last executing test programs: 18.638839492s ago: executing program 0 (id=6005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x30d, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x30}}, 0x4000080) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f00000001c0)=""/182, 0xb6}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x3, 0xabf, 0x100) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 18.564168074s ago: executing program 2 (id=6006): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001500), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001540)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x4000004) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x6, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x7, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x6, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x140, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x5, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x400, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0xfffffffffffffffa, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r12, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) shutdown(r12, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x20048811) sendmsg$NFT_BATCH(r2, &(0x7f0000000ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x1b0, 0x0, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x5c, 0x6, "cbad9135f3ba02b7f8a598bc2b2ae8cb2bb737739606b18866b1608096fa5ee4c7ac369330682661f61c73c2dcfef0984e9784393092697bb8b43646e413fbd87eb0a35370647bc50777c25c6a28c2e33b88fe42450c54a7"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x46, 0x6, "b7dbf9d94dec6f8e50fd85c8da9df19b862b4daff643287d44b60ae9832c1361fdbe8413e8ae836f5151ca8a3fd0382ce3ae59feb5f90025a8aa91486999b425fd49"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xdb, 0x6, "f66abe9fcb40ac3652689b5383d2ad4bcd9defa69e5b2ecd1272708169fbf38e73de2f7ffda181bd7f124c3b2ba0aa33cb2f9f6808354468dd9b869ea588f3a6244051a27456d8f4782ba83482edc92df7d5616142a6ff80fb06c60216060a7374365a055b907cdca4ced25affe0222ffea051a91081f5df03fad15569f77d99889952d3e99ef4254b871f246c45b5eb33383a13ced180f60fb3075644a64296769cbad466b0cb2ed4f9d19d14b3b4f4ee8e9df0ed32a97516f5b1490abbd0eb074aaaf9932f2f0c586c19ba144c72eb499f822645df5a"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r15, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) recvmsg(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/225, 0xe1}], 0x1}, 0x40020123) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket(0x28, 0x5, 0x0) 18.505373164s ago: executing program 4 (id=6007): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = socket(0x18, 0x5, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) close(r4) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)}, 0x3) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x77, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x69, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @multicast2}, {0x0, 0x4e20, 0x55, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c"}}}}}}, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8}) 18.207743515s ago: executing program 1 (id=6010): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c001e00", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf25050000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x804) 18.14628807s ago: executing program 0 (id=6011): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4008090) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0) (async) unshare(0x22020400) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r5, &(0x7f0000000200)=""/195, 0xc3) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x20, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x800, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {0xa, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x7c}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r11, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000300000000000000000000030000000003000000020000000000000000000000000000010500000010000000010000000000001200000000005f"], 0x0, 0x4f}, 0x20) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r6, 0xc252d000) 18.016442138s ago: executing program 1 (id=6012): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r0], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 17.897558686s ago: executing program 2 (id=6014): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) r6 = accept4(r5, 0x0, 0x0, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x40010040, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000001080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000d80)=@getsadinfo={0x2b0, 0x23, 0x400, 0x70bd2c, 0x25dfdbfc, 0x0, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @extra_flags={0x8, 0x18, 0x8}, @tmpl={0x184, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x0, 0x2, 0x0, 0x10, 0x853, 0x7}, {{@in=@loopback, 0x4d3, 0x3c}, 0xa, @in=@empty, 0x0, 0x0, 0x3, 0x1, 0xe, 0x2, 0x7}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d5, 0x2b}, 0xa, @in6=@loopback, 0x0, 0x1, 0x0, 0xe, 0x8, 0x80000000, 0x8001}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x3c}, 0xa, @in=@private=0xa010101, 0x3504, 0x3, 0x2, 0x2, 0x2, 0x296c550a, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d6, 0xff}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x0, 0x0, 0x1, 0x13, 0x1e, 0x5829, 0xff}, {{@in=@empty, 0x4d3, 0xff}, 0x2, @in6=@local, 0x0, 0x1, 0x1, 0x73, 0xffff, 0x10001, 0x9}]}, @algo_comp={0x106, 0x3, {{'lzjh\x00'}, 