last executing test programs: 22.668791496s ago: executing program 2 (id=895): r0 = socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x2000}, &(0x7f0000000440)=0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800e6ffdeba000000000000da41000018110000058cfda774b149193dd1eef91d83b0c26229d424f30f37c4a3d4b8d3ec85d644384eea732697dd0d0e506ba8f913a3dda49153405349d1a1fccdedb4860df8c9feddb27fa11382c71e7eacbc34936467afb29a408cb6e54d30cee1469f756b75d5bf140382c8abd2b7b3485045b4904dc179099067060340189ad76c46f013e88bc9d02d4fb19f59aff05500", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100800400009500000000000000bf91000000000000b70200000300000085000000c2000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000800)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24008884}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0500000000094fa1036bc7398617276804c93200000000000600000008000300", @ANYRES32=r11, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000ffff27bd7000ebdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffff7f000001140007000000000000000041fffffffffffffffe"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 22.608783352s ago: executing program 2 (id=896): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x18, &(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000007500f4fff0ffffffbf91000000000000b70200000300000085000000ae000000b70000000000000095000000000000003604c9c0d734a6721cf547a7b1fd13fba7eb6545f66be890d72fed25a134361411863a8ff74f08a482ef0da055e930161e3437d6f4f8fe"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000340)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, 0x0) setsockopt(r5, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="030c25bd5200fbdbdf652c000000ec17820d1cc14db653d56349c11fba2dc31934810db517f4ebf0b94202b1f17f4dab947b97ff"], 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) r8 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 21.741790614s ago: executing program 2 (id=904): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21.534558426s ago: executing program 2 (id=907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xc, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000096d132478102268d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0xfffffffd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) 21.106332087s ago: executing program 2 (id=912): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000300)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x1, 0x1000400, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) recvfrom(r1, 0x0, 0x0, 0x2001, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="3c0604030630090000000000000000000000000000000000ff020000000000000000006a74c9100000000001fe80000000000000f779f4a8f387a26f"], 0x38) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000002"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8884) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x88000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x9, 0x7, 0x1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10040, 0x81, 0x0, 0x9}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, 0x0, 0x0) setsockopt$inet_int(r8, 0x0, 0x16, &(0x7f0000000040)=0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf}, 0x20) sendmsg$NL80211_CMD_FRAME(r7, 0x0, 0x0) 18.858254447s ago: executing program 3 (id=929): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x301, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x858) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$ieee802154(0x0, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x700, 0x7800, 0x7, 0x4, {{0xf, 0x4, 0x3, 0x3a, 0x3c, 0x65, 0x0, 0x14, 0x29, 0x0, @broadcast, @multicast2, {[@noop, @timestamp_addr={0x44, 0x24, 0x54, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast2, 0x3}, {@multicast2, 0xd}, {@private=0xa010102, 0x1ff}]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x80) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f00000007c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000800)=0x28) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000840)="5f8c9f4bb578ec534a51501caa3782368ccb728a8ac5626b2e9087e8b1c081d79a56a67d6ff61de86cfbbef87bad62ad6e13a51fd6cb92e4e552d70430a99bb9091b3c5d4b3bd0bd2e004c71aa016f879b5afa91aac44fd2f170cf4a6c50a9c73cd67c1b843543d88bad18c5547dfd9887f55ed90f4a2634cc835d635bd133cf195ed048874d2844ff7e217387ec7b43dbaa61723f14b1393a581f55049645d76ca1e00ad38320aa050e4470cbc1378eada38860b9eedb48188d38e35e33e7a556df465a28f8e4a5109aec88cb047471925c5195d736ef96df3f576813714867ea95d0d078a144a50207", 0xea) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x19}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf}, @NL802154_ATTR_PAGE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8080) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b00), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000e40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b40)={0x2a0, r9, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x138, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6be1c9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1344b03b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed57}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7772a00}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52a5efd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd70a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7902544d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f0ca74f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa26}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44f8ad2f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3df78d72}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c80cedc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e4e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f333a91}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb16b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x394c9e1e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c65}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe570}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a07}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc737}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e529740}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1931}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43cb47bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57ae3205}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58c17a25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63e9818f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7da4f540}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43522557}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7758c975}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x606e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x194e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33f46856}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e2c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c993c0d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a99}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x743138a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bb4f4ce}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd97a8ac}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xa8be72e10d26c4df}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2953637e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10aa224}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x701f208e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45ed6fa9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f7639d}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d7d5fe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a0ae699}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb43ce4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e53b107}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50697a95}]}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4}, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000e80)=""/62, &(0x7f0000000ec0)=0x3e) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0xe6, &(0x7f0000000f00)=0x40, 0x4) sendmsg$nl_route(r7, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)=@ipv6_getrule={0x1c, 0x22, 0x4, 0x70bd27, 0x25dfdbfd, {0xa, 0x10, 0x80, 0x4, 0x40, 0x0, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r10, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0xa4, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x70, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffff7fff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x80) 18.553038566s ago: executing program 3 (id=932): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x5, [@float={0x2, 0x0, 0x0, 0x10, 0x8}, @var={0xd, 0x0, 0x0, 0xe, 0x4, 0x2}, @var={0xf, 0x0, 0x0, 0xe, 0x3, 0x1}, @union={0x1, 0x5, 0x0, 0x5, 0x0, 0xf7, [{0xc, 0x5, 0x5}, {0xc, 0x1, 0x861}, {0x4, 0x5, 0x9}, {0x2, 0x4, 0x6}, {0x10, 0x4, 0x10001}]}]}, {0x0, [0x30, 0x2e, 0x2e]}}, &(0x7f00000000c0)=""/54, 0x91, 0x36, 0x0, 0xffff7743, 0x10000}, 0x28) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000140)={0xb59, 0x2, 0x1, 0x9, 0x0, [0x6, 0xfffff04a, 0x7fffffff, 0x7]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000380)={r3, 0x0, "178648a2141145c99e2a147f1f7622a9da888a754606ed2a1b4b1e6da44e99ab31a06246a80a6229b19523acfdc87443c1a48e135196b96d4b31821befacdc786ef40194942d4b79ca1ecab6820e4400ead8f752a68c1843a3f80a79ed8d093205a34a5076a5c886041313ad83d10325efd3ccc4f97b50f461d6ac2cc60b2ba943894d43bc86647052149db99c0a1ea12da36b7267b51285f8a67128d038cf6ffb946b5752778fad63025d41dfecb1653aaeff24e7d2b8c33cc04ff2c8c098deca3ed02f4d7eb6df72e9fff99b18b3a53f2bf8558cdd9364d5955658b2e68b702c948e78b346f48b58721f8f25b1417ee267f1fa2a7932ff2f461bf6e77cab8e", "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"}) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000001380)={'ip6_vti0\x00', {0x2, 0x0, @remote}}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000013c0)={0x0, 0x5, 0xfffffff7, 0xa, 0x7f, 0x7b, 0x2, 0x78c, {0x0, @in6={{0xa, 0x4e22, 0x1000, @private1, 0x4}}, 0x0, 0xe293, 0x4, 0x69c1e15b, 0x8}}, &(0x7f0000001480)=0xb0) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f00000014c0)=@assoc_id=r8, 0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001500)={r9, 0x0, 0xfff, 0x4, 0x3ff, 0x5}, 0x14) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r10, 0x89e4) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000001540), &(0x7f0000001580)=0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r12, 0x28, 0x6, &(0x7f00000015c0)={0x77359400}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001600)={r10, 0x4, 0x3, 0xa}) sendmsg$TIPC_NL_NODE_GET(r13, &(0x7f0000001840)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001800)={&(0x7f0000001680)={0x160, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'pimreg\x00'}}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff5e3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_create1(0x80000) ioctl$BTRFS_IOC_DEFRAG(r10, 0x50009402, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000001880)={r9, 0x2a}, 0xc) r14 = openat$cgroup_subtree(r13, &(0x7f00000018c0), 0x2, 0x0) write$cgroup_subtree(r14, &(0x7f0000001900)={[{0x23cc3cc952f27db9, 'cpuset'}]}, 0x8) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r15, 0x84, 0x20, &(0x7f0000001940)=0x4, 0x4) recvmmsg(r11, &(0x7f0000003f00)=[{{&(0x7f0000001980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000001a00)=""/135, 0x87}, {&(0x7f0000001ac0)=""/195, 0xc3}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/96, 0x60}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/169, 0xa9}, {&(0x7f0000003d00)=""/112, 0x70}, {&(0x7f0000003d80)=""/3, 0x3}], 0x8, &(0x7f0000003e40)=""/179, 0xb3}, 0x7fffffff}], 0x1, 0x22, &(0x7f0000003f40)) epoll_create1(0x80000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r15, 0x84, 0x7c, &(0x7f0000003f80)={r8, 0x0, 0x1000}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000003fc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r13, 0xd000943d, &(0x7f000003d080)={0x3, [{r1, r16}, {r5}, {0x0, r3}, {r5, r3}, {r2, r3}, {r5, r4}, {0x0, r4}, {r5, r4}, {r1, r4}, {r5, r3}, {r5, r4}, {r5, r3}, {r1, r3}, {r1, r4}, {r2, r3}, {r1}, {r5, r4}, {r5, r3}, {r1}, {}, {0x0, r4}, {r5, r3}, {}, {r1}, {r2}, {0x0, r4}, {0x0, r4}, {r5, r4}, {}, {r1}, {0x0, r4}, {r1}, {r5}, {r2}, {r5, r3}, {r2, r4}, {0x0, r3}, {r5, r4}, {r1}, {r5, r3}, {r2}, {r1, r4}, {}, {0x0, r3}, {r2, r3}, {r1, r4}, {r1}, {r1, r4}, {r2}, {r5, r4}, {r2, r3}, {r1, r4}, {r5, r3}, {r5, r3}, {r2, r4}, {r5, r4}, {}, {r1, r4}, {r1, r4}, {0x0, r3}, {0x0, r3}, {r5, r3}, {r1, r3}, {r1}, {r5}, {r2, r4}, {r5}, {r2}, {r1, r4}, {0x0, r4}, {r5, r4}, {r2, r4}, {r2, r4}, {r2, r3}, {r1}, {r5}, {r5, r4}, {0x0, r3}, {r5, r4}, {r2, r4}, {r2, r4}, {0x0, r4}, {r5, r3}, {r1, r4}, {r1, r4}, {0x0, r3}, {r5, r3}, {r2, r3}, {r1}, {r1, r4}, {0x0, r3}, {0x0, r3}, {r1, r3}, {r1}, {r2, r3}, {0x0, r3}, {r1, r4}, {r1, r4}, {r1, r3}, {r5, r4}, {r2, r3}, {r1, r4}, {r1, r4}, {r5, r4}, {}, {r2}, {r2, r4}, {r5, r3}, {r5, r3}, {0x0, r4}, {r1, r4}, {r1, r3}, {0x0, r4}, {r2}, {r5, r3}, {r1, r3}, {r2, r3}, {0x0, r3}, {r1}, {0x0, r3}, {r1, r3}, {0x0, r4}, {r5, r4}, {0x0, r4}, {0x0, r3}, {r1}, {0x0, r4}, {r5}, {r2}, {r1, r4}, {0x0, r3}, {r5, r4}, {r5, r4}, {r1, r4}, {}, {r5, r4}, {r1, r3}, {0x0, r4}, {r1, r4}, {r2, r3}, {0x0, r3}, {r1, r3}, {r2, r4}, {r2, r4}, {0x0, r3}, {r5}, {0x0, r3}, {0x0, r3}, {0x0, r4}, {r5}, {r2, r4}, {r5, r4}, {r5}, {}, {r2, r4}, {r2, r3}, {r1, r3}, {r5, r4}, {r5}, {r1, r3}, {0x0, r4}, {r5, r4}, {r1}, {r5, r3}, {r1, r3}, {r5, r3}, {0x0, r4}, {r5, r4}, {r5}, {r1, r3}, {r1, r4}, {r1, r3}, {r1, r3}, {r1}, {r2, r4}, {r2, r3}, {r5, r4}, {r2, r3}, {0x0, r3}, {r1, r3}, {0x0, r4}, {r1}, {r5, r3}, {r1}, {r2, r3}, {r1, r4}, {r1, r3}, {r1, r4}, {r1, r3}, {r5, r4}, {}, {0x0, r3}, {r5, r4}, {0x0, r4}, {0x0, r4}, {r1, r3}, {0x0, r3}, {r2, r3}, {r2, r4}, {r1, r4}, {0x0, r3}, {r5, r3}, {r5, r4}, {r5, r3}, {r5, r4}, {r5, r3}, {0x0, r4}, {r1, r3}, {r1, r4}, {r5, r4}, {r2, r3}, {r2, r4}, {r5, r3}, {r2, r4}, {r2, r3}, {0x0, r3}, {r1, r4}, {r5, r4}, {r1, r4}, {0x0, r4}, {0x0, r3}, {r2, r4}, {r5, r4}, {r2, r3}, {r1, r4}, {r2, r3}, {0x0, r3}, {0x0, r3}, {r2, r3}, {r5, r4}, {r5, r3}, {0x0, r4}, {0x0, r3}, {r5, r4}, {r1, r4}, {r1, r3}, {r1}, {r1}, {r5, r3}, {0x0, r3}, {r2}, {r5, r3}, {r2, r4}, {r5, r4}, {r2, r3}, {r5, r4}, {r5, r3}, {r5, r3}, {r5, r4}, {r2, r3}, {r2, r3}, {0x0, r4}, {r5, r3}, {r5, r4}, {r1, r3}], 0x6, "eac6fbb1da95d9"}) 18.231083337s ago: executing program 0 (id=936): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040080) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x656083, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) close(r2) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r12 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000480)={0x0, @multicast2, @loopback}, &(0x7f0000000400)=0xfffffeb9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000001700)={'ip6_vti0\x00', &(0x7f0000001680)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x7, 0x5, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @loopback, 0x1, 0x40, 0x101, 0x6}}) (async, rerun: 32) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240080c1}, 0x810) (async, rerun: 32) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f00000001c0)={0x0, 0x4, 0x2, 0x400, 0xffffffff}) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 17.653113668s ago: executing program 0 (id=940): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x100000000000000}}, {{@in=@multicast1}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0xe8) 17.632234532s ago: executing program 4 (id=941): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 17.585236646s ago: executing program 0 (id=942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xd2}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x8000000, {0x80, 0x4, 0x2, 0x3}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "1d88d56a159a45"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 17.535147483s ago: executing program 3 (id=943): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8848}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000308000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "6214"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r5) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x537, 0x4, 0x800000000}) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r7, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE(0x24, &(0x7f00000000c0), 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@random="aca65316ee2c", @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xc8, 0x3, 0x0, [{@loopback, 0x2}, {@multicast2, 0x5}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4000, &(0x7f00000003c0)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @local}, 0x14) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f00000001c0)=0x6, 0x4) 17.435930224s ago: executing program 0 (id=944): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfffd, 0x8}, 0x8) sendto$inet6(r1, &(0x7f00000004c0)="d7", 0x1, 0x20009091, &(0x7f0000000000)={0xa, 0x800, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8}, 0x1c) (async) sendto$inet6(r1, &(0x7f00000004c0)="d7", 0x1, 0x20009091, &(0x7f0000000000)={0xa, 0x800, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8}, 0x1c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b609010000000000650000000000000018010000646c6c250000000000202020639af8ff00000000cd9100000000000037010000f802bf0d9476bd0921000000b70300000000000015000000060000003f93000000000000b5030000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r0], 0x18}, 0x1, 0x0, 0x0, 0x4011}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r0], 0x18}, 0x1, 0x0, 0x0, 0x4011}, 0x0) 17.36177812s ago: executing program 4 (id=945): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x23, 0x5, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x113, 0x40, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@deltaction={0x34, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRESDEC, @ANYRES16=r1], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 17.172910039s ago: executing program 4 (id=947): syz_emit_ethernet(0x19e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x168, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x9, "bd3e6d4706598080a8030037ffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x20, "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"}]}}}}}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000540)={0x7f, 0x9, 0x5, 0x7f, 0x1, 0xfb, 0xff, 0x6, 0x3, 0x5, 0x4, 0x5, 0x0, 0x10}, 0xe) syz_emit_ethernet(0x19e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x168, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x9, "bd3e6d4706598080a8030037ffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x20, "77f9290b6e87290b6e87f278e94724e20c43c95f9b49204a64d614d4cc9d0d46d954fda9a75d076993e3b87aa99b2454a86662e37b42678a74974ddd50b21e499efae61e3a816a367d019bc7f892d8975f1fc8a3e27139041cd21d2d12f30ee6f029d8d73f80f9b19d138598345b9c0feda226b333c55c668fb17b5b39603ee66b8534f1fbf97e139d35762307516482a1787d8f3bb76940602a0104ac045b59510dfd944672de5f77c0e6136c06847bbe70dd65236ef4d112e88fabc57d02a2a380eb697adf4e1d9090705f85ddf041bc076775f5d27555d3f60c44192fa92eee16828c1c4aa17f4a743e212cd2c084e5acc9aae96852cd54afd2d60786"}]}}}}}}, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000540)={0x7f, 0x9, 0x5, 0x7f, 0x1, 0xfb, 0xff, 0x6, 0x3, 0x5, 0x4, 0x5, 0x0, 0x10}, 0xe) (async) 17.088517438s ago: executing program 4 (id=948): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x101}], 0x2, 0x10122, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb0800040009", @ANYRESDEC], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119c00000000008510000002000000850c00002b00000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000036f6fa77519e0014ebd40acc000028acf475002b0000"], 0x14}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x200000000000001) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000080)=0x81, 0x4) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) syz_emit_ethernet(0x9d, &(0x7f0000000140)=ANY=[@ANYBLOB="b997ce1c990c0180c200000008004500008f00000000002f90780a010101e00000012480886400300000a9e30205c05481cd37808b64a6b35486f934a965830cfc16bbed02013b48c8ac3f4503005278a5ddaff09e9ac607652d100008000080000086dd080088be0000000010000000e1ffffff00000000080022eb00000000200000800200000010000000000000000800655800000000859d0aee92"], 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) read$alg(r5, &(0x7f00000009c0)=""/75, 0x4b) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x20008804}, 0x10) unshare(0x20400) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 16.980230485s ago: executing program 0 (id=949): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', r1, r2, 0x1, 0x3, 0x2}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), r3) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002500)={0x20, r4, 0xad0e41e9ad2f93a7, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 16.907127673s ago: executing program 0 (id=950): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002060101000000000300000000000000050005000a001800050001000700000005000400030000000900020073797a310000000011000300686173683a6e"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r3, &(0x7f00000000c0)=""/81, 0x51) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x8000000}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) setsockopt$inet_tcp_int(r1, 0x29, 0x8, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0xf7f, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf49, 0x0, 0x0, @empty, @local, {[], "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"}}}}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4a, 0x800000, 0x8, 0x5, 0x80, 0x81}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x118) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x152) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffb}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 16.849034179s ago: executing program 1 (id=951): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x0, 0x0, 0x1, 0x3, 0xff01, 0x6}, 0x20) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) close(0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001000000200"/20, @ANYRES32=0x0, @ANYBLOB="1d00"/13], 