last executing test programs: 18.83112653s ago: executing program 1 (id=1142): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xfff}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004000}, 0x800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 18.698334767s ago: executing program 1 (id=1144): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000180)=""/212, 0x1a, 0xd4, 0x1, 0x0, 0x0, @void, @value}, 0x28) accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'caif0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1200"], 0x20) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000040)="394eaea545ef8b69199f5d48707e1fbfdd125e0c9c26406c54c2a9928e749bacdb29d9b35b22777b9b3e323566358a4cb035b7d649177a88b721b6481daf3809b07e73dd19b690d9e25108bf7134ac8a4e46da90c6e133089a665323bbe11281e9735f0be2") ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @null, @bpq0, 0xfffb, 'syz0\x00', @bcast, 0xfffffdba, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 18.178995514s ago: executing program 1 (id=1149): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}]}, 0x3c}}, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x0, 'tunl0\x00', {}, 0x8}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'ip6gretap0\x00', @link_local}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff02000000000000000000000000000120"], 0xfdef) listen(r5, 0x7) 17.801981822s ago: executing program 1 (id=1155): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0xfe12482fe0801d67, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0x8f}}]}, 0x54}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000008c0)=0x11, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@default, @remote, @remote, @null, @bcast, @bcast, @null, @bcast]}, &(0x7f0000000000)=0x48, 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000880)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0xc68593a8f415c708, 0x1}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000400)="82d63691ece9d71b676151d1e6e196fa101789451d81723885bdac878a4b70dfff7f3e790ecd002e76fed082ad1ae1d40b5479282c1d76224ea829343e810a001e4cb5991f5401f769c448a937498e4c56f0ac99358bdd11414d", 0x5a}, {&(0x7f0000000480)="adced49aee576e9266b599cfb1957fd78499b5c1f3b45d1a94843ce5e53022c5b3dbff155a0263251ea283d541e8bac215c79cb7e401a9c47f8acf47ae9753e1a81f7c38d8f705700dde7834879a68d7118d26ea209ff6a8ffb0091368b3cefca5ca156d87217b0ae8bdb3a4681626c0e99227005c6742bb3178b0df089751b75b476f598a6a6eef5c4019cf02a6", 0x8e}, {&(0x7f0000000540)="d79a2ee363881614de1d70a1ac702b7408ee87e7ba500b5ee7c31fb134fe2ee24b9382c8e0b149133fb9", 0x2a}, {&(0x7f0000000580)="4be86e817afaa91dee2fd1fc43e4b6d8d7a95ed327f4f4244fc9f7947ef642f8771abcabf0aa0fd53a028fc28025f25b4ed2b0d0699f5d975760641e328b1b0c0b838325c645fa811501ddea7d03c91367c1b2e633edf90728d6266adc1d9b25dcb74b45d95b7517fa9c5a624bf7eb7c2e1a649eba124a4e674a4aef31610f7c5c86f8062a81c27c4fa3f63e3a922ccce6778f9d3d5b8fc4829e353bb389c2823d451a06fbd77262f5ab4149ca6dd62b8776ffcef7b333f28e7390bdd7a871f7725796656c0198d6", 0xc8}, {&(0x7f0000000680)="a777537829434c0657f2495531e4261b17a30b02ce33a94266d99378a194092582cddd29baf6ff1f3bef6a20d39e5789ce167242290e47e353a585567f94b60088148bd24b88295af19fba47d64cab31f0df94d7bc4019edd1f2e4d67ab764f5982d77feeb1c", 0x66}], 0x5, &(0x7f0000000780)="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", 0xfa, 0x1}, 0x8000) (async) recvfrom(r3, &(0x7f0000000300)=""/174, 0xae, 0x2, &(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80) 17.715414528s ago: executing program 3 (id=1156): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c0001000000000000000000020000800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0xc8, 0x8, 0x160, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x118, 0x160, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@dst={{0x48, 'dst\x00', 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @private2, [0xff000000, 0xffffff80, 0xff000000, 0xffffffff], [0xff000000, 0xff000000, 0xff, 0xff000000], 'gretap0\x00', 'veth0_vlan\x00', {0x7f}, {0xff}, 0x6c, 0x6d, 0x1, 0x8}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'batadv_slave_1\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8, 0x101, 0x5, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 17.659043013s ago: executing program 2 (id=1157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="a0000000210001002dbd7000fedbdf25fe880000000000000000000000000101e00000020010000000000000000000004e248001000700010a0080a03b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e000100000050001100ff010000000000000000000000000001fe8000000000000000000000000000bbac1414bb000000000000000000000000fc010000000000000000000000000001330000000635000002000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) (async) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8004800}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a0002000000836b00000000ac"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvfrom$ax25(r2, &(0x7f0000000200)=""/234, 0xea, 0x100, &(0x7f0000000300)={{0x3, @default, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x68}}, 0x0) 17.59846122s ago: executing program 1 (id=1159): socket$inet6(0xa, 0x80002, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) sendto$inet6(r0, 0x0, 0xfffffffffffffe5d, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r0, 0x0, 0xfffffffffffffe5d, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000480)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) (async) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 17.382958359s ago: executing program 3 (id=1161): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="c486070000000000280012800b00010069703667726500001800028005000800db00000005001600020000000400120008000a00", @ANYRES32=r1, @ANYBLOB="c483e753b2ff090819d402cbb8f17b01de3d77e5876c63abb3e625428cef2ea6249696"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="c486070000000000280012800b00010069703667726500001800028005000800db00000005001600020000000400120008000a00", @ANYRES32=r1, @ANYBLOB="c483e753b2ff090819d402cbb8f17b01de3d77e5876c63abb3e625428cef2ea6249696"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) 17.223569271s ago: executing program 3 (id=1162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008b000000bf090000000000005509010000000000950000000000000085000000c9000000bf91000000000000b70205000000000085000000c5000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@ipv6_newrule={0x30, 0x20, 0xa05, 0x70bd26, 0x0, {0xa, 0x0, 0x10, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'wlan1\x00'}]}, 0x30}}, 0x800) 17.218768807s ago: executing program 2 (id=1163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x8991, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)=@newtfilter={0x41c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xffffffffffffffd9, 0x2, [@TCA_U32_SEL={0x3e4, 0x5, {0x5, 0x18, 0x0, 0x4f, 0x3, 0xff, 0x1000, 0x7, [{0x4b9d9d2c, 0x2, 0x1b, 0x7}, {0x101, 0xc, 0xc, 0x10}, {0x6, 0x8001, 0x6, 0xf8}, {0xb, 0x100, 0x6, 0x9}, {0x1, 0x5, 0x2a9, 0x1ff}, {0x1, 0x0, 0x7, 0x2}, {0x1, 0x4bf1e42a, 0x5, 0x5}, {0x6, 0x101, 0x2, 0x8}, {0x1, 0x3, 0x5, 0x9}, {0x4, 0xc2, 0x3, 0x5}, {0xb, 0x2, 0x3, 0x4}, {0x200, 0x1, 0x2, 0x6}, {0x3, 0x9, 0x76, 0xffff}, {0xf, 0x9, 0xfffffff9, 0x3}, {0xfffffff7, 0x40e, 0x8, 0x2}, {0x80000000, 0x0, 0x7f42, 0x8}, {0x2fe, 0x400000, 0xfff, 0x3ff}, {0x3, 0x8000, 0x2, 0x6}, {0x68, 0x1000, 0xffffff00, 0x9}, {0x6, 0x16, 0xee, 0x8}, {0x0, 0x200, 0x4, 0x3}, {0x2f0f3742, 0x9, 0x5, 0xaae}, {0x8, 0x6, 0x9, 0xffff}, {0x401, 0x5, 0x2, 0x9}, {0x5, 0x3, 0x800, 0x3}, {0xfffffff3, 0x7bf0, 0x0, 0x3}, {0x2, 0xf, 0x5, 0x1}, {0x400, 0xfffffffb, 0x1, 0x3}, {0xfb15, 0x6, 0x8001}, {0x5, 0xfffff150, 0x10000, 0x6}, {0x9, 0x0, 0x4, 0x774c}, {0x5, 0x3, 0x7, 0x6}, {0xd17, 0x9, 0xffffff58, 0x8}, {0x0, 0x7, 0x7fffffff, 0x1}, {0x6c5c, 0x8, 0x7, 0x5}, {0x3, 0x9, 0x9, 0x7fff}, {0x401, 0x3, 0x3, 0x7f5b}, {0x9, 0x2e3c, 0x401, 0x240000}, {0x5, 0x5, 0x0, 0x1ff}, {0x0, 0x4, 0x40, 0x2}, {0x8, 0xffffffab, 0x7ff, 0x5}, {0x42e, 0x9, 0x1, 0x3}, {0x1, 0xc, 0x4, 0x6}, {0x80000001, 0x0, 0x6, 0x81}, {0x0, 0x2b1, 0x2, 0x6}, {0x4, 0x1, 0xffffffff, 0x4}, {0xffffffff, 0x7ff, 0xe1f, 0x2}, {0x7f, 0x2, 0x1c00, 0xfffffff4}, {0xa03, 0x5, 0x3, 0x10001}, {0x100, 0x2, 0x8, 0x7}, {0xee64, 0x1, 0x1, 0x5}, {0x10, 0x3, 0x8, 0x5}, {0x30000000, 0x4, 0x0, 0x7}, {0x52, 0x5, 0x7, 0x8}, {0xe1a, 0x7fff, 0x0, 0x7f}, {0x5ff, 0x1, 0xfffeffff, 0x1}, {0x4, 0x4, 0x4, 0x3}, {0x5, 0xd, 0x7, 0x4}, {0x4, 0x7, 0x0, 0x4}, {0x401, 0x6, 0x1, 0xf}, {0xfff, 0xfffff6b0, 0x3, 0x7}]}}, @TCA_U32_LINK={0x8, 0x3, 0xc}]}}]}, 0x41c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.109911441s ago: executing program 3 (id=1166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) r4 = socket$phonet(0x23, 0x2, 0x1) (async) r5 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r5, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6}}}], 0x20, 0x50}, 0x40880) (async) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x11a4, 0x1a, 0x1, 0x70bd25, 0x25dfdbfc, {0x1b}, [@nested={0xa8, 0x3d, 0x0, 0x1, [@generic="be50738359e6a65fd3cc3a1328582fc2955ffe02c4792329941014d75385ea80f58f1721ca5e078102af5b3a3afb", @generic="280b6d65c0fafd369120846393519c8fb4c8f5bb4942a94ebb812fe86919e0c833e5a6b9b973de844edf3e418a1251b15e03338addd8a6173eea6f1680d3706072b38ade43c9e631a42ec696db4133be11e9", @nested={0x4, 0xfa}, @typed={0x8, 0xd7, 0x0, 0x0, @uid=r3}, @typed={0x4, 0x4b}, @nested={0x4, 0x2b}, @typed={0x7, 0x118, 0x0, 0x0, @str='%-\x00'}, @typed={0x8, 0x113, 0x0, 0x0, @uid=0xee00}]}, @nested={0xcc, 0x139, 0x0, 0x1, [@generic="e997b8a495750a629aedfc69c97b2dc824290df5194233ea0d4f27d5781adbf4e0c1c514ef48766f2c2908c055492d114e5b437b03b399f7fb84f03d14151da53c8bfa9783ba084f792073c414be2ec480b3ba7ca884ba55bd7cbbfce67ea4b0776fb450cb60bcabdda99656981111cd1c4cc80e70af1df29926c35f2066", @generic="e87722422ace227e39450de670cb8787e0c72129f0e7aadc40bc6f69f23424884b057341aa788132942fe5f78585f9388449fe50baad8ff0e2483e520aa127c422bfebf381e6f5bb52dd"]}, @typed={0x14, 0xc9, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x111, 0x0, 0x0, @uid=r6}, @generic="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"]}, 0x11a4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 17.05784569s ago: executing program 2 (id=1167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, r1, 0x1, 0xfffffffe, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x2}]}, 0x3c}}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="1805000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000004010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 16.920011377s ago: executing program 3 (id=1169): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x3}, &(0x7f0000000040)=0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000100001002900"/20, @ANYRES32=0x0, @ANYBLOB="0c71040000000000140003006e657464657673696d30000000000000180016801400018010000600040000000004000000000100"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 16.908228005s ago: executing program 2 (id=1170): socket$inet_dccp(0x2, 0x6, 0x0) (async) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf3, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000080)={@local, @empty, @multicast1}, &(0x7f00000000c0)=0xc) 16.904993771s ago: executing program 4 (id=1171): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'full', 0x20, 0x6, 0x20, 0x40}, 0x2f) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x30, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @remote}}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r7, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) r9 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x80, 0xc00) getsockopt$bt_sco_SCO_CONNINFO(r9, 0x11, 0x2, &(0x7f0000000100)=""/172, &(0x7f00000001c0)=0xac) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5d}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 16.770608189s ago: executing program 0 (id=1172): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a09040000000500000000020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a3200000000"], 0x70}}, 0x0) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a09040000000500000000020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a3200000000"], 0x70}}, 0x0) (async) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x4004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 16.752577077s ago: executing program 2 (id=1173): clock_gettime(0xffefff1f, 0x0) clock_gettime(0x4, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r0, &(0x7f0000000380)="afada6a273", 0x0}, 0x20) syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000078000000002b019078ac1e0001ac1414aa04009078030000004700000000000000000100000a01010214aa000000007f00000000000000000000000000ac14140000000000ffffffff00000000861100000000000200097bd145794862b00000000000000000000000000040000000000000000000"], 0x0) 16.574830198s ago: executing program 4 (id=1174): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r7 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x50, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x10000000) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) write(r7, &(0x7f0000000640)="68a0b32fafd3b845da570480e0465913a86dde57923b10e6fd23bb9ae2d3029b", 0x20) sendto$inet6(r7, &(0x7f0000000100)="2e2e8c10ce421528ecf61d33e0b7d25fb89121c9946f2940c2b8e805519bc14989f04862c535e8a00948832cc433d8c41ffa1c7b1fc0a98d38d0318522ca44dcd4a7e0c16b7e160205faea27785baf72f59d1e751389cd394f77362b5c01a48f1ee3f1d417069b9a2127d6ce403593064c5b5645cc08d6", 0x77, 0x20000084, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x1}, 0x1c) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)={0x28, r3, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x28}}, 0x0) 16.53072943s ago: executing program 1 (id=1175): r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:pam_console_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:lastlog_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x420080}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x21, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffff765, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x9, 0x0, &(0x7f0000000440), 0x83d00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000500)=[{0x0, 0x1, 0x7, 0x3}, {0x4, 0x3, 0xf, 0x9}, {0x1, 0x2, 0x7, 0x9}, {0x0, 0x4, 0x0, 0x2}, {0x1, 0x4, 0xc, 0xc}, {0x1, 0x2, 0xe, 0x7}, {0x0, 0x3, 0xb, 0x4}], 0x10, 0xfff, @void, @value}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000640)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x88c}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x80005) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000980)) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f00000009c0)) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a00)='blkio.bfq.io_service_time\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa8, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_MARK_MASK={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x5, 0x6, 0x1000, 0xe691, 0x1, 0x32, 0xd5c5]}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x1, 0x8, 0x40, 0x4, 0x9, 0xf]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) writev(r2, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="46a054d025045298283cfc95915a3c9f855c665961a254de44110e14a151", 0x1e}, {&(0x7f0000000c00)="2b9599295ebfac1d27d65200006028294a93e917c735bc55a1a9535cce", 0x1d}, {&(0x7f0000000c40)="81a5ab105df4b0d32e9f361d4ab2742b702ae333186186faace4ca0e6d9705bab75d6bf8ddf8d04355e3902d944273dcdd45a100e30fa3365eaca15b469045a91848e16ad9ae9ce4f73c3c240da5d9ae781e947508c4b52a4da94d52f8ad0f07d239f1b98794f13c33a16eb940407eb6001e27e3776f", 0x76}], 0x3) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'syztnl2\x00', 0x0, 0x4, 0x7f, 0x1, 0x4, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x80, 0x700, 0x1c4, 0x1000}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x50, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x50}}, 0x8001) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000f40)=0x2, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000f80), r7) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001000), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x4c, r10, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0xc0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x80, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:wtmp_t:s0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000012c0), r1) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x34, r11, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x34}}, 0x24044880) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000013c0)={r3, 0x7ff, 0x8, 0x9}) setsockopt$MRT_PIM(r12, 0x0, 0xcf, &(0x7f0000001400), 0x4) socket$netlink(0x10, 0x3, 0xc) 16.509954318s ago: executing program 2 (id=1176): r0 = socket$rxrpc(0x21, 0x2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a010100"], 0x2c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) (async) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r4}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@security={'security\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @remote, 0x0, 0x0, 'wg2\x00', 'xfrm0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x3, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@set={{0x40}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@ipcomp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) close(r0) (async) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2], 0x48) socket(0x11, 0x800000003, 0x0) (async) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmmsg$sock(r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="04"], 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xdc, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r6, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xac, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x20], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x3, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x48, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbff3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd5}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x67}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x37}]}]}]}}]}, 0xdc}, 0x1, 0x7a00, 0x0, 0x20008040}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r9) (async) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x14, r10, 0xe701ac47a3d23ecd}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r9) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r11, 0x29, 0x42, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 16.414682905s ago: executing program 0 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x8991, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000507000000000007000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)=@newtfilter={0x41c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xffffffffffffffd9, 0x2, [@TCA_U32_SEL={0x3e4, 0x5, {0x5, 0x18, 0x0, 0x4f, 0x3, 0xff, 0x1000, 0x7, [{0x4b9d9d2c, 0x2, 0x1b, 0x7}, {0x101, 0xc, 0xc, 0x10}, {0x6, 0x8001, 0x6, 0xf8}, {0xb, 0x100, 0x6, 0x9}, {0x1, 0x5, 0x2a9, 0x1ff}, {0x1, 0x0, 0x7, 0x2}, {0x1, 0x4bf1e42a, 0x5, 0x5}, {0x6, 0x101, 0x2, 0x8}, {0x1, 0x3, 0x5, 0x9}, {0x4, 0xc2, 0x3, 0x5}, {0xb, 0x2, 0x3, 0x4}, {0x200, 0x1, 0x2, 0x6}, {0x3, 0x9, 0x76, 0xffff}, {0xf, 0x9, 0xfffffff9, 0x3}, {0xfffffff7, 0x40e, 0x8, 0x2}, {0x80000000, 0x0, 0x7f42, 0x8}, {0x2fe, 0x400000, 0xfff, 0x3ff}, {0x3, 0x8000, 0x2, 0x6}, {0x68, 0x1000, 0xffffff00, 0x9}, {0x6, 0x16, 0xee, 0x8}, {0x0, 0x200, 0x4, 0x3}, {0x2f0f3742, 0x9, 0x5, 0xaae}, {0x8, 0x6, 0x9, 0xffff}, {0x401, 0x5, 0x2, 0x9}, {0x5, 0x3, 0x800, 0x3}, {0xfffffff3, 0x7bf0, 0x0, 0x3}, {0x2, 0xf, 0x5, 0x1}, {0x400, 0xfffffffb, 0x1, 0x3}, {0xfb15, 0x6, 0x8001}, {0x5, 0xfffff150, 0x10000, 0x6}, {0x9, 0x0, 0x4, 0x774c}, {0x5, 0x3, 0x7, 0x6}, {0xd17, 0x9, 0xffffff58, 0x8}, {0x0, 0x7, 0x7fffffff, 0x1}, {0x6c5c, 0x8, 0x7, 0x5}, {0x3, 0x9, 0x9, 0x7fff}, {0x401, 0x3, 0x3, 0x7f5b}, {0x9, 0x2e3c, 0x401, 0x240000}, {0x5, 0x5, 0x0, 0x1ff}, {0x0, 0x4, 0x40, 0x2}, {0x8, 0xffffffab, 0x7ff, 0x5}, {0x42e, 0x9, 0x1, 0x3}, {0x1, 0xc, 0x4, 0x6}, {0x80000001, 0x0, 0x6, 0x81}, {0x0, 0x2b1, 0x2, 0x6}, {0x4, 0x1, 0xffffffff, 0x4}, {0xffffffff, 0x7ff, 0xe1f, 0x2}, {0x7f, 0x2, 0x1c00, 0xfffffff4}, {0xa03, 0x5, 0x3, 0x10001}, {0x100, 0x2, 0x8, 0x7}, {0xee64, 0x1, 0x1, 0x5}, {0x10, 0x3, 0x8, 0x5}, {0x30000000, 0x4, 0x0, 0x7}, {0x52, 0x5, 0x7, 0x8}, {0xe1a, 0x7fff, 0x0, 0x7f}, {0x5ff, 0x1, 0xfffeffff, 0x1}, {0x4, 0x4, 0x4, 0x3}, {0x5, 0xd, 0x7, 0x4}, {0x4, 0x7, 0x0, 0x4}, {0x401, 0x6, 0x1, 0xf}, {0xfff, 0xfffff6b0, 0x3, 0x7}]}}, @TCA_U32_LINK={0x8, 0x3, 0xc}]}}]}, 0x41c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.332043253s ago: executing program 4 (id=1178): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000200)="76444e8d39b00f375848c3c709baba3ed572acb58f417ad3374035e34257d60fc216fc3b2ce66f61e59cbd09cfa19f6fab97653b5d5a", 0x36) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket(0xa, 0x2, 0x0) (async) r2 = socket(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x29, 0x20, 0x0, &(0x7f0000000040)=0x2000) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) listen(r1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) listen(r5, 0x9) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto$packet(r2, &(0x7f0000000340)="6f313c0e374e0d37530833b517c55010196531a3f69e60d443b957e461d1fb1e89308f2f321d065197c3e5cd21368e5cef9fb3129de67a60910ca5a6e66a8fe34093db39ce3cb08b24eee1959e028bcadde6c8a93fc594aff6d44a598e083bea1f928984a6ae8f0800cee16b06cf18f8b3c09528798dd1a76d137c38b3fb14d863a772ec96c67b757b8423e28df33bc82ee665d5d8dba6cd61d21ff2abe4eb451d4dfd2ff4265bf7", 0xa8, 0x800, 0x0, 0x0) (async) sendto$packet(r2, &(0x7f0000000340)="6f313c0e374e0d37530833b517c55010196531a3f69e60d443b957e461d1fb1e89308f2f321d065197c3e5cd21368e5cef9fb3129de67a60910ca5a6e66a8fe34093db39ce3cb08b24eee1959e028bcadde6c8a93fc594aff6d44a598e083bea1f928984a6ae8f0800cee16b06cf18f8b3c09528798dd1a76d137c38b3fb14d863a772ec96c67b757b8423e28df33bc82ee665d5d8dba6cd61d21ff2abe4eb451d4dfd2ff4265bf7", 0xa8, 0x800, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r8 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r8, 0x800000010d, 0x2, &(0x7f0000000000)="c94e602f", 0x4) (async) setsockopt(r8, 0x800000010d, 0x2, &(0x7f0000000000)="c94e602f", 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000171102a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_route(0x10, 0x3, 0x0) 16.268498686s ago: executing program 0 (id=1179): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0x1000000}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180806a"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x89}}, {}, [], {{0x4, 0x1, 0xb, 0x8}, {0x4, 0x0, 0xa, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 16.151732756s ago: executing program 4 (id=1180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x174}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xffffffffffffffe0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x10000, 0xc}, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100)="95304f87ffb45084", &(0x7f0000000140)=@tcp=r2, 0x2}, 0x20) 15.982926755s ago: executing program 4 (id=1181): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27, 0x0, 0x4}, 0x6) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) connect$pppoe(r2, &(0x7f0000000200)={0x18, 0x0, {0x4, @random="c89291e5e3dc", 'pimreg\x00'}}, 0x1e) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) 15.980895816s ago: executing program 3 (id=1182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000006c0), &(0x7f0000000700)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x1}, {}, @device_a, @initial, @initial, {0x6, 0x1}}}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x5, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f0000000000)={r11, @in={{0x2, 0x0, @empty}}, 0xfffe}, 0x90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write(r2, 0x0, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='team0\x00', 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0x5, 0x7}, {0xc}, {0xa, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 15.877671049s ago: executing program 4 (id=1183): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "08ae00", 0x28, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x23}, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @mcast1}}}}}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) recvfrom(r1, &(0x7f0000001140)=""/4096, 0x1000, 0x102, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x42, 0x2, {{}, [@TCA_MQPRIO_SHAPER, @TCA_MQPRIO_SHAPER, @TCA_MQPRIO_MIN_RATE64={0x0, 0x3, 0x0, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @TCA_MQPRIO_SHAPER]}}}]}, 0x88}}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000680)={&(0x7f00000004c0)=@qipcrtr, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/14, 0xe}], 0x1, &(0x7f0000004c40)=""/4096, 0x1000}, 0x10021) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca02}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000740)={0x3, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[], 0x50}, 0x1, 0x7}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) recvmmsg(r5, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000008cc0)=""/4099, 0x1003}, {&(0x7f00000000c0)=""/178, 0xb2}, {&(0x7f0000001c40)=""/240, 0xf0}, {&(0x7f0000000580)=""/129, 0x81}, {&(0x7f0000003c40)=""/4081, 0xff1}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000380)=""/165, 0xa5}, {&(0x7f00000001c0)=""/56, 0x38}], 0x8}, 0x6}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) sendto$inet6(r2, &(0x7f0000002140)="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", 0x1000, 0x8000, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @local, 0x5}, 0x1c) 15.864308876s ago: executing program 0 (id=1184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14}}, 0x8c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x63660000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000300)={0x17c04, 0xffffffffffffffff, 0xd3f, 0x6780, 0x1000000, 0x4}) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "05e2e42e6ce22f61d362a4a969c6f236"}) 15.614957249s ago: executing program 0 (id=1185): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) 15.213016349s ago: executing program 0 (id=1186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010200000000000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x700, 0x8, 0x3ff, 0xfffffff7, {{0xa, 0x4, 0x3, 0x7, 0x28, 0x67, 0x0, 0xd, 0x29, 0x0, @empty, @remote, {[@generic={0x7, 0x12, "9868c76c8b8edceb6c20fb6c2655997b"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x29, 0x6, 0xfa, 0x8, 0x40, @mcast1, @mcast2, 0x7, 0x80, 0xfffffff2, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f0000000600)=0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'veth0_macvtap\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1810009}, 0xc, &(0x7f0000000780)={&(0x7f0000000840)={0x26c, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2c, 0x208000, {0x0, 0x0, 0x0, r14, {0x8, 0x4}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010009}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)={0x100, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x88, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'lo\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_hsr\x00'}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) 1.174129376s ago: executing program 32 (id=1175): r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:pam_console_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:lastlog_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x420080}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x21, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffff765, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x9, 0x0, &(0x7f0000000440), 0x83d00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000500)=[{0x0, 0x1, 0x7, 0x3}, {0x4, 0x3, 0xf, 0x9}, {0x1, 0x2, 0x7, 0x9}, {0x0, 0x4, 0x0, 0x2}, {0x1, 0x4, 0xc, 0xc}, {0x1, 0x2, 0xe, 0x7}, {0x0, 0x3, 0xb, 0x4}], 0x10, 0xfff, @void, @value}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000640)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x88c}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x80005) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000980)) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f00000009c0)) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a00)='blkio.bfq.io_service_time\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa8, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_MARK_MASK={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x5, 0x6, 0x1000, 0xe691, 0x1, 0x32, 0xd5c5]}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x1, 0x8, 0x40, 0x4, 0x9, 0xf]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) writev(r2, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="46a054d025045298283cfc95915a3c9f855c665961a254de44110e14a151", 0x1e}, {&(0x7f0000000c00)="2b9599295ebfac1d27d65200006028294a93e917c735bc55a1a9535cce", 0x1d}, {&(0x7f0000000c40)="81a5ab105df4b0d32e9f361d4ab2742b702ae333186186faace4ca0e6d9705bab75d6bf8ddf8d04355e3902d944273dcdd45a100e30fa3365eaca15b469045a91848e16ad9ae9ce4f73c3c240da5d9ae781e947508c4b52a4da94d52f8ad0f07d239f1b98794f13c33a16eb940407eb6001e27e3776f", 0x76}], 0x3) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'syztnl2\x00', 0x0, 0x4, 0x7f, 0x1, 0x4, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x80, 0x700, 0x1c4, 0x1000}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x50, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x50}}, 0x8001) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000f40)=0x2, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000f80), r7) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001000), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x4c, r10, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0xc0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x80, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:wtmp_t:s0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000012c0), r1) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x34, r11, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x34}}, 0x24044880) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000013c0)={r3, 0x7ff, 0x8, 0x9}) setsockopt$MRT_PIM(r12, 0x0, 0xcf, &(0x7f0000001400), 0x4) socket$netlink(0x10, 0x3, 0xc) 1.131655053s ago: executing program 33 (id=1176): r0 = socket$rxrpc(0x21, 0x2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a010100"], 0x2c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) (async) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r4}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@security={'security\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @remote, 0x0, 0x0, 'wg2\x00', 'xfrm0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x3, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@set={{0x40}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@ipcomp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) close(r0) (async) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2], 0x48) socket(0x11, 0x800000003, 0x0) (async) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmmsg$sock(r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="04"], 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xdc, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r6, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xac, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x20], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x3, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x48, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbff3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd5}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x67}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x37}]}]}]}}]}, 0xdc}, 0x1, 0x7a00, 0x0, 0x20008040}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r9) (async) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x14, r10, 0xe701ac47a3d23ecd}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r9) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r11, 0x29, 0x42, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 97.028096ms ago: executing program 34 (id=1186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010200000000000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x700, 0x8, 0x3ff, 0xfffffff7, {{0xa, 0x4, 0x3, 0x7, 0x28, 0x67, 0x0, 0xd, 0x29, 0x0, @empty, @remote, {[@generic={0x7, 0x12, "9868c76c8b8edceb6c20fb6c2655997b"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x29, 0x6, 0xfa, 0x8, 0x40, @mcast1, @mcast2, 0x7, 0x80, 0xfffffff2, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f0000000600)=0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'veth0_macvtap\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1810009}, 0xc, &(0x7f0000000780)={&(0x7f0000000840)={0x26c, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2c, 0x208000, {0x0, 0x0, 0x0, r14, {0x8, 0x4}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010009}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)={0x100, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x88, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'lo\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_hsr\x00'}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) 44.423025ms ago: executing program 35 (id=1182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000006c0), &(0x7f0000000700)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x1}, {}, @device_a, @initial, @initial, {0x6, 0x1}}}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x5, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f0000000000)={r11, @in={{0x2, 0x0, @empty}}, 0xfffe}, 0x90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write(r2, 0x0, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='team0\x00', 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0x5, 0x7}, {0xc}, {0xa, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 0s ago: executing program 36 (id=1183): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "08ae00", 0x28, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x23}, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @mcast1}}}}}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) recvfrom(r1, &(0x7f0000001140)=""/4096, 0x1000, 0x102, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x42, 0x2, {{}, [@TCA_MQPRIO_SHAPER, @TCA_MQPRIO_SHAPER, @TCA_MQPRIO_MIN_RATE64={0x0, 0x3, 0x0, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @TCA_MQPRIO_SHAPER]}}}]}, 0x88}}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000680)={&(0x7f00000004c0)=@qipcrtr, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/14, 0xe}], 0x1, &(0x7f0000004c40)=""/4096, 0x1000}, 0x10021) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca02}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000740)={0x3, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[], 0x50}, 0x1, 0x7}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) recvmmsg(r5, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000008cc0)=""/4099, 0x1003}, {&(0x7f00000000c0)=""/178, 0xb2}, {&(0x7f0000001c40)=""/240, 0xf0}, {&(0x7f0000000580)=""/129, 0x81}, {&(0x7f0000003c40)=""/4081, 0xff1}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000380)=""/165, 0xa5}, {&(0x7f00000001c0)=""/56, 0x38}], 0x8}, 0x6}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) sendto$inet6(r2, &(0x7f0000002140)="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", 0x1000, 0x8000, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @local, 0x5}, 0x1c) kernel console output (not intermixed with test programs): vsim0 netdevsim1: renamed from eth1 [ 94.985503][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.997311][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.056135][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.072611][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.089804][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.113795][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.160392][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.222955][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.254874][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.263135][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.282169][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.289470][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.312123][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.322454][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.336596][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.360988][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.368228][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.452618][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.498022][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.505200][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.555192][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.562404][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.681659][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.757870][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.774260][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.810203][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.817375][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.846152][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.868915][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.876100][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.906540][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.005108][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.012334][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.075853][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.114397][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.121578][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.150952][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.158163][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.185036][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.192270][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.271459][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.345969][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.580505][ T5857] Bluetooth: hci2: command tx timeout [ 96.633330][ T5848] veth0_vlan: entered promiscuous mode [ 96.666440][ T5857] Bluetooth: hci3: command tx timeout [ 96.666560][ T5851] Bluetooth: hci4: command tx timeout [ 96.740776][ T5851] Bluetooth: hci0: command tx timeout [ 96.740806][ T5857] Bluetooth: hci1: command tx timeout [ 96.787062][ T5848] veth1_vlan: entered promiscuous mode [ 96.936139][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.949245][ T5843] veth0_vlan: entered promiscuous mode [ 96.985181][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.016343][ T5848] veth0_macvtap: entered promiscuous mode [ 97.024743][ T5843] veth1_vlan: entered promiscuous mode [ 97.051709][ T5848] veth1_macvtap: entered promiscuous mode [ 97.080445][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.132022][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.174469][ T5844] veth0_vlan: entered promiscuous mode [ 97.184020][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.196848][ T5862] veth0_vlan: entered promiscuous mode [ 97.221004][ T5843] veth0_macvtap: entered promiscuous mode [ 97.232124][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.241433][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.251002][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.259922][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.275751][ T5844] veth1_vlan: entered promiscuous mode [ 97.302534][ T5843] veth1_macvtap: entered promiscuous mode [ 97.313755][ T5862] veth1_vlan: entered promiscuous mode [ 97.416929][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.429457][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.442381][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.454724][ T5845] veth0_vlan: entered promiscuous mode [ 97.486737][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.497713][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.509829][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.543231][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.547295][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.562104][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.566856][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.579947][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.589106][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.606410][ T5845] veth1_vlan: entered promiscuous mode [ 97.645012][ T5862] veth0_macvtap: entered promiscuous mode [ 97.653430][ T5844] veth0_macvtap: entered promiscuous mode [ 97.683133][ T5862] veth1_macvtap: entered promiscuous mode [ 97.693604][ T5844] veth1_macvtap: entered promiscuous mode [ 97.707652][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.716371][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.798576][ T5845] veth0_macvtap: entered promiscuous mode [ 97.810864][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.826489][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.837097][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.847938][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.864982][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.887048][ T5845] veth1_macvtap: entered promiscuous mode [ 97.921831][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.932786][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.943631][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.954358][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.966186][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.985461][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.014115][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.025446][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.035376][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.045848][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.055741][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.066212][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.078524][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.101869][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.113048][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.123702][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.135684][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.145909][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.156752][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.172742][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.184155][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.184176][ T5862] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.208192][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.215884][ T5862] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.227535][ T5862] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.238350][ T5862] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.269001][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.277859][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.286757][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.297100][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.341262][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.352207][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.378462][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.408209][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.422205][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.434440][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.448099][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.465911][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.480276][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.525085][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.544113][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.554080][ T5934] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 98.597354][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.614565][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.625744][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.636286][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.646207][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.656915][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.667023][ T5857] Bluetooth: hci2: command tx timeout [ 98.674047][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.685379][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.697276][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.739408][ T5857] Bluetooth: hci3: command tx timeout [ 98.741078][ T5851] Bluetooth: hci4: command tx timeout [ 98.762942][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.781470][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.801751][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.810808][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.820152][ T5851] Bluetooth: hci1: command tx timeout [ 98.828465][ T5851] Bluetooth: hci0: command tx timeout [ 98.919969][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.937703][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.096882][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.126476][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.138391][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.166410][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.193027][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 99.207644][ T5948] netlink: 'syz.2.8': attribute type 15 has an invalid length. [ 99.245029][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.267249][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.378559][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.386440][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.545429][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.566904][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.255496][ T5978] Zero length message leads to an empty skb [ 100.591321][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 100.620793][ T5988] netlink: 'syz.3.16': attribute type 10 has an invalid length. [ 100.823977][ T6003] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 100.842802][ T6003] netlink: 96 bytes leftover after parsing attributes in process `syz.2.19'. [ 100.868924][ T6005] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.124974][ T6015] Bluetooth: MGMT ver 1.23 [ 101.514861][ T6028] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 101.614190][ T6028] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 101.829438][ T6038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.29'. [ 102.015705][ T6056] dvmrp0: entered allmulticast mode [ 102.103366][ T6055] x_tables: duplicate underflow at hook 2 [ 102.239767][ T6055] xt_CT: No such helper "pptp" [ 102.260509][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'. [ 102.318626][ T6066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.34'. [ 102.552032][ T6074] syz.1.38 uses obsolete (PF_INET,SOCK_PACKET) [ 102.576556][ T6074] syzkaller1: entered promiscuous mode [ 102.595452][ T6074] syzkaller1: entered allmulticast mode [ 102.900220][ T6090] netlink: 44 bytes leftover after parsing attributes in process `syz.1.43'. [ 103.309411][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 103.384480][ T6104] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.462961][ T6118] netlink: 'syz.4.50': attribute type 18 has an invalid length. [ 103.479305][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 103.512104][ T6119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.52'. [ 103.545758][ T6104] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 103.617022][ T6118] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.630039][ T6118] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.641578][ T6118] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.651859][ T6118] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.690223][ T6119] geneve2: entered promiscuous mode [ 103.696917][ T6119] geneve2: entered allmulticast mode [ 103.711048][ T6119] syz.2.52 (6119) used greatest stack depth: 19064 bytes left [ 103.800909][ T6121] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 103.851611][ T6125] warning: `syz.1.