0x5f0, "0cd56526a48cdc1a6503ef561652c8681105ad66f42695950028cdd1e58dc8c3b9719f9f4c928f7d310222c657c6466d55da8f748ae63d1fced5698a052c767d3b6f25b64aef43c3475a0273661399e7e86781757fe3350a603dfaa327c1eec2322280ec4c6204be52eaa16452d6ade5a279d095d4dd3d31e9f555fab7d0f2c905553bb5bbe5044646f580c7d6a282e3a47ca895e13cec72b9c6c7ae8acd83de7fbef7fb08b0231801d1813c05e03d3bb565ed233e547ba9f78c10002db4"}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4004010}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000d40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000400)={0x8b8, r9, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xfffffff7, 0xb}}}}, [@NL80211_ATTR_BEACON_HEAD={0x2c2, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x2, 0x5}}, 0x8, @default, 0x380, @void, @void, @val={0x3, 0x1, 0x88}, @val={0x4, 0x6, {0x30, 0x8, 0xb51, 0x8dba}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x0, 0x4, 0x7}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x2, 0x0, {0xff, 0x17dc, 0x0, 0x3f7, 0x0, 0x1}, 0x400, 0x3, 0x68}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x2, 0x2, 0x20}}, @val={0x76, 0x6, {0xff, 0x3, 0x41, 0x1000}}, [{0xdd, 0xd2, "68ea02a41edfb07821c7d18f265f644ebc4c6f49f777e73b7813b54b9307bc6b7bf237151a9caafbe141d12e1eb2a4d38e614a4fac5db0ce987ff593f30b27427be795b9fbb8f6092194286b88a202980430b9cad0d1736239f08f67c934fdffa2945c9701ae82272a106c56cc1bb9027c45af1054f638518da688eab93ec2a04e6435be95c2f9d5f78c19fcc8aaacb34bec6023d808cad37d206556b7f71f1e9a5a7f158cf72108e937b8d8438174121b0a18f12f60ea99b462961b87ad3678b3492ad8dcd63ce0de43485739433db3b23d"}, {0xdd, 0xee, "3c3ebc23c2827a4ae39c3a789382f47c80dcdef20318bd649f7472877e1d6c218071d667dbd093aff5db3ea9e568a97e8813507bb6bcd6ea91c86ef608f797940af7104c78c62662f0cbb0b7fbfc9ce87d1ae3a88a430de94d38421b784cfa5c8b1948a99de185adfd2b59e210aacec7783ec1db33427e828423c0752131260959e2a720ff4c2809f89ea36cad284104833f8c7f15ef82ab108864be95f1794ef953d4605db0df44e366e1927ef56ca40cbe8d6b33090f3e871214d3a2c62fc426d6ec47a994db27c2afbe3b8b4d558de9f35c921e4922f92eaacfc9b9841aa4e01e814337842bc8a625475ab16a"}, {0xdd, 0x88, "897a2d35f21bf6c4dcf7d1aefa1de73e6f42eb139862051221df70d4b7fcc630cc001c8789f9b0a0436f905e9e532ea40ce631a47335b57b1b3a984b638f37e1384eaeeb2236afb94f51c216912909f788f6f6f4aee4f2d1e5f87bc8f47bbe8d6101561c209f28e9c44e8af83ebc05868cc27efbc7e6f8315e2b9c96be71a9177869d5693f87adc5"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_IE={0x6f, 0x2a, [@perr={0x84, 0x55, {0x1, 0x5, [{{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x15}, {{}, @device_b, 0x1, @void, 0xc}, {{0x0, 0x1}, @device_a, 0x3, @value=@device_b, 0x24}, {{0x0, 0x1}, @device_a, 0xa, @value=@broadcast, 0x21}, {{}, @device_b, 0x1, @void, 0x3b}]}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_b}}]}, @NL80211_ATTR_PROBE_RESP={0x250, 0x91, "4891af8e504682a8a28d09c1beba0f941621b51fab59b8652a5b076c8fdfe11367ce0510610db1c66ccbd1f78f059003492082de40f0cfbfddc910742a4b4facf51ee97db6b62a8d3745b03d93f0217bedb14507a9e3e632029aecee6eff46d866393e4ce7283084983620018eb8fd4a84c3d9976b82c4233de10cedbb3de1647fc596b82c866ca3e6a9b902e0f21beddf45a6fcef7c8904f5f24bb436d8c65d1d183005a033bf40ae94a30f5a5afdc91e7d3518f262531ffe56ed78df9dd3cf6642e3424ad0c2ab977ba4f007982f419dd2f6b738ccbd429a05edab941a0916b78a4fdf48803e263eaf2e8f651cca6150f7cd981e151ccec86116365aa1668dcb423ba43123df5bebe355a09f7e1cfb69a6428fd234ac643b20827665ca789dff492ac45e336ccd39cd223731b6b6ce5a1163e03824bc7001f819268578f9ed956769a4d76e9b9f89974e2a190b6ad1f02da215465ddb71e7e8af7314d6799ca823a360fe6ebfdd03b19509d6ac6f88c37ad2a051f9490ff56ded1dc7bf84fe660c4dd2470cc633b49b80601b5f49c8952338cc6ea7a2a63c320d4939c22b6a9ccb67dcaca8cbdac60c8475be2d61bc5311c615f87119b8bc77881fcde8bcfe1f3a9dd441db27a2a9f695a97d652a954d620aca3a7c2eed472d3a15991e10981607127e65fe18cb25a5bd3e5da1bb6b8be63ff1d61a38cad2b6757e951eeeced0428640218c5c78bea45836ee455f1e2c00a4be2e9a9ee3b3e18e62b6977352119b311120bceca2a718ed2440baa6cfa9600f26dfc4fdf9c9a229e41eebe5ae4fca26805f627f715ff64e37"}, @NL80211_ATTR_IE_PROBE_RESP={0x7, 0x7f, [@erp={0x2a, 0x1}]}, @NL80211_ATTR_BEACON_HEAD={0x2fe, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {}, @broadcast, @device_a, @initial, {0x9, 0x9b}}, 0x3, @random=0x6, 0x4002, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{0x1}]}, @void, @val={0x4, 0x6, {0x6, 0x5, 0x1, 0x1}}, @void, @void, @val={0x25, 0x3, {0x1, 0xac, 0x9}}, @void, @void, @val={0x2d, 0x1a, {0x10, 0x3, 0x1, 0x0, {0x3, 0x0, 0x0, 0x389, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x801, 0x2, 0x5}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xc, "eb3ba9f7318e00e94d35a61d"}, {0xdd, 0x82, "7c3047d2752da8d9b3149069755b1f9fda2988cc584f8853103c7d59a52f8e27082d419e82671038a6c26ad9e822a18326840db75b414fdb9f861ae7baa9c3586a74c1aef3eeeaf51c465835888dc2fd5eb6543b4bee29b5163cfd6c8995e74d5e0a1dc29b608477b2f7e63cbf42d1807f70de7f0abcd19fe38cc942c932b0a78838"}, {0xdd, 0xa7, "fb41d65cc9984d0fcb19151d39b3010317ffb12f2860cd93af8adef34e5c46a54969dd331fa8bc4699b0aac6c9c91a42e6192178e051ea49d2e4523d4f175fe79593b895920747e9da9c53ca16555264559b9efe5662296bd97e6abdde8c62996c6bb40b7ff0183786b868f6a9242c65d42123f9b45c4499eb1672dfe9bef21f76c7aceeb71e782c5d84d1f3f4efec2bac1bee39d241910d3489b93ebddc695abb0620c6624d18"}, {0xdd, 0xfc, "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"}, {0xdd, 0x5f, "c37afe741c343af0b6ecf9d787556bf5942e499a526a1d0ee4f19c3cd0650941b62152bbca45e070404a88f5f4f34952d1855620ae49e5a504ef864bacf56b43a463ba21141253ac72f2a6472244cdb7a4f9dd947a8c757d41356b4c1b9e67"}]}}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x4080}, 