0x150 [ 1774.263142][T14187] should_fail_ex+0x410/0x560 [ 1774.263169][T14187] ? __alloc_skb+0x1db/0x7a0 [ 1774.263194][T14187] should_failslab+0xa8/0x100 [ 1774.263218][T14187] ? __alloc_skb+0x1db/0x7a0 [ 1774.263241][T14187] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1774.263273][T14187] ? __alloc_skb+0x18d/0x7a0 [ 1774.263298][T14187] ? __alloc_skb+0x1db/0x7a0 [ 1774.263331][T14187] __alloc_skb+0x1db/0x7a0 [ 1774.263362][T14187] alloc_skb_with_frags+0xc6/0x760 [ 1774.263407][T14187] sock_alloc_send_pskb+0x878/0x990 [ 1774.263468][T14187] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1774.263516][T14187] tun_get_user+0x8fb/0x44d0 [ 1774.263565][T14187] ? aa_file_perm+0x4ed/0x15f0 [ 1774.263593][T14187] ? __pfx_tun_get_user+0x10/0x10 [ 1774.263619][T14187] ? __lock_acquire+0x747/0x2de0 [ 1774.263643][T14187] ? kstrtoull+0x137/0x1d0 [ 1774.263674][T14187] ? ref_tracker_alloc+0x172/0x530 [ 1774.263695][T14187] ? lock_acquire+0x115/0x350 [ 1774.263717][T14187] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1774.263745][T14187] ? lock_acquire+0x115/0x350 [ 1774.263765][T14187] ? tun_get+0x1c/0x2f0 [ 1774.263794][T14187] ? tun_get+0x1c/0x2f0 [ 1774.263815][T14187] ? tun_get+0x1c/0x2f0 [ 1774.263843][T14187] tun_chr_write_iter+0x113/0x200 [ 1774.263869][T14187] vfs_write+0x612/0xba0 [ 1774.263909][T14187] ? __pfx_vfs_write+0x10/0x10 [ 1774.263950][T14187] ? __fget_files+0x2a/0x420 [ 1774.263988][T14187] ksys_write+0x150/0x270 [ 1774.264022][T14187] ? __pfx_ksys_write+0x10/0x10 [ 1774.264066][T14187] do_syscall_64+0x166/0x520 [ 1774.264096][T14187] ? trace_irq_disable+0x3b/0x140 [ 1774.264116][T14187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.264138][T14187] ? clear_bhb_loop+0x70/0xc0 [ 1774.264164][T14187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.264184][T14187] RIP: 0033:0x7f9696b9e159 [ 1774.264205][T14187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1774.264223][T14187] RSP: 002b:00007f9697afc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1774.264247][T14187] RAX: ffffffffffffffda RBX: 00007f9696e25fa0 RCX: 00007f9696b9e159 [ 1774.264263][T14187] RDX: 000000000000001a RSI: 0000200000000800 RDI: 0000000000000003 [ 1774.264277][T14187] RBP: 00007f9697afc090 R08: 0000000000000000 R09: 0000000000000000 [ 1774.264290][T14187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1774.264302][T14187] R13: 00007f9696e26038 R14: 00007f9696e25fa0 R15: 00007ffe32d8b768 [ 1774.264338][T14187] [ 1775.432659][T14207] netlink: 'syz.3.12547': attribute type 10 has an invalid length. [ 1775.432687][T14207] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12547'. [ 1775.432945][T14207] dummy0: entered promiscuous mode [ 1775.605794][T14213] Bluetooth: hci0: unsupported parameter 5135 [ 1775.605822][T14213] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 1775.655611][T14214] netlink: 'syz.0.12548': attribute type 16 has an invalid length. [ 1775.655640][T14214] netlink: 'syz.0.12548': attribute type 17 has an invalid length. [ 1775.660309][T14218] batadv0: entered promiscuous mode [ 1775.660520][T14218] macvlan2: entered promiscuous mode [ 1775.660761][T14218] macvlan2: entered allmulticast mode [ 1775.660777][T14218] batadv0: entered allmulticast mode [ 1775.665881][T14218] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1775.666868][T14218] batadv0: left allmulticast mode [ 1775.667064][T14218] batadv0: left promiscuous mode [ 1775.819866][T14222] ipvlan2: entered allmulticast mode [ 1775.819893][T14222] macvlan1: entered allmulticast mode [ 1775.819905][T14222] veth1_vlan: entered allmulticast mode [ 1775.826956][T14222] batman_adv: batadv0: Adding interface: ipvlan2 [ 1775.826974][T14222] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.827003][T14222] batman_adv: batadv0: Interface activated: ipvlan2 [ 1775.836885][T14223] ipvlan3: entered allmulticast mode [ 1775.839356][T14223] batman_adv: batadv0: Adding interface: ipvlan3 [ 1775.839374][T14223] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.839399][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan2 [ 1775.839413][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.839425][T14223] batman_adv: batadv0: Interface activated: ipvlan3 [ 1776.138577][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12553'. [ 1776.138608][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12553'. [ 1776.365290][T14239] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12556'. [ 1776.532916][T14243] FAULT_INJECTION: forcing a failure. [ 1776.532916][T14243] name failslab, interval 1, probability 0, space 0, times 0 [ 1776.532953][T14243] CPU: 0 UID: 0 PID: 14243 Comm: syz.1.12557 Not tainted syzkaller #0 PREEMPT(full) [ 1776.532977][T14243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1776.532991][T14243] Call Trace: [ 1776.533001][T14243] [ 1776.533011][T14243] dump_stack_lvl+0xe8/0x150 [ 1776.533047][T14243] should_fail_ex+0x410/0x560 [ 1776.533079][T14243] should_failslab+0xa8/0x100 [ 1776.533105][T14243] ? skb_clone+0x212/0x3a0 [ 1776.533135][T14243] kmem_cache_alloc_noprof+0xa1/0x600 [ 1776.533168][T14243] ? skb_clone+0x212/0x3a0 [ 1776.533216][T14243] skb_clone+0x212/0x3a0 [ 1776.533248][T14243] __netlink_deliver_tap+0x355/0x6e0 [ 1776.533284][T14243] ? netlink_deliver_tap+0x2e/0x1b0 [ 1776.533308][T14243] netlink_deliver_tap+0x19c/0x1b0 [ 1776.533330][T14243] netlink_unicast+0x781/0x940 [ 1776.533373][T14243] netlink_sendmsg+0x813/0xb40 [ 1776.533407][T14243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1776.533440][T14243] ? apparmor_socket_sendmsg+0x98/0x360 [ 1776.533468][T14243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1776.533489][T14243] sock_sendmsg_nosec+0x14e/0x190 [ 1776.533523][T14243] ____sys_sendmsg+0x54e/0x850 [ 1776.533559][T14243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1776.533599][T14243] ? import_iovec+0x73/0xa0 [ 1776.533632][T14243] ___sys_sendmsg+0x2a5/0x360 [ 1776.533658][T14243] ? __lock_acquire+0x747/0x2de0 [ 1776.533686][T14243] ? __pfx____sys_sendmsg+0x10/0x10 [ 1776.533756][T14243] ? __fget_files+0x2a/0x420 [ 1776.533782][T14243] ? __fget_files+0x3a2/0x420 [ 1776.533825][T14243] __x64_sys_sendmsg+0x1b1/0x290 [ 1776.533857][T14243] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1776.533912][T14243] do_syscall_64+0x166/0x520 [ 1776.533941][T14243] ? trace_irq_disable+0x3b/0x140 [ 1776.533962][T14243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.533984][T14243] ? clear_bhb_loop+0x70/0xc0 [ 1776.534009][T14243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.534029][T14243] RIP: 0033:0x7f1b30b9e159 [ 1776.534050][T14243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1776.534069][T14243] RSP: 002b:00007f1b3199f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1776.534093][T14243] RAX: ffffffffffffffda RBX: 00007f1b30e25fa0 RCX: 00007f1b30b9e159 [ 1776.534107][T14243] RDX: 000000000408c0c0 RSI: 0000200000001540 RDI: 0000000000000003 [ 1776.534121][T14243] RBP: 00007f1b3199f090 R08: 0000000000000000 R09: 0000000000000000 [ 1776.534134][T14243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1776.534147][T14243] R13: 00007f1b30e26038 R14: 00007f1b30e25fa0 R15: 00007ffd25831888 [ 1776.534183][T14243] [ 1776.885827][T14255] FAULT_INJECTION: forcing a failure. [ 1776.885827][T14255] name failslab, interval 1, probability 0, space 0, times 0 [ 1776.885864][T14255] CPU: 0 UID: 0 PID: 14255 Comm: syz.1.12564 Not tainted syzkaller #0 PREEMPT(full) [ 1776.885886][T14255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1776.885898][T14255] Call Trace: [ 1776.885907][T14255] [ 1776.885917][T14255] dump_stack_lvl+0xe8/0x150 [ 1776.885950][T14255] should_fail_ex+0x410/0x560 [ 1776.885981][T14255] should_failslab+0xa8/0x100 [ 1776.886009][T14255] __kmalloc_noprof+0xfe/0x720 [ 1776.886030][T14255] ? rcu_is_watching+0x16/0xb0 [ 1776.886055][T14255] ? nft_ct_timeout_obj_init+0x1e4/0x670 [ 1776.886080][T14255] ? nft_ct_timeout_obj_init+0x1e4/0x670 [ 1776.886112][T14255] nft_ct_timeout_obj_init+0x1e4/0x670 [ 1776.886149][T14255] nft_obj_init+0x21f/0x360 [ 1776.886180][T14255] nf_tables_newobj+0xab6/0x1e90 [ 1776.886232][T14255] ? __pfx_nf_tables_newobj+0x10/0x10 [ 1776.886270][T14255] ? __nla_parse+0x40/0x60 [ 1776.886301][T14255] nfnetlink_rcv+0x1288/0x28c0 [ 1776.886376][T14255] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1776.886456][T14255] ? skb_clone+0x246/0x3a0 [ 1776.886501][T14255] ? netlink_deliver_tap+0x2e/0x1b0 [ 1776.886523][T14255] ? netlink_deliver_tap+0x2e/0x1b0 [ 1776.886551][T14255] netlink_unicast+0x7bd/0x940 [ 1776.886594][T14255] netlink_sendmsg+0x813/0xb40 [ 1776.886638][T14255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1776.886671][T14255] ? apparmor_socket_sendmsg+0x98/0x360 [ 1776.886699][T14255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1776.886720][T14255] sock_sendmsg_nosec+0x14e/0x190 [ 1776.886746][T14255] ____sys_sendmsg+0x54e/0x850 [ 1776.886780][T14255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1776.886820][T14255] ? import_iovec+0x73/0xa0 [ 1776.886850][T14255] ___sys_sendmsg+0x2a5/0x360 [ 1776.886877][T14255] ? __lock_acquire+0x747/0x2de0 [ 1776.886904][T14255] ? __pfx____sys_sendmsg+0x10/0x10 [ 1776.886976][T14255] ? __fget_files+0x2a/0x420 [ 1776.887004][T14255] ? __fget_files+0x3a2/0x420 [ 1776.887044][T14255] __x64_sys_sendmsg+0x1b1/0x290 [ 1776.887077][T14255] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1776.887128][T14255] do_syscall_64+0x166/0x520 [ 1776.887155][T14255] ? trace_irq_disable+0x3b/0x140 [ 1776.887176][T14255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.887197][T14255] ? clear_bhb_loop+0x70/0xc0 [ 1776.887222][T14255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.887242][T14255] RIP: 0033:0x7f1b30b9e159 [ 1776.887263][T14255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1776.887280][T14255] RSP: 002b:00007f1b3199f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1776.887304][T14255] RAX: ffffffffffffffda RBX: 00007f1b30e25fa0 RCX: 00007f1b30b9e159 [ 1776.887320][T14255] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000000000000003 [ 1776.887334][T14255] RBP: 00007f1b3199f090 R08: 0000000000000000 R09: 0000000000000000 [ 1776.887348][T14255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1776.887361][T14255] R13: 00007f1b30e26038 R14: 00007f1b30e25fa0 R15: 00007ffd25831888 [ 1776.887398][T14255] [ 1777.083005][T14259] veth1_macvtap: left promiscuous mode [ 1777.102039][T14266] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1777.147199][T14259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12562'. [ 1777.147226][T14259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12562'. [ 1777.147241][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12562'. [ 1777.378447][T14273] ip_tables: iptables: counters copy to user failed while replacing table [ 1777.403439][T14275] Bluetooth: hci0: unsupported parameter 5135 [ 1777.403457][T14275] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 1777.517158][T14279] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 1777.517205][T14279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1777.525109][T14277] block nbd25: server does not support multiple connections per device. [ 1777.526343][T14277] block nbd25: shutting down sockets [ 1777.672116][T14286] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input35 [ 1777.975706][T14302] FAULT_INJECTION: forcing a failure. [ 1777.975706][T14302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1777.975740][T14302] CPU: 0 UID: 0 PID: 14302 Comm: syz.2.12578 Not tainted syzkaller #0 PREEMPT(full) [ 1777.975765][T14302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1777.975776][T14302] Call Trace: [ 1777.975783][T14302] [ 1777.975790][T14302] dump_stack_lvl+0xe8/0x150 [ 1777.975820][T14302] should_fail_ex+0x410/0x560 [ 1777.975845][T14302] _copy_from_user+0x2d/0xb0 [ 1777.975869][T14302] __sys_bpf+0x2e7/0xd90 [ 1777.975897][T14302] ? __pfx___sys_bpf+0x10/0x10 [ 1777.975926][T14302] ? __fget_files+0x2a/0x420 [ 1777.975966][T14302] ? ksys_write+0x242/0x270 [ 1777.975992][T14302] ? __pfx_ksys_write+0x10/0x10 [ 1777.976030][T14302] __x64_sys_bpf+0xba/0xd0 [ 1777.976051][T14302] do_syscall_64+0x166/0x520 [ 1777.976075][T14302] ? trace_irq_disable+0x3b/0x140 [ 1777.976092][T14302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.976108][T14302] ? clear_bhb_loop+0x70/0xc0 [ 1777.976130][T14302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.976146][T14302] RIP: 0033:0x7efe58b9e159 [ 1777.976163][T14302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1777.976178][T14302] RSP: 002b:00007efe59a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1777.976199][T14302] RAX: ffffffffffffffda RBX: 00007efe58e25fa0 RCX: 00007efe58b9e159 [ 1777.976212][T14302] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1777.976224][T14302] RBP: 00007efe59a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1777.976235][T14302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1777.976246][T14302] R13: 00007efe58e26038 R14: 00007efe58e25fa0 R15: 00007ffe065cfbb8 [ 1777.976278][T14302] [ 1778.360219][T14312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12581'. [ 1778.372101][T14312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12581'. [ 1778.425227][ T31] audit: type=1800 audit(1791180272.650:39): pid=14314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12582" name="blkio.bfq.time_recursive" dev="tmpfs" ino=865 res=0 errno=0 [ 1778.810292][T14325] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input36 [ 1779.026655][T14336] ip6gre1: entered promiscuous mode [ 1779.026683][T14336] ip6gre1: entered allmulticast mode [ 1779.127310][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12590'. [ 