last executing test programs: 20.2452547s ago: executing program 2 (id=2651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000ffe50000000000"], 0x0}, 0x94) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) (rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 19.960970891s ago: executing program 2 (id=2657): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b0400000000454db63102000000300004802c0001800b0001006e756d67656e00001c00028008000240000056a7080003400000000008000140000000110900010073797a30000000000900020073797a320000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4d, 0x0, 0x0) close(0x4) 19.777695174s ago: executing program 2 (id=2660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000002bc0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000000080)="be7c2c0f75c3219ae0bea99d401d83c11183e1eef078673546cbd6e8a839903b4fef8b7d32", 0x25}, {&(0x7f0000000180)="26350df07abfbb860f8653d27ad552b2406599a028825d67514373d48d8305ac98029cf40955d9313ce6da94632ba703d53fa0b5dfae9ecfd98b8d0305d2c70ad71964e676ce51309b0587c313e9ac057dd4ad3bc488ef360effd94f310f7f3a", 0x60}, {&(0x7f00000002c0)="38d7a31e0a35cebd37daed2849fb7d", 0xf}, {&(0x7f0000000300)="e39d3bf8c03b7614e09431f52ff38924a2952d7ace631b50602c8e07f7774c6def39f800cfc0c1656a43338c6e69f0d37ccf", 0x32}, {&(0x7f0000001900)="52fa5114dc0cd6da5264751887e48814c66857ac481d4bb513e67b9d88805dcd66f715c544a378d257b240203dc607673d49d6b63571f27870305eb6bb69a7d54cacdd011f1aa2feca3685eb1b00ea0c87d25a9ba9bb27827a8d1cc0c5337363e6f1a9477da3d4b30c4647a8f48abc666171d26bb5459d6ad5fe8bdf22cd495a2859f9e0937b1076238cdff316f1b559b3053ad00f1c3fcb920a0dcaabafaa9db7f6c4e54c6dc5130820c5d8b58e97ffefc9d31b6d408cfdd814d551ae9659ce02dbd5efc9832edd595ecce0996868ba40e703cc11cad5a97f6568865bb5d43141d0c5c9ef047d356883bca8db27ba1ee8a5f964930c75d0ae760a2328232a08550d8937df3785c07115d4f06b3f1a12ef624177625e65cb7653c18ce7c7a90751d697b34bc57591509446424c4ea937cc9663a9c230052b639665708d839b2dc6747087702076d2943a117064d1b48c4010da8679def189afbc7f9be2ab70965fa5d1737330cc9698df9ecd2fa98f627d37547259e94f287a0ae4d9a660c1e9aaa00cf8b4f16c62e2075cae05e14a766a9e1d1a7b733ab91363a963b527759748a37da20555e815b43a439e05fa9e351bea51bf4573a3d20483df805ec414ead26a9f25ceada5259e019733b8ffd9cca28f5fdb9b6286cbd263b4a511d54e424fa413aacfe70a755f5e1306563541623546a38cd3c61ee21cdf510dd9762d42e2fb8ea66911e1230c73fff95a36230457871c09727aa595f848b9f3faa10dd84ac9506ac15edb0c6ba8365ec7df87e47d65b72ce440f5681a7437dc70c61c0c531cf68f38ca277d78d0859e688d525cee2cdfb3bbfc8edfc368b6e101307006879224b69350b944ed24d506806abf36ffb7511a90bee6e07d137c274e8c76f65993fd9816d2bca7dbbb2b22a0aec7fe3381574169a76add9240be1718acb6972247a03d341d7104ef984ec4639f34fd69a23f275d2cd863a3d0fb09d2795e8527c532ce631926af194c2cd40a1b2a755ba4d5546a6b177a232ae0b901025902269c6ff257abd8a957b257ca97c62e02478a7422c70fb39c806c29beb500d2f859fa2beff998da2602e1b8069c70761c0cb517fbe6f60eb937e1c4ad90b30425e02d77e68da058fff4c429525b625b4ec04d95613596085b71d32e92149c11c9b4432ea63061755decd71d12042be505b14c818a9cae9bd6f482f4adc19396a86a7863beeb41bc00f5975821201b435f69c9098714f81c2f97afb1bdce2972100d966a9ddf054f3675c456c875f7c4428dbc3cbfc91bfe1f3d402cb8a53cdb8e73a309c762df7afe17a4b122e9cd39f7a8fcce191c26a621c16f33316fd43693a23a15b2572ac37142429e2ab262dbdcbd7b388bb8b342a1bafd26d234cb04d516689c8a46d7cef98280d9e59a4c78c3a144b6eb669265eb0d01150cf10d5e76a6c52c7978b02567d6c30b2eb95435eee2abb971629c6bdea9e26217cbb05b4887abdae5a98c1badbace157dad6980a7b53f091248136b2a62a86a3a28aaa5aaf2d3f865493f0c67ba84da84c755ff460f58cf026c4e43913d3de4f689316dc70040f2ea9b7ed1a749f37c4fe3e597ee308682d53891d7b549ae8b53c22df38d28b934cbe5f00488d8ce0d789c560ef076c4c34eddd56e6aabaca0c78f9204175f844c758af09976f0c2de9446f899caba5257c5c3f0bf3d66cd86b25259d4c189cdb2616ad56a94469775b49c2f0a354bf455a6703e0a4185bf69edb72958346fba144e5e745a1d5de51fc681fbca37576da90631b0b4613a4197f29251e39b0b4181ea08d89754835cc679ac250ac719e5ec8aa55113c838d2ccdda717d95cb314791d8b894c842ad6b66d32f626b7ed5c004551c1073fd79b88167f076ca743253260be20bdc3dcba72010157aded3566f6c074fcdc8cd4e3438f85994d58403b47c99b46754673f5448067ff4e7a7c183cd9e1aa3809880da10c02e80b771ca76d0f769090cb797201e7b61e7cb4dbbe1b6961ed4b755c07602215ae1fc333a56af3b053335a41c9bfa4f27497b664e00ee92325c68ef9e570a028dda003431e10430680f0b4d5bfeea6ce95b93d8b9354c75986050243f75444dd0e4017ccb59134acc0748005db87dfe47c6ce6f1ac7add6a5c94975d899ec4035d8a3ddb60340ce6acafcb06eb6381bfcc488b97d95b9d11aff958c3b78d354de2b9ad022f9844b469c2550bd7fc7f3f83f397d7eba032d0cd2b068151a9ea3937cc3c1f89e6461c20bb89c0b0802362f7ca0debf91098f3230ccac4f1c7640e5fce53b261df6f709a63b250df12fce4ba883003faacaa6606251e28d60c1031c347d52557fee565fc57f3d89e8b4e768390c0b725bab523e1bbf374e3ad29915bc86e88d32464a86e5506fa368c277714f42f1b02a7d742f4e5709826bf48d6603c98f657cba967f5cc108175345485bfcbd18ac5f449d4dd363a636012b1d4c223e1f7bf5e3ab75e0eddd05170f19bebfeb7dc8f046f0a1b2a202da5a21771e993cb6a3d2104cd03d3855a3c1ee4bc9c2744903225f8fca5ea16988c9eb6da938dd1584a3ac5737b433ff0396b2965571804a157d60882bfaa471475c4b4a898b76352eb39ffa72aeb88eba1172ae6046f24aac99018f7d081f5cb58a213744692d64f6de419708a7890268a6b738a1927e7399feb85c083629c841dbdb914be163b457d173734b28b50f5de433f07587a3431259c4fa66c3c2f8e61b40a55e22ad3e5e98679d6e0a497ade7e5af803f48fed47f93986084fb29e93dc611c1c56d346a63cc421eb73b5865dda6274724dab9b03330ac539ffe551e2381373d9037e778f7d46ada65a9afac6447c8cf5076fea01228c02803d36ae53073869fbaae315c4783b5c23d766ce9ec4a958c089ff8ac7826442a9491cc6bcbdc46c15d9f6b63a0752c79ed5ac0d587336c4c93d11865ad11944c787e8637457e4937a66fe4ba338c82c8f73faf239c54a930147fa80fccc8a35b3cc248118a651b8770414a84dfd576c4a79c87e12ed962dfbcd12ab0aa0bf5c869e33c48b3c0b85543c62917d1e3a0ef83d96e73819cfd3c0855ee26e6b0e7045fb90da19ec97c76d3959abe186cb96f61f6fce00f84170220f015cdf681799de2aa6889754bf40f4f93fb5fb4ee0333c4374b09fb3aaacb49f5712f160d324943d6632e72eed8ea8ff90010af1895a9ab92d7f4a971f7bacd51ee0d33acf84b95581d93598dd92498bffed2c477d12f7d09cea17158ea9b94e9ca34041ec5aaa7ad0e92a93420f5c8a1964f78228e39f7a41342a01f62068d2e2a3057ea4a09af27bd21e839082e6f75c8d8c3e7c9f25a564ed7a7361935365e4c74bfa2969ef3186c55c6b3c592c4e0e9e630d196a72ec21d852f6e22b8afb5d27caad8d21bafbd34147fe5b3f56d8e2a74eb6f7e710ba9d376b3dd26106e486880eeda665f99caeee337354596f46ba7da60e55712f0e7a5aeb9c8af81e5f73f634f30648af157c1558323f85d95f74083b20ff1031573d1f3f4e8d50d3637cc9a4b3aaf879660bc68c7b54e68e2843bee464d41e5d593cb4272b1f53065c42b26adffbf02e6da2139a8b3c7dae5a037d893ac83d8f02c060479080e196d96937d655dd7562aa7f30c678219b008c8542d01473d7ce50013ec39d17c45d08152c98025752d384dc236c3d75df33e75a72105c1c4afb35fd42169b10859a46e16db008410ccc6c53c7f4a2ed6d4e467ba93f77465d4145f0259a05b3fce31bc8d610d75fb2a38fb2de96176307f571a1872f2d752c0766f93bc47eb3147c686f3d8867fbbf7ef91e019f4fd14cc8052029b0d70a35e9f49ed8a37e0665a159d7a74a3034094d439f92f14d45020c32f7c1f39c5f50b267839f02ee502b52fbfa7ea8ea8d75be652bb85b3ad3e19d4604e9e7eeb29326004d33e05c5f256bed1ab219e2e52a09ee235690bef27c9c5ff834392666f21f8e3ba30bdc0b5e8cbfb6e2d590c4a668359b67b506d185dac69f6486c69909c8e75b1ee46114e62a679f86a3a33908052492f86da11bb0b3ed09201e215ce21c010416ba8bb922a442c82dbcefd0d5908d0f32eaf42d5a118a340db52d2b38ed69466add735c96abeae9cbfb2bd1f0d8123f2ab8dc050086fc80b06839baef2ce4c3dce08c47cbeae814b705d3de101e833907cf5501aa1bd8f5eb7c05072164e3e69884f0d324a2accc7c13ea30f96770c9eb33efd732a3bfe84ab4539aa6f56f2be289e368c00d695ac27f70ce1a5c95a8db8d5e2db70445a34935a0c1ae304bac86f62d9bdac613ce03c78e54ac2fc4fe70b744b5be6c166ab0c06f64043884491ee32bb700cc10563d274f6f06079b9383d53b61e4adf0b7e213c4b1060d9554cab63257b4e94780341821bf126fd4ade78a4957a31e7e1683eb87c1966141d8ba237d04221d06af63f00a118b5fbe149e91f709578cb7b05158851d6fd860ed56c36be5b4337ac20a6392a28dd35c9a0ce30f0e5d13312db9e06ef39040e950f2b7c0906208ac2918b2bf9c9e73f918301a566b7ba3356a3503121ec9461bc55fa2dfda9bf0fd46a5f3bd01d38dc8abdb4b626e216b2e55fbf36a37723f679653e0f7ecca4e6c86091204164e36b83db209fceb6e41bef079ffe49cc57155c17d5a4072aa1f73733bb1316040974e5d3bc6c77a63dff64d8edad1b44e90bead91fecdaa571843cda4e0f478a157c8174a5c383dc333c3d249c976a0216d9b2a96622566b4e0a87f60cc914a6f7b294daff58a23f4faee316822dab4e522bd089e43d96eb39029302066c0b1db8484a8796915f99082053ad88a66fc31098b61206aad458617339a85e22d2b759563d8a25da4e1c08ac2ef48c10c9c6b653e7b8e7e07f538b4b2b7d16d197708c4d3d1bea3d381544f11cc374a1fa1a89f780fc2bbc3890fce7b532714e3e7bf56554ea053d039fc16250afbc31ee5ef3cd433894ea8090a1c44fa5127c55b1f946e825f2ff60863c6df2cee32dcf333230a951e4e41c8c6566665f65dce04bb48aa6d80c25bfa8e73156eef30b852d5248de6e23ca9ec2d109c6261691bcb2bbf5aa9e171c5f05e16f08e71f87bab7e0073aaa12dc5084b2c8e8651ba9790fcb71666b7f49fec7afa83e1b5019e3f7aab17a033dd9154ea08c8f208f67776e4ba113dcfe30997dad9fad9f09fdac4ea5fcda38b952016c5a0d8425217f96d03ccad1f365bcc81f386cf25be5a9333290aea3e8ee4b559db180b07076a801f0c30132605c7c5ab03b6db36a3592eafd85a9d8df53ba7f5ae5aee75cc316baaf166b406a1b9c52b15b77eccbbac2243c02043ac121c39946d76e83f6e8e759cc94bd6e116885cf51c3b3a0edac02b65abf8f5513a2fc058111feff7efaddf6b673c4b3aaf74a9cd6c0bc09b79087c974ac71e0a0060acf7eb8bc9bb62ac428be09dd05922449adb575b769865cba08e0a8345ae9ad95e904ecaad09a0860eb9e2264e25a49e193359fa1d087646575d02427883b0f86739fbfe7dcf92e671eed6c9085376fb47f534d05647dceaaab617a367b32c8d8d60a01ea79fbaf5187c1ca267080fc3c2e35a8983220bd8c81ada9ef743816bc281629c063fe24f9502ae52589a340908ba54b9497329d21f7531c948a179df26893b2cf70bad641b0a246cf306f71b353887a395c700233d9cb48cc7d4615f0f5b42595204bee8d7a7e933f8e609b70e0a1f305621006b2ae101f7c7555f1e7d95b9def30b7bf447342a7fdab4051da114a722dc173", 0x1000}, {&(0x7f0000002900)="80adf4c0df6730da98be75ee7b06cf02bed9015be5dd09a991e0096c58e718231b8c4d169a7ca4da4e7ac45c7c02b26c022690594de90d1c2571de78b4c7d7941ececbb6c73f656df99b0600356444b02a5bca009561ce2f5bd115d6cf05b39471354afea8020e76505d142b7b0e8b5c665724d4924f28deb77a0ad199836a0867c905d0825d4cc0e0fd91fe4eca379b4d1f105af4811483d8bf68dbb41808f1fadc6028c67c56df2c31dbb52699159042f52f718847376f15325f6e79b78390559f2108eac2731fae96fe5f7ef0990316951ac0e203dd0f2e2117f005f521bf0a2d36287dacf00d9121a375d8b808a3711152dcd1d24c98", 0xf8}, {&(0x7f0000002a00)="59664aaa41f8ec80ddfefad035f6f9598a8589daa30eebed5fdc7bbae2360fab41a83d2a0b05c214c27da9765080ff63ff544041e4b8d9fa5e7e204cf69e011ab2097eb90c2b917ca4fb49ef8e2d2370", 0x50}, {&(0x7f0000002a80)="bd8d08e38276ae11db3c2db5a5bd90bc2db95d9b3b6a079f304de8176ccc00942d729e4e3bdd23f2afc4ec07c79a8836176b049bb20e8228382cca614aa4daf96e082bccac601a64f0816082ce1962b33f07bf75a84c697af4b443c09b62091b36f55d8b6197987bfbaa2c31965883d045770a7870623a611d4171ffac5a1ecb3e455a7b10a10427f0a8c847c81f1c0a72", 0x91}], 0x8, 0x0, 0x0, 0x8010}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000200)=""/156, 0x9c}, {0x0}, {0x0}, {&(0x7f0000000880)=""/4080, 0xff0}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 19.573068344s ago: executing program 1 (id=2663): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) (async) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) (async) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000000000000000000004000000850000005e0000009500000000000000a30b406b5a2bc8900d74868f5f4d1098c19588a23d7ae496951cac6cba4fd5c34449"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7ff, '\x00', 0x0, r0, 0x3, 0x4, 0x2}, 0x50) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7ff, '\x00', 0x0, r0, 0x3, 0x4, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0xfffffffd, 0x7ffe, 0x0, r4, 0xffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x14, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x14, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000400)="141a351e73aabd68a3c7340b4552", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00'], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 19.439079467s ago: executing program 1 (id=2666): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r0, &(0x7f0000000200)="b16f8c5a523aed98b546fd28c411b7ba94d81d9da38538d1c170c3a0510f51511ccd676482fb9f9981c47a29a3dd7a408546b565df4af2b88b519e47bfef5f2f2a6be9d3ad04f24c3ef1638310a1b2a85bb3dc6ba8b1250e5347edb71141d03eab6bff5f9fa6480cb2448e9d07ed68f8af81f17529d0469e0845ec4f469118c6eb1c3715dfa5290cf17676741fe83482a57393a9020bc4e9e87af799cf6260d1fb9ca2d55fd0901f1c14842130c2c99e3a32bc223acc5ce7036083d26d88e81a1e11cb541ee98cd27b2864c5f51e37c53f7a0cf2da0c1de210de235dc1ce16080ad89536c762aaab171074e61783", 0xee) (async) write(r0, &(0x7f0000000200)="b16f8c5a523aed98b546fd28c411b7ba94d81d9da38538d1c170c3a0510f51511ccd676482fb9f9981c47a29a3dd7a408546b565df4af2b88b519e47bfef5f2f2a6be9d3ad04f24c3ef1638310a1b2a85bb3dc6ba8b1250e5347edb71141d03eab6bff5f9fa6480cb2448e9d07ed68f8af81f17529d0469e0845ec4f469118c6eb1c3715dfa5290cf17676741fe83482a57393a9020bc4e9e87af799cf6260d1fb9ca2d55fd0901f1c14842130c2c99e3a32bc223acc5ce7036083d26d88e81a1e11cb541ee98cd27b2864c5f51e37c53f7a0cf2da0c1de210de235dc1ce16080ad89536c762aaab171074e61783", 0xee) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)={r3, r1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'wg1\x00', 0x200}) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) 19.42155343s ago: executing program 2 (id=2667): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket(0x29, 0x3, 0xfffffffd) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x40}}}}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000000000000f000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @dev, @local}, &(0x7f0000000600)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0xb, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @empty}, 0x700, 0x20, 0x1000, 0x101}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0x5d, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000d00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x154, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x4004090) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(r12, &(0x7f0000000540)=[{{&(0x7f0000000000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="c292b91f4ef9620c7581c5e5174f098849c18f2dcf6a89a66579481d2c677a9f565f60c58240a9fb562e91c4a8367d924998db6115b869eb58ae18fdfff96e1ff10766aa17ee4196758c1eed854ccfcf54585441fa3b8d204a36ee52077bb0a7feaae945b9d1b3024c29f6f3ac32c5ad8a86f66b227ef362f8", 0x79}, {&(0x7f0000000140)="4526236c17bcdd2d5eb5e017ebd01f99f58e7a2d20867960aa201aed8436e225bd3079fc2313c96f6527ca8791817c35352291441242003dfc72bcc4fe97ea00575b7bfead12f706b09eda25f8f3753396bc1856c4ea604161800ff29a2774a78577dbf41394bcf6b8754059b665b7c56aa983a5c1aa3af86fcf3dbe45d0519727e2bd98d2bf0db0c8af85dbe99ae089a776a7a326f48becd7e1dbc9de03ae1552263a18a0bbc6f7095e39e78ead76172c9037cb2e5d75f3cdc8a62a79d42e409a70eed1ede47eb4945d99a17a34a6b3481a460622628af014ce7a2f7382f9ad043757c8f54bd13d95a7d74dfead55bb6791ad", 0xf3}, {&(0x7f0000000280)="79ac8c85465dbd0aa392c292c6ed683e76824c7542d4b03aa47d47abebfa5798174fe836a50d972248f05be837c18bcff0978154a235371cc1c0b255fe321c8b16bc749a5483f987e8a9d69db1c8e00c68342f06f367fd1cd2fd06acbef4988064a77179382af1c38bd34bec772bf825e6b925cc8c8d4bd44b0122587a08d07640727d24cd23e110e6", 0xfffffffffffffce8}, {&(0x7f0000000340)="0d961424a18e5ff9774ad5ba67769fec1a53a39982bfa7d63bae8d3278505f4889ef5e406581ac9a244565d600e2d352a67e8042f8f11d692d7809601571781e663d2df59568d7b2514d75eb0dcfb2d00807bc21560b4e804bcccb376da700cd940998dc81d8ea77dbf0b1386811fc0ebf", 0x71}, {&(0x7f0000000400)="79a0a71e4d3dc647cb8122e13004b5124ffcec36809d8b4ecf4cc83f241086449f8b3bb6619b82c937a376b6cadd02bd422e3e2acc1b9ab514ce3c2bb78c19e011ead30e74ed6c256fc83c62fcfcdc06d1d08d289ca0adef7a95db9c4a3b4ed6788ab22269ecf9751017232919d5b076aec25c519123fa115c8161c51997b1718591da40b9", 0x85}], 0x6}}], 0x1, 0x4004010) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 19.336652596s ago: executing program 0 (id=2668): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x26020480) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x1, 0x4, 0x0, @loopback, @empty}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f0000000100)) unshare(0x6010100) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) getsockopt$llc_int(r4, 0x10c, 0x9, &(0x7f00000004c0), &(0x7f0000000080)=0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db7295", 0xa}], 0x2}, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000001f80)={&(0x7f00000018c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x4004894}, 0x0) socket(0xa, 0x3, 0xff) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) close(0x4) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@loopback}, &(0x7f0000000280)=0xffffffffffffff2c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r7, 0x101, 0x8, 0x10000}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x14, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRESDEC=r6, @ANYRESOCT=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) 19.259374019s ago: executing program 1 (id=2669): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x40000001}]}}]}, 0x48}}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x7d, &(0x7f0000000480)={0x0, 0x2}, 0x8) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x2, 0x6, 0xae2}) 19.046400668s ago: executing program 2 (id=2671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x2c, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xffffffffffffffb6, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x50, 0x1412, 0x100, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000840) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0x1d, 0x65, 0x0, 0xd, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}}, "3297e3ba0fa8a2e71b"}}, 0x2b) 19.007938756s ago: executing program 1 (id=2672): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400051, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x5, &(0x7f0000000940)=ANY=[@ANYRESHEX=r0, @ANYBLOB="0ae8b1d49fa5faecfe37da2265db267869f6e1f3dc009e7a360fad7e2ae693b5cf237ebf63b9f9a0b668f7c33ffe2de294e809b00abbc78f96c988a2b31f", @ANYRES32=r0], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0xf, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="fa82", 0xfdef}], 0x1}, 0x20000000) r7 = socket$inet(0x2, 0x5, 0x2) recvfrom(r4, &(0x7f0000000280)=""/91, 0x5b, 0x10060, &(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e23, @local}, 0x0, 0x2, 0x0, 0x2}}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES64=r1, @ANYBLOB="96d3ee306f5071afec9abf603b58fff03db7b609632516791ed57d54f92624a1cbbad87ece7c600c65ae5076a9f343c3911644782f28a812932b58b3dcecc6c5f2c6c3e0828bff93e7c94f4d9dd7a2cf8faa1ca9b4e0f638a0b47351f0af1cea1a27825a5096830f8f158a382b0bc4f98e69863fc1aef330e0b65fbc8923bac30abb2476ce3a9b6e299b1ba4cbb7a546"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r6, r8}, 0xc) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10}, &(0x7f00000000c0)=0x700, 0x0}, 0x20) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}, 0x4}}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000100)}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000840)=[@in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="e424467f02f61fe6f400439305948a5b7f5c904b872ff8af8743df5cc1eab5e8de881f737b01cae8ac063b8d0fbd7397733f8e500600bdc2ec16f568ffaf1b140620cba1"], 0x20}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000040) r12 = socket(0x23, 0x0, 0x0) r13 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)="9ff8a5bf051f9353482ff5e191628c5a2da3f8dc987390904ef7b386210c65cf711d8e73d565b720eca26d772fee50067c1ad468be9788ac48ef639e4c3e6671e8ade4577a19dec66f97c4a11012a764b738f0701e4843a67a11fc40dc3a", 0x0, 0x5, r13}, 0x38) r14 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r14, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000000), 0x12) sendfile(r14, r15, 0x0, 0xffffffff000) recvmmsg(r14, &(0x7f0000000640)=[{{0x0, 0xfffffffffffffd7a, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) 18.680722716s ago: executing program 2 (id=2675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9ecd}]}, @TIPC_NLA_BEARER={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4800) r2 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000240)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000300)={{r2}, r3, 0x2, @inherit={0x48, &(0x7f0000000280)={0x0, 0x0, 0x7, 0xffffffff00000001, {0x1, 0x0, 0x200, 0x9, 0x80000001}}}, @name="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"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x54, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xaf8}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0xffffff98}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000001640)={{r0, &(0x7f0000001440)='\'!%{#}!,:\x00', 0x600a41, &(0x7f0000001480)={@_ha_fsid={[0x7, 0x1]}, {0x7ff, 0x6, 0x2, 0x8}}, 0x8000, &(0x7f00000014c0)={@_ha_fsid}, &(0x7f0000001500)=0x3}, {[0x6, 0x6, 0x6c8, 0x8]}, 0x8, 0xf5, &(0x7f0000001540)=""/245}) recvmsg$qrtr(r5, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000016c0)=""/78, 0x4e}, {&(0x7f0000001740)=""/252, 0xfc}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/165, 0xa5}], 0x4, &(0x7f0000002940)=[{0x18, 0x0, 0x0, ""/2}, {0x1010, 0x0, 0x0, ""/4096}, {0x88, 0x0, 0x0, ""/119}, {0xb8, 0x0, 0x0, ""/161}, {0xb0, 0x0, 0x0, ""/158}, {0xb8, 0x0, 0x0, ""/167}], 0x12d0, 0x20}, 0x38, 0x12020) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000003d40)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x18, 0x140c, 0x20, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$AUDIT_GET(r5, &(0x7f0000003e40)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003e00)={&(0x7f0000003dc0)={0x10, 0x3e8, 0x324, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) sendto$unix(r5, &(0x7f0000003e80)="adeddb6483018deadf34abb3b6e602085441a10e1f1bb6d341d6318ca7280dad4e1c905ffe42bf0dfe2cf7db8519821a6a051315e4523900c4d240a60cd056022aeaa595b7ba3d0aaaef137f1e0756c72589275f28c27ff60a4e4d278912cb1bbc578397f3c284880f070b4cb9514c0bfdba2931f0e82c194388e3b950b305062e59823217c7a494", 0x88, 0x40000, &(0x7f0000003f40)=@file={0x1, './file0\x00'}, 0x6e) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000004040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000004140)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004100)={&(0x7f0000004080)={0x60, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x63}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000000) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000004180), &(0x7f00000041c0)=0x14) close(r6) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000004240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000004380)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004340)={&(0x7f0000004280)={0x84, r10, 0xe873570e8d72daa1, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x84}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000043c0)) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000004440), r9) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000004500)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000044c0)={&(0x7f0000004480)={0x1c, r11, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004600)={'bond0\x00', 0x0}) sendto$packet(r5, &(0x7f0000004540)="29a1973235499734546c70d3f34892f39da39139b55f542cd201bc1c76d55cc28f7e329172e66bbdb5ccecb97362f8c773208a0eaa35d39275a85f5d6f75e107f7661b7d912410a9b4e7f714b224f650786d508896e4211706edba9c0c3ec9389e7aec33ad890f66f475ac0a6dba8cdee0e5d42afe36cbf2b4214a7d7949a3d67f707b60267fab2e51b46856dd71d2", 0x8f, 0x800c, &(0x7f0000004640)={0x11, 0x10, r12, 0x1, 0x7, 0x6, @link_local}, 0x14) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000004680)=""/173, &(0x7f0000004740)=0xad) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000004780)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000047c0), r9) 18.547610388s ago: executing program 4 (id=2678): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, 0x0, 0x4c000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, 0x0) bind$netlink(r2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0xcb}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35e}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x43}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 18.325050458s ago: executing program 0 (id=2679): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)=""/4102, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x20048804) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x8, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd002}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeff9}, 0x94) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000000000008000100080000000c00018008000100050000002d0002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 18.311449025s ago: executing program 4 (id=2680): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x4}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000140), 0x4) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'batadv_slave_1\x00', 0x1000}) (async, rerun: 64) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) (async) r4 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="8f80b330fcce000000000000000000", 0xf}, {&(0x7f0000000300)="2c74a0adb4086cdd703b7b1423d8c792fd5ac1516e982ee58b", 0x19}, {&(0x7f0000000340)="3d0b0be5f2ba68bde36385e13a7853240fa6825bc04dae4e193fbf66a87f387868579b6fed8b46b19c2c49ca5b6b56a212845671b229a6eafac869b26faae08555eb327c8f9a25ad56ef2fe1d966123575f176bf167123db07afc8498d7a1fca8219bedfcc882a7e85d522f429abbc4373c78c", 0x73}, {&(0x7f0000000400)="9d276bae043cb726e50aaa455697c4b365e9ed2ce48261ac9881437f498b4c06973ce31d9b0c56553bbba2ca067a55737730257431ceef4b3955d81ca6089b5eb14c745fc43d96ec8e742e83ac464e6deb1d8649ba", 0x55}, {&(0x7f0000000700)="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", 0x196}], 0x5, 0x0, 0x0, 0x400c5}], 0x1, 0x2004c000) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x20004006}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e23, 0xffffffff}}, 0x10) bind$tipc(r0, 0x0, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4008054) (async, rerun: 32) r6 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) recvmmsg(r6, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0xfffff453}], 0x1, 0x10120, 0x0) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20048845) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x776}, 0x50) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 17.998020425s ago: executing program 1 (id=2681): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000440)='+).]