0x10004045) 17.777513001s ago: executing program 0 (id=6015): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000340), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x1030, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1004, 0x2, [@TCA_BPF_NAME={0xffe, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}}]}, 0x1030}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x6, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 17.650934122s ago: executing program 1 (id=6017): r0 = socket(0xa, 0x3, 0x4) (async) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0xfcbe}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff81ff0d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="450400000800001bf1d4f992717880582560c137eba0bdf2ef9b79e6406c196235b9977b84810af0cf374c5a4a634c755c1cc4a18bcd10d2c144055da71bee505bb40d2f35af41769beb4cac6d691807deafa5057bda746fac152ac7fafa029a4f2b243111da8b7d5896ddd601dfe901a51635f54cea4e0fd187da82dc0341da25c11103a536667f6a8e04af0b30a3d02053dc840d5bd3c42a1ebb623d3e6728049e8d6c33479a9731dd803883d808d326fe8081193cd69f41e059cfcac9009e01cba430c336dd6c31f5095430402ef21d3a06cb87776f3e8363d899f5b382264bb08f5b18117326afb5287897f3591c1f53f828d99395c642b8c7a9baf1d257b32f429280e98e1d5cf0a7df79322a9e8f1d8c2b8514472a727446432b17e4eaa612b8c1cda3dcb6bdb9c3b5", @ANYRES32=r1, @ANYBLOB=' \x00\x00\x00'], 0x20}}, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, &(0x7f0000000280)) (async, rerun: 32) socket(0x2c, 0x3, 0x40) (rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r4, @ANYRES32=r4, @ANYRES32, @ANYRES16=0x0], 0x4c}}, 0x0) 17.600241211s ago: executing program 2 (id=6018): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000000)=0x80000002) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) (async) r7 = socket(0xb, 0x3, 0x2000000) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @multicast1, @multicast2}, &(0x7f0000000600)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'netpci0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000a40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000006c0)={0x304, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe32a}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x304}, 0x1, 0x0, 0x0, 0x8040}, 0x20004000) socket(0x1d, 0x2, 0x6) r13 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r13, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) r14 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r14, 0x8983, &(0x7f0000000080)={0x1, 'veth0\x00', {}, 0x81}) connect$pppl2tp(r14, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r13, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) (async) ioctl$PPPIOCGCHAN(r14, 0x80047437, &(0x7f00000000c0)) (async) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ecb403236035", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0x4e24, 0x13, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "3cd22b8a6dbd"}}}}}}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) 17.404332483s ago: executing program 3 (id=6019): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0x800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a900)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xfb}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x44040) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (rerun: 32) 17.403708339s ago: executing program 1 (id=6020): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01111800000000effeaf1cb600f32100000006000000030000000000000c0300f7ff005f2e5f6100"], &(0x7f0000000140)=""/142, 0x2a, 0x8e, 0x0, 0x3be}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)='/0', 0x2}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.402296443s ago: executing program 4 (id=6021): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x1, 0x0}, 0x8) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={0xffffffffffffffff}, 0x4) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000007200000005000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x4, 0x3, 0xfffffff9, 0x4, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)=r3}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000c00)={'erspan0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x20, 0x7, 0x1, 0x0, {{0x47, 0x4, 0x2, 0x6, 0x11c, 0x64, 0x0, 0xff, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xf, 0x40, [@remote, @rand_addr=0x64010101, @multicast1]}, @timestamp_addr={0x44, 0x34, 0x18, 0x1, 0x0, [{@multicast1, 0x3}, {@multicast2, 0x6}, {@loopback, 0x1}, {@broadcast, 0xff}, {@private=0xa010102, 0x101}, {@loopback, 0x6}]}, @cipso={0x86, 0x3c, 0x0, [{0x6, 0x9, "94b07bc0a09cb0"}, {0x2, 0xd, "f820c8cda6ab3070dbb562"}, {0x5, 0xb, "7060fcc5f7aa97cf81"}, {0x7, 0xe, "786ed7357cc7c33313359daf"}, {0x0, 0x7, "cb426da7a1"}]}, @timestamp={0x44, 0x10, 0xac, 0x0, 0x0, [0x800, 0x6, 0x2]}, @lsrr={0x83, 0x1f, 0x82, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1a}, @local, @remote, @empty, @rand_addr=0x64010100, @remote]}, @cipso={0x86, 0x46, 0x3, [{0x1, 0xd, "4af166138ddab8b8da8ac0"}, {0x1, 0xe, "de5da58496687bdbc8e5fc22"}, {0x0, 0xd, "e1c99a89e1ce305ec4cc56"}, {0x7, 0xa, "e338d5e63ea4c88b"}, {0x0, 0xe, "134dc11701fc601bf4a0b5dd"}]}, @end, @rr={0x7, 0x13, 0x2e, [@multicast1, @private=0xa010101, @multicast1, @remote]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ec0)={r3, 0x20, &(0x7f0000000e80)={&(0x7f0000000c80)=""/226, 0xe2, 0x0, &(0x7f0000000d80)=""/214, 0xd6}}, 0x10) r13 = socket(0x1d, 0x802, 