0x28}}, 0x0) 16.760758379s ago: executing program 4 (id=952): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x0, 0x803, 0x400) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/248, 0xf8}], 0x1}, 0xa}], 0x1, 0x40002100, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'dummy0\x00', 0x1000}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r8, 0x0, 0x13, 0x0, &(0x7f0000000080)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000006c0)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r9, r5, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300082c0000000000000000000000010001"], 0x160}, 0x1, 0x7}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r12, &(0x7f0000000200), 0x806000) unshare(0x22020600) read$alg(r11, 0x0, 0x0) 16.751360453s ago: executing program 1 (id=953): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x200000000000000}}, {{@in=@multicast1}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0xe8) 16.637013609s ago: executing program 1 (id=954): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00', 0x0}) pselect6(0x40, &(0x7f0000000000)={0x7, 0x5, 0x8, 0x1, 0xd00, 0x7, 0x30, 0x8000}, &(0x7f0000000080)={0xc000000000, 0x7, 0x1, 0x83c, 0x1, 0x9, 0x5, 0x4}, &(0x7f00000000c0)={0x5, 0x8000000000000000, 0x5, 0xe451, 0x6bdaa70, 0x494, 0x2, 0x100000001}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10000]}, 0x8}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000240)=0x401, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100ff010000060000000c0001007f000000000000000c000100ff000000010000000c000100ff0100000008000008000500", @ANYRES32=r2], 0x78}}, 0x0) 16.636203153s ago: executing program 3 (id=955): socket$vsock_stream(0x28, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x7) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000900"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, 0x0, &(0x7f0000000100)=r4}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2f, 0xff, 0x10, 0x9, 0x20, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x80, 0x5, 0x7}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000fa82000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 16.528378438s ago: executing program 1 (id=956): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) (fail_nth: 2) 15.98949613s ago: executing program 4 (id=957): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x18, &(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000007500f4fff0ffffffbf91000000000000b70200000300000085000000ae000000b70000000000000095000000000000003604c9c0d734a6721cf547a7b1fd13fba7eb6545f66be890d72fed25a134361411863a8ff74f08a482ef0da055e930161e3437d6f4f8fe"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000340)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x80}, 0x8) setsockopt(r5, 0x84, 0x80, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="030c25bd5200fbdbdf652c000000ec17820d1cc14db653d56349c11fba2dc31934810db517f4ebf0b94202b1f17f4dab947b97ff"], 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) r8 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 15.924893021s ago: executing program 1 (id=958): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r4, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa8aaaaac0aa2aaaaaaa0d0606"], 0x0) 15.923874616s ago: executing program 2 (id=959): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a000000060001003c"], 0x1c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async, rerun: 32) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) (async, rerun: 64) r3 = socket(0x2, 0x80802, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000740)={'ip6gre0\x00', 0x0}) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) r4 = socket(0x840000000002, 0x3, 0xfa) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ecb-blowfish-asm,tgr192)\x00'}, 0x58) (async, rerun: 64) r6 = socket(0xa, 0x3, 0x2) (rerun: 64) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@dstopts_2292={{0x18, 0x29, 0x3e, {0x2c}}}], 0x18}}], 0x2, 0x4004804) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd07, 0x25dfdafd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', 0x0}) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) unshare(0x6a040000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 15.658138966s ago: executing program 3 (id=960): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffffffd, 0x1, 0xdd6a896644600dbb, 0x6, 0xe411}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=@newspdinfo={0x24, 0x24, 0x1, 0x70bd28, 0x25dfdbfc, 0x1, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8080) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba23008500000098000000b70000000000000095000000000000006f88300eaa171100756695acf0af839ec5300a584fe44c80de0b061417e9ade22cecede5d5be6ab3d7828ee094518a5800000082c81ddfe3960a29ea15fa7e26f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae00d824313ffef788c6983945dd3663f79f67e78a48b23b38c5f86e96111199f0f0af9f42099a0f54041889b971cf394bd43473a5ac2acab9768cbc52ff7f000000000000711727c4a32a6b7ecdae05d2b3fed4572eb0d88976d2adda68000010000000c47b18cf93996a43e2e080f57fadf535d8b3078ebe16b10160fad64474a7b558f7a56f41022feec18e013abd8fda2b96779e534d0675fbcc13ba9f9eb96319fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b0000829512099df32814820fbf7be91cd13b77f4e4e599f8bbca388247856073472312a9ff4273b9cd08000000000000616e888cda842c661577818c2069cb41a73b4b7fc28882cad315db3fffc5183deca7a32838ec0ad70d4f55382c1879b71ec504d2f3e3883428ee350123a5cad346f6d517f6fcea5b6bc4fcffffffffffff03f419a6e45fd98e77da4a8202ebbdafe6b2e38c9d7e506f5da2958cf7f0d9b31ca3275e64e29d39d158cebe43308cf8760588001172e19685e9a334aec76530861b772a1da96f0a227514bd0bc26df2b50a45e4eceae1ddfe88d58879d1cb253e0471714fa124211203000000000000001f502b6c760655ffb20ae13a1a94f7ae229fbf5da7cae4f994ee82fc98c864c3e352ad16f98208cf1469dd6c1212582a3687f7dbdf708929643f3f0f4e947c40742452685ec044fc71eaca9abc92145677e14054331801b1412b39049ed782742f9a1b6aca9123b243c1a68c047f2db79701b62c8cc0d2f608c7f62d107ebc68df9f8d296721c9d465dad604bc0dc500000000000000000000000000000000000000000568a4997dd54fa83aacd2d209f66de2e26dc2fd862a0b8ee149c148197176745fc8ff1dd5bd6611daa882298a37b041b34668d4662ea8fbe2e787dfc4c8bef2124f0439b2d18ec83361da5cc732f365b0a528db31b90bc1405b6d5301c34319ccae29b1d6034b665c79baeeeac5e71d24e2e3b6ffc5bc2dcb600e645c0048b45e286a49e888d21abfc817085d9c00e08525207e33505226fdda16e6da6dd31f7a1736029b87e8d6a05bcb356298d7dccd7de2af0885bd4939ff96ab74da3871b077e4058c8752ba4994eafed8b239d781638fa339fa0f7dd135af3f80e40f4b885770cf27d205a45d4702f97b8b7c57b180c50b2b370dfb35dc895e8f05d6e71829f36150b2cde314693f3e0dc35f8cdd76bdde2018366c3201307c370433762676f72e68c962430a0000000000000000000000000000e737dc2e1a3fdebbb510c663d24f72b954965201f775b3739c14dd4832647c028be09f2809fd396fa26532a30a37737e95f0f41dd024b7bf8a6bf807c9fd9b8c7a39717729339dc3054117cb95693bdd61edcc2860b66545e194a961bdc5457d76ae1a87050e12ead896f3337d5a000000000000000000400000602bfd2f1ace65f2e74dc99cb73a37f40362b7904e8a0ea8d2d9805c924f9985d22972031a1223afa1288af3f48c93fcdb11963d0b748287448f722dc180e87637b662b11effabf45beda2e3a7e1adf8f94b619fa152b33440f2358a745848caf7000eb305c936d26964a2a85e133d01368b8d228d02f96064de261cf02c9632a0eb4ab259e8f4dd63d8b6d2d6b2a0c29fbab7d04d73a381c21f1c344655b64e12f216fbc646cc6bd60ca773d187f2fd317f6cb2309d1a13526a44b7d9b2bf93947dc3ac3340a7a114051d33d152310574f0d784910dc1a8f5bbf3610c544437626236458f285196161496389b02ba46a72da0149b4ddfdd4ef7862a07395752a37cb0244e94e1310e0c0a148a9a48b149bf2f345f3f89813c9eb05160f63f0b363deee5cb77ea6e951857e1942e5c56d72d724af7aa24a8aadb512f3302972c53b0eb7a693e0b0c775b21aed72995cfe9e9347a07d43ce3db9f22d461e86416ffff6f2e4e36306630052a2b03ee36ec52af0d684fabd5f38adffaa6c5a7a8100d1aefaf8576b363690b76e2eb96b07ab790cf63cfc334b7469b5b5b397c622f7c3ee064f9272443bcb928b6f7a2450cd33550a42843b0b5ac9e37134c81bd56b72e1030b05a5b3ac47b5af22a9dff0700004adacc71db2b15b4ffd98e30224763382ade45d164be76b2e9a674448f3ee2cd29707468df87ea6e8e6333b5fcb1b8b43a7c005ea800000000000000000000010000000000387592adc78ccfe479549e6f4efc14c4a5cfe845e6157d6fe70b278147edf0e25065ec6b17f8022493d105c9c31121e7957aeec5f7f2af0446d128778c8bf15b87a0eec6f4c75966b5f0e06744bda63134223416102aea1254d57c390e1f84ec7d5c3a758ce59c9e2c4ce1f28b6783661e272bf1cb5c8ac177aa9c6ccbead9a96b22394afb840247e5d69473b836f070dc0bf9302e33b03d4e07395c82e33667726b51ff24b0bbea730702835159e3517ffb3da0d01833589fec3bdab629b21e5d9e87c3c58d962ff5e75c81f583c64b7d5a643674801e18b06ca98b49d9e28d004c7ebccf076c64ef71421f672b0948b18ab5af448ca9446e71ba6dd4bd15a12553066de7cb767a121d56d9d26ce27fdbe6721191f2ed1cc3f9c5e3d5cba447c4793165b3cbf51c7d0cf9edf823641e1bc7db7803b60dc8b21e49a33a73ac00337067dfd3ecaf4e6dceee1048f300000000000000000000000000000000000000000000007958a50896df65337581398793d0a9abe75251908c07d2957ca70ad7ac31aae536294d6a944cd35f46cb554d8aecae5a72cb24596d896ff9ad83473567b6cb9d032c395a1459399cea31ebafc1e77649b55af527ca0f1ac972ee72a78391473c1b9e0000000000000000004076eac7e605f8de6f0ce5702af52c5d78bac0097d92f078a3a98229ebf281c3c876d2614109b69967871fea621fb2a29a77a1516b51d9b1c3c5ef1436f50fad4a1cd92a211fec61d37c8b410a20fbdeb642228d6cfeb8cda8eea3a7f343fcaa0459b9d916abb668d4799534307084ee7d854dd0850000000000000000000000002f40c3e24f9c0a56edf543425058c35febda26a43bdab770212186b84421d8b841cf9181d47c08cb392e414c1efba9978a976a9e65ae443644dbdb32a50cdc717a34d1aa9ced37820a6d1cd0920a9a07e36a85e967bfa7f2caf1c9b52c06f4d178fbb91a169e9533e401819e57cab814761819b0fc517239a6777dbb92a7462538dbd8a4b84b160a598c75bafa5a9b388a44303dbebc83ac2ad2da3ae80c851bc2fdb8d444597fdac4538aa33bb9204ffe534b15a1878be30157d0815d38fc2effeb7b87d6bd15e21c7b7c7d1ad7b3fd69b4bd06716a203e82f4c0413719eae0967fc70f03570375c2d0986b0200897e505afb6f3f8eb5384e3300000000000000000000000000006b78992d5c13cc1e4da0c915f6008be5cbc0ba1eea48d5967c5e5106411dda3578c91d93ecf4a5efdf306f6b5378db3b22f5aae576342ff9a2eda7080027be316100af0ec6f0e9f227e239fe2d8c78555aaaa969581860f846df35757281a6d3f2e6de960c30f98987ba99d1edfb39dece89262a2e71cb50b7104f611b8db7639e6a5b485135bead15cfada2b5ffa490d60f6b8211f6ada947d06fac138f829b24f2c9d60f3d6672ef8e86ddcdf4dba4f20f370c58f49c9d0100b519f8bc685f176c3f305ced21df0c8acace252a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = socket(0x23, 0x5, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x113, 0x40, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x113, 0x40, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x20000000, 0x0, 0x0, 0x1, 0x3}, {0xfffffffffffffffc, 0x0, 0x1000000}, 0xffffffff, 0x0, 0x1}, {{@in=@empty, 0x2, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x870}}, 0x40040) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x8, 'veth1_to_bond\x00', {'caif0\x00'}, 0x9}) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x8, 'veth1_to_bond\x00', {'caif0\x00'}, 0x9}) 15.405442929s ago: executing program 1 (id=961): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r0, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x74}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x2) 15.200754384s ago: executing program 3 (id=962): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000140)="bf5bd9451da3af0673697d9914ad55c2585aa641220838a6f0305aed4d8469a0ca9fe7b37f712a1d9bb5e512967eba64117f66345748d410d2b5df5ca07f8c4fd14234e24b34284958b54f119613d91df66fc90fcfceeb70ca", &(0x7f0000000a80)=""/4096}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, r2}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e617400"], 0xf0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vxcan0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1], 0x1, [0x8, 0x4, 0xc000, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x202b, 0x0, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x11c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r12, &(0x7f0000000380)}, 0x20) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r13, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES64=r13], 0x38}, 0x0) 1.173457667s ago: executing program 32 (id=950): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002060101000000000300000000000000050005000a001800050001000700000005000400030000000900020073797a310000000011000300686173683a6e"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r3, &(0x7f00000000c0)=""/81, 0x51) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x8000000}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) setsockopt$inet_tcp_int(r1, 0x29, 0x8, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0xf7f, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf49, 0x0, 0x0, @empty, @local, {[], "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"}}}}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4a, 0x800000, 0x8, 0x5, 0x80, 0x81}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x118) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x152) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffb}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 154.548256ms ago: executing program 33 (id=961): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r0, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x74}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x2) 116.034387ms ago: executing program 34 (id=959): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a000000060001003c"], 0x1c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async, rerun: 32) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) (async, rerun: 64) r3 = socket(0x2, 0x80802, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000740)={'ip6gre0\x00', 0x0}) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) r4 = socket(0x840000000002, 0x3, 0xfa) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ecb-blowfish-asm,tgr192)\x00'}, 0x58) (async, rerun: 64) r6 = socket(0xa, 0x3, 0x2) (rerun: 64) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@dstopts_2292={{0x18, 0x29, 0x3e, {0x2c}}}], 0x18}}], 0x2, 0x4004804) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd07, 0x25dfdafd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', 0x0}) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) unshare(0x6a040000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 64.149278ms ago: executing program 35 (id=962): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000140)="bf5bd9451da3af0673697d9914ad55c2585aa641220838a6f0305aed4d8469a0ca9fe7b37f712a1d9bb5e512967eba64117f66345748d410d2b5df5ca07f8c4fd14234e24b34284958b54f119613d91df66fc90fcfceeb70ca", &(0x7f0000000a80)=""/4096}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, r2}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e617400"], 0xf0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vxcan0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1], 0x1, [0x8, 0x4, 0xc000, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x202b, 0x0, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x11c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r12, &(0x7f0000000380)}, 0x20) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r13, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES64=r13], 0x38}, 0x0) 0s ago: executing program 36 (id=957): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x18, &(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000007500f4fff0ffffffbf91000000000000b70200000300000085000000ae000000b70000000000000095000000000000003604c9c0d734a6721cf547a7b1fd13fba7eb6545f66be890d72fed25a134361411863a8ff74f08a482ef0da055e930161e3437d6f4f8fe"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000340)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x80}, 0x8) setsockopt(r5, 0x84, 0x80, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="030c25bd5200fbdbdf652c000000ec17820d1cc14db653d56349c11fba2dc31934810db517f4ebf0b94202b1f17f4dab947b97ff"], 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) r8 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): 15C2:5505.0001: reserved main item tag 0xe [ 82.784230][ T5977] hid-generic 0005:15C2:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 83.241103][ T6058] wg1: entered promiscuous mode [ 83.246013][ T6058] wg1: entered allmulticast mode [ 83.428994][ T5875] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 83.828702][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.989175][ T6080] team0 (unregistering): Port device team_slave_0 removed [ 85.034124][ T6080] team0 (unregistering): Port device team_slave_1 removed [ 85.274242][ T6090] team0: Device gtp0 is of different type [ 86.129283][ T6115] unknown channel width for channel at 909000KHz? [ 86.129764][ T6113] __nla_validate_parse: 5 callbacks suppressed [ 86.129778][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 86.150746][ T6115] unknown channel width for channel at 909000KHz? [ 86.172988][ T6115] unknown channel width for channel at 909000KHz? [ 86.470660][ T6130] Zero length message leads to an empty skb [ 86.614462][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.623197][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.776146][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.792115][ T9] cfg80211: failed to load regulatory.db [ 86.799113][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.917861][ T6134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.34'. [ 87.035205][ T6140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.066104][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.131314][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.158386][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.275666][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.303929][ T6154] netlink: 260 bytes leftover after parsing attributes in process `syz.3.39'. [ 87.314979][ T6154] netlink: 260 bytes leftover after parsing attributes in process `syz.3.39'. [ 87.585096][ T6170] netlink: 72 bytes leftover after parsing attributes in process `syz.0.41'. [ 87.609786][ T6166] netlink: 'syz.0.41': attribute type 1 has an invalid length. [ 87.630012][ T6166] netlink: 'syz.0.41': attribute type 1 has an invalid length. [ 87.739795][ T6175] netlink: 36 bytes leftover after parsing attributes in process `syz.2.46'. [ 87.768877][ T6175] netlink: 36 bytes leftover after parsing attributes in process `syz.2.46'. [ 88.084801][ T6188] netlink: 48 bytes leftover after parsing attributes in process `syz.3.49'. [ 88.125832][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 88.255260][ T6196] veth1_macvtap: left promiscuous mode [ 88.272539][ T6196] macsec0: entered allmulticast mode [ 88.360104][ T6196] veth1_macvtap: entered promiscuous mode [ 88.383026][ T6196] veth1_macvtap: entered allmulticast mode [ 88.389626][ T6196] macsec0: left allmulticast mode [ 88.394766][ T6196] veth1_macvtap: left allmulticast mode [ 88.423367][ T6204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.51'. [ 88.638223][ T6215] bridge_slave_0: Device is already in use. [ 88.973844][ T6225] lo speed is unknown, defaulting to 1000 [ 88.980268][ T6225] lo speed is unknown, defaulting to 1000 [ 89.063960][ T6225] lo speed is unknown, defaulting to 1000 [ 89.089052][ T6225] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 89.119969][ T6225] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 89.217552][ T6225] lo speed is unknown, defaulting to 1000 [ 89.229662][ T6225] lo speed is unknown, defaulting to 1000 [ 89.245154][ T6225] lo speed is unknown, defaulting to 1000 [ 89.349684][ T6225] lo speed is unknown, defaulting to 1000 [ 89.516961][ T6225] lo speed is unknown, defaulting to 1000 [ 89.555749][ T6225] lo speed is unknown, defaulting to 1000 [ 89.599793][ T6225] lo speed is unknown, defaulting to 1000 [ 89.833409][ T6258] netlink: 'syz.3.67': attribute type 5 has an invalid length. [ 90.084539][ T6253] lo speed is unknown, defaulting to 1000 [ 90.252828][ T6263] netlink: 'syz.0.68': attribute type 7 has an invalid length. [ 90.824817][ T6278] ip6gre1: entered allmulticast mode [ 90.962817][ T6282] netlink: 'syz.0.72': attribute type 3 has an invalid length. [ 91.309353][ T6288] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20000 [ 91.319594][ T9] IPVS: starting estimator thread 0... [ 91.372684][ T6291] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.417836][ T6289] IPVS: using max 24 ests per chain, 57600 per kthread [ 91.465462][ T6295] __nla_validate_parse: 9 callbacks suppressed [ 91.465480][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 91.505359][ T6297] netlink: 248 bytes leftover after parsing attributes in process `syz.4.77'. [ 91.740105][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 91.831422][ T6309] netlink: 'syz.2.79': attribute type 7 has an invalid length. [ 91.842257][ T6295] bridge_slave_1: left allmulticast mode [ 91.848126][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 91.899507][ T6295] bridge_slave_1: left promiscuous mode [ 91.930640][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.944060][ T6295] bridge_slave_0: left allmulticast mode [ 91.955706][ T6295] bridge_slave_0: left promiscuous mode [ 91.962865][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.280923][ T6304] bridge_slave_1: left allmulticast mode [ 92.287496][ T6304] bridge_slave_1: left promiscuous mode [ 92.294591][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.310420][ T6304] bridge_slave_0: left allmulticast mode [ 92.327819][ T6304] bridge_slave_0: left promiscuous mode [ 92.352425][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.706477][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 92.739604][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.81'. [ 92.757922][ T6316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.81'. [ 92.779817][ T6325] IPVS: sh: FWM 3 0x00000003 - no destination available [ 92.781314][ T6324] bond0: entered allmulticast mode [ 92.786908][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 92.797934][ T6324] bond_slave_0: entered allmulticast mode [ 92.815322][ T6324] bond_slave_1: entered allmulticast mode [ 92.981596][ T3480] syzkaller0: tun_net_xmit 76 [ 92.996983][ T3480] syzkaller0: tun_net_xmit 48 [ 93.009149][ T43] syzkaller0: tun_net_xmit 76 [ 93.074480][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 93.140693][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 93.255071][ T6345] netlink: 32 bytes leftover after parsing attributes in process `syz.3.89'. [ 94.131129][ T6341] veth0: entered promiscuous mode [ 94.150573][ T6349] veth1_macvtap: left promiscuous mode [ 94.249427][ T6346] veth0: left promiscuous mode [ 94.261034][ T6354] netlink: 'syz.1.91': attribute type 7 has an invalid length. [ 94.650288][ T980] IPVS: starting estimator thread 0... [ 94.669273][ T6372] IPVS: lc: FWM 3 0x00000003 - no destination available [ 94.686115][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 94.697464][ T6376] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.748136][ T6374] IPVS: using max 32 ests per chain, 76800 per kthread [ 95.008011][ T6390] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 95.183352][ T6400] netlink: 'syz.4.103': attribute type 3 has an invalid length. [ 95.222778][ T6395] nbd: must specify an index to disconnect [ 95.231695][ T6403] netlink: 'syz.1.104': attribute type 7 has an invalid length. [ 95.445043][ T6406] sctp: [Deprecated]: syz.4.105 (pid 6406) Use of int in max_burst socket option. [ 95.445043][ T6406] Use struct sctp_assoc_value instead [ 95.469559][ T6410] tipc: Started in network mode [ 95.474484][ T6410] tipc: Node identity 2d000000000000000000000000000001, cluster identity 4711 [ 95.524557][ T6410] tipc: Enabling of bearer rejected, failed to enable media [ 95.540544][ T6388] IPVS: lc: FWM 3 0x00000003 - no destination available [ 95.547638][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 95.567648][ T5871] IPVS: starting estimator thread 0... [ 95.667689][ T6414] IPVS: using max 26 ests per chain, 62400 per kthread [ 95.764027][ T6420] netlink: 'syz.4.109': attribute type 9 has an invalid length. [ 95.936461][ T6423] netlink: 'syz.2.111': attribute type 13 has an invalid length. [ 95.959558][ T6423] netlink: 'syz.2.111': attribute type 17 has an invalid length. [ 96.190626][ T6423] bond0: left allmulticast mode [ 96.210316][ T6444] netlink: 'syz.0.117': attribute type 7 has an invalid length. [ 96.219490][ T6423] bond_slave_0: left allmulticast mode [ 96.233510][ T6423] bond_slave_1: left allmulticast mode [ 96.247863][ T6423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.347191][ T6446] lo speed is unknown, defaulting to 1000 [ 96.498231][ T6458] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 96.607976][ T6461] __nla_validate_parse: 7 callbacks suppressed [ 96.607995][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 96.662158][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'. [ 96.675204][ T6461] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 96.684016][ T6461] netlink: 10 bytes leftover after parsing attributes in process `syz.2.122'. [ 96.938945][ T6476] netlink: 'syz.4.128': attribute type 21 has an invalid length. [ 96.952413][ T6476] netlink: 60 bytes leftover after parsing attributes in process `syz.4.128'. [ 97.126518][ T6483] 8021q: VLANs not supported on gre0 [ 97.521630][ T6498] IPVS: lc: FWM 3 0x00000003 - no destination available [ 97.565498][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 97.987269][ T6516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.139'. [ 98.190409][ T6524] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:21 [ 98.208314][ T6524] sctp: [Deprecated]: syz.0.142 (pid 6524) Use of int in max_burst socket option. [ 98.208314][ T6524] Use struct sctp_assoc_value instead [ 98.376771][ T6532] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.381877][ T6542] netlink: 104 bytes leftover after parsing attributes in process `syz.2.146'. [ 98.455140][ T6541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.145'. [ 98.462953][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.146'. [ 98.475142][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.146'. [ 98.526531][ T6532] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.556357][ T6542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.146'. [ 98.691192][ T6532] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.909883][ T6532] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.946257][ T6563] wg1 speed is unknown, defaulting to 1000 [ 98.954543][ T6563] wg1 speed is unknown, defaulting to 1000 [ 98.969283][ T6563] wg1 speed is unknown, defaulting to 1000 [ 99.011847][ T6563] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 99.051135][ T6563] wg1 speed is unknown, defaulting to 1000 [ 99.060617][ T6563] wg1 speed is unknown, defaulting to 1000 [ 99.069327][ T6563] wg1 speed is unknown, defaulting to 1000 [ 99.077266][ T6563] wg1 speed is unknown, defaulting to 1000 [ 99.087399][ T6563] wg1 speed is unknown, defaulting to 1000 [ 99.185694][ T1097] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.252439][ T1097] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.267247][ T1097] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.351153][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.397298][ T6584] lo speed is unknown, defaulting to 1000 [ 99.428629][ T6584] wg1 speed is unknown, defaulting to 1000 [ 99.826287][ T6603] team0: entered promiscuous mode [ 99.871896][ T6603] team0: entered allmulticast mode [ 100.115926][ T6606] tipc: Started in network mode [ 100.127536][ T6606] tipc: Node identity aaaaaaaaaa1c, cluster identity 4711 [ 100.144195][ T6606] tipc: Enabled bearer , priority 10 [ 100.194560][ T6614] lo speed is unknown, defaulting to 1000 [ 100.205023][ T6608] lo speed is unknown, defaulting to 1000 [ 100.281310][ T6608] wg1 speed is unknown, defaulting to 1000 [ 100.303758][ T6629] netlink: 'syz.4.168': attribute type 1 has an invalid length. [ 100.397214][ T6629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.427968][ T6614] wg1 speed is unknown, defaulting to 1000 [ 100.502196][ T6644] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20001 [ 100.541022][ T6643] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20001 [ 100.568076][ T6635] bond1: (slave gretap1): making interface the new active one [ 100.582674][ T6635] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 100.663826][ T6628] lo speed is unknown, defaulting to 1000 [ 100.739196][ T6628] wg1 speed is unknown, defaulting to 1000 [ 101.256493][ T6664] lo speed is unknown, defaulting to 1000 [ 101.277519][ T43] tipc: Node number set to 11971242 [ 101.305347][ T6664] wg1 speed is unknown, defaulting to 1000 [ 101.946337][ T6685] lo speed is unknown, defaulting to 1000 [ 101.971656][ T6685] wg1 speed is unknown, defaulting to 1000 [ 102.297115][ T6722] __nla_validate_parse: 12 callbacks suppressed [ 102.297135][ T6722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.193'. [ 102.299444][ T6717] netlink: 40 bytes leftover after parsing attributes in process `syz.4.191'. [ 102.431407][ T6729] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 102.513433][ T6732] netlink: 40 bytes leftover after parsing attributes in process `syz.4.194'. [ 102.600831][ T6735] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 102.642504][ T6723] lo speed is unknown, defaulting to 1000 [ 102.834953][ T6723] wg1 speed is unknown, defaulting to 1000 [ 103.343375][ T6753] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 103.538825][ T6765] Bluetooth: MGMT ver 1.23 [ 103.626226][ T6767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.203'. [ 103.701788][ T6765] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.765023][ T6772] tipc: Started in network mode [ 103.775659][ T6772] tipc: Node identity 22cf59b1ce22, cluster identity 4711 [ 103.804515][ T6772] tipc: Enabled bearer , priority 0 [ 103.889737][ T6779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.948817][ T6765] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.005292][ T6772] tipc: Disabling bearer [ 104.061989][ T6775] lo speed is unknown, defaulting to 1000 [ 104.122408][ T6765] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.158902][ T6775] wg1 speed is unknown, defaulting to 1000 [ 104.222734][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 104.290553][ T6765] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.643555][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.773996][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.846511][ T3458] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.895061][ T3499] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.457396][ T6826] lo speed is unknown, defaulting to 1000 [ 105.480355][ T6826] wg1 speed is unknown, defaulting to 1000 [ 105.504314][ T6839] netlink: 236 bytes leftover after parsing attributes in process `syz.2.218'. [ 105.765384][ T6851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.222'. [ 105.807931][ T6851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.222'. [ 105.923325][ T6857] netlink: 'syz.1.224': attribute type 1 has an invalid length. [ 106.205009][ T6864] lo speed is unknown, defaulting to 1000 [ 106.226112][ T6870] netlink: 'syz.0.229': attribute type 1 has an invalid length. [ 106.262243][ T6864] wg1 speed is unknown, defaulting to 1000 [ 106.275172][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.231'. [ 106.430776][ T6887] netlink: 96 bytes leftover after parsing attributes in process `syz.1.230'. [ 106.991847][ T6903] team0: Port device team_slave_0 removed [ 106.994142][ T9] IPVS: starting estimator thread 0... [ 107.090005][ T6916] IPVS: using max 31 ests per chain, 74400 per kthread [ 107.228993][ T6924] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.251804][ T6930] tipc: Enabled bearer , priority 0 [ 107.260341][ T6930] syzkaller0: entered promiscuous mode [ 107.266006][ T6930] syzkaller0: entered allmulticast mode [ 107.317814][ T6935] batadv_slave_1: entered promiscuous mode [ 107.328998][ T6931] lo speed is unknown, defaulting to 1000 [ 107.354792][ T6930] tipc: Resetting bearer [ 107.365755][ T6928] tipc: Resetting bearer [ 107.400962][ T6928] tipc: Disabling bearer [ 107.411512][ T6931] wg1 speed is unknown, defaulting to 1000 [ 107.413137][ T6925] batadv_slave_1: left promiscuous mode [ 107.429385][ T6938] netlink: 'syz.3.247': attribute type 13 has an invalid length. [ 107.449296][ T6938] netlink: 'syz.3.247': attribute type 17 has an invalid length. [ 107.559377][ T6938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.598314][ T6952] __nla_validate_parse: 3 callbacks suppressed [ 107.598331][ T6952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.248'. [ 107.607355][ T5977] lo speed is unknown, defaulting to 1000 [ 107.665002][ T6949] wg1: left promiscuous mode [ 107.677834][ T6949] wg1: left allmulticast mode [ 107.704563][ T92] wg1 speed is unknown, defaulting to 1000 [ 107.717639][ T92] syz0: Port: 1 Link ACTIVE [ 108.086620][ T6964] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 108.110201][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.252'. [ 108.185718][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 108.299949][ T6977] netlink: 'syz.3.254': attribute type 39 has an invalid length. [ 108.828726][ T6994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.259'. [ 108.862867][ T6998] vxcan1: entered allmulticast mode [ 108.881959][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 108.900112][ T6998] vxcan1: left allmulticast mode [ 108.942328][ T7003] netlink: 9 bytes leftover after parsing attributes in process `syz.0.262'. [ 108.972488][ T7003] ..0·: renamed from hsr0 (while UP) [ 108.992944][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 109.008927][ T6998] raw_sendmsg: syz.2.261 forgot to set AF_INET. Fix it! [ 109.017101][ T7003] ..0·: entered allmulticast mode [ 109.043937][ T7003] hsr_slave_0: entered allmulticast mode [ 109.068823][ T7003] hsr_slave_1: entered allmulticast mode [ 109.092086][ T7003] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 109.124083][ T7010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.485957][ T7016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.586298][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 110.053179][ T7031] lo speed is unknown, defaulting to 1000 [ 110.071111][ T7031] wg1 speed is unknown, defaulting to 1000 [ 110.454709][ T7048] vxcan1: entered allmulticast mode [ 110.461022][ T7048] vxcan1: left allmulticast mode [ 111.156090][ T7074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.281'. [ 111.208060][ T7074] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 111.535138][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 111.564218][ T7081] netlink: 'syz.0.283': attribute type 4 has an invalid length. [ 111.646792][ T7081] : renamed from bond0 (while UP) [ 111.746608][ T7081] netlink: 'syz.0.283': attribute type 3 has an invalid length. [ 112.040054][ T7097] hsr0: entered promiscuous mode [ 112.045609][ T7097] macvtap1: entered promiscuous mode [ 112.427471][ T7110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.466787][ T7107] IPVS: sh: FWM 3 0x00000003 - no destination available [ 112.474071][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 112.586762][ T7110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.757794][ T7117] __nla_validate_parse: 4 callbacks suppressed [ 112.757813][ T7117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.295'. [ 112.985493][ T7124] dvmrp0: entered allmulticast mode [ 113.021436][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 113.164315][ T7134] netlink: 32 bytes leftover after parsing attributes in process `syz.0.299'. [ 113.357515][ T7147] ip6gretap0: entered promiscuous mode [ 113.365210][ T7147] macsec0: entered promiscuous mode [ 113.370968][ T7147] macsec0: entered allmulticast mode [ 113.376873][ T7147] ip6gretap0: entered allmulticast mode [ 113.648781][ T7157] bond0: entered promiscuous mode [ 113.654213][ T7157] bond_slave_0: entered promiscuous mode [ 113.662212][ T7157] bond_slave_1: entered promiscuous mode [ 113.673364][ T7157] batadv0: entered promiscuous mode [ 113.682284][ T7157] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 114.243968][ T6994] Set syz1 is full, maxelem 65536 reached [ 114.359758][ T7161] IPVS: sh: FWM 3 0x00000003 - no destination available [ 114.366823][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 114.450620][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 114.499876][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 114.647696][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 114.812160][ T7200] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 114.901213][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.317'. [ 114.910227][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 114.946105][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 115.134921][ T7224] netlink: 'syz.2.325': attribute type 3 has an invalid length. [ 115.182286][ T7229] netlink: 'syz.3.323': attribute type 13 has an invalid length. [ 115.214263][ T7229] netlink: 'syz.3.323': attribute type 17 has an invalid length. [ 115.265116][ T7222] lo speed is unknown, defaulting to 1000 [ 115.302879][ T7229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.334376][ T7222] wg1 speed is unknown, defaulting to 1000 [ 115.456051][ T7234] lo speed is unknown, defaulting to 1000 [ 115.487648][ T7234] wg1 speed is unknown, defaulting to 1000 [ 115.846361][ T7263] tipc: Enabled bearer , priority 0 [ 116.032937][ T7268] IPVS: lc: FWM 3 0x00000003 - no destination available [ 116.051519][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 116.360047][ T7282] netlink: 48 bytes leftover after parsing attributes in process `syz.4.335'. [ 116.465353][ T7288] netlink: 'syz.1.337': attribute type 13 has an invalid length. [ 116.505237][ T7288] netlink: 'syz.1.337': attribute type 17 has an invalid length. [ 116.546549][ T7287] netlink: 48 bytes leftover after parsing attributes in process `syz.4.335'. [ 116.557203][ T7282] syz.4.335 (7282) used greatest stack depth: 17864 bytes left [ 116.583956][ T7288] gretap0: refused to change device tx_queue_len [ 116.598323][ T7288] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 116.638795][ T7287] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 116.648961][ T7285] lo speed is unknown, defaulting to 1000 [ 116.656454][ T7285] wg1 speed is unknown, defaulting to 1000 [ 116.677928][ T7287] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 116.697888][ T7287] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 116.701047][ T7293] lo speed is unknown, defaulting to 1000 [ 116.838110][ T7293] wg1 speed is unknown, defaulting to 1000 [ 116.879802][ T7301] netlink: 'syz.0.340': attribute type 4 has an invalid length. [ 116.942523][ T7304] netlink: 'syz.0.340': attribute type 4 has an invalid length. [ 117.173546][ T7307] tipc: Enabled bearer , priority 0 [ 117.213400][ T7313] tipc: Enabling of bearer rejected, already enabled [ 117.258671][ T7307] syzkaller0: entered promiscuous mode [ 117.279951][ T7307] syzkaller0: entered allmulticast mode [ 117.430504][ T7307] tipc: Resetting bearer [ 117.519489][ T7307] tipc: Disabling bearer [ 117.748216][ T7321] netlink: 'syz.0.345': attribute type 13 has an invalid length. [ 117.757110][ T7336] lo speed is unknown, defaulting to 1000 [ 117.782530][ T7336] wg1 speed is unknown, defaulting to 1000 [ 117.901265][ T7343] __nla_validate_parse: 3 callbacks suppressed [ 117.901312][ T7343] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.352'. [ 117.922716][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 118.086943][ T7346] netdevsim netdevsim0: Direct firmware load for ./bus failed with error -2 [ 118.111018][ T7346] netdevsim netdevsim0: Falling back to sysfs fallback for: ./bus [ 118.257053][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'. [ 118.542958][ T7358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.673384][ T7373] FAULT_INJECTION: forcing a failure. [ 118.673384][ T7373] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.686969][ T7373] CPU: 0 UID: 0 PID: 7373 Comm: syz.2.360 Not tainted syzkaller #0 PREEMPT(full) [ 118.687001][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.687017][ T7373] Call Trace: [ 118.687028][ T7373] [ 118.687037][ T7373] dump_stack_lvl+0x189/0x250 [ 118.687071][ T7373] ? __pfx____ratelimit+0x10/0x10 [ 118.687101][ T7373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.687123][ T7373] ? __pfx__printk+0x10/0x10 [ 118.687148][ T7373] ? __might_fault+0xb0/0x130 [ 118.687185][ T7373] should_fail_ex+0x414/0x560 [ 118.687218][ T7373] _copy_from_user+0x2d/0xb0 [ 118.687243][ T7373] do_ipv6_setsockopt+0x23e/0x2eb0 [ 118.687267][ T7373] ? aa_label_sk_perm+0x4cd/0x630 [ 118.687301][ T7373] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 118.687323][ T7373] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 118.687364][ T7373] ? vfs_write+0x956/0xb30 [ 118.687392][ T7373] ? __pfx___might_resched+0x10/0x10 [ 118.687431][ T7373] ? __lock_acquire+0xab9/0xd20 [ 118.687463][ T7373] ? aa_sk_perm+0x81e/0x950 [ 118.687495][ T7373] ? __pfx_aa_sk_perm+0x10/0x10 [ 118.687526][ T7373] ? __fget_files+0x2a/0x420 [ 118.687551][ T7373] ? aa_sock_opt_perm+0xff/0x1b0 [ 118.687573][ T7373] ipv6_setsockopt+0x59/0x170 [ 118.687590][ T7373] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 118.687610][ T7373] do_sock_setsockopt+0x17c/0x1b0 [ 118.687635][ T7373] __x64_sys_setsockopt+0x13f/0x1b0 [ 118.687658][ T7373] do_syscall_64+0xfa/0x3b0 [ 118.687675][ T7373] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.687701][ T7373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.687717][ T7373] ? clear_bhb_loop+0x60/0xb0 [ 118.687738][ T7373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.687755][ T7373] RIP: 0033:0x7f09bfb8eec9 [ 118.687777][ T7373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.687792][ T7373] RSP: 002b:00007f09c0944038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 118.687815][ T7373] RAX: ffffffffffffffda RBX: 00007f09bfde5fa0 RCX: 00007f09bfb8eec9 [ 118.687829][ T7373] RDX: 0000000000000023 RSI: 0000000000000029 RDI: 0000000000000003 [ 118.687840][ T7373] RBP: 00007f09c0944090 R08: 00000000000000e8 R09: 0000000000000000 [ 118.687852][ T7373] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 118.687864][ T7373] R13: 00007f09bfde6038 R14: 00007f09bfde5fa0 R15: 00007ffd9e078f28 [ 118.687895][ T7373] [ 119.124854][ T7390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.366'. [ 119.146135][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'. [ 119.298435][ T7391] bridge_slave_1: left allmulticast mode [ 119.314841][ T7391] bridge_slave_1: left promiscuous mode [ 119.328340][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.369038][ T7391] bridge_slave_0: left allmulticast mode [ 119.396361][ T7391] bridge_slave_0: left promiscuous mode [ 119.403804][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.608346][ T7406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.368'. [ 119.821505][ T7413] netlink: 'syz.1.371': attribute type 21 has an invalid length. [ 119.848085][ T7413] netlink: 'syz.1.371': attribute type 22 has an invalid length. [ 119.871362][ T7413] netlink: 'syz.1.371': attribute type 23 has an invalid length. [ 119.888480][ T7413] netlink: 'syz.1.371': attribute type 25 has an invalid length. [ 119.906585][ T7413] netlink: 96 bytes leftover after parsing attributes in process `syz.1.371'. [ 120.308575][ T7440] delete_channel: no stack [ 120.642976][ T7450] syz.3.380: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 120.677744][ T7450] CPU: 0 UID: 0 PID: 7450 Comm: syz.3.380 Not tainted syzkaller #0 PREEMPT(full) [ 120.677770][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.677781][ T7450] Call Trace: [ 120.677789][ T7450] [ 120.677798][ T7450] dump_stack_lvl+0x189/0x250 [ 120.677829][ T7450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.677853][ T7450] ? __pfx__printk+0x10/0x10 [ 120.677878][ T7450] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 120.677897][ T7450] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 120.677918][ T7450] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 120.677938][ T7450] warn_alloc+0x214/0x310 [ 120.677969][ T7450] ? __pfx_warn_alloc+0x10/0x10 [ 120.678003][ T7450] ? __get_vm_area_node+0x28f/0x300 [ 120.678029][ T7450] ? nf_tables_newset+0x132b/0x2530 [ 120.678060][ T7450] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 120.678115][ T7450] ? alloc_pages_mpol+0x3cd/0x4a0 [ 120.678147][ T7450] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 120.678174][ T7450] ? rcu_is_watching+0x15/0xb0 [ 120.678192][ T7450] ? nf_tables_newset+0x132b/0x2530 [ 120.678213][ T7450] ? nf_tables_newset+0x132b/0x2530 [ 120.678234][ T7450] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 120.678260][ T7450] ? nf_tables_newset+0x132b/0x2530 [ 120.678284][ T7450] ? nft_table_lookup+0x211/0x230 [ 120.678317][ T7450] ? nft_set_lookup+0x128/0x150 [ 120.678343][ T7450] ? nft_hash_privsize+0xcf/0xf0 [ 120.678368][ T7450] nf_tables_newset+0x132b/0x2530 [ 120.678408][ T7450] ? __pfx_nf_tables_newset+0x10/0x10 [ 120.678457][ T7450] ? __nla_parse+0x40/0x60 [ 120.678481][ T7450] nfnetlink_rcv+0x11d6/0x2590 [ 120.678549][ T7450] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 120.678596][ T7450] ? ref_tracker_free+0x63a/0x7d0 [ 120.678653][ T7450] ? __netlink_deliver_tap+0x807/0x850 [ 120.678672][ T7450] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.678708][ T7450] netlink_unicast+0x82f/0x9e0 [ 120.678737][ T7450] ? __pfx_netlink_unicast+0x10/0x10 [ 120.678759][ T7450] ? netlink_sendmsg+0x642/0xb30 [ 120.678778][ T7450] ? skb_put+0x11b/0x210 [ 120.678804][ T7450] netlink_sendmsg+0x805/0xb30 [ 120.678837][ T7450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.678864][ T7450] ? aa_sock_msg_perm+0xf1/0x1d0 [ 120.678895][ T7450] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.678914][ T7450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.678937][ T7450] __sock_sendmsg+0x219/0x270 [ 120.678971][ T7450] ____sys_sendmsg+0x505/0x830 [ 120.679003][ T7450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.679038][ T7450] ? import_iovec+0x74/0xa0 [ 120.679066][ T7450] ___sys_sendmsg+0x21f/0x2a0 [ 120.679094][ T7450] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.679166][ T7450] ? __fget_files+0x2a/0x420 [ 120.679193][ T7450] ? __fget_files+0x3a0/0x420 [ 120.679233][ T7450] __x64_sys_sendmsg+0x19b/0x260 [ 120.679261][ T7450] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.679298][ T7450] ? rcu_is_watching+0x15/0xb0 [ 120.679322][ T7450] ? do_syscall_64+0xbe/0x3b0 [ 120.679346][ T7450] do_syscall_64+0xfa/0x3b0 [ 120.679364][ T7450] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.679394][ T7450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.679413][ T7450] ? clear_bhb_loop+0x60/0xb0 [ 120.679437][ T7450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.679456][ T7450] RIP: 0033:0x7fa2e178eec9 [ 120.679474][ T7450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.679490][ T7450] RSP: 002b:00007fa2e26da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.679510][ T7450] RAX: ffffffffffffffda RBX: 00007fa2e19e6090 RCX: 00007fa2e178eec9 [ 120.679524][ T7450] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 120.679537][ T7450] RBP: 00007fa2e1811f91 R08: 0000000000000000 R09: 0000000000000000 [ 120.679549][ T7450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.679560][ T7450] R13: 00007fa2e19e6128 R14: 00007fa2e19e6090 R15: 00007fff41bb61c8 [ 120.679593][ T7450] [ 120.685247][ T7450] Mem-Info: [ 121.078786][ T7450] active_anon:7531 inactive_anon:0 isolated_anon:0 [ 121.078786][ T7450] active_file:3142 inactive_file:39920 isolated_file:0 [ 121.078786][ T7450] unevictable:2686 dirty:207 writeback:0 [ 121.078786][ T7450] slab_reclaimable:10954 slab_unreclaimable:125127 [ 121.078786][ T7450] mapped:32360 shmem:5566 pagetables:1103 [ 121.078786][ T7450] sec_pagetables:0 bounce:0 [ 121.078786][ T7450] kernel_misc_reclaimable:0 [ 121.078786][ T7450] free:1296155 free_pcp:13621 free_cma:0 [ 121.177668][ T7450] Node 0 active_anon:31124kB inactive_anon:0kB active_file:12568kB inactive_file:159480kB unevictable:10508kB isolated(anon):0kB isolated(file):0kB mapped:130840kB dirty:824kB writeback:0kB shmem:22828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12096kB pagetables:4200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 121.255604][ T7450] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 121.314367][ T7450] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.348621][ T7450] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 121.363679][ T7450] Node 0 DMA32 free:1284060kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27276kB inactive_anon:0kB active_file:12568kB inactive_file:157640kB unevictable:13708kB writepending:824kB present:3129332kB managed:2559900kB mlocked:12208kB bounce:0kB free_pcp:31904kB local_pcp:14908kB free_cma:0kB [ 121.401149][ T7450] lowmem_reserve[]: 0 0 1 1 1 [ 121.406115][ T7450] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 121.437499][ T7450] lowmem_reserve[]: 0 0 0 0 0 [ 121.447484][ T7450] Node 1 Normal free:3885196kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20960kB local_pcp:12960kB free_cma:0kB [ 121.497972][ T7450] lowmem_reserve[]: 0 0 0 0 0 [ 121.502760][ T7450] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 121.528548][ T7452] IPVS: lc: FWM 3 0x00000003 - no destination available [ 121.586369][ T7450] Node 0 DMA32: 189*4kB (ME) 55*8kB (UM) 13*16kB (ME) 26*32kB (UME) 23*64kB (UME) 32*128kB (UME) 35*256kB (UME) 10*512kB (ME) 5*1024kB (UM) 3*2048kB (ME) 306*4096kB (M) = 1286524kB [ 121.636190][ T7450] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 121.648870][ T7450] Node 1 Normal: 161*4kB (UE) 57*8kB (UME) 40*16kB (UME) 54*32kB (UME) 34*64kB (UME) 3*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UM) 1*2048kB [ 121.650040][ T7475] FAULT_INJECTION: forcing a failure. [ 121.650040][ T7475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.680075][ T7450] (E) 945*4096kB (M) = 3885196kB [ 121.685349][ T7450] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 121.695405][ T7475] CPU: 0 UID: 0 PID: 7475 Comm: syz.0.387 Not tainted syzkaller #0 PREEMPT(full) [ 121.695430][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 121.695441][ T7475] Call Trace: [ 121.695449][ T7475] [ 121.695457][ T7475] dump_stack_lvl+0x189/0x250 [ 121.695483][ T7475] ? __pfx____ratelimit+0x10/0x10 [ 121.695513][ T7475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.695535][ T7475] ? __pfx__printk+0x10/0x10 [ 121.695561][ T7475] ? __might_fault+0xb0/0x130 [ 121.695599][ T7475] should_fail_ex+0x414/0x560 [ 121.695632][ T7475] _copy_from_user+0x2d/0xb0 [ 121.695658][ T7475] xfrm_user_policy+0x2cf/0x950 [ 121.695681][ T7475] ? __pfx_xfrm_user_policy+0x10/0x10 [ 121.695697][ T7475] ? apparmor_capable+0x137/0x1b0 [ 121.695722][ T7475] ? bpf_lsm_capable+0x9/0x20 [ 121.695746][ T7475] ? security_capable+0x7e/0x2e0 [ 121.695781][ T7475] do_ipv6_setsockopt+0x155e/0x2eb0 [ 121.695815][ T7475] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 121.695838][ T7475] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 121.695879][ T7475] ? vfs_write+0x956/0xb30 [ 121.695907][ T7475] ? __pfx___might_resched+0x10/0x10 [ 121.695946][ T7475] ? __lock_acquire+0xab9/0xd20 [ 121.695978][ T7475] ? aa_sk_perm+0x81e/0x950 [ 121.696018][ T7475] ? __pfx_aa_sk_perm+0x10/0x10 [ 121.696049][ T7475] ? __fget_files+0x2a/0x420 [ 121.696074][ T7475] ? aa_sock_opt_perm+0xff/0x1b0 [ 121.696096][ T7475] ipv6_setsockopt+0x59/0x170 [ 121.696115][ T7475] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 121.696135][ T7475] do_sock_setsockopt+0x17c/0x1b0 [ 121.696164][ T7475] __x64_sys_setsockopt+0x13f/0x1b0 [ 121.696193][ T7475] do_syscall_64+0xfa/0x3b0 [ 121.696212][ T7475] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.696241][ T7475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.696261][ T7475] ? clear_bhb_loop+0x60/0xb0 [ 121.696285][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.696303][ T7475] RIP: 0033:0x7f4528d8eec9 [ 121.696320][ T7475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.696337][ T7475] RSP: 002b:00007f4529c74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.696357][ T7475] RAX: ffffffffffffffda RBX: 00007f4528fe5fa0 RCX: 00007f4528d8eec9 [ 121.696372][ T7475] RDX: 0000000000000023 RSI: 0000000000000029 RDI: 0000000000000003 [ 121.696383][ T7475] RBP: 00007f4529c74090 R08: 00000000000000e8 R09: 0000000000000000 [ 121.696395][ T7475] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 121.696408][ T7475] R13: 00007f4528fe6038 R14: 00007f4528fe5fa0 R15: 00007ffc13fab2f8 [ 121.696440][ T7475] [ 121.777826][ T7450] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 121.990503][ T7450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.002120][ T7450] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.028519][ T7450] 44417 total pagecache pages [ 122.045318][ T7450] 0 pages in swap cache [ 122.060044][ T7450] Free swap = 124996kB [ 122.071494][ T7450] Total swap = 124996kB [ 122.082441][ T7450] 2097051 pages RAM [ 122.103986][ T7450] 0 pages HighMem/MovableOnly [ 122.128009][ T7450] 424986 pages reserved [ 122.138383][ T7450] 0 pages cma reserved [ 122.243418][ T7493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.393'. [ 122.481257][ T7497] netlink: 'syz.1.395': attribute type 9 has an invalid length. [ 122.507793][ T7497] netlink: 224 bytes leftover after parsing attributes in process `syz.1.395'. [ 123.023103][ T7524] netlink: 32 bytes leftover after parsing attributes in process `syz.0.403'. [ 123.093094][ T7524] syzkaller1: entered promiscuous mode [ 123.103074][ T7524] syzkaller1: entered allmulticast mode [ 123.248902][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 123.261316][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 123.504501][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 123.542417][ T7512] netlink: 'syz.3.402': attribute type 2 has an invalid length. [ 123.611870][ T7543] netlink: 48 bytes leftover after parsing attributes in process `syz.2.410'. [ 123.627674][ T7541] lo speed is unknown, defaulting to 1000 [ 123.635208][ T7541] wg1 speed is unknown, defaulting to 1000 [ 123.658099][ T7509] IPVS: lc: FWM 3 0x00000003 - no destination available [ 123.665137][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 123.684287][ T5977] IPVS: starting estimator thread 0... [ 123.790236][ T7548] IPVS: using max 30 ests per chain, 72000 per kthread [ 123.906468][ T7550] netlink: 'syz.4.409': attribute type 16 has an invalid length. [ 123.940901][ T7550] netlink: 'syz.4.409': attribute type 17 has an invalid length. [ 124.141082][ T7550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.150844][ T7550] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.171367][ T7550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.355705][ T7578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.418'. [ 124.460558][ T7591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.420'. [ 125.529228][ T7629] netlink: 'syz.0.431': attribute type 1 has an invalid length. [ 125.816693][ T7634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.434'. [ 125.976408][ T7619] openvswitch: netlink: Missing valid actions attribute. [ 125.984581][ T7619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.050910][ T7641] openvswitch: netlink: Missing valid actions attribute. [ 126.064250][ T7641] openvswitch: netlink: Actions may not be safe on all matching packets [ 126.117298][ T7644] tipc: Enabled bearer , priority 0 [ 126.133133][ T7644] syzkaller0: entered promiscuous mode [ 126.151685][ T7644] syzkaller0: entered allmulticast mode [ 126.191015][ T7644] tipc: Resetting bearer [ 126.231175][ T7642] tipc: Resetting bearer [ 126.270008][ T7654] netlink: 44 bytes leftover after parsing attributes in process `syz.2.439'. [ 126.282025][ T7642] tipc: Disabling bearer [ 126.556218][ T7661] veth7: entered promiscuous mode [ 126.642700][ T7676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.442'. [ 126.754036][ T7677] team_slave_1: entered promiscuous mode [ 127.233029][ T7698] tipc: Started in network mode [ 127.267966][ T7698] tipc: Node identity d24226b96062, cluster identity 4711 [ 127.276203][ T7698] tipc: Enabled bearer , priority 0 [ 127.337244][ T7702] netlink: 'syz.0.451': attribute type 2 has an invalid length. [ 127.361939][ T7701] netlink: 'syz.0.451': attribute type 2 has an invalid length. [ 127.384397][ T7698] tipc: Disabling bearer [ 127.505554][ T7704] lo speed is unknown, defaulting to 1000 [ 127.530453][ T7706] lo speed is unknown, defaulting to 1000 [ 127.559133][ T7704] wg1 speed is unknown, defaulting to 1000 [ 127.641585][ T7706] wg1 speed is unknown, defaulting to 1000 [ 127.686599][ T7717] gtp0: entered promiscuous mode [ 127.738285][ T7714] nbd1: detected capacity change from 0 to 63 [ 127.754158][ T7718] block nbd1: NBD_DISCONNECT [ 127.762426][ T7718] block nbd1: Disconnected due to user request. [ 127.777077][ T7718] block nbd1: shutting down sockets [ 127.827679][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.837019][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 127.847708][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.857025][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 127.865029][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.874343][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 127.882327][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.891539][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 127.899953][ T6143] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.935343][ T6143] Buffer I/O error on dev nbd1, logical block 0, async page read [ 127.945496][ T6143] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.955509][ T6143] Buffer I/O error on dev nbd1, logical block 1, async page read [ 127.964400][ T6143] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.985753][ T6143] Buffer I/O error on dev nbd1, logical block 2, async page read [ 128.013299][ T7722] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 128.228056][ T6143] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.237142][ T6143] Buffer I/O error on dev nbd1, logical block 3, async page read [ 128.278469][ T6143] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.309173][ T6143] Buffer I/O error on dev nbd1, logical block 0, async page read [ 128.339680][ T6143] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.389414][ T6143] Buffer I/O error on dev nbd1, logical block 1, async page read [ 128.412945][ T6143] ldm_validate_partition_table(): Disk read failed. [ 128.442536][ T6143] Dev nbd1: unable to read RDB block 0 [ 128.473730][ T6143] nbd1: unable to read partition table [ 128.524069][ T6143] ldm_validate_partition_table(): Disk read failed. [ 128.564277][ T6143] Dev nbd1: unable to read RDB block 0 [ 128.600764][ T6143] nbd1: unable to read partition table [ 128.964366][ T7755] __nla_validate_parse: 6 callbacks suppressed [ 128.964385][ T7755] netlink: 56 bytes leftover after parsing attributes in process `syz.0.468'. [ 129.013432][ T7755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.468'. [ 129.050121][ T7756] erspan0: entered promiscuous mode [ 129.061757][ T7756] erspan0: left promiscuous mode [ 132.459044][ T7769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.471'. [ 132.498412][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 132.524350][ T7769] netlink: 152 bytes leftover after parsing attributes in process `syz.0.471'. [ 132.577291][ T7775] netlink: 'syz.0.471': attribute type 1 has an invalid length. [ 132.600850][ T7769] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 132.605582][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 132.656433][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 132.679955][ T7779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.475'. [ 132.719044][ T7766] lo speed is unknown, defaulting to 1000 [ 132.860610][ T7766] wg1 speed is unknown, defaulting to 1000 [ 132.873941][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.881605][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.070649][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 133.092116][ T7794] bridge_slave_1: left allmulticast mode [ 133.113013][ T7794] bridge_slave_1: left promiscuous mode [ 133.135048][ T7794] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.156243][ T7794] bridge_slave_0: left allmulticast mode [ 133.175078][ T7794] bridge_slave_0: left promiscuous mode [ 133.182462][ T7794] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.424132][ T7813] netlink: 40 bytes leftover after parsing attributes in process `syz.4.484'. [ 133.778173][ T7838] netlink: 'syz.1.488': attribute type 13 has an invalid length. [ 133.835427][ T7838] netlink: 'syz.1.488': attribute type 17 has an invalid length. [ 134.015816][ T7838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.159879][ T7846] lo speed is unknown, defaulting to 1000 [ 134.171275][ T7846] wg1 speed is unknown, defaulting to 1000 [ 134.316860][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 135.058977][ T7878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.351792][ T7896] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 135.662978][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 135.728437][ T7899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.503'. [ 135.745766][ T7900] bond0: (slave gretap0): Opening slave failed [ 135.762402][ T7904] netlink: 192 bytes leftover after parsing attributes in process `syz.0.503'. [ 136.030018][ T7919] netlink: 'syz.1.508': attribute type 1 has an invalid length. [ 136.037909][ T7919] netlink: 224 bytes leftover after parsing attributes in process `syz.1.508'. [ 136.528655][ T7941] netlink: 'syz.2.512': attribute type 4 has an invalid length. [ 137.199004][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 137.495475][ T7965] siw: device registration error -23 [ 137.614454][ T7949] IPVS: sh: FWM 3 0x00000003 - no destination available [ 137.621652][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 138.169705][ T8000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.530'. [ 138.230980][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 138.288392][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'. [ 138.323946][ T8006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.532'. [ 138.350986][ T8000] wg1 speed is unknown, defaulting to 1000 [ 138.420327][ T8006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.532'. [ 138.562031][ T8011] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 138.891906][ T8028] wg1 speed is unknown, defaulting to 1000 [ 138.940039][ T8037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.100146][ T8044] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 139.237817][ T8049] netlink: 'syz.4.545': attribute type 7 has an invalid length. [ 139.460541][ T8033] IPVS: lc: FWM 3 0x00000003 - no destination available [ 139.472401][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 139.526566][ T8062] tipc: Enabling of bearer rejected, failed to enable media [ 139.860323][ T8068] 8021q: VLANs not supported on ip6gre0 [ 139.934194][ T8073] wg1 speed is unknown, defaulting to 1000 [ 139.965346][ T8077] tipc: Started in network mode [ 139.981246][ T8077] tipc: Node identity , cluster identity 4711 [ 140.000702][ T8077] tipc: Failed to set node id, please configure manually [ 140.018742][ T8077] tipc: Enabling of bearer rejected, failed to enable media [ 140.045300][ T8082] __nla_validate_parse: 9 callbacks suppressed [ 140.045319][ T8082] netlink: 88 bytes leftover after parsing attributes in process `syz.4.555'. [ 140.086060][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'. [ 140.454567][ T8096] netlink: 'syz.1.559': attribute type 7 has an invalid length. [ 140.462465][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 140.969496][ T8121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.050164][ T8122] bond_slave_0: entered promiscuous mode [ 141.056098][ T8122] bond_slave_1: entered promiscuous mode [ 141.085498][ T8122] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.105733][ T8122] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 141.707059][ T8152] netlink: 'syz.0.576': attribute type 7 has an invalid length. [ 141.725860][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 141.984726][ T8162] syzkaller1: entered promiscuous mode [ 142.005268][ T8162] syzkaller1: entered allmulticast mode [ 142.149999][ T8170] wg1 speed is unknown, defaulting to 1000 [ 142.170280][ T8167] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 143.158516][ T8182] IPVS: sh: FWM 3 0x00000003 - no destination available [ 143.165604][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 143.218538][ T8198] netlink: 'syz.2.591': attribute type 7 has an invalid length. [ 143.226369][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 143.903551][ T8214] Bluetooth: MGMT ver 1.23 [ 143.923636][ T8214] Bluetooth: hci1: too big key_count value 32778 [ 144.036756][ T8214] wg1 speed is unknown, defaulting to 1000 [ 144.257501][ T8221] tipc: Enabled bearer , priority 0 [ 144.282362][ T8221] syzkaller0: entered promiscuous mode [ 144.289604][ T8221] syzkaller0: entered allmulticast mode [ 144.328482][ T8221] tipc: Resetting bearer [ 144.416713][ T8225] netlink: 'syz.0.597': attribute type 10 has an invalid length. [ 144.609432][ T8219] tipc: Resetting bearer [ 144.615831][ T8237] netlink: 'syz.3.602': attribute type 7 has an invalid length. [ 144.629601][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 144.646996][ T8219] tipc: Disabling bearer [ 144.995613][ T8251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.607'. [ 145.396851][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 145.438414][ T8271] netlink: 'syz.2.615': attribute type 7 has an invalid length. [ 145.460509][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 145.501792][ T8246] IPVS: sh: FWM 3 0x00000003 - no destination available [ 145.510138][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 145.692549][ T8275] bridge_slave_0: invalid flags given to default FDB implementation [ 145.742382][ T8279] netlink: 32 bytes leftover after parsing attributes in process `syz.4.618'. [ 145.793643][ T8284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.620'. [ 145.861291][ T8283] netlink: 'syz.2.619': attribute type 4 has an invalid length. [ 146.102293][ T8298] veth1_to_hsr: entered promiscuous mode [ 146.112320][ T8298] macvtap1: entered promiscuous mode [ 146.130264][ T8298] macvtap1: entered allmulticast mode [ 146.146297][ T8298] veth1_to_hsr: entered allmulticast mode [ 146.166328][ T8297] wg1 speed is unknown, defaulting to 1000 [ 146.662402][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 146.725019][ T8313] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.884781][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 