\\&\xbf{{&/-)&\x00', 0x200880, &(0x7f0000000580)={@_ha_fsid={[0x9, 0x1]}, {0xff, 0x9, 0x10, 0x8}}, 0x6cdc, &(0x7f00000005c0), &(0x7f0000000600)=0x79a}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000053be083850000002d000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x4000000) bind$can_raw(r0, &(0x7f0000000280)={0x1d, r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x0, 0x10, 0x18, &(0x7f0000000100)="5ae02e16b87f441a80446af0d1d905c7", &(0x7f0000000040)=""/24, 0x0, 0x0, 0x0, 0x45, &(0x7f0000000000), &(0x7f0000000180)="8f95cb3936b8b5976e166a2dc381448b31bd42357201edc2fa33af20a12c0f5a1c0d0fe9f83ce44bdf3e3f2c04869d0acb8dafe8710733210305aa31bb4fec49b4280f91ff"}, 0x50) socketpair(0x5, 0xdfb4e565ad806259, 0x0, &(0x7f0000000140)={0x0, 0x0}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x18, &(0x7f0000000300)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000000), &(0x7f0000000300)=r9}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r13, r11, 0x25, 0x8, @val=@tcx={@void, @value=r10}}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) close(0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r13, r11, 0x25, 0x0, @val=@target_btf_id=r12}, 0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r12, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x2350, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 17.938922566s ago: executing program 4 (id=2682): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x2, 0x1) write$bt_hci(r2, &(0x7f0000000100)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x1, 0x8, 0x7f, 0x66, "3e4d1c85cfdcf2561e4118ead5218f2ec2763ac8818029b83d89619c7f0723"}}}, 0x27) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x2b, @loopback, 0x4e21, 0x2, 'dh\x00', 0x20, 0xf8e, 0x55}, 0x2c) r3 = socket(0xa, 0x3, 0x87) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@local, 0x18, r5}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x12}, 0x28, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1d0000000a0a01fbffffff00350000000a003c8d"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 17.712378655s ago: executing program 0 (id=2683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x24048825) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) socket$netlink(0x10, 0x3, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 17.604269742s ago: executing program 4 (id=2684): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x891f, &(0x7f0000000000)={'bond0\x00', @ifru_data=&(0x7f0000000040)="5b339218e9575f2715aa7be100d6870c1b429ce3c814086df28537ca56965799"}) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$sock_ifreq(r0, 0x891f, &(0x7f0000000000)={'bond0\x00', @ifru_data=&(0x7f0000000040)="5b339218e9575f2715aa7be100d6870c1b429ce3c814086df28537ca56965799"}) (async) 17.45800571s ago: executing program 4 (id=2685): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000010000400000000fcdbdf250000000000", @ANYRES32=r0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x80) 17.443313615s ago: executing program 1 (id=2686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x8cff}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x74}]}]}, 0x64}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x0, @broadcast}, 0xfffffffffffffff4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x44, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x8}, {0xfff9, 0xfff3}, {0x7, 0xa}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x7e1}, {0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc015}, 0x20000814) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000480006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989080004"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010014000000000000028c00000008000300", @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r10 = accept4$alg(r9, 0x0, 0x0, 0x0) read$alg(r10, &(0x7f00000012c0)=""/4109, 0x100d) sendmsg$alg(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="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", 0x1ab}, {&(0x7f0000003240)="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", 0xe62}], 0x2, 0x0, 0x0, 0x48801}, 0x4008011) r11 = socket$kcm(0x2, 0x2, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r13, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40004) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r16}, 0xc) close(0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000280)={r6, &(0x7f0000000080)='nl80211\x00', 0x0, &(0x7f0000000140)={@_ha_fsid={[0x46, 0x7]}, {0x3ff, 0x4, 0x4ec, 0x81}}, 0x55, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x80000000}) 17.286162109s ago: executing program 4 (id=2688): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x200, @mcast2, 0x9}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r3, 0x1) write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12) sendfile(r2, r1, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaadad1e048716e08004500001c030000000011907800002000089078747887715f5a170000d5ae0ffdd88d873f3f189a86f3ab513d811789e5e44d91f4499013f9786b06c127fab39b7215fe76a33b49f6b15411563a2189d21a942fb72f328215b399e2563b0c33f29c7e2a067ee952e4639ff585adda53d27fc7778fc1b5f01c9d392e3111a1464db2338543abd1000000000000000000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000"], 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022bbd7000fbdbdf255c00000008000300", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4008040) 16.78189864s ago: executing program 3 (id=2690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000000140)={'syzkaller0\x00', @random='\x00\a\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close(r1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) close(r2) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close(r3) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000000140)={'syzkaller0\x00', @random='\x00\a\x00'}) (async) 16.690007633s ago: executing program 0 (id=2691): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x6, &(0x7f0000000240)={0x17, {{0x29, 0x0, 0x43000000, @private1, 0x6}}, {{0xa, 0x0, 0x4, @empty}}}, 0x108) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x6, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff000000}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @private=0xa010101}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0xff, 0x1d7b96eb5fec8c1, 0xff, 0x0, 0xff]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x24004040) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000100)="1e7b5ad3d898e9e5f2ef84f0b7d1d017b2349e344c9ca281303aec6dc40e310625fdc4348c0e22ed20c936", 0x2b) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r6, &(0x7f0000000000)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x2, 0x80) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x34}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYRESOCT=r8], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000094850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r11], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r6, r13, 0x0, 0x20000f2) 16.684061944s ago: executing program 3 (id=2692): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket(0x2, 0x3, 0x81) setsockopt(r1, 0xff, 0x1, 0x0, 0x26) close(0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x1000002, @empty, 0x19}}, 0x7, 0x8000}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e21, 0x7, @remote, 0x9}, 0x1c) 16.485901178s ago: executing program 0 (id=2693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c000100299c7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000000)={&(0x7f0000002780)={0x14, 0x2f, 0x9, 0x70bd2b, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x42884}, 0x10) 16.399262508s ago: executing program 0 (id=2694): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="840100001a000100feffffff00010000961e01010000000000000000c0ebb85d843a9da4000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/316], 0x184}}, 0x20000844) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000005c0)={r0, &(0x7f0000000400)='+]\x00', 0x18200, &(0x7f0000000480)={@_ha_fsid={[0x353]}, {0x2, 0x3, 0x9, 0x81}}, 0x3b88, &(0x7f00000004c0), &(0x7f0000000540)=0x8001}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYRES64=0x0], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f4305f0671271e31c2f8d", 0x1a}, {&(0x7f0000000240)="d26319afcf07e69edb08", 0xa}, {&(0x7f0000000300)="d9a0f0481ae7", 0x6}], 0x3) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x1c, r6, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r6, 0x910, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4a}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131f}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xadc}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5c6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1277}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x87c}]}, 0x70}}, 0x64044080) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x36, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860186dd8a2cd3818eeedc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee363e02c019d905b4f1d7", 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0xd8, &(0x7f0000000300)=""/216}, 0x94) 15.801550428s ago: executing program 3 (id=2695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001e0001060058669742fc7c6d800000000000000000000809"], 0x1c}], 0x1, 0x0, 0x0, 0x4000805}, 0x400008c) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x2, @mcast1, 0xb1}}, 0x24) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) accept$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @multicast2}, &(0x7f0000000500)=0x10) (async) accept$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @multicast2}, &(0x7f0000000500)=0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x14000851}, 0x20040040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) socket$inet6(0xa, 0x1, 0x0) (async) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) listen(r7, 0xb) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x4c, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1a}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44040015}, 0x40000) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x4c, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1a}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44040015}, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000088a80000810000020800450000a0000040000011907864010101e0000001831b5dac1414aaffffffffe0000002e0000002640101010a010100866200000003050d520a67b76acee48cafd808050eebc45a097ae176e080fcf0c80702070ba626dfe971375c7eda050ea3b20642a7c2d69872b07c660612b328a602444d54eb8fee516a516e43c20603ca0108e07ab41ddbc3070525279701040daf000000000017c1000c907821040001"], 0xb6) 15.629970751s ago: executing program 3 (id=2696): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='C', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001a80)="a6", 0x1}], 0x1, &(0x7f0000002e80)=[{0xc, 0x1, 0x2}], 0xc}}], 0x2, 0x4000045) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000b00)="58de7512fb13") ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000100)={0x9, 0x7ff, 0x1}) 15.622227042s ago: executing program 3 (id=2697): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000005600000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b7030000feffffff850000005300000095"], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r9 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r12, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r13}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x30}], 0x1}, 0x0) r14 = getgid() sendmmsg$unix(r11, &(0x7f0000001cc0)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000140)="130d1bede4cb23dffd27d942ea95be20b60642e19ca70d205a7a54e3e9b33361a3c25428380dab04e5c127adf282c875b547df1631fd99edca7985b91b20ecfdb48c5c95d7dc5a0ca4c5a5feead11937804a4359302e3823ef0b901e1b4b9e8f522e65f9cea5c4483d4f4a8c869df59ae69b576cb7c085b2b12374a64ea2d7990623a5a67a77b666a1d8e189f487d80d4cf4ff905c442edad1e375115e3a0a9602e51d", 0xa3}, {&(0x7f00000002c0)="f5e01a1c2319274b72abd8f8503b81e957025a37015d650dfeb1ac596cf9fd6d12c2bf395b4d9884728707c333d736de8490e65840fcb82d26ac287d805e9c7936439546ecd9e077e6e7ab9645bca8090678372350f58acd3f6c2172dedce980f5ab85578394f7eb10782d76562d8b55771846a2c0b74a42e452673e3599c40f0d6ff8", 0x83}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)="19e961498757cd76e90896dca8f2bef558e96f12c6fecef9c80843d1f80d999de725368c22172a1da95a39754f15e206a0a30f", 0x33}, {&(0x7f0000001a40)="ef34909d4ae7b4bafb644a76ca6016a25c246b68f3fd7318ae0c3d0cb2ada158aa64c260131a0a6d16e5d7de6d4fc249c6ccf829ad4bf7f8d3555659697806f7fff7543c7f871f070c7feb76251e8f16cf973c917e107f473f1c34cbfc94b589c715c32fcdd3c1b4cbb19bf49bd9fa1465e0c4c89b929a2b1889662c1234ffd9f100755f8afbf09b509401bf6a51a595626e3f02fe48306bdf40c0846dfc30ed2b63fd0f40bcaa1bf979b75cdf501512a22499b35bebc2ee7d58c302fabb302e", 0xc0}, {&(0x7f0000001b00)="8ea7cb96f38474caa5e14661b000000000125c40497e665ff8c1d4431e222bcab7a4f365285e8fc782e7fb8599c75d65c264662d968e97d9a55b5e6bdc73b3ac686ba8f773e0", 0x46}], 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r8, @ANYRES32=r11, @ANYRES32=r9, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r8, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r11, @ANYBLOB="0000000094de9685f0f0c5fda8b02c29ac427c7a75ac51559f691af19d3c56364a6751500ff834dd96f911a75f0fc07cf8cf3d"], 0xa8, 0x200080c0}}], 0x1, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r15}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r15, 0x0, &(0x7f0000000180)=""/177}, 0x20) 15.569750693s ago: executing program 3 (id=2698): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x87) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004084) 3.053376022s ago: executing program 32 (id=2675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9ecd}]}, @TIPC_NLA_BEARER={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4800) r2 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000240)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000300)={{r2}, r3, 0x2, @inherit={0x48, &(0x7f0000000280)={0x0, 0x0, 0x7, 0xffffffff00000001, {0x1, 0x0, 0x200, 0x9, 0x80000001}}}, @name="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"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x54, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xaf8}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0xffffff98}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000001640)={{r0, &(0x7f0000001440)='\'!%{#}!,:\x00', 0x600a41, &(0x7f0000001480)={@_ha_fsid={[0x7, 0x1]}, {0x7ff, 0x6, 0x2, 0x8}}, 0x8000, &(0x7f00000014c0)={@_ha_fsid}, &(0x7f0000001500)=0x3}, {[0x6, 0x6, 0x6c8, 0x8]}, 0x8, 0xf5, &(0x7f0000001540)=""/245}) recvmsg$qrtr(r5, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000016c0)=""/78, 0x4e}, {&(0x7f0000001740)=""/252, 0xfc}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/165, 0xa5}], 0x4, &(0x7f0000002940)=[{0x18, 0x0, 0x0, ""/2}, {0x1010, 0x0, 0x0, ""/4096}, {0x88, 0x0, 0x0, ""/119}, {0xb8, 0x0, 0x0, ""/161}, {0xb0, 0x0, 0x0, ""/158}, {0xb8, 0x0, 0x0, ""/167}], 0x12d0, 0x20}, 0x38, 0x12020) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000003d40)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x18, 0x140c, 0x20, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$AUDIT_GET(r5, &(0x7f0000003e40)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003e00)={&(0x7f0000003dc0)={0x10, 0x3e8, 0x324, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) sendto$unix(r5, &(0x7f0000003e80)="adeddb6483018deadf34abb3b6e602085441a10e1f1bb6d341d6318ca7280dad4e1c905ffe42bf0dfe2cf7db8519821a6a051315e4523900c4d240a60cd056022aeaa595b7ba3d0aaaef137f1e0756c72589275f28c27ff60a4e4d278912cb1bbc578397f3c284880f070b4cb9514c0bfdba2931f0e82c194388e3b950b305062e59823217c7a494", 0x88, 0x40000, &(0x7f0000003f40)=@file={0x1, './file0\x00'}, 0x6e) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000004040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000004140)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004100)={&(0x7f0000004080)={0x60, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x63}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000000) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000004180), &(0x7f00000041c0)=0x14) close(r6) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000004240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000004380)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004340)={&(0x7f0000004280)={0x84, r10, 0xe873570e8d72daa1, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x84}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000043c0)) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000004440), r9) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000004500)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000044c0)={&(0x7f0000004480)={0x1c, r11, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004600)={'bond0\x00', 0x0}) sendto$packet(r5, &(0x7f0000004540)="29a1973235499734546c70d3f34892f39da39139b55f542cd201bc1c76d55cc28f7e329172e66bbdb5ccecb97362f8c773208a0eaa35d39275a85f5d6f75e107f7661b7d912410a9b4e7f714b224f650786d508896e4211706edba9c0c3ec9389e7aec33ad890f66f475ac0a6dba8cdee0e5d42afe36cbf2b4214a7d7949a3d67f707b60267fab2e51b46856dd71d2", 0x8f, 0x800c, &(0x7f0000004640)={0x11, 0x10, r12, 0x1, 0x7, 0x6, @link_local}, 0x14) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000004680)=""/173, &(0x7f0000004740)=0xad) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000004780)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000047c0), r9) 2.02476758s ago: executing program 33 (id=2686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x8cff}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x74}]}]}, 0x64}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x0, @broadcast}, 0xfffffffffffffff4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x44, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x8}, {0xfff9, 0xfff3}, {0x7, 0xa}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x7e1}, {0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc015}, 0x20000814) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000480006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989080004"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010014000000000000028c00000008000300", @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r10 = accept4$alg(r9, 0x0, 0x0, 0x0) read$alg(r10, &(0x7f00000012c0)=""/4109, 0x100d) sendmsg$alg(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="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", 0x1ab}, {&(0x7f0000003240)="efc738a16cc28c4946440ccbad4a5f1d56d06c415fd74d3f7ae7fede9df25861ac370f6d867d6672f8e7024df494ac35bd04b35f68b11663b146746ef3f58b12cfd7cd648c12a75f123d9cf5f9c10bcb48f942b34db9fbddcea5e0c3999da708bc472cd687c8f27748d1839e219628ad9687678201b445a59e0da96ecd38c0ce8bca1acbc78f9a3335e5db0eb0cd454006b4e3a5988e038b05322dad026df32c378b20fd7546061205020d105c5115d2893e413b8b80e36946d011863b5a21472f1bd0d48b0c58211aff50a91e31112d632b56886d75ee84f49ffe015e33237150d3a3c4d871d348fa8e16f94c9e9d1e08d37c8b58f05f1a7c7133aae433f4564b8120d926c8ed8945d774620ec50deb1b3de7e66655d52f397f1811a024d870a4be151a15908b871992af52db41a28cb43633e1f9727e5373e318da8155d3e00b5b5eb28da52e8d364ec5de7614d8fd52401a6367e32464752d7379aaee4b08445ab9ca96663e47584d7470acf0312c545ffcee66d1903bc965caf4d66faf0c8e82ce4bd9c769d3440aca255e97c95a9810f33244d3963ec5610d0dcf62394ba8241351909acab1c154d1796ab44f683a08b307cc1905573642f6b2ef46e764d7f6d692de0fdefe6363a586f50d385e14b5b4209fd4efd93668ef020eaa8e3a70e6511438f81a2e6236b90628ac919ba9eeb04a9fd736a2681489427fa2fbd7f9fe559db1070fe3876e3217626fa811af2b2e3efb3587b19460f885c277e81a94277bbd3f19d4427538a4d93185e6647c4b8ffba034fe43e288dbb2eaf46299255aa246eb720a58224fc8490ed19cc40edd59552ec36b4645edc4e72e4c0ec8c48be18626f32c6aa982f821c40a0ba2d9b19c18a2e3a6b82e562c11620551de6364cc836ccd438823cbb2be8883a46d1141e136fdef2b1b19b879bd1be9a9993265758044ec33a87c625607ceda2e8245ebd7610b8c779957a1186a1611bd0caf66de3bcfbe904e28bae0174818f47eec3e79d74624b57d0b0dd173bfb5dbc4292e817bb03a0725bf11769fcf53ea95ef538be9a33c841f618fe4bc731cd8c826caec2691aee93ca57624e693947484163b3ae01d947155b499f56d7283b7d82c8000ba4a5457a1b1e40a17b7d4a54b45ebb0e8322e9dc9e2743a030c54f637381f10676d747cf8d1f982285187126b6da1e6fb374a8d87c956f9ad7c0328e8452fb6801e1c4db11dba4fd3ac3c382a05ab7148dcfb2266eac19399469c7aaf60eecbb1a92d6abf4bdda90752059106149645c6f5ea20b66c3ca634145c64b0c86ff46edc2b7d6269df97efd2f3e6fcda4cc9dc636951a9d6f0dc01f51ae273dcfeb66ec749d3cfe7cb11c45a473e126cab55450c5ffa59b3f3afb686f8258200bb8a529faff7f988d632300b890f73d51c60c64f4679cd86cc1f4602089f93ba03a51c846eed467432084f71c38413d0d9d1b83f9605207e9b28142d7bf94c7aedcd19f0fc93d4b95a1fea7babe2cb8de1a1a08f3a2d8d0aa1e718c1460e15329700e9e14c5cffff9c7a62b09df0a025e96ab03fa316e50d5b3b01ca4c5e0c6ac23f9703462e14f5fb6d5c1c2514d714746db1b5a5cee1111640114a9556cc518168b161b13e989e8f9ac51e2c01f7fbefea6ce6a8714c47279093fbb59fb760b7dd3138004343063485b506b120728d22c422324871c34f2dc7c53ce0bbab87bcd3efcf8fd4fa2bce12a10b00bdbb24791758516d02012613dd74caac26a176392ec11250e81d2566b2373a2b6536c3e2f28742cbca11b201934d19b42241d94a9da5b282eff530ddd3ed20318be47e9264b0a8fb0745e78c9c1f612ed03479ae14a176cfe52edb5eb2712c21fae58bf4c4143da57a9ee28acede9f56700bfa0f5c51da975fec9f8141b76cacdbfe69be80a325666cbd8fe458ed7f8965166b120ffb5e28dfbb5b3141cf963fd07548a4a35d2c749ce3adea69e0e0d4fd4158142fb7050d477fc51b2ef7e6f0e09cb8016a9bdfff7a200cd992a71a156339160b5757e163a14246c94fe11a0e210c5946b3147bc6870c9900e102b82e9a66a243a2e23e7ff98f7d9f017301740ac157f804afebf2f5bebbbf68583d86b01daaf02bc086bc2c4ddecf1a30795cb23a37bcff24ac3307545acc9bc7949edb2ea5b851ceb3bf2d34f049f1664100b0fc8ea326000e032bc5e50cdec80803a468e334002cfa7ccbef11f951f7679f403ce0cff42101702999218a15396952a3faa0154764c4359f037414bad967afca45285bd5ab985364e6b8bec744c00b3f95010eda041112ace0f09833c9b1049c36f03cca4e9264485d5784466e4b908b4b6216bd935abf49553dcdd4e48bc39f8b22f9b4bef1339b5121ad34ef3df4051333b8ea4ce83cff7abc863c43440ab6892281bc96fbf848ae9e82cb1a2d791b8bcf98ddb65baada7c08075dee27cd06aedb0ff458880d600ba5bdb14c0858415c43c0aa6660298a944d568487853e7dac0c955d1268f70874756f6316e6181313f215ed3724ef760d89df82a178b51169506ada831725827c62b80f2e47fdac38b86192f68fe2fe5794f7adeac9c5bfc9e1fa8d5199fd7df202ee6e1ba38d40b7750f900771ea8e4f00d4c25065cf8867dc929c892f8e4652040862d48e8af1a48fc500882e874995c48cace7754bf0be2765be83001958946c8cb794f8813816e505de401d789223bc0af5739045751640272afb39d45d2be00cac743bfbce9a9a7f4b8f55511f3ad26264a09c19f26ed1b45b0fb254f98e5e1473bbccaa21219b327d1bbedab4a4dfdf516259feef632f72f5092bf78d886772e73ed2250f5ec20ac6fa66cf8c2626d3b5973ce9f4f95ead5c8a65db49966de0fd9e9ce97894b764ec3f75093a4f3ec4507e2507256c59a52969fdabfc100e6ae23acf121bb3acf34d190211b4001b632b10a252be0430bd107ee884a0ba16fc50eb717ae36aba0dbb130dc64b5cc21d1fe87856c8787474333c3a793fe81c9b9b56ee41fd2e1f2d6150495dc3379bf66fa4d53f868047b6c50f8c5a4c2ea2a355b5eb1ab3d3f32791b9ffcb08698dbe841f3338be19e5d927dfb14711b4aed2435fc53340162c878bee30d9d7d2409be614240540f7f5702be3e2ba38d8f999a624acdcaef37dabb86d225f35e92691de25bf68e0115e6680107f07380b28254e9df2e54a5179ed064fc9744dcb553b56720171b0325876c9b82d0120add35ac3f38b41fc28b149f944c66555051ca92341a953739a1674fae837bdb8d8d10adf7ef74092f505375c8414d82805176b680908d5c0f6c2a14bd526631c5abeccaf3469e3ae01c4db2371a77219ee109a83d62aef26efff181f240a163bc0cb253405018b69ba8d62ac582cb186c8c89e3c140bffaa4d99fab17975ccd925efab24b6a181773fe1daac55f18ab1e0264f8d1f7aabe395ce80792bb77cbd0b58fcd928ad74f0342876e098c93f9611887022a92e4d9b1da9c911bb7d762bdcdba36f749e16aad0bcf6f8596b2b50fc65a6811b709d9ad6593c2eb9867af3a276de26d6a6f87ec5173ca79e88122bf5151e98dee268fc8a79a4e83f2427a02ed702b0926ecf0b4bb1a3051f0a4d3cf31038fb600c7eb0cedc0d59ac99bff3b31a9065efecca740fcd948fb9c2eb6197b8226c397de7a4c268fa41877ca1618f77ffa93b2e17348301899bb1a5b389422d7364eb1e5ddd0daf2065894cf10886ce0d3920c0a283de54ec57942d456579851ca3590c26f8c360b7cbaa0328c29532aad80b2627b25641e613b38a2accf5881bbbc7086085a8fcf25895da9244c7dd773bff995e159ea3899487f202d97f2977e4527f75ec64a85cb21b120828b2ac24c711ea2b7cba4b0a195a1840aec7d34a4745b42596f186820584b4b75af29fba5b6d3623718efeebf52e848fe48160fbfd5a0f6511649e3e1c58e599c6d9c7597e5e12227e281204921819fbf9e0c9bd16d598aec601bbdc87e8d94225368cb65da83cbb722d79957a7c0bcea91a45f9b52558ccdcd2754da40fc0fbf78abd06c05f1fc7381eb06e4a0afcca6db7cace72aaacdf498cf9ca42c9b3c6615d9df167ef2d1b868e56a9652beea2f72530f24fe373333d9a524ed48e52e51d3784649a9b9a9f1cfdfabd3cdf832b2dda019bb4e1e1e71e75f88cbc3a16a6848ac2385024abb76249841f630008f3805462604d65eebf4e14b6c2ad9f9e2dc2a5a55d7ce5dde8307ac655b4dfcc99d0f050e838d310957915b4fc838f26f2659d72f801e8c62c6477cc33d7f60e659881422ddad61819b93f0f7817acab429b3c7d3923abce00993ada7fd7e5987cab4f4aea02acabad3f27f223c0108f44d8d5833932b4eb427f83f7b336f214293f8adc0ed2cd45d792cc69a84e01f6fe7020f96cd05c1dd792f30f1dec2c21ecf00ca956e4a2c71b52b1c298ae6e319cf845b97b60e07ab82afa30ffe94c16efb971959951746edde9639bb055feebe25611b595e23cade8420a2ee207977ab47dd559f09d17823e6184f83c44b881e4baa5d9abd6e2f8156a1fff943e61eea0e9b2fe26236e8288c5116ae9a8b0f110794f629c800d08729ea2000d56dbe404a747c149b7890bd6ac91319200b7078e2e039a29f45ffac30000fbc8b00db9f2e8eeb92ebf0a494bd4616925c9b289522c76f87d2c73342db85cc9a3ff09ae84c2c4b3618ba220bb6442968d9ae9eec02e577412fbedd827678a320b7dd8503d0bab20ca7fe7d982330506fc38eaaa6f1cde45377b08f0b66590b75fd6d390da80d01bf6c6dfc12f3b31312b75d1c6e8c6b86527b4f7c5464465b655b1c76a2b7dc202cf50f88f41bae5d7b8e8c38f3b254628f2418e2fe00b63f8162c60cd95fc9b0b6bba3a0989bbb858d2f1c892713e3bdc1a50bddfbb5c11f242464183ee9b85734b5683c242a264ea415df1284ffd87a36516518a09171cbad0149753e836aa41b27ff441460cf0f0d59ca9c1023b2bac5be5512827d4a64e6d7283e335682f9f4e0ad5471839e447b803c6b43d7daa2709536bc2ab955880cd25d1a50aa78fd646e31b3382426e1e77429d37712968223046698b51362b974a6c6782bfb17f40ade50c82523c1c87b59ba4cab6db7ea321b345133ef90039ddf3465043f05e0c1f0d9322aaf67408cf0c81162c17fd0a3fa195df5b6916b008", 