1779.290147][T14340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1779.387342][T14343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12590'. [ 1779.387809][T14347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1779.406994][T14351] Bluetooth: hci0: unsupported parameter 5135 [ 1779.407019][T14351] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 1779.470748][T14352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1779.526140][T14347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1779.547612][T14356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12596'. [ 1779.548434][T14356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12596'. [ 1779.717545][T14362] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12599'. [ 1779.836758][T14367] FAULT_INJECTION: forcing a failure. [ 1779.836758][T14367] name failslab, interval 1, probability 0, space 0, times 0 [ 1779.836797][T14367] CPU: 1 UID: 0 PID: 14367 Comm: syz.3.12601 Not tainted syzkaller #0 PREEMPT(full) [ 1779.836822][T14367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1779.836835][T14367] Call Trace: [ 1779.836848][T14367] [ 1779.836857][T14367] dump_stack_lvl+0xe8/0x150 [ 1779.836893][T14367] should_fail_ex+0x410/0x560 [ 1779.836926][T14367] should_failslab+0xa8/0x100 [ 1779.836953][T14367] ? skb_clone+0x212/0x3a0 [ 1779.836983][T14367] kmem_cache_alloc_noprof+0xa1/0x600 [ 1779.837031][T14367] ? skb_clone+0x212/0x3a0 [ 1779.837069][T14367] skb_clone+0x212/0x3a0 [ 1779.837103][T14367] __netlink_deliver_tap+0x355/0x6e0 [ 1779.837140][T14367] ? netlink_deliver_tap+0x2e/0x1b0 [ 1779.837164][T14367] netlink_deliver_tap+0x19c/0x1b0 [ 1779.837189][T14367] netlink_sendskb+0x68/0x140 [ 1779.837223][T14367] nfnetlink_rcv+0x260c/0x28c0 [ 1779.837292][T14367] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1779.837378][T14367] ? skb_clone+0x246/0x3a0 [ 1779.837424][T14367] ? netlink_deliver_tap+0x2e/0x1b0 [ 1779.837446][T14367] ? netlink_deliver_tap+0x2e/0x1b0 [ 1779.837475][T14367] netlink_unicast+0x7bd/0x940 [ 1779.837518][T14367] netlink_sendmsg+0x813/0xb40 [ 1779.837553][T14367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1779.837586][T14367] ? apparmor_socket_sendmsg+0x98/0x360 [ 1779.837614][T14367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1779.837635][T14367] sock_sendmsg_nosec+0x14e/0x190 [ 1779.837662][T14367] ____sys_sendmsg+0x54e/0x850 [ 1779.837698][T14367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1779.837739][T14367] ? import_iovec+0x73/0xa0 [ 1779.837772][T14367] ___sys_sendmsg+0x2a5/0x360 [ 1779.837799][T14367] ? __lock_acquire+0x747/0x2de0 [ 1779.837828][T14367] ? __pfx____sys_sendmsg+0x10/0x10 [ 1779.837915][T14367] ? __fget_files+0x2a/0x420 [ 1779.837945][T14367] ? __fget_files+0x3a2/0x420 [ 1779.837986][T14367] __x64_sys_sendmsg+0x1b1/0x290 [ 1779.838128][T14367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1779.838184][T14367] do_syscall_64+0x166/0x520 [ 1779.838214][T14367] ? trace_irq_disable+0x3b/0x140 [ 1779.838236][T14367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.838258][T14367] ? clear_bhb_loop+0x70/0xc0 [ 1779.838286][T14367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.838307][T14367] RIP: 0033:0x7f9696b9e159 [ 1779.838329][T14367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1779.838349][T14367] RSP: 002b:00007f9697afc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1779.838373][T14367] RAX: ffffffffffffffda RBX: 00007f9696e25fa0 RCX: 00007f9696b9e159 [ 1779.838389][T14367] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1779.838403][T14367] RBP: 00007f9697afc090 R08: 0000000000000000 R09: 0000000000000000 [ 1779.838417][T14367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1779.838429][T14367] R13: 00007f9696e26038 R14: 00007f9696e25fa0 R15: 00007ffe32d8b768 [ 1779.838475][T14367] [ 1779.956978][T14371] ovs-dp0: entered promiscuous mode [ 1780.264904][T14375] syzkaller0: entered promiscuous mode [ 1780.264933][T14375] syzkaller0: entered allmulticast mode [ 1780.284746][T14375] tipc: Enabled bearer , priority 0 [ 1780.445349][T14375] tipc: Resetting bearer [ 1780.502211][T14375] tipc: Disabling bearer [ 1780.669926][T14388] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12609'. [ 1780.745156][T14393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12611'. [ 1780.745185][T14393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12611'. [ 1780.872110][T17025] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1781.095847][T14406] netlink: 'syz.4.12616': attribute type 26 has an invalid length. [ 1781.205674][T14409] Bluetooth: hci0: unsupported parameter 5135 [ 1781.205705][T14409] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 1781.504280][T17025] Bluetooth: hci2: connection err: -111 [ 1781.593621][T14419] FAULT_INJECTION: forcing a failure. [ 1781.593621][T14419] name failslab, interval 1, probability 0, space 0, times 0 [ 1781.593661][T14419] CPU: 0 UID: 0 PID: 14419 Comm: syz.1.12622 Not tainted syzkaller #0 PREEMPT(full) [ 1781.593686][T14419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1781.593700][T14419] Call Trace: [ 1781.593709][T14419] [ 1781.593720][T14419] dump_stack_lvl+0xe8/0x150 [ 1781.593757][T14419] should_fail_ex+0x410/0x560 [ 1781.593791][T14419] should_failslab+0xa8/0x100 [ 1781.593820][T14419] __kmalloc_cache_noprof+0xa3/0x600 [ 1781.593844][T14419] ? nbd_alloc_and_init_config+0x87/0x250 [ 1781.593866][T14419] ? nbd_alloc_and_init_config+0x87/0x250 [ 1781.593898][T14419] nbd_alloc_and_init_config+0x87/0x250 [ 1781.593926][T14419] nbd_genl_connect+0xa17/0x1cd0 [ 1781.593961][T14419] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1781.593998][T14419] ? rcu_is_watching+0x16/0xb0 [ 1781.594025][T14419] ? trace_kmalloc+0x2a/0xf0 [ 1781.594051][T14419] ? __kmalloc_noprof+0x38c/0x720 [ 1781.594076][T14419] ? __nla_parse+0x40/0x60 [ 1781.594109][T14419] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1781.594149][T14419] genl_family_rcv_msg_doit+0x233/0x340 [ 1781.594186][T14419] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1781.594224][T14419] ? __lock_acquire+0x747/0x2de0 [ 1781.594260][T14419] genl_rcv_msg+0x614/0x7a0 [ 1781.594300][T14419] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1781.594324][T14419] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1781.594361][T14419] netlink_rcv_skb+0x226/0x4a0 [ 1781.594383][T14419] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1781.594410][T14419] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1781.594450][T14419] ? down_read+0x2be/0x330 [ 1781.594477][T14419] genl_rcv+0x28/0x40 [ 1781.594500][T14419] netlink_unicast+0x7bd/0x940 [ 1781.594547][T14419] netlink_sendmsg+0x813/0xb40 [ 1781.594583][T14419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1781.594617][T14419] ? apparmor_socket_sendmsg+0x98/0x360 [ 1781.594645][T14419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1781.594666][T14419] sock_sendmsg_nosec+0x14e/0x190 [ 1781.594694][T14419] ____sys_sendmsg+0x54e/0x850 [ 1781.594731][T14419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1781.594771][T14419] ? import_iovec+0x73/0xa0 [ 1781.594804][T14419] ___sys_sendmsg+0x2a5/0x360 [ 1781.594831][T14419] ? __lock_acquire+0x747/0x2de0 [ 1781.594860][T14419] ? __pfx____sys_sendmsg+0x10/0x10 [ 1781.594935][T14419] ? __fget_files+0x2a/0x420 [ 1781.594963][T14419] ? __fget_files+0x3a2/0x420 [ 1781.595015][T14419] __x64_sys_sendmsg+0x1b1/0x290 [ 1781.595048][T14419] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1781.595106][T14419] do_syscall_64+0x166/0x520 [ 1781.595136][T14419] ? trace_irq_disable+0x3b/0x140 [ 1781.595158][T14419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.595180][T14419] ? clear_bhb_loop+0x70/0xc0 [ 1781.595208][T14419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.595229][T14419] RIP: 0033:0x7f1b30b9e159 [ 1781.595251][T14419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1781.595270][T14419] RSP: 002b:00007f1b3199f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1781.595294][T14419] RAX: ffffffffffffffda RBX: 00007f1b30e25fa0 RCX: 00007f1b30b9e159 [ 1781.595310][T14419] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 1781.595324][T14419] RBP: 00007f1b3199f090 R08: 0000000000000000 R09: 0000000000000000 [ 1781.595335][T14419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1781.595347][T14419] R13: 00007f1b30e26038 R14: 00007f1b30e25fa0 R15: 00007ffd25831888 [ 1781.595382][T14419] [ 1781.595468][T14419] nbd: couldn't allocate config [ 1782.344953][T14445] ip_tables: iptables: counters copy to user failed while replacing table [ 1782.425417][T14445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.428215][T14445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.902410][T14430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1783.323029][T14463] xt_policy: output policy not valid in PREROUTING and INPUT [ 1783.470435][T14467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1783.747998][T14476] ip_tables: iptables: counters copy to user failed while replacing table [ 1783.922056][T14488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1783.952548][T14487] x_tables: duplicate underflow at hook 1 [ 1783.983810][T17922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1783.983834][T17922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.036351][T13782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.036378][T13782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.195365][T14495] __nla_validate_parse: 6 callbacks suppressed [ 1784.195391][T14495] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12646'. [ 1784.470058][T14506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12650'. [ 1784.470087][T14506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12650'. [ 1784.662017][T14517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12656'. [ 1784.664688][T14517] netlink: 'syz.3.12656': attribute type 12 has an invalid length. [ 1784.664713][T14517] netlink: 'syz.3.12656': attribute type 29 has an invalid length. [ 1784.664728][T14517] netlink: 148 bytes leftover after parsing attributes in process `syz.3.12656'. [ 1784.968174][T14531] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12660'. [ 1785.119524][T14536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12664'. [ 1785.150310][T14538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12665'. [ 1785.150349][T14538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12665'. [ 1785.253343][T14544] netlink: 'syz.2.12667': attribute type 1 has an invalid length. [ 1785.291718][T14544] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1785.394063][T14544] bond8: (slave veth13): Enslaving as a backup interface with a down link [ 1785.397235][T14547] dummy0: left promiscuous mode [ 1785.397255][T14547] dummy0: left allmulticast mode [ 1785.436221][T14547] bond8: (slave dummy0): Enslaving as a backup interface with an up link [ 1785.444038][T17958] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1785.514152][T14544] netlink: 'syz.2.12667': attribute type 10 has an invalid length. [ 1785.514181][T14544] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12667'. [ 1785.520544][T14544] dummy0: entered promiscuous mode [ 1785.541681][T17958] bond8: (slave dummy0): link status up again after 0 ms [ 1785.560426][T14544] bond8: (slave dummy0): Removing an active aggregator [ 1785.570187][ T6427] bond8: Warning: Found an uninitialized port [ 1785.579162][T13782] bond8: (slave dummy0): link status up again after 0 ms [ 1785.594651][T14544] bond8: (slave dummy0): Releasing backup interface [ 1785.760554][T14556] syzkaller0: create flow: hash 2222062020 index 2 [ 1785.851437][T14560] netlink: 'syz.3.12672': attribute type 1 has an invalid length. [ 1786.164434][T14560] bond1: entered promiscuous mode [ 1786.165097][T14560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1786.187346][T14568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1786.187597][T14568] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1786.187611][T14568] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1786.216211][T14568] bond1: (slave xfrm1): making interface the new active one [ 1786.216238][T14568] xfrm1: entered promiscuous mode [ 1786.237598][T14568] xfrm1: left promiscuous mode [ 1786.288795][T14552] syzkaller0: delete flow: hash 2222062020 index 2 [ 1787.068519][T14585] Bluetooth: hci0: unsupported parameter 5135 [ 1787.068547][T14585] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 1791.931687][T14597] __nla_validate_parse: 3 callbacks suppressed [ 1791.931713][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12681'. [ 1791.931738][T14597] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12681'. [ 1791.981999][T14597] ip6gre1: entered promiscuous mode [ 1791.982026][T14597] ip6gre1: entered allmulticast mode [ 1792.149628][T14603] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12679'. [ 1792.149655][T14603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12679'. [ 1792.167979][T14602] syzkaller0: entered promiscuous mode [ 1792.168004][T14602] syzkaller0: entered allmulticast mode [ 1792.373801][T14591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12680'. [ 1792.790438][T14627] Bluetooth: hci0: unsupported parameter 5135 [ 1792.790567][T14627] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 1792.810464][T14628] tipc: Enabled bearer , priority 0 [ 1792.814633][T14628] syzkaller0: entered promiscuous mode [ 1792.814655][T14628] syzkaller0: entered allmulticast mode [ 1792.913606][T14632] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12688'. [ 1792.981978][T14626] tipc: Resetting bearer [ 1793.050530][T14626] tipc: Disabling bearer [ 1793.242299][T14642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12693'. [ 