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.140301][ T6139] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 104.379092][ T6149] __nla_validate_parse: 2 callbacks suppressed [ 104.379114][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 104.447190][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 104.768261][ T6170] tun0: tun_chr_ioctl cmd 1074025675 [ 104.773642][ T6170] tun0: persist disabled [ 104.802474][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.64'. [ 104.821471][ T6171] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 104.825901][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.839209][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.930740][ T6176] vlan2: entered allmulticast mode [ 104.951858][ T6176] bridge0: entered allmulticast mode [ 105.239006][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'. [ 105.475433][ T6202] netlink: 'syz.2.73': attribute type 10 has an invalid length. [ 105.680790][ T6202] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 105.970491][ T6215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.76'. [ 106.256178][ T6223] netlink: 44 bytes leftover after parsing attributes in process `syz.4.79'. [ 106.608868][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 106.847463][ T6244] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 106.895046][ T6244] Cannot find del_set index 65531 as target [ 107.000517][ T6248] hsr0: entered promiscuous mode [ 107.036662][ T6248] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 107.044764][ T6248] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 107.055936][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.87'. [ 107.074918][ T6246] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 107.106021][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 107.169647][ T6248] hsr_slave_0: left promiscuous mode [ 107.212010][ T6248] hsr_slave_1: left promiscuous mode [ 107.280420][ T6248] hsr0 (unregistering): left promiscuous mode [ 107.405371][ T6269] netlink: 'syz.1.93': attribute type 2 has an invalid length. [ 107.442780][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 107.483986][ T6269] netlink: 'syz.1.93': attribute type 4 has an invalid length. [ 108.113237][ T6291] syzkaller1: entered promiscuous mode [ 108.128644][ T6291] syzkaller1: entered allmulticast mode [ 108.303304][ T6303] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.320735][ T6303] Cannot find set identified by id 0 to match [ 109.493350][ T6322] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 109.752133][ T6340] __nla_validate_parse: 5 callbacks suppressed [ 109.752158][ T6340] netlink: 104 bytes leftover after parsing attributes in process `syz.4.115'. [ 110.048582][ T6350] netlink: 'syz.2.117': attribute type 4 has an invalid length. [ 110.259782][ T6357] netlink: 'syz.2.119': attribute type 11 has an invalid length. [ 110.267598][ T6357] netlink: 'syz.2.119': attribute type 11 has an invalid length. [ 110.272128][ T6354] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 110.275771][ T6357] netlink: 224 bytes leftover after parsing attributes in process `syz.2.119'. [ 110.316701][ T6354] netlink: 'syz.2.119': attribute type 2 has an invalid length. [ 110.919048][ T6370] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 110.931063][ T6370] netlink: 232 bytes leftover after parsing attributes in process `syz.1.123'. [ 111.155267][ T6379] netlink: 'syz.1.126': attribute type 29 has an invalid length. [ 111.177952][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 111.338947][ T6387] netlink: 72 bytes leftover after parsing attributes in process `syz.2.129'. [ 111.367318][ T6387] netlink: 72 bytes leftover after parsing attributes in process `syz.2.129'. [ 111.527355][ T6398] netlink: 'syz.2.132': attribute type 4 has an invalid length. [ 111.541259][ T6397] netlink: 'syz.2.132': attribute type 4 has an invalid length. [ 111.572953][ T6394] bridge_slave_0: left allmulticast mode [ 111.582062][ T6394] bridge_slave_0: left promiscuous mode [ 111.590819][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.607371][ T6394] bridge_slave_1: left allmulticast mode [ 111.617569][ T6394] bridge_slave_1: left promiscuous mode [ 111.630519][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.656150][ T6394] bond0: (slave bond_slave_0): Releasing backup interface [ 111.690080][ T6394] bond0: (slave bond_slave_1): Releasing backup interface [ 111.735532][ T6394] team0: Port device team_slave_0 removed [ 111.809214][ T6394] team0: Port device team_slave_1 removed [ 111.824061][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.835418][ T6394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.874517][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.901425][ T6394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.232056][ T6413] netlink: 'syz.1.138': attribute type 21 has an invalid length. [ 112.899638][ T6433] netlink: 'syz.4.142': attribute type 26 has an invalid length. [ 113.029860][ T6439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.143'. [ 114.577490][ T6464] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 114.637053][ T6482] lo: entered allmulticast mode [ 114.648387][ T6482] lo: left allmulticast mode [ 114.878651][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 115.017836][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 115.623599][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 115.626437][ T6532] delete_channel: no stack [ 115.676612][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.167'. [ 115.752522][ T6539] xt_socket: unknown flags 0x50 [ 115.973463][ T6543] netlink: 'syz.1.171': attribute type 1 has an invalid length. [ 115.986821][ T6543] netlink: 76 bytes leftover after parsing attributes in process `syz.1.171'. [ 116.303641][ T6550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.173'. [ 116.573690][ T6557] tipc: Started in network mode [ 116.583421][ T6557] tipc: Node identity ac14140f, cluster identity 4711 [ 116.609088][ T6557] tipc: New replicast peer: 255.255.255.255 [ 116.616014][ T6557] tipc: Enabled bearer , priority 10 [ 116.639077][ T6558] netlink: 'syz.4.175': attribute type 1 has an invalid length. [ 117.403786][ T6585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.184'. [ 117.534008][ T6591] netlink: 60 bytes leftover after parsing attributes in process `syz.1.186'. [ 117.617051][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 117.637140][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 117.729088][ T24] tipc: Node number set to 2886997007 [ 118.341154][ T6312] Set syz1 is full, maxelem 65536 reached [ 119.691798][ T6690] xt_hashlimit: size too large, truncated to 1048576 [ 120.021626][ T6704] __nla_validate_parse: 1 callbacks suppressed [ 120.021648][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 121.441580][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 121.939717][ T6787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.237'. [ 122.292401][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 122.578457][ T6830] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 122.660035][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 122.917020][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 123.203818][ T6845] bond1: entered promiscuous mode [ 123.211955][ T6845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.297925][ T6877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.260'. [ 123.346007][ T6857] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 123.457050][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 123.475191][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 123.537269][ T6877] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.546510][ T6877] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.555448][ T6877] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.564298][ T6877] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.840876][ T6887] netlink: 'syz.3.263': attribute type 10 has an invalid length. [ 123.878581][ T6887] syz_tun: entered promiscuous mode [ 123.894185][ T6897] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 123.897329][ T6887] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 123.964515][ T6894] dvmrp0: entered allmulticast mode [ 124.359845][ T6918] netlink: 64 bytes leftover after parsing attributes in process `syz.1.274'. [ 124.510238][ T6924] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.595384][ T6928] netlink: 'syz.1.278': attribute type 11 has an invalid length. [ 124.646678][ T6926] tipc: Enabling of bearer rejected, already enabled [ 124.660585][ T6930] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 124.713146][ T6937] veth0: entered promiscuous mode [ 124.835554][ T6937] veth0: left promiscuous mode [ 125.210961][ T6967] netlink: 'syz.4.289': attribute type 7 has an invalid length. [ 125.317132][ T6973] Cannot find add_set index 2 as target [ 125.387543][ T6980] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 125.404375][ T6967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.427480][ T6981] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 125.735456][ T6972] syzkaller1: entered promiscuous mode [ 125.778940][ T6972] syzkaller1: entered allmulticast mode [ 126.041074][ T6993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.088659][ T6993] bond0: (slave bond1): Enslaving as an active interface with an up link [ 126.133668][ T7007] __nla_validate_parse: 3 callbacks suppressed [ 126.133688][ T7007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.300'. [ 126.139710][ T6997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.298'. [ 126.151167][ T7007] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 126.213771][ T7004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.300'. [ 126.642465][ T7026] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 126.657729][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 126.659597][ T7023] nftables ruleset with unbound set [ 126.766502][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.307'. [ 126.793534][ T7023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'. [ 126.806959][ T7033] raw_sendmsg: syz.0.309 forgot to set AF_INET. Fix it! [ 127.019800][ T7037] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 127.035662][ T7037] trusted_key: syz.3.310 sent an empty control message without MSG_MORE. [ 127.089559][ T7041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.312'. [ 127.113281][ T7040] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 127.204892][ T7045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.312'. [ 127.311113][ T7049] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 127.508329][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 127.567470][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'. [ 127.685590][ T7071] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 127.844082][ T7078] bridge_slave_0: left allmulticast mode [ 127.850043][ T7078] bridge_slave_0: left promiscuous mode [ 127.855864][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.880702][ T7078] bridge_slave_1: left allmulticast mode [ 127.886632][ T7078] bridge_slave_1: left promiscuous mode [ 127.892893][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.908982][ T7078] bond0: (slave bond_slave_0): Releasing backup interface [ 127.929648][ T7078] bond0: (slave bond_slave_1): Releasing backup interface [ 127.977168][ T7078] team0: Port device team_slave_0 removed [ 128.007538][ T7078] team0: Port device team_slave_1 removed [ 128.014751][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.026616][ T7078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.039204][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.046770][ T7078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.317131][ T7091] openvswitch: netlink: Message has 8 unknown bytes. [ 128.366077][ T7095] netem: unknown loss type 0 [ 128.384451][ T7095] netem: change failed [ 128.827144][ T7122] netlink: 'syz.2.339': attribute type 39 has an invalid length. [ 128.827442][ T7123] netlink: 'syz.2.339': attribute type 39 has an invalid length. [ 129.667492][ T7154] bond2: entered promiscuous mode [ 129.673917][ T7154] bond2: entered allmulticast mode [ 130.084973][ T7185] netlink: 'syz.1.355': attribute type 6 has an invalid length. [ 130.122604][ T7185] netlink: 'syz.1.355': attribute type 5 has an invalid length. [ 130.136717][ T7185] netlink: 'syz.1.355': attribute type 4 has an invalid length. [ 130.168866][ T7185] netlink: 'syz.1.355': attribute type 6 has an invalid length. [ 131.562769][ T7191] netlink: 'syz.2.358': attribute type 29 has an invalid length. [ 131.757268][ T7215] __nla_validate_parse: 11 callbacks suppressed [ 131.757291][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 131.817946][ T7215] bridge_slave_1: left allmulticast mode [ 131.824365][ T7215] bridge_slave_1: left promiscuous mode [ 131.852224][ T7215] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.889615][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 131.909384][ T7215] bridge_slave_0: left allmulticast mode [ 131.924260][ T7215] bridge_slave_0: left promiscuous mode [ 131.939611][ T7215] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.014072][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 132.130951][ T7221] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.138308][ T7221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.146408][ T7221] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.154260][ T7221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.212137][ T7221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.301046][ T7224] bond3: entered promiscuous mode [ 132.306498][ T7224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.544039][ T7233] bond0: (slave syz_tun): Releasing backup interface [ 132.852121][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 132.886172][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 132.911584][ T7272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.377'. [ 132.925626][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 132.985359][ T7272] geneve2: entered promiscuous mode [ 132.989753][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.004851][ T7277] netlink: 'syz.2.378': attribute type 2 has an invalid length. [ 133.011565][ T7272] geneve2: entered allmulticast mode [ 133.148793][ T7281] netlink: 'syz.4.380': attribute type 11 has an invalid length. [ 133.186808][ T7281] netlink: 228 bytes leftover after parsing attributes in process `syz.4.380'. [ 133.211214][ T7281] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 133.319292][ T7289] C: renamed from lo [ 133.339658][ T7292] netlink: 72 bytes leftover after parsing attributes in process `syz.3.381'. [ 133.340758][ T7291] netlink: 32 bytes leftover after parsing attributes in process `syz.2.384'. [ 133.439637][ T7291] tipc: Enabling of bearer rejected, already enabled [ 133.991706][ T7318] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 136.669927][ T7367] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 136.869142][ T7376] __nla_validate_parse: 3 callbacks suppressed [ 136.869164][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 136.966530][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 136.988454][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 137.102833][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 137.118510][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 137.127274][ T7404] netlink: 'syz.1.404': attribute type 4 has an invalid length. [ 137.146606][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 137.162239][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 137.204061][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 137.235172][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 137.247190][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 138.425923][ T7449] lo speed is unknown, defaulting to 1000 [ 138.446210][ T7449] lo speed is unknown, defaulting to 1000 [ 138.460880][ T7451] netlink: 'syz.3.418': attribute type 2 has an invalid length. [ 138.467842][ T7449] lo speed is unknown, defaulting to 1000 [ 138.475880][ T7451] netlink: 'syz.3.418': attribute type 8 has an invalid length. [ 138.890576][ T7466] macvlan0: entered promiscuous mode [ 138.909133][ T7466] macvlan0: entered allmulticast mode [ 138.993429][ T7472] can: request_module (can-proto-4) failed. [ 139.032995][ T7475] can: request_module (can-proto-4) failed. [ 139.411094][ T7449] infiniband syz0: set active [ 139.423264][ T7449] infiniband syz0: added lo [ 139.429868][ T6490] lo speed is unknown, defaulting to 1000 [ 139.455084][ T7449] syz0: rxe_create_cq: returned err = -12 [ 139.469834][ T7500] sctp: [Deprecated]: syz.1.431 (pid 7500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.469834][ T7500] Use struct sctp_sack_info instead [ 139.495662][ T7449] infiniband syz0: Couldn't create ib_mad CQ [ 139.507577][ T7494] macvlan2: entered promiscuous mode [ 139.516568][ T7449] infiniband syz0: Couldn't open port 1 [ 139.638869][ T7449] RDS/IB: syz0: added [ 139.643943][ T7449] smc: adding ib device syz0 with port count 1 [ 139.662656][ T7449] smc: ib device syz0 port 1 has pnetid [ 139.691294][ T979] lo speed is unknown, defaulting to 1000 [ 139.711302][ T7449] lo speed is unknown, defaulting to 1000 [ 140.049928][ T7524] syzkaller0: create flow: hash 2936083471 index 2 [ 140.250925][ T3020] syzkaller0: tun_net_xmit 76 [ 140.262155][ T3020] syzkaller0: tun_net_xmit 48 [ 140.280339][ T24] syzkaller0: tun_net_xmit 76 [ 140.362476][ T7524] syzkaller0: delete flow: hash 2936083471 index 2 [ 141.898073][ T7449] lo speed is unknown, defaulting to 1000 [ 142.529842][ T7583] __nla_validate_parse: 67 callbacks suppressed [ 142.529863][ T7583] netlink: 204 bytes leftover after parsing attributes in process `syz.0.455'. [ 142.576442][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 142.608345][ T7585] netlink: 56 bytes leftover after parsing attributes in process `syz.3.457'. [ 142.618094][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 142.672651][ T7585] lo: entered allmulticast mode [ 142.747136][ T7590] netlink: 56 bytes leftover after parsing attributes in process `syz.4.459'. [ 142.766719][ T7590] netlink: 44 bytes leftover after parsing attributes in process `syz.4.459'. [ 142.942855][ T7449] lo speed is unknown, defaulting to 1000 [ 143.044699][ T7600] netlink: 60 bytes leftover after parsing attributes in process `syz.0.461'. [ 143.545098][ T7623] xt_CT: No such helper "netbios-ns" [ 143.763630][ T7638] netlink: 'syz.3.472': attribute type 16 has an invalid length. [ 143.795995][ T7638] netlink: 'syz.3.472': attribute type 3 has an invalid length. [ 143.814587][ T7449] lo speed is unknown, defaulting to 1000 [ 143.818665][ T7638] netlink: 132 bytes leftover after parsing attributes in process `syz.3.472'. [ 144.117667][ T7648] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.221557][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 144.247762][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 144.303540][ T7656] netlink: 'syz.3.477': attribute type 29 has an invalid length. [ 144.466802][ T7449] lo speed is unknown, defaulting to 1000 [ 144.803472][ T7680] tipc: Can't bind to reserved service type 2 [ 144.998278][ T7686] tipc: Enabling not permitted [ 145.004841][ T7686] tipc: Enabling of bearer rejected, failed to enable media [ 145.055598][ T7686] tipc: Enabling not permitted [ 145.074155][ T7686] tipc: Enabling of bearer rejected, failed to enable media [ 145.508692][ T7697] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 145.518645][ T24] IPVS: starting estimator thread 0... [ 145.548742][ T7697] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 145.619301][ T7700] IPVS: using max 25 ests per chain, 60000 per kthread [ 145.766280][ T7706] openvswitch: netlink: Message has 