0xe62}], 0x2, 0x0, 0x0, 0x48801}, 0x4008011) r11 = socket$kcm(0x2, 0x2, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r13, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40004) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r16}, 0xc) close(0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000280)={r6, &(0x7f0000000080)='nl80211\x00', 0x0, &(0x7f0000000140)={@_ha_fsid={[0x46, 0x7]}, {0x3ff, 0x4, 0x4ec, 0x81}}, 0x55, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x80000000}) 1.982121029s ago: executing program 34 (id=2688): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x200, @mcast2, 0x9}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r3, 0x1) write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12) sendfile(r2, r1, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaadad1e048716e08004500001c030000000011907800002000089078747887715f5a170000d5ae0ffdd88d873f3f189a86f3ab513d811789e5e44d91f4499013f9786b06c127fab39b7215fe76a33b49f6b15411563a2189d21a942fb72f328215b399e2563b0c33f29c7e2a067ee952e4639ff585adda53d27fc7778fc1b5f01c9d392e3111a1464db2338543abd1000000000000000000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000"], 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022bbd7000fbdbdf255c00000008000300", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4008040) 1.030535888s ago: executing program 35 (id=2694): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="840100001a000100feffffff00010000961e01010000000000000000c0ebb85d843a9da4000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/316], 0x184}}, 0x20000844) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000005c0)={r0, &(0x7f0000000400)='+]\x00', 0x18200, &(0x7f0000000480)={@_ha_fsid={[0x353]}, {0x2, 0x3, 0x9, 0x81}}, 0x3b88, &(0x7f00000004c0), &(0x7f0000000540)=0x8001}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYRES64=0x0], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f4305f0671271e31c2f8d", 0x1a}, {&(0x7f0000000240)="d26319afcf07e69edb08", 0xa}, {&(0x7f0000000300)="d9a0f0481ae7", 0x6}], 0x3) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x1c, r6, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r6, 0x910, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4a}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131f}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xadc}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5c6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1277}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x87c}]}, 0x70}}, 0x64044080) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x36, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860186dd8a2cd3818eeedc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee363e02c019d905b4f1d7", 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0xd8, &(0x7f0000000300)=""/216}, 0x94) 0s ago: executing program 36 (id=2698): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x87) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x40, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004084) kernel console output (not intermixed with test programs): 68][T11492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1379'. [ 255.243925][T11501] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1381'. [ 255.414085][T11509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.470622][T11495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.479013][T11495] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.522749][T11495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.533874][T11495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.549522][T11495] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 255.569429][ T7286] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.576649][ T7286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.586641][ T7286] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.593892][ T7286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.627154][T11503] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 255.645422][T11492] bridge4: entered promiscuous mode [ 255.651375][T11492] bridge4: entered allmulticast mode [ 255.668959][ T7283] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.677887][ T7283] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.692077][ T7283] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.701972][ T7283] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.749730][ T5626] lo speed is unknown, defaulting to 1000 [ 255.763896][ T7283] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.774343][ T5626] s: Port: 1 Link ACTIVE [ 255.784247][ T7283] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.798440][ T187] lo speed is unknown, defaulting to 1000 [ 255.804604][ T7283] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.813501][ T7283] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.824080][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.832637][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.898368][ T6763] bridge0: port 3(vlan2) entered blocking state [ 255.904842][ T6763] bridge0: port 3(vlan2) entered forwarding state [ 256.136026][T11520] netlink: 'syz.2.1387': attribute type 10 has an invalid length. [ 256.380070][T11530] tun0: tun_chr_ioctl cmd 1074025675 [ 256.385476][T11530] tun0: persist enabled [ 256.392285][T11530] tun0: tun_chr_ioctl cmd 1074025675 [ 256.401909][T11530] tun0: persist disabled [ 256.412483][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 256.434596][T11514] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1385'. [ 256.912637][T11559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.922627][T11555] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1395'. [ 256.981248][T11562] bridge4: entered promiscuous mode [ 256.986801][T11562] bridge4: entered allmulticast mode [ 257.352144][T11579] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 257.506317][T11571] syzkaller0: entered promiscuous mode [ 257.512176][T11571] syzkaller0: entered allmulticast mode [ 257.572086][T11582] lo speed is unknown, defaulting to 1000 [ 259.736059][T11596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.823753][T11596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.854116][T11596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.872995][T11596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.886765][T11596] veth1_vlan: left promiscuous mode [ 259.901077][T11596] veth0_vlan: left promiscuous mode [ 259.922234][T11596] veth0_vlan: entered promiscuous mode [ 259.936309][T11596] veth1_vlan: entered promiscuous mode [ 259.965891][T11596] veth1_macvtap: left promiscuous mode [ 259.981131][T11596] veth0_macvtap: left promiscuous mode [ 259.998713][T11596] veth0_macvtap: entered promiscuous mode [ 260.032560][T11596] veth1_macvtap: entered promiscuous mode [ 260.074857][T11596] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 260.133659][ T6763] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.140969][ T6763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.227293][T11626] netlink: 'syz.3.1413': attribute type 1 has an invalid length. [ 260.268106][ T7283] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.279433][T11626] __nla_validate_parse: 1 callbacks suppressed [ 260.279450][T11626] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1413'. [ 260.319610][ T7283] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.336038][ T7283] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.348573][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1413'. [ 260.387799][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1413'. [ 260.468979][ T7283] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.519962][T11630] bond2: option ad_actor_sys_prio: invalid value (0) [ 260.526881][T11630] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 260.548424][T11630] bond2 (unregistering): Released all slaves [ 260.669393][T11634] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 260.686206][ T6759] bond3: (slave team0): link status definitely up, 20000 Mbps full duplex [ 260.721790][ T6759] bond3: (slave team0): making interface the new active one [ 260.739656][ T6759] bond3: active interface up! [ 261.116400][T11654] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 261.148407][T11654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1420'. [ 261.176245][T11655] netlink: 'syz.1.1419': attribute type 9 has an invalid length. [ 261.334963][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1423'. [ 261.352833][T11664] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 261.558703][T11668] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.679981][T11678] syzkaller0: entered promiscuous mode [ 261.685676][T11678] syzkaller0: entered allmulticast mode [ 261.928713][T11693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1431'. [ 263.507968][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 263.726052][T11701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1432'. [ 263.770823][T11694] bond3: (slave macvlan1): Enslaving as an active interface with an up link [ 263.829027][T11682] bridge2: entered promiscuous mode [ 263.834406][T11682] bridge2: entered allmulticast mode [ 263.855726][T11682] team0: Port device bridge2 added [ 263.894380][T11696] bond3 (unregistering): (slave macvlan1): Releasing backup interface [ 263.913187][T11707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1434'. [ 263.932906][T11707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1434'. [ 263.959716][T11696] bond3 (unregistering): Released all slaves [ 264.226599][T11718] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 264.350073][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1440'. [ 264.373225][T11724] netlink: 'syz.2.1440': attribute type 20 has an invalid length. [ 264.537620][T11722] ip6tnl0: Caught tx_queue_len zero misconfig [ 264.982665][T11745] netlink: 'syz.2.1448': attribute type 322 has an invalid length. [ 265.040428][T11742] tipc: Enabled bearer , priority 0 [ 265.080524][T11742] syzkaller0: entered promiscuous mode [ 265.094288][T11742] syzkaller0: entered allmulticast mode [ 265.181218][T11742] tipc: Resetting bearer [ 265.214793][T11742] tipc: Resetting bearer [ 265.229391][T11742] tipc: Resetting bearer [ 265.284070][T11748] vlan3: entered promiscuous mode [ 265.303493][T11748] bridge0: entered promiscuous mode [ 265.359479][T11741] tipc: Resetting bearer [ 265.388991][T11741] tipc: Disabling bearer [ 265.589228][T11763] __nla_validate_parse: 4 callbacks suppressed [ 265.589251][T11763] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1454'. [ 265.784035][T11772] netlink: 368 bytes leftover after parsing attributes in process `syz.4.1457'. [ 265.796690][T11775] netlink: 'syz.3.1458': attribute type 4 has an invalid length. [ 265.814304][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1456'. [ 265.831781][T11772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1457'. [ 265.856312][T11772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1457'. [ 265.867018][T11772] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1457'. [ 266.283695][T11781] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1459'. [ 266.418272][T11795] lo speed is unknown, defaulting to 1000 [ 266.444534][T11809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1464'. [ 266.456866][T11810] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1464'. [ 266.599064][T11813] syzkaller0: entered promiscuous mode [ 266.630228][T11813] syzkaller0: entered allmulticast mode [ 266.955603][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1470'. [ 267.106894][T11835] lo speed is unknown, defaulting to 1000 [ 267.113504][T11842] ±ÿ: renamed from lo (while UP) [ 267.962188][T11871] netlink: 'syz.0.1481': attribute type 13 has an invalid length. [ 268.039149][T11871] tipc: Resetting bearer [ 268.387409][T11871] batman_adv: batadv0: Interface deactivated: gretap1 [ 268.447884][T11871] erspan0: left allmulticast mode [ 268.453116][T11871] erspan0: left promiscuous mode [ 268.675389][T11873] ip6tnl1: entered allmulticast mode [ 268.683492][ T6763] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.692989][ T6763] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.716906][ T251] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 268.740338][ T6763] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.763465][ T6763] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.138588][T11925] x_tables: duplicate entry at hook 1 [ 270.235824][T11925] netlink: 'syz.2.1494': attribute type 1 has an invalid length. [ 270.440679][T11936] ±ÿ speed is unknown, defaulting to 1000 [ 271.598477][T11983] __nla_validate_parse: 8 callbacks suppressed [ 271.598497][T11983] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1508'. [ 271.951295][T11996] sctp: [Deprecated]: syz.0.1511 (pid 11996) Use of int in max_burst socket option. [ 271.951295][T11996] Use struct sctp_assoc_value instead [ 272.118307][T12000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1513'. [ 272.293193][T12011] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 272.560895][T12011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.576342][T12011] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.589875][T12011] tipc: Resetting bearer [ 272.599770][T12011] tipc: Resetting bearer [ 272.615566][T12011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.774053][T12011] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.778312][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 272.798639][T12011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.815257][T12011] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 272.832381][T12001] tipc: Enabling of bearer rejected, failed to enable media [ 273.267481][T12039] team0: Device xfrm0 is of different type [ 273.312842][T12041] tipc: Enabled bearer , priority 0 [ 273.558031][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1529'. [ 273.585437][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1529'. [ 273.610354][T12057] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1529'. [ 273.647463][T12060] netlink: 'syz.3.1530': attribute type 6 has an invalid length. [ 273.670096][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1530'. [ 273.795060][T12065] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1532'. [ 273.796466][T12063] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1531'. [ 273.838994][T12063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1531'. [ 274.159521][T12078] syzkaller1: entered promiscuous mode [ 274.166562][T12078] syzkaller1: entered allmulticast mode [ 274.428124][ T7228] tipc: Node number set to 3264524780 [ 274.600039][T12114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1545'. [ 275.049690][T12131] netlink: 'syz.4.1550': attribute type 1 has an invalid length. [ 275.220534][T12131] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.254384][T12196] tc_dump_action: action bad kind [ 276.606571][T12210] lo: entered allmulticast mode [ 276.612953][T12210] lo: left allmulticast mode [ 276.947546][T12224] __nla_validate_parse: 7 callbacks suppressed [ 276.947569][T12224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1573'. [ 277.053516][T12231] netlink: 'syz.4.1573': attribute type 1 has an invalid length. [ 277.253594][T12244] SET target dimension over the limit! [ 277.427543][T12237] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.437939][T12237] bond5: (slave bond6): making interface the new active one [ 277.446860][T12237] bond5: (slave bond6): Enslaving as an active interface with an up link [ 277.747592][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1585'. [ 277.816147][T12269] netlink: 'syz.3.1585': attribute type 10 has an invalid length. [ 277.838647][T12269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1585'. [ 278.115126][T12285] wlan0: renamed from ip6gre0 (while UP) [ 278.141144][T12289] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1591'. [ 278.162367][T12285] wlan0: entered promiscuous mode [ 278.182308][T12285] wlan0: entered allmulticast mode [ 278.200577][T12292] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1589'. [ 278.240383][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1589'. [ 278.284032][T12294] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1589'. [ 278.312197][T12285] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 278.462440][T12300] x_tables: duplicate entry at hook 1 [ 278.519841][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1595'. [ 278.545664][T12303] netlink: 'syz.3.1596': attribute type 1 has an invalid length. [ 278.555550][T12301] tipc: Enabled bearer , priority 0 [ 278.566386][T12301] syzkaller0: entered promiscuous mode [ 278.572921][T12301] syzkaller0: entered allmulticast mode [ 278.583749][T12303] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1596'. [ 278.611545][T12307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1598'. [ 278.613448][T12301] team_slave_1: mtu less than device minimum [ 278.649447][T12303] pim6reg1: entered promiscuous mode [ 278.654959][T12303] pim6reg1: entered allmulticast mode [ 278.781847][T12301] tipc: Resetting bearer [ 278.876272][T12301] tipc: Disabling bearer [ 279.402747][T12345] netlink: 'syz.3.1605': attribute type 1 has an invalid length. [ 279.433668][T12344] netlink: 'syz.3.1605': attribute type 1 has an invalid length. [ 279.497957][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 279.590696][T12345] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.614894][T12353] tipc: Enabled bearer , priority 0 [ 279.640146][ T4938] Bluetooth: hci4: link tx timeout [ 279.648582][ T4938] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.664169][T12361] xt_bpf: check failed: parse error [ 279.681578][ T4938] Bluetooth: hci4: link tx timeout [ 279.687870][ T4938] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.695701][ T4938] Bluetooth: hci4: link tx timeout [ 279.700902][ T4938] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.711557][ T4938] Bluetooth: hci4: link tx timeout [ 279.716756][ T4938] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.210035][T12390] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 280.399937][T12403] netlink: 'syz.0.1622': attribute type 9 has an invalid length. [ 280.441049][T12403] netlink: 'syz.0.1622': attribute type 1 has an invalid length. [ 280.528995][T12417] netlink: 'syz.3.1625': attribute type 3 has an invalid length. [ 280.558735][T12420] netlink: 'syz.3.1625': attribute type 3 has an invalid length. [ 280.760757][T12428] netlink: 'syz.0.1626': attribute type 3 has an invalid length. [ 280.769181][T12428] netlink: 'syz.0.1626': attribute type 2 has an invalid length. [ 281.417943][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 281.737887][ T4938] Bluetooth: hci4: command 0x0406 tx timeout [ 281.822719][T12488] gtp1: entered promiscuous mode [ 281.827816][T12488] gtp1: entered allmulticast mode [ 282.337613][T12507] __nla_validate_parse: 14 callbacks suppressed [ 282.337632][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1646'. [ 282.357650][T12507] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1646'. [ 282.381864][T12507] bridge0: entered allmulticast mode [ 282.443565][T12507] pim6reg: entered allmulticast mode [ 282.684841][T12527] netlink: zone id is out of range [ 282.705513][T12527] netlink: zone id is out of range [ 282.717844][T12527] netlink: zone id is out of range [ 282.733027][T12527] netlink: zone id is out of range [ 282.754311][T12527] netlink: zone id is out of range [ 282.769618][T12527] netlink: zone id is out of range [ 282.781384][T12527] netlink: zone id is out of range [ 282.795087][T12527] netlink: get zone limit has 4 unknown bytes [ 283.369243][T12561] validate_nla: 3 callbacks suppressed [ 283.369263][T12561] netlink: 'syz.0.1662': attribute type 111 has an invalid length. [ 283.695649][T12576] syzkaller0: entered promiscuous mode [ 283.718329][T12576] syzkaller0: entered allmulticast mode [ 283.724912][T12579] netlink: 'syz.0.1668': attribute type 1 has an invalid length. [ 283.755841][T12581] sctp: [Deprecated]: syz.1.1669 (pid 12581) Use of int in maxseg socket option. [ 283.755841][T12581] Use struct sctp_assoc_value instead [ 283.919469][T12579] 8021q: adding VLAN 0 to HW filter on device bond5 [ 284.028352][T12587] nbd2: detected capacity change from 0 to 63 [ 284.094707][ T5625] block nbd2: Receive control failed (result -104) [ 284.269252][T12603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1677'. [ 284.283833][T12604] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 284.331550][T12603] batadv1: left allmulticast mode [ 284.337205][T12603] batadv1: left promiscuous mode [ 284.345757][T12603] bridge0: port 3(batadv1) entered disabled state [ 284.361187][T12603] bridge_slave_1: left allmulticast mode [ 284.370507][T12603] bridge_slave_1: left promiscuous mode [ 284.382064][T12603] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.402211][T12603] bridge_slave_0: left allmulticast mode [ 284.417302][T12603] bridge_slave_0: left promiscuous mode [ 284.442566][T12603] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.493312][T12603] bridge0 (unregistering): left allmulticast mode [ 284.655373][T12623] netlink: 'syz.4.1681': attribute type 30 has an invalid length. [ 284.912591][T12635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.224213][T12657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1689'. [ 285.250650][T12657] syzkaller1: entered promiscuous mode [ 285.256327][T12657] syzkaller1: entered allmulticast mode [ 285.450792][ T5626] IPVS: starting estimator thread 0... [ 285.547873][T12661] IPVS: using max 38 ests per chain, 91200 per kthread [ 287.499902][T12616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.824227][T12683] netlink: 'syz.4.1695': attribute type 1 has an invalid length. [ 287.833128][T12683] netlink: 'syz.4.1695': attribute type 2 has an invalid length. [ 287.973510][T12663] tipc: Resetting bearer [ 288.014887][T12663] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 288.053501][T12677] team0: No ports can be present during mode change [ 288.112347][T12679] tipc: Enabling of bearer rejected, already enabled [ 288.455903][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1699'. [ 288.899528][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1705'. [ 289.483281][ T7225] hid-generic 0005:0007:0007.