0x6) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x100006}}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000f00)={r6, 0x8, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x23, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1ff}, [@exit, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x530}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x243d}, @ldst={0x3, 0x3, 0x1, 0x4, 0x4, 0xfffffffffffffffd, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5e40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x15}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000780)='GPL\x00', 0x6, 0x25, &(0x7f0000000880)=""/37, 0x41100, 0x40, '\x00', r11, @fallback=0x1e, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c40)={0x0, 0x10, 0x1, 0x80000001}, 0x10, r12, r14, 0x0, &(0x7f0000000f40)=[r9], 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0x1e, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000ff070000000000000100010018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000018280000", @ANYRES32=r2, @ANYBLOB="000000000400000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000137f967b6f455c48b1cf8fa6bb5e6e5916aeda67519dac9d884db0c5255587eaef796e8f5833f143f39410220bb7d04d66304607f0bafbefc045bdfd24b8c992513a6f54c1d796c59f60f8cd648e05ef46f8ec2722689fca776fc624e3a1841804e3732bbc5c866f30965929d3cf0d9cad09dedb2c5334643832f7dd96c27b82114d9a35edd934967f960be23c47eff7a9864f47c3cebbf13aacbd579f18e7975fac9cd5c8aa3f"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000000340)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xa, 0xfffffffc, 0x6}, 0x10, r5, r6, 0x1, &(0x7f0000000500)=[r7, r8, r9], &(0x7f0000000540)=[{0x1, 0x2, 0x10, 0xa}], 0x10, 0x2}, 0x94) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r16, 0x0, 0x0, 0x2020, 0x0, 0x0) sendmsg$nl_route(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=@newlink={0x28, 0x10, 0x2, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x67610}, [@IFLA_MTU={0x8, 0x4, 0x1044}]}, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) 17.208430123s ago: executing program 3 (id=6022): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x370, 0xffffffff, 0xffffffff, 0x370, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x1}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x200, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x4, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xfffb, 0x10000, 0x3b84, 'snmp_trap\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4a0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000000)=0x22815, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000108000240000000000800044000000002080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 17.142971633s ago: executing program 1 (id=6023): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) gettid() (async) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x94}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd}, @map_val={0x18, 0x1340ade9bebd5153, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000280)='GPL\x00', 0x1, 0x24, &(0x7f00000002c0)=""/36, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xa, 0xeafb, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[{0x4, 0x2, 0x1, 0xb}, {0x1, 0x3, 0xe, 0x8}]}, 0x94) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a8018000480140006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r5, r7, 0x25, 0x19, @void}, 0x10) close(r4) (async) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) gettid() (async) r9 = gettid() r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) r13 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r13, 0x10f, 0x87, &(0x7f0000000780)=@req3={0x3, 0x9, 0x5, 0x9, 0x2, 0x200, 0xffffff17}, 0x1c) recvfrom(r13, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480)={0x0, 0x5e}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x66, &(0x7f0000000640)={r14, 0x3}, &(0x7f0000000740)=0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000005a0001002abd7000ffdbdf2500080001000100000008000200", @ANYRES32=r1, @ANYRES64=r2, @ANYRES32=r3, @ANYBLOB="08080200", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRESOCT=r0, @ANYBLOB="08000200", @ANYRES32=r11, @ANYRES8=r11, @ANYRES32=r12, @ANYRES32=0x0], 0x5c}}, 0x0) 16.968241632s ago: executing program 4 (id=6024): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff81ff0d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000020801020000000000000000000000100900010073797a30000000000c00048008000140000000010900010073797a30000000009bef431cfa3a8b82b1e3d441dfec3c18cb20502bccf744b5e8ba101476b15bdeafcdfa1e4fc02836b42ec69f2bb01f8e3b382e5518ad806d889cbbfe3a5d402010806061b00924ff0ae04c0c789f111b2aa864106dfb050d8d192e3c71d3c13d676f6f8c264281a13e89cc36705b26028d15d13f4f0d83a0901e9961e8db8feb467457336fb6965b9ac7d46591fbf640727e611d0546"], 0x38}, 0x1, 0x0, 0x0, 0x20060840}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000020801020000000000000000000000100900010073797a30000000000c00048008000140000000010900010073797a30000000009bef431cfa3a8b82b1e3d441dfec3c18cb20502bccf744b5e8ba101476b15bdeafcdfa1e4fc02836b42ec69f2bb01f8e3b382e5518ad806d889cbbfe3a5d402010806061b00924ff0ae04c0c789f111b2aa864106dfb050d8d192e3c71d3c13d676f6f8c264281a13e89cc36705b26028d15d13f4f0d83a0901e9961e8db8feb467457336fb6965b9ac7d46591fbf640727e611d0546"], 0x38}, 0x1, 0x0, 0x0, 0x20060840}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'geneve1\x00', 0x400}) socket(0x1, 0x5, 0x0) (async) socket(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB='/'], 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB='/'], 