1793.242342][T14642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12693'. [ 1793.650085][T14649] xt_policy: output policy not valid in PREROUTING and INPUT [ 1793.688690][T14649] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1793.720650][T14656] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1a [ 1793.739103][T14655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12699'. [ 1793.739136][T14655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12699'. [ 1793.754717][T14656] netlink: 'syz.0.12698': attribute type 1 has an invalid length. [ 1793.828599][T14656] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1793.844626][T14656] veth1_to_team: entered promiscuous mode [ 1794.659329][T14684] syzkaller0: entered promiscuous mode [ 1794.659355][T14684] syzkaller0: entered allmulticast mode [ 1794.683655][T14686] syzkaller0: entered promiscuous mode [ 1794.683681][T14686] syzkaller0: entered allmulticast mode [ 1795.253268][T14701] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input37 [ 1795.520170][T14713] netlink: 'syz.4.12718': attribute type 1 has an invalid length. [ 1795.660745][T14713] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1795.760050][T14713] netlink: 'syz.4.12718': attribute type 10 has an invalid length. [ 1795.783122][T14715] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 1795.783351][T14716] dummy0: left promiscuous mode [ 1795.791536][T14716] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 1795.824354][ T6429] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1795.922161][T14718] bond0: (slave bond_slave_0): Releasing backup interface [ 1795.966351][T14713] dummy0: entered promiscuous mode [ 1795.982178][ T6429] bond4: (slave dummy0): link status up again after 0 ms [ 1795.982241][ T6429] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1795.984798][T14713] bond4: (slave dummy0): Removing an active aggregator [ 1795.995023][T14713] bond4: (slave dummy0): Releasing backup interface [ 1796.154726][T14723] FAULT_INJECTION: forcing a failure. [ 1796.154726][T14723] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.154766][T14723] CPU: 1 UID: 0 PID: 14723 Comm: syz.3.12720 Not tainted syzkaller #0 PREEMPT(full) [ 1796.154791][T14723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1796.154803][T14723] Call Trace: [ 1796.154811][T14723] [ 1796.154823][T14723] dump_stack_lvl+0xe8/0x150 [ 1796.154862][T14723] should_fail_ex+0x410/0x560 [ 1796.154905][T14723] should_failslab+0xa8/0x100 [ 1796.154933][T14723] ? skb_clone+0x212/0x3a0 [ 1796.154969][T14723] kmem_cache_alloc_noprof+0xa1/0x600 [ 1796.155002][T14723] ? skb_clone+0x212/0x3a0 [ 1796.155038][T14723] skb_clone+0x212/0x3a0 [ 1796.155071][T14723] __netlink_deliver_tap+0x355/0x6e0 [ 1796.155106][T14723] ? netlink_deliver_tap+0x2e/0x1b0 [ 1796.155130][T14723] netlink_deliver_tap+0x19c/0x1b0 [ 1796.155152][T14723] netlink_sendskb+0x68/0x140 [ 1796.155186][T14723] nfnetlink_rcv+0x260c/0x28c0 [ 1796.155260][T14723] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1796.155346][T14723] ? skb_clone+0x246/0x3a0 [ 1796.155392][T14723] ? netlink_deliver_tap+0x2e/0x1b0 [ 1796.155414][T14723] ? netlink_deliver_tap+0x2e/0x1b0 [ 1796.155443][T14723] netlink_unicast+0x7bd/0x940 [ 1796.155495][T14723] netlink_sendmsg+0x813/0xb40 [ 1796.155530][T14723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1796.155567][T14723] ? apparmor_socket_sendmsg+0x98/0x360 [ 1796.155596][T14723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1796.155618][T14723] sock_sendmsg_nosec+0x14e/0x190 [ 1796.155644][T14723] ____sys_sendmsg+0x54e/0x850 [ 1796.155680][T14723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1796.155720][T14723] ? import_iovec+0x73/0xa0 [ 1796.155753][T14723] ___sys_sendmsg+0x2a5/0x360 [ 1796.155780][T14723] ? __lock_acquire+0x747/0x2de0 [ 1796.155812][T14723] ? __pfx____sys_sendmsg+0x10/0x10 [ 1796.155885][T14723] ? __fget_files+0x2a/0x420 [ 1796.155914][T14723] ? __fget_files+0x3a2/0x420 [ 1796.155955][T14723] __x64_sys_sendmsg+0x1b1/0x290 [ 1796.155987][T14723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1796.156042][T14723] do_syscall_64+0x166/0x520 [ 1796.156074][T14723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.156097][T14723] ? clear_bhb_loop+0x70/0xc0 [ 1796.156125][T14723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.156146][T14723] RIP: 0033:0x7f9696b9e159 [ 1796.156168][T14723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1796.156187][T14723] RSP: 002b:00007f9697afc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1796.156211][T14723] RAX: ffffffffffffffda RBX: 00007f9696e25fa0 RCX: 00007f9696b9e159 [ 1796.156226][T14723] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1796.156240][T14723] RBP: 00007f9697afc090 R08: 0000000000000000 R09: 0000000000000000 [ 1796.156254][T14723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1796.156266][T14723] R13: 00007f9696e26038 R14: 00007f9696e25fa0 R15: 00007ffe32d8b768 [ 1796.156303][T14723] [ 1796.232192][T17025] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1796.304734][T14720] bridge0: port 3(veth0) entered blocking state [ 1796.304853][T14720] bridge0: port 3(veth0) entered disabled state [ 1796.305044][T14720] veth0: entered allmulticast mode [ 1796.315783][T14720] veth0: entered promiscuous mode [ 1796.316455][T14720] bridge0: port 3(veth0) entered blocking state [ 1796.316601][T14720] bridge0: port 3(veth0) entered forwarding state [ 1796.807797][T14739] syzkaller0: entered promiscuous mode [ 1796.807823][T14739] syzkaller0: entered allmulticast mode [ 1796.955642][T14746] __nla_validate_parse: 7 callbacks suppressed [ 1796.955665][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12728'. [ 1796.961568][T14744] xt_policy: output policy not valid in PREROUTING and INPUT [ 1797.242818][T14757] xt_LOG: level 115 >= 8 [ 1797.285330][T14730] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12723'. [ 1797.434751][ T1930] block nbd1: Possible stuck request ffff888027200000: control (read@0,4096B). Runtime 60 seconds [ 1797.937511][T14771] FAULT_INJECTION: forcing a failure. [ 1797.937511][T14771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1797.937547][T14771] CPU: 0 UID: 0 PID: 14771 Comm: syz.0.12734 Not tainted syzkaller #0 PREEMPT(full) [ 1797.937571][T14771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1797.937584][T14771] Call Trace: [ 1797.937593][T14771] [ 1797.937603][T14771] dump_stack_lvl+0xe8/0x150 [ 1797.937640][T14771] should_fail_ex+0x410/0x560 [ 1797.937672][T14771] _copy_to_user+0x31/0xb0 [ 1797.937704][T14771] simple_read_from_buffer+0xe1/0x170 [ 1797.937741][T14771] proc_fail_nth_read+0x1bb/0x230 [ 1797.937787][T14771] ? common_file_perm+0x20e/0x2b0 [ 1797.937819][T14771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1797.937853][T14771] ? rw_verify_area+0x24a/0x4c0 [ 1797.937887][T14771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1797.937907][T14771] vfs_read+0x213/0xa80 [ 1797.937945][T14771] ? __pfx___mutex_lock+0x10/0x10 [ 1797.937978][T14771] ? __pfx_vfs_read+0x10/0x10 [ 1797.938011][T14771] ? __fget_files+0x2a/0x420 [ 1797.938046][T14771] ? __fget_files+0x3a2/0x420 [ 1797.938073][T14771] ? __fget_files+0x2a/0x420 [ 1797.938113][T14771] ksys_read+0x150/0x270 [ 1797.938147][T14771] ? __pfx_ksys_read+0x10/0x10 [ 1797.938193][T14771] do_syscall_64+0x166/0x520 [ 1797.938222][T14771] ? trace_irq_disable+0x3b/0x140 [ 1797.938245][T14771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.938267][T14771] ? clear_bhb_loop+0x70/0xc0 [ 1797.938293][T14771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.938314][T14771] RIP: 0033:0x7f006ed5e98e [ 1797.938335][T14771] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1797.938353][T14771] RSP: 002b:00007f006fc18fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1797.938378][T14771] RAX: ffffffffffffffda RBX: 00007f006fc196c0 RCX: 00007f006ed5e98e [ 1797.938394][T14771] RDX: 000000000000000f RSI: 00007f006fc190a0 RDI: 0000000000000004 [ 1797.938408][T14771] RBP: 00007f006fc19090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.938426][T14771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.938440][T14771] R13: 00007f006f026038 R14: 00007f006f025fa0 R15: 00007fffc405b478 [ 1797.938479][T14771] [ 1798.499811][T14790] ip_tables: iptables: counters copy to user failed while replacing table [ 1798.610869][T14796] FAULT_INJECTION: forcing a failure. [ 1798.610869][T14796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1798.610910][T14796] CPU: 0 UID: 0 PID: 14796 Comm: syz.1.12743 Not tainted syzkaller #0 PREEMPT(full) [ 1798.610933][T14796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1798.610945][T14796] Call Trace: [ 1798.610954][T14796] [ 1798.610963][T14796] dump_stack_lvl+0xe8/0x150 [ 1798.610998][T14796] should_fail_ex+0x410/0x560 [ 1798.611030][T14796] _copy_from_user+0x2d/0xb0 [ 1798.611059][T14796] ___sys_sendmsg+0x1c6/0x360 [ 1798.611086][T14796] ? __lock_acquire+0x747/0x2de0 [ 1798.611111][T14796] ? __pfx____sys_sendmsg+0x10/0x10 [ 1798.611143][T14796] ? kstrtouint+0x6e/0xe0 [ 1798.611193][T14796] ? __fget_files+0x2a/0x420 [ 1798.611219][T14796] ? __fget_files+0x3a2/0x420 [ 1798.611258][T14796] __sys_sendmmsg+0x273/0x4d0 [ 1798.611293][T14796] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1798.611341][T14796] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1798.611386][T14796] ? ksys_write+0x242/0x270 [ 1798.611419][T14796] ? __pfx_ksys_write+0x10/0x10 [ 1798.611455][T14796] __x64_sys_sendmmsg+0xa0/0xc0 [ 1798.611487][T14796] do_syscall_64+0x166/0x520 [ 1798.611516][T14796] ? trace_irq_disable+0x3b/0x140 [ 1798.611537][T14796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.611557][T14796] ? clear_bhb_loop+0x70/0xc0 [ 1798.611581][T14796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.611602][T14796] RIP: 0033:0x7f1b30b9e159 [ 1798.611665][T14796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1798.611683][T14796] RSP: 002b:00007f1b3199f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1798.611717][T14796] RAX: ffffffffffffffda RBX: 00007f1b30e25fa0 RCX: 00007f1b30b9e159 [ 1798.611733][T14796] RDX: 0000000000000003 RSI: 0000200000007240 RDI: 0000000000000003 [ 1798.611747][T14796] RBP: 00007f1b3199f090 R08: 0000000000000000 R09: 0000000000000000 [ 1798.611760][T14796] R10: 000000000001c000 R11: 0000000000000246 R12: 0000000000000001 [ 1798.611774][T14796] R13: 00007f1b30e26038 R14: 00007f1b30e25fa0 R15: 00007ffd25831888 [ 1798.611807][T14796] [ 1798.653778][T14794] syzkaller0: entered promiscuous mode [ 1798.653802][T14794] syzkaller0: entered allmulticast mode [ 1798.941664][T14806] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12746'. [ 1799.350072][T14823] gretap1: entered allmulticast mode [ 1799.396362][T14830] netlink: 'syz.4.12753': attribute type 1 has an invalid length. [ 1799.442072][ T4987] udevd[4987]: worker [13432] /devices/virtual/block/nbd1 is taking a long time [ 1799.546227][T14837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12755'. [ 1799.546257][T14837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12755'. [ 1799.546275][T14837] netlink: 'syz.3.12755': attribute type 4 has an invalid length. [ 1799.587562][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12755'. [ 1800.504550][T14865] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12762'. [ 1800.607727][T14876] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12767'. [ 1800.937464][T14887] netlink: 'syz.2.12770': attribute type 12 has an invalid length. [ 1800.968333][T14887] netlink: 34 bytes leftover after parsing attributes in process `syz.2.12770'. [ 1801.174452][T14900] netlink: 'syz.3.12773': attribute type 1 has an invalid length. [ 1801.203638][T14902] sctp: [Deprecated]: syz.4.12772 (pid 14902) Use of int in max_burst socket option. [ 1801.203638][T14902] Use struct sctp_assoc_value instead [ 1801.284969][T14900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1801.360377][T14906] netlink: 'syz.3.12773': attribute type 10 has an invalid length. [ 1801.360422][T14906] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12773'. [ 1801.401363][T14903] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 1801.401882][T14900] dummy0: left promiscuous mode [ 1801.433437][T14900] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 1801.433722][T14906] dummy0: entered promiscuous mode [ 1801.435749][T17917] bond2: (slave dummy0): link status up again after 0 ms [ 1801.440138][T14906] bond2: (slave dummy0): Releasing backup interface [ 1801.586749][T14915] syzkaller0: create flow: hash 2222062020 index 2 [ 1801.629214][T14916] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input38 [ 1801.907234][T17922] syzkaller0: tun_net_xmit 76 [ 1801.907500][T17922] syzkaller0: tun_net_xmit 48 [ 1801.941678][ T5850] syzkaller0: tun_net_xmit 76 [ 1801.949255][T14907] syzkaller0: delete flow: hash 2222062020 index 2 [ 1802.388121][T14952] __nla_validate_parse: 4 callbacks suppressed [ 1802.388143][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12785'. [ 1807.749225][T14949] kthread_run failed with err -4 [ 1807.796189][T14952] ipvlan4: entered allmulticast mode [ 1807.796220][T14952] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1807.799671][T14952] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1807.839673][T14956] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1807.848557][T14950] syzkaller0: entered promiscuous mode [ 1807.848589][T14950] syzkaller0: entered allmulticast mode [ 1808.099313][T14972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12788'. [ 1808.099345][T14972] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12788'. [ 1808.102657][T14974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12790'. [ 