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 289.659486][T12762] macvtap0: entered promiscuous mode [ 289.661443][T12769] fido_id[12769]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 289.695341][T12765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.036966][T12777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1712'. [ 290.390583][T12793] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1717'. [ 290.463931][T12798] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1280) ! [ 290.630421][T12802] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 290.634230][T12807] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1721'. [ 290.722605][T12812] FAULT_INJECTION: forcing a failure. [ 290.722605][T12812] name failslab, interval 1, probability 0, space 0, times 1 [ 290.750839][T12812] CPU: 0 UID: 0 PID: 12812 Comm: syz.4.1722 Not tainted syzkaller #0 PREEMPT(full) [ 290.750869][T12812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 290.750891][T12812] Call Trace: [ 290.750900][T12812] [ 290.750909][T12812] dump_stack_lvl+0xe8/0x150 [ 290.750961][T12812] should_fail_ex+0x40c/0x560 [ 290.750992][T12812] should_failslab+0xa8/0x100 [ 290.751025][T12812] __kmalloc_noprof+0xfe/0x720 [ 290.751056][T12812] ? bpf_test_init+0x9f/0x150 [ 290.751088][T12812] ? bpf_test_init+0x9f/0x150 [ 290.751129][T12812] bpf_test_init+0x9f/0x150 [ 290.751177][T12812] bpf_prog_test_run_skb+0x31e/0x2230 [ 290.751235][T12812] ? __fget_files+0x3a2/0x420 [ 290.751264][T12812] ? __fget_files+0x2a/0x420 [ 290.751297][T12812] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 290.751332][T12812] bpf_prog_test_run+0x2c5/0x340 [ 290.751367][T12812] __sys_bpf+0xa22/0xd90 [ 290.751404][T12812] ? __pfx___sys_bpf+0x10/0x10 [ 290.751444][T12812] ? __fget_files+0x2a/0x420 [ 290.751498][T12812] ? ksys_write+0x242/0x270 [ 290.751537][T12812] ? __pfx_ksys_write+0x10/0x10 [ 290.751576][T12812] __x64_sys_bpf+0xba/0xd0 [ 290.751603][T12812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.751628][T12812] do_syscall_64+0x174/0x580 [ 290.751660][T12812] ? trace_irq_disable+0x3b/0x140 [ 290.751688][T12812] ? clear_bhb_loop+0x40/0x90 [ 290.751715][T12812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.751737][T12812] RIP: 0033:0x7feafc39de99 [ 290.751765][T12812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.751784][T12812] RSP: 002b:00007feafd1f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.751808][T12812] RAX: ffffffffffffffda RBX: 00007feafc625fa0 RCX: 00007feafc39de99 [ 290.751823][T12812] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 290.751837][T12812] RBP: 00007feafd1f5090 R08: 0000000000000000 R09: 0000000000000000 [ 290.751849][T12812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.751861][T12812] R13: 00007feafc626038 R14: 00007feafc625fa0 R15: 00007ffe07305aa8 [ 290.751895][T12812] [ 291.141492][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'. [ 291.209132][T12827] netlink: 'syz.4.1724': attribute type 1 has an invalid length. [ 291.282838][T12832] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1724'. [ 291.326196][T12827] 8021q: adding VLAN 0 to HW filter on device bond8 [ 291.694787][T12850] ±ÿ speed is unknown, defaulting to 1000 [ 291.842024][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 291.949722][T12865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1737'. [ 291.974244][T12866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1737'. [ 292.099598][T12875] SET target dimension over the limit! [ 292.627488][T12902] netlink: 'syz.3.1745': attribute type 8 has an invalid length. [ 292.662226][T12902] netlink: 'syz.3.1745': attribute type 83 has an invalid length. [ 292.785372][T12908] x_tables: duplicate underflow at hook 3 [ 293.008414][T12918] tipc: Resetting bearer [ 293.014330][T12918] tipc: Resetting bearer [ 293.305502][T12928] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 293.352057][T12932] vlan1: entered promiscuous mode [ 293.357197][T12932] bridge0: entered promiscuous mode [ 293.366525][T12926] : renamed from bridge_slave_0 [ 293.555893][T12936] __nla_validate_parse: 7 callbacks suppressed [ 293.555915][T12936] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1753'. [ 293.892261][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1757'. [ 293.943104][T12947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1757'. [ 294.009753][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1758'. [ 294.020720][T12947] bridge6: entered promiscuous mode [ 294.041323][T12947] bridge6: entered allmulticast mode [ 294.968728][T12987] veth1_to_bond: entered allmulticast mode [ 294.985004][T12987] veth1_to_bond: entered promiscuous mode [ 295.006604][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1766'. [ 295.041947][T12987] veth1_to_bond (unregistering): left allmulticast mode [ 295.080977][T12987] veth1_to_bond (unregistering): left promiscuous mode [ 295.151976][T12987] bond0: (slave bond_slave_1): Releasing backup interface [ 295.177488][T12987] bond_slave_1 (unregistering): left allmulticast mode [ 295.397334][T13011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1770'. [ 295.419878][T13011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1770'. [ 295.440004][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 295.459514][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 295.644145][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1772'. [ 295.822905][T13027] syzkaller0: entered promiscuous mode [ 295.828792][T13027] syzkaller0: entered allmulticast mode [ 297.417951][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 297.634130][T12973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.249026][T13101] syzkaller0: tun_chr_ioctl cmd 35108 [ 298.389590][T13110] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.577115][T13122] __nla_validate_parse: 6 callbacks suppressed [ 298.577134][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1794'. [ 298.613321][T13122] xt_TCPMSS: Only works on TCP SYN packets [ 298.988436][T13132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1796'. [ 299.014746][T13132] netlink: 'syz.3.1796': attribute type 8 has an invalid length. [ 299.178768][T13140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'. [ 299.201593][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1797'. [ 299.354497][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1798'. [ 299.510810][T13147] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1800'. [ 299.562739][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1801'. [ 299.609769][T13148] xt_hashlimit: size too large, truncated to 1048576 [ 299.704551][T13151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1802'. [ 299.839678][T13163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1803'. [ 299.875409][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1801'. [ 300.076309][T13169] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 300.093585][T13169] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 300.385455][T13188] netlink: 'syz.4.1813': attribute type 10 has an invalid length. [ 300.749779][T13202] netlink: 'syz.4.1815': attribute type 4 has an invalid length. [ 300.789309][ T995] ±ÿ speed is unknown, defaulting to 1000 [ 300.805049][T13202] netlink: 'syz.4.1815': attribute type 4 has an invalid length. [ 300.823092][T13205] bond0: (slave vlan2): Opening slave failed [ 300.823544][ T995] s: Port: 1 Link DOWN [ 301.216792][ T7226] ±ÿ speed is unknown, defaulting to 1000 [ 301.231588][ T995] ±ÿ speed is unknown, defaulting to 1000 [ 301.249390][ T995] s: Port: 1 Link ACTIVE [ 301.400009][T13224] openvswitch: netlink: Message has 8 unknown bytes. [ 301.421582][T13228] sctp: [Deprecated]: syz.3.1824 (pid 13228) Use of int in max_burst socket option deprecated. [ 301.421582][T13228] Use struct sctp_assoc_value instead [ 302.074821][T13258] netlink: 'syz.2.1833': attribute type 21 has an invalid length. [ 302.105279][T13262] netlink: 'syz.3.1834': attribute type 1 has an invalid length. [ 302.121271][T13258] netlink: 'syz.2.1833': attribute type 1 has an invalid length. [ 302.145573][T13258] netlink: 'syz.2.1833': attribute type 2 has an invalid length. [ 302.306840][T13260] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 302.365101][T13260] bond6 (unregistering): Released all slaves [ 302.485411][T13283] netdevsim netdevsim4 €Â: renamed from netdevsim0 [ 303.616974][T13349] netlink: 'syz.2.1856': attribute type 27 has an invalid length. [ 303.631969][T13349] netlink: 'syz.2.1856': attribute type 13 has an invalid length. [ 303.747280][T13349] wlan0: left promiscuous mode [ 303.757773][T13349] wlan0: left allmulticast mode [ 303.895194][T13358] __nla_validate_parse: 7 callbacks suppressed [ 303.895217][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1858'. [ 304.032837][T13349] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 304.043544][T13349] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 304.204383][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.211645][ T6759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.736587][T13386] validate_nla: 1 callbacks suppressed [ 304.736607][T13386] netlink: 'syz.4.1866': attribute type 11 has an invalid length. [ 304.759039][T13392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1867'. [ 304.972571][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'. [ 304.981881][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'. [ 305.154333][T13422] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 305.319483][T13432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1875'. [ 305.330488][T13424] bond9: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 305.341076][T13424] bond9: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 305.351231][T13432] netlink: 'syz.3.1875': attribute type 30 has an invalid length. [ 305.359317][T13424] bond9: entered allmulticast mode [ 305.405189][T13437] netlink: 'syz.3.1875': attribute type 30 has an invalid length. [ 305.471231][T13439] tipc: Enabling of bearer rejected, already enabled [ 305.483858][T13439] syzkaller0: mtu less than device minimum [ 305.491392][T13439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1877'. [ 305.546384][T13441] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1878'. [ 305.559006][T13441] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1878'. [ 305.598965][T13441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1878'. [ 305.953106][T13460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1883'. [ 306.038481][T13473] netlink: 'syz.0.1886': attribute type 6 has an invalid length. [ 306.347242][T13487] syzkaller0: entered promiscuous mode [ 306.390972][T13487] syzkaller0: entered allmulticast mode [ 306.465506][T13487] netlink: 'syz.1.1888': attribute type 1 has an invalid length. [ 306.510517][T13487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.820399][T13504] 8021q: adding VLAN 0 to HW filter on device bond10 [ 309.060587][T13528] netlink: 'syz.4.1903': attribute type 1 has an invalid length. [ 309.069415][T13527] __nla_validate_parse: 8 callbacks suppressed [ 309.069434][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1902'. [ 309.090045][T13528] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1903'. [ 309.132500][T13534] netlink: 'syz.1.1905': attribute type 1 has an invalid length. [ 309.153023][T13533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1906'. [ 309.391448][T13547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1909'. [ 309.412261][T13541] xt_l2tp: missing protocol rule (udp|l2tpip) [ 309.455629][T13550] xt_hashlimit: size too large, truncated to 1048576 [ 309.529606][T13554] tipc: New replicast peer: 255.255.255.255 [ 309.636795][T13554] tipc: Enabled bearer , priority 10 [ 309.780820][T13550] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 310.142859][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1917'. [ 310.336709][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1922'. [ 310.363649][T13605] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1922'. [ 310.386752][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1921'. [ 310.639659][T13616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1923'. [ 310.789237][T13624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1925'. [ 310.846003][T13627] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:7 [ 311.087119][T13639] netlink: 'syz.4.1929': attribute type 9 has an invalid length. [ 311.442760][T13655] xt_TCPMSS: Only works on TCP SYN packets [ 311.498193][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 312.142120][T13692] netlink: 'syz.1.1943': attribute type 4 has an invalid length. [ 312.159788][T13692] netlink: 'syz.1.1943': attribute type 4 has an invalid length. [ 312.305288][T13697] netlink: 'syz.2.1944': attribute type 4 has an invalid length. [ 312.437080][T13697] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 312.720892][T13713] bond6: option min_links: invalid value (18446744073709551612) [ 312.729774][T13713] bond6: option min_links: allowed values 0 - 2147483647 [ 312.740121][T13713] bond6 (unregistering): Released all slaves [ 313.331770][T13745] netlink: 'syz.1.1956': attribute type 1 has an invalid length. [ 313.483238][T13745] 8021q: adding VLAN 0 to HW filter on device bond8 [ 313.645106][T13749] bond8: (slave veth7): Enslaving as an active interface with a down link [ 313.724366][T13731] bond11: entered promiscuous mode [ 313.742499][T13731] bond11: entered allmulticast mode [ 313.755275][T13731] 8021q: adding VLAN 0 to HW filter on device bond11 [ 313.783998][T13753] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 313.796066][T13753] bond8: (slave batadv2): making interface the new active one [ 313.805870][T13753] batadv2: entered promiscuous mode [ 313.816518][T13753] bond8: (slave batadv2): Enslaving as an active interface with an up link [ 313.904936][T13745] bond8: (slave veth9): Enslaving as an active interface with a down link [ 314.063329][ T1607] block nbd2: Possible stuck request ffff888027117000: control (read@0,1024B). Runtime 30 seconds [ 314.081001][ T1607] block nbd2: Possible stuck request ffff8880271171c0: control (read@1024,1024B). Runtime 30 seconds [ 314.092082][ T1607] block nbd2: Possible stuck request ffff888027117380: control (read@2048,1024B). Runtime 30 seconds [ 314.103150][ T1607] block nbd2: Possible stuck request ffff888027117540: control (read@3072,1024B). Runtime 30 seconds [ 314.197289][T13767] syzkaller1: entered promiscuous mode [ 314.219811][T13767] syzkaller1: entered allmulticast mode [ 314.436581][T13776] __nla_validate_parse: 9 callbacks suppressed [ 314.436601][T13776] netlink: 6060 bytes leftover after parsing attributes in process `syz.1.1965'. [ 314.904310][T13793] netlink: 'syz.1.1968': attribute type 19 has an invalid length. [ 314.924323][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1968'. [ 315.000136][T13794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.022540][T13581] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.038875][T13793] netlink: 'syz.1.1968': attribute type 19 has an invalid length. [ 315.048396][T13581] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.069259][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1968'. [ 315.118844][T13581] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.131490][T13581] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.193237][T13773] vxcan1: entered promiscuous mode [ 315.231446][T13773] team0: Device vxcan1 is of different type [ 315.542554][T13802] tipc: Started in network mode [ 315.567744][T13802] tipc: Node identity 7f000001, cluster identity 4711 [ 315.638573][T13802] tipc: Enabled bearer , priority 10 [ 315.651356][T13818] netlink: 'syz.4.1972': attribute type 4 has an invalid length. [ 315.702095][T13814] netlink: 'syz.4.1972': attribute type 4 has an invalid length. [ 315.735459][ T7226] ±ÿ speed is unknown, defaulting to 1000 [ 315.757182][ T995] ±ÿ speed is unknown, defaulting to 1000 [ 315.790337][ T7226] ±ÿ speed is unknown, defaulting to 1000 [ 315.818275][T13814] netlink: 'syz.4.1972': attribute type 1 has an invalid length. [ 315.856079][T13814] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1972'. [ 316.078369][T13802] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 316.089019][T13802] tipc: Enabled bearer , priority 10 [ 316.202008][T13581] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 316.516165][T13846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1979'. [ 316.667182][T13855] openvswitch: netlink: Tunnel attr 91 out of range max 16 [ 317.165144][T13875] syzkaller1: entered promiscuous mode [ 317.203981][T13875] syzkaller1: entered allmulticast mode [ 317.235391][ T7229] tipc: Node number set to 2130706433 [ 317.266239][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.341936][T13880] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1986'. [ 317.368095][T13878] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1986'. [ 317.634813][T13882] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 318.612426][T13923] validate_nla: 2 callbacks suppressed [ 318.612446][T13923] netlink: 'syz.3.1996': attribute type 1 has an invalid length. [ 318.689137][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 318.732839][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1996'. [ 318.813157][T13581] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.822005][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 318.844435][T13581] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.870498][T13581] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.891650][T13581] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.055742][T13935] syzkaller0: entered promiscuous mode [ 319.077860][T13935] syzkaller0: entered allmulticast mode [ 319.538352][T13953] xt_cgroup: path and classid specified [ 319.741303][T13959] bond4: option all_slaves_active: invalid value (127) [ 319.750148][T13959] bond4 (unregistering): Released all slaves [ 319.777958][T13963] __nla_validate_parse: 1 callbacks suppressed [ 319.777977][T13963] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2009'. [ 320.195282][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'. [ 320.339345][T13983] syzkaller0: entered promiscuous mode [ 320.356913][T13983] syzkaller0: entered allmulticast mode [ 320.871166][T13993] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2017'. [ 320.921246][T13993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2017'. [ 320.985267][T13997] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2019'. [ 321.005246][T13997] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2019'. [ 321.149704][T13997] bond6: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 321.174259][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2021'. [ 321.194464][T13997] bond6 (unregistering): Released all slaves [ 321.809006][T14032] syzkaller1: entered allmulticast mode [ 321.843485][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2028'. [ 321.940242][T14031] veth7: entered allmulticast mode [ 322.045832][T14047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2032'. [ 322.089677][T14054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2033'. [ 322.509800][T13586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.535522][T13586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.634932][T14087] xt_hashlimit: size too large, truncated to 1048576 [ 322.712564][T14096] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 323.349716][T14121] ±ÿ speed is unknown, defaulting to 1000 [ 323.373549][T14123] netlink: 'syz.1.2049': attribute type 8 has an invalid length. [ 323.432129][T14123] bond0: entered promiscuous mode [ 323.459438][T14123] bond_slave_0: entered promiscuous mode [ 323.482965][T14123] bond0: left promiscuous mode [ 323.499346][T14123] bond_slave_0: left promiscuous mode [ 324.448243][T14157] tipc: Enabled bearer , priority 0 [ 324.466695][T14157] tipc: Resetting bearer [ 324.539391][T14161] netdevsim netdevsim0 €Â: renamed from netdevsim0 [ 324.769219][T14153] tipc: Disabling bearer [ 325.023417][T14171] __nla_validate_parse: 9 callbacks suppressed [ 325.023437][T14171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2060'. [ 325.041364][ T155] batadv2: left promiscuous mode [ 325.251233][T14183] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2063'. [ 325.331271][T14190] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2065'. [ 325.807243][T14212] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2072'. [ 326.018299][T14223] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2073'. [ 326.034318][T14223] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2073'. [ 326.136970][T14221] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.242699][T14233] SET target dimension over the limit! [ 326.329732][T14221] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.422073][T14221] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.526798][T14221] netdevsim netdevsim4 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.611488][T14243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2082'. [ 326.639695][T14243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2082'. [ 326.668388][T14246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2082'. [ 326.689186][T14246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2082'. [ 326.951562][T13581] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.960988][T13581] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.014593][ T6765] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.052334][T14261] netlink: 'syz.3.2086': attribute type 4 has an invalid length. [ 327.068481][T14261] .`: renamed from bond0 [ 327.089384][T13581] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.205362][T14269] vlan3: entered promiscuous mode [ 327.211917][T14269] bridge0: entered promiscuous mode [ 327.336745][T14269] erspan0: left promiscuous mode [ 327.351579][T14269] erspan0: left allmulticast mode [ 327.573739][T14269] bridge0: port 3(vlan2) entered disabled state [ 327.580328][T14269] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.589577][T14269] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.145919][T14269] bond1: left promiscuous mode [ 328.157742][T14269] bridge1: left promiscuous mode [ 328.207373][T14269] bond2: left promiscuous mode [ 328.213014][T14269] bridge2: left promiscuous mode [ 328.219215][T14269] bond2: left allmulticast mode [ 328.224122][T14269] bridge2: left allmulticast mode [ 328.266814][T14269] tipc: Resetting bearer [ 328.286702][T14269] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 328.295906][T14269] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 328.308958][T14269] bridge4: left promiscuous mode [ 328.313944][T14269] bridge4: left allmulticast mode [ 328.389964][T14269] bond9: left allmulticast mode [ 328.404816][T14269] bond11: left promiscuous mode [ 328.414796][T14269] bond11: left allmulticast mode [ 328.423288][T14269] vlan3: left promiscuous mode [ 328.433135][T14269] bridge0: left promiscuous mode [ 328.441776][ T5626] ±ÿ speed is unknown, defaulting to 1000 [ 328.462955][ T5626] s: Port: 1 Link DOWN [ 328.504184][ T35] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.530675][ T35] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.573749][ T5626] ±ÿ speed is unknown, defaulting to 1000 [ 328.623426][ T35] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.636501][ T35] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.879593][T14321] netlink: 'syz.4.2100': attribute type 1 has an invalid length. [ 329.015729][T14333] netlink: 'syz.1.2104': attribute type 2 has an invalid length. [ 329.044980][T14333] netlink: 'syz.1.2104': attribute type 1 has an invalid length. [ 329.102463][ T4938] Bluetooth: hci4: command 0x0406 tx timeout [ 329.418133][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 329.531025][T14347] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 329.673651][T14358] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 329.863152][T14368] ±ÿ speed is unknown, defaulting to 1000 [ 329.994178][T14377] netlink: 'syz.3.2118': attribute type 1 has an invalid length. [ 330.215374][T14382] netlink: 'syz.1.2120': attribute type 4 has an invalid length. [ 330.241723][T14382] __nla_validate_parse: 26 callbacks suppressed [ 330.241745][T14382] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2120'. [ 330.454746][T14391] syzkaller0: entered promiscuous mode [ 330.475854][T14391] syzkaller0: entered allmulticast mode [ 330.541144][T14391] 0: reclassify loop, rule prio 0, protocol 800 [ 330.702896][T14402] syzkaller0: entered promiscuous mode [ 330.720423][T14402] syzkaller0: entered allmulticast mode [ 330.840852][T14370] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2115'. [ 330.859938][T14405] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20002 [ 330.871383][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2115'. [ 330.897810][T14405] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20002 [ 331.123671][T14417] syzkaller1: entered promiscuous mode [ 331.129404][T14417] syzkaller1: entered allmulticast mode [ 331.262092][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2131'. [ 331.614816][T14445] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2132'. [ 331.705392][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2133'. [ 331.799879][T13582] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.891834][T13582] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.917836][T13582] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.981577][T13582] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.068135][T14464] netlink: 'syz.3.2137': attribute type 1 has an invalid length. [ 332.183143][T14472] netlink: 'syz.1.2139': attribute type 1 has an invalid length. [ 332.264184][T14479] netlink: 'syz.1.2139': attribute type 5 has an invalid length. [ 332.356637][T14472] bond9: entered promiscuous mode [ 332.363471][T14472] 8021q: adding VLAN 0 to HW filter on device bond9 [ 332.386427][T14479] macvtap0: entered allmulticast mode [ 332.434800][T14487] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 332.532213][T14472] bond9: (slave bridge0): making interface the new active one [ 332.569486][T14472] bridge0: entered promiscuous mode [ 332.593111][T14472] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 333.473721][T14532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2152'. [ 333.598302][T14532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2152'. [ 333.614069][T14532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2152'. [ 333.660396][T14541] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000 [ 334.336955][T14564] ±ÿ speed is unknown, defaulting to 1000 [ 334.410167][T14567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2162'. [ 334.690000][T14581] netlink: 'syz.4.2166': attribute type 15 has an invalid length. [ 334.861120][T14586] netlink: 'syz.4.2167': attribute type 1 has an invalid length. [ 335.049125][T14591] bond12: (slave bridge6): Enslaving as a backup interface with an up link [ 335.195533][T14595] ip6gre4: entered allmulticast mode [ 335.246587][T14596] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 335.254437][T14599] __nla_validate_parse: 39 callbacks suppressed [ 335.254455][T14599] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2170'. [ 335.312455][T14599] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2170'. [ 335.332743][T14599] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2170'. [ 335.375037][T14599] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2170'. [ 335.392509][T14599] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2170'. [ 