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x1f}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001700)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018200000000000005500000055000000070000000d0000000100000f010000000300000002000000020000000f0c00000004000085010100000b000000020000000080000007000000050000000b0400000600000003000000000000800e00000004000000b2d60000000000005f302e5f6100"], &(0x7f0000000700)=""/4096, 0x77, 0x1000, 0x1, 0x4}, 0x28) r11 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r11, 0x5421, &(0x7f0000000080)=0x2) (async) ioctl$int_in(r11, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r11, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r11, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) 16.966999234s ago: executing program 3 (id=6025): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x3c, &(0x7f0000000000)={&(0x7f0000000240)={0x20, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x4, 0x2, 0x0, 0x1, [{0x0, 0x1, @priority={{{}, {}, {0x0, 0x4, 0xa}}, {0x0, 0x6, r4}}}, {0x0, 0x1, @name={{}, {}, {0x0, 0x4, 'loadbalance\x00'}}}, {0x0, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x80}}}, {0x0, 0x1, @lb_port_stats={{{}, {}, {0x0, 0x4, 0xfffffffb}}, {0x0, 0x6, r4}}}, {0x0, 0x1, @lb_tx_method={{}, {}, {0x0, 0x4, 'hash\x00'}}}]}}]}, 0x20}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x10) 16.854820928s ago: executing program 0 (id=6026): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x24}}, 0x40) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x103200, &(0x7f00000001c0)={@_ha_fsid={[0xec, 0x3]}, {0x7, 0x9, 0x4, 0x7e}}, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4}) r3 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r1, 0xe9fbf867aab64ca9, 0x70bd26, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:memory_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x54}}, 0x4014000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xfe, &(0x7f0000000700)={@empty, @multicast, @void, {@x25={0x805, {0x1, 0x43, 0x9, "4d85f0fdb419884c24064d47fc935d7f025cff4868e9126d6359b33ddeaad7680a5eebc532aa6f11b0475074198557fff2b7e8bf4e6de4dafc61ddad1bf5c60fefd6a723fb7710141d6ca6017a535fd5eb9c5e2c39e507557a646d4a7c6e5515b6b985e013372e55c5331b7887edb423c4126cf3444097d8b2535af192dada36bb907359338138161b03ad9a8b5184191f08b421b0b0fb506064aa16d8278a222db6201df6cd1c967534d144292fc24b6d0801e57ae58f8e9646e7c0f1e51ad9f740e64c0b72df82b8c4e29a0f02c08049846e0a31a5e3d6a23bab6eecb8a212d4c82676b134d74cb4d7c1cc69"}}}}, &(0x7f0000000800)={0x0, 0x3, [0xaec, 0xaca, 0xe35, 0x326]}) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x98, r9, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_conf_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000804}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000a00)={r2, r2}, 0xc) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1c}}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000b40)={'filter\x00', 0x4}, 0x68) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000c00), r2) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r11, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000d00), r4) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d80), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r12, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, r13, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x30}}, 0x8000) ioctl$XFS_IOC_FSGROWFSDATA(0xffffffffffffffff, 0x4010586e, &(0x7f0000000e80)={0x8000000000000001, 0x5}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000ec0)={0x8fd7b28a}, 0x4) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r14, 0x8955, &(0x7f0000000f00)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, {0x1, @random="b10ca324d73c"}, 0x0, {0x2, 0x4e23, @multicast2}, 'ip_vti0\x00'}) 16.845311849s ago: executing program 2 (id=6027): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="3106000000000000df250400000e"], 0x14}, 0x1, 0x0, 0x0, 0x24044894}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0xfffffffe]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x4000) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) 16.619182232s ago: executing program 4 (id=6028): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x1, 0xfffffff9, @vifc_lcl_addr=@broadcast, @remote}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xd80}}, 0x2004c880) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) 16.567194226s ago: executing program 2 (id=6029): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r4, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600780ea8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x40052) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) 16.490246812s ago: executing program 3 (id=6030): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00020000000000000000000000000000002f000027b288d56c877e3a4ba6937fafd2f047c98ae08c7aeb425a6af714f25e01d7092a9eaae8eb4296ca598d389a2c28e06586854b119dd368b16d8ba8c911bb133344be97d11a81db9690ac211d085f6c9c2172fc7e5aa7060000000000000097", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c0000000671753f247bbfca6ed2160002000000400004803cb04f733400f1739578746864726e13c38d336eabee04400000000208000740000000090800064000000001050002000000000008000340000000040900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x1f, &(0x7f00000003c0)=@raw=[@ringbuf_query, @generic={0x5, 0x5, 0x4, 0x0, 0x1}, @printk={@i}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xff}, @ldst={0x3, 0x0, 0x6, 0x8, 0xb, 0xfffffffffffffff8, 