8 unknown bytes. [ 146.402833][ T76] tipc: Subscription rejected, illegal request [ 146.702482][ T7748] IPVS: Error connecting to the multicast addr [ 146.792949][ T7760] netlink: 'syz.2.504': attribute type 11 has an invalid length. [ 147.503490][ T7790] lo speed is unknown, defaulting to 1000 [ 147.694421][ T7802] : entered promiscuous mode [ 147.779225][ T5851] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 147.788149][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.979685][ T7816] __nla_validate_parse: 10 callbacks suppressed [ 147.979709][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 148.023309][ T7806] lo speed is unknown, defaulting to 1000 [ 148.081115][ T7816] netlink: 14 bytes leftover after parsing attributes in process `syz.1.520'. [ 148.101646][ T7818] x_tables: unsorted entry at hook 2 [ 148.668596][ T7833] tipc: Started in network mode [ 148.696780][ T7833] tipc: Node identity e27f363aca26, cluster identity 4711 [ 148.733299][ T7833] tipc: Enabled bearer , priority 0 [ 148.811169][ T7833] syzkaller0: entered promiscuous mode [ 148.825489][ T7833] syzkaller0: entered allmulticast mode [ 148.961751][ T7838] tipc: Resetting bearer [ 149.292078][ T7830] tipc: Resetting bearer [ 149.409207][ T7830] tipc: Disabling bearer [ 150.216054][ T7883] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 150.244011][ T7884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.541'. [ 150.843335][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 150.879661][ T7892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.543'. [ 151.363693][ T7900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.547'. [ 151.609352][ T7908] x_tables: unsorted entry at hook 1 [ 152.044784][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.555'. [ 152.135428][ T7931] netlink: 'syz.1.554': attribute type 39 has an invalid length. [ 152.292511][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e13b000: rx timeout, send abort [ 152.302481][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025596c00: rx timeout, send abort [ 152.311104][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e13b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 152.326651][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025596c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 152.613791][ T7949] netlink: 256 bytes leftover after parsing attributes in process `syz.2.561'. [ 152.627593][ T7949] unsupported nlmsg_type 40 [ 152.910541][ T7964] tipc: Enabling of bearer rejected, failed to enable media [ 153.003691][ T7968] dccp_v4_rcv: dropped packet with invalid checksum [ 153.021077][ T7971] netlink: 256 bytes leftover after parsing attributes in process `syz.1.567'. [ 153.470491][ T7999] netlink: 'syz.1.574': attribute type 1 has an invalid length. [ 153.675802][ T8006] lo speed is unknown, defaulting to 1000 [ 153.964287][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.582'. [ 154.113006][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 154.707569][ T8042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.589'. [ 155.036918][ T8042] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 155.039006][ T6491] IPVS: starting estimator thread 0... [ 155.095139][ T8049] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 155.168124][ T8052] IPVS: using max 27 ests per chain, 64800 per kthread [ 155.550500][ T8067] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 155.768592][ T6491] IPVS: starting estimator thread 0... [ 155.778321][ T8081] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 155.888279][ T8084] IPVS: using max 25 ests per chain, 60000 per kthread [ 155.920346][ T8091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.602'. [ 156.350392][ T8117] netlink: 276 bytes leftover after parsing attributes in process `syz.2.609'. [ 156.595792][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.603153][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.975516][ T8149] hsr0: entered promiscuous mode [ 157.054233][ T8149] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 157.060986][ T8149] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 157.092239][ T8151] vlan1: entered allmulticast mode [ 157.110981][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 157.111336][ T8151] bond0: entered allmulticast mode [ 157.165411][ T8151] bond_slave_0: entered allmulticast mode [ 157.185319][ T8151] bond_slave_1: entered allmulticast mode [ 157.226372][ T8151] bridge0: port 3(vlan1) entered blocking state [ 157.253528][ T8151] bridge0: port 3(vlan1) entered disabled state [ 157.276987][ T8151] vlan1: entered promiscuous mode [ 157.289356][ T8151] bond0: entered promiscuous mode [ 157.322934][ T8151] bond_slave_0: entered promiscuous mode [ 157.345287][ T8151] bond_slave_1: entered promiscuous mode [ 157.369687][ T8151] bridge0: port 3(vlan1) entered blocking state [ 157.376196][ T8151] bridge0: port 3(vlan1) entered forwarding state [ 157.442461][ T8160] hsr_slave_0: left promiscuous mode [ 157.470873][ T8160] hsr_slave_1: left promiscuous mode [ 157.472821][ T8164] syz.4.624: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 157.499397][ T8164] CPU: 1 UID: 0 PID: 8164 Comm: syz.4.624 Not tainted 6.15.0-rc1-syzkaller-00188-g88fa80021b77 #0 PREEMPT(full) [ 157.499428][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.499445][ T8164] Call Trace: [ 157.499454][ T8164] [ 157.499462][ T8164] dump_stack_lvl+0x241/0x360 [ 157.499512][ T8164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.499544][ T8164] ? __pfx__printk+0x10/0x10 [ 157.499572][ T8164] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 157.499606][ T8164] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 157.499636][ T8164] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 157.499670][ T8164] warn_alloc+0x27c/0x410 [ 157.499698][ T8164] ? __pfx_warn_alloc+0x10/0x10 [ 157.499726][ T8164] ? xskq_create+0xb6/0x170 [ 157.499748][ T8164] ? __get_vm_area_node+0x1c8/0x2d0 [ 157.499778][ T8164] ? __get_vm_area_node+0x25c/0x2d0 [ 157.499816][ T8164] __vmalloc_node_range_noprof+0x634/0x1390 [ 157.499871][ T8164] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 157.499897][ T8164] ? __kasan_kmalloc+0x9d/0xb0 [ 157.499929][ T8164] vmalloc_user_noprof+0x74/0x80 [ 157.499949][ T8164] ? xskq_create+0xb6/0x170 [ 157.499969][ T8164] xskq_create+0xb6/0x170 [ 157.499994][ T8164] xsk_init_queue+0xa1/0x100 [ 157.500020][ T8164] xsk_setsockopt+0x4f9/0x840 [ 157.500044][ T8164] ? __pfx_xsk_setsockopt+0x10/0x10 [ 157.500065][ T8164] ? __pfx_aa_sk_perm+0x10/0x10 [ 157.500097][ T8164] ? aa_sock_opt_perm+0x79/0x120 [ 157.500140][ T8164] ? __pfx_xsk_setsockopt+0x10/0x10 [ 157.500159][ T8164] do_sock_setsockopt+0x3b1/0x710 [ 157.500188][ T8164] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 157.500207][ T8164] ? __fget_files+0x2a/0x420 [ 157.500231][ T8164] ? __fget_files+0x39d/0x420 [ 157.500248][ T8164] ? __fget_files+0x2a/0x420 [ 157.500276][ T8164] __x64_sys_setsockopt+0x1ee/0x280 [ 157.500305][ T8164] do_syscall_64+0xf3/0x230 [ 157.500332][ T8164] ? clear_bhb_loop+0x45/0xa0 [ 157.500362][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.500386][ T8164] RIP: 0033:0x7f801938e169 [ 157.500408][ T8164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.500425][ T8164] RSP: 002b:00007f801a2a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 157.500447][ T8164] RAX: ffffffffffffffda RBX: 00007f80195b5fa0 RCX: 00007f801938e169 [ 157.500461][ T8164] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006 [ 157.500474][ T8164] RBP: 00007f8019410a68 R08: 0000000000000004 R09: 0000000000000000 [ 157.500486][ T8164] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000 [ 157.500499][ T8164] R13: 0000000000000000 R14: 00007f80195b5fa0 R15: 00007ffd341f6f68 [ 157.500530][ T8164] [ 157.500606][ T8164] Mem-Info: [ 157.618319][ T5851] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 157.655948][ T8164] active_anon:5786 inactive_anon:0 isolated_anon:0 [ 157.655948][ T8164] active_file:1315 inactive_file:38331 isolated_file:0 [ 157.655948][ T8164] unevictable:768 dirty:93 writeback:0 [ 157.655948][ T8164] slab_reclaimable:9698 slab_unreclaimable:102648 [ 157.655948][ T8164] mapped:28546 shmem:1434 pagetables:855 [ 157.655948][ T8164] sec_pagetables:0 bounce:0 [ 157.655948][ T8164] kernel_misc_reclaimable:0 [ 157.655948][ T8164] free:1337577 free_pcp:340 free_cma:0 [ 157.887807][ T8164] Node 0 active_anon:23144kB inactive_anon:0kB active_file:5260kB inactive_file:153252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114184kB dirty:372kB writeback:0kB shmem:4200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11352kB pagetables:3320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 157.997692][ T8164] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 158.073849][ T8164] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 158.192030][ T8164] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 158.225832][ T8164] Node 0 DMA32 free:1428452kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:24340kB inactive_anon:0kB active_file:5260kB inactive_file:153160kB unevictable:1536kB writepending:380kB present:3129332kB managed:2547228kB mlocked:0kB bounce:0kB free_pcp:1648kB local_pcp:912kB free_cma:0kB [ 158.288196][ T8164] lowmem_reserve[]: 0 0 0 0 0 [ 158.293104][ T8164] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 158.332589][ T8164] lowmem_reserve[]: 0 0 0 0 0 [ 158.337406][ T8164] Node 1 Normal free:3904372kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 158.373078][ T8164] lowmem_reserve[]: 0 0 0 0 0 [ 158.377884][ T8164] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 158.458197][ T8164] Node 0 DMA32: 277*4kB (UM) 50*8kB (UME) 63*16kB (UE) 17*32kB (UE) 22*64kB (UME) 19*128kB (UME) 17*256kB (UM) 8*512kB (UM) 6*1024kB (UM) 3*2048kB (M) 342*4096kB (M) = 1428468kB [ 158.484881][ T8164] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 158.522818][ T8164] Node 1 Normal: 209*4kB (UE) 48*8kB (UME) 43*16kB (UME) 202*32kB (UME) 89*64kB (UME) 23*128kB (UME) 11*256kB (UME) 11*512kB (UME) 6*1024kB (UM) 3*2048kB (UE) 944*4096kB (M) = 3904372kB [ 158.565722][ T8164] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.577016][ T8164] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 158.596802][ T8164] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.636284][ T8164] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 158.646184][ T8164] 42209 total pagecache pages [ 158.651388][ T8164] 0 pages in swap cache [ 158.667731][ T8164] Free swap = 124996kB [ 158.692857][ T8164] Total swap = 124996kB [ 158.697095][ T8164] 2097051 pages RAM [ 158.710970][ T8164] 0 pages HighMem/MovableOnly [ 158.729670][ T8164] 428586 pages reserved [ 158.733892][ T8164] 0 pages cma reserved [ 159.126110][ T8229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.641'. [ 159.225395][ T8232] netlink: 48 bytes leftover after parsing attributes in process `syz.3.643'. [ 160.016627][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 160.034618][ T8267] tipc: Enabling of bearer rejected, failed to enable media [ 160.187349][ T8270] xt_TCPMSS: Only works on TCP SYN packets [ 160.236725][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 160.464331][ T8282] netlink: 'syz.3.656': attribute type 32 has an invalid length. [ 160.477289][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.657'. [ 160.489747][ T8282] netlink: 'syz.3.656': attribute type 32 has an invalid length. [ 160.506042][ T8281] syzkaller1: entered promiscuous mode [ 160.522491][ T8281] syzkaller1: entered allmulticast mode [ 160.578775][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 160.589236][ T8281] No such timeout policy "syz0" [ 160.872475][ T8305] netlink: 48 bytes leftover after parsing attributes in process `syz.2.663'. [ 161.235967][ T8321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.669'. [ 161.268800][ T8324] netlink: 'syz.3.670': attribute type 12 has an invalid length. [ 161.301827][ T8324] netlink: 'syz.3.670': attribute type 29 has an invalid length. [ 161.321569][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 161.354507][ T8324] netlink: 148 bytes leftover after parsing attributes in process `syz.3.670'. [ 161.383669][ T8324] netlink: 'syz.3.670': attribute type 1 has an invalid length. [ 161.517150][ T8335] netlink: 'syz.2.673': attribute type 20 has an invalid length. [ 161.569455][ T8333] netlink: 'syz.2.673': attribute type 20 has an invalid length. [ 161.616945][ T8340] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 161.857853][ T8353] netlink: 'syz.0.678': attribute type 11 has an invalid length. [ 162.052160][ T8364] xt_bpf: check failed: parse error [ 162.633329][ T8350] delete_channel: no stack [ 163.172274][ T8418] netlink: 'syz.0.700': attribute type 1 has an invalid length. [ 163.265070][ T8418] bond4: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 163.298718][ T8418] bond4: (slave ip6tnl2): Setting fail_over_mac to active for active-backup mode [ 163.314619][ T8418] bond4: (slave ip6tnl2): making interface the new active one [ 163.323671][ T8421] netlink: 'syz.0.700': attribute type 1 has an invalid length. [ 163.323806][ T8418] bond4: (slave ip6tnl2): Enslaving as an active interface with an up link [ 163.507769][ T8432] delete_channel: no stack [ 163.517709][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.528633][ T8432] batadv_slave_1: entered promiscuous mode [ 163.534519][ T8432] batadv_slave_1: entered allmulticast mode [ 164.156575][ T8473] __nla_validate_parse: 16 callbacks suppressed [ 164.156605][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 164.225304][ T8473] vlan1: left promiscuous mode [ 164.236605][ T8473] bond0: left promiscuous mode [ 164.270475][ T8473] bond_slave_0: left promiscuous mode [ 164.280883][ T8473] bond_slave_1: left promiscuous mode [ 164.299427][ T8473] bridge0: port 3(vlan1) entered disabled state [ 164.329804][ T8473] bridge_slave_1: left allmulticast mode [ 164.342951][ T8473] bridge_slave_1: left promiscuous mode [ 164.345740][ T8488] netlink: 104 bytes leftover after parsing attributes in process `syz.1.720'. [ 164.354918][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.372032][ T8473] bridge_slave_0: left allmulticast mode [ 164.395103][ T8473] bridge_slave_0: left promiscuous mode [ 164.401618][ T8473] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.566688][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'. [ 164.584468][ T8500] team_slave_0: entered promiscuous mode [ 164.590579][ T8500] team_slave_1: entered promiscuous mode [ 164.754849][ T8508] netlink: 'syz.3.725': attribute type 1 has an invalid length. [ 164.770917][ T8508] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.725'. [ 165.353059][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'. [ 165.474817][ T8535] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.733'. [ 165.475718][ T8541] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.572555][ T8542] netlink: 44 bytes leftover after parsing attributes in process `syz.2.736'. [ 165.606089][ T8542] netlink: 21 bytes leftover after parsing attributes in process `syz.2.736'. [ 165.624432][ T8542] netlink: 21 bytes leftover after parsing attributes in process `syz.2.736'. [ 165.678962][ T8546] netlink: 52 bytes leftover after parsing attributes in process `syz.1.737'. [ 166.171756][ T8572] netlink: 'syz.0.747': attribute type 5 has an invalid length. [ 166.682304][ T8601] x_tables: ip_tables: osf match: only valid for protocol 6 [ 166.810009][ T8606] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 168.588427][ T5851] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 168.768937][ T8712] tipc: Started in network mode [ 168.773947][ T8712] tipc: Node identity ac14140f, cluster identity 4711 [ 168.857420][ T8712] tipc: New replicast peer: 255.255.255.255 [ 168.897725][ T8712] tipc: Enabled bearer , priority 10 [ 169.398399][ T8747] netlink: 'syz.0.798': attribute type 1 has an invalid length. [ 169.500503][ T8763] x_tables: duplicate underflow at hook 1 [ 169.627021][ T8747] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.018238][ T6493] tipc: Node number set to 2886997007 [ 170.155343][ T8789] lo speed is unknown, defaulting to 1000 [ 170.826047][ T8829] __nla_validate_parse: 62 callbacks suppressed [ 170.826070][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'. [ 170.883587][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'. [ 171.480237][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'. [ 171.633048][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'. [ 171.675024][ T8862] netlink: 68 bytes leftover after parsing attributes in process `syz.1.822'. [ 172.750606][ T8896] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 172.804827][ T8901] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 172.838358][ T8901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.832'. [ 172.951242][ T8902] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 172.974864][ T8902] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 172.987508][ T8902] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 173.000997][ T8902] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 173.017419][ T8902] bond3: (slave geneve2): making interface the new active one [ 173.032327][ T8902] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 173.311242][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 173.359872][ T8914] syz.1.836: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 173.418538][ T8915] netlink: 'syz.1.836': attribute type 13 has an invalid length. [ 173.426337][ T8915] netlink: 'syz.1.836': attribute type 58 has an invalid length. [ 173.438187][ T8914] CPU: 1 UID: 0 PID: 8914 Comm: syz.1.836 Not tainted 6.15.0-rc1-syzkaller-00188-g88fa80021b77 #0 PREEMPT(full) [ 173.438219][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.438232][ T8914] Call Trace: [ 173.438240][ T8914] [ 173.438249][ T8914] dump_stack_lvl+0x241/0x360 [ 173.438291][ T8914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.438323][ T8914] ? __pfx__printk+0x10/0x10 [ 173.438352][ T8914] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 173.438386][ T8914] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 173.438416][ T8914] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 173.438449][ T8914] warn_alloc+0x27c/0x410 [ 173.438474][ T8914] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 173.438496][ T8914] ? __pfx_warn_alloc+0x10/0x10 [ 173.438519][ T8914] ? kasan_save_track+0x3f/0x80 [ 173.438541][ T8914] ? __kasan_kmalloc+0x9d/0xb0 [ 173.438567][ T8914] ? xsk_setsockopt+0x449/0x840 [ 173.438586][ T8914] ? do_sock_setsockopt+0x3b1/0x710 [ 173.438605][ T8914] ? __x64_sys_setsockopt+0x1ee/0x280 [ 173.438624][ T8914] ? do_syscall_64+0xf3/0x230 [ 173.438648][ T8914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.438680][ T8914] __vmalloc_node_range_noprof+0x128/0x1390 [ 173.438744][ T8914] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 173.438771][ T8914] ? __kasan_kmalloc+0x9d/0xb0 [ 173.438802][ T8914] vmalloc_user_noprof+0x74/0x80 [ 173.438839][ T8914] ? xskq_create+0xb6/0x170 [ 173.438860][ T8914] xskq_create+0xb6/0x170 [ 173.438885][ T8914] xsk_init_queue+0xa1/0x100 [ 173.438910][ T8914] xsk_setsockopt+0x449/0x840 [ 173.438939][ T8914] ? __pfx_xsk_setsockopt+0x10/0x10 [ 173.438961][ T8914] ? __pfx_aa_sk_perm+0x10/0x10 [ 173.438993][ T8914] ? aa_sock_opt_perm+0x79/0x120 [ 173.439028][ T8914] ? __pfx_xsk_setsockopt+0x10/0x10 [ 173.439047][ T8914] do_sock_setsockopt+0x3b1/0x710 [ 173.439076][ T8914] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 173.439094][ T8914] ? __fget_files+0x2a/0x420 [ 173.439124][ T8914] ? __fget_files+0x39d/0x420 [ 173.439140][ T8914] ? __fget_files+0x2a/0x420 [ 173.439175][ T8914] __x64_sys_setsockopt+0x1ee/0x280 [ 173.439204][ T8914] do_syscall_64+0xf3/0x230 [ 173.439230][ T8914] ? clear_bhb_loop+0x45/0xa0 [ 173.439255][ T8914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.439275][ T8914] RIP: 0033:0x7faece38e169 [ 173.439296][ T8914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.439318][ T8914] RSP: 002b:00007faecf187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 173.439360][ T8914] RAX: ffffffffffffffda RBX: 00007faece5b5fa0 RCX: 00007faece38e169 [ 173.439391][ T8914] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 173.439413][ T8914] RBP: 00007faece410a68 R08: 0000000000000004 R09: 0000000000000000 [ 173.439432][ T8914] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.439468][ T8914] R13: 0000000000000000 R14: 00007faece5b5fa0 R15: 00007ffd9be9b878 [ 173.439505][ T8914] [ 173.439520][ T8914] Mem-Info: [ 173.478208][ T8915] netlink: 152 bytes leftover after parsing attributes in process `syz.1.836'. [ 173.561394][ T8914] active_anon:7145 inactive_anon:0 isolated_anon:0 [ 173.561394][ T8914] active_file:1315 inactive_file:38341 isolated_file:0 [ 173.561394][ T8914] unevictable:768 dirty:72 writeback:0 [ 173.561394][ T8914] slab_reclaimable:10187 slab_unreclaimable:104177 [ 173.561394][ T8914] mapped:28567 shmem:3635 pagetables:831 [ 173.561394][ T8914] sec_pagetables:0 bounce:0 [ 173.561394][ T8914] kernel_misc_reclaimable:0 [ 173.561394][ T8914] free:1334261 free_pcp:1140 free_cma:0 [ 173.561459][ T8914] Node 0 active_anon:28580kB inactive_anon:0kB active_file:5260kB inactive_file:153292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114268kB dirty:288kB writeback:0kB shmem:13004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11644kB pagetables:3324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 173.862824][ T8914] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 173.914561][ T8914] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.996288][ T8914] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 174.015378][ T8914] Node 0 DMA32 free:1427952kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:19972kB inactive_anon:0kB active_file:5260kB inactive_file:153192kB unevictable:1536kB writepending:288kB present:3129332kB managed:2547228kB mlocked:0kB bounce:0kB free_pcp:2356kB local_pcp:1672kB free_cma:0kB [ 174.065658][ T8933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.839'. [ 174.186285][ T8914] lowmem_reserve[]: 0 0 0 0 0 [ 174.208286][ T8914] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.250556][ T8914] lowmem_reserve[]: 0 0 0 0 0 [ 174.255382][ T8914] Node 1 Normal free:3904372kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.313798][ T8914] lowmem_reserve[]: 0 0 0 0 0 [ 174.323508][ T8914] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 174.337351][ T8914] Node 0 DMA32: 105*4kB (UM) 125*8kB (UME) 243*16kB (UME) 138*32kB (UME) 101*64kB (UM) 34*128kB (UME) 19*256kB (UM) 3*512kB (M) 9*1024kB (ME) 2*2048kB (ME) 339*4096kB (M) = 1428796kB [ 174.357737][ T8914] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 174.376049][ T8914] Node 1 Normal: 209*4kB (UE) 48*8kB (UME) 43*16kB (UME) 202*32kB (UME) 89*64kB (UME) 23*128kB (UME) 11*256kB (UME) 11*512kB (UME) 6*1024kB (UM) 3*2048kB (UE) 944*4096kB (M) = 3904372kB [ 174.401015][ T8914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 174.414323][ T8914] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 174.427578][ T8914] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 174.439634][ T8914] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 174.452501][ T8914] 41048 total pagecache pages [ 174.457219][ T8914] 0 pages in swap cache [ 174.464788][ T8914] Free swap = 124996kB [ 174.473359][ T8914] Total swap = 124996kB [ 174.477567][ T8914] 2097051 pages RAM [ 174.484000][ T8914] 0 pages HighMem/MovableOnly [ 174.491177][ T8914] 428586 pages reserved [ 174.495494][ T8914] 0 pages cma reserved [ 174.600875][ T8943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.844'. [ 174.698607][ T8949] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 175.183395][ T8977] netlink: 'syz.4.852': attribute type 4 has an invalid length. [ 175.212644][ T8969] xt_CT: No such helper "pptp" [ 175.212865][ T8977] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 175.372571][ T8983] netlink: 'syz.0.857': attribute type 1 has an invalid length. [ 175.386706][ T8983] netlink: 'syz.0.857': attribute type 2 has an invalid length. [ 175.403613][ T8983] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 175.437097][ T8983] netlink: 'syz.0.857': attribute type 1 has an invalid length. [ 175.445137][ T8983] netlink: 'syz.0.857': attribute type 2 has an invalid length. [ 175.617556][ T8990] xt_ecn: cannot match TCP bits for non-tcp packets [ 176.074010][ T9004] netlink: 'syz.4.866': attribute type 1 has an invalid length. [ 176.134430][ T9006] netlink: 'syz.2.867': attribute type 1 has an invalid length. [ 176.215841][ T9006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.225713][ T9011] __nla_validate_parse: 6 callbacks suppressed [ 176.225734][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 176.243001][ T9012] netlink: 'syz.4.869': attribute type 11 has an invalid length. [ 176.330265][ T9014] dvmrp0: entered allmulticast mode [ 176.380138][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'. [ 176.396441][ T9017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.871'. [ 176.594090][ T9027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.873'. [ 176.615205][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 176.636565][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 176.677433][ T9026] netlink: 36 bytes leftover after parsing attributes in process `syz.4.873'. [ 176.768472][ T9035] tipc: Enabled bearer , priority 0 [ 176.956640][ T9035] syzkaller0: entered promiscuous mode [ 176.967293][ T9035] syzkaller0: entered allmulticast mode [ 176.974864][ T9035] tipc: Resetting bearer [ 177.033203][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.881'. [ 177.068291][ T9034] tipc: Resetting bearer [ 177.271141][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 177.299693][ T9062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.885'. [ 178.971621][ T9034] tipc: Disabling bearer [ 179.349985][ T9107] x_tables: duplicate underflow at hook 1 [ 179.584852][ T9120] veth0_to_hsr: entered promiscuous mode [ 179.657022][ T9119] veth0_to_hsr: left promiscuous mode [ 179.859695][ T9141] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 180.321490][ T9156] xt_CT: No such helper "pptp" [ 181.016348][ T9197] syzkaller0: entered promiscuous mode [ 181.061732][ T9197] syzkaller0: entered allmulticast mode [ 181.102620][ T9211] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.112220][ T9211] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.122198][ T9211] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.131648][ T9211] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.165488][ T9211] vxlan0: entered promiscuous mode [ 181.170949][ T9211] vxlan0: entered allmulticast mode [ 181.176983][ T9204] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 181.183073][ T9204] syzkaller0: Linktype set failed because interface is up [ 183.377400][ T9240] netlink: 'syz.4.937': attribute type 1 has an invalid length. [ 183.437399][ T9245] IPVS: set_ctl: invalid protocol: 29 172.30.0.1:20000 [ 183.502799][ T9240] bond4: entered promiscuous mode [ 183.514913][ T9240] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.577606][ T9252] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.587790][ T9252] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 183.605813][ T9252] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 183.631870][ T9252] bond4: (slave ip6gre1): making interface the new active one [ 183.645644][ T9252] ip6gre1: entered promiscuous mode [ 183.653497][ T9252] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 183.677207][ T9250] __nla_validate_parse: 12 callbacks suppressed [ 183.677228][ T9250] netlink: 32 bytes leftover after parsing attributes in process `syz.2.939'. [ 184.232260][ T9270] xt_CT: No such helper "pptp" [ 184.762571][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 184.856808][ T9304] openvswitch: netlink: Actions may not be safe on all matching packets [ 185.216424][ T9319] netlink: 'syz.4.958': attribute type 1 has an invalid length. [ 185.539096][ T9329] netlink: 'syz.0.961': attribute type 3 has an invalid length. [ 185.696129][ T9338] sit2: entered promiscuous mode [ 185.721096][ T9338] sit2: entered allmulticast mode [ 185.804670][ T9341] netlink: 44 bytes leftover after parsing attributes in process `syz.0.964'. [ 186.024187][ T9356] netlink: 104 bytes leftover after parsing attributes in process `syz.4.968'. [ 187.307190][ T9428] 8021q: VLANs not supported on sit0 [ 187.766361][ T9445] netlink: 'syz.0.999': attribute type 1 has an invalid length. [ 187.778370][ T9441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.997'. [ 187.815751][ T9441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.997'. [ 187.989082][ T9445] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.015809][ T9446] bond6: (slave ip6gretap2): making interface the new active one [ 188.025183][ T9446] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 188.040497][ T9462] xt_hashlimit: overflow, rate too high: 0 [ 188.075424][ T9462] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1004'. [ 188.134122][ T9464] xt_hashlimit: overflow, rate too high: 0 [ 188.284116][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 188.320850][ T9477] vlan1: entered allmulticast mode [ 188.331965][ T9477] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 188.648823][ T9494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.808468][ T9501] bridge_slave_0: left allmulticast mode [ 188.814178][ T9501] bridge_slave_0: left promiscuous mode [ 188.820171][ T9501] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.882389][ T9501] bridge_slave_1: left allmulticast mode [ 188.917222][ T9501] bridge_slave_1: left promiscuous mode [ 188.947852][ T9510] sctp: [Deprecated]: syz.3.1016 (pid 9510) Use of int in max_burst socket option. [ 188.947852][ T9510] Use struct sctp_assoc_value instead [ 188.948592][ T9501] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.066210][ T9501] bond0: (slave bond_slave_0): Releasing backup interface [ 189.103490][ T9501] bond0: (slave bond_slave_1): Releasing backup interface [ 189.135137][ T9501] team_slave_0: left promiscuous mode [ 189.162011][ T9501] team0: Port device team_slave_0 removed [ 189.175196][ T9501] team_slave_1: left promiscuous mode [ 189.200444][ T9501] team0: Port device team_slave_1 removed [ 189.207420][ T9501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.215503][ T9501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.224534][ T9501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.247748][ T9501] bond0: (slave wlan1): Releasing backup interface [ 189.266710][ T6493] lo speed is unknown, defaulting to 1000 [ 189.287199][ T9502] team0: Mode changed to "loadbalance" [ 189.317350][ T9518] geneve3: entered promiscuous mode [ 189.324109][ T9518] geneve3: entered allmulticast mode [ 189.446447][ T9527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1020'. [ 189.595285][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 189.899135][ T9552] nbd1: detected capacity change from 0 to 4096 [ 189.944248][ T9555] Cannot find del_set index 17 as target [ 189.965678][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 189.975049][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 189.993879][ T9554] netlink: 'syz.0.1028': attribute type 1 has an invalid length. [ 190.003679][ T9554] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1028'. [ 190.028368][ T9561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1029'. [ 190.384299][ T9584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1035'. [ 190.497655][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1036'. [ 190.513379][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1036'. [ 190.536107][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1036'. [ 190.602846][ T5851] block nbd1: Receive control failed (result -104) [ 192.042380][ T9680] Bluetooth: MGMT ver 1.23 [ 192.240992][ T9688] gretap0: entered promiscuous mode [ 192.256732][ T9688] 0ªî{X¹¦: renamed from gretap0 [ 192.290571][ T9688] 0ªî{X¹¦: left promiscuous mode [ 192.296018][ T9688] 0ªî{X¹¦: entered allmulticast mode [ 192.317920][ T9688] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 192.942280][ T9728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.660225][ T9749] netlink: 'syz.4.1081': attribute type 4 has an invalid length. [ 193.818561][ T9762] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20002 [ 193.877305][ T9760] tipc: Enabled bearer , priority 0 [ 194.052822][ T9773] netlink: 'syz.2.1087': attribute type 3 has an invalid length. [ 194.072685][ T9773] netlink: 'syz.2.1087': attribute type 2 has an invalid length. [ 194.092125][ T9760] syzkaller0: entered promiscuous mode [ 194.106445][ T9760] syzkaller0: entered allmulticast mode [ 194.115653][ T9760] tipc: Resetting bearer [ 194.165495][ T9779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.212760][ T9779] openvswitch: netlink: IPv4 tunnel dst address is zero [ 194.280349][ T9758] tipc: Resetting bearer [ 195.827510][ T9758] tipc: Disabling bearer [ 195.843207][ T9794] netlink: 'syz.4.1093': attribute type 29 has an invalid length. [ 196.158400][ T9817] netlink: 'syz.3.1098': attribute type 1 has an invalid length. [ 196.180357][ T9817] __nla_validate_parse: 51 callbacks suppressed [ 196.180377][ T9817] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1098'. [ 196.411294][ T9837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1102'. [ 196.619605][ T9849] netlink: 'syz.4.1104': attribute type 29 has an invalid length. [ 196.636837][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 196.697607][ T9849] netlink: 'syz.4.1104': attribute type 29 has an invalid length. [ 196.719536][ T9857] netlink: 'syz.4.1104': attribute type 29 has an invalid length. [ 196.739119][ T9848] tipc: Enabling of bearer rejected, failed to enable media [ 196.750388][ T9856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1107'. [ 196.797151][ T6493] IPVS: starting estimator thread 0... [ 196.829463][ T9848] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1105'. [ 196.862312][ T9848] netlink: 'syz.3.1105': attribute type 9 has an invalid length. [ 196.888928][ T9861] IPVS: using max 25 ests per chain, 60000 per kthread [ 197.349621][ T9876] team0: No ports can be present during mode change [ 197.599568][ T9901] netlink: 'syz.3.1118': attribute type 11 has an invalid length. [ 197.611196][ T9898] netlink: 'syz.0.1115': attribute type 1 has an invalid length. [ 197.834094][ T9911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1120'. [ 198.013165][ T9923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1123'. [ 198.118647][ T9915] syzkaller1: entered promiscuous mode [ 198.124491][ T9915] syzkaller1: entered allmulticast mode [ 198.142491][ T9929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1123'. [ 198.338348][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 198.365404][ T9935] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 198.423111][ T9945] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 198.443337][ T9939] netlink: 'syz.4.1126': attribute type 10 has an invalid length. [ 198.508132][ T9945] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 198.583876][ T9939] syz_tun: entered promiscuous mode [ 198.638424][ T9939] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 198.654349][ T9957] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1131'. [ 198.895662][ T9969] netlink: 1008 bytes leftover after parsing attributes in process `syz.4.1136'. [ 199.004219][ T9970] lo speed is unknown, defaulting to 1000 [ 200.036977][T10007] veth1_macvtap: left promiscuous mode [ 200.081431][T10011] 8021q: VLANs not supported on tunl0 [ 200.159435][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 200.219170][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 200.234769][T10016] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 200.308205][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 200.515791][T10027] netlink: 'syz.3.1156': attribute type 1 has an invalid length. [ 200.755735][T10046] ip6gre1: entered allmulticast mode [ 201.250449][T10074] netlink: 'syz.4.1171': attribute type 1 has an invalid length. [ 201.288994][T10074] 8021q: adding VLAN 0 to HW filter on device bond5 [ 201.315601][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 201.335878][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 201.370911][T10074] bond5: (slave ip6gretap3): making interface the new active one [ 201.379960][T10074] bond5: (slave ip6gretap3): Enslaving as an active interface with an up link [ 201.428283][T10083] vlan0: entered promiscuous mode [ 201.433618][T10083] bond5: entered promiscuous mode [ 201.438815][T10083] ip6gretap3: entered promiscuous mode [ 201.444778][T10083] vlan0: entered allmulticast mode [ 201.454135][T10083] bond5: entered allmulticast mode [ 201.460583][T10083] ip6gretap3: entered allmulticast mode [ 201.469397][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 201.640459][T10094] __nla_validate_parse: 5 callbacks suppressed [ 201.640480][T10094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1176'. [ 201.735311][T10099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1177'. [ 201.756719][T10099] netlink: 1008 bytes leftover after parsing attributes in process `syz.0.1177'. [ 201.820170][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1178'. [ 201.857898][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1178'. [ 201.872445][T10103] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1178'. [ 201.981685][T10112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1180'. [ 205.458190][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 213.618244][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 216.980558][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 216.980570][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 216.998045][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 217.316911][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.326494][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.334838][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.344869][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.349035][ T5152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.355124][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.367041][ T5152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.367740][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.389313][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.397872][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.440667][T10160] lo speed is unknown, defaulting to 1000 [ 217.614743][T10162] lo speed is unknown, defaulting to 1000 [ 217.874280][T10160] chnl_net:caif_netlink_parms(): no params data found [ 218.143722][T10160] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.170471][T10160] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.177826][T10160] bridge_slave_0: entered allmulticast mode [ 218.200987][T10160] bridge_slave_0: entered promiscuous mode [ 218.220071][T10160] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.227634][T10160] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.248432][T10160] bridge_slave_1: entered allmulticast mode [ 218.259765][T10160] bridge_slave_1: entered promiscuous mode [ 218.451451][T10160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.482221][T10160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.705570][ T5857] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.729566][ T5857] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.738693][ T5857] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.743783][T10160] team0: Port device team_slave_0 added [ 218.763862][ T5857] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.776983][ T5857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.791741][T10160] team0: Port device team_slave_1 added [ 218.835998][ T5857] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 218.851308][ T5857] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 218.859743][ T5152] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 218.862732][ T5857] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 218.870178][ T5152] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 218.888847][ T5857] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 218.896210][ T5857] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 218.904548][ T5152] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 218.912509][ T5857] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 218.921346][ T5857] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 219.005698][T10162] chnl_net:caif_netlink_parms(): no params data found [ 219.035329][T10160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.043404][T10160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.069765][T10160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.090916][T10160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.097907][T10160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.124726][T10160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.176174][T10175] lo speed is unknown, defaulting to 1000 [ 219.343538][T10160] hsr_slave_0: entered promiscuous mode [ 219.350691][T10160] hsr_slave_1: entered promiscuous mode [ 219.357128][T10160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.365327][T10160] Cannot create hsr debugfs directory [ 219.425791][T10162] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.439999][T10162] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.447275][T10162] bridge_slave_0: entered allmulticast mode [ 219.455066][T10162] bridge_slave_0: entered promiscuous mode [ 219.461097][ T5858] Bluetooth: hci5: command tx timeout [ 219.461805][ T5152] Bluetooth: hci6: command tx timeout [ 219.470657][T10162] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.480024][T10162] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.487536][T10162] bridge_slave_1: entered allmulticast mode [ 219.495240][T10162] bridge_slave_1: entered promiscuous mode [ 219.532906][T10178] lo speed is unknown, defaulting to 1000 [ 219.622187][T10162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.672547][T10162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.790578][T10162] team0: Port device team_slave_0 added [ 219.824607][T10162] team0: Port device team_slave_1 added [ 219.843410][T10180] lo speed is unknown, defaulting to 1000 [ 219.956431][T10162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.964522][T10162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.990594][T10162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.003560][T10162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.010740][T10162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.043522][T10162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.045093][ T11] block nbd1: Possible stuck request ffff888025cc0000: control (read@0,4096B). Runtime 30 seconds [ 220.309183][T10162] hsr_slave_0: entered promiscuous mode [ 220.315783][T10162] hsr_slave_1: entered promiscuous mode [ 220.322415][T10162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.330304][T10162] Cannot create hsr debugfs directory [ 220.343730][T10175] chnl_net:caif_netlink_parms(): no params data found [ 220.706402][T10175] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.713957][T10175] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.721942][T10175] bridge_slave_0: entered allmulticast mode [ 220.729968][T10175] bridge_slave_0: entered promiscuous mode [ 220.765209][T10175] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.773464][T10175] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.781337][T10175] bridge_slave_1: entered allmulticast mode [ 220.790685][T10175] bridge_slave_1: entered promiscuous mode [ 220.819515][ T5152] Bluetooth: hci7: command tx timeout [ 220.907390][T10175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.968868][T10175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.978358][ T5858] Bluetooth: hci8: command tx timeout [ 220.986949][ T5152] Bluetooth: hci9: command tx timeout [ 221.055437][T10175] team0: Port device team_slave_0 added [ 221.095367][T10175] team0: Port device team_slave_1 added [ 221.143091][T10178] chnl_net:caif_netlink_parms(): no params data found [ 221.184582][T10175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.195828][T10175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.224125][T10175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.248487][T10180] chnl_net:caif_netlink_parms(): no params data found [ 221.262439][T10175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.269701][T10175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.296313][T10175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.447124][T10175] hsr_slave_0: entered promiscuous mode [ 221.454385][T10175] hsr_slave_1: entered promiscuous mode [ 221.461545][T10175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.469393][T10175] Cannot create hsr debugfs directory [ 221.519616][T10178] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.527691][T10178] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.536793][T10178] bridge_slave_0: entered allmulticast mode [ 221.538289][ T5152] Bluetooth: hci6: command tx timeout [ 221.544004][ T5858] Bluetooth: hci5: command tx timeout [ 221.551036][T10178] bridge_slave_0: entered promiscuous mode [ 