335.445100][T14599] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2170'. [ 335.503300][T14599] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2170'. [ 335.536664][T14599] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2170'. [ 335.582651][T14599] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2170'. [ 335.618815][T14599] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2170'. [ 336.073368][T14633] geneve2: entered allmulticast mode [ 337.290896][T14677] xt_hashlimit: size too large, truncated to 1048576 [ 337.995199][T14705] netlink: 'syz.0.2201': attribute type 9 has an invalid length. [ 338.441850][T14729] veth0: entered promiscuous mode [ 338.471952][T14731] syzkaller0: entered promiscuous mode [ 338.487821][T14731] syzkaller0: entered allmulticast mode [ 338.555439][T14733] tipc: Enabled bearer , priority 0 [ 338.598847][T14732] veth0: left promiscuous mode [ 338.603767][T14739] netlink: 'syz.4.2209': attribute type 1 has an invalid length. [ 338.610882][T14731] tipc: Resetting bearer [ 338.629715][T14738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.656953][T14730] tipc: Resetting bearer [ 338.760627][T14743] netlink: 'syz.0.2210': attribute type 2 has an invalid length. [ 338.773659][T14730] tipc: Disabling bearer [ 338.842997][T14743] : entered promiscuous mode [ 338.881192][T14749] netlink: 'syz.1.2212': attribute type 1 has an invalid length. [ 339.264532][T14775] bond4: ARP target 9.0.0.0 is already present [ 339.271375][T14775] bond4: option arp_ip_target: invalid value (9) [ 339.285955][T14775] bond4 (unregistering): Released all slaves [ 340.390384][T14839] netlink: 'syz.0.2233': attribute type 10 has an invalid length. [ 340.452687][T14839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.522665][T14839] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 340.568466][T14850] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 340.744955][T14844] __nla_validate_parse: 30 callbacks suppressed [ 340.744978][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2235'. [ 340.796571][T14861] x_tables: duplicate underflow at hook 2 [ 341.223390][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2243'. [ 341.252634][T14881] netlink: 'syz.2.2243': attribute type 10 has an invalid length. [ 341.273283][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2243'. [ 341.385982][T14882] ±ÿ speed is unknown, defaulting to 1000 [ 341.674191][T14896] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2247'. [ 342.098575][T14911] geneve0: entered allmulticast mode [ 342.133025][T14911] sctp: [Deprecated]: syz.4.2252 (pid 14911) Use of int in maxseg socket option. [ 342.133025][T14911] Use struct sctp_assoc_value instead [ 342.425890][T14895] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 342.775358][T14934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2255'. [ 342.800052][T14934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2255'. [ 342.822635][T14934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2255'. [ 342.854471][T14934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2255'. [ 342.934173][T14937] netlink: 'syz.4.2257': attribute type 2 has an invalid length. [ 343.125494][T14937] : entered promiscuous mode [ 343.715964][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2263'. [ 343.759191][T14969] netlink: 'syz.1.2264': attribute type 2 has an invalid length. [ 343.801106][T14969] netlink: 'syz.1.2264': attribute type 2 has an invalid length. [ 343.981696][T14976] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2268'. [ 344.034083][T14982] netlink: 'syz.2.2268': attribute type 1 has an invalid length. [ 344.141798][ T1607] block nbd2: Possible stuck request ffff888027117000: control (read@0,1024B). Runtime 60 seconds [ 344.152587][ T1607] block nbd2: Possible stuck request ffff8880271171c0: control (read@1024,1024B). Runtime 60 seconds [ 344.163619][ T1607] block nbd2: Possible stuck request ffff888027117380: control (read@2048,1024B). Runtime 60 seconds [ 344.174846][ T1607] block nbd2: Possible stuck request ffff888027117540: control (read@3072,1024B). Runtime 60 seconds [ 344.343648][T14990] ±ÿ speed is unknown, defaulting to 1000 [ 344.796966][T14988] ±ÿ speed is unknown, defaulting to 1000 [ 345.205891][T15006] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 345.241205][T15006] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 345.497062][T14997] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 345.764390][T15028] __nla_validate_parse: 2 callbacks suppressed [ 345.764406][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2283'. [ 345.982558][T15033] syzkaller0: entered promiscuous mode [ 345.988621][T15033] syzkaller0: entered allmulticast mode [ 348.210917][T15042] ±ÿ speed is unknown, defaulting to 1000 [ 348.712197][T15073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2295'. [ 348.743081][T15078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2297'. [ 348.792957][T15073] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2295'. [ 348.842238][T15073] pimreg: entered allmulticast mode [ 348.859652][T15073] pimreg: left allmulticast mode [ 349.044692][T15089] netlink: 'syz.2.2299': attribute type 1 has an invalid length. [ 349.074526][T15089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.193812][T15096] xt_TPROXY: Can be used only with -p tcp or -p udp [ 349.220353][T15096] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2300'. [ 349.329969][T15104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.404189][T15107] tipc: Enabling of bearer rejected, failed to enable media [ 349.640571][T15114] bridge7: entered promiscuous mode [ 349.653190][T15114] bridge7: entered allmulticast mode [ 349.676358][T15114] team0: Port device bridge7 added [ 349.758614][ T5283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.921613][T15124] netlink: 'syz.0.2305': attribute type 1 has an invalid length. [ 350.006762][T15124] 8021q: adding VLAN 0 to HW filter on device bond6 [ 350.052930][T15130] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2307'. [ 350.069256][T15124] ÿÿÿÿ: renamed from sit0 (while UP) [ 350.344359][T15146] netlink: 'syz.1.2311': attribute type 10 has an invalid length. [ 350.386305][T15143] bond7: option min_links: invalid value (18446744073709551612) [ 350.394289][T15143] bond7: option min_links: allowed values 0 - 2147483647 [ 350.408045][T15143] bond7 (unregistering): Released all slaves [ 350.410905][T15144] can: request_module (can-proto-0) failed. [ 350.494380][T15154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2313'. [ 350.552161][T15154] bond0: entered promiscuous mode [ 350.580834][T15158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2313'. [ 350.586076][T15154] bond_slave_0: entered promiscuous mode [ 350.625184][T15154] bond_slave_1: entered promiscuous mode [ 350.633671][T15154] gretap0: entered promiscuous mode [ 350.640562][T15154] debugfs: 'hsr1' already exists in 'hsr' [ 350.646484][T15154] Cannot create hsr debugfs directory [ 350.653018][T15154] hsr1: entered promiscuous mode [ 350.690955][T15157] syzkaller0: entered promiscuous mode [ 350.696619][T15157] syzkaller0: entered allmulticast mode [ 350.811353][T15169] netlink: 'syz.2.2314': attribute type 2 has an invalid length. [ 350.890155][T15169] : entered promiscuous mode [ 351.025548][T15177] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2319'. [ 351.367608][T15189] syzkaller1: entered promiscuous mode [ 351.375260][T15189] syzkaller1: entered allmulticast mode [ 351.786958][T15205] gretap4: entered promiscuous mode [ 351.850787][T15194] ±ÿ speed is unknown, defaulting to 1000 [ 351.890882][T15214] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20004 [ 352.305842][T15228] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2332'. [ 352.561769][T15239] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 352.577005][T15239] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 352.592424][T15242] netlink: 'syz.0.2335': attribute type 2 has an invalid length. [ 352.608111][T15239] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 352.925586][T15247] syzkaller0: entered promiscuous mode [ 352.937028][T15247] syzkaller0: entered allmulticast mode [ 353.075505][T15221] ±ÿ speed is unknown, defaulting to 1000 [ 353.187463][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2342'. [ 353.209467][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2342'. [ 353.657568][T15276] netlink: 'syz.1.2346': attribute type 1 has an invalid length. [ 353.793220][T15276] 8021q: adding VLAN 0 to HW filter on device bond10 [ 353.846704][T15271] ±ÿ speed is unknown, defaulting to 1000 [ 353.925797][T15288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2345'. [ 354.023890][T15290] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2347'. [ 354.235345][T15294] syzkaller1: entered promiscuous mode [ 354.254331][T15294] syzkaller1: entered allmulticast mode [ 354.489715][T15301] netlink: 'syz.3.2350': attribute type 1 has an invalid length. [ 354.542832][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2350'. [ 354.647321][T15301] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.214918][T15317] netlink: 'syz.1.2355': attribute type 1 has an invalid length. [ 355.495759][T15317] 8021q: adding VLAN 0 to HW filter on device bond11 [ 355.520917][T15321] bond11 (unregistering): Released all slaves [ 355.581920][T15314] bridge0: left promiscuous mode [ 355.603221][T15314] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 355.623876][T15314] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 355.639148][T15314] ip6tnl1: left allmulticast mode [ 355.705402][T13582] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.727504][T13582] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.766824][T13582] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.795666][T13582] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.841964][T13582] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.862516][T13582] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.904054][T13582] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.924569][T13582] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.202344][T15346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2360'. [ 356.271816][T15330] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 356.299127][T15330] bond11 (unregistering): Released all slaves [ 356.500147][ T5639] block nbd64: NBD_DISCONNECT [ 356.899505][T15363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.996201][T15363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.061292][T15363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.244898][T14798] udevd[14798]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 357.580804][T15386] ±ÿ speed is unknown, defaulting to 1000 [ 357.860792][T15404] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2374'. [ 357.881565][T15401] netlink: 'syz.2.2375': attribute type 25 has an invalid length. [ 357.943312][T15410] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2376'. [ 357.989436][T15410] team0 (unregistering): Port device team_slave_0 removed [ 358.021623][T15410] team0 (unregistering): Port device team_slave_1 removed [ 358.100753][T15416] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.2378'. [ 358.420267][T15430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2383'. [ 358.535593][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'. [ 358.562067][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'. [ 358.579862][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'. [ 358.628609][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'. [ 358.642573][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'. [ 358.769609][T15443] tipc: Enabling of bearer rejected, already enabled [ 359.107442][T15447] ±ÿ speed is unknown, defaulting to 1000 [ 359.879762][T15481] openvswitch: netlink: Message has 512 unknown bytes. [ 360.093630][T15492] tap0: tun_chr_ioctl cmd 2147767507 [ 360.480902][T15510] syzkaller0: entered promiscuous mode [ 360.492239][T15510] syzkaller0: entered allmulticast mode [ 361.023971][T15520] netlink: 'syz.3.2411': attribute type 2 has an invalid length. [ 361.309593][T15532] sctp: [Deprecated]: syz.3.2413 (pid 15532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.309593][T15532] Use struct sctp_sack_info instead [ 361.441231][T15541] __nla_validate_parse: 15 callbacks suppressed [ 361.441283][T15541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2414'. [ 361.786360][T15558] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2418'. [ 362.268569][T15582] netlink: 'syz.2.2426': attribute type 1 has an invalid length. [ 362.280655][T15584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2428'. [ 362.292239][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2426'. [ 362.361189][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2426'. [ 362.633005][T15597] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2432'. [ 363.190063][T15628] sctp: [Deprecated]: syz.4.2437 (pid 15628) Use of int in max_burst socket option. [ 363.190063][T15628] Use struct sctp_assoc_value instead [ 363.489726][T15638] netlink: 'syz.1.2442': attribute type 13 has an invalid length. [ 363.520651][T15638] netlink: 'syz.1.2442': attribute type 17 has an invalid length. [ 363.545394][T15641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2442'. [ 363.577023][T15642] netlink: 'syz.0.2443': attribute type 4 has an invalid length. [ 363.705015][T15651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2444'. [ 363.711305][T15638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.722397][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2445'. [ 363.733094][T15638] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.778768][T15638] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.789786][T15638] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.805460][T15638] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 363.825969][T15648] macvlan0: entered promiscuous mode [ 363.859269][T15652] macvlan0 (unregistering): left promiscuous mode [ 364.244418][T15670] nbd: must specify a size in bytes for the device [ 364.326468][T15682] xt_hashlimit: size too large, truncated to 1048576 [ 364.403726][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'. [ 365.175828][T15721] x_tables: duplicate entry at hook 2 [ 365.396667][T15719] ip6gre2: entered promiscuous mode [ 365.411855][T15719] ip6gre2: entered allmulticast mode [ 365.428746][T15719] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 365.445477][T13590] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 365.453709][T13590] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 365.467954][ T7228] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 365.533851][ T7228] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 365.563916][T15719] smc: removing ib device s [ 365.588546][ T7228] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 365.807497][T15719] smbdirect: ib_dev[s] removed [ 366.093934][T15760] lo speed is unknown, defaulting to 1000 [ 366.109430][T15760] lo speed is unknown, defaulting to 1000 [ 366.131806][T15760] lo speed is unknown, defaulting to 1000 [ 366.213940][T15760] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 366.259032][T15760] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 366.302848][T15760] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 366.370925][T15760] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 366.773905][T15760] lo speed is unknown, defaulting to 1000 [ 366.814660][T15760] lo speed is unknown, defaulting to 1000 [ 366.840425][T15760] lo speed is unknown, defaulting to 1000 [ 366.864074][T15760] lo speed is unknown, defaulting to 1000 [ 366.882060][T15760] lo speed is unknown, defaulting to 1000 [ 367.572587][T15789] syzkaller0: entered promiscuous mode [ 367.580458][T15789] syzkaller0: entered allmulticast mode [ 368.273736][T15740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 368.949113][T15831] __nla_validate_parse: 7 callbacks suppressed [ 368.949134][T15831] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2482'. [ 368.966267][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2482'. [ 369.507967][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 370.371544][T15837] lo speed is unknown, defaulting to 1000 [ 370.563109][T15850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2489'. [ 370.608787][T15850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2489'. [ 370.650156][T15850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2489'. [ 370.660657][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2489'. [ 371.097577][T15869] bond5: Removing last arp target with arp_interval on [ 371.411848][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2497'. [ 371.436565][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2497'. [ 371.451565][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2495'. [ 371.463405][T15888] netlink: 58 bytes leftover after parsing attributes in process `syz.4.2497'. [ 371.473036][T15883] netlink: 'syz.0.2495': attribute type 10 has an invalid length. [ 371.538635][T15883] geneve3: entered promiscuous mode [ 371.560150][T15883] geneve3: entered allmulticast mode [ 371.602943][T13582] netdevsim netdevsim0 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.638351][T13582] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.739482][T13582] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.809417][T15904] vlan3: entered promiscuous mode [ 371.828885][T15904] bond0: entered promiscuous mode [ 371.846294][T15904] bond_slave_0: entered promiscuous mode [ 371.886220][T15910] netlink: 'syz.4.2503': attribute type 11 has an invalid length. [ 371.998487][T15910] netlink: 'syz.4.2503': attribute type 11 has an invalid length. [ 372.133591][T15910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.165113][T15910] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.313761][T15910] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 372.350821][T15910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.404508][T15910] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 372.462416][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.469669][ T7288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.480938][T15934] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20000 [ 372.517539][ T7288] bridge0: port 3(vlan2) entered blocking state [ 372.524014][ T7288] bridge0: port 3(vlan2) entered forwarding state [ 372.547208][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.554496][ T7288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.171199][T15975] netlink: 'syz.0.2518': attribute type 1 has an invalid length. [ 373.600440][T15995] sctp: [Deprecated]: syz.1.2526 (pid 15995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.600440][T15995] Use struct sctp_sack_info instead [ 373.976042][T16013] __nla_validate_parse: 9 callbacks suppressed [ 373.976065][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2530'. [ 374.220097][ T1607] block nbd2: Possible stuck request ffff888027117000: control (read@0,1024B). Runtime 90 seconds [ 374.231271][ T1607] block nbd2: Possible stuck request ffff8880271171c0: control (read@1024,1024B). Runtime 90 seconds [ 374.242698][ T1607] block nbd2: Possible stuck request ffff888027117380: control (read@2048,1024B). Runtime 90 seconds [ 374.254282][ T1607] block nbd2: Possible stuck request ffff888027117540: control (read@3072,1024B). Runtime 90 seconds [ 374.337590][T16023] xt_hashlimit: size too large, truncated to 1048576 [ 375.467924][T16091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2547'. [ 375.477246][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2547'. [ 375.506150][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2546'. [ 375.611863][T16091] syzkaller0: entered promiscuous mode [ 375.626209][T16099] netlink: 'syz.4.2550': attribute type 1 has an invalid length. [ 375.642024][T16091] syzkaller0: entered allmulticast mode [ 375.733611][T16099] bond13: entered promiscuous mode [ 375.746601][T16099] 8021q: adding VLAN 0 to HW filter on device bond13 [ 375.974938][T16114] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 375.991329][T16113] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2554'. [ 376.008100][T16115] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 376.068205][T16115] xt_socket: unknown flags 0x8 [ 376.192063][T16115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.228467][T16127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.386503][T16138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2556'. [ 376.605639][T16138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2556'. [ 376.625545][T16138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2556'. [ 376.635872][T16138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2556'. [ 376.651881][T16138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2556'. [ 376.843559][T16159] netlink: 'syz.3.2561': attribute type 6 has an invalid length. [ 377.146916][T16174] syzkaller1: entered promiscuous mode [ 377.157337][T16174] syzkaller1: entered allmulticast mode [ 377.428926][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 378.197850][T16226] lo speed is unknown, defaulting to 1000 [ 378.486035][T16245] netlink: 'syz.3.2586': attribute type 3 has an invalid length. [ 378.500107][T16245] netlink: 'syz.3.2586': attribute type 1 has an invalid length. [ 378.510557][T16245] NCSI netlink: No device for ifindex 0 [ 378.553740][T16239] syzkaller0: entered promiscuous mode [ 378.577421][T16239] syzkaller0: entered allmulticast mode [ 378.697923][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 378.842157][T16265] lo speed is unknown, defaulting to 1000 [ 379.268867][T16245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.514435][T16294] openvswitch: netlink: Flow actions attr not present in new flow. [ 379.790428][T16316] __nla_validate_parse: 17 callbacks suppressed [ 379.790449][T16316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2602'. [ 379.954391][T16322] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2603'. [ 380.134921][T16332] gre1: entered allmulticast mode [ 380.188910][T16334] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2606'. [ 380.762541][T16363] netlink: 'syz.3.2614': attribute type 3 has an invalid length. [ 381.062562][T16377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2618'. [ 381.312328][T16386] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2620'. [ 381.535978][T16394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2623'. [ 381.649508][T16403] sctp: [Deprecated]: syz.4.2624 (pid 16403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.649508][T16403] Use struct sctp_sack_info instead [ 381.692548][T16403] sctp: [Deprecated]: syz.4.2624 (pid 16403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.692548][T16403] Use struct sctp_sack_info instead [ 381.887162][T16407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2626'. [ 381.936321][T16407] hsr_slave_1 (unregistering): left promiscuous mode [ 381.990442][T16417] fb: renamed from bridge0 [ 382.055403][T16426] netlink: 203 bytes leftover after parsing attributes in process `syz.2.2630'. [ 382.056268][T16420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2628'. [ 382.074862][T16420] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2628'. [ 382.177474][T16428] netlink: 'syz.3.2631': attribute type 1 has an invalid length. [ 382.193545][T16428] netlink: 'syz.3.2631': attribute type 2 has an invalid length. [ 382.251393][T16432] veth0_macvtap: left promiscuous mode [ 382.347339][T16430] batadv0: entered promiscuous mode [ 382.356472][T16430] macvlan0: entered promiscuous mode [ 382.362830][T16430] macvlan0: entered allmulticast mode [ 382.373678][T16430] batadv0: entered allmulticast mode [ 382.383749][T16430] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 382.394091][T16430] batadv0: left allmulticast mode [ 382.400089][T16430] batadv0: left promiscuous mode [ 383.257390][T16478] syzkaller0: entered promiscuous mode [ 383.283405][T16478] syzkaller0: entered allmulticast mode [ 383.383669][T16490] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 383.412952][T16490] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 383.429212][T16490] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 383.629743][T16494] bond14 (unregistering): Released all slaves [ 384.042427][T16526] netlink: 'syz.3.2659': attribute type 10 has an invalid length. [ 384.238592][T16531] IPVS: Scheduler module ip_vs_sip not found [ 384.301285][T16537] netlink: 'syz.4.2665': attribute type 1 has an invalid length. [ 384.317213][T16537] netlink: 'syz.4.2665': attribute type 4 has an invalid length. [ 384.348468][T16537] netlink: 'syz.4.2665': attribute type 1 has an invalid length. [ 384.374307][T16537] netlink: 'syz.4.2665': attribute type 4 has an invalid length. [ 384.419842][T16537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.449144][T16537] syzkaller1: entered promiscuous mode [ 384.472208][T16537] syzkaller1: entered allmulticast mode [ 384.697619][T16560] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 385.096085][T16584] x_tables: duplicate underflow at hook 1 [ 385.238612][T16592] __nla_validate_parse: 12 callbacks suppressed [ 385.238633][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2678'. [ 385.255847][T16592] bridge0: port 3(vlan2) entered disabled state [ 385.262441][T16592] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.271322][T16592] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.561291][T16605] netlink: 