0xffffffffffffffff}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.328395768s ago: executing program 4 (id=6031): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0xff76, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x2c, 0x3fc, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r4, 0x0) ppoll(&(0x7f0000000280)=[{r4, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 16.194499859s ago: executing program 0 (id=6032): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, [0xc7, 0x2, 0x1, 0x8, 0x5, 0x5bc519f0, 0x16, 0x5, 0x2, 0xa, 0x65e3, 0x6, 0x6, 0x3, 0x8]}, &(0x7f0000000240)=0x100) (rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x0, 0xa220}, 0x90) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) 16.16291039s ago: executing program 3 (id=6033): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x40, &(0x7f0000000140)={@_ha_fsid={[0x3, 0x1]}, {0x8, 0x921, 0xffffffff, 0x2}}, 0x33c, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0xffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) 16.044359595s ago: executing program 1 (id=6034): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="1c0300002e00010003000000fcdbdf250b03f3800c00e5800800da00", @ANYRES32=0x0, @ANYBLOB="5d017f80cc39cb9db042474549524889905886009171313736215baae9fdfd00355318c9977e4535d6b232b37dc0067392db2608b279505c77b74983531f58fce686effe61b609487abb81bc75d4e67ca3e055d72cb435ab6f1639ffd15c57dfcf7a0a6386e7afb30e5a0ce79b72d75913f80bec69229f826d13775d03b15cc5d9882718098ed0675d1935b77f14e53e774732635edbf74182997ee58a1413e08e03a3389678ab2957a52405dabfa582c12516d13e7b20e21bec94abd3cc16f391bb36c846adb1a2dde9e7c38240b38b72f3f4f667a4f434dde0b0aeb0a2f56f7fd8eba140f139432ea7537f6f3f749d8dfca2afb270aebbe449c0fda2131ad1c773103d88ebb282185baceaa3003f43f6993418a06f3f7a0a4a7342638a92486ebfdd5f632e95a74f510d67c3ea24374ce3676f13e058fe6d39426ccf2a0bf4c7e7ebab5b43d4756cbc7775fed402e1e066532afc62323a1bacacdf6200000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358"], 0x31c}], 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x80, 0x8, 0x3, 0x1, {{0x32, 0x4, 0x2, 0x0, 0xc8, 0x67, 0x0, 0xb4, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0x54, 0xeb, 0x1, 0x9, [{@local, 0x800}, {@loopback, 0x4}, {@private=0xa010101}, {@empty, 0x14}, {@loopback, 0x1}, {@remote, 0x6}, {@rand_addr=0x64010102, 0x368}, {@loopback}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}]}, @timestamp_addr={0x44, 0x44, 0x6a, 0x1, 0xa, [{@multicast2, 0x2}, {@empty, 0xffff0000}, {@loopback, 0x81}, {@private=0xa010100, 0x8}, {@loopback, 0x3259cebd}, {@local, 0x5}, {@broadcast, 0xc}, {@multicast1, 0x1}]}, @ssrr={0x89, 0x17, 0x2b, [@rand_addr=0x64010100, @private=0xa010102, @broadcast, @private=0xa010102, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0xfffffffc, {}, [@RTA_IP_PROTO={0x5}, @RTA_IIF={0x8, 0x3, r4}]}, 0x2c}}, 0x1) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) (async) sendmsg$nl_route(r3, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@mpls_getnetconf={0x1c, 0x52, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xde}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0xd1) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) shutdown(r2, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r6, 0x0) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x20, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x53}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x4018050) 15.921077356s ago: executing program 3 (id=6035): socket$pppoe(0x18, 0x1, 0x0) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r1, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x40010041, 0x0) recvmmsg(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x21, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, 'ip_vti0\x00'}}, 0x1e) (async) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x21, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'ip6tnl0\x00'}}, 0x1e) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000180), 0x100000000000003c) socket$igmp(0x2, 0x3, 0x2) (async) r3 = socket$igmp(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='c 1:*\t\n.'], 0xa) (async) write$cgroup_devices(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='c 1:*\t\n.'], 0xa) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) sendmsg$can_raw(r5, &(0x7f0000000240)={&(0x7f0000000180), 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "f4cfcd962f457874"}, 0x10}, 0x1, 0x0, 0x0, 0x4004051}, 0x8000) (async) sendmsg$can_raw(r5, &(0x7f0000000240)={&(0x7f0000000180), 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "f4cfcd962f457874"}, 0x10}, 0x1, 0x0, 0x0, 0x4004051}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 15.798963277s ago: executing program 0 (id=6036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x3a, 0x1, 0x20, 0x0, {0xb}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) 15.540106747s ago: executing program 2 (id=6037): r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) getsockname$packet(r0, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000000)='nbd\x00', 0x100400, &(0x7f0000000040)={@align=0x6, {0x2, 0xfff, 0x5, 0x8}}, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x517b}, {[0x5, 0x6, 0x5, 0x9]}, 0x9, 0xa1, &(0x7f0000000100)=""/161}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000380)={0x6cc, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5bd079a6b32eb694e80584e7c70785d069eff7f0"}}, @TIPC_NLA_NODE_ID={0xc3, 