1808.102692][T14974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12790'. [ 1808.289275][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12792'. [ 1808.320406][T14980] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input39 [ 1808.427025][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12793'. [ 1808.427072][T14988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1808.660553][T14996] netlink: 168 bytes leftover after parsing attributes in process `syz.2.12799'. [ 1808.768053][T14999] netlink: 566 bytes leftover after parsing attributes in process `syz.3.12800'. [ 1808.777368][T14999] netlink: 'syz.3.12800': attribute type 6 has an invalid length. [ 1808.876733][T15010] FAULT_INJECTION: forcing a failure. [ 1808.876733][T15010] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.876770][T15010] CPU: 0 UID: 0 PID: 15010 Comm: syz.1.12803 Not tainted syzkaller #0 PREEMPT(full) [ 1808.876794][T15010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1808.876811][T15010] Call Trace: [ 1808.876820][T15010] [ 1808.876830][T15010] dump_stack_lvl+0xe8/0x150 [ 1808.876865][T15010] should_fail_ex+0x410/0x560 [ 1808.876895][T15010] should_failslab+0xa8/0x100 [ 1808.876931][T15010] __kmalloc_cache_noprof+0xa3/0x600 [ 1808.876953][T15010] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1808.876972][T15010] ? sctp_add_bind_addr+0x8c/0x370 [ 1808.876993][T15010] ? sctp_add_bind_addr+0x8c/0x370 [ 1808.877022][T15010] sctp_add_bind_addr+0x8c/0x370 [ 1808.877048][T15010] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1808.877074][T15010] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1808.877096][T15010] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1808.877121][T15010] ? sctp_v6_is_any+0x64/0x80 [ 1808.877145][T15010] ? sctp_copy_one_addr+0x93/0x360 [ 1808.877171][T15010] sctp_bind_addr_copy+0xb3/0x3c0 [ 1808.877192][T15010] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1808.877224][T15010] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1808.877254][T15010] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1808.877287][T15010] ? __local_bh_enable_ip+0xd6/0x140 [ 1808.877311][T15010] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1808.877339][T15010] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1808.877366][T15010] sctp_sendmsg+0x159b/0x2d00 [ 1808.877409][T15010] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1808.877441][T15010] ? __lock_acquire+0x747/0x2de0 [ 1808.877479][T15010] ? aa_sock_msg_perm+0xf5/0x210 [ 1808.877503][T15010] ? sock_rps_record_flow+0x19/0x350 [ 1808.877532][T15010] ? inet_sendmsg+0x298/0x320 [ 1808.877558][T15010] ? __pfx_inet_sendmsg+0x10/0x10 [ 1808.877578][T15010] sock_sendmsg_nosec+0x10f/0x190 [ 1808.877604][T15010] ____sys_sendmsg+0x54e/0x850 [ 1808.877639][T15010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1808.877679][T15010] ? import_iovec+0x73/0xa0 [ 1808.877733][T15010] ___sys_sendmsg+0x2a5/0x360 [ 1808.877759][T15010] ? __lock_acquire+0x747/0x2de0 [ 1808.877785][T15010] ? __pfx____sys_sendmsg+0x10/0x10 [ 1808.877820][T15010] ? kstrtouint+0x6e/0xe0 [ 1808.877872][T15010] ? __fget_files+0x2a/0x420 [ 1808.877900][T15010] ? __fget_files+0x3a2/0x420 [ 1808.877948][T15010] __sys_sendmmsg+0x273/0x4d0 [ 1808.877983][T15010] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1808.878023][T15010] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1808.878071][T15010] ? ksys_write+0x242/0x270 [ 1808.878105][T15010] ? __pfx_ksys_write+0x10/0x10 [ 1808.878142][T15010] __x64_sys_sendmmsg+0xa0/0xc0 [ 1808.878172][T15010] do_syscall_64+0x166/0x520 [ 1808.878201][T15010] ? trace_irq_disable+0x3b/0x140 [ 1808.878222][T15010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.878245][T15010] ? clear_bhb_loop+0x70/0xc0 [ 1808.878271][T15010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.878292][T15010] RIP: 0033:0x7f1b30b9e159 [ 1808.878314][T15010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1808.878332][T15010] RSP: 002b:00007f1b3199f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1808.878355][T15010] RAX: ffffffffffffffda RBX: 00007f1b30e25fa0 RCX: 00007f1b30b9e159 [ 1808.878371][T15010] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1808.878385][T15010] RBP: 00007f1b3199f090 R08: 0000000000000000 R09: 0000000000000000 [ 1808.878398][T15010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1808.878412][T15010] R13: 00007f1b30e26038 R14: 00007f1b30e25fa0 R15: 00007ffd25831888 [ 1808.878449][T15010] [ 1808.928901][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12801'. [ 1808.928926][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12801'. [ 1809.389974][T15022] netlink: 'syz.3.12808': attribute type 1 has an invalid length. [ 1809.504627][T15025] netlink: 'syz.3.12808': attribute type 10 has an invalid length. [ 1809.545075][T15027] netlink: 'syz.0.12809': attribute type 1 has an invalid length. [ 1809.669185][T15029] netlink: 'syz.0.12809': attribute type 10 has an invalid length. [ 1809.788569][T15005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1810.014239][T15016] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1810.137578][T15022] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1810.228327][T15024] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 1810.362056][T15027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1810.402181][T15064] x_tables: duplicate underflow at hook 2 [ 1810.485554][T15028] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1810.504270][T15029] dummy0: entered promiscuous mode [ 1810.588990][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.594789][T17925] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.601441][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.602277][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.606700][T15071] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1810.606741][T15071] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1810.606779][T15071] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1810.607961][T17925] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.608012][T17925] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.608056][T17925] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.708279][T15061] netlink: 'syz.2.12814': attribute type 2 has an invalid length. [ 1810.894144][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.897274][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.899831][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.904252][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.906360][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.908869][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.911238][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.913512][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.915749][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.918177][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.920466][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.922836][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.925271][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.927229][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.929408][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.956670][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1810.968827][T15071] dummy0 speed is unknown, defaulting to 1000 [ 1811.214387][T15083] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 1811.215241][T15083] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 1811.215262][T15083] syzkaller1: ignored: set checksum enabled [ 1811.284079][T15091] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input40 [ 1811.485347][T15098] netlink: 'syz.0.12825': attribute type 1 has an invalid length. [ 1811.551321][T15098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1811.709420][T15100] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 1811.923019][T15111] bond4 (unregistering): Released all slaves [ 1812.303421][T15133] syzkaller0: entered promiscuous mode [ 1812.303448][T15133] syzkaller0: entered allmulticast mode [ 1813.268072][T15150] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1813.316623][T15153] __nla_validate_parse: 7 callbacks suppressed [ 1813.316640][T15153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12841'. [ 1813.317492][T15153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12841'. [ 1814.192255][T15161] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12842'. [ 1814.871259][ T8988] Bluetooth: hci1: command 0x0406 tx timeout [ 1827.515326][ T1930] block nbd1: Possible stuck request ffff888027200000: control (read@0,4096B). Runtime 90 seconds [ 1827.599862][ T8988] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1827.618043][ T8988] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1827.629179][ T8988] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1827.638400][ T8988] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1827.642318][ T8988] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1827.703526][T15169] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1827.726614][T15169] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1827.727810][T15169] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1827.728874][T15169] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1827.745640][T15169] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1828.345821][T15164] wg2 speed is unknown, defaulting to 1000 [ 1828.348793][T15164] dummy0 speed is unknown, defaulting to 1000 [ 1828.594032][T15166] wg2 speed is unknown, defaulting to 1000 [ 1828.596015][T15166] dummy0 speed is unknown, defaulting to 1000 [ 1828.748797][T15164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.748980][T15164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1828.749133][T15164] bridge_slave_0: entered allmulticast mode [ 1828.750706][T15164] bridge_slave_0: entered promiscuous mode [ 1828.764156][T15164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.764263][T15164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1828.764412][T15164] bridge_slave_1: entered allmulticast mode [ 1828.766384][T15164] bridge_slave_1: entered promiscuous mode [ 1828.835057][T15164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1828.848369][T15164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1828.916254][T15164] team0: Port device team_slave_0 added [ 1828.933453][T15164] team0: Port device team_slave_1 added [ 1829.061337][T15164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1829.061357][T15164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1829.061384][T15164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1829.069745][T15164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1829.069764][T15164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1829.069793][T15164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1829.278475][T15164] hsr_slave_0: entered promiscuous mode [ 1829.280188][T15164] hsr_slave_1: entered promiscuous mode [ 1829.320131][ T9260] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1829.346793][T15167] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1829.353353][T15167] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1829.355794][T15167] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1829.356455][T15167] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1829.378843][T17025] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1829.403857][T15167] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1829.406718][T15167] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1829.407726][T15167] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1829.408405][T15167] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1829.682902][T15167] Bluetooth: hci3: command tx timeout [ 1829.773283][ T9260] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1829.775285][ T9260] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1829.792446][ T9260] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1829.810116][ T9260] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1829.811504][ T9260] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1829.818690][T15166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1829.831883][T15167] Bluetooth: hci6: command tx timeout [ 1829.879989][T15166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.885757][T15166] bridge_slave_0: entered allmulticast mode [ 1829.891955][T15166] bridge_slave_0: entered promiscuous mode [ 1829.930623][T15166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.930809][T15166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.931354][T15166] bridge_slave_1: entered allmulticast mode [ 1829.942842][T15166] bridge_slave_1: entered promiscuous mode [ 1830.067994][T15166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1830.165143][T15166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1830.313263][T15166] team0: Port device team_slave_0 added [ 1830.317808][T15166] team0: Port device team_slave_1 added [ 1830.458294][T15166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1830.458314][T15166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1830.458340][T15166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1830.460599][T15166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1830.460616][T15166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1830.460643][T15166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1830.753075][T15166] hsr_slave_0: entered promiscuous mode [ 1830.754087][T15166] hsr_slave_1: entered promiscuous mode [ 1830.754577][T15166] debugfs: 'hsr0' already exists in 'hsr' [ 1830.754598][T15166] Cannot create hsr debugfs directory [ 1831.066531][T15200] wg2 speed is