'syz.0.2679': attribute type 10 has an invalid length. [ 385.604051][T16605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.617046][T16605] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 385.791039][T16607] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 385.821123][T16607] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 385.846487][T16611] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20001 [ 385.855845][T16607] bond0 (unregistering): Released all slaves [ 386.435286][T16633] netlink: 'syz.1.2686': attribute type 10 has an invalid length. [ 386.482294][T16636] lo speed is unknown, defaulting to 1000 [ 387.231279][T16656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2693'. [ 389.964672][ T4988] udevd[4988]: worker [6905] /devices/virtual/block/nbd2 is taking a long time [ 392.777976][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 400.768984][ T4938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 400.777420][ T4938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 400.788262][ T4938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 400.796571][ T4938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 400.810121][ T4938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 401.066419][T16674] lo speed is unknown, defaulting to 1000 [ 401.288773][T16674] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.295997][T16674] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.303343][T16674] bridge_slave_0: entered allmulticast mode [ 401.310659][T16674] bridge_slave_0: entered promiscuous mode [ 401.319286][T16674] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.326482][T16674] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.333856][T16674] bridge_slave_1: entered allmulticast mode [ 401.341815][T16674] bridge_slave_1: entered promiscuous mode [ 401.373297][T16674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.385641][T16674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.418564][T16674] team0: Port device team_slave_0 added [ 401.426477][T16674] team0: Port device team_slave_1 added [ 401.455390][T16674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.462874][T16674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.489326][T16674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.505305][T16674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.512492][T16674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.538672][T16674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.589294][T16674] hsr_slave_0: entered promiscuous mode [ 401.599322][T16674] hsr_slave_1: entered promiscuous mode [ 401.605714][T16674] debugfs: 'hsr0' already exists in 'hsr' [ 401.611756][T16674] Cannot create hsr debugfs directory [ 401.943708][ T4938] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 401.965829][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 401.979815][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 401.991601][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 401.994474][ T4938] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 402.002104][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 402.019950][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 402.047545][ T4938] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 402.060275][ T4938] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 402.074556][ T4938] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 402.416539][T16694] lo speed is unknown, defaulting to 1000 [ 402.499557][T16693] lo speed is unknown, defaulting to 1000 [ 402.857981][ T4938] Bluetooth: hci5: command tx timeout [ 402.887367][T16694] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.897441][T16694] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.905061][T16694] bridge_slave_0: entered allmulticast mode [ 402.915679][T16694] bridge_slave_0: entered promiscuous mode [ 402.936636][ T5624] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 402.945528][T16694] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.954876][T16694] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.962735][T16694] bridge_slave_1: entered allmulticast mode [ 402.971236][T16694] bridge_slave_1: entered promiscuous mode [ 402.973479][ T5624] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 402.985446][ T5624] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 402.994175][ T5624] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 403.002156][ T5624] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 403.106707][T16694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.156651][T16694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.184238][T16693] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.191864][T16693] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.199173][T16693] bridge_slave_0: entered allmulticast mode [ 403.206999][T16693] bridge_slave_0: entered promiscuous mode [ 403.230913][T16693] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.238887][T16693] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.246532][T16693] bridge_slave_1: entered allmulticast mode [ 403.254635][T16693] bridge_slave_1: entered promiscuous mode [ 403.264768][T16694] team0: Port device team_slave_0 added [ 403.291502][T16694] team0: Port device team_slave_1 added [ 403.337040][T16693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.350735][T16693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.360591][T16694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.368223][T16694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.395105][T16694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.445159][T16694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.454675][T16694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.481366][T16694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.505904][T16693] team0: Port device team_slave_0 added [ 403.517426][T16693] team0: Port device team_slave_1 added [ 403.594814][T16694] hsr_slave_0: entered promiscuous mode [ 403.601258][T16694] hsr_slave_1: entered promiscuous mode [ 403.607829][T16694] debugfs: 'hsr0' already exists in 'hsr' [ 403.613636][T16694] Cannot create hsr debugfs directory [ 403.621348][T16693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.628411][T16693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.654423][T16693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.677010][T16693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.684576][T16693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.711104][T16693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.881187][ T5624] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 403.898395][T16693] hsr_slave_0: entered promiscuous mode [ 403.906123][ T5624] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 403.906442][T16693] hsr_slave_1: entered promiscuous mode [ 403.920032][ T5624] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 403.923791][T16693] debugfs: 'hsr0' already exists in 'hsr' [ 403.933172][T16693] Cannot create hsr debugfs directory [ 403.940200][ T5624] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 403.951968][ T5624] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 403.970892][T16725] lo speed is unknown, defaulting to 1000 [ 404.058177][ T4938] Bluetooth: hci6: command tx timeout [ 404.138294][ T4938] Bluetooth: hci7: command tx timeout [ 404.318496][ T1607] block nbd2: Possible stuck request ffff888027117000: control (read@0,1024B). Runtime 120 seconds [ 404.334000][ T1607] block nbd2: Possible stuck request ffff8880271171c0: control (read@1024,1024B). Runtime 120 seconds [ 404.345526][ T1607] block nbd2: Possible stuck request ffff888027117380: control (read@2048,1024B). Runtime 120 seconds [ 404.356669][ T1607] block nbd2: Possible stuck request ffff888027117540: control (read@3072,1024B). Runtime 120 seconds [ 404.596520][T16739] lo speed is unknown, defaulting to 1000 [ 404.738693][T16725] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.745985][T16725] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.754015][T16725] bridge_slave_0: entered allmulticast mode [ 404.761852][T16725] bridge_slave_0: entered promiscuous mode [ 404.773890][T16725] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.781934][T16725] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.789557][T16725] bridge_slave_1: entered allmulticast mode [ 404.796838][T16725] bridge_slave_1: entered promiscuous mode [ 404.830291][T16725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.848173][T16725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.900856][T16725] team0: Port device team_slave_0 added [ 404.916980][T16725] team0: Port device team_slave_1 added [ 404.948090][ T4938] Bluetooth: hci5: command tx timeout [ 404.972791][T16725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.980063][T16725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.007576][T16725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.024602][T16725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.032871][ T4938] Bluetooth: hci8: command tx timeout [ 405.042453][T16725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.069054][T16725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.133938][T16725] hsr_slave_0: entered promiscuous mode [ 405.141179][T16725] hsr_slave_1: entered promiscuous mode [ 405.147408][T16725] debugfs: 'hsr0' already exists in 'hsr' [ 405.153808][T16725] Cannot create hsr debugfs directory [ 405.261345][T16739] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.268775][T16739] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.275971][T16739] bridge_slave_0: entered allmulticast mode [ 405.283963][T16739] bridge_slave_0: entered promiscuous mode [ 405.303755][T16739] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.311011][T16739] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.318421][T16739] bridge_slave_1: entered allmulticast mode [ 405.325669][T16739] bridge_slave_1: entered promiscuous mode [ 405.376138][T16739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.394963][T16739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.467270][T16739] team0: Port device team_slave_0 added [ 405.482184][T16739] team0: Port device team_slave_1 added [ 405.522272][T16739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.529803][T16739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.556236][T16739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.583821][T16739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.591134][T16739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.617619][T16739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.699726][T16739] hsr_slave_0: entered promiscuous mode [ 405.706178][T16739] hsr_slave_1: entered promiscuous mode [ 405.712804][T16739] debugfs: 'hsr0' already exists in 'hsr' [ 405.718680][T16739] Cannot create hsr debugfs directory [ 405.978910][ T4938] Bluetooth: hci9: command tx timeout [ 406.138470][ T4938] Bluetooth: hci6: command tx timeout [ 406.218405][ T5624] Bluetooth: hci7: command tx timeout [ 407.018269][ T4938] Bluetooth: hci5: command tx timeout [ 407.098328][ T4938] Bluetooth: hci8: command tx timeout [ 408.058320][ T4938] Bluetooth: hci9: command tx timeout [ 408.218527][ T4938] Bluetooth: hci6: command tx timeout [ 408.298480][ T4938] Bluetooth: hci7: command tx timeout [ 409.097874][ T4938] Bluetooth: hci5: command tx timeout [ 409.177951][ T4938] Bluetooth: hci8: command tx timeout [ 410.138322][ T4938] Bluetooth: hci9: command tx timeout [ 410.298242][ T4938] Bluetooth: hci6: command tx timeout [ 410.378253][ T4938] Bluetooth: hci7: command tx timeout [ 411.257945][ T4938] Bluetooth: hci8: command tx timeout [ 412.217900][ T4938] Bluetooth: hci9: command tx timeout [ 424.137907][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 434.378784][ T1607] block nbd2: Possible stuck request ffff888027117000: control (read@0,1024B). Runtime 150 seconds [ 434.389883][ T1607] block nbd2: Possible stuck request ffff8880271171c0: control (read@1024,1024B). Runtime 150 seconds [ 434.401157][ T1607] block nbd2: Possible stuck request ffff888027117380: control (read@2048,1024B). Runtime 150 seconds [ 434.412915][ T1607] block nbd2: Possible stuck request ffff888027117540: control (read@3072,1024B). Runtime 150 seconds [ 460.843065][ T5624] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 460.853202][ T5624] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 460.869884][ T5624] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 460.880258][ T5624] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 460.890256][ T5624] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 461.147558][T16768] lo speed is unknown, defaulting to 1000 [ 461.379968][T16768] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.387188][T16768] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.394660][T16768] bridge_slave_0: entered allmulticast mode [ 461.402285][T16768] bridge_slave_0: entered promiscuous mode [ 461.410767][T16768] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.418404][T16768] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.425632][T16768] bridge_slave_1: entered allmulticast mode [ 461.433515][T16768] bridge_slave_1: entered promiscuous mode [ 461.464778][T16768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.476804][T16768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.510210][T16768] team0: Port device team_slave_0 added [ 461.518595][T16768] team0: Port device team_slave_1 added [ 461.547390][T16768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.554464][T16768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.580738][T16768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.593190][T16768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.600675][T16768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.626968][T16768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.673357][T16768] hsr_slave_0: entered promiscuous mode [ 461.680103][T16768] hsr_slave_1: entered promiscuous mode [ 461.686263][T16768] debugfs: 'hsr0' already exists in 'hsr' [ 461.692287][T16768] Cannot create hsr debugfs directory [ 461.973207][ T5624] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 461.992374][ T5624] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 462.000784][ T5624] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 462.009120][ T5624] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 462.018623][ T5624] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 462.065541][ T4938] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 462.086854][ T4938] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 462.100866][ T4938] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 462.113914][ T4938] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 462.122536][ T4938] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 462.616493][T16787] lo speed is unknown, defaulting to 1000 [ 462.677440][T16789] lo speed is unknown, defaulting to 1000 [ 462.950484][ T5624] Bluetooth: hci10: command tx timeout [ 463.026102][ T4938] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 463.042810][ T4938] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 463.051567][ T4938] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 463.062652][ T4938] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 463.070729][ T4938] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 463.249309][T16789] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.256656][T16789] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.264851][T16789] bridge_slave_0: entered allmulticast mode [ 463.273555][T16789] bridge_slave_0: entered promiscuous mode [ 463.298176][T16789] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.306627][T16789] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.314472][T16789] bridge_slave_1: entered allmulticast mode [ 463.322929][T16789] bridge_slave_1: entered promiscuous mode [ 463.331510][T16787] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.339605][T16787] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.346871][T16787] bridge_slave_0: entered allmulticast mode [ 463.355582][T16787] bridge_slave_0: entered promiscuous mode [ 463.393990][T16787] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.401592][T16787] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.410566][T16787] bridge_slave_1: entered allmulticast mode [ 463.422166][T16787] bridge_slave_1: entered promiscuous mode [ 463.450558][T16789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.482385][T16787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.496457][T16789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.521321][T16787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.552548][T16789] team0: Port device team_slave_0 added [ 463.597802][T16789] team0: Port device team_slave_1 added [ 463.625862][T16787] team0: Port device team_slave_0 added [ 463.635617][T16787] team0: Port device team_slave_1 added [ 463.681960][T16789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.689658][T16789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.715826][T16789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.733377][T16787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.741006][T16787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.767692][T16787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.780394][T16787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.787493][T16787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.814455][T16787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.826938][T16789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.834477][T16789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.861371][T16789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.882409][T16816] lo speed is unknown, defaulting to 1000 [ 464.010622][T16787] hsr_slave_0: entered promiscuous mode [ 464.018941][T16787] hsr_slave_1: entered promiscuous mode [ 464.025452][T16787] debugfs: 'hsr0' already exists in 'hsr' [ 464.031644][T16787] Cannot create hsr debugfs directory [ 464.058121][ T5624] Bluetooth: hci11: command tx timeout [ 464.071834][ T5624] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 464.089056][T16789] hsr_slave_0: entered promiscuous mode [ 464.089373][ T5624] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 464.100527][T16789] hsr_slave_1: entered promiscuous mode [ 464.108914][T16789] debugfs: 'hsr0' already exists in 'hsr' [ 464.112834][ T5624] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 464.114710][T16789] Cannot create hsr debugfs directory [ 464.126781][ T5624] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 464.135478][ T5624] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 464.142722][ T5625] Bluetooth: hci12: command tx timeout [ 464.458359][ T1607] block nbd2: Possible stuck request ffff888027117000: control (read@0,1024B). Runtime 180 seconds [ 464.470846][ T1607] block nbd2: Possible stuck request ffff8880271171c0: control (read@1024,1024B). Runtime 180 seconds [ 464.483101][ T1607] block nbd2: Possible stuck request ffff888027117380: control (read@2048,1024B). Runtime 180 seconds [ 464.494861][ T1607] block nbd2: Possible stuck request ffff888027117540: control (read@3072,1024B). Runtime 180 seconds [ 464.725505][T16833] lo speed is unknown, defaulting to 1000 [ 464.876651][T16816] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.884845][T16816] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.892518][T16816] bridge_slave_0: entered allmulticast mode [ 464.900632][T16816] bridge_slave_0: entered promiscuous mode [ 464.920166][T16816] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.928666][T16816] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.935892][T16816] bridge_slave_1: entered allmulticast mode [ 464.944427][T16816] bridge_slave_1: entered promiscuous mode [ 465.023335][ T5624] Bluetooth: hci10: command tx timeout [ 465.050772][T16816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.063988][T16816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.098900][ T5624] Bluetooth: hci13: command tx timeout [ 465.137304][T16816] team0: Port device team_slave_0 added [ 465.146705][T16816] team0: Port device team_slave_1 added [ 465.226261][T16816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.233357][T16816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.261039][T16816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.279560][T16816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.286907][T16816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.313504][T16816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.479583][T16816] hsr_slave_0: entered promiscuous mode [ 465.486045][T16816] hsr_slave_1: entered promiscuous mode [ 465.493919][T16816] debugfs: 'hsr0' already exists in 'hsr' [ 465.501023][T16816] Cannot create hsr debugfs directory [ 465.508302][T16833] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.516203][T16833] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.524065][T16833] bridge_slave_0: entered allmulticast mode [ 465.532180][T16833] bridge_slave_0: entered promiscuous mode [ 465.541059][T16833] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.549158][T16833] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.556362][T16833] bridge_slave_1: entered allmulticast mode [ 465.564681][T16833] bridge_slave_1: entered promiscuous mode [ 465.628176][T16833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.652315][T16833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.715404][T16833] team0: Port device team_slave_0 added [ 465.729648][T16833] team0: Port device team_slave_1 added [ 465.802713][T16833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.810256][T16833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.836943][T16833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.859975][T16833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.867001][T16833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.893481][T16833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.980786][T16833] hsr_slave_0: entered promiscuous mode [ 465.987548][T16833] hsr_slave_1: entered promiscuous mode [ 465.994906][T16833] debugfs: 'hsr0' already exists in 'hsr' [ 466.001106][T16833] Cannot create hsr debugfs directory [ 466.138235][ T5624] Bluetooth: hci11: command tx timeout [ 466.218398][ T5624] Bluetooth: hci14: command tx timeout [ 466.220917][ T4938] Bluetooth: hci12: command tx timeout [ 467.097867][ T5624] Bluetooth: hci10: command tx timeout [ 467.178414][ T5624] Bluetooth: hci13: command tx timeout [ 468.218329][ T5624] Bluetooth: hci11: command tx timeout [ 468.298037][ T5624] Bluetooth: hci14: command tx timeout [ 468.298049][ T4938] Bluetooth: hci12: command tx timeout [ 469.177897][ T5624] Bluetooth: hci10: command tx timeout [ 469.258448][ T5624] Bluetooth: hci13: command tx timeout [ 469.785805][ T4988] udevd[4988]: worker [6905] /devices/virtual/block/nbd2 timeout; kill it [ 469.794570][ T4988] udevd[4988]: seq 17620 '/devices/virtual/block/nbd2' killed [ 470.298585][ T5624] Bluetooth: hci11: command tx timeout [ 470.377904][ T4938] Bluetooth: hci12: command tx timeout [ 470.382636][ T5624] Bluetooth: hci14: command tx timeout [ 471.348147][ T5624] Bluetooth: hci13: command tx timeout [ 472.458163][ T5624] Bluetooth: hci14: command tx timeout [ 491.337925][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 494.541763][ T1607] block nbd2: Possible stuck request ffff888027117000: control (read@0,1024B). Runtime 210 seconds [ 494.553474][ T1607] block nbd2: Possible stuck request ffff8880271171c0: control (read@1024,1024B). Runtime 210 seconds [ 494.564792][ T1607] block nbd2: Possible stuck request ffff888027117380: control (read@2048,1024B). Runtime 210 seconds [ 494.576382][ T1607] block nbd2: Possible stuck request ffff888027117540: control (read@3072,1024B). Runtime 210 seconds [ 501.579186][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 503.657956][ T4938] Bluetooth: hci4: command 0x0406 tx timeout [ 520.930362][ T4938] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 520.945851][ T4938] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 520.954271][ T4938] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 520.963937][ T4938] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 520.972133][ T4938] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 521.239731][T16863] lo speed is unknown, defaulting to 1000 [ 521.469670][T16863] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.476909][T16863] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.484524][T16863] bridge_slave_0: entered allmulticast mode [ 521.492088][T16863] bridge_slave_0: entered promiscuous mode [ 521.501218][T16863] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.508746][T16863] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.515974][T16863] bridge_slave_1: entered allmulticast mode [ 521.523548][T16863] bridge_slave_1: entered promiscuous mode [ 521.554855][T16863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.567144][T16863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.600469][T16863] team0: Port device team_slave_0 added [ 521.609185][T16863] team0: Port device team_slave_1 added [ 