0x3, "69f3f87053bd0b98c3378fb43c635b1943d43672ff3149c1333d1e23943426cf5a9b7e6219ca520cb044927ecabf487fcf48ed3c2f9b8d2c1ef5ed666841f24aed44a299735f74ab099fe8283bd8f1428e2520f24208eddac1e96fc6e2a2925b9d31b0cbeda0dbecb7cf48d0e4e82cee782b63a78df9e1aa6b5f0534566d5929cc87c96827b2eaaee22014bd221bc8638a6d93587caee6e2aefdf67adfcc49d61767c914edba52c8709707b22672ab347d5a5bfea18d3150691b0b2c60da7f"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x7e, 0x3, "f4bfd4a4d5b64a8abce2178bd9499a221e1a2bba93768f104c9206f83e0994171e340275f61397b591d2de76f3d6f8b8fc341090c2e223cae5dcd6f637b5dca9cfa1735092ee1c4c2dd606896bfe747e68cb8c0480c09425254510939690065e06d682b10f024470b0ba150a6e1a16cc84a06d20b31e51904044"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "5c0dc6a4028634a24deb18a71f3d9d2375a7261067702f157e0240c5409a77ec248b5f5db7f9c2971364f3803be2cc4d6d30c0f862b001a733400713402fc294d5c0a0f426b79e9fa3d9e9c3d5f25dd860057e84c6d3f3e0c4ccdd97d29df44dd8bbb99d2b23974c932f9d709b898ab7a5fe63f59925ee6f5517a986d4b9c08e5677c8e4e90ba6422d3c025ecc6e7d8a706778a17780eeef9bdb44a5d436a05a138044b16bb7b36c70f99d98d3a33cbe461de965a8cb43f584af2c3558b30c41341d63ec659f2a970dee0f"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x374c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x190}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x85e}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1beb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x17c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @loopback, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x63ed862}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2f0}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffc, @rand_addr=' \x01\x00', 0x8001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x6cc}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004804) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000280), &(0x7f0000000500)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r7) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 15.412551193s ago: executing program 4 (id=6038): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '\x00\x00\x00'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28) (async) r2 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r1, 0x331, 0x2000, 0x40000000, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 363.876141ms ago: executing program 32 (id=6036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x3a, 0x1, 0x20, 0x0, {0xb}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) 308.980485ms ago: executing program 33 (id=6034): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="1c0300002e00010003000000fcdbdf250b03f3800c00e5800800da00", @ANYRES32=0x0, @ANYBLOB="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"], 0x31c}], 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x80, 0x8, 0x3, 0x1, {{0x32, 0x4, 0x2, 0x0, 0xc8, 0x67, 0x0, 0xb4, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0x54, 0xeb, 0x1, 0x9, [{@local, 0x800}, {@loopback, 0x4}, {@private=0xa010101}, {@empty, 0x14}, {@loopback, 0x1}, {@remote, 0x6}, {@rand_addr=0x64010102, 0x368}, {@loopback}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}]}, @timestamp_addr={0x44, 0x44, 0x6a, 0x1, 0xa, [{@multicast2, 0x2}, {@empty, 0xffff0000}, {@loopback, 0x81}, {@private=0xa010100, 0x8}, {@loopback, 0x3259cebd}, {@local, 0x5}, {@broadcast, 0xc}, {@multicast1, 0x1}]}, @ssrr={0x89, 0x17, 0x2b, [@rand_addr=0x64010100, @private=0xa010102, @broadcast, @private=0xa010102, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0xfffffffc, {}, [@RTA_IP_PROTO={0x5}, @RTA_IIF={0x8, 0x3, r4}]}, 0x2c}}, 0x1) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) (async) sendmsg$nl_route(r3, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@mpls_getnetconf={0x1c, 0x52, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xde}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0xd1) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) shutdown(r2, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r6, 0x0) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x20, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x53}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x4018050) 216.368913ms ago: executing program 34 (id=6037): r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) getsockname$packet(r0, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000000)='nbd\x00', 0x100400, &(0x7f0000000040)={@align=0x6, {0x2, 0xfff, 0x5, 0x8}}, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x517b}, {[0x5, 0x6, 0x5, 0x9]}, 0x9, 0xa1, &(0x7f0000000100)=""/161}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000380)={0x6cc, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5bd079a6b32eb694e80584e7c70785d069eff7f0"}}, @TIPC_NLA_NODE_ID={0xc3, 0x3, "69f3f87053bd0b98c3378fb43c635b1943d43672ff3149c1333d1e23943426cf5a9b7e6219ca520cb044927ecabf487fcf48ed3c2f9b8d2c1ef5ed666841f24aed44a299735f74ab099fe8283bd8f1428e2520f24208eddac1e96fc6e2a2925b9d31b0cbeda0dbecb7cf48d0e4e82cee782b63a78df9e1aa6b5f0534566d5929cc87c96827b2eaaee22014bd221bc8638a6d93587caee6e2aefdf67adfcc49d61767c914edba52c8709707b22672ab347d5a5bfea18d3150691b0b2c60da7f"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x7e, 