221.564551][T10178] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.571890][T10178] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.581819][T10178] bridge_slave_1: entered allmulticast mode [ 221.589735][T10178] bridge_slave_1: entered promiscuous mode [ 221.682423][T10178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.701436][T10180] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.709291][T10180] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.716494][T10180] bridge_slave_0: entered allmulticast mode [ 221.724353][T10180] bridge_slave_0: entered promiscuous mode [ 221.734495][T10178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.773742][T10180] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.783135][T10180] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.791218][T10180] bridge_slave_1: entered allmulticast mode [ 221.798859][T10180] bridge_slave_1: entered promiscuous mode [ 221.850538][T10178] team0: Port device team_slave_0 added [ 221.884133][T10180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.896916][T10178] team0: Port device team_slave_1 added [ 221.927595][T10180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.970807][T10178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.977806][T10178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.006329][T10178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.041195][T10178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.048881][T10178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.075576][T10178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.097752][T10180] team0: Port device team_slave_0 added [ 222.130985][T10180] team0: Port device team_slave_1 added [ 222.234997][T10180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.242647][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.268950][T10180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.281969][T10180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.289330][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.315338][T10180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.355951][T10178] hsr_slave_0: entered promiscuous mode [ 222.362789][T10178] hsr_slave_1: entered promiscuous mode [ 222.369800][T10178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.377401][T10178] Cannot create hsr debugfs directory [ 222.470158][T10180] hsr_slave_0: entered promiscuous mode [ 222.476916][T10180] hsr_slave_1: entered promiscuous mode [ 222.484406][T10180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.492515][T10180] Cannot create hsr debugfs directory [ 222.909210][ T5858] Bluetooth: hci7: command tx timeout [ 223.058327][ T5152] Bluetooth: hci8: command tx timeout [ 223.065060][ T5858] Bluetooth: hci9: command tx timeout [ 223.618294][ T5858] Bluetooth: hci5: command tx timeout [ 223.618526][ T5152] Bluetooth: hci6: command tx timeout [ 224.978781][ T5152] Bluetooth: hci7: command tx timeout [ 225.146070][ T5152] Bluetooth: hci9: command tx timeout [ 225.146247][ T5858] Bluetooth: hci8: command tx timeout [ 225.698261][ T5858] Bluetooth: hci5: command tx timeout [ 225.708263][ T5858] Bluetooth: hci6: command tx timeout [ 227.058284][ T5858] Bluetooth: hci7: command tx timeout [ 227.218680][ T5858] Bluetooth: hci9: command tx timeout [ 227.218689][ T5152] Bluetooth: hci8: command tx timeout [ 230.263352][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 250.009277][ T5212] udevd[5212]: worker [5859] /devices/virtual/block/nbd1 is taking a long time [ 250.101442][ T11] block nbd1: Possible stuck request ffff888025cc0000: control (read@0,4096B). Runtime 60 seconds [ 264.178281][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 277.760138][ T5152] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 277.772883][ T5152] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 277.784669][ T5152] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 277.793770][ T55] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 277.804699][ T5152] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 277.808552][ T55] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 277.822005][ T5152] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 277.822547][ T55] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 277.842622][ T5152] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 277.852697][ T5152] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 277.930788][T10211] lo speed is unknown, defaulting to 1000 [ 278.099174][T10213] lo speed is unknown, defaulting to 1000 [ 278.371113][T10211] chnl_net:caif_netlink_parms(): no params data found [ 278.950135][T10211] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.957415][T10211] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.965053][T10211] bridge_slave_0: entered allmulticast mode [ 278.990129][T10211] bridge_slave_0: entered promiscuous mode [ 279.095704][T10211] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.108451][T10211] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.115844][T10211] bridge_slave_1: entered allmulticast mode [ 279.124206][T10211] bridge_slave_1: entered promiscuous mode [ 279.209797][ T5857] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 279.218912][ T5857] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 279.244061][T10211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.255407][ T5857] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 279.270596][ T5857] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 279.291608][ T55] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 279.295325][T10211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.321882][ T55] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 279.333657][ T55] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 279.348659][ T55] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 279.361595][ T55] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 279.380302][ T55] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 279.406140][T10213] chnl_net:caif_netlink_parms(): no params data found [ 279.442319][ T55] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 279.451497][ T55] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 279.459993][ T55] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 279.476999][T10211] team0: Port device team_slave_0 added [ 279.481251][ T55] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 279.487637][T10211] team0: Port device team_slave_1 added [ 279.498220][ T55] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 279.653507][T10211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.660948][T10211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.687589][T10211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.701421][T10211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.708565][T10211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.734681][T10211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.748258][T10226] lo speed is unknown, defaulting to 1000 [ 279.858744][ T55] Bluetooth: hci10: command tx timeout [ 279.888240][T10213] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.895453][T10213] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.914621][T10213] bridge_slave_0: entered allmulticast mode [ 279.924909][T10213] bridge_slave_0: entered promiscuous mode [ 279.938697][ T55] Bluetooth: hci11: command tx timeout [ 280.008685][T10213] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.015931][T10213] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.024122][T10213] bridge_slave_1: entered allmulticast mode [ 280.032339][T10213] bridge_slave_1: entered promiscuous mode [ 280.076525][T10229] lo speed is unknown, defaulting to 1000 [ 280.080331][T10213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.096699][T10213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.113944][T10211] hsr_slave_0: entered promiscuous mode [ 280.121266][T10211] hsr_slave_1: entered promiscuous mode [ 280.129488][T10211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.137103][T10211] Cannot create hsr debugfs directory [ 280.178999][ T11] block nbd1: Possible stuck request ffff888025cc0000: control (read@0,4096B). Runtime 90 seconds [ 280.338927][T10213] team0: Port device team_slave_0 added [ 280.373777][T10213] team0: Port device team_slave_1 added [ 280.418846][T10231] lo speed is unknown, defaulting to 1000 [ 280.600250][T10213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.607265][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.647108][T10213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.667529][T10213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.674910][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.701765][T10213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.843057][T10213] hsr_slave_0: entered promiscuous mode [ 280.855584][T10213] hsr_slave_1: entered promiscuous mode [ 280.862462][T10213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.870689][T10213] Cannot create hsr debugfs directory [ 281.341925][T10226] chnl_net:caif_netlink_parms(): no params data found [ 281.378116][ T55] Bluetooth: hci12: command tx timeout [ 281.422520][T10231] chnl_net:caif_netlink_parms(): no params data found [ 281.462743][ T55] Bluetooth: hci13: command tx timeout [ 281.538431][ T55] Bluetooth: hci14: command tx timeout [ 281.627568][T10229] chnl_net:caif_netlink_parms(): no params data found [ 281.816760][T10226] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.826656][T10226] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.834400][T10226] bridge_slave_0: entered allmulticast mode [ 281.842721][T10226] bridge_slave_0: entered promiscuous mode [ 281.874331][T10231] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.881994][T10231] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.891125][T10231] bridge_slave_0: entered allmulticast mode [ 281.899479][T10231] bridge_slave_0: entered promiscuous mode [ 281.907658][T10226] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.915471][T10226] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.922997][T10226] bridge_slave_1: entered allmulticast mode [ 281.931143][T10226] bridge_slave_1: entered promiscuous mode [ 281.938737][ T55] Bluetooth: hci10: command tx timeout [ 281.968597][T10231] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.975789][T10231] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.983737][T10231] bridge_slave_1: entered allmulticast mode [ 281.994741][T10231] bridge_slave_1: entered promiscuous mode [ 282.021047][ T55] Bluetooth: hci11: command tx timeout [ 282.120587][T10229] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.127865][T10229] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.135916][T10229] bridge_slave_0: entered allmulticast mode [ 282.145215][T10229] bridge_slave_0: entered promiscuous mode [ 282.156801][T10231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.170670][T10231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.183396][T10226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.195787][T10229] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.203424][T10229] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.211733][T10229] bridge_slave_1: entered allmulticast mode [ 282.219971][T10229] bridge_slave_1: entered promiscuous mode [ 282.276115][T10226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.338730][T10231] team0: Port device team_slave_0 added [ 282.380132][T10231] team0: Port device team_slave_1 added [ 282.399493][T10229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.414347][T10226] team0: Port device team_slave_0 added [ 282.460072][T10229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.489700][T10226] team0: Port device team_slave_1 added [ 282.579653][T10231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.586641][T10231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.613617][T10231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.632346][T10229] team0: Port device team_slave_0 added [ 282.642241][T10229] team0: Port device team_slave_1 added [ 282.672627][T10226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.679942][T10226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.706327][T10226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.719195][T10231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.726166][T10231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.752919][T10231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.790815][T10226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.797820][T10226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.824047][T10226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.881822][T10229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.896067][T10229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.922357][T10229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.935643][T10229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.944209][T10229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.973522][T10229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.110283][T10226] hsr_slave_0: entered promiscuous mode [ 283.118819][T10226] hsr_slave_1: entered promiscuous mode [ 283.125376][T10226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.133485][T10226] Cannot create hsr debugfs directory [ 283.160077][T10231] hsr_slave_0: entered promiscuous mode [ 283.166628][T10231] hsr_slave_1: entered promiscuous mode [ 283.173502][T10231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.181364][T10231] Cannot create hsr debugfs directory [ 283.235057][T10229] hsr_slave_0: entered promiscuous mode [ 283.244462][T10229] hsr_slave_1: entered promiscuous mode [ 283.252564][T10229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.260690][T10229] Cannot create hsr debugfs directory [ 283.458389][ T55] Bluetooth: hci12: command tx timeout [ 283.538416][ T55] Bluetooth: hci13: command tx timeout [ 283.618166][ T55] Bluetooth: hci14: command tx timeout [ 284.028876][ T55] Bluetooth: hci10: command tx timeout [ 284.098202][ T55] Bluetooth: hci11: command tx timeout [ 285.538570][ T55] Bluetooth: hci12: command tx timeout [ 285.618707][ T55] Bluetooth: hci13: command tx timeout [ 285.698480][ T55] Bluetooth: hci14: command tx timeout [ 286.098691][ T55] Bluetooth: hci10: command tx timeout [ 286.178321][ T55] Bluetooth: hci11: command tx timeout [ 287.618288][ T55] Bluetooth: hci12: command tx timeout [ 287.698850][ T55] Bluetooth: hci13: command tx timeout [ 287.778204][ T55] Bluetooth: hci14: command tx timeout [ 310.258904][ T11] block nbd1: Possible stuck request ffff888025cc0000: control (read@0,4096B). Runtime 120 seconds [ 324.498518][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 332.658175][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 338.079620][ T5858] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 338.089993][ T5858] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 338.100871][ T5858] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 338.110541][ T5858] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 338.124711][ T5858] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 338.157494][ T5858] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 338.167385][ T5858] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 338.175912][ T5858] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 338.185204][ T5858] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 338.193588][ T5858] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 338.232910][T10256] lo speed is unknown, defaulting to 1000 [ 338.422974][T10258] lo speed is unknown, defaulting to 1000 [ 338.719037][T10256] chnl_net:caif_netlink_parms(): no params data found [ 339.222320][T10256] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.234295][ T55] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 339.243986][ T55] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 339.252638][ T55] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 339.260084][T10256] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.261368][ T55] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 339.267582][T10256] bridge_slave_0: entered allmulticast mode [ 339.275458][ T55] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 339.350594][T10256] bridge_slave_0: entered promiscuous mode [ 339.396476][T10256] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.418103][T10256] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.425453][T10256] bridge_slave_1: entered allmulticast mode [ 339.448223][T10256] bridge_slave_1: entered promiscuous mode [ 339.590018][ T5858] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 339.600440][ T5858] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 339.606117][T10256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.635862][T10256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.649183][ T5858] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 339.658457][ T5858] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 339.668141][ T5858] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 339.717292][ T55] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 339.726428][ T55] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 339.735649][ T55] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 339.745005][ T55] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 339.752924][ T55] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 339.800167][T10270] lo speed is unknown, defaulting to 1000 [ 339.867370][ T5858] Bluetooth: hci6: command 0x0406 tx timeout [ 339.867387][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 339.892766][T10256] team0: Port device team_slave_0 added [ 339.922442][T10256] team0: Port device team_slave_1 added [ 340.044464][T10256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.066678][T10256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.095965][T10256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.113994][T10256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.121091][T10256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.147239][T10256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.175624][T10272] lo speed is unknown, defaulting to 1000 [ 340.181874][T10258] chnl_net:caif_netlink_parms(): no params data found [ 340.181948][ T5152] Bluetooth: hci15: command tx timeout [ 340.258461][ T5152] Bluetooth: hci16: command tx timeout [ 340.330582][T10256] hsr_slave_0: entered promiscuous mode [ 340.338717][ T11] block nbd1: Possible stuck request ffff888025cc0000: control (read@0,4096B). Runtime 150 seconds [ 340.345357][T10256] hsr_slave_1: entered promiscuous mode [ 340.359625][T10256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.367220][T10256] Cannot create hsr debugfs directory [ 340.485090][T10275] lo speed is unknown, defaulting to 1000 [ 340.830391][T10258] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.837665][T10258] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.845799][T10258] bridge_slave_0: entered allmulticast mode [ 340.854162][T10258] bridge_slave_0: entered promiscuous mode [ 340.912949][T10258] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.921514][T10258] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.929093][T10258] bridge_slave_1: entered allmulticast mode [ 340.936547][T10258] bridge_slave_1: entered promiscuous mode [ 341.037235][T10258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.080517][T10258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.173223][T10258] team0: Port device team_slave_0 added [ 341.251411][T10258] team0: Port device team_slave_1 added [ 341.365722][T10270] chnl_net:caif_netlink_parms(): no params data found [ 341.379280][ T5152] Bluetooth: hci17: command tx timeout [ 341.496910][T10258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.504590][T10258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.532136][T10258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.582116][T10258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.589333][T10258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.617403][T10258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.658460][T10272] chnl_net:caif_netlink_parms(): no params data found [ 341.779354][ T5152] Bluetooth: hci18: command tx timeout [ 341.788479][ T5152] Bluetooth: hci19: command tx timeout [ 341.938362][T10258] hsr_slave_0: entered promiscuous mode [ 341.945319][T10258] hsr_slave_1: entered promiscuous mode [ 341.953230][T10258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.963666][T10258] Cannot create hsr debugfs directory [ 342.072076][T10270] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.079621][T10270] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.086967][T10270] bridge_slave_0: entered allmulticast mode [ 342.097823][T10270] bridge_slave_0: entered promiscuous mode [ 342.107279][T10270] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.117742][T10270] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.125893][T10270] bridge_slave_1: entered allmulticast mode [ 342.134531][T10270] bridge_slave_1: entered promiscuous mode [ 342.160746][T10275] chnl_net:caif_netlink_parms(): no params data found [ 342.259055][ T5152] Bluetooth: hci15: command tx timeout [ 342.297092][T10272] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.304828][T10272] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.312919][T10272] bridge_slave_0: entered allmulticast mode [ 342.321444][T10272] bridge_slave_0: entered promiscuous mode [ 342.330388][T10272] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.337544][T10272] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.344946][ T5152] Bluetooth: hci16: command tx timeout [ 342.350966][T10272] bridge_slave_1: entered allmulticast mode [ 342.359482][T10272] bridge_slave_1: entered promiscuous mode [ 342.406697][T10270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.490396][T10270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.533926][T10272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.610658][T10272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.653246][T10270] team0: Port device team_slave_0 added [ 342.665309][T10270] team0: Port device team_slave_1 added [ 342.713009][T10275] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.720401][T10275] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.728617][T10275] bridge_slave_0: entered allmulticast mode [ 342.736791][T10275] bridge_slave_0: entered promiscuous mode [ 342.786987][T10275] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.794905][T10275] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.802887][T10275] bridge_slave_1: entered allmulticast mode [ 342.811737][T10275] bridge_slave_1: entered promiscuous mode [ 342.850910][T10272] team0: Port device team_slave_0 added [ 342.876246][T10270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.883883][T10270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.916410][T10270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.932078][T10270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.939555][T10270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.967128][T10270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.995313][T10272] team0: Port device team_slave_1 added [ 343.039874][T10275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.122794][T10275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.159934][T10272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.166943][T10272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.194363][T10272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.209555][T10272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.216537][T10272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.242952][T10272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.284638][T10270] hsr_slave_0: entered promiscuous mode [ 343.291930][T10270] hsr_slave_1: entered promiscuous mode [ 343.299336][T10270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.306932][T10270] Cannot create hsr debugfs directory [ 343.349878][T10275] team0: Port device team_slave_0 added [ 343.409711][T10275] team0: Port device team_slave_1 added [ 343.458179][ T5851] Bluetooth: hci17: command tx timeout [ 343.512036][T10272] hsr_slave_0: entered promiscuous mode [ 343.524659][T10272] hsr_slave_1: entered promiscuous mode [ 343.532062][T10272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.541937][T10272] Cannot create hsr debugfs directory [ 343.595389][T10275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.602499][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.629561][T10275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.653880][T10275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.661282][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.689136][T10275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.858606][ T5851] Bluetooth: hci19: command tx timeout [ 343.858934][ T55] Bluetooth: hci18: command tx timeout [ 343.891836][T10275] hsr_slave_0: entered promiscuous mode [ 343.899988][T10275] hsr_slave_1: entered promiscuous mode [ 343.906188][T10275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.914073][T10275] Cannot create hsr debugfs directory [ 344.339437][ T55] Bluetooth: hci15: command tx timeout [ 344.418663][ T55] Bluetooth: hci16: command tx timeout [ 344.981097][ T55] Bluetooth: hci7: command 0x0406 tx timeout [ 344.981118][ T5851] Bluetooth: hci8: command 0x0406 tx timeout [ 344.981162][ T5851] Bluetooth: hci9: command 0x0406 tx timeout [ 345.538569][ T5857] Bluetooth: hci17: command tx timeout [ 345.938395][ T5858] Bluetooth: hci18: command tx timeout [ 345.945347][ T5857] Bluetooth: hci19: command tx timeout [ 346.418801][ T5857] Bluetooth: hci15: command tx timeout [ 346.498418][ T5857] Bluetooth: hci16: command tx timeout [ 347.618121][ T5857] Bluetooth: hci17: command tx timeout [ 348.021070][ T5857] Bluetooth: hci19: command tx timeout [ 348.021130][ T5858] Bluetooth: hci18: command tx timeout [ 351.218978][ T31] INFO: task syz.1.1175:10096 blocked for more than 143 seconds. [ 351.226862][ T31] Not tainted 6.15.0-rc1-syzkaller-00188-g88fa80021b77 #0 [ 351.237073][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.246191][ T31] task:syz.1.1175 state:D stack:26120 pid:10096 tgid:10088 ppid:5862 task_flags:0x480140 flags:0x00000004 [ 351.258680][ T31] Call Trace: [ 351.261994][ T31] [ 351.264932][ T31] __schedule+0x1b88/0x5240 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 351.269818][ T31] ? __lock_acquire+0xad5/0xd80 [ 351.274730][ T31] ? schedule+0x163/0x360 [ 351.281021][ T31] ? __pfx___schedule+0x10/0x10 [ 351.285950][ T31] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 351.292582][ T31] ? schedule+0x90/0x360 [ 351.297068][ T31] ? schedule+0x90/0x360 [ 351.307932][ T31] schedule+0x163/0x360 [ 351.312150][ T31] blk_mq_freeze_queue_wait+0xf8/0x180 [ 351.351014][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 351.386281][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 351.398061][ T31] queue_limits_commit_update_frozen+0x6e/0x330 [ 351.404413][ T31] nbd_set_size+0x602/0x8a0 [ 351.409251][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 351.414343][ T31] ? __mutex_lock+0x380/0x10c0 [ 351.419216][ T31] ? nla_memcpy+0x5a/0xb0 [ 351.423604][ T31] nbd_genl_size_set+0x334/0x410 [ 351.428721][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 351.434230][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 351.440714][ T31] ? bpf_lsm_capable+0x9/0x10 [ 351.445745][ T31] ? security_capable+0x7e/0x2d0 [ 351.450901][ T31] ? radix_tree_lookup+0x23b/0x290 [ 351.456063][ T31] nbd_genl_reconfigure+0x4b7/0x1c50 [ 351.462091][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 351.468005][ T31] ? __nla_parse+0x40/0x60 [ 351.472475][ T31] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 351.479041][ T31] genl_rcv_msg+0xb38/0xf00 [ 351.483607][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.488822][ T31] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 351.494761][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.501224][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 351.506493][ T31] ? __lock_acquire+0xad5/0xd80 [ 351.511614][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 351.517423][ T31] netlink_rcv_skb+0x208/0x480 [ 351.522431][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.527493][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.533044][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.538493][ T31] genl_rcv+0x28/0x40 [ 351.542516][ T31] netlink_unicast+0x7f8/0x9a0 [ 351.547652][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 351.553371][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 351.560034][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.565380][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 351.570990][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.576324][ T31] __sock_sendmsg+0x221/0x270 [ 351.581136][ T31] ____sys_sendmsg+0x523/0x860 [ 351.585958][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.591418][ T31] ? __fget_files+0x2a/0x420 [ 351.596048][ T31] ? __fget_files+0x2a/0x420 [ 351.600864][ T31] __sys_sendmsg+0x271/0x360 [ 351.605500][ T31] ? __pfx_futex_wake+0x10/0x10 [ 351.611330][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 351.616490][ T31] ? fput+0x9b/0xd0 [ 351.621245][ T31] ? do_syscall_64+0xb6/0x230 [ 351.625978][ T31] do_syscall_64+0xf3/0x230 [ 351.631000][ T31] ? clear_bhb_loop+0x45/0xa0 [ 351.635719][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.642334][ T31] RIP: 0033:0x7faece38e169 [ 351.646800][ T31] RSP: 002b:00007faecf166038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.656300][ T31] RAX: ffffffffffffffda RBX: 00007faece5b6080 RCX: 00007faece38e169 [ 351.664952][ T31] RDX: 0000000024044880 RSI: 0000200000001380 RDI: 0000000000000004 [ 351.674432][ T31] RBP: 00007faece410a68 R08: 0000000000000000 R09: 0000000000000000 [ 351.682979][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.691416][ T31] R13: 0000000000000000 R14: 00007faece5b6080 R15: 00007ffd9be9b878 [ 351.700081][ T31] [ 351.703204][ T31] INFO: task syz.2.1176:10094 blocked for more than 143 seconds. [ 351.711444][ T31] Not tainted 6.15.0-rc1-syzkaller-00188-g88fa80021b77 #0 [ 351.719603][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.735623][ T31] task:syz.2.1176 state:D stack:24424 pid:10094 tgid:10093 ppid:5848 task_flags:0x400140 flags:0x00000004 [ 351.747779][ T31] Call Trace: [ 351.751451][ T31] [ 351.754435][ T31] __schedule+0x1b88/0x5240 [ 351.759184][ T31] ? schedule+0x163/0x360 [ 351.763556][ T31] ? __pfx___schedule+0x10/0x10 [ 351.768778][ T31] ? schedule+0x90/0x360 [ 351.773101][ T31] ? schedule+0x90/0x360 [ 351.777373][ T31] schedule+0x163/0x360 [ 351.784625][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 351.790523][ T31] schedule_preempt_disabled+0x13/0x30 [ 351.796033][ T31] __mutex_lock+0x805/0x10c0 [ 351.801310][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 351.806110][ T31] ? genl_rcv_msg+0x125/0xf00 [ 351.811317][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 351.816377][ T31] ? 0xffffffffa0000948 [ 351.821085][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 351.827303][ T31] ? kernel_text_address+0xa7/0xe0 [ 351.832941][ T31] ? __kernel_text_address+0xd/0x40 [ 351.838903][ T31] ? radix_tree_lookup+0x23b/0x290 [ 351.844073][ T31] genl_rcv_msg+0x125/0xf00 [ 351.849296][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.854670][ T31] ? stack_trace_save+0x11a/0x1d0 [ 351.859980][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 351.865402][ T31] ? stack_depot_save_flags+0x44/0x940 [ 351.871010][ T31] ? stack_trace_snprint+0x71/0xf0 [ 351.876198][ T31] ? __lock_acquire+0xad5/0xd80 [ 351.881506][ T31] netlink_rcv_skb+0x208/0x480 [ 351.886325][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.891789][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.897166][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.902602][ T31] genl_rcv+0x28/0x40 [ 351.906623][ T31] netlink_unicast+0x7f8/0x9a0 [ 351.911587][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 351.917022][ T31] ? skb_put+0x114/0x1f0 [ 351.921482][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 351.926316][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.931794][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 351.936785][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.942779][ T31] __sock_sendmsg+0x221/0x270 [ 351.947516][ T31] __sys_sendto+0x365/0x4c0 [ 351.952258][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 351.957646][ T31] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 351.963090][ T31] __x64_sys_sendto+0xde/0x100 [ 351.967928][ T31] do_syscall_64+0xf3/0x230 [ 351.972485][ T31] ? clear_bhb_loop+0x45/0xa0 [ 351.977203][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.983399][ T31] RIP: 0033:0x7facf538fffc [ 351.988218][ T31] RSP: 002b:00007facf621aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 351.996669][ T31] RAX: ffffffffffffffda RBX: 00007facf621afc0 RCX: 00007facf538fffc [ 352.004939][ T31] RDX: 0000000000000024 RSI: 00007facf621b010 RDI: 000000000000000b [ 352.013092][ T31] RBP: 0000000000000000 R08: 00007facf621af14 R09: 000000000000000c [ 352.021352][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 352.029421][ T31] R13: 00007facf621af68 R14: 00007facf621b010 R15: 0000000000000000 [ 352.037446][ T31] [ 352.040743][ T31] INFO: task syz.2.1176:10095 blocked for more than 144 seconds. [ 352.048618][ T31] Not tainted 6.15.0-rc1-syzkaller-00188-g88fa80021b77 #0 [ 352.056321][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.065407][ T31] task:syz.2.1176 state:D stack:26400 pid:10095 tgid:10093 ppid:5848 task_flags:0x400140 flags:0x00000004 [ 352.077480][ T31] Call Trace: [ 352.080961][ T31] [ 352.083951][ T31] __schedule+0x1b88/0x5240 [ 352.088609][ T31] ? schedule+0x163/0x360 [ 352.092987][ T31] ? __pfx___schedule+0x10/0x10 [ 352.097940][ T31] ? schedule+0x90/0x360 [ 352.102218][ T31] ? schedule+0x90/0x360 [ 352.106490][ T31] schedule+0x163/0x360 [ 352.112256][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 352.117069][ T31] schedule_preempt_disabled+0x13/0x30 [ 352.122748][ T31] __mutex_lock+0x805/0x10c0 [ 352.127469][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 352.132412][ T31] ? genl_rcv_msg+0x125/0xf00 [ 352.137129][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 352.142248][ T31] ? 0xffffffffa0000948 [ 352.146439][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 352.152708][ T31] ? kernel_text_address+0xa7/0xe0 [ 352.157857][ T31] ? __kernel_text_address+0xd/0x40 [ 352.163589][ T31] ? radix_tree_lookup+0x23b/0x290 [ 352.168891][ T31] genl_rcv_msg+0x125/0xf00 [ 352.173447][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.178825][ T31] ? stack_trace_save+0x11a/0x1d0 [ 352.183909][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 352.189397][ T31] ? stack_depot_save_flags+0x44/0x940 [ 352.194895][ T31] ? stack_trace_snprint+0x71/0xf0 [ 352.200234][ T31] ? __lock_acquire+0xad5/0xd80 [ 352.205146][ T31] netlink_rcv_skb+0x208/0x480 [ 352.210271][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.215334][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.222625][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.227921][ T31] genl_rcv+0x28/0x40 [ 352.231965][ T31] netlink_unicast+0x7f8/0x9a0 [ 352.236775][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 352.243113][ T31] ? skb_put+0x114/0x1f0 [ 352.247421][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 352.252593][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.258213][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 352.263561][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.268999][ T31] __sock_sendmsg+0x221/0x270 [ 352.273731][ T31] __sys_sendto+0x365/0x4c0 [ 352.278502][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 352.283569][ T31] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 352.289776][ T31] __x64_sys_sendto+0xde/0x100 [ 352.294582][ T31] do_syscall_64+0xf3/0x230 [ 352.299271][ T31] ? clear_bhb_loop+0x45/0xa0 [ 352.304004][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.310029][ T31] RIP: 0033:0x7facf538fffc [ 352.314474][ T31] RSP: 002b:00007facf61f9ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 352.323178][ T31] RAX: ffffffffffffffda RBX: 00007facf61f9fc0 RCX: 00007facf538fffc [ 352.332310][ T31] RDX: 0000000000000024 RSI: 00007facf61fa010 RDI: 000000000000000b [ 352.346681][ T31] RBP: 0000000000000000 R08: 00007facf61f9f14 R09: 000000000000000c [ 352.355139][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 352.363408][ T31] R13: 00007facf61f9f68 R14: 00007facf61fa010 R15: 0000000000000000 [ 352.371772][ T31] [ 352.374902][ T31] INFO: task syz.2.1176:10105 blocked for more than 144 seconds. [ 352.382815][ T31] Not tainted 6.15.0-rc1-syzkaller-00188-g88fa80021b77 #0 [ 352.390664][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.399627][ T31] task:syz.2.1176 state:D stack:27912 pid:10105 tgid:10093 ppid:5848 task_flags:0x400040 flags:0x00000004 [ 352.411720][ T31] Call Trace: [ 352.415030][ T31] [ 352.418571][ T31] __schedule+0x1b88/0x5240 [ 352.423145][ T31] ? schedule+0x163/0x360 [ 352.427603][ T31] ? __pfx___schedule+0x10/0x10 [ 352.432728][ T31] ? schedule+0x90/0x360 [ 352.437013][ T31] ? schedule+0x90/0x360 [ 352.441583][ T31] schedule+0x163/0x360 [ 352.445862][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 352.451056][ T31] schedule_preempt_disabled+0x13/0x30 [ 352.456553][ T31] __mutex_lock+0x805/0x10c0 [ 352.461276][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 352.466088][ T31] ? genl_rcv_msg+0x125/0xf00 [ 352.471147][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 352.476225][ T31] ? 0xffffffffa0000948 [ 352.480526][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 352.486721][ T31] ? kernel_text_address+0xa7/0xe0 [ 352.492268][ T31] ? __kernel_text_address+0xd/0x40 [ 352.497512][ T31] ? radix_tree_lookup+0x23b/0x290 [ 352.503272][ T31] genl_rcv_msg+0x125/0xf00 [ 352.507855][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.513426][ T31] ? stack_trace_save+0x11a/0x1d0 [ 352.518805][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 352.524234][ T31] ? stack_depot_save_flags+0x44/0x940 [ 352.530090][ T31] ? stack_trace_snprint+0x71/0xf0 [ 352.535252][ T31] ? __lock_acquire+0xad5/0xd80 [ 352.540477][ T31] netlink_rcv_skb+0x208/0x480 [ 352.545287][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.550751][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.556139][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.562959][ T31] genl_rcv+0x28/0x40 [ 352.566984][ T31] netlink_unicast+0x7f8/0x9a0 [ 352.572432][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 352.577760][ T31] ? skb_put+0x114/0x1f0 [ 352.582678][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 352.587523][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.593240][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 352.598515][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.603844][ T31] __sock_sendmsg+0x221/0x270 [ 352.609143][ T31] __sys_sendto+0x365/0x4c0 [ 352.613697][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 352.619353][ T31] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 352.624623][ T31] __x64_sys_sendto+0xde/0x100 [ 352.630008][ T31] do_syscall_64+0xf3/0x230 [ 352.634564][ T31] ? clear_bhb_loop+0x45/0xa0 [ 352.639843][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.645782][ T31] RIP: 0033:0x7facf538fffc [ 352.650448][ T31] RSP: 002b:00007facf61d8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 352.661169][ T31] RAX: ffffffffffffffda RBX: 00007facf61d8fc0 RCX: 00007facf538fffc [ 352.671197][ T31] RDX: 0000000000000024 RSI: 00007facf61d9010 RDI: 000000000000000b [ 352.679845][ T31] RBP: 0000000000000000 R08: 00007facf61d8f14 R09: 000000000000000c [ 352.687855][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 352.696006][ T31] R13: 00007facf61d8f68 R14: 00007facf61d9010 R15: 0000000000000000 [ 352.704100][ T31] [ 352.707181][ T31] INFO: task syz.3.1182:10116 blocked for more than 144 seconds. [ 352.715778][ T31] Not tainted 6.15.0-rc1-syzkaller-00188-g88fa80021b77 #0 [ 352.723616][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.732471][ T31] task:syz.3.1182 state:D stack:27016 pid:10116 tgid:10115 ppid:5845 task_flags:0x400040 flags:0x00000004 [ 352.745402][ T31] Call Trace: [ 352.748868][ T31] [ 352.752014][ T31] __schedule+0x1b88/0x5240 [ 352.756605][ T31] ? schedule+0x163/0x360 [ 352.761104][ T31] ? __pfx___schedule+0x10/0x10 [ 352.766235][ T31] ? schedule+0x90/0x360 [ 352.770871][ T31] ? schedule+0x90/0x360 [ 352.775299][ T31] schedule+0x163/0x360 [ 352.779713][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 352.784517][ T31] schedule_preempt_disabled+0x13/0x30 [ 352.790183][ T31] __mutex_lock+0x805/0x10c0 [ 352.795255][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 352.800199][ T31] ? genl_rcv_msg+0x125/0xf00 [ 352.805076][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 352.810244][ T31] ? nlmon_xmit+0xaf/0x100 [ 352.814872][ T31] ? __local_bh_enable_ip+0x168/0x200 [ 352.820609][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 352.825849][ T31] ? radix_tree_lookup+0x23b/0x290 [ 352.831330][ T31] genl_rcv_msg+0x125/0xf00 [ 352.835868][ T31] ? __dev_queue_xmit+0x2f9/0x3f60 [ 352.841092][ T31] ? __dev_queue_xmit+0x2f9/0x3f60 [ 352.846236][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.851442][ T31] ? __dev_queue_xmit+0x1780/0x3f60 [ 352.856676][ T31] ? kasan_save_track+0x3f/0x80 [ 352.861622][ T31] ? __kasan_slab_alloc+0x66/0x80 [ 352.866723][ T31] ? do_syscall_64+0xf3/0x230 [ 352.871595][ T31] ? __lock_acquire+0xad5/0xd80 [ 352.876498][ T31] netlink_rcv_skb+0x208/0x480 [ 352.881666][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.886730][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.892356][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.897597][ T31] genl_rcv+0x28/0x40 [ 352.901723][ T31] netlink_unicast+0x7f8/0x9a0 [ 352.906541][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 352.912013][ T31] ? skb_put+0x114/0x1f0 [ 352.916305][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 352.921214][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.926536][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 352.931615][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.936935][ T31] __sock_sendmsg+0x221/0x270 [ 352.941760][ T31] __sys_sendto+0x365/0x4c0 [ 352.946305][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 352.951500][ T31] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 352.956757][ T31] __x64_sys_sendto+0xde/0x100 [ 352.961625][ T31] do_syscall_64+0xf3/0x230 [ 352.966167][ T31] ? clear_bhb_loop+0x45/0xa0 [ 352.971008][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.977199][ T31] RIP: 0033:0x7fb23e18fffc [ 352.982074][ T31] RSP: 002b:00007fb23efb8e90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 352.991378][ T31] RAX: ffffffffffffffda RBX: 00007fb23efb8fa0 RCX: 00007fb23e18fffc [ 352.999671][ T31] RDX: 0000000000000028 RSI: 00007fb23efb8ff0 RDI: 0000000000000004 [ 353.007690][ T31] RBP: 0000000000000000 R08: 00007fb23efb8ee4 R09: 000000000000000c [ 353.015843][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 353.023934][ T31] R13: 00007fb23efb8f38 R14: 00007fb23efb8ff0 R15: 0000000000000000 [ 353.032097][ T31] [ 353.035176][ T31] INFO: task syz.4.1183:10126 blocked for more than 145 seconds. [ 353.043053][ T31] Not tainted 6.15.0-rc1-syzkaller-00188-g88fa80021b77 #0 [ 353.050768][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 353.059909][ T31] task:syz.4.1183 state:D stack:23944 pid:10126 tgid:10121 ppid:5843 task_flags:0x400140 flags:0x00000004 [ 353.071969][ T31] Call Trace: [ 353.075271][ T31] [ 353.078360][ T31] __schedule+0x1b88/0x5240 [ 353.083235][ T31] ? schedule+0x163/0x360 [ 353.087603][ T31] ? __pfx___schedule+0x10/0x10 [ 353.092603][ T31] ? schedule+0x90/0x360 [ 353.096882][ T31] ? schedule+0x90/0x360 [ 353.101396][ T31] schedule+0x163/0x360 [ 353.105582][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 353.110590][ T31] schedule_preempt_disabled+0x13/0x30 [ 353.116092][ T31] __mutex_lock+0x805/0x10c0 [ 353.121173][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 353.125987][ T31] ? genl_rcv_msg+0x125/0xf00 [ 353.132069][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 353.137153][ T31] ? nlmon_xmit+0xaf/0x100 [ 353.144254][ T31] ? __local_bh_enable_ip+0x168/0x200 [ 353.149792][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 353.155059][ T31] ? radix_tree_lookup+0x23b/0x290 [ 353.160365][ T31] genl_rcv_msg+0x125/0xf00 [ 353.164908][ T31] ? __dev_queue_xmit+0x2f9/0x3f60 [ 353.170167][ T31] ? __dev_queue_xmit+0x2f9/0x3f60 [ 353.175307][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.180542][ T31] ? __dev_queue_xmit+0x1780/0x3f60 [ 353.185925][ T31] ? kasan_save_track+0x3f/0x80 [ 353.190925][ T31] ? __kasan_slab_alloc+0x66/0x80 [ 353.196005][ T31] ? do_syscall_64+0xf3/0x230 [ 353.200917][ T31] ? __lock_acquire+0xad5/0xd80 [ 353.205835][ T31] netlink_rcv_skb+0x208/0x480 [ 353.210756][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.215813][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.221775][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.227042][ T31] genl_rcv+0x28/0x40 [ 353.231145][ T31] netlink_unicast+0x7f8/0x9a0 [ 