521.638350][T16863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.645371][T16863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.672089][T16863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.684812][T16863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.692189][T16863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.718388][T16863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.764577][T16863] hsr_slave_0: entered promiscuous mode [ 521.771288][T16863] hsr_slave_1: entered promiscuous mode [ 521.777479][T16863] debugfs: 'hsr0' already exists in 'hsr' [ 521.783423][T16863] Cannot create hsr debugfs directory [ 522.032080][ T5624] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 522.045851][ T5624] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 522.068642][ T5631] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 522.082830][ T5631] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 522.093946][ T5631] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 522.127767][ T4938] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 522.154302][ T4938] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 522.164937][ T4938] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 522.174885][ T4938] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 522.183516][ T4938] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 522.639439][T16882] lo speed is unknown, defaulting to 1000 [ 522.809695][T16886] lo speed is unknown, defaulting to 1000 [ 523.018102][T16885] Bluetooth: hci15: command tx timeout [ 523.030828][T16882] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.038405][T16882] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.045704][T16882] bridge_slave_0: entered allmulticast mode [ 523.054236][T16882] bridge_slave_0: entered promiscuous mode [ 523.064040][T16882] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.071939][T16882] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.079723][T16882] bridge_slave_1: entered allmulticast mode [ 523.087065][T16882] bridge_slave_1: entered promiscuous mode [ 523.136385][T16882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.151623][T16882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.208546][T16882] team0: Port device team_slave_0 added [ 523.228290][T16882] team0: Port device team_slave_1 added [ 523.281738][T16882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.288840][T16882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.315024][T16882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.328626][T16882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.335618][T16882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.362677][T16882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.423783][T16886] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.431795][T16886] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.440001][T16886] bridge_slave_0: entered allmulticast mode [ 523.449491][T16886] bridge_slave_0: entered promiscuous mode [ 523.483476][T16886] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.492410][T16886] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.502511][T16886] bridge_slave_1: entered allmulticast mode [ 523.516130][T16886] bridge_slave_1: entered promiscuous mode [ 523.559735][ T4938] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 523.570519][ T4938] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 523.588547][ T4938] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 523.591669][T16882] hsr_slave_0: entered promiscuous mode [ 523.604226][T16882] hsr_slave_1: entered promiscuous mode [ 523.612390][ T4938] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 523.613862][T16882] debugfs: 'hsr0' already exists in 'hsr' [ 523.625940][T16882] Cannot create hsr debugfs directory [ 523.633363][ T4938] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 523.669288][T16886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.682094][T16886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.775932][T16886] team0: Port device team_slave_0 added [ 523.784874][T16886] team0: Port device team_slave_1 added [ 523.852026][T16886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.859728][T16886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.886062][T16886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.914130][T16886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.922148][T16886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.948941][T16886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.081236][T16886] hsr_slave_0: entered promiscuous mode [ 524.090004][T16886] hsr_slave_1: entered promiscuous mode [ 524.098210][T16886] debugfs: 'hsr0' already exists in 'hsr' [ 524.104075][T16886] Cannot create hsr debugfs directory [ 524.140375][T16885] Bluetooth: hci5: command 0x0406 tx timeout [ 524.146552][ T4938] Bluetooth: hci6: command 0x0406 tx timeout [ 524.218378][ T5624] Bluetooth: hci17: command tx timeout [ 524.218588][ T5625] Bluetooth: hci16: command tx timeout [ 524.334180][T16919] lo speed is unknown, defaulting to 1000 [ 524.508627][ T5624] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 524.523767][ T5624] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 524.532976][ T5624] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 524.543041][ T5624] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 524.552583][ T5624] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 524.626121][ T1607] block nbd2: Possible stuck request ffff888027117000: control (read@0,1024B). Runtime 240 seconds [ 524.638913][ T1607] block nbd2: Possible stuck request ffff8880271171c0: control (read@1024,1024B). Runtime 240 seconds [ 524.663463][ T1607] block nbd2: Possible stuck request ffff888027117380: control (read@2048,1024B). Runtime 240 seconds [ 524.674796][ T1607] block nbd2: Possible stuck request ffff888027117540: control (read@3072,1024B). Runtime 240 seconds [ 525.082450][T16919] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.090065][T16919] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.097279][T16919] bridge_slave_0: entered allmulticast mode [ 525.105420][T16919] bridge_slave_0: entered promiscuous mode [ 525.108761][ T5625] Bluetooth: hci15: command tx timeout [ 525.117251][T16919] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.125962][T16919] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.134972][T16919] bridge_slave_1: entered allmulticast mode [ 525.142791][T16919] bridge_slave_1: entered promiscuous mode [ 525.179447][T16931] lo speed is unknown, defaulting to 1000 [ 525.202794][T16919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.221171][T16919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.281301][T16919] team0: Port device team_slave_0 added [ 525.293511][T16919] team0: Port device team_slave_1 added [ 525.336157][T16919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.349198][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.375503][T16919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.393378][T16919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.400551][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.427848][T16919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.566121][T16919] hsr_slave_0: entered promiscuous mode [ 525.572845][T16919] hsr_slave_1: entered promiscuous mode [ 525.579803][T16919] debugfs: 'hsr0' already exists in 'hsr' [ 525.585594][T16919] Cannot create hsr debugfs directory [ 525.657871][ T5625] Bluetooth: hci18: command tx timeout [ 525.866116][T16931] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.874296][T16931] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.882104][T16931] bridge_slave_0: entered allmulticast mode [ 525.890007][T16931] bridge_slave_0: entered promiscuous mode [ 525.920240][T16931] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.927509][T16931] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.935061][T16931] bridge_slave_1: entered allmulticast mode [ 525.942775][T16931] bridge_slave_1: entered promiscuous mode [ 525.990166][T16931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.002342][T16931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.045937][T16931] team0: Port device team_slave_0 added [ 526.054104][T16931] team0: Port device team_slave_1 added [ 526.084492][T16931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.091803][T16931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.118307][T16931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.131175][T16931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.138898][T16931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.165089][T16931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.224145][T16931] hsr_slave_0: entered promiscuous mode [ 526.231219][T16931] hsr_slave_1: entered promiscuous mode [ 526.237465][T16931] debugfs: 'hsr0' already exists in 'hsr' [ 526.243886][T16931] Cannot create hsr debugfs directory [ 526.299622][ T5625] Bluetooth: hci16: command tx timeout [ 526.306320][ T5624] Bluetooth: hci17: command tx timeout [ 526.618173][ T5625] Bluetooth: hci19: command tx timeout [ 527.179999][ T4938] Bluetooth: hci15: command tx timeout [ 527.737927][ T5624] Bluetooth: hci18: command tx timeout [ 528.378336][ T5624] Bluetooth: hci16: command tx timeout [ 528.378349][T16885] Bluetooth: hci17: command tx timeout [ 528.698383][T16885] Bluetooth: hci19: command tx timeout [ 529.258042][T16885] Bluetooth: hci7: command 0x0406 tx timeout [ 529.263050][ T5624] Bluetooth: hci15: command tx timeout [ 529.277476][T16885] Bluetooth: hci9: command 0x0406 tx timeout [ 529.284442][T16954] Bluetooth: hci8: command 0x0406 tx timeout [ 529.818230][ T5625] Bluetooth: hci18: command tx timeout [ 530.458052][ T5625] Bluetooth: hci16: command tx timeout [ 530.458368][ T4938] Bluetooth: hci17: command tx timeout [ 530.778314][ T4938] Bluetooth: hci19: command tx timeout [ 531.897965][ T4938] Bluetooth: hci18: command tx timeout [ 532.857910][ T4938] Bluetooth: hci19: command tx timeout [ 532.938842][ T30] INFO: task syz.2.2675:16583 blocked for more than 143 seconds. [ 532.946873][ T30] Not tainted syzkaller #0 [ 532.952198][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 532.961051][ T30] task:syz.2.2675 state:D stack:26376 pid:16583 tgid:16581 ppid:5620 task_flags:0x480140 flags:0x00080002 [ 532.973376][ T30] Call Trace: [ 532.976781][ T30] [ 532.979946][ T30] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 532.984718][ T30] ? __lock_acquire+0x683/0x2cf0 [ 532.990052][ T30] ? __pfx___schedule+0x10/0x10 [ 532.995536][ T30] ? schedule+0x90/0x2b0 [ 533.000838][ T30] schedule+0x164/0x2b0 [ 533.005429][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 533.011347][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 533.017483][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 533.024838][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 533.031578][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 533.038149][ T30] nbd_set_size+0x454/0x680 [ 533.042818][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 533.048238][ T30] ? nla_memcpy+0x5b/0xc0 [ 533.052787][ T30] nbd_genl_reconfigure+0x7e9/0x1e80 [ 533.058714][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 533.088141][ T30] ? rcu_is_watching+0x15/0xb0 [ 533.093114][ T30] ? trace_kmalloc+0x2a/0xf0 [ 533.107764][ T30] ? __kmalloc_noprof+0x396/0x720 [ 533.124295][ T30] ? __nla_parse+0x40/0x60 [ 533.137746][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 533.156017][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 533.163819][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 533.169614][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 533.175802][ T30] ? __lock_acquire+0x683/0x2cf0 [ 533.181538][ T30] genl_rcv_msg+0x614/0x7a0 [ 533.186119][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.191354][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 533.197168][ T30] netlink_rcv_skb+0x226/0x4a0 [ 533.202146][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.207312][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.213030][ T30] ? down_read+0x2be/0x330 [ 533.217842][ T30] genl_rcv+0x28/0x40 [ 533.221980][ T30] netlink_unicast+0x7bb/0x940 [ 533.226777][ T30] netlink_sendmsg+0x813/0xb40 [ 533.231852][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.237206][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 533.242461][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.247900][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 533.253080][ T30] ____sys_sendmsg+0x54e/0x850 [ 533.258171][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.263526][ T30] ? import_iovec+0x73/0xa0 [ 533.268391][ T30] ___sys_sendmsg+0x2a5/0x360 [ 533.273138][ T30] ? __lock_acquire+0x683/0x2cf0 [ 533.278356][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.283645][ T30] ? futex_wake+0x51b/0x5f0 [ 533.288658][ T30] ? __fget_files+0x2a/0x420 [ 533.293344][ T30] ? __fget_files+0x3a2/0x420 [ 533.298344][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 533.303348][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.309045][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.315222][ T30] do_syscall_64+0x174/0x580 [ 533.320172][ T30] ? trace_irq_disable+0x3b/0x140 [ 533.325312][ T30] ? clear_bhb_loop+0x40/0x90 [ 533.330183][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.336156][ T30] RIP: 0033:0x7fe528f9de99 [ 533.340785][ T30] RSP: 002b:00007fe529e1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.349412][ T30] RAX: ffffffffffffffda RBX: 00007fe529225fa0 RCX: 00007fe528f9de99 [ 533.357422][ T30] RDX: 0000000004000000 RSI: 0000200000004380 RDI: 0000000000000007 [ 533.365612][ T30] RBP: 00007fe529033eaf R08: 0000000000000000 R09: 0000000000000000 [ 533.373688][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.381949][ T30] R13: 00007fe529226038 R14: 00007fe529225fa0 R15: 00007ffd370d6e08 [ 533.390104][ T30] [ 533.393185][ T30] INFO: task syz.2.2675:16588 blocked for more than 143 seconds. [ 533.401283][ T30] Not tainted syzkaller #0 [ 533.406275][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.415092][ T30] task:syz.2.2675 state:D stack:28808 pid:16588 tgid:16581 ppid:5620 task_flags:0x400040 flags:0x00080002 [ 533.427500][ T30] Call Trace: [ 533.431016][ T30] [ 533.434046][ T30] __schedule+0x17d9/0x56c0 [ 533.438760][ T30] ? __lock_acquire+0x683/0x2cf0 [ 533.443790][ T30] ? __lock_acquire+0x683/0x2cf0 [ 533.449272][ T30] ? unwind_next_frame+0x8f/0x2550 [ 533.454478][ T30] ? __pfx___schedule+0x10/0x10 [ 533.459475][ T30] ? schedule+0x90/0x2b0 [ 533.463782][ T30] schedule+0x164/0x2b0 [ 533.468079][ T30] schedule_preempt_disabled+0x13/0x30 [ 533.473671][ T30] __mutex_lock+0x7bf/0x1550 [ 533.478513][ T30] ? __mutex_lock+0x5d4/0x1550 [ 533.483370][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 533.488200][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 533.493291][ T30] ? stack_trace_save+0xa9/0x100 [ 533.498568][ T30] ? __lock_acquire+0x683/0x2cf0 [ 533.503682][ T30] ? radix_tree_lookup+0x240/0x290 [ 533.509098][ T30] genl_rcv_msg+0x10b/0x7a0 [ 533.513670][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.518902][ T30] ? __lock_acquire+0x683/0x2cf0 [ 533.523918][ T30] netlink_rcv_skb+0x226/0x4a0 [ 533.529079][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.534186][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.539752][ T30] ? down_read+0x2be/0x330 [ 533.544333][ T30] genl_rcv+0x28/0x40 [ 533.548470][ T30] netlink_unicast+0x7bb/0x940 [ 533.553326][ T30] netlink_sendmsg+0x813/0xb40 [ 533.558285][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.563656][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 533.568778][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.574118][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 533.579617][ T30] __sys_sendto+0x408/0x5a0 [ 533.584219][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 533.589465][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 533.595019][ T30] __x64_sys_sendto+0xde/0x100 [ 533.600010][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.606134][ T30] do_syscall_64+0x174/0x580 [ 533.610900][ T30] ? trace_irq_disable+0x3b/0x140 [ 533.616186][ T30] ? clear_bhb_loop+0x40/0x90 [ 533.621128][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.627148][ T30] RIP: 0033:0x7fe528f5e6ce [ 533.631760][ T30] RSP: 002b:00007fe529df9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 533.640356][ T30] RAX: ffffffffffffffda RBX: 00007fe529dfb6c0 RCX: 00007fe528f5e6ce [ 533.648782][ T30] RDX: 0000000000000024 RSI: 00007fe529dfa000 RDI: 0000000000000007 [ 533.656827][ T30] RBP: 0000000000000000 R08: 00007fe529df9f04 R09: 000000000000000c [ 533.665750][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 533.673953][ T30] R13: 00007fe529df9f58 R14: 00007fe529dfa000 R15: 0000000000000000 [ 533.682410][ T30] [ 533.685577][ T30] INFO: task syz.2.2675:16593 blocked for more than 144 seconds. [ 533.696020][ T30] Not tainted syzkaller #0 [ 533.701456][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.710537][ T30] task:syz.2.2675 state:D stack:28752 pid:16593 tgid:16581 ppid:5620 task_flags:0x400140 flags:0x00080002 [ 533.722684][ T30] Call Trace: [ 533.726012][ T30] [ 533.729032][ T30] __schedule+0x17d9/0x56c0 [ 533.733604][ T30] ? __lock_acquire+0x683/0x2cf0 [ 533.739293][ T30] ? __lock_acquire+0x683/0x2cf0 [ 533.744363][ T30] ? unwind_next_frame+0x8f/0x2550 [ 533.749602][ T30] ? __pfx___schedule+0x10/0x10 [ 533.754511][ T30] ? schedule+0x90/0x2b0 [ 533.759032][ T30] schedule+0x164/0x2b0 [ 533.763261][ T30] schedule_preempt_disabled+0x13/0x30 [ 533.768920][ T30] __mutex_lock+0x7bf/0x1550 [ 533.773564][ T30] ? __mutex_lock+0x5d4/0x1550 [ 533.778516][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 533.783257][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 533.788468][ T30] ? stack_trace_save+0xa9/0x100 [ 533.793467][ T30] ? __lock_acquire+0x683/0x2cf0 [ 533.798622][ T30] ? radix_tree_lookup+0x240/0x290 [ 533.803818][ T30] genl_rcv_msg+0x10b/0x7a0 [ 533.808425][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.813506][ T30] ? __lock_acquire+0x683/0x2cf0 [ 533.818723][ T30] netlink_rcv_skb+0x226/0x4a0 [ 533.823568][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.828775][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.834120][ T30] ? down_read+0x2be/0x330 [ 533.838722][ T30] genl_rcv+0x28/0x40 [ 533.842779][ T30] netlink_unicast+0x7bb/0x940 [ 533.847635][ T30] netlink_sendmsg+0x813/0xb40 [ 533.852448][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.857898][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 533.862922][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.868429][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 533.873610][ T30] __sys_sendto+0x408/0x5a0 [ 533.878313][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 533.883433][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 533.888826][ T30] __x64_sys_sendto+0xde/0x100 [ 533.893633][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.900356][ T30] do_syscall_64+0x174/0x580 [ 533.905019][ T30] ? trace_irq_disable+0x3b/0x140 [ 533.910126][ T30] ? clear_bhb_loop+0x40/0x90 [ 533.914825][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.920874][ T30] RIP: 0033:0x7fe528f5e6ce [ 533.925341][ T30] RSP: 002b:00007fe529dd8e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 533.933842][ T30] RAX: ffffffffffffffda RBX: 00007fe529dda6c0 RCX: 00007fe528f5e6ce [ 533.941946][ T30] RDX: 0000000000000024 RSI: 00007fe529dd9000 RDI: 0000000000000007 [ 533.950029][ T30] RBP: 0000000000000000 R08: 00007fe529dd8f04 R09: 000000000000000c [ 533.958169][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 533.966245][ T30] R13: 00007fe529dd8f58 R14: 00007fe529dd9000 R15: 0000000000000000 [ 533.974344][ T30] [ 533.977423][ T30] INFO: task syz.1.2686:16626 blocked for more than 144 seconds. [ 533.987287][ T30] Not tainted syzkaller #0 [ 533.993086][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 534.002106][ T30] task:syz.1.2686 state:D stack:24256 pid:16626 tgid:16624 ppid:5623 task_flags:0x400140 flags:0x00080002 [ 534.014192][ T30] Call Trace: [ 534.017500][ T30] [ 534.021017][ T30] __schedule+0x17d9/0x56c0 [ 534.025588][ T30] ? __lock_acquire+0x683/0x2cf0 [ 534.030676][ T30] ? __lock_acquire+0x683/0x2cf0 [ 534.035728][ T30] ? __pfx___schedule+0x10/0x10 [ 534.040756][ T30] ? schedule+0x90/0x2b0 [ 534.045075][ T30] schedule+0x164/0x2b0 [ 534.049417][ T30] schedule_preempt_disabled+0x13/0x30 [ 534.054954][ T30] __mutex_lock+0x7bf/0x1550 [ 534.060619][ T30] ? __mutex_lock+0x5d4/0x1550 [ 534.065488][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 534.070372][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 534.075495][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 534.080817][ T30] ? radix_tree_lookup+0x240/0x290 [ 534.086008][ T30] genl_rcv_msg+0x10b/0x7a0 [ 534.090693][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.095784][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 534.101462][ T30] netlink_rcv_skb+0x226/0x4a0 [ 534.106297][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.111504][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 534.116873][ T30] ? down_read+0x2be/0x330 [ 534.121481][ T30] genl_rcv+0x28/0x40 [ 534.125562][ T30] netlink_unicast+0x7bb/0x940 [ 534.130511][ T30] netlink_sendmsg+0x813/0xb40 [ 534.135351][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.141258][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 534.146265][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.151762][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 534.156858][ T30] __sys_sendto+0x408/0x5a0 [ 534.161650][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 534.166778][ T30] ? errseq_sample+0x40/0x70 [ 534.171714][ T30] ? fd_install+0x94/0x3d0 [ 534.176233][ T30] ? fd_install+0x306/0x3d0 [ 534.180832][ T30] __x64_sys_sendto+0xde/0x100 [ 534.185683][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.192010][ T30] do_syscall_64+0x174/0x580 [ 534.196689][ T30] ? trace_irq_disable+0x3b/0x140 [ 534.201948][ T30] ? clear_bhb_loop+0x40/0x90 [ 534.206707][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.212977][ T30] RIP: 0033:0x7ff56115e6ce [ 534.217470][ T30] RSP: 002b:00007ff56200fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 534.226956][ T30] RAX: ffffffffffffffda RBX: 00007ff5620116c0 RCX: 00007ff56115e6ce [ 534.235166][ T30] RDX: 0000000000000020 RSI: 00007ff562010000 RDI: 0000000000000009 [ 534.243334][ T30] RBP: 0000000000000000 R08: 00007ff56200ff04 R09: 000000000000000c [ 534.251540][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 534.259797][ T30] R13: 00007ff56200ff58 R14: 00007ff562010000 R15: 0000000000000000 [ 534.268252][ T30] [ 534.271379][ T30] INFO: task syz.1.2686:16633 blocked for more than 144 seconds. [ 534.279888][ T30] Not tainted syzkaller #0 [ 534.284876][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 534.294232][ T30] task:syz.1.2686 state:D stack:25704 pid:16633 tgid:16624 ppid:5623 task_flags:0x400140 flags:0x00080002 [ 534.306689][ T30] Call Trace: [ 534.310109][ T30] [ 534.313075][ T30] __schedule+0x17d9/0x56c0 [ 534.318232][ T30] ? __lock_acquire+0x683/0x2cf0 [ 534.323278][ T30] ? __lock_acquire+0x683/0x2cf0 [ 534.328633][ T30] ? __pfx___schedule+0x10/0x10 [ 534.333565][ T30] ? schedule+0x90/0x2b0 [ 534.337953][ T30] schedule+0x164/0x2b0 [ 534.342181][ T30] schedule_preempt_disabled+0x13/0x30 [ 534.347752][ T30] __mutex_lock+0x7bf/0x1550 [ 534.352397][ T30] ? __mutex_lock+0x5d4/0x1550 [ 534.357182][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 534.362033][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 534.367159][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 534.372488][ T30] ? radix_tree_lookup+0x240/0x290 [ 534.377773][ T30] genl_rcv_msg+0x10b/0x7a0 [ 534.382366][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.387433][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 534.393135][ T30] netlink_rcv_skb+0x226/0x4a0 [ 534.398273][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.403360][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 534.408786][ T30] ? down_read+0x2be/0x330 [ 534.413265][ T30] genl_rcv+0x28/0x40 [ 534.417277][ T30] netlink_unicast+0x7bb/0x940 [ 534.422179][ T30] netlink_sendmsg+0x813/0xb40 [ 534.427027][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.432658][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 534.437810][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.443180][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 534.448357][ T30] __sys_sendto+0x408/0x5a0 [ 534.452948][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 534.458462][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 534.463837][ T30] __x64_sys_sendto+0xde/0x100 [ 534.468704][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.474903][ T30] do_syscall_64+0x174/0x580 [ 534.479709][ T30] ? trace_irq_disable+0x3b/0x140 [ 534.484844][ T30] ? clear_bhb_loop+0x40/0x90 [ 534.489717][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.495657][ T30] RIP: 0033:0x7ff56115e6ce [ 534.500175][ T30] RSP: 002b:00007ff561feee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 534.508734][ T30] RAX: ffffffffffffffda RBX: 00007ff561ff06c0 RCX: 00007ff56115e6ce [ 534.516764][ T30] RDX: 0000000000000020 RSI: 00007ff561fef000 RDI: 0000000000000007 [ 534.524928][ T30] RBP: 0000000000000000 R08: 00007ff561feef04 R09: 000000000000000c [ 534.533010][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 534.541266][ T30] R13: 00007ff561feef58 R14: 00007ff561fef000 R15: 0000000000000000 [ 534.549396][ T30] [ 534.552486][ T30] INFO: task syz.1.2686:16641 blocked for more than 144 seconds. [ 534.560588][ T30] Not tainted syzkaller #0 [ 534.565578][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 534.574368][ T30] task:syz.1.2686 state:D stack:27872 pid:16641 tgid:16624 ppid:5623 task_flags:0x400040 flags:0x00080002 [ 534.586413][ T30] Call Trace: [ 534.589921][ T30] [ 534.592895][ T30] __schedule+0x17d9/0x56c0 [ 534.597522][ T30] ? __lock_acquire+0x683/0x2cf0 [ 534.602928][ T30] ? __lock_acquire+0x683/0x2cf0 [ 534.608335][ T30] ? __pfx___schedule+0x10/0x10 [ 534.613288][ T30] ? schedule+0x90/0x2b0 [ 534.617547][ T30] schedule+0x164/0x2b0 [ 534.623209][ T30] schedule_preempt_disabled+0x13/0x30 [ 534.628915][ T30] __mutex_lock+0x7bf/0x1550 [ 534.633580][ T30] ? __mutex_lock+0x5d4/0x1550 [ 534.638643][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 534.643394][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 534.648949][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 534.654116][ T30] ? radix_tree_lookup+0x240/0x290 [ 534.659504][ T30] genl_rcv_msg+0x10b/0x7a0 [ 534.664075][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.669201][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 534.674626][ T30] netlink_rcv_skb+0x226/0x4a0 [ 534.679578][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.684690][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 534.690072][ T30] ? down_read+0x2be/0x330 [ 534.694524][ T30] genl_rcv+0x28/0x40 [ 534.700332][ T30] netlink_unicast+0x7bb/0x940 [ 534.707966][ T30] netlink_sendmsg+0x813/0xb40 [ 534.712786][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.718389][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 534.723394][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.729079][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 534.734175][ T30] __sys_sendto+0x408/0x5a0 [ 534.738839][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 534.743932][ T30] ? errseq_sample+0x40/0x70 [ 534.748649][ T30] ? fd_install+0x94/0x3d0 [ 534.753127][ T30] ? fd_install+0x306/0x3d0 [ 534.757872][ T30] __x64_sys_sendto+0xde/0x100 [ 534.762703][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.769044][ T30] do_syscall_64+0x174/0x580 [ 534.773701][ T30] ? trace_irq_disable+0x3b/0x140 [ 534.779539][ T30] ? clear_bhb_loop+0x40/0x90 [ 534.784298][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.790314][ T30] RIP: 0033:0x7ff56115e6ce [ 534.794795][ T30] RSP: 002b:00007ff561face88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 534.803408][ T30] RAX: ffffffffffffffda RBX: 00007ff561fae6c0 RCX: 00007ff56115e6ce [ 534.811552][ T30] RDX: 0000000000000020 RSI: 00007ff561fad000 RDI: 000000000000000d [ 534.819932][ T30] RBP: 0000000000000000 R08: 00007ff561facf04 R09: 000000000000000c [ 534.828206][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 534.836270][ T30] R13: 00007ff561facf58 R14: 00007ff561fad000 R15: 0000000000000000 [ 534.844666][ T30] [ 534.847984][ T30] INFO: task syz.4.2688:16630 blocked for more than 145 seconds. [ 534.855757][ T30] Not tainted syzkaller #0 [ 534.860866][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 534.869900][ T30] task:syz.4.2688 state:D stack:24616 pid:16630 tgid:16629 ppid:5621 task_flags:0x400140 flags:0x00080002 [ 534.882186][ T30] Call Trace: [ 534.885515][ T30] [ 534.888549][ T30] __schedule+0x17d9/0x56c0 [ 534.893105][ T30] ? __lock_acquire+0x683/0x2cf0 [ 534.898178][ T30] ? __lock_acquire+0x683/0x2cf0 [ 534.903202][ T30] ? __pfx___schedule+0x10/0x10 [ 534.908166][ T30] ? schedule+0x90/0x2b0 [ 534.912454][ T30] schedule+0x164/0x2b0 [ 534.916667][ T30] schedule_preempt_disabled+0x13/0x30 [ 534.922351][ T30] __mutex_lock+0x7bf/0x1550 [ 534.927034][ T30] ? __mutex_lock+0x5d4/0x1550 [ 534.931892][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 534.936608][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 534.942259][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 534.947442][ T30] ? radix_tree_lookup+0x240/0x290 [ 534.952851][ T30] genl_rcv_msg+0x10b/0x7a0 [ 534.957407][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.962683][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 534.968146][ T30] netlink_rcv_skb+0x226/0x4a0 [ 534.972933][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.978176][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 534.983541][ T30] ? down_read+0x2be/0x330 [ 534.988158][ T30] genl_rcv+0x28/0x40 [ 534.992201][ T30] netlink_unicast+0x7bb/0x940 [ 534.996992][ T30] netlink_sendmsg+0x813/0xb40 [ 535.001985][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.007345][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 535.012416][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.018014][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 535.023120][ T30] __sys_sendto+0x408/0x5a0 [ 535.027741][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 535.032833][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 535.038338][ T30] __x64_sys_sendto+0xde/0x100 [ 535.043195][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.049451][ T30] do_syscall_64+0x174/0x580 [ 535.054095][ T30] ? trace_irq_disable+0x3b/0x140 [ 535.059215][ T30] ? clear_bhb_loop+0x40/0x90 [ 535.063941][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.069925][ T30] RIP: 0033:0x7feafc35e6ce [ 535.074455][ T30] RSP: 002b:00007feafd1f3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 535.083028][ T30] RAX: ffffffffffffffda RBX: 00007feafd1f56c0 RCX: 00007feafc35e6ce [ 535.091080][ T30] RDX: 0000000000000020 RSI: 00007feafd1f4000 RDI: 000000000000000c [ 535.099756][ T30] RBP: 0000000000000000 R08: 00007feafd1f3f04 R09: 000000000000000c [ 535.107901][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 535.115926][ T30] R13: 00007feafd1f3f58 R14: 00007feafd1f4000 R15: 0000000000000000 [ 535.124072][ T30] [ 535.127169][ T30] INFO: task syz.4.2688:16634 blocked for more than 145 seconds. [ 535.135040][ T30] Not tainted syzkaller #0 [ 535.140051][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.148787][ T30] task:syz.4.2688 state:D stack:27368 pid:16634 tgid:16629 ppid:5621 task_flags:0x400140 flags:0x00080002 [ 535.160960][ T30] Call Trace: [ 535.164285][ T30] [ 535.167226][ T30] __schedule+0x17d9/0x56c0 [ 535.171853][ T30] ? __lock_acquire+0x683/0x2cf0 [ 535.176851][ T30] ? __lock_acquire+0x683/0x2cf0 [ 535.183412][ T30] ? __pfx___schedule+0x10/0x10 [ 535.188406][ T30] ? schedule+0x90/0x2b0 [ 535.192726][ T30] schedule+0x164/0x2b0 [ 535.196935][ T30] schedule_preempt_disabled+0x13/0x30 [ 535.202485][ T30] __mutex_lock+0x7bf/0x1550 [ 535.207211][ T30] ? __mutex_lock+0x5d4/0x1550 [ 535.212222][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 535.216978][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 535.222121][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 535.227275][ T30] ? radix_tree_lookup+0x240/0x290 [ 535.232485][ T30] genl_rcv_msg+0x10b/0x7a0 [ 535.237032][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.242186][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 535.247701][ T30] netlink_rcv_skb+0x226/0x4a0 [ 535.252520][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.257562][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 535.263299][ T30] ? down_read+0x2be/0x330 [ 535.267822][ T30] genl_rcv+0x28/0x40 [ 535.271842][ T30] netlink_unicast+0x7bb/0x940 [ 535.276632][ T30] netlink_sendmsg+0x813/0xb40 [ 535.281501][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.286836][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 535.291862][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.297190][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 535.302319][ T30] __sys_sendto+0x408/0x5a0 [ 535.306881][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 535.312026][ T30] ? errseq_sample+0x40/0x70 [ 535.316694][ T30] ? fd_install+0x94/0x3d0 [ 535.321474][ T30] ? fd_install+0x306/0x3d0 [ 535.326033][ T30] __x64_sys_sendto+0xde/0x100 [ 535.330903][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.337002][ T30] do_syscall_64+0x174/0x580 [ 535.341985][ T30] ? trace_irq_disable+0x3b/0x140 [ 535.347074][ T30] ? clear_bhb_loop+0x40/0x90 [ 535.351894][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.357895][ T30] RIP: 0033:0x7feafc35e6ce [ 535.362347][ T30] RSP: 002b:00007feafd1d2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 535.370857][ T30] RAX: ffffffffffffffda RBX: 00007feafd1d46c0 RCX: 00007feafc35e6ce [ 535.378963][ T30] RDX: 0000000000000020 RSI: 00007feafd1d3000 RDI: 0000000000000010 [ 535.386971][ T30] RBP: 0000000000000000 R08: 00007feafd1d2f04 R09: 000000000000000c [ 535.395033][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 535.403111][ T30] R13: 00007feafd1d2f58 R14: 00007feafd1d3000 R15: 0000000000000000 [ 535.411189][ T30] [ 535.414265][ T30] INFO: task syz.0.2694:16658 blocked for more than 145 seconds. [ 535.422083][ T30] Not tainted syzkaller #0 [ 535.427043][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.435965][ T30] task:syz.0.2694 state:D stack:25664 pid:16658 tgid:16657 ppid:5630 task_flags:0x400140 flags:0x00080002 [ 535.449367][ T30] Call Trace: [ 535.452716][ T30] [ 535.455775][ T30] __schedule+0x17d9/0x56c0 [ 535.460432][ T30] ? __lock_acquire+0x683/0x2cf0 [ 535.465435][ T30] ? __lock_acquire+0x683/0x2cf0 [ 535.470577][ T30] ? __pfx___schedule+0x10/0x10 [ 535.475481][ T30] ? schedule+0x90/0x2b0 [ 535.479819][ T30] schedule+0x164/0x2b0 [ 535.484046][ T30] schedule_preempt_disabled+0x13/0x30 [ 535.489641][ T30] __mutex_lock+0x7bf/0x1550 [ 535.494309][ T30] ? __mutex_lock+0x5d4/0x1550 [ 535.501733][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 535.506484][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 535.511646][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 535.516830][ T30] ? radix_tree_lookup+0x240/0x290 [ 535.522065][ T30] genl_rcv_msg+0x10b/0x7a0 [ 535.526618][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.531735][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 535.537155][ T30] netlink_rcv_skb+0x226/0x4a0 [ 535.542154][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.547256][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 535.552672][ T30] ? down_read+0x2be/0x330 [ 535.557129][ T30] genl_rcv+0x28/0x40 [ 535.561213][ T30] netlink_unicast+0x7bb/0x940 [ 535.566029][ T30] netlink_sendmsg+0x813/0xb40 [ 535.570941][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.576276][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 535.581432][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.586792][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 535.591983][ T30] __sys_sendto+0x408/0x5a0 [ 535.596740][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 535.602036][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 535.607392][ T30] __x64_sys_sendto+0xde/0x100 [ 535.612281][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.618445][ T30] do_syscall_64+0x174/0x580 [ 535.623060][ T30] ? trace_irq_disable+0x3b/0x140 [ 535.628205][ T30] ? clear_bhb_loop+0x40/0x90 [ 535.632923][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.638908][ T30] RIP: 0033:0x7fc3d495e6ce [ 535.643367][ T30] RSP: 002b:00007fc3d5948e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 535.652027][ T30] RAX: ffffffffffffffda RBX: 00007fc3d594a6c0 RCX: 00007fc3d495e6ce [ 535.660644][ T30] RDX: 0000000000000020 RSI: 00007fc3d5949000 RDI: 0000000000000007 [ 535.668792][ T30] RBP: 0000000000000000 R08: 00007fc3d5948f04 R09: 000000000000000c [ 535.676802][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 535.684870][ T30] R13: 00007fc3d5948f58 R14: 00007fc3d5949000 R15: 0000000000000000 [ 535.692952][ T30] [ 535.696018][ T30] INFO: task syz.3.2698:16668 blocked for more than 146 seconds. [ 535.703897][ T30] Not tainted syzkaller #0 [ 535.708971][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.717732][ T30] task:syz.3.2698 state:D stack:28424 pid:16668 tgid:16667 ppid:5622 task_flags:0x400140 flags:0x00080002 [ 535.729760][ T30] Call Trace: [ 535.733076][ T30] [ 535.736045][ T30] __schedule+0x17d9/0x56c0 [ 535.744867][ T30] ? __lock_acquire+0x683/0x2cf0 [ 535.750128][ T30] ? __lock_acquire+0x683/0x2cf0 [ 535.755124][ T30] ? unwind_next_frame+0x8f/0x2550 [ 535.760453][ T30] ? __pfx___schedule+0x10/0x10 [ 535.765417][ T30] ? schedule+0x90/0x2b0 [ 535.769764][ T30] schedule+0x164/0x2b0 [ 535.773964][ T30] schedule_preempt_disabled+0x13/0x30 [ 535.779507][ T30] __mutex_lock+0x7bf/0x1550 [ 535.784144][ T30] ? __mutex_lock+0x5d4/0x1550 [ 535.788997][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 535.793715][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 535.798855][ T30] ? stack_trace_save+0xa9/0x100 [ 535.803834][ T30] ? __lock_acquire+0x683/0x2cf0 [ 535.808888][ T30] ? radix_tree_lookup+0x240/0x290 [ 535.814042][ T30] genl_rcv_msg+0x10b/0x7a0 [ 535.819214][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.824328][ T30] ? __lock_acquire+0x683/0x2cf0 [ 535.829410][ T30] netlink_rcv_skb+0x226/0x4a0 [ 535.834224][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.839381][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 535.844738][ T30] ? down_read+0x2be/0x330 [ 535.849277][ T30] genl_rcv+0x28/0x40 [ 535.853303][ T30] netlink_unicast+0x7bb/0x940 [ 535.858191][ T30] netlink_sendmsg+0x813/0xb40 [ 535.863021][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.868542][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 535.873543][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.878916][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 535.883979][ T30] __sys_sendto+0x408/0x5a0 [ 535.888604][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 535.893709][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 535.899105][ T30] __x64_sys_sendto+0xde/0x100 [ 535.903922][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.910103][ T30] do_syscall_64+0x174/0x580 [ 535.914737][ T30] ? trace_irq_disable+0x3b/0x140 [ 535.919848][ T30] ? clear_bhb_loop+0x40/0x90 [ 535.924563][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.930546][ T30] RIP: 0033:0x7f690ab5e6ce [ 535.935014][ T30] RSP: 002b:00007f690bb20e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 535.943522][ T30] RAX: ffffffffffffffda RBX: 00007f690bb226c0 RCX: 00007f690ab5e6ce [ 535.951592][ T30] RDX: 0000000000000024 RSI: 00007f690bb21000 RDI: 0000000000000006 [ 535.959656][ T30] RBP: 0000000000000000 R08: 00007f690bb20f04 R09: 000000000000000c [ 535.967722][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 535.975732][ T30] R13: 00007f690bb20f58 R14: 00007f690bb21000 R15: 0000000000000000 [ 535.984122][ T30] [ 535.987189][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 535.996361][ T30] [ 535.996361][ T30] Showing all locks held in the system: [ 536.004205][ T30] 1 lock held by khungtaskd/30: [ 536.009196][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 536.019284][ T30] 2 locks held by getty/5376: [ 536.024102][ T30] #0: ffff888035fe70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 536.034044][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 536.044255][ T30] 1 lock held by udevd/6905: [ 536.048938][ T30] #0: ffff888027056350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 536.058529][ T30] 6 locks held by syz.2.2675/16583: [ 536.063773][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.072081][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.081161][ T30] #2: ffff888027066a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 536.091749][ T30] #3: ffff88802706b528 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 536.101287][ T30] #4: ffff88802706aef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 536.113412][ T30] #5: ffff88802706af28 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 536.125922][ T30] 2 locks held by syz.2.2675/16588: [ 536.131226][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.140130][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.149957][ T30] 2 locks held by syz.2.2675/16593: [ 536.155219][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.163608][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.172688][ T30] 2 locks held by syz.1.2686/16626: [ 536.178284][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.186540][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.195629][ T30] 2 locks held by syz.1.2686/16633: [ 536.201163][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.209876][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.219241][ T30] 2 locks held by syz.1.2686/16641: [ 536.224488][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.232819][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.242308][ T30] 2 locks held by syz.4.2688/16630: [ 536.247694][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.255970][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.265343][ T30] 2 locks held by syz.4.2688/16634: [ 536.271295][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.279822][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.288932][ T30] 2 locks held by syz.0.2694/16658: [ 536.294151][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.302722][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.311993][ T30] 2 locks held by syz.3.2698/16668: [ 536.317238][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.325685][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.334818][ T30] 2 locks held by syz-executor/16674: [ 536.340298][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.348585][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.357858][ T30] 2 locks held by syz-executor/16693: [ 536.363279][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.371647][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.381472][ T30] 2 locks held by syz-executor/16694: [ 536.386906][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.395242][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.404433][ T30] 2 locks held by syz-executor/16725: [ 536.409879][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.418287][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.427343][ T30] 2 locks held by syz-executor/16739: [ 536.432792][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.441160][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.450287][ T30] 2 locks held by syz-executor/16768: [ 536.455680][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.463963][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.473035][ T30] 2 locks held by syz-executor/16787: [ 536.478519][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.486814][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.496157][ T30] 2 locks held by syz-executor/16789: [ 536.501647][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.509933][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.519178][ T30] 2 locks held by syz-executor/16816: [ 536.524610][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.533040][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.542465][ T30] 2 locks held by syz-executor/16833: [ 536.547981][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.556315][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.565466][ T30] 2 locks held by syz-executor/16863: [ 536.570917][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.579189][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.588272][ T30] 2 locks held by syz-executor/16882: [ 536.593664][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.602183][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.611264][ T30] 2 locks held by syz-executor/16886: [ 536.616639][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.625016][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.634107][ T30] 2 locks held by syz-executor/16919: [ 536.639799][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.648107][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.657149][ T30] 2 locks held by syz-executor/16931: [ 536.662642][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.671009][ T30] #1: ffffffff9009c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 536.680147][ T30] [ 536.682532][ T30] ============================================= [ 536.682532][ T30] [ 536.691116][ T30] NMI backtrace for cpu 0 [ 536.691138][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 536.691162][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 536.691173][ T30] Call Trace: [ 536.691181][ T30] [ 536.691190][ T30] dump_stack_lvl+0xe8/0x150 [ 536.691253][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 536.691283][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 536.691319][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 536.691351][ T30] sys_info+0x135/0x170 [ 536.691374][ T30] watchdog+0xfd7/0x1030 [ 536.691417][ T30] ? watchdog+0x1c7/0x1030 [ 536.691452][ T30] kthread+0x388/0x470 [ 536.691535][ T30] ? __pfx_watchdog+0x10/0x10 [ 536.691559][ T30] ? __pfx_kthread+0x10/0x10 [ 536.691591][ T30] ret_from_fork+0x514/0xb70 [ 536.691642][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 536.691674][ T30] ? __switch_to+0xc89/0x1420 [ 536.691704][ T30] ? __pfx_kthread+0x10/0x10 [ 536.691735][ T30] ret_from_fork_asm+0x1a/0x30 [ 536.691775][ T30] [ 536.691784][ T30] Sending NMI from CPU 0 to CPUs 1: [ 536.802452][ C1] NMI backtrace for cpu 1 [ 536.802471][ C1] CPU: 1 UID: 0 PID: 3305 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 536.802494][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 536.802507][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 536.802633][ C1] RIP: 0010:mark_lock+0x9a/0x190 [ 536.802663][ C1] Code: 0e 00 75 13 48 8d 3d f5 3c b8 0e 48 c7 c6 41 35 35 8e 67 48 0f b9 3a 90 31 c9 4c 89 fe 4c 89 f7 b8 01 00 00 00 85 69 60 74 10 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 c7 82 2f 0a cc 49 89 fe 49 89 f7 [ 536.802681][ C1] RSP: 0018:ffffc9000e0a76c0 EFLAGS: 00000006 [ 536.802696][ C1] RAX: 0000000000000001 RBX: 0000000000000009 RCX: ffffffff9414ea88 [ 536.802709][ C1] RDX: 0000000000000008 RSI: ffff88803292ca18 RDI: ffff88803292be00 [ 536.802722][ C1] RBP: 0000000000000200 R08: ffffffff8b95dbaf R09: 0000000000000000 [ 536.802734][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000004 [ 536.802746][ C1] R13: ffff88803292ca18 R14: ffff88803292be00 R15: 0000000000000003 [ 536.802760][ C1] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 536.802775][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.802787][ C1] CR2: 0000559eec0a1ee8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 536.802804][ C1] Call Trace: [ 536.802811][ C1] [ 536.802822][ C1] __lock_acquire+0x683/0x2cf0 [ 536.802856][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 536.802905][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 536.802933][ C1] ? batadv_iv_ogm_schedule+0x41f/0xfc0 [ 536.802958][ C1] lock_acquire+0x106/0x350 [ 536.802989][ C1] ? batadv_iv_ogm_schedule+0x41f/0xfc0 [ 536.803018][ C1] ? batadv_iv_ogm_schedule+0x41f/0xfc0 [ 536.803045][ C1] batadv_iv_ogm_schedule+0x440/0xfc0 [ 536.803070][ C1] ? batadv_iv_ogm_schedule+0x41f/0xfc0 [ 536.803100][ C1] ? batadv_iv_ogm_schedule+0x41f/0xfc0 [ 536.803127][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 536.803154][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 536.803175][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 536.803197][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x622/0x740 [ 536.803224][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 536.803248][ C1] ? rcu_is_watching+0x15/0xb0 [ 536.803278][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 536.803297][ C1] process_scheduled_works+0xa8e/0x14e0 [ 536.803331][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 536.803355][ C1] ? assign_work+0x3cf/0x5d0 [ 536.803377][ C1] worker_thread+0xa47/0xfb0 [ 536.803411][ C1] kthread+0x388/0x470 [ 536.803437][ C1] ? __pfx_worker_thread+0x10/0x10 [ 536.803457][ C1] ? __pfx_kthread+0x10/0x10 [ 536.803482][ C1] ret_from_fork+0x514/0xb70 [ 536.803511][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 536.803536][ C1] ? __switch_to+0xc89/0x1420 [ 536.803560][ C1] ? __pfx_kthread+0x10/0x10 [ 536.803586][ C1] ret_from_fork_asm+0x1a/0x30 [ 536.803611][ C1] [ 537.092854][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 537.099741][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 537.108885][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 537.119228][ T30] Call Trace: [ 537.122513][ T30] [ 537.125451][ T30] vpanic+0x56c/0xa60 [ 537.129452][ T30] ? __pfx___schedule+0x10/0x10 [ 537.134315][ T30] ? __pfx_vpanic+0x10/0x10 [ 537.138833][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 537.145004][ T30] panic+0xc5/0xd0 [ 537.148741][ T30] ? __pfx_panic+0x10/0x10 [ 537.153166][ T30] ? preempt_schedule_common+0x82/0xd0 [ 537.158635][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 537.164012][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 537.170201][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 537.176364][ T30] watchdog+0x1030/0x1030 [ 537.180708][ T30] ? watchdog+0x1c7/0x1030 [ 537.185139][ T30] kthread+0x388/0x470 [ 537.189232][ T30] ? __pfx_watchdog+0x10/0x10 [ 537.193951][ T30] ? __pfx_kthread+0x10/0x10 [ 537.198578][ T30] ret_from_fork+0x514/0xb70 [ 537.203180][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 537.208320][ T30] ? __switch_to+0xc89/0x1420 [ 537.213011][ T30] ? __pfx_kthread+0x10/0x10 [ 537.217624][ T30] ret_from_fork_asm+0x1a/0x30 [ 537.222418][ T30] [ 537.226067][ T30] Kernel Offset: disabled [ 537.230419][ T30] Rebooting in 86400 seconds..