unknown, defaulting to 1000 [ 1831.084713][T15200] dummy0 speed is unknown, defaulting to 1000 [ 1831.346848][T15199] wg2 speed is unknown, defaulting to 1000 [ 1831.386850][T15199] dummy0 speed is unknown, defaulting to 1000 [ 1831.432604][T15167] Bluetooth: hci7: command tx timeout [ 1831.514869][T15167] Bluetooth: hci8: command tx timeout [ 1831.738361][T15212] wg2 speed is unknown, defaulting to 1000 [ 1831.740791][T15212] dummy0 speed is unknown, defaulting to 1000 [ 1831.752059][T15167] Bluetooth: hci3: command tx timeout [ 1831.915052][ T9260] Bluetooth: hci6: command tx timeout [ 1831.915205][T15167] Bluetooth: hci9: command tx timeout [ 1831.970352][T15200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1831.970531][T15200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1831.971267][T15200] bridge_slave_0: entered allmulticast mode [ 1831.973334][T15200] bridge_slave_0: entered promiscuous mode [ 1832.007280][T15200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.007423][T15200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.007547][T15200] bridge_slave_1: entered allmulticast mode [ 1832.008722][T15200] bridge_slave_1: entered promiscuous mode [ 1832.094773][T15200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1832.095059][T15199] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.095263][T15199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1832.095424][T15199] bridge_slave_0: entered allmulticast mode [ 1832.097281][T15199] bridge_slave_0: entered promiscuous mode [ 1832.146223][T15200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1832.146486][T15199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.146627][T15199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.146722][T15199] bridge_slave_1: entered allmulticast mode [ 1832.148004][T15199] bridge_slave_1: entered promiscuous mode [ 1832.224879][T15199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1832.248425][T15200] team0: Port device team_slave_0 added [ 1832.256800][T15200] team0: Port device team_slave_1 added [ 1832.262144][T15199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1832.331965][T15200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1832.331987][T15200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1832.332013][T15200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1832.334769][T15199] team0: Port device team_slave_0 added [ 1832.336167][T15200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1832.336180][T15200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1832.336198][T15200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1832.347713][T15199] team0: Port device team_slave_1 added [ 1832.419575][T15199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1832.419594][T15199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1832.419626][T15199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1832.439708][T15199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1832.439727][T15199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1832.439753][T15199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1832.537407][T15200] hsr_slave_0: entered promiscuous mode [ 1832.543051][T15200] hsr_slave_1: entered promiscuous mode [ 1832.545815][T15200] debugfs: 'hsr0' already exists in 'hsr' [ 1832.545843][T15200] Cannot create hsr debugfs directory [ 1832.632067][T15199] hsr_slave_0: entered promiscuous mode [ 1832.633388][T15199] hsr_slave_1: entered promiscuous mode [ 1832.634531][T15199] debugfs: 'hsr0' already exists in 'hsr' [ 1832.634556][T15199] Cannot create hsr debugfs directory [ 1832.823181][T15212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.823362][T15212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1832.823631][T15212] bridge_slave_0: entered allmulticast mode [ 1832.824827][T15212] bridge_slave_0: entered promiscuous mode [ 1832.866823][T15212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.867015][T15212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.867260][T15212] bridge_slave_1: entered allmulticast mode [ 1832.868998][T15212] bridge_slave_1: entered promiscuous mode [ 1832.970661][T15212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1832.994240][T15212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1833.074323][T15212] team0: Port device team_slave_0 added [ 1833.078334][T15212] team0: Port device team_slave_1 added [ 1833.129149][T15212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1833.129168][T15212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1833.129192][T15212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1833.133108][T15212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1833.133129][T15212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1833.133156][T15212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1833.234986][T15212] hsr_slave_0: entered promiscuous mode [ 1833.235788][T15212] hsr_slave_1: entered promiscuous mode [ 1833.236266][T15212] debugfs: 'hsr0' already exists in 'hsr' [ 1833.236287][T15212] Cannot create hsr debugfs directory [ 1833.512051][T15167] Bluetooth: hci7: command tx timeout [ 1833.593010][T15167] Bluetooth: hci8: command tx timeout [ 1833.831428][T15167] Bluetooth: hci3: command tx timeout [ 1833.991595][ T9260] Bluetooth: hci6: command tx timeout [ 1833.992343][T15167] Bluetooth: hci9: command tx timeout [ 1835.592200][T15167] Bluetooth: hci7: command tx timeout [ 1835.671306][T15167] Bluetooth: hci8: command tx timeout [ 1835.911440][T15167] Bluetooth: hci3: command tx timeout [ 1836.071629][ T9260] Bluetooth: hci6: command tx timeout [ 1836.071693][T15167] Bluetooth: hci9: command tx timeout [ 1837.671998][T15167] Bluetooth: hci7: command tx timeout [ 1837.754030][T15167] Bluetooth: hci8: command tx timeout [ 1838.153603][T15167] Bluetooth: hci9: command tx timeout [ 1857.606323][ T1930] block nbd1: Possible stuck request ffff888027200000: control (read@0,4096B). Runtime 120 seconds [ 1887.669928][ T9260] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1887.680544][ T9260] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1887.687389][ T1930] block nbd1: Possible stuck request ffff888027200000: control (read@0,4096B). Runtime 150 seconds [ 1887.688482][ T9260] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1887.705187][ T9260] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1887.705872][ T9260] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1887.766100][T15167] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1887.778993][T15167] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1887.787025][T15167] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1887.798896][T15167] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1887.799715][T15167] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1888.396417][T15261] wg2 speed is unknown, defaulting to 1000 [ 1888.411443][T15261] dummy0 speed is unknown, defaulting to 1000 [ 1888.671757][T15263] wg2 speed is unknown, defaulting to 1000 [ 1888.673865][T15263] dummy0 speed is unknown, defaulting to 1000 [ 1888.828411][T15261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1888.828623][T15261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.828779][T15261] bridge_slave_0: entered allmulticast mode [ 1888.830617][T15261] bridge_slave_0: entered promiscuous mode [ 1888.865036][T15261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1888.865152][T15261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1888.865264][T15261] bridge_slave_1: entered allmulticast mode [ 1888.867169][T15261] bridge_slave_1: entered promiscuous mode [ 1888.925217][T15261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1888.928854][T15261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1889.003842][T15261] team0: Port device team_slave_0 added [ 1889.007685][T15261] team0: Port device team_slave_1 added [ 1889.086229][T15261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1889.086250][T15261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1889.086289][T15261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1889.093469][T15261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1889.093487][T15261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1889.093512][T15261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1889.229214][T15261] hsr_slave_0: entered promiscuous mode [ 1889.230520][T15261] hsr_slave_1: entered promiscuous mode [ 1889.245177][T15261] debugfs: 'hsr0' already exists in 'hsr' [ 1889.245204][T15261] Cannot create hsr debugfs directory [ 1889.289120][T15167] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1889.305123][T15167] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1889.307395][T15167] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1889.326171][T15167] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1889.331680][T15167] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1889.498427][T15263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1889.498604][T15263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1889.499080][T15263] bridge_slave_0: entered allmulticast mode [ 1889.531927][T15263] bridge_slave_0: entered promiscuous mode [ 1889.620337][T15263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1889.620463][T15263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1889.620618][T15263] bridge_slave_1: entered allmulticast mode [ 1889.628607][T15263] bridge_slave_1: entered promiscuous mode [ 1889.756402][T15167] Bluetooth: hci10: command tx timeout [ 1889.830423][ T9260] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1889.838725][T17025] Bluetooth: hci11: command tx timeout [ 1889.863127][T17025] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1889.865097][T17025] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1889.865409][T15263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1889.866334][T17025] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1889.869801][T17025] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1889.925701][T15263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1890.036198][T17025] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1890.057983][T17025] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1890.059937][T17025] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1890.086305][T17025] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1890.087458][T17025] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1890.198196][T15263] team0: Port device team_slave_0 added [ 1890.208776][T15263] team0: Port device team_slave_1 added [ 1890.343939][T15263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1890.343958][T15263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1890.343985][T15263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1890.348397][T15263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1890.348417][T15263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1890.348449][T15263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1890.595978][T15263] hsr_slave_0: entered promiscuous mode [ 1890.597395][T15263] hsr_slave_1: entered promiscuous mode [ 1890.600025][T15263] debugfs: 'hsr0' already exists in 'hsr' [ 1890.600051][T15263] Cannot create hsr debugfs directory [ 1891.145134][T15293] wg2 speed is unknown, defaulting to 1000 [ 1891.147431][T15293] dummy0 speed is unknown, defaulting to 1000 [ 1891.431327][T15167] Bluetooth: hci12: command tx timeout [ 1891.526671][T15309] wg2 speed is unknown, defaulting to 1000 [ 1891.541182][T15309] dummy0 speed is unknown, defaulting to 1000 [ 1891.816547][T15304] wg2 speed is unknown, defaulting to 1000 [ 1891.831272][T15167] Bluetooth: hci10: command tx timeout [ 1891.858832][T15304] dummy0 speed is unknown, defaulting to 1000 [ 1891.873679][T15293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.873821][T15293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.873941][T15293] bridge_slave_0: entered allmulticast mode [ 1891.875270][T15293] bridge_slave_0: entered promiscuous mode [ 1891.911253][T15167] Bluetooth: hci11: command tx timeout [ 1891.919006][T15293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.919097][T15293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.919363][T15293] bridge_slave_1: entered allmulticast mode [ 1891.921700][T15293] bridge_slave_1: entered promiscuous mode [ 1891.991379][T15167] Bluetooth: hci13: command tx timeout [ 1892.038084][T15293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1892.076915][T15293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1892.159835][T15167] Bluetooth: hci14: command tx timeout [ 1892.189344][T15293] team0: Port device team_slave_0 added [ 1892.194325][T15293] team0: Port device team_slave_1 added [ 1892.341341][T15293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1892.341363][T15293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1892.341392][T15293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1892.344047][T15293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1892.344067][T15293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1892.344096][T15293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1892.575140][T15293] hsr_slave_0: entered promiscuous mode [ 1892.576154][T15293] hsr_slave_1: entered promiscuous mode [ 1892.576727][T15293] debugfs: 'hsr0' already exists in 'hsr' [ 1892.576749][T15293] Cannot create hsr debugfs directory [ 1892.836109][T15309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1892.836226][T15309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.836316][T15309] bridge_slave_0: entered allmulticast mode [ 1892.837467][T15309] bridge_slave_0: entered promiscuous mode [ 