353.235973][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 353.241482][ T31] ? skb_put+0x114/0x1f0 [ 353.245778][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 353.250717][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.256054][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 353.261247][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.266585][ T31] __sock_sendmsg+0x221/0x270 [ 353.271445][ T31] __sys_sendto+0x365/0x4c0 [ 353.275997][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 353.281203][ T31] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 353.286548][ T31] __x64_sys_sendto+0xde/0x100 [ 353.291691][ T31] do_syscall_64+0xf3/0x230 [ 353.296243][ T31] ? clear_bhb_loop+0x45/0xa0 [ 353.301108][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.307030][ T31] RIP: 0033:0x7f801938fffc [ 353.311551][ T31] RSP: 002b:00007f801a280ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 353.320186][ T31] RAX: ffffffffffffffda RBX: 00007f801a280fc0 RCX: 00007f801938fffc [ 353.328434][ T31] RDX: 000000000000001c RSI: 00007f801a281010 RDI: 0000000000000007 [ 353.336443][ T31] RBP: 0000000000000000 R08: 00007f801a280f14 R09: 000000000000000c [ 353.344609][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 353.352874][ T31] R13: 00007f801a280f68 R14: 00007f801a281010 R15: 0000000000000000 [ 353.361076][ T31] [ 353.364199][ T31] INFO: task syz.4.1183:10134 blocked for more than 145 seconds. [ 353.372014][ T31] Not tainted 6.15.0-rc1-syzkaller-00188-g88fa80021b77 #0 [ 353.385693][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 353.395319][ T31] task:syz.4.1183 state:D stack:26856 pid:10134 tgid:10121 ppid:5843 task_flags:0x400140 flags:0x00004004 [ 353.407636][ T31] Call Trace: [ 353.411174][ T31] [ 353.414143][ T31] __schedule+0x1b88/0x5240 [ 353.419090][ T31] ? schedule+0x163/0x360 [ 353.423466][ T31] ? __pfx___schedule+0x10/0x10 [ 353.428633][ T31] ? schedule+0x90/0x360 [ 353.432904][ T31] ? schedule+0x90/0x360 [ 353.437148][ T31] schedule+0x163/0x360 [ 353.441920][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 353.446721][ T31] schedule_preempt_disabled+0x13/0x30 [ 353.452508][ T31] __mutex_lock+0x805/0x10c0 [ 353.457146][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 353.462889][ T31] ? genl_rcv_msg+0x125/0xf00 [ 353.467617][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 353.472968][ T31] ? nlmon_xmit+0xaf/0x100 [ 353.477449][ T31] ? __local_bh_enable_ip+0x168/0x200 [ 353.483312][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 353.488824][ T31] ? radix_tree_lookup+0x23b/0x290 [ 353.494213][ T31] genl_rcv_msg+0x125/0xf00 [ 353.499163][ T31] ? __dev_queue_xmit+0x2f9/0x3f60 [ 353.504326][ T31] ? __dev_queue_xmit+0x2f9/0x3f60 [ 353.509857][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.514955][ T31] ? __dev_queue_xmit+0x1780/0x3f60 [ 353.520622][ T31] ? kasan_save_track+0x3f/0x80 [ 353.525525][ T31] ? __kasan_slab_alloc+0x66/0x80 [ 353.530911][ T31] ? do_syscall_64+0xf3/0x230 [ 353.535673][ T31] ? __lock_acquire+0xad5/0xd80 [ 353.540742][ T31] netlink_rcv_skb+0x208/0x480 [ 353.545559][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.551108][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.556481][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.561867][ T31] genl_rcv+0x28/0x40 [ 353.565901][ T31] netlink_unicast+0x7f8/0x9a0 [ 353.570843][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 353.576171][ T31] ? skb_put+0x114/0x1f0 [ 353.580613][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 353.585612][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.591066][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 353.596200][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.601847][ T31] __sock_sendmsg+0x221/0x270 [ 353.606572][ T31] __sys_sendto+0x365/0x4c0 [ 353.611197][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 353.616258][ T31] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 353.621811][ T31] __x64_sys_sendto+0xde/0x100 [ 353.626623][ T31] do_syscall_64+0xf3/0x230 [ 353.631340][ T31] ? clear_bhb_loop+0x45/0xa0 [ 353.636080][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.642180][ T31] RIP: 0033:0x7f801938fffc [ 353.646673][ T31] RSP: 002b:00007f801a25fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 353.655253][ T31] RAX: ffffffffffffffda RBX: 00007f801a25ffc0 RCX: 00007f801938fffc [ 353.663558][ T31] RDX: 000000000000001c RSI: 00007f801a260010 RDI: 0000000000000007 [ 353.671646][ T31] RBP: 0000000000000000 R08: 00007f801a25ff14 R09: 000000000000000c [ 353.679768][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 353.687776][ T31] R13: 00007f801a25ff68 R14: 00007f801a260010 R15: 0000000000000000 [ 353.695997][ T31] [ 353.699779][ T31] INFO: task syz.0.1186:10133 blocked for more than 145 seconds. [ 353.707533][ T31] Not tainted 6.15.0-rc1-syzkaller-00188-g88fa80021b77 #0 [ 353.715322][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 353.724171][ T31] task:syz.0.1186 state:D stack:27912 pid:10133 tgid:10132 ppid:5844 task_flags:0x400040 flags:0x00000004 [ 353.736206][ T31] Call Trace: [ 353.739650][ T31] [ 353.742616][ T31] __schedule+0x1b88/0x5240 [ 353.747157][ T31] ? schedule+0x163/0x360 [ 353.751596][ T31] ? __pfx___schedule+0x10/0x10 [ 353.756497][ T31] ? schedule+0x90/0x360 [ 353.760914][ T31] ? schedule+0x90/0x360 [ 353.765169][ T31] schedule+0x163/0x360 [ 353.769573][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 353.774389][ T31] schedule_preempt_disabled+0x13/0x30 [ 353.781307][ T31] __mutex_lock+0x805/0x10c0 [ 353.785967][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 353.790896][ T31] ? genl_rcv_msg+0x125/0xf00 [ 353.795611][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 353.801329][ T31] ? 0xffffffffa0000948 [ 353.805537][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 353.812436][ T31] ? kernel_text_address+0xa7/0xe0 [ 353.817589][ T31] ? __kernel_text_address+0xd/0x40 [ 353.822924][ T31] ? radix_tree_lookup+0x23b/0x290 [ 353.828403][ T31] genl_rcv_msg+0x125/0xf00 [ 353.832959][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.838207][ T31] ? stack_trace_save+0x11a/0x1d0 [ 353.843288][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 353.849075][ T31] ? stack_depot_save_flags+0x44/0x940 [ 353.854572][ T31] ? stack_trace_snprint+0x71/0xf0 [ 353.860113][ T31] ? __lock_acquire+0xad5/0xd80 [ 353.865028][ T31] netlink_rcv_skb+0x208/0x480 [ 353.869970][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.875279][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.881183][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.886429][ T31] genl_rcv+0x28/0x40 [ 353.892434][ T31] netlink_unicast+0x7f8/0x9a0 [ 353.897272][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 353.903133][ T31] ? skb_put+0x114/0x1f0 [ 353.907424][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 353.912373][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.917722][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 353.922806][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.928211][ T31] __sock_sendmsg+0x221/0x270 [ 353.932939][ T31] __sys_sendto+0x365/0x4c0 [ 353.937484][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 353.942617][ T31] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 353.947955][ T31] __x64_sys_sendto+0xde/0x100 [ 353.952761][ T31] do_syscall_64+0xf3/0x230 [ 353.957298][ T31] ? clear_bhb_loop+0x45/0xa0 [ 353.962131][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.968132][ T31] RIP: 0033:0x7f751618fffc [ 353.972568][ T31] RSP: 002b:00007f7513ff4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 353.981130][ T31] RAX: ffffffffffffffda RBX: 00007f7513ff4fc0 RCX: 00007f751618fffc [ 353.989476][ T31] RDX: 0000000000000024 RSI: 00007f7513ff5010 RDI: 0000000000000003 [ 353.997469][ T31] RBP: 0000000000000000 R08: 00007f7513ff4f14 R09: 000000000000000c [ 354.006062][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 354.014967][ T31] R13: 00007f7513ff4f68 R14: 00007f7513ff5010 R15: 0000000000000000 [ 354.023287][ T31] [ 354.026364][ T31] INFO: task syz.0.1186:10136 blocked for more than 146 seconds. [ 354.034213][ T31] Not tainted 6.15.0-rc1-syzkaller-00188-g88fa80021b77 #0 [ 354.041953][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.050731][ T31] task:syz.0.1186 state:D stack:27912 pid:10136 tgid:10132 ppid:5844 task_flags:0x400040 flags:0x00000004 [ 354.062770][ T31] Call Trace: [ 354.066068][ T31] [ 354.069083][ T31] __schedule+0x1b88/0x5240 [ 354.073650][ T31] ? schedule+0x163/0x360 [ 354.078112][ T31] ? __pfx___schedule+0x10/0x10 [ 354.083026][ T31] ? schedule+0x90/0x360 [ 354.087299][ T31] ? schedule+0x90/0x360 [ 354.091661][ T31] schedule+0x163/0x360 [ 354.095873][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 354.101418][ T31] schedule_preempt_disabled+0x13/0x30 [ 354.107062][ T31] __mutex_lock+0x805/0x10c0 [ 354.111787][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 354.116591][ T31] ? genl_rcv_msg+0x125/0xf00 [ 354.121426][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 354.126489][ T31] ? 0xffffffffa0000948 [ 354.130760][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 354.136961][ T31] ? kernel_text_address+0xa7/0xe0 [ 354.142222][ T31] ? __kernel_text_address+0xd/0x40 [ 354.147455][ T31] ? radix_tree_lookup+0x23b/0x290 [ 354.152670][ T31] genl_rcv_msg+0x125/0xf00 [ 354.157213][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.162375][ T31] ? stack_trace_save+0x11a/0x1d0 [ 354.167441][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 354.172942][ T31] ? stack_depot_save_flags+0x44/0x940 [ 354.178532][ T31] ? stack_trace_snprint+0x71/0xf0 [ 354.183689][ T31] ? __lock_acquire+0xad5/0xd80 [ 354.188631][ T31] netlink_rcv_skb+0x208/0x480 [ 354.193443][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.198598][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.203934][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.209614][ T31] genl_rcv+0x28/0x40 [ 354.213634][ T31] netlink_unicast+0x7f8/0x9a0 [ 354.218575][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 354.223904][ T31] ? skb_put+0x114/0x1f0 [ 354.228248][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 354.233100][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.238531][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 354.243504][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.249595][ T31] __sock_sendmsg+0x221/0x270 [ 354.254325][ T31] __sys_sendto+0x365/0x4c0 [ 354.258977][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 354.264060][ T31] __x64_sys_sendto+0xde/0x100 [ 354.268937][ T31] do_syscall_64+0xf3/0x230 [ 354.273487][ T31] ? clear_bhb_loop+0x45/0xa0 [ 354.278299][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.284229][ T31] RIP: 0033:0x7f751618fffc [ 354.289463][ T31] RSP: 002b:00007f7513fd3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 354.298608][ T31] RAX: ffffffffffffffda RBX: 00007f7513fd3fc0 RCX: 00007f751618fffc [ 354.306616][ T31] RDX: 0000000000000020 RSI: 00007f7513fd4010 RDI: 0000000000000007 [ 354.315443][ T31] RBP: 0000000000000000 R08: 00007f7513fd3f14 R09: 000000000000000c [ 354.323936][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 354.332502][ T31] R13: 00007f7513fd3f68 R14: 00007f7513fd4010 R15: 0000000000000000 [ 354.343401][ T31] [ 354.346550][ T31] [ 354.346550][ T31] Showing all locks held in the system: [ 354.356067][ T31] 2 locks held by kworker/u8:0/12: [ 354.361655][ T31] 1 lock held by khungtaskd/31: [ 354.366528][ T31] #0: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 354.377000][ T31] 2 locks held by getty/5592: [ 354.382060][ T31] #0: ffff8880316b40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 354.392308][ T31] #1: ffffc900036db2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 354.402538][ T31] 1 lock held by udevd/5859: [ 354.407122][ T31] #0: ffff888025c23358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 354.416679][ T31] 6 locks held by syz.1.1175/10096: [ 354.422065][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.436353][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.445494][ T31] #2: ffff888025b05998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x42f/0x1c50 [ 354.456193][ T31] #3: ffff888143f206f8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ac/0x8a0 [ 354.465865][ T31] #4: ffff888143f200a8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x6e/0x330 [ 354.478251][ T31] #5: ffff888143f200e0 (&q->q_usage_counter(queue)#2){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x6e/0x330 [ 354.490801][ T31] 2 locks held by syz.2.1176/10094: [ 354.496060][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.504552][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.513702][ T31] 2 locks held by syz.2.1176/10095: [ 354.519218][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.527465][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.536566][ T31] 2 locks held by syz.2.1176/10105: [ 354.541950][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.550250][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.559347][ T31] 2 locks held by syz.3.1182/10116: [ 354.564565][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.572962][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.582089][ T31] 2 locks held by syz.4.1183/10126: [ 354.587327][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.595622][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.604762][ T31] 2 locks held by syz.4.1183/10134: [ 354.610049][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.618554][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.627586][ T31] 2 locks held by syz.0.1186/10133: [ 354.632898][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.641243][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.650523][ T31] 2 locks held by syz.0.1186/10136: [ 354.655756][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.664216][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.673319][ T31] 2 locks held by syz-executor/10160: [ 354.678784][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.687048][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.696224][ T31] 2 locks held by syz-executor/10162: [ 354.701731][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.710062][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.719185][ T31] 2 locks held by syz-executor/10175: [ 354.724717][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.733050][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.742328][ T31] 2 locks held by syz-executor/10178: [ 354.747712][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.756053][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.765396][ T31] 2 locks held by syz-executor/10180: [ 354.770863][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.779187][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.788339][ T31] 2 locks held by syz-executor/10211: [ 354.793906][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.802313][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.811429][ T31] 2 locks held by syz-executor/10213: [ 354.816807][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.825662][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.835076][ T31] 2 locks held by syz-executor/10226: [ 354.840723][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.849433][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.858823][ T31] 2 locks held by syz-executor/10229: [ 354.864250][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.873014][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.882324][ T31] 2 locks held by syz-executor/10231: [ 354.887721][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.896105][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.905429][ T31] 2 locks held by syz-executor/10256: [ 354.911105][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.919439][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.928751][ T31] 2 locks held by syz-executor/10258: [ 354.934140][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.942470][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.951775][ T31] 2 locks held by syz-executor/10270: [ 354.957171][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.965543][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.974660][ T31] 2 locks held by syz-executor/10272: [ 354.980324][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 354.988651][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 354.997679][ T31] 2 locks held by syz-executor/10275: [ 355.003436][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 355.011792][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 355.020971][ T31] [ 355.023315][ T31] ============================================= [ 355.023315][ T31] [ 355.032088][ T31] NMI backtrace for cpu 0 [ 355.032113][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00188-g88fa80021b77 #0 PREEMPT(full) [ 355.032138][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 355.032151][ T31] Call Trace: [ 355.032159][ T31] [ 355.032168][ T31] dump_stack_lvl+0x241/0x360 [ 355.032204][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.032234][ T31] ? __pfx__printk+0x10/0x10 [ 355.032275][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 355.032303][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 355.032320][ T31] ? _printk+0xd5/0x120 [ 355.032349][ T31] ? __wake_up_klogd+0xcc/0x110 [ 355.032380][ T31] ? __pfx__printk+0x10/0x10 [ 355.032411][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 355.032434][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 355.032460][ T31] watchdog+0x1058/0x10a0 [ 355.032483][ T31] ? watchdog+0x1ea/0x10a0 [ 355.032510][ T31] ? __pfx_watchdog+0x10/0x10 [ 355.032530][ T31] kthread+0x7b7/0x940 [ 355.032561][ T31] ? __pfx_watchdog+0x10/0x10 [ 355.032582][ T31] ? __pfx_kthread+0x10/0x10 [ 355.032608][ T31] ? __pfx_kthread+0x10/0x10 [ 355.032635][ T31] ? __pfx_kthread+0x10/0x10 [ 355.032663][ T31] ? __pfx_kthread+0x10/0x10 [ 355.032690][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.032710][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 355.032734][ T31] ? __pfx_kthread+0x10/0x10 [ 355.032763][ T31] ret_from_fork+0x4b/0x80 [ 355.032783][ T31] ? __pfx_kthread+0x10/0x10 [ 355.032810][ T31] ret_from_fork_asm+0x1a/0x30 [ 355.032843][ T31] [ 355.032851][ T31] Sending NMI from CPU 0 to CPUs 1: [ 355.195172][ C1] NMI backtrace for cpu 1 [ 355.195191][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc1-syzkaller-00188-g88fa80021b77 #0 PREEMPT(full) [ 355.195213][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 355.195225][ C1] Workqueue: bat_events batadv_nc_worker [ 355.195249][ C1] RIP: 0010:__rcu_read_lock+0x5e/0xb0 [ 355.195268][ C1] Code: 41 8b 2f ff c5 42 0f b6 04 33 84 c0 75 3e 41 89 2f 42 0f b6 04 33 84 c0 75 49 41 8b 07 3d 00 00 00 40 7d 0b 5b 41 5e 41 5f 5d cc cc cc cc 90 0f 0b 90 eb ef 44 89 f9 80 e1 07 80 c1 03 38 c1 [ 355.195283][ C1] RSP: 0018:ffffc90000127a40 EFLAGS: 00000283 [ 355.195297][ C1] RAX: 0000000000000001 RBX: ffff88805fe90d80 RCX: 1ffff11006a7ab30 [ 355.195310][ C1] RDX: 0000000000000000 RSI: 0000000000000065 RDI: ffffffff8ca1b6a0 [ 355.195321][ C1] RBP: ffff8880353d5980 R08: ffffffff8bfb4371 R09: 0000000000000000 [ 355.195333][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805fe90d80 [ 355.195344][ C1] R13: 1ffff1100bfd2313 R14: ffff88807e2f8328 R15: ffffffff8bfb44c0 [ 355.195358][ C1] FS: 0000000000000000(0000) GS:ffff888125094000(0000) knlGS:0000000000000000 [ 355.195372][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.195383][ C1] CR2: 00007f9c236e7d60 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 355.195398][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.195408][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.195419][ C1] Call Trace: [ 355.195427][ C1] [ 355.195433][ C1] batadv_nc_process_nc_paths+0xae/0x3a0 [ 355.195458][ C1] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 355.195479][ C1] batadv_nc_worker+0x42a/0x610 [ 355.195499][ C1] ? process_scheduled_works+0x9cb/0x18e0 [ 355.195519][ C1] process_scheduled_works+0xac3/0x18e0 [ 355.195554][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 355.195579][ C1] ? assign_work+0x367/0x3d0 [ 355.195600][ C1] worker_thread+0x870/0xd50 [ 355.195628][ C1] ? __kthread_parkme+0x1a8/0x200 [ 355.195651][ C1] ? __pfx_worker_thread+0x10/0x10 [ 355.195671][ C1] kthread+0x7b7/0x940 [ 355.195695][ C1] ? __pfx_worker_thread+0x10/0x10 [ 355.195715][ C1] ? __pfx_kthread+0x10/0x10 [ 355.195736][ C1] ? __pfx_kthread+0x10/0x10 [ 355.195758][ C1] ? __pfx_kthread+0x10/0x10 [ 355.195781][ C1] ? __pfx_kthread+0x10/0x10 [ 355.195803][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.195820][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 355.195839][ C1] ? __pfx_kthread+0x10/0x10 [ 355.195862][ C1] ret_from_fork+0x4b/0x80 [ 355.195879][ C1] ? __pfx_kthread+0x10/0x10 [ 355.195912][ C1] ret_from_fork_asm+0x1a/0x30 [ 355.195938][ C1] [ 355.196300][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 355.463297][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00188-g88fa80021b77 #0 PREEMPT(full) [ 355.475110][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 355.485184][ T31] Call Trace: [ 355.488469][ T31] [ 355.491405][ T31] dump_stack_lvl+0x241/0x360 [ 355.496123][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.501368][ T31] ? __pfx__printk+0x10/0x10 [ 355.506077][ T31] ? vscnprintf+0x5d/0x90 [ 355.510421][ T31] panic+0x349/0x880 [ 355.514330][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 355.519720][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 355.525884][ T31] ? __pfx_panic+0x10/0x10 [ 355.530317][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 355.535694][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 355.541848][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 355.548014][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 355.554184][ T31] watchdog+0x1097/0x10a0 [ 355.558533][ T31] ? watchdog+0x1ea/0x10a0 [ 355.562956][ T31] ? __pfx_watchdog+0x10/0x10 [ 355.567740][ T31] kthread+0x7b7/0x940 [ 355.571832][ T31] ? __pfx_watchdog+0x10/0x10 [ 355.576516][ T31] ? __pfx_kthread+0x10/0x10 [ 355.581130][ T31] ? __pfx_kthread+0x10/0x10 [ 355.585738][ T31] ? __pfx_kthread+0x10/0x10 [ 355.590337][ T31] ? __pfx_kthread+0x10/0x10 [ 355.594936][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.600142][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 355.605347][ T31] ? __pfx_kthread+0x10/0x10 [ 355.609951][ T31] ret_from_fork+0x4b/0x80 [ 355.614375][ T31] ? __pfx_kthread+0x10/0x10 [ 355.618978][ T31] ret_from_fork_asm+0x1a/0x30 [ 355.623755][ T31] [ 355.627109][ T31] Kernel Offset: disabled [ 355.631456][ T31] Rebooting in 86400 seconds..