146.903961][ T8313] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.021592][ T8313] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.088924][ T8324] IPVS: lc: FWM 3 0x00000003 - no destination available [ 147.095995][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 147.216522][ T8313] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.407004][ T8351] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 147.523511][ T8351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.535265][ T7656] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.544268][ T7656] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.582935][ T8355] veth7: entered promiscuous mode [ 147.601046][ T8355] bond0: (slave veth7): Enslaving as an active interface with a down link [ 147.611034][ T8362] netlink: 'syz.4.643': attribute type 4 has an invalid length. [ 147.676194][ T7656] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.688637][ T8367] netlink: 'syz.4.643': attribute type 4 has an invalid length. [ 147.710809][ T7656] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.736235][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 147.841370][ T8372] netlink: 104 bytes leftover after parsing attributes in process `syz.3.645'. [ 147.898426][ T8376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.646'. [ 147.997169][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.648'. [ 148.250844][ T8401] wg1 speed is unknown, defaulting to 1000 [ 148.804935][ T8382] IPVS: sh: FWM 3 0x00000003 - no destination available [ 148.848815][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 149.639788][ T8444] bridge2: entered promiscuous mode [ 149.661312][ T8444] bridge2: entered allmulticast mode [ 150.277070][ T8465] netlink: 'syz.1.670': attribute type 322 has an invalid length. [ 150.987290][ T8488] netlink: 'syz.1.679': attribute type 11 has an invalid length. [ 151.010848][ T8488] __nla_validate_parse: 10 callbacks suppressed [ 151.010866][ T8488] netlink: 44 bytes leftover after parsing attributes in process `syz.1.679'. [ 151.038818][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 151.334231][ T8513] netlink: 48 bytes leftover after parsing attributes in process `syz.2.688'. [ 151.548359][ T8526] netlink: 32 bytes leftover after parsing attributes in process `syz.0.694'. [ 151.710284][ T8532] netlink: 'syz.0.697': attribute type 29 has an invalid length. [ 151.728762][ T8532] netlink: 'syz.0.697': attribute type 29 has an invalid length. [ 151.750953][ T8532] netlink: 'syz.0.697': attribute type 29 has an invalid length. [ 151.770056][ T8532] netlink: 'syz.0.697': attribute type 29 has an invalid length. [ 151.809220][ T8532] netlink: 'syz.0.697': attribute type 29 has an invalid length. [ 151.830195][ T8532] netlink: 'syz.0.697': attribute type 29 has an invalid length. [ 151.889007][ T8532] netlink: 'syz.0.697': attribute type 29 has an invalid length. [ 151.909844][ T8532] netlink: 'syz.0.697': attribute type 29 has an invalid length. [ 151.984394][ T30] audit: type=1804 audit(1758967368.491:2): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.695" name="/newroot/133/cgroup.controllers" dev="tmpfs" ino=702 res=1 errno=0 [ 152.027321][ T30] audit: type=1800 audit(1758967368.491:3): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.695" name="cgroup.controllers" dev="tmpfs" ino=702 res=0 errno=0 [ 152.082942][ T8542] syzkaller0: entered promiscuous mode [ 152.089007][ T8542] syzkaller0: entered allmulticast mode [ 152.120755][ T8518] IPVS: lc: FWM 3 0x00000003 - no destination available [ 152.128102][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 152.398357][ T8553] FAULT_INJECTION: forcing a failure. [ 152.398357][ T8553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.411567][ T8553] CPU: 1 UID: 0 PID: 8553 Comm: syz.3.702 Not tainted syzkaller #0 PREEMPT(full) [ 152.411593][ T8553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 152.411605][ T8553] Call Trace: [ 152.411612][ T8553] [ 152.411622][ T8553] dump_stack_lvl+0x189/0x250 [ 152.411649][ T8553] ? __pfx____ratelimit+0x10/0x10 [ 152.411680][ T8553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.411701][ T8553] ? __pfx__printk+0x10/0x10 [ 152.411726][ T8553] ? __might_fault+0xb0/0x130 [ 152.411761][ T8553] should_fail_ex+0x414/0x560 [ 152.411793][ T8553] _copy_from_user+0x2d/0xb0 [ 152.411818][ T8553] ___sys_sendmsg+0x158/0x2a0 [ 152.411846][ T8553] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.411876][ T8553] ? rcu_read_lock_any_held+0xb3/0x120 [ 152.411908][ T8553] ? sb_end_write+0xe9/0x1c0 [ 152.411952][ T8553] ? __pfx_vfs_write+0x10/0x10 [ 152.411986][ T8553] __x64_sys_sendmsg+0x19b/0x260 [ 152.412014][ T8553] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.412049][ T8553] ? __pfx_ksys_write+0x10/0x10 [ 152.412070][ T8553] ? rcu_is_watching+0x15/0xb0 [ 152.412094][ T8553] ? do_syscall_64+0xbe/0x3b0 [ 152.412118][ T8553] do_syscall_64+0xfa/0x3b0 [ 152.412136][ T8553] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.412165][ T8553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.412184][ T8553] ? clear_bhb_loop+0x60/0xb0 [ 152.412207][ T8553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.412225][ T8553] RIP: 0033:0x7fa2e178eec9 [ 152.412242][ T8553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.412258][ T8553] RSP: 002b:00007fa2e26fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.412278][ T8553] RAX: ffffffffffffffda RBX: 00007fa2e19e5fa0 RCX: 00007fa2e178eec9 [ 152.412292][ T8553] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 152.412305][ T8553] RBP: 00007fa2e26fb090 R08: 0000000000000000 R09: 0000000000000000 [ 152.412317][ T8553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.412328][ T8553] R13: 00007fa2e19e6038 R14: 00007fa2e19e5fa0 R15: 00007fff41bb61c8 [ 152.412360][ T8553] [ 154.666133][ T8587] wg1 speed is unknown, defaulting to 1000 [ 154.834566][ T8597] FAULT_INJECTION: forcing a failure. [ 154.834566][ T8597] name failslab, interval 1, probability 0, space 0, times 0 [ 154.877728][ T8597] CPU: 1 UID: 0 PID: 8597 Comm: syz.3.716 Not tainted syzkaller #0 PREEMPT(full) [ 154.877756][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 154.877767][ T8597] Call Trace: [ 154.877775][ T8597] [ 154.877783][ T8597] dump_stack_lvl+0x189/0x250 [ 154.877809][ T8597] ? __pfx____ratelimit+0x10/0x10 [ 154.877839][ T8597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.877859][ T8597] ? __pfx__printk+0x10/0x10 [ 154.877888][ T8597] ? __pfx___might_resched+0x10/0x10 [ 154.877919][ T8597] should_fail_ex+0x414/0x560 [ 154.877950][ T8597] should_failslab+0xa8/0x100 [ 154.877977][ T8597] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 154.878001][ T8597] ? __alloc_skb+0x112/0x2d0 [ 154.878025][ T8597] __alloc_skb+0x112/0x2d0 [ 154.878049][ T8597] netlink_sendmsg+0x5c6/0xb30 [ 154.878078][ T8597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.878099][ T8597] ? aa_sock_msg_perm+0xf1/0x1d0 [ 154.878126][ T8597] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.878144][ T8597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.878165][ T8597] __sock_sendmsg+0x219/0x270 [ 154.878196][ T8597] ____sys_sendmsg+0x505/0x830 [ 154.878226][ T8597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.878260][ T8597] ? import_iovec+0x74/0xa0 [ 154.878296][ T8597] ___sys_sendmsg+0x21f/0x2a0 [ 154.878322][ T8597] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.878352][ T8597] ? rcu_read_lock_any_held+0xb3/0x120 [ 154.878384][ T8597] ? sb_end_write+0xe9/0x1c0 [ 154.878428][ T8597] ? __pfx_vfs_write+0x10/0x10 [ 154.878462][ T8597] __x64_sys_sendmsg+0x19b/0x260 [ 154.878490][ T8597] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.878524][ T8597] ? __pfx_ksys_write+0x10/0x10 [ 154.878544][ T8597] ? rcu_is_watching+0x15/0xb0 [ 154.878568][ T8597] ? do_syscall_64+0xbe/0x3b0 [ 154.878591][ T8597] do_syscall_64+0xfa/0x3b0 [ 154.878609][ T8597] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.878638][ T8597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.878657][ T8597] ? clear_bhb_loop+0x60/0xb0 [ 154.878681][ T8597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.878700][ T8597] RIP: 0033:0x7fa2e178eec9 [ 154.878718][ T8597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.878735][ T8597] RSP: 002b:00007fa2e26fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.878755][ T8597] RAX: ffffffffffffffda RBX: 00007fa2e19e5fa0 RCX: 00007fa2e178eec9 [ 154.878770][ T8597] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 154.878783][ T8597] RBP: 00007fa2e26fb090 R08: 0000000000000000 R09: 0000000000000000 [ 154.878795][ T8597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.878807][ T8597] R13: 00007fa2e19e6038 R14: 00007fa2e19e5fa0 R15: 00007fff41bb61c8 [ 154.878839][ T8597] [ 155.253381][ T8602] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.480308][ T8612] macsec1: entered allmulticast mode [ 155.485650][ T8612] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 155.681700][ T8620] validate_nla: 22 callbacks suppressed [ 155.681718][ T8620] netlink: 'syz.0.721': attribute type 1 has an invalid length. [ 155.722782][ T8620] netlink: 132 bytes leftover after parsing attributes in process `syz.0.721'. [ 155.732331][ T8620] netlink: 'syz.0.721': attribute type 2 has an invalid length. [ 155.743233][ T8620] netlink: 'syz.0.721': attribute type 1 has an invalid length. [ 155.753164][ T8620] netlink: 2 bytes leftover after parsing attributes in process `syz.0.721'. [ 155.771481][ T8624] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20004 [ 156.377838][ T8656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.733'. [ 156.568791][ T8662] netlink: zone id is out of range [ 156.574233][ T8662] netlink: zone id is out of range [ 156.581293][ T8662] netlink: del zone limit has 8 unknown bytes [ 156.938638][ T8676] netlink: 'syz.3.741': attribute type 21 has an invalid length. [ 156.961256][ T8676] netlink: 128 bytes leftover after parsing attributes in process `syz.3.741'. [ 157.054582][ T8676] netlink: 'syz.3.741': attribute type 5 has an invalid length. [ 157.077220][ T8676] netlink: 'syz.3.741': attribute type 6 has an invalid length. [ 157.096189][ T8676] netlink: 3 bytes leftover after parsing attributes in process `syz.3.741'. [ 157.117524][ T8683] tc_dump_action: action bad kind [ 157.324018][ T8693] FAULT_INJECTION: forcing a failure. [ 157.324018][ T8693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.356005][ T8693] CPU: 0 UID: 0 PID: 8693 Comm: syz.3.745 Not tainted syzkaller #0 PREEMPT(full) [ 157.356033][ T8693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.356043][ T8693] Call Trace: [ 157.356051][ T8693] [ 157.356059][ T8693] dump_stack_lvl+0x189/0x250 [ 157.356084][ T8693] ? __pfx____ratelimit+0x10/0x10 [ 157.356120][ T8693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.356140][ T8693] ? __pfx__printk+0x10/0x10 [ 157.356162][ T8693] ? __might_fault+0xb0/0x130 [ 157.356196][ T8693] should_fail_ex+0x414/0x560 [ 157.356225][ T8693] _copy_from_iter+0x1de/0x1790 [ 157.356252][ T8693] ? rcu_is_watching+0x15/0xb0 [ 157.356269][ T8693] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 157.356293][ T8693] ? __pfx__copy_from_iter+0x10/0x10 [ 157.356313][ T8693] ? __build_skb_around+0x257/0x3e0 [ 157.356338][ T8693] ? netlink_sendmsg+0x642/0xb30 [ 157.356357][ T8693] ? skb_put+0x11b/0x210 [ 157.356381][ T8693] netlink_sendmsg+0x6b2/0xb30 [ 157.356412][ T8693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.356437][ T8693] ? aa_sock_msg_perm+0xf1/0x1d0 [ 157.356466][ T8693] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.356483][ T8693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.356506][ T8693] __sock_sendmsg+0x219/0x270 [ 157.356538][ T8693] ____sys_sendmsg+0x505/0x830 [ 157.356564][ T8693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.356594][ T8693] ? import_iovec+0x74/0xa0 [ 157.356619][ T8693] ___sys_sendmsg+0x21f/0x2a0 [ 157.356644][ T8693] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.356674][ T8693] ? rcu_read_lock_any_held+0xb3/0x120 [ 157.356706][ T8693] ? sb_end_write+0xe9/0x1c0 [ 157.356747][ T8693] ? __pfx_vfs_write+0x10/0x10 [ 157.356780][ T8693] __x64_sys_sendmsg+0x19b/0x260 [ 157.356807][ T8693] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.356840][ T8693] ? __pfx_ksys_write+0x10/0x10 [ 157.356861][ T8693] ? rcu_is_watching+0x15/0xb0 [ 157.356883][ T8693] ? do_syscall_64+0xbe/0x3b0 [ 157.356907][ T8693] do_syscall_64+0xfa/0x3b0 [ 157.356924][ T8693] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.356950][ T8693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.356968][ T8693] ? clear_bhb_loop+0x60/0xb0 [ 157.356991][ T8693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.357010][ T8693] RIP: 0033:0x7fa2e178eec9 [ 157.357027][ T8693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.357042][ T8693] RSP: 002b:00007fa2e26fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.357062][ T8693] RAX: ffffffffffffffda RBX: 00007fa2e19e5fa0 RCX: 00007fa2e178eec9 [ 157.357075][ T8693] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 157.357087][ T8693] RBP: 00007fa2e26fb090 R08: 0000000000000000 R09: 0000000000000000 [ 157.357097][ T8693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.357106][ T8693] R13: 00007fa2e19e6038 R14: 00007fa2e19e5fa0 R15: 00007fff41bb61c8 [ 157.357141][ T8693] [ 157.752738][ T8709] macsec2: entered promiscuous mode [ 157.759650][ T8709] macsec0: entered promiscuous mode [ 157.765373][ T8709] macsec2: entered allmulticast mode [ 157.770969][ T8709] macsec0: entered allmulticast mode [ 157.776378][ T8709] veth1_macvtap: entered allmulticast mode [ 157.786895][ T8709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.750'. [ 157.825440][ T8711] netlink: 36 bytes leftover after parsing attributes in process `syz.0.752'. [ 157.846218][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.753'. [ 164.261329][ T8756] netlink: 36 bytes leftover after parsing attributes in process `syz.3.764'. [ 164.644951][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 164.904183][ T8794] netlink: 52 bytes leftover after parsing attributes in process `syz.1.776'. [ 164.975719][ T8794] vxcan3: entered allmulticast mode [ 165.031069][ T8802] netlink: 36 bytes leftover after parsing attributes in process `syz.4.777'. [ 165.085108][ T8793] wg1 speed is unknown, defaulting to 1000 [ 166.559329][ T8846] macsec1: entered promiscuous mode [ 166.564604][ T8846] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 166.677862][ T8846] macsec1: entered allmulticast mode [ 166.683210][ T8846] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 166.723052][ T8856] netlink: 36 bytes leftover after parsing attributes in process `syz.1.790'. [ 166.819353][ T8861] netlink: 96 bytes leftover after parsing attributes in process `syz.2.792'. [ 167.077496][ T8875] bond3: entered promiscuous mode [ 167.084175][ T8875] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.223594][ T8888] openvswitch: netlink: Missing valid actions attribute. [ 167.267699][ T8888] openvswitch: netlink: Actions may not be safe on all matching packets [ 167.386203][ T8900] netlink: 'syz.1.801': attribute type 3 has an invalid length. [ 167.451873][ T8906] netlink: 36 bytes leftover after parsing attributes in process `syz.3.804'. [ 167.736744][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 168.158494][ T8935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.813'. [ 168.272466][ T8941] netlink: 36 bytes leftover after parsing attributes in process `syz.0.816'. [ 168.466855][ T8953] sctp: [Deprecated]: syz.0.819 (pid 8953) Use of int in maxseg socket option. [ 168.466855][ T8953] Use struct sctp_assoc_value instead [ 169.168818][ T8980] netlink: 'syz.2.829': attribute type 5 has an invalid length. [ 169.369714][ T8988] __nla_validate_parse: 2 callbacks suppressed [ 169.369733][ T8988] netlink: 88 bytes leftover after parsing attributes in process `syz.4.831'. [ 169.492691][ T8988] netlink: 'syz.4.831': attribute type 5 has an invalid length. [ 169.576333][ T8988] wg1 speed is unknown, defaulting to 1000 [ 169.793454][ T8998] netlink: 2 bytes leftover after parsing attributes in process `syz.2.832'. [ 169.835111][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 169.853778][ T9000] netlink: 'syz.0.833': attribute type 11 has an invalid length. [ 170.151554][ T9009] netlink: 156 bytes leftover after parsing attributes in process `syz.4.837'. [ 170.340808][ T9017] netlink: 'syz.0.840': attribute type 5 has an invalid length. [ 170.488734][ T9022] netlink: 188 bytes leftover after parsing attributes in process `syz.1.841'. [ 170.720622][ T9032] wg1 speed is unknown, defaulting to 1000 [ 170.909812][ T9029] pimreg: tun_chr_ioctl cmd 1074025677 [ 170.945844][ T9029] pimreg: linktype set to 780 [ 171.048730][ T9029] pimreg: tun_chr_ioctl cmd 35111 [ 171.522798][ T9069] netlink: 'syz.1.854': attribute type 5 has an invalid length. [ 172.222301][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 172.267739][ T9101] wg1 speed is unknown, defaulting to 1000 [ 172.443704][ T9115] netlink: 36 bytes leftover after parsing attributes in process `syz.1.868'. [ 172.536404][ T9119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.870'. [ 172.787910][ T9128] netlink: 36 bytes leftover after parsing attributes in process `syz.1.873'. [ 172.936385][ T9134] can: request_module (can-proto-0) failed. [ 173.803114][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 174.152528][ T9165] IPVS: Error connecting to the multicast addr [ 174.451550][ T9184] __nla_validate_parse: 8 callbacks suppressed [ 174.451569][ T9184] netlink: 128 bytes leftover after parsing attributes in process `syz.2.891'. [ 174.535923][ T9189] netlink: 36 bytes leftover after parsing attributes in process `syz.3.893'. [ 175.007704][ T9205] netlink: 'syz.4.899': attribute type 13 has an invalid length. [ 175.028143][ T9205] netlink: 52 bytes leftover after parsing attributes in process `syz.4.899'. [ 175.072157][ T9208] wg1 speed is unknown, defaulting to 1000 [ 175.263032][ T9216] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 175.628368][ T9227] netlink: 'syz.2.904': attribute type 7 has an invalid length. [ 175.636253][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 175.738218][ T9232] macsec2: entered promiscuous mode [ 175.744228][ T9232] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 175.803660][ T9232] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 175.849978][ T9233] batadv0: entered promiscuous mode [ 175.856215][ T9233] macsec2: entered promiscuous mode [ 175.873964][ T9233] batadv0: left promiscuous mode [ 176.120905][ T9237] wg1 speed is unknown, defaulting to 1000 [ 176.789862][ T9277] netlink: 'syz.3.917': attribute type 7 has an invalid length. [ 176.821039][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 177.213022][ T9286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.920'. [ 177.281375][ T9284] syzkaller1: entered promiscuous mode [ 177.286959][ T9284] syzkaller1: entered allmulticast mode [ 177.355625][ T9292] IPVS: lc: FWM 3 0x00000003 - no destination available [ 177.363173][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 177.576951][ T9301] wg1 speed is unknown, defaulting to 1000 [ 177.840676][ T9307] syzkaller0: entered promiscuous mode [ 177.846185][ T9307] syzkaller0: entered allmulticast mode [ 177.875354][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.925'. [ 178.359230][ T9328] netlink: 'syz.0.928': attribute type 3 has an invalid length. [ 178.563856][ T9336] netlink: 'syz.0.930': attribute type 7 has an invalid length. [ 178.573351][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 178.764416][ T9340] netlink: 'syz.0.931': attribute type 1 has an invalid length. [ 178.808089][ T9340] netlink: 132 bytes leftover after parsing attributes in process `syz.0.931'. [ 178.819444][ T9340] netlink: 'syz.0.931': attribute type 2 has an invalid length. [ 178.827930][ T9340] netlink: 'syz.0.931': attribute type 1 has an invalid length. [ 178.835968][ T9340] netlink: 2 bytes leftover after parsing attributes in process `syz.0.931'. [ 178.866880][ T9344] sctp: [Deprecated]: syz.3.932 (pid 9344) Use of int in maxseg socket option. [ 178.866880][ T9344] Use struct sctp_assoc_value instead [ 179.025017][ T9348] macvlan4: entered promiscuous mode [ 179.041692][ T9348] syz_tun: entered promiscuous mode [ 179.078613][ T9348] team0: Port device macvlan4 added [ 179.378458][ T9360] tipc: Enabled bearer , priority 0 [ 179.532334][ T9361] tipc: Disabling bearer [ 179.805776][ T9375] netlink: 'syz.4.941': attribute type 7 has an invalid length. [ 179.818875][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'. [ 179.921351][ T9380] netlink: 'syz.3.943': attribute type 7 has an invalid length. [ 179.957792][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'. [ 180.346071][ T9397] tun0: tun_chr_ioctl cmd 1074812117 [ 180.459417][ T9401] syzkaller1: entered promiscuous mode [ 180.464929][ T9401] syzkaller1: entered allmulticast mode [ 180.486133][ T9401] nbd: nbd0 already in use [ 180.491677][ T9401] block nbd0: NBD_DISCONNECT [ 180.507693][ T9401] block nbd0: Send disconnect failed -107 [ 180.513726][ T9401] block nbd0: Disconnected due to user request. [ 180.532232][ T9401] block nbd0: shutting down sockets [ 180.812918][ T9417] validate_nla: 1 callbacks suppressed [ 180.812938][ T9417] netlink: 'syz.1.956': attribute type 7 has an invalid length. [ 180.828214][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 180.892154][ T9419] FAULT_INJECTION: forcing a failure. [ 180.892154][ T9419] name failslab, interval 1, probability 0, space 0, times 0 [ 180.905358][ T9419] CPU: 0 UID: 0 PID: 9419 Comm: syz.1.956 Not tainted syzkaller #0 PREEMPT(full) [ 180.905381][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 180.905390][ T9419] Call Trace: [ 180.905397][ T9419] [ 180.905404][ T9419] dump_stack_lvl+0x189/0x250 [ 180.905427][ T9419] ? __pfx____ratelimit+0x10/0x10 [ 180.905451][ T9419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.905467][ T9419] ? __pfx__printk+0x10/0x10 [ 180.905489][ T9419] ? __pfx___might_resched+0x10/0x10 [ 180.905510][ T9419] ? fs_reclaim_acquire+0x7d/0x100 [ 180.905544][ T9419] should_fail_ex+0x414/0x560 [ 180.905571][ T9419] should_failslab+0xa8/0x100 [ 180.905593][ T9419] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 180.905613][ T9419] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 180.905635][ T9419] ? __alloc_skb+0x112/0x2d0 [ 180.905657][ T9419] __alloc_skb+0x112/0x2d0 [ 180.905679][ T9419] alloc_skb_with_frags+0xca/0x890 [ 180.905700][ T9419] ? __lock_acquire+0xab9/0xd20 [ 180.905729][ T9419] ? __lock_acquire+0xab9/0xd20 [ 180.905753][ T9419] sock_alloc_send_pskb+0x857/0x990 [ 180.905792][ T9419] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 180.905819][ T9419] ? dev_get_by_index+0x22/0x2e0 [ 180.905844][ T9419] ? dev_get_by_index+0x22/0x2e0 [ 180.905876][ T9419] packet_sendmsg+0x33a0/0x5080 [ 180.905905][ T9419] ? aa_label_printk+0x131/0x3e0 [ 180.905947][ T9419] ? __pfx___might_resched+0x10/0x10 [ 180.905972][ T9419] ? __lock_acquire+0xab9/0xd20 [ 180.906013][ T9419] ? __pfx_packet_sendmsg+0x10/0x10 [ 180.906040][ T9419] ? aa_sk_perm+0x81e/0x950 [ 180.906071][ T9419] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 180.906097][ T9419] ? aa_sock_msg_perm+0xf1/0x1d0 [ 180.906126][ T9419] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.906144][ T9419] ? __pfx_packet_sendmsg+0x10/0x10 [ 180.906172][ T9419] __sock_sendmsg+0x219/0x270 [ 180.906204][ T9419] __sys_sendto+0x3bd/0x520 [ 180.906228][ T9419] ? __pfx___sys_sendto+0x10/0x10 [ 180.906247][ T9419] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 180.906278][ T9419] ? __fget_files+0x3a0/0x420 [ 180.906317][ T9419] ? ksys_write+0x22a/0x250 [ 180.906344][ T9419] ? __pfx_ksys_write+0x10/0x10 [ 180.906372][ T9419] __x64_sys_sendto+0xde/0x100 [ 180.906399][ T9419] do_syscall_64+0xfa/0x3b0 [ 180.906417][ T9419] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.906447][ T9419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.906465][ T9419] ? clear_bhb_loop+0x60/0xb0 [ 180.906486][ T9419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.906502][ T9419] RIP: 0033:0x7f716e38eec9 [ 180.906525][ T9419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.906541][ T9419] RSP: 002b:00007f716c5d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 180.906560][ T9419] RAX: ffffffffffffffda RBX: 00007f716e5e6090 RCX: 00007f716e38eec9 [ 180.906574][ T9419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 180.906585][ T9419] RBP: 00007f716c5d5090 R08: 00002000000003c0 R09: 0000000000000014 [ 180.906597][ T9419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.906608][ T9419] R13: 00007f716e5e6128 R14: 00007f716e5e6090 R15: 00007fff83496818 [ 180.906640][ T9419] [ 181.892045][ T9446] IPVS: lc: FWM 3 0x00000003 - no destination available [ 181.899919][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 196.287689][ T5868] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 196.300812][ T5868] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.309721][ T5868] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.319001][ T5868] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.326817][ T5868] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.364965][ T9455] wg1 speed is unknown, defaulting to 1000 [ 196.394801][ T5884] Bluetooth: hci1: command 0x0406 tx timeout [ 196.396366][ T5877] Bluetooth: hci2: command 0x0406 tx timeout [ 196.403315][ T5884] Bluetooth: hci3: command 0x0406 tx timeout [ 196.506230][ T9455] chnl_net:caif_netlink_parms(): no params data found [ 196.570581][ T9455] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.577880][ T9455] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.585258][ T9455] bridge_slave_0: entered allmulticast mode [ 196.592561][ T9455] bridge_slave_0: entered promiscuous mode [ 196.600569][ T9455] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.607905][ T9455] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.615097][ T9455] bridge_slave_1: entered allmulticast mode [ 196.622392][ T9455] bridge_slave_1: entered promiscuous mode [ 196.652662][ T9455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.664507][ T9455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.696110][ T9455] team0: Port device team_slave_0 added [ 196.703808][ T9455] team0: Port device team_slave_1 added [ 196.730926][ T9455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.737952][ T9455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.764455][ T9455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.776700][ T9455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.783820][ T9455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.810437][ T9455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.852503][ T9455] hsr_slave_0: entered promiscuous mode [ 196.858937][ T9455] hsr_slave_1: entered promiscuous mode [ 196.865019][ T9455] debugfs: 'hsr0' already exists in 'hsr' [ 196.872535][ T9455] Cannot create hsr debugfs directory [ 197.718810][ T5881] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 197.729384][ T5881] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 197.738287][ T5881] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 197.746627][ T5881] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 197.756268][ T5877] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 197.766537][ T5877] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 197.766895][ T5881] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 197.784384][ T5881] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 197.804718][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 197.814153][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 197.906757][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 197.923023][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 197.932807][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 197.941634][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 197.948280][ T9471] wg1 speed is unknown, defaulting to 1000 [ 197.955049][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 197.962191][ T9469] wg1 speed is unknown, defaulting to 1000 [ 197.968876][ T5881] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 197.970170][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 197.977598][ T5881] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 198.016327][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 198.025607][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 198.110294][ T9473] wg1 speed is unknown, defaulting to 1000 [ 198.167142][ T9474] wg1 speed is unknown, defaulting to 1000 [ 198.367078][ T9469] chnl_net:caif_netlink_parms(): no params data found [ 198.391521][ T51] Bluetooth: hci5: command tx timeout [ 198.485615][ T9471] chnl_net:caif_netlink_parms(): no params data found [ 198.634397][ T9473] chnl_net:caif_netlink_parms(): no params data found [ 198.673451][ T9469] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.681173][ T9469] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.690081][ T9469] bridge_slave_0: entered allmulticast mode [ 198.698583][ T9469] bridge_slave_0: entered promiscuous mode [ 198.729818][ T9469] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.737010][ T9469] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.744387][ T9469] bridge_slave_1: entered allmulticast mode [ 198.751630][ T9469] bridge_slave_1: entered promiscuous mode [ 198.782082][ T9471] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.790381][ T9471] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.798121][ T9471] bridge_slave_0: entered allmulticast mode [ 198.805449][ T9471] bridge_slave_0: entered promiscuous mode [ 198.812677][ T9474] chnl_net:caif_netlink_parms(): no params data found [ 198.854951][ T9471] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.862336][ T9471] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.870038][ T9471] bridge_slave_1: entered allmulticast mode [ 198.877191][ T9471] bridge_slave_1: entered promiscuous mode [ 198.912691][ T9469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.938096][ T9471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.970560][ T9469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.982535][ T9471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.074101][ T9471] team0: Port device team_slave_0 added [ 199.098523][ T9469] team0: Port device team_slave_0 added [ 199.106241][ T9471] team0: Port device team_slave_1 added [ 199.124736][ T9473] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.132475][ T9473] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.140810][ T9473] bridge_slave_0: entered allmulticast mode [ 199.148184][ T9473] bridge_slave_0: entered promiscuous mode [ 199.156979][ T9469] team0: Port device team_slave_1 added [ 199.185088][ T9473] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.192651][ T9473] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.201489][ T9473] bridge_slave_1: entered allmulticast mode [ 199.209060][ T9473] bridge_slave_1: entered promiscuous mode [ 199.236296][ T9474] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.243945][ T9474] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.251608][ T9474] bridge_slave_0: entered allmulticast mode [ 199.259455][ T9474] bridge_slave_0: entered promiscuous mode [ 199.289803][ T9471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.296759][ T9471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.323437][ T9471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.334807][ T9474] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.343163][ T9474] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.350962][ T9474] bridge_slave_1: entered allmulticast mode [ 199.358300][ T9474] bridge_slave_1: entered promiscuous mode [ 199.376733][ T9469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.383981][ T9469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.410328][ T9469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.422184][ T9471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.433882][ T9471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.460313][ T9471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.486758][ T9473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.498227][ T9469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.505194][ T9469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.533010][ T9469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.564365][ T9473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.600649][ T9474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.614983][ T9474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.656666][ T9473] team0: Port device team_slave_0 added [ 199.665257][ T9473] team0: Port device team_slave_1 added [ 199.745678][ T9474] team0: Port device team_slave_0 added [ 199.754409][ T9474] team0: Port device team_slave_1 added [ 199.777043][ T9469] hsr_slave_0: entered promiscuous mode [ 199.783879][ T9469] hsr_slave_1: entered promiscuous mode [ 199.790199][ T9469] debugfs: 'hsr0' already exists in 'hsr' [ 199.795922][ T9469] Cannot create hsr debugfs directory [ 199.803176][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.810503][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.836754][ T51] Bluetooth: hci6: command tx timeout [ 199.837818][ T9473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.858908][ T9471] hsr_slave_0: entered promiscuous mode [ 199.865195][ T9471] hsr_slave_1: entered promiscuous mode [ 199.871723][ T9471] debugfs: 'hsr0' already exists in 'hsr' [ 199.877477][ T9471] Cannot create hsr debugfs directory [ 199.906870][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.908008][ T51] Bluetooth: hci7: command tx timeout [ 199.915303][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.946336][ T9473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.979358][ T9474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.986324][ T9474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.013417][ T9474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.064522][ T9474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.072048][ T9474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.072055][ T51] Bluetooth: hci9: command tx timeout [ 200.099007][ T5884] Bluetooth: hci8: command tx timeout [ 200.111053][ T9474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.127826][ T9473] hsr_slave_0: entered promiscuous mode [ 200.134241][ T9473] hsr_slave_1: entered promiscuous mode [ 200.140603][ T9473] debugfs: 'hsr0' already exists in 'hsr' [ 200.146332][ T9473] Cannot create hsr debugfs directory [ 200.277308][ T9474] hsr_slave_0: entered promiscuous mode [ 200.283926][ T9474] hsr_slave_1: entered promiscuous mode [ 200.290468][ T9474] debugfs: 'hsr0' already exists in 'hsr' [ 200.296192][ T9474] Cannot create hsr debugfs directory [ 200.468605][ T5884] Bluetooth: hci5: command tx timeout [ 201.907769][ T5884] Bluetooth: hci6: command tx timeout [ 201.988356][ T5884] Bluetooth: hci7: command tx timeout [ 202.147986][ T5884] Bluetooth: hci8: command tx timeout [ 202.148012][ T51] Bluetooth: hci9: command tx timeout [ 202.547913][ T51] Bluetooth: hci5: command tx timeout [ 203.988054][ T51] Bluetooth: hci6: command tx timeout [ 204.077880][ T51] Bluetooth: hci7: command tx timeout [ 204.227869][ T51] Bluetooth: hci9: command tx timeout [ 204.237982][ T51] Bluetooth: hci8: command tx timeout [ 204.628160][ T51] Bluetooth: hci5: command tx timeout [ 206.067847][ T51] Bluetooth: hci6: command tx timeout [ 206.147887][ T51] Bluetooth: hci7: command tx timeout [ 206.307938][ T51] Bluetooth: hci8: command tx timeout [ 206.308040][ T5884] Bluetooth: hci9: command tx timeout [ 256.876406][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 256.886260][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 256.894650][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 256.903605][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 256.912142][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 256.948491][ T9503] wg1 speed is unknown, defaulting to 1000 [ 257.068960][ T9503] chnl_net:caif_netlink_parms(): no params data found [ 257.135865][ T9503] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.143518][ T9503] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.151436][ T9503] bridge_slave_0: entered allmulticast mode [ 257.158799][ T9503] bridge_slave_0: entered promiscuous mode [ 257.168077][ T9503] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.175174][ T9503] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.183354][ T9503] bridge_slave_1: entered allmulticast mode [ 257.193803][ T9503] bridge_slave_1: entered promiscuous mode [ 257.223259][ T9503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.234844][ T9503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.265229][ T9503] team0: Port device team_slave_0 added [ 257.273062][ T9503] team0: Port device team_slave_1 added [ 257.299977][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.306933][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.333523][ T9503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.346162][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.353370][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.379870][ T9503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.420934][ T9503] hsr_slave_0: entered promiscuous mode [ 257.427298][ T9503] hsr_slave_1: entered promiscuous mode [ 257.434320][ T9503] debugfs: 'hsr0' already exists in 'hsr' [ 257.440356][ T9503] Cannot create hsr debugfs directory [ 258.235083][ T5884] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 258.244889][ T5884] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 258.253227][ T5884] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 258.262850][ T5884] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 258.272490][ T5884] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 258.390045][ T9516] wg1 speed is unknown, defaulting to 1000 [ 258.417207][ T5884] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 258.427139][ T5884] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 258.436324][ T5884] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 258.457898][ T5884] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 258.468511][ T5884] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 258.535566][ T5884] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 258.545792][ T5884] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 258.555495][ T5884] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 258.564748][ T5884] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 258.575942][ T5881] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 258.576008][ T5884] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 258.585005][ T5881] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 258.599788][ T51] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 258.614727][ T51] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 258.622683][ T5884] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 258.637093][ T9518] wg1 speed is unknown, defaulting to 1000 [ 258.718753][ T9521] wg1 speed is unknown, defaulting to 1000 [ 258.739528][ T9522] wg1 speed is unknown, defaulting to 1000 [ 258.949716][ T5884] Bluetooth: hci10: command tx timeout [ 258.981228][ T9516] chnl_net:caif_netlink_parms(): no params data found [ 259.119031][ T9518] chnl_net:caif_netlink_parms(): no params data found [ 259.200095][ T9516] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.207346][ T9516] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.215121][ T9516] bridge_slave_0: entered allmulticast mode [ 259.224038][ T9516] bridge_slave_0: entered promiscuous mode [ 259.267911][ T9516] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.275087][ T9516] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.283616][ T9516] bridge_slave_1: entered allmulticast mode [ 259.291038][ T9516] bridge_slave_1: entered promiscuous mode [ 259.349925][ T9521] chnl_net:caif_netlink_parms(): no params data found [ 259.375972][ T9516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.416938][ T9516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.426434][ T9522] chnl_net:caif_netlink_parms(): no params data found [ 259.484621][ T9518] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.491959][ T9518] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.499747][ T9518] bridge_slave_0: entered allmulticast mode [ 259.506812][ T9518] bridge_slave_0: entered promiscuous mode [ 259.538489][ T9516] team0: Port device team_slave_0 added [ 259.550209][ T9518] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.557360][ T9518] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.565044][ T9518] bridge_slave_1: entered allmulticast mode [ 259.572231][ T9518] bridge_slave_1: entered promiscuous mode [ 259.594043][ T9516] team0: Port device team_slave_1 added [ 259.689225][ T9518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.703847][ T9516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.711793][ T9516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.738310][ T9516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.749750][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.756873][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.764581][ T9521] bridge_slave_0: entered allmulticast mode [ 259.772310][ T9521] bridge_slave_0: entered promiscuous mode [ 259.782378][ T9518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.815781][ T9516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.822948][ T9516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.849571][ T9516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.860923][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.868336][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.875568][ T9521] bridge_slave_1: entered allmulticast mode [ 259.883459][ T9521] bridge_slave_1: entered promiscuous mode [ 259.933548][ T9518] team0: Port device team_slave_0 added [ 259.939949][ T9522] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.947080][ T9522] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.955142][ T9522] bridge_slave_0: entered allmulticast mode [ 259.962461][ T9522] bridge_slave_0: entered promiscuous mode [ 259.970845][ T9522] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.978479][ T9522] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.985794][ T9522] bridge_slave_1: entered allmulticast mode [ 259.993865][ T9522] bridge_slave_1: entered promiscuous mode [ 260.014598][ T9518] team0: Port device team_slave_1 added [ 260.048238][ T9521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.095541][ T9521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.121179][ T9516] hsr_slave_0: entered promiscuous mode [ 260.127723][ T9516] hsr_slave_1: entered promiscuous mode [ 260.133912][ T9516] debugfs: 'hsr0' already exists in 'hsr' [ 260.139771][ T9516] Cannot create hsr debugfs directory [ 260.148660][ T9522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.161456][ T9522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.182880][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.190013][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.216183][ T9518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.279872][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.286846][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.314368][ T5884] Bluetooth: hci11: command tx timeout [ 260.315668][ T9518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.353330][ T9521] team0: Port device team_slave_0 added [ 260.378150][ T9522] team0: Port device team_slave_0 added [ 260.386139][ T9521] team0: Port device team_slave_1 added [ 260.418045][ T9522] team0: Port device team_slave_1 added [ 260.436795][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.444128][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.471508][ T9521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.512363][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.519598][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.545890][ T9521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.558264][ T5884] Bluetooth: hci12: command tx timeout [ 260.616808][ T9522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.624597][ T9522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.650996][ T5884] Bluetooth: hci13: command tx timeout [ 260.657183][ T9522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.674336][ T9518] hsr_slave_0: entered promiscuous mode [ 260.680917][ T9518] hsr_slave_1: entered promiscuous mode [ 260.687056][ T9518] debugfs: 'hsr0' already exists in 'hsr' [ 260.693206][ T9518] Cannot create hsr debugfs directory [ 260.707951][ T5884] Bluetooth: hci14: command tx timeout [ 260.728308][ T9521] hsr_slave_0: entered promiscuous mode [ 260.735071][ T9521] hsr_slave_1: entered promiscuous mode [ 260.741822][ T9521] debugfs: 'hsr0' already exists in 'hsr' [ 260.747913][ T9521] Cannot create hsr debugfs directory [ 260.754417][ T9522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.761516][ T9522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.789781][ T9522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.961231][ T9522] hsr_slave_0: entered promiscuous mode [ 260.968416][ T9522] hsr_slave_1: entered promiscuous mode [ 260.974622][ T9522] debugfs: 'hsr0' already exists in 'hsr' [ 260.980569][ T9522] Cannot create hsr debugfs directory [ 261.027914][ T5884] Bluetooth: hci10: command tx timeout [ 262.389417][ T5884] Bluetooth: hci11: command tx timeout [ 262.627873][ T5884] Bluetooth: hci12: command tx timeout [ 262.707967][ T5884] Bluetooth: hci13: command tx timeout [ 262.788133][ T5884] Bluetooth: hci14: command tx timeout [ 263.108074][ T5884] Bluetooth: hci10: command tx timeout [ 264.467844][ T5884] Bluetooth: hci11: command tx timeout [ 264.708231][ T5884] Bluetooth: hci12: command tx timeout [ 264.787855][ T5884] Bluetooth: hci13: command tx timeout [ 264.867853][ T5884] Bluetooth: hci14: command tx timeout [ 265.187739][ T5884] Bluetooth: hci10: command tx timeout [ 266.548916][ T5884] Bluetooth: hci11: command tx timeout [ 266.788028][ T5884] Bluetooth: hci12: command tx timeout [ 266.867764][ T5884] Bluetooth: hci13: command tx timeout [ 266.947878][ T5884] Bluetooth: hci14: command tx timeout [ 298.788349][ T5884] Bluetooth: hci4: command 0x0405 tx timeout [ 317.300435][ T51] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 317.308849][ T51] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 317.318758][ T51] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 317.328306][ T51] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 317.336191][ T51] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 317.376930][ T9551] wg1 speed is unknown, defaulting to 1000 [ 317.496332][ T9551] chnl_net:caif_netlink_parms(): no params data found [ 317.567957][ T9551] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.575228][ T9551] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.582973][ T9551] bridge_slave_0: entered allmulticast mode [ 317.590811][ T9551] bridge_slave_0: entered promiscuous mode [ 317.601192][ T9551] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.608395][ T9551] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.615599][ T9551] bridge_slave_1: entered allmulticast mode [ 317.623292][ T9551] bridge_slave_1: entered promiscuous mode [ 317.652919][ T9551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.665255][ T9551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.698724][ T9551] team0: Port device team_slave_0 added [ 317.706533][ T9551] team0: Port device team_slave_1 added [ 317.732813][ T9551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.741011][ T9551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.767954][ T9551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.780181][ T9551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.787165][ T9551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.813760][ T9551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.856589][ T9551] hsr_slave_0: entered promiscuous mode [ 317.863442][ T9551] hsr_slave_1: entered promiscuous mode [ 317.870392][ T9551] debugfs: 'hsr0' already exists in 'hsr' [ 317.876128][ T9551] Cannot create hsr debugfs directory [ 318.660948][ T51] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 318.671075][ T51] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 318.681191][ T51] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 318.689499][ T51] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 318.697399][ T51] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 318.770228][ T9565] wg1 speed is unknown, defaulting to 1000 [ 318.833741][ T51] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 318.843117][ T51] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 318.851616][ T51] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 318.873668][ T51] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 318.882965][ T51] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 318.962214][ T51] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 318.974149][ T5881] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 318.985851][ T5881] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 318.994474][ T5868] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 319.000413][ T5881] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 319.007045][ T9567] wg1 speed is unknown, defaulting to 1000 [ 319.010536][ T5881] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 319.024721][ T5881] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 319.049009][ T5881] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 319.057417][ T5868] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 319.069370][ T5881] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 319.152883][ T9570] wg1 speed is unknown, defaulting to 1000 [ 319.217623][ T9569] wg1 speed is unknown, defaulting to 1000 [ 319.269462][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 319.369611][ T9565] chnl_net:caif_netlink_parms(): no params data found [ 319.427969][ T5884] Bluetooth: hci15: command tx timeout [ 319.464215][ T9567] chnl_net:caif_netlink_parms(): no params data found [ 319.637719][ T9570] chnl_net:caif_netlink_parms(): no params data found [ 319.661260][ T9565] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.668936][ T9565] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.676265][ T9565] bridge_slave_0: entered allmulticast mode [ 319.683815][ T9565] bridge_slave_0: entered promiscuous mode [ 319.695443][ T9565] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.703035][ T9565] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.710999][ T9565] bridge_slave_1: entered allmulticast mode [ 319.719044][ T9565] bridge_slave_1: entered promiscuous mode [ 319.781609][ T9567] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.788918][ T9567] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.796165][ T9567] bridge_slave_0: entered allmulticast mode [ 319.803706][ T9567] bridge_slave_0: entered promiscuous mode [ 319.848355][ T9567] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.855503][ T9567] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.863097][ T9567] bridge_slave_1: entered allmulticast mode [ 319.870620][ T9567] bridge_slave_1: entered promiscuous mode [ 319.884306][ T9565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.900849][ T9565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.980186][ T9567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.993654][ T9565] team0: Port device team_slave_0 added [ 320.003455][ T9565] team0: Port device team_slave_1 added [ 320.014996][ T9569] chnl_net:caif_netlink_parms(): no params data found [ 320.028318][ T9567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.121633][ T9565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.128818][ T9565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.155411][ T9565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.167981][ T9570] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.175164][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.183521][ T9570] bridge_slave_0: entered allmulticast mode [ 320.190848][ T9570] bridge_slave_0: entered promiscuous mode [ 320.212723][ T9567] team0: Port device team_slave_0 added [ 320.220255][ T9565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.227208][ T9565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.254082][ T9565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.272709][ T9570] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.280388][ T9570] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.287949][ T9570] bridge_slave_1: entered allmulticast mode [ 320.295159][ T9570] bridge_slave_1: entered promiscuous mode [ 320.308480][ T9567] team0: Port device team_slave_1 added [ 320.361583][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.368930][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.396920][ T9567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.436526][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.443674][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.470602][ T9567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.485519][ T9570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.498538][ T9570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.573404][ T9569] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.580896][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.588963][ T9569] bridge_slave_0: entered allmulticast mode [ 320.596282][ T9569] bridge_slave_0: entered promiscuous mode [ 320.609714][ T9565] hsr_slave_0: entered promiscuous mode [ 320.616382][ T9565] hsr_slave_1: entered promiscuous mode [ 320.623808][ T9565] debugfs: 'hsr0' already exists in 'hsr' [ 320.629922][ T9565] Cannot create hsr debugfs directory [ 320.649927][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.657078][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.664959][ T9569] bridge_slave_1: entered allmulticast mode [ 320.672398][ T9569] bridge_slave_1: entered promiscuous mode [ 320.709086][ T9570] team0: Port device team_slave_0 added [ 320.744217][ T9567] hsr_slave_0: entered promiscuous mode [ 320.750797][ T9567] hsr_slave_1: entered promiscuous mode [ 320.757124][ T9567] debugfs: 'hsr0' already exists in 'hsr' [ 320.763483][ T9567] Cannot create hsr debugfs directory [ 320.771311][ T9570] team0: Port device team_slave_1 added [ 320.788335][ T5884] Bluetooth: hci16: command tx timeout [ 320.845030][ T9569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.858174][ T9569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.873594][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.881057][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.907258][ T9570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.951331][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.957590][ T5884] Bluetooth: hci17: command tx timeout [ 320.959723][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.990778][ T9570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.037913][ T9569] team0: Port device team_slave_0 added [ 321.071593][ T9569] team0: Port device team_slave_1 added [ 321.107916][ T5884] Bluetooth: hci19: command tx timeout [ 321.114589][ T51] Bluetooth: hci18: command tx timeout [ 321.179094][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.186093][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.212977][ T9569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.229900][ T9570] hsr_slave_0: entered promiscuous mode [ 321.236347][ T9570] hsr_slave_1: entered promiscuous mode [ 321.242903][ T9570] debugfs: 'hsr0' already exists in 'hsr' [ 321.249040][ T9570] Cannot create hsr debugfs directory [ 321.267249][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.274481][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.300985][ T9569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.431543][ T9569] hsr_slave_0: entered promiscuous mode [ 321.438543][ T9569] hsr_slave_1: entered promiscuous mode [ 321.445111][ T9569] debugfs: 'hsr0' already exists in 'hsr' [ 321.452226][ T9569] Cannot create hsr debugfs directory [ 321.507961][ T51] Bluetooth: hci15: command tx timeout [ 322.867947][ T51] Bluetooth: hci16: command tx timeout [ 323.028059][ T51] Bluetooth: hci17: command tx timeout [ 323.187907][ T5876] Bluetooth: hci18: command tx timeout [ 323.192825][ T51] Bluetooth: hci19: command tx timeout [ 323.587797][ T51] Bluetooth: hci15: command tx timeout [ 324.390213][ T51] Bluetooth: hci8: command 0x0406 tx timeout [ 324.390824][ T5876] Bluetooth: hci6: command 0x0406 tx timeout [ 324.396271][ T5185] Bluetooth: hci7: command 0x0406 tx timeout [ 324.408450][ T5876] Bluetooth: hci9: command 0x0406 tx timeout [ 324.947897][ T5884] Bluetooth: hci16: command tx timeout [ 325.117672][ T5884] Bluetooth: hci17: command tx timeout [ 325.270006][ T5884] Bluetooth: hci18: command tx timeout [ 325.270018][ T5881] Bluetooth: hci19: command tx timeout [ 325.667930][ T5884] Bluetooth: hci15: command tx timeout [ 327.027827][ T5884] Bluetooth: hci16: command tx timeout [ 327.187958][ T5884] Bluetooth: hci17: command tx timeout [ 327.348309][ T5884] Bluetooth: hci19: command tx timeout [ 327.354633][ T5881] Bluetooth: hci18: command tx timeout [ 335.107996][ T31] INFO: task syz.0.950:9401 blocked for more than 143 seconds. [ 335.115593][ T31] Not tainted syzkaller #0 [ 335.120746][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.129685][ T31] task:syz.0.950 state:D stack:24648 pid:9401 tgid:9400 ppid:5865 task_flags:0x400140 flags:0x00004006 [ 335.142353][ T31] Call Trace: [ 335.145648][ T31] [ 335.148975][ T31] __schedule+0x1798/0x4cc0 [ 335.153516][ T31] ? validate_chain+0x897/0x2140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 335.158678][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.163846][ T31] ? __pfx___schedule+0x10/0x10 [ 335.169477][ T31] ? schedule+0x91/0x360 [ 335.174179][ T31] schedule+0x165/0x360 [ 335.178782][ T31] schedule_timeout+0x9a/0x270 [ 335.183672][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 335.217790][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.223062][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.254142][ T31] ? wait_for_completion+0x267/0x5d0 [ 335.259737][ T31] wait_for_completion+0x2bf/0x5d0 [ 335.264898][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 335.271311][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 335.277907][ T31] ? check_flush_dependency+0x88/0x400 [ 335.283407][ T31] __flush_workqueue+0x6f7/0x14b0 [ 335.288519][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 335.294423][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.299940][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 335.305413][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 335.311836][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 335.317357][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 335.322918][ T31] nbd_genl_disconnect+0x485/0x570 [ 335.328294][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 335.333941][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 335.340468][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 335.346064][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 335.352432][ T31] ? stack_trace_save+0x9c/0xe0 [ 335.357311][ T31] genl_rcv_msg+0x60e/0x790 [ 335.362225][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.367443][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 335.373322][ T31] netlink_rcv_skb+0x208/0x470 [ 335.378403][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.383267][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.388915][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.394271][ T31] ? down_read+0x1ad/0x2e0 [ 335.398795][ T31] genl_rcv+0x28/0x40 [ 335.402880][ T31] netlink_unicast+0x82f/0x9e0 [ 335.407829][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 335.413122][ T31] ? netlink_sendmsg+0x642/0xb30 [ 335.418365][ T31] ? skb_put+0x11b/0x210 [ 335.422645][ T31] netlink_sendmsg+0x805/0xb30 [ 335.427404][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.433005][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 335.438061][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 335.443469][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.449223][ T31] __sock_sendmsg+0x219/0x270 [ 335.454144][ T31] ____sys_sendmsg+0x505/0x830 [ 335.458995][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.464321][ T31] ? import_iovec+0x74/0xa0 [ 335.468951][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 335.473661][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.479316][ T31] ? __fget_files+0x2a/0x420 [ 335.483936][ T31] ? __fget_files+0x3a0/0x420 [ 335.488808][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 335.493784][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.499425][ T31] ? rcu_is_watching+0x15/0xb0 [ 335.504201][ T31] ? do_syscall_64+0xbe/0x3b0 [ 335.509430][ T31] do_syscall_64+0xfa/0x3b0 [ 335.513968][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.519229][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.525303][ T31] ? clear_bhb_loop+0x60/0xb0 [ 335.530123][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.536028][ T31] RIP: 0033:0x7f4528d8eec9 [ 335.540715][ T31] RSP: 002b:00007f4529c74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.549438][ T31] RAX: ffffffffffffffda RBX: 00007f4528fe5fa0 RCX: 00007f4528d8eec9 [ 335.557420][ T31] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000004 [ 335.565501][ T31] RBP: 00007f4528e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 335.573802][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.581862][ T31] R13: 00007f4528fe6038 R14: 00007f4528fe5fa0 R15: 00007ffc13fab2f8 [ 335.590076][ T31] [ 335.593131][ T31] INFO: task syz.4.957:9444 blocked for more than 143 seconds. [ 335.600979][ T31] Not tainted syzkaller #0 [ 335.605919][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.614810][ T31] task:syz.4.957 state:D stack:25560 pid:9444 tgid:9422 ppid:5863 task_flags:0x400140 flags:0x00004004 [ 335.626795][ T31] Call Trace: [ 335.630443][ T31] [ 335.633384][ T31] __schedule+0x1798/0x4cc0 [ 335.637953][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.642823][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.647720][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.652656][ T31] ? __pfx___schedule+0x10/0x10 [ 335.657859][ T31] ? schedule+0x91/0x360 [ 335.662133][ T31] schedule+0x165/0x360 [ 335.666323][ T31] schedule_preempt_disabled+0x13/0x30 [ 335.672216][ T31] __mutex_lock+0x7e6/0x1350 [ 335.676869][ T31] ? __mutex_lock+0x5bb/0x1350 [ 335.681694][ T31] ? genl_rcv_msg+0x10d/0x790 [ 335.686382][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 335.691685][ T31] ? stack_trace_save+0x9c/0xe0 [ 335.696537][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 335.701997][ T31] ? radix_tree_lookup+0x240/0x290 [ 335.707134][ T31] genl_rcv_msg+0x10d/0x790 [ 335.711728][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.716607][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.722068][ T31] netlink_rcv_skb+0x208/0x470 [ 335.726859][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.731889][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.737034][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.742648][ T31] ? down_read+0x1ad/0x2e0 [ 335.747143][ T31] genl_rcv+0x28/0x40 [ 335.751672][ T31] netlink_unicast+0x82f/0x9e0 [ 335.756480][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 335.761834][ T31] ? netlink_sendmsg+0x642/0xb30 [ 335.766789][ T31] ? skb_put+0x11b/0x210 [ 335.771077][ T31] netlink_sendmsg+0x805/0xb30 [ 335.775858][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.781414][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 335.786375][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 335.791702][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.797001][ T31] __sock_sendmsg+0x219/0x270 [ 335.801765][ T31] __sys_sendto+0x3bd/0x520 [ 335.806321][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 335.811716][ T31] ? count_memcg_event_mm+0x21/0x260 [ 335.817004][ T31] ? exc_page_fault+0x76/0xf0 [ 335.821843][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 335.827172][ T31] __x64_sys_sendto+0xde/0x100 [ 335.832226][ T31] do_syscall_64+0xfa/0x3b0 [ 335.836750][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.842268][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.848537][ T31] ? clear_bhb_loop+0x60/0xb0 [ 335.853249][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.859661][ T31] RIP: 0033:0x7fa726390d5c [ 335.864130][ T31] RSP: 002b:00007fa7271b6ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 335.872608][ T31] RAX: ffffffffffffffda RBX: 00007fa7271b6fc0 RCX: 00007fa726390d5c [ 335.880843][ T31] RDX: 0000000000000028 RSI: 00007fa7271b7010 RDI: 0000000000000008 [ 335.889009][ T31] RBP: 0000000000000000 R08: 00007fa7271b6f14 R09: 000000000000000c [ 335.896991][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 335.905128][ T31] R13: 00007fa7271b6f68 R14: 00007fa7271b7010 R15: 0000000000000000 [ 335.913561][ T31] [ 335.916654][ T31] INFO: task syz.2.959:9425 blocked for more than 144 seconds. [ 335.927906][ T31] Not tainted syzkaller #0 [ 335.933037][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.941878][ T31] task:syz.2.959 state:D stack:27496 pid:9425 tgid:9424 ppid:5866 task_flags:0x400140 flags:0x00004004 [ 335.953891][ T31] Call Trace: [ 335.957174][ T31] [ 335.960471][ T31] __schedule+0x1798/0x4cc0 [ 335.965034][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.970257][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.975126][ T31] ? __pfx___schedule+0x10/0x10 [ 335.980106][ T31] ? schedule+0x91/0x360 [ 335.984379][ T31] schedule+0x165/0x360 [ 335.988936][ T31] schedule_preempt_disabled+0x13/0x30 [ 335.994453][ T31] __mutex_lock+0x7e6/0x1350 [ 335.999198][ T31] ? __mutex_lock+0x5bb/0x1350 [ 336.003971][ T31] ? genl_rcv_msg+0x10d/0x790 [ 336.008924][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 336.013958][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 336.019957][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 336.025875][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 336.032332][ T31] ? radix_tree_lookup+0x240/0x290 [ 336.037732][ T31] genl_rcv_msg+0x10d/0x790 [ 336.042284][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.047328][ T31] netlink_rcv_skb+0x208/0x470 [ 336.052510][ T31] ? __lock_acquire+0xab9/0xd20 [ 