1892.874184][T15304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1892.874254][T15304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.874369][T15304] bridge_slave_0: entered allmulticast mode [ 1892.875516][T15304] bridge_slave_0: entered promiscuous mode [ 1892.883425][T15304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.883534][T15304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.883702][T15304] bridge_slave_1: entered allmulticast mode [ 1892.885698][T15304] bridge_slave_1: entered promiscuous mode [ 1892.895055][T15309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.895225][T15309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.895392][T15309] bridge_slave_1: entered allmulticast mode [ 1892.897363][T15309] bridge_slave_1: entered promiscuous mode [ 1893.061521][T15304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1893.066035][T15309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1893.097433][T15304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1893.100475][T15309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1893.199998][T15304] team0: Port device team_slave_0 added [ 1893.219477][T15309] team0: Port device team_slave_0 added [ 1893.222453][T15304] team0: Port device team_slave_1 added [ 1893.256288][T15309] team0: Port device team_slave_1 added [ 1893.313190][T15304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1893.313211][T15304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1893.313238][T15304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1893.376112][T15309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1893.376130][T15309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1893.376155][T15309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1893.377395][T15304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1893.377412][T15304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1893.377439][T15304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1893.378934][T15309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1893.378949][T15309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1893.378974][T15309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1893.521999][T15167] Bluetooth: hci12: command tx timeout [ 1893.546023][T15304] hsr_slave_0: entered promiscuous mode [ 1893.546783][T15304] hsr_slave_1: entered promiscuous mode [ 1893.547271][T15304] debugfs: 'hsr0' already exists in 'hsr' [ 1893.547291][T15304] Cannot create hsr debugfs directory [ 1893.600010][T15309] hsr_slave_0: entered promiscuous mode [ 1893.600810][T15309] hsr_slave_1: entered promiscuous mode [ 1893.612418][T15309] debugfs: 'hsr0' already exists in 'hsr' [ 1893.612444][T15309] Cannot create hsr debugfs directory [ 1893.912434][T15167] Bluetooth: hci10: command tx timeout [ 1893.991387][T15167] Bluetooth: hci11: command tx timeout [ 1894.071650][T15167] Bluetooth: hci13: command tx timeout [ 1894.231523][T17025] Bluetooth: hci14: command tx timeout [ 1895.591255][T17025] Bluetooth: hci12: command tx timeout [ 1895.991584][T17025] Bluetooth: hci10: command tx timeout [ 1896.071583][T17025] Bluetooth: hci11: command tx timeout [ 1896.151405][T17025] Bluetooth: hci13: command tx timeout [ 1896.311574][T17025] Bluetooth: hci14: command tx timeout [ 1897.671228][T17025] Bluetooth: hci12: command tx timeout [ 1898.231630][T17025] Bluetooth: hci13: command tx timeout [ 1898.391804][T17025] Bluetooth: hci14: command tx timeout [ 1917.753855][ T1930] block nbd1: Possible stuck request ffff888027200000: control (read@0,4096B). Runtime 180 seconds [ 1918.633937][ T4987] udevd[4987]: worker [13432] /devices/virtual/block/nbd1 timeout; kill it [ 1918.634049][ T4987] udevd[4987]: seq 46251 '/devices/virtual/block/nbd1' killed [ 1937.761772][T15167] Bluetooth: hci5: command 0x0405 tx timeout [ 1947.810564][T17025] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1947.828893][T17025] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1947.838963][ T1930] block nbd1: Possible stuck request ffff888027200000: control (read@0,4096B). Runtime 210 seconds [ 1947.847698][ T9260] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1947.852228][ T9260] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1947.874089][ T9260] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1947.884417][ T9260] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1947.886146][ T9260] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1947.898868][ T9260] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1947.901293][ T9260] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1947.907991][T17025] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1948.569218][T15356] wg2 speed is unknown, defaulting to 1000 [ 1948.579418][T15356] dummy0 speed is unknown, defaulting to 1000 [ 1948.838536][T15358] wg2 speed is unknown, defaulting to 1000 [ 1948.840557][T15358] dummy0 speed is unknown, defaulting to 1000 [ 1949.068604][T15356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1949.069416][T15356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1949.069589][T15356] bridge_slave_0: entered allmulticast mode [ 1949.072672][T15356] bridge_slave_0: entered promiscuous mode [ 1949.088242][T15356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1949.088408][T15356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.088576][T15356] bridge_slave_1: entered allmulticast mode [ 1949.091493][T15356] bridge_slave_1: entered promiscuous mode [ 1949.201536][T15356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1949.217980][T15356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1949.257874][T15356] team0: Port device team_slave_0 added [ 1949.259964][T15356] team0: Port device team_slave_1 added [ 1949.328381][T15356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1949.328403][T15356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1949.328431][T15356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1949.333307][T15356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1949.333326][T15356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1949.333351][T15356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1949.456372][T15356] hsr_slave_0: entered promiscuous mode [ 1949.459457][T15356] hsr_slave_1: entered promiscuous mode [ 1949.463448][T15356] debugfs: 'hsr0' already exists in 'hsr' [ 1949.463474][T15356] Cannot create hsr debugfs directory [ 1949.538577][T17025] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1949.549122][T17025] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1949.567301][T17025] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1949.582432][T17025] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1949.583209][T17025] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1949.903012][T15358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1949.903138][T15358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1949.903315][T15358] bridge_slave_0: entered allmulticast mode [ 1949.905531][T15358] bridge_slave_0: entered promiscuous mode [ 1949.934200][T15358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1949.934332][T15358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.934486][T15358] bridge_slave_1: entered allmulticast mode [ 1949.937487][T15358] bridge_slave_1: entered promiscuous mode [ 1949.992085][T15167] Bluetooth: hci16: command tx timeout [ 1949.993095][T15167] Bluetooth: hci15: command tx timeout [ 1950.022688][T15167] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1950.052931][T15167] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1950.055202][T15167] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1950.057350][T15167] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1950.058110][T15167] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1950.258081][T17025] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1950.259701][T17025] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1950.292239][T17025] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1950.293718][T15358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1950.304830][T15358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1950.334570][T17025] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1950.339056][T17025] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1950.489801][T15358] team0: Port device team_slave_0 added [ 1950.515623][T15358] team0: Port device team_slave_1 added [ 1950.628176][T15358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1950.628197][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1950.628224][T15358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1950.637745][T15358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1950.637763][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1950.637789][T15358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1950.985691][T15358] hsr_slave_0: entered promiscuous mode [ 1950.986956][T15358] hsr_slave_1: entered promiscuous mode [ 1950.988201][T15358] debugfs: 'hsr0' already exists in 'hsr' [ 1950.988226][T15358] Cannot create hsr debugfs directory [ 1951.628667][T15388] wg2 speed is unknown, defaulting to 1000 [ 1951.656968][T15388] dummy0 speed is unknown, defaulting to 1000 [ 1951.672151][T15421] Bluetooth: hci17: command tx timeout [ 1951.981903][T15403] wg2 speed is unknown, defaulting to 1000 [ 1952.023541][T15403] dummy0 speed is unknown, defaulting to 1000 [ 1952.071908][T15421] Bluetooth: hci15: command tx timeout [ 1952.071950][T15421] Bluetooth: hci16: command tx timeout [ 1952.152839][T15420] Bluetooth: hci18: command tx timeout [ 1952.420635][T15398] wg2 speed is unknown, defaulting to 1000 [ 1952.472112][T15420] Bluetooth: hci19: command tx timeout [ 1952.498199][T15398] dummy0 speed is unknown, defaulting to 1000 [ 1952.580251][T15388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1952.580352][T15388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.580524][T15388] bridge_slave_0: entered allmulticast mode [ 1952.613322][T15388] bridge_slave_0: entered promiscuous mode [ 1952.672281][T15388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1952.672440][T15388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.672642][T15388] bridge_slave_1: entered allmulticast mode [ 1952.676126][T15388] bridge_slave_1: entered promiscuous mode [ 1952.886385][T15388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1952.935665][T15388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1953.017785][T15388] team0: Port device team_slave_0 added [ 1953.041822][T15388] team0: Port device team_slave_1 added [ 1953.131734][T15420] Bluetooth: hci9: command 0x0406 tx timeout [ 1953.131822][T15420] Bluetooth: hci3: command 0x0406 tx timeout [ 1953.131848][T15420] Bluetooth: hci7: command 0x0406 tx timeout [ 1953.131873][T15420] Bluetooth: hci6: command 0x0406 tx timeout [ 1953.131895][T15420] Bluetooth: hci8: command 0x0406 tx timeout [ 1953.176478][T15388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1953.176549][T15388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1953.176575][T15388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1953.178352][T15403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1953.179324][T15403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1953.179505][T15403] bridge_slave_0: entered allmulticast mode [ 1953.183849][T15403] bridge_slave_0: entered promiscuous mode [ 1953.196319][T15388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1953.196337][T15388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1953.196363][T15388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1953.197280][T15403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1953.197552][T15403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1953.197720][T15403] bridge_slave_1: entered allmulticast mode [ 1953.200418][T15403] bridge_slave_1: entered promiscuous mode [ 1953.464904][T15403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1953.498397][T15403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1953.527658][T15388] hsr_slave_0: entered promiscuous mode [ 1953.529114][T15388] hsr_slave_1: entered promiscuous mode [ 1953.530355][T15388] debugfs: 'hsr0' already exists in 'hsr' [ 1953.530381][T15388] Cannot create hsr debugfs directory [ 1953.562432][T15403] team0: Port device team_slave_0 added [ 1953.582857][T15403] team0: Port device team_slave_1 added [ 1953.656322][T15403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1953.656340][T15403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1953.656363][T15403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1953.676674][T15403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1953.676693][T15403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1953.676717][T15403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1953.757069][T15169] Bluetooth: hci17: command tx timeout [ 1953.847271][T15403] hsr_slave_0: entered promiscuous mode [ 1953.848124][T15403] hsr_slave_1: entered promiscuous mode [ 1953.848640][T15403] debugfs: 'hsr0' already exists in 'hsr' [ 1953.848662][T15403] Cannot create hsr debugfs directory [ 1953.917830][T15398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1953.917950][T15398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1953.918060][T15398] bridge_slave_0: entered allmulticast mode [ 1953.919325][T15398] bridge_slave_0: entered promiscuous mode [ 1953.964440][T15398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1953.964625][T15398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1953.965111][T15398] bridge_slave_1: entered allmulticast mode [ 1953.967233][T15398] bridge_slave_1: entered promiscuous mode [ 1954.047283][T15398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1954.064164][T15398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1954.149157][T15398] team0: Port device team_slave_0 added [ 1954.152015][T15169] Bluetooth: hci16: command tx timeout [ 1954.152051][T15169] Bluetooth: hci15: command tx timeout [ 1954.170120][T15398] team0: Port device team_slave_1 added [ 1954.231519][ T9260] Bluetooth: hci18: command tx timeout [ 1954.250384][T15398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1954.250406][T15398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1954.250432][T15398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1954.283573][T15398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1954.283595][T15398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1954.283621][T15398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1954.356037][T15398] hsr_slave_0: entered promiscuous mode [ 1954.356930][T15398] hsr_slave_1: entered promiscuous mode [ 1954.357427][T15398] debugfs: 'hsr0' already exists in 'hsr' [ 1954.357441][T15398] Cannot create hsr debugfs directory [ 1954.570124][T15169] Bluetooth: hci19: command tx timeout [ 1955.831884][T15169] Bluetooth: hci17: command tx timeout [ 1956.232237][T15169] Bluetooth: hci15: command tx timeout [ 1956.232275][T15169] Bluetooth: hci16: command tx timeout [ 1956.311614][ T9260] Bluetooth: hci18: command tx timeout [ 1956.631812][ T9260] Bluetooth: hci19: command tx timeout [ 1957.911294][ T9260] Bluetooth: hci17: command tx timeout [ 1958.391508][ T9260] Bluetooth: hci18: command tx timeout [ 1958.712521][ T9260] Bluetooth: hci19: command tx timeout [ 1971.512891][ T32] INFO: task syz.1.12836:15136 blocked for more than 143 seconds. ** replaying previous printk message ** [ 1971.512891][ T32] INFO: task syz.1.12836:15136 blocked for more than 143 seconds. [ 1971.512923][ T32] Not tainted syzkaller #0 [ 1971.512935][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1971.512945][ T32] task:syz.1.12836 state:D stack:25400 pid:15136 tgid:15135 ppid:11107 task_flags:0x480140 flags:0x00080002 [ 1971.513006][ T32] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1971.513015][ T32] [ 1971.513031][ T32] __schedule+0x17db/0x58f0 [ 1971.513074][ T32] ? __lock_acquire+0x747/0x2de0 [ 1971.513132][ T32] ? __pfx___schedule+0x10/0x10 [ 1971.513158][ T32] ? lock_acquire+0x115/0x350 [ 1971.513204][ T32] ? schedule+0x90/0x2b0 [ 1971.513237][ T32] schedule+0x164/0x2b0 [ 1971.513269][ T32] blk_mq_freeze_queue_wait+0x101/0x180 [ 1971.513374][ T32] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1971.513403][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1971.513446][ T32] queue_limits_commit_update_frozen+0x55/0xd0 [ 1971.513475][ T32] nbd_set_size+0x4c5/0x7d0 [ 1971.513537][ T32] ? __pfx_nbd_set_size+0x10/0x10 [ 1971.513584][ T32] ? nla_memcpy+0x5b/0xc0 [ 1971.513621][ T32] nbd_genl_reconfigure+0x7e1/0x1040 [ 1971.513656][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1971.513681][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 1971.513708][ T32] ? __nla_parse+0x40/0x60 [ 1971.513738][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1971.513779][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1971.513813][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1971.513851][ T32] ? __lock_acquire+0x747/0x2de0 [ 1971.513884][ T32] genl_rcv_msg+0x614/0x7a0 [ 1971.513917][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1971.513943][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1971.513981][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1971.514005][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1971.514279][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1971.514323][ T32] ? down_read+0x2be/0x330 [ 1971.514350][ T32] genl_rcv+0x28/0x40 [ 1971.514375][ T32] netlink_unicast+0x7bd/0x940 [ 1971.514421][ T32] netlink_sendmsg+0x813/0xb40 [ 1971.514454][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1971.514487][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1971.514516][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1971.514538][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1971.514567][ T32] ____sys_sendmsg+0x54e/0x850 [ 1971.514604][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1971.514640][ T32] ? import_iovec+0x73/0xa0 [ 1971.514675][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1971.514700][ T32] ? __lock_acquire+0x747/0x2de0 [ 1971.514727][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1971.514757][ T32] ? futex_wake+0x51b/0x5f0 [ 1971.514825][ T32] ? __fget_files+0x2a/0x420 [ 1971.514856][ T32] ? __fget_files+0x3a2/0x420 [ 1971.514898][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1971.514932][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1971.514991][ T32] do_syscall_64+0x166/0x520 [ 1971.515022][ T32] ? trace_irq_disable+0x3b/0x140 [ 1971.515043][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.515068][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1971.515093][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.515115][ T32] RIP: 0033:0x7f1b30b9e159 [ 1971.515138][ T32] RSP: 002b:00007f1b3199f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1971.515162][ T32] RAX: ffffffffffffffda RBX: 00007f1b30e25fa0 RCX: 00007f1b30b9e159 [ 1971.515177][ T32] RDX: 0000000004000080 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1971.515202][ T32] RBP: 00007f1b30c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1971.515217][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1971.515230][ T32] R13: 00007f1b30e26038 R14: 00007f1b30e25fa0 R15: 00007ffd25831888 [ 1971.515270][ T32] [ 1971.515282][ T32] INFO: task syz.3.12837:15140 blocked for more than 143 seconds. [ 1971.515300][ T32] Not tainted syzkaller #0 [ 1971.515311][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1971.515322][ T32] task:syz.3.12837 state:D stack:27336 pid:15140 tgid:15139 ppid:12685 task_flags:0x400140 flags:0x00080002 [ 1971.515383][ T32] Call Trace: [ 1971.515391][ T32] [ 1971.515405][ T32] __schedule+0x17db/0x58f0 [ 1971.515473][ T32] ? __pfx___schedule+0x10/0x10 [ 1971.515514][ T32] ? schedule+0x90/0x2b0 [ 1971.515546][ T32] schedule+0x164/0x2b0 [ 1971.515579][ T32] schedule_preempt_disabled+0x13/0x30 [ 1971.515607][ T32] __mutex_lock+0x7c1/0x1550 [ 1971.515645][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1971.515678][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 1971.515705][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1971.515736][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 1971.515825][ T32] ? radix_tree_lookup+0x240/0x290 [ 1971.515911][ T32] genl_rcv_msg+0x10b/0x7a0 [ 1971.515947][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1971.515997][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1971.516023][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1971.516054][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1971.516098][ T32] ? down_read+0x2be/0x330 [ 1971.516127][ T32] genl_rcv+0x28/0x40 [ 1971.516153][ T32] netlink_unicast+0x7bd/0x940 [ 1971.516209][ T32] netlink_sendmsg+0x813/0xb40 [ 1971.516245][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1971.516280][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1971.516309][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1971.516332][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1971.516360][ T32] __sys_sendto+0x408/0x5a0 [ 1971.516396][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1971.516462][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 1971.516503][ T32] __x64_sys_sendto+0xde/0x100 [ 1971.516535][ T32] do_syscall_64+0x166/0x520 [ 1971.516566][ T32] ? trace_irq_disable+0x3b/0x140 [ 1971.516588][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.516611][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1971.516639][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.516661][ T32] RIP: 0033:0x7f9696b5e98e [ 1971.516704][ T32] RSP: 002b:00007f9697afae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1971.516728][ T32] RAX: ffffffffffffffda RBX: 00007f9697afc6c0 RCX: 00007f9696b5e98e [ 1971.516745][ T32] RDX: 0000000000000020 RSI: 00007f9697afb000 RDI: 000000000000000f [ 1971.516760][ T32] RBP: 0000000000000000 R08: 00007f9697afaf04 R09: 000000000000000c [ 1971.516774][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 1971.516789][ T32] R13: 00007f9697afaf58 R14: 00007f9697afb000 R15: 0000000000000000 [ 1971.516828][ T32] [ 1971.516838][ T32] INFO: task syz.0.12839:15148 blocked for more than 143 seconds. [ 1971.516854][ T32] Not tainted syzkaller #0 [ 1971.516865][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1971.516875][ T32] task:syz.0.12839 state:D stack:27232 pid:15148 tgid:15147 ppid:11467 task_flags:0x400040 flags:0x00080002 [ 1971.516940][ T32] Call Trace: [ 1971.516948][ T32] [ 1971.516963][ T32] __schedule+0x17db/0x58f0 [ 1971.517025][ T32] ? __pfx___schedule+0x10/0x10 [ 1971.517066][ T32] ? schedule+0x90/0x2b0 [ 1971.517100][ T32] schedule+0x164/0x2b0 [ 1971.517133][ T32] schedule_preempt_disabled+0x13/0x30 [ 1971.517161][ T32] __mutex_lock+0x7c1/0x1550 [ 1971.517208][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1971.517243][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 1971.517272][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1971.517304][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 1971.517347][ T32] ? radix_tree_lookup+0x240/0x290 [ 1971.517380][ T32] genl_rcv_msg+0x10b/0x7a0 [ 1971.517416][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1971.517466][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1971.517491][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1971.517522][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1971.517565][ T32] ? down_read+0x2be/0x330 [ 1971.517593][ T32] genl_rcv+0x28/0x40 [ 1971.517618][ T32] netlink_unicast+0x7bd/0x940 [ 1971.517665][ T32] netlink_sendmsg+0x813/0xb40 [ 1971.517699][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1971.517731][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1971.517760][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1971.517782][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1971.517808][ T32] ____sys_sendmsg+0x54e/0x850 [ 1971.517846][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1971.517886][ T32] ? import_iovec+0x73/0xa0 [ 1971.517920][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1971.517948][ T32] ? __lock_acquire+0x747/0x2de0 [ 1971.517978][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1971.518013][ T32] ? futex_wait+0x2a2/0x390 [ 1971.518084][ T32] ? __fget_files+0x2a/0x420 [ 1971.518113][ T32] ? __fget_files+0x3a2/0x420 [ 1971.518156][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1971.518200][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1971.518257][ T32] do_syscall_64+0x166/0x520 [ 1971.518285][ T32] ? trace_irq_disable+0x3b/0x140 [ 1971.518307][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.518330][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1971.518357][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.518379][ T32] RIP: 0033:0x7f006ed9e159 [ 1971.518399][ T32] RSP: 002b:00007f006fc19028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1971.518421][ T32] RAX: ffffffffffffffda RBX: 00007f006f025fa0 RCX: 00007f006ed9e159 [ 1971.518437][ T32] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1971.518452][ T32] RBP: 00007f006ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 1971.518466][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1971.518481][ T32] R13: 00007f006f026038 R14: 00007f006f025fa0 R15: 00007fffc405b478 [ 1971.518520][ T32] [ 1971.518530][ T32] INFO: task syz.2.12841:15153 blocked for more than 143 seconds. [ 1971.518546][ T32] Not tainted syzkaller #0 [ 1971.518557][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1971.518567][ T32] task:syz.2.12841 state:D stack:26336 pid:15153 tgid:15152 ppid:8986 task_flags:0x400140 flags:0x00080002 [ 1971.518629][ T32] Call Trace: [ 1971.518637][ T32] [ 1971.518651][ T32] __schedule+0x17db/0x58f0 [ 1971.518716][ T32] ? __pfx___schedule+0x10/0x10 [ 1971.518757][ T32] ? schedule+0x90/0x2b0 [ 1971.518792][ T32] schedule+0x164/0x2b0 [ 1971.518824][ T32] schedule_preempt_disabled+0x13/0x30 [ 1971.518852][ T32] __mutex_lock+0x7c1/0x1550 [ 1971.518890][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1971.518926][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 1971.518956][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1971.518989][ T32] ? stack_trace_save+0xa9/0x100 [ 1971.519015][ T32] ? __lock_acquire+0x747/0x2de0 [ 1971.519043][ T32] ? radix_tree_lookup+0x240/0x290 [ 1971.519075][ T32] genl_rcv_msg+0x10b/0x7a0 [ 1971.519110][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1971.519159][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1971.519190][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1971.519220][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1971.519263][ T32] ? down_read+0x2be/0x330 [ 1971.519290][ T32] genl_rcv+0x28/0x40 [ 1971.519316][ T32] netlink_unicast+0x7bd/0x940 [ 1971.519361][ T32] netlink_sendmsg+0x813/0xb40 [ 1971.519396][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1971.519429][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1971.519457][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1971.519478][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1971.519505][ T32] __sys_sendto+0x408/0x5a0 [ 1971.519531][ T32] ? lapic_next_event+0x11/0x20 [ 1971.519559][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1971.519603][ T32] ? irqentry_exit+0x218/0x910 [ 1971.519660][ T32] __x64_sys_sendto+0xde/0x100 [ 1971.519691][ T32] do_syscall_64+0x166/0x520 [ 1971.519721][ T32] ? trace_irq_disable+0x3b/0x140 [ 1971.519742][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.519764][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1971.519791][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.519812][ T32] RIP: 0033:0x7efe58b5e98e [ 1971.519831][ T32] RSP: 002b:00007efe59a4de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1971.519854][ T32] RAX: ffffffffffffffda RBX: 00007efe59a4f6c0 RCX: 00007efe58b5e98e [ 1971.519870][ T32] RDX: 0000000000000020 RSI: 00007efe59a4e000 RDI: 0000000000000003 [ 1971.519884][ T32] RBP: 0000000000000000 R08: 00007efe59a4df04 R09: 000000000000000c [ 1971.519899][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1971.519912][ T32] R13: 00007efe59a4df58 R14: 00007efe59a4e000 R15: 0000000000000000 [ 1971.519948][ T32] [ 1971.519959][ T32] INFO: task syz.4.12842:15160 blocked for more than 143 seconds. [ 1971.519974][ T32] Not tainted syzkaller #0 [ 1971.519986][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1971.519996][ T32] task:syz.4.12842 state:D stack:25288 pid:15160 tgid:15159 ppid:10762 task_flags:0x400140 flags:0x00080002 [ 1971.520058][ T32] Call Trace: [ 1971.520066][ T32] [ 1971.520080][ T32] __schedule+0x17db/0x58f0 [ 1971.520145][ T32] ? __pfx___schedule+0x10/0x10 [ 1971.520192][ T32] ? schedule+0x90/0x2b0 [ 1971.520225][ T32] schedule+0x164/0x2b0 [ 1971.520256][ T32] schedule_preempt_disabled+0x13/0x30 [ 1971.520284][ T32] __mutex_lock+0x7c1/0x1550 [ 1971.520321][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1971.520356][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 1971.520385][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1971.520416][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 1971.520456][ T32] ? radix_tree_lookup+0x240/0x290 [ 1971.520486][ T32] genl_rcv_msg+0x10b/0x7a0 [ 1971.520521][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1971.520569][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1971.520592][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1971.520622][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1971.520665][ T32] ? down_read+0x2be/0x330 [ 1971.520690][ T32] genl_rcv+0x28/0x40 [ 1971.520715][ T32] netlink_unicast+0x7bd/0x940 [ 1971.520760][ T32] netlink_sendmsg+0x813/0xb40 [ 1971.520795][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1971.522648][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1971.522689][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1971.522709][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1971.522733][ T32] ____sys_sendmsg+0x54e/0x850 [ 1971.522765][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1971.522801][ T32] ? import_iovec+0x73/0xa0 [ 1971.522830][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1971.522853][ T32] ? __lock_acquire+0x747/0x2de0 [ 1971.522879][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1971.522908][ T32] ? futex_wait+0x2a2/0x390 [ 1971.522993][ T32] ? __fget_files+0x2a/0x420 [ 1971.523019][ T32] ? __fget_files+0x3a2/0x420 [ 1971.523055][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1971.523084][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1971.523133][ T32] do_syscall_64+0x166/0x520 [ 1971.523159][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.523178][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1971.523201][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.523220][ T32] RIP: 0033:0x7f65a799e159 [ 1971.523237][ T32] RSP: 002b:00007f65a8892028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1971.523257][ T32] RAX: ffffffffffffffda RBX: 00007f65a7c25fa0 RCX: 00007f65a799e159 [ 1971.523271][ T32] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1971.523284][ T32] RBP: 00007f65a7a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1971.523297][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1971.523308][ T32] R13: 00007f65a7c26038 R14: 00007f65a7c25fa0 R15: 00007fff8a50fa78 [ 1971.523343][ T32] [ 1971.523447][ T32] [ 1971.523447][ T32] Showing all locks held in the system: [ 1971.523517][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 1971.523586][ T32] #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1971.523712][ T32] #1: ffffffff9ad312d8 (&port_lock_key){-...}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 1971.523842][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1971.523855][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1971.523944][ T32] locks held by getty/5376: 2, on CPU#1: [ 1971.523958][ T32] #0: ffff888035bcc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1971.524064][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1971.524172][ T32] locks held by udevd/13432: 1, on CPU#1: [ 1971.524186][ T32] #0: ffff888027182350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1971.524260][ T32] locks held by syz.1.12836/15136: 6, on CPU#1: [ 1971.524274][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.524321][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.524368][ T32] #2: ffff888027168a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 1971.524415][ T32] #3: ffff888027163e78 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 1971.524460][ T32] #4: ffff888027163840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1971.524535][ T32] #5: ffff888027163878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1971.524589][ T32] locks held by syz.3.12837/15140: 2, on CPU#0: [ 1971.524603][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.524648][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.524704][ T32] locks held by syz.0.12839/15148: 2, on CPU#1: [ 1971.524717][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.524763][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.524810][ T32] locks held by syz.2.12841/15153: 2, on CPU#1: [ 1971.524823][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.524869][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.524916][ T32] locks held by syz.4.12842/15160: 2, on CPU#0: [ 1971.524929][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.525003][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.525050][ T32] locks held by syz-executor/15164: 2, on CPU#0: [ 1971.525063][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.525109][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.525156][ T32] locks held by syz-executor/15166: 2, on CPU#0: [ 1971.525169][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.525215][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.525264][ T32] locks held by syz-executor/15199: 2, on CPU#0: [ 1971.525277][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.525322][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.525370][ T32] locks held by syz-executor/15200: 2, on CPU#1: [ 1971.525383][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.525429][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.525477][ T32] locks held by syz-executor/15212: 2, on CPU#0: [ 1971.525490][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.525536][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.525585][ T32] locks held by syz-executor/15261: 2, on CPU#1: [ 1971.525598][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.525645][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.525699][ T32] locks held by syz-executor/15263: 2, on CPU#1: [ 1971.525713][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.525760][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.525808][ T32] locks held by syz-executor/15293: 2, on CPU#1: [ 1971.525821][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.525868][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.525917][ T32] locks held by syz-executor/15304: 2, on CPU#1: [ 1971.525930][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.525976][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.526024][ T32] locks held by syz-executor/15309: 2, on CPU#0: [ 1971.526037][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.526084][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.526133][ T32] locks held by syz-executor/15356: 2, on CPU#1: [ 1971.526146][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.526192][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.526239][ T32] locks held by syz-executor/15358: 2, on CPU#0: [ 1971.526253][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.526300][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.526349][ T32] locks held by syz-executor/15388: 2, on CPU#1: [ 1971.526362][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.526408][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.526456][ T32] locks held by syz-executor/15398: 2, on CPU#1: [ 1971.526470][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.526516][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.526563][ T32] locks held by syz-executor/15403: 2, on CPU#0: [ 1971.526576][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1971.526622][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1971.526673][ T32] [ 1971.526685][ T32] ============================================= [ 1971.526685][ T32] [ 1971.526694][ T32] NMI backtrace for cpu 0 [ 1971.526707][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1971.526727][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1971.526738][ T32] Call Trace: [ 1971.526747][ T32] [ 1971.526756][ T32] dump_stack_lvl+0xe8/0x150 [ 1971.526784][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1971.526807][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1971.526836][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1971.526862][ T32] sys_info+0x135/0x170 [ 1971.526881][ T32] watchdog+0xfd7/0x1030 [ 1971.526908][ T32] ? watchdog+0x1c7/0x1030 [ 1971.526934][ T32] kthread+0x38b/0x480 [ 1971.526954][ T32] ? __pfx_watchdog+0x10/0x10 [ 1971.526970][ T32] ? __pfx_kthread+0x10/0x10 [ 1971.526989][ T32] ret_from_fork+0x514/0xb70 [ 1971.527019][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1971.527045][ T32] ? __switch_to+0xc89/0x1420 [ 1971.527101][ T32] ? __pfx_kthread+0x10/0x10 [ 1971.527120][ T32] ret_from_fork_asm+0x1a/0x30 [ 1971.527161][ T32] [ 1971.527168][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1971.527196][ C1] NMI backtrace for cpu 1 [ 1971.527211][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 1971.527232][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1971.527243][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1971.527267][ C1] Code: e8 fe 82 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f 86 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da 7e 75 06 cc 44 89 f9 80 e1 07 [ 1971.527284][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 1971.527301][ C1] RAX: 1ffffffff35a6200 RBX: 00000000000003fd RCX: 0000000000000000 [ 1971.527315][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1971.527327][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1971.527339][ C1] R10: dffffc0000000000 R11: ffffffff85736ac0 R12: dffffc0000000000 [ 1971.527353][ C1] R13: 0000000000000000 R14: ffffffff9ad31300 R15: 0000000000000000 [ 1971.527366][ C1] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 1971.527382][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1971.527395][ C1] CR2: 00007f8c068834d9 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 1971.527414][ C1] Call Trace: [ 1971.527421][ C1] [ 1971.527430][ C1] wait_for_lsr+0x184/0x2f0 [ 1971.527453][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1971.527483][ C1] serial8250_console_write+0xaa1/0x1200 [ 1971.527509][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1971.527530][ C1] ? rcu_is_watching+0x16/0xb0 [ 1971.527558][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 1971.527586][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1971.527609][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1971.527637][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1971.527663][ C1] nbcon_kthread_func+0x679/0x880 [ 1971.527685][ C1] ? nbcon_kthread_func+0x163/0x880 [ 1971.527704][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1971.527727][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1971.527753][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1971.527779][ C1] kthread+0x38b/0x480 [ 1971.527796][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1971.527814][ C1] ? __pfx_kthread+0x10/0x10 [ 1971.527832][ C1] ret_from_fork+0x514/0xb70 [ 1971.527859][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1971.527885][ C1] ? __switch_to+0xc89/0x1420 [ 1971.527909][ C1] ? __pfx_kthread+0x10/0x10 [ 1971.527927][ C1] ret_from_fork_asm+0x1a/0x30 [ 1971.527961][ C1] [ 1971.528191][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1974.030316][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1974.039448][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1974.049622][ T32] Call Trace: [ 1974.053057][ T32] [ 1974.055997][ T32] vpanic+0x56d/0xa60 [ 1974.060010][ T32] ? __pfx_vpanic+0x10/0x10 [ 1974.064631][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 1974.070291][ T32] panic+0xc5/0xd0 [ 1974.074057][ T32] ? __pfx_panic+0x10/0x10 [ 1974.078508][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 1974.083572][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1974.089835][ T32] watchdog+0x1030/0x1030 [ 1974.094296][ T32] ? watchdog+0x1c7/0x1030 [ 1974.098843][ T32] kthread+0x38b/0x480 [ 1974.103101][ T32] ? __pfx_watchdog+0x10/0x10 [ 1974.107872][ T32] ? __pfx_kthread+0x10/0x10 [ 1974.112480][ T32] ret_from_fork+0x514/0xb70 [ 1974.117083][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1974.122434][ T32] ? __switch_to+0xc89/0x1420 [ 1974.127127][ T32] ? __pfx_kthread+0x10/0x10 [ 1974.131729][ T32] ret_from_fork_asm+0x1a/0x30 [ 1974.136703][ T32] [ 1974.140088][ T32] Kernel Offset: disabled [ 1974.144588][ T32] Rebooting in 86400 seconds..