336.057412][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.062622][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.068155][ T31] ? down_read+0x1ad/0x2e0 [ 336.072587][ T31] genl_rcv+0x28/0x40 [ 336.076557][ T31] netlink_unicast+0x82f/0x9e0 [ 336.081674][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 336.086998][ T31] ? netlink_sendmsg+0x642/0xb30 [ 336.092091][ T31] ? skb_put+0x11b/0x210 [ 336.096365][ T31] netlink_sendmsg+0x805/0xb30 [ 336.101483][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.106776][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.111951][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.117258][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.122688][ T31] __sock_sendmsg+0x219/0x270 [ 336.127395][ T31] ____sys_sendmsg+0x505/0x830 [ 336.132352][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.137785][ T31] ? import_iovec+0x74/0xa0 [ 336.142315][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 336.147045][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.152637][ T31] ? __fget_files+0x2a/0x420 [ 336.157265][ T31] ? __fget_files+0x3a0/0x420 [ 336.162061][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 336.167033][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.172805][ T31] ? rcu_is_watching+0x15/0xb0 [ 336.177734][ T31] ? do_syscall_64+0xbe/0x3b0 [ 336.182438][ T31] do_syscall_64+0xfa/0x3b0 [ 336.186938][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.192271][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.198405][ T31] ? clear_bhb_loop+0x60/0xb0 [ 336.203147][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.209326][ T31] RIP: 0033:0x7f09bfb8eec9 [ 336.213850][ T31] RSP: 002b:00007f09c0944038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.222500][ T31] RAX: ffffffffffffffda RBX: 00007f09bfde5fa0 RCX: 00007f09bfb8eec9 [ 336.231018][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 336.239092][ T31] RBP: 00007f09bfc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 336.247099][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.255331][ T31] R13: 00007f09bfde6038 R14: 00007f09bfde5fa0 R15: 00007ffd9e078f28 [ 336.263610][ T31] [ 336.266718][ T31] INFO: task syz.1.961:9448 blocked for more than 144 seconds. [ 336.274388][ T31] Not tainted syzkaller #0 [ 336.279553][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.288769][ T31] task:syz.1.961 state:D stack:27072 pid:9448 tgid:9447 ppid:5864 task_flags:0x400040 flags:0x00004004 [ 336.300880][ T31] Call Trace: [ 336.304285][ T31] [ 336.307310][ T31] __schedule+0x1798/0x4cc0 [ 336.312185][ T31] ? __lock_acquire+0xab9/0xd20 [ 336.317098][ T31] ? __lock_acquire+0xab9/0xd20 [ 336.322199][ T31] ? __pfx___schedule+0x10/0x10 [ 336.327089][ T31] ? schedule+0x91/0x360 [ 336.331599][ T31] schedule+0x165/0x360 [ 336.335797][ T31] schedule_preempt_disabled+0x13/0x30 [ 336.341408][ T31] __mutex_lock+0x7e6/0x1350 [ 336.346017][ T31] ? __mutex_lock+0x5bb/0x1350 [ 336.350952][ T31] ? genl_rcv_msg+0x10d/0x790 [ 336.355666][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 336.361188][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 336.366343][ T31] ? radix_tree_lookup+0x240/0x290 [ 336.371933][ T31] genl_rcv_msg+0x10d/0x790 [ 336.376467][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.381572][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 336.386608][ T31] ? __asan_memcpy+0x40/0x70 [ 336.391567][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 336.397056][ T31] netlink_rcv_skb+0x208/0x470 [ 336.401934][ T31] ? __lock_acquire+0xab9/0xd20 [ 336.406996][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.412274][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.417656][ T31] ? down_read+0x1ad/0x2e0 [ 336.422165][ T31] genl_rcv+0x28/0x40 [ 336.426144][ T31] netlink_unicast+0x82f/0x9e0 [ 336.431081][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 336.436387][ T31] ? netlink_sendmsg+0x642/0xb30 [ 336.441473][ T31] ? skb_put+0x11b/0x210 [ 336.445728][ T31] netlink_sendmsg+0x805/0xb30 [ 336.450676][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.455990][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.461109][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.466413][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.472065][ T31] __sock_sendmsg+0x219/0x270 [ 336.476910][ T31] __sys_sendto+0x3bd/0x520 [ 336.481784][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 336.486840][ T31] ? count_memcg_event_mm+0x21/0x260 [ 336.492309][ T31] ? exc_page_fault+0x76/0xf0 [ 336.497015][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 336.502397][ T31] __x64_sys_sendto+0xde/0x100 [ 336.507182][ T31] do_syscall_64+0xfa/0x3b0 [ 336.511800][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.517021][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.523170][ T31] ? clear_bhb_loop+0x60/0xb0 [ 336.527959][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.533851][ T31] RIP: 0033:0x7f716e390d5c [ 336.538461][ T31] RSP: 002b:00007f716c5f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 336.546901][ T31] RAX: ffffffffffffffda RBX: 00007f716c5f4fc0 RCX: 00007f716e390d5c [ 336.555181][ T31] RDX: 0000000000000020 RSI: 00007f716c5f5010 RDI: 0000000000000004 [ 336.563255][ T31] RBP: 0000000000000000 R08: 00007f716c5f4f14 R09: 000000000000000c [ 336.571368][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 336.579414][ T31] R13: 00007f716c5f4f68 R14: 00007f716c5f5010 R15: 0000000000000000 [ 336.587391][ T31] [ 336.590777][ T31] INFO: task syz.1.961:9449 blocked for more than 144 seconds. [ 336.598411][ T31] Not tainted syzkaller #0 [ 336.603374][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.612192][ T31] task:syz.1.961 state:D stack:26920 pid:9449 tgid:9447 ppid:5864 task_flags:0x400040 flags:0x00004004 [ 336.624345][ T31] Call Trace: [ 336.627877][ T31] [ 336.630823][ T31] __schedule+0x1798/0x4cc0 [ 336.635367][ T31] ? __lock_acquire+0xab9/0xd20 [ 336.640329][ T31] ? __lock_acquire+0xab9/0xd20 [ 336.645207][ T31] ? __pfx___schedule+0x10/0x10 [ 336.650441][ T31] ? schedule+0x91/0x360 [ 336.654747][ T31] schedule+0x165/0x360 [ 336.659059][ T31] schedule_preempt_disabled+0x13/0x30 [ 336.664543][ T31] __mutex_lock+0x7e6/0x1350 [ 336.669749][ T31] ? __mutex_lock+0x5bb/0x1350 [ 336.674533][ T31] ? genl_rcv_msg+0x10d/0x790 [ 336.679333][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 336.684922][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 336.690204][ T31] ? radix_tree_lookup+0x240/0x290 [ 336.695348][ T31] genl_rcv_msg+0x10d/0x790 [ 336.700131][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.705581][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 336.711049][ T31] ? __asan_memcpy+0x40/0x70 [ 336.715660][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 336.721171][ T31] netlink_rcv_skb+0x208/0x470 [ 336.725947][ T31] ? __lock_acquire+0xab9/0xd20 [ 336.730927][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.735972][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.741365][ T31] ? down_read+0x1ad/0x2e0 [ 336.745884][ T31] genl_rcv+0x28/0x40 [ 336.749982][ T31] netlink_unicast+0x82f/0x9e0 [ 336.754772][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 336.760242][ T31] ? netlink_sendmsg+0x642/0xb30 [ 336.765192][ T31] ? skb_put+0x11b/0x210 [ 336.769640][ T31] netlink_sendmsg+0x805/0xb30 [ 336.774434][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.779923][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.785017][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.790672][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.796146][ T31] __sock_sendmsg+0x219/0x270 [ 336.800934][ T31] __sys_sendto+0x3bd/0x520 [ 336.805459][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 336.811043][ T31] ? count_memcg_event_mm+0x21/0x260 [ 336.816399][ T31] ? exc_page_fault+0x76/0xf0 [ 336.821266][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 336.826588][ T31] __x64_sys_sendto+0xde/0x100 [ 336.831591][ T31] do_syscall_64+0xfa/0x3b0 [ 336.836119][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.841400][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.847661][ T31] ? clear_bhb_loop+0x60/0xb0 [ 336.852386][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.858359][ T31] RIP: 0033:0x7f716e390d5c [ 336.862866][ T31] RSP: 002b:00007f716c5d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 336.871829][ T31] RAX: ffffffffffffffda RBX: 00007f716c5d3fc0 RCX: 00007f716e390d5c [ 336.880014][ T31] RDX: 0000000000000020 RSI: 00007f716c5d4010 RDI: 0000000000000005 [ 336.888149][ T31] RBP: 0000000000000000 R08: 00007f716c5d3f14 R09: 000000000000000c [ 336.896238][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 336.904345][ T31] R13: 00007f716c5d3f68 R14: 00007f716c5d4010 R15: 0000000000000000 [ 336.912536][ T31] [ 336.915575][ T31] INFO: task syz.3.962:9452 blocked for more than 145 seconds. [ 336.924057][ T31] Not tainted syzkaller #0 [ 336.929276][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.938137][ T31] task:syz.3.962 state:D stack:28360 pid:9452 tgid:9451 ppid:5880 task_flags:0x400040 flags:0x00004004 [ 336.950176][ T31] Call Trace: [ 336.953453][ T31] [ 336.956371][ T31] __schedule+0x1798/0x4cc0 [ 336.960995][ T31] ? __lock_acquire+0xab9/0xd20 [ 336.965897][ T31] ? __lock_acquire+0xab9/0xd20 [ 336.970854][ T31] ? __pfx___schedule+0x10/0x10 [ 336.975862][ T31] ? schedule+0x91/0x360 [ 336.980321][ T31] schedule+0x165/0x360 [ 336.984503][ T31] schedule_preempt_disabled+0x13/0x30 [ 336.990110][ T31] __mutex_lock+0x7e6/0x1350 [ 336.994748][ T31] ? __mutex_lock+0x5bb/0x1350 [ 336.999672][ T31] ? genl_rcv_msg+0x10d/0x790 [ 337.004410][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 337.009828][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 337.014998][ T31] ? radix_tree_lookup+0x240/0x290 [ 337.020253][ T31] genl_rcv_msg+0x10d/0x790 [ 337.024786][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.030341][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 337.035490][ T31] ? __asan_memcpy+0x40/0x70 [ 337.040629][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 337.046296][ T31] netlink_rcv_skb+0x208/0x470 [ 337.051177][ T31] ? __lock_acquire+0xab9/0xd20 [ 337.056143][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.061385][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.066734][ T31] ? down_read+0x1ad/0x2e0 [ 337.071343][ T31] genl_rcv+0x28/0x40 [ 337.075350][ T31] netlink_unicast+0x82f/0x9e0 [ 337.080205][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 337.086548][ T31] ? netlink_sendmsg+0x642/0xb30 [ 337.091701][ T31] ? skb_put+0x11b/0x210 [ 337.095977][ T31] netlink_sendmsg+0x805/0xb30 [ 337.100935][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.106501][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 337.111569][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.116985][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.122911][ T31] __sock_sendmsg+0x219/0x270 [ 337.127719][ T31] __sys_sendto+0x3bd/0x520 [ 337.132248][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 337.137777][ T31] ? count_memcg_event_mm+0x21/0x260 [ 337.143121][ T31] ? exc_page_fault+0x76/0xf0 [ 337.148038][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 337.153366][ T31] __x64_sys_sendto+0xde/0x100 [ 337.158226][ T31] do_syscall_64+0xfa/0x3b0 [ 337.162857][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.168469][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.174565][ T31] ? clear_bhb_loop+0x60/0xb0 [ 337.179379][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.185307][ T31] RIP: 0033:0x7fa2e1790d5c [ 337.190579][ T31] RSP: 002b:00007fa2e26f9ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 337.199447][ T31] RAX: ffffffffffffffda RBX: 00007fa2e26f9fc0 RCX: 00007fa2e1790d5c [ 337.208335][ T31] RDX: 0000000000000020 RSI: 00007fa2e26fa010 RDI: 0000000000000004 [ 337.216325][ T31] RBP: 0000000000000000 R08: 00007fa2e26f9f14 R09: 000000000000000c [ 337.224797][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 337.232867][ T31] R13: 00007fa2e26f9f68 R14: 00007fa2e26fa010 R15: 0000000000000000 [ 337.241152][ T31] [ 337.244259][ T31] [ 337.244259][ T31] Showing all locks held in the system: [ 337.252645][ T31] 1 lock held by khungtaskd/31: [ 337.257956][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 337.268728][ T31] 3 locks held by kworker/u8:4/78: [ 337.273865][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 337.283967][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 337.293021][ T31] #2: ffff8880b8625918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 337.302232][ T31] 3 locks held by klogd/5224: [ 337.307834][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 337.318150][ T31] #1: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 337.328189][ T31] #2: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 337.337178][ T31] 2 locks held by getty/5629: [ 337.341998][ T31] #0: ffff88814dd760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 337.352206][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 337.362689][ T31] 2 locks held by kworker/0:3/5871: [ 337.368021][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 337.378344][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 337.387268][ T31] 2 locks held by kworker/u9:3/5875: [ 337.392678][ T31] #0: ffff888025242948 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 337.404095][ T31] #1: ffffc90003ea7bc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 337.416299][ T31] 3 locks held by syz.0.950/9401: [ 337.421988][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.431018][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.440373][ T31] #2: ffff88802522ea30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 337.450844][ T31] 2 locks held by syz.4.957/9444: [ 337.456050][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.464367][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.473554][ T31] 2 locks held by syz.2.959/9425: [ 337.478846][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.487243][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.496375][ T31] 2 locks held by syz.1.961/9448: [ 337.501517][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.510000][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.519168][ T31] 2 locks held by syz.1.961/9449: [ 337.524209][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.532680][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.542037][ T31] 2 locks held by syz.3.962/9452: [ 337.547080][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.555456][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.564699][ T31] 2 locks held by syz-executor/9455: [ 337.570081][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.578571][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.587798][ T31] 2 locks held by syz-executor/9469: [ 337.593186][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.601740][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.610910][ T31] 2 locks held by syz-executor/9471: [ 337.616206][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.624479][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.633754][ T31] 2 locks held by syz-executor/9473: [ 337.639252][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.647637][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.656664][ T31] 2 locks held by syz-executor/9474: [ 337.662088][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.672165][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.681452][ T31] 2 locks held by syz-executor/9503: [ 337.686852][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.695371][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.704459][ T31] 2 locks held by syz-executor/9516: [ 337.709802][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.718101][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.727095][ T31] 2 locks held by syz-executor/9518: [ 337.732446][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.740718][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.751187][ T31] 2 locks held by syz-executor/9521: [ 337.756583][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.765049][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.774189][ T31] 2 locks held by syz-executor/9522: [ 337.779575][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.787876][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.796879][ T31] 2 locks held by syz-executor/9551: [ 337.802438][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.810734][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.820110][ T31] 2 locks held by syz-executor/9565: [ 337.825378][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.833789][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.842930][ T31] 2 locks held by syz-executor/9567: [ 337.848297][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.856508][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.865661][ T31] 2 locks held by syz-executor/9569: [ 337.871056][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.879316][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.888474][ T31] 2 locks held by syz-executor/9570: [ 337.893776][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 337.902057][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 337.911344][ T31] [ 337.913769][ T31] ============================================= [ 337.913769][ T31] [ 337.922319][ T31] NMI backtrace for cpu 1 [ 337.922336][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 337.922355][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 337.922365][ T31] Call Trace: [ 337.922371][ T31] [ 337.922378][ T31] dump_stack_lvl+0x189/0x250 [ 337.922406][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.922425][ T31] ? __pfx__printk+0x10/0x10 [ 337.922458][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 337.922484][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 337.922510][ T31] ? __pfx__printk+0x10/0x10 [ 337.922535][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 337.922565][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 337.922593][ T31] watchdog+0xf93/0xfe0 [ 337.922633][ T31] ? watchdog+0x1de/0xfe0 [ 337.922662][ T31] kthread+0x70e/0x8a0 [ 337.922688][ T31] ? __pfx_watchdog+0x10/0x10 [ 337.922712][ T31] ? __pfx_kthread+0x10/0x10 [ 337.922737][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.922765][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.922793][ T31] ? __pfx_kthread+0x10/0x10 [ 337.922817][ T31] ret_from_fork+0x439/0x7d0 [ 337.922839][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 337.922863][ T31] ? __switch_to_asm+0x39/0x70 [ 337.922884][ T31] ? __switch_to_asm+0x33/0x70 [ 337.922907][ T31] ? __pfx_kthread+0x10/0x10 [ 337.922930][ T31] ret_from_fork_asm+0x1a/0x30 [ 337.922970][ T31] [ 337.922978][ T31] Sending NMI from CPU 1 to CPUs 0: [ 338.068948][ C0] NMI backtrace for cpu 0 [ 338.068966][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 338.068984][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 338.068995][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 338.069025][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 09 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 338.069041][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 338.069056][ C0] RAX: 7408399228f61700 RBX: ffffffff81968528 RCX: 7408399228f61700 [ 338.069069][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b09bc RDI: ffffffff8be33f80 [ 338.069081][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 338.069094][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa2f230 [ 338.069107][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 338.069118][ C0] FS: 0000000000000000(0000) GS:ffff888125c3c000(0000) knlGS:0000000000000000 [ 338.069132][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.069143][ C0] CR2: 0000556486e80fb0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 338.069158][ C0] Call Trace: [ 338.069166][ C0] [ 338.069172][ C0] default_idle+0x13/0x20 [ 338.069191][ C0] default_idle_call+0x74/0xb0 [ 338.069209][ C0] do_idle+0x1e8/0x510 [ 338.069234][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 338.069255][ C0] ? __pfx_do_idle+0x10/0x10 [ 338.069282][ C0] ? do_idle+0x4ed/0x510 [ 338.069307][ C0] cpu_startup_entry+0x44/0x60 [ 338.069331][ C0] rest_init+0x2de/0x300 [ 338.069351][ C0] start_kernel+0x3a9/0x410 [ 338.069372][ C0] x86_64_start_reservations+0x24/0x30 [ 338.069396][ C0] x86_64_start_kernel+0x143/0x1c0 [ 338.069418][ C0] common_startup_64+0x13e/0x147 [ 338.069446][ C0] [ 338.069992][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 338.260885][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 338.269987][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 338.280043][ T31] Call Trace: [ 338.283324][ T31] [ 338.286253][ T31] dump_stack_lvl+0x99/0x250 [ 338.290843][ T31] ? __asan_memcpy+0x40/0x70 [ 338.295426][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.300637][ T31] ? __pfx__printk+0x10/0x10 [ 338.305236][ T31] vpanic+0x281/0x750 [ 338.309264][ T31] ? __pfx_vpanic+0x10/0x10 [ 338.313845][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 338.319387][ T31] ? preempt_schedule+0xae/0xc0 [ 338.324258][ T31] ? preempt_schedule_common+0x83/0xd0 [ 338.329747][ T31] panic+0xb9/0xc0 [ 338.333486][ T31] ? __pfx_panic+0x10/0x10 [ 338.337900][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 338.343368][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 338.349525][ T31] watchdog+0xfd2/0xfe0 [ 338.353681][ T31] ? watchdog+0x1de/0xfe0 [ 338.358017][ T31] kthread+0x70e/0x8a0 [ 338.362083][ T31] ? __pfx_watchdog+0x10/0x10 [ 338.366755][ T31] ? __pfx_kthread+0x10/0x10 [ 338.371372][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.376570][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.381781][ T31] ? __pfx_kthread+0x10/0x10 [ 338.386388][ T31] ret_from_fork+0x439/0x7d0 [ 338.390973][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 338.396087][ T31] ? __switch_to_asm+0x39/0x70 [ 338.400849][ T31] ? __switch_to_asm+0x33/0x70 [ 338.405622][ T31] ? __pfx_kthread+0x10/0x10 [ 338.410227][ T31] ret_from_fork_asm+0x1a/0x30 [ 338.414996][ T31] [ 338.418155][ T31] Kernel Offset: disabled [ 338.422459][ T31] Rebooting in 86400 seconds..