0x3, "f4bfd4a4d5b64a8abce2178bd9499a221e1a2bba93768f104c9206f83e0994171e340275f61397b591d2de76f3d6f8b8fc341090c2e223cae5dcd6f637b5dca9cfa1735092ee1c4c2dd606896bfe747e68cb8c0480c09425254510939690065e06d682b10f024470b0ba150a6e1a16cc84a06d20b31e51904044"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "5c0dc6a4028634a24deb18a71f3d9d2375a7261067702f157e0240c5409a77ec248b5f5db7f9c2971364f3803be2cc4d6d30c0f862b001a733400713402fc294d5c0a0f426b79e9fa3d9e9c3d5f25dd860057e84c6d3f3e0c4ccdd97d29df44dd8bbb99d2b23974c932f9d709b898ab7a5fe63f59925ee6f5517a986d4b9c08e5677c8e4e90ba6422d3c025ecc6e7d8a706778a17780eeef9bdb44a5d436a05a138044b16bb7b36c70f99d98d3a33cbe461de965a8cb43f584af2c3558b30c41341d63ec659f2a970dee0f"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x374c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x190}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x85e}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1beb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x17c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @loopback, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x63ed862}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2f0}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffc, @rand_addr=' \x01\x00', 0x8001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x6cc}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004804) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000280), &(0x7f0000000500)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r7) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 112.57646ms ago: executing program 35 (id=6035): socket$pppoe(0x18, 0x1, 0x0) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r1, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x40010041, 0x0) recvmmsg(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x21, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, 'ip_vti0\x00'}}, 0x1e) (async) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x21, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'ip6tnl0\x00'}}, 0x1e) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000180), 0x100000000000003c) socket$igmp(0x2, 0x3, 0x2) (async) r3 = socket$igmp(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='c 1:*\t\n.'], 0xa) (async) write$cgroup_devices(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='c 1:*\t\n.'], 0xa) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) sendmsg$can_raw(r5, &(0x7f0000000240)={&(0x7f0000000180), 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "f4cfcd962f457874"}, 0x10}, 0x1, 0x0, 0x0, 0x4004051}, 0x8000) (async) sendmsg$can_raw(r5, &(0x7f0000000240)={&(0x7f0000000180), 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "f4cfcd962f457874"}, 0x10}, 0x1, 0x0, 0x0, 0x4004051}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 0s ago: executing program 36 (id=6038): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '\x00\x00\x00'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28) (async) r2 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r1, 0x331, 0x2000, 0x40000000, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) kernel console output (not intermixed with test programs): f bearer rejected, failed to enable media [ 593.373960][T23245] netlink: 'syz.4.4639': attribute type 33 has an invalid length. [ 593.584701][T23245] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 593.622130][T23245] bond1 (unregistering): Released all slaves [ 593.678152][T23262] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 593.893946][T23272] __nla_validate_parse: 6 callbacks suppressed [ 593.893964][T23272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4646'. [ 593.966695][T23275] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4647'. [ 594.085034][T23286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.111198][T23282] xt_HMARK: proto mask must be zero with L3 mode [ 594.220891][T23293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.475933][T23303] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 594.534382][T23303] bond4 (unregistering): Released all slaves [ 595.120849][T23328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.241272][T23328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.307607][T23341] syzkaller0: left allmulticast mode [ 595.319423][T23341] tipc: Resetting bearer [ 595.454591][T23347] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 595.467537][T23347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.582130][T23355] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4668'. [ 597.003254][T23282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 597.472152][T23378] openvswitch: netlink: IP tunnel dst address not specified [ 597.496684][T23379] netlink: 'syz.0.4674': attribute type 83 has an invalid length. [ 597.878416][T23394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4680'. [ 597.904958][T23394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4680'. [ 597.942578][T23394] bond0: ARP target 8.4.0.0 is already present [ 597.977088][T23394] bond0: option arp_ip_target: invalid value (1032) [ 598.103324][T23405] netlink: 'syz.4.4683': attribute type 8 has an invalid length. [ 598.292140][T23413] netlink: 'syz.2.4686': attribute type 1 has an invalid length. [ 598.308679][T23413] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4686'. [ 598.367009][T23417] netlink: 'syz.3.4688': attribute type 1 has an invalid length. [ 598.393456][T23411] tcf_pedit_act: 7 callbacks suppressed [ 598.394179][T23411] tc action pedit 'at' offset 5 out of bounds [ 598.408140][T23411] tc action pedit 'at' offset 5 out of bounds [ 598.414986][T23411] tc action pedit 'at' offset 5 out of bounds [ 598.421837][T23411] tc action pedit 'at' offset 5 out of bounds [ 598.428649][T23411] tc action pedit 'at' offset 5 out of bounds [ 598.435129][T23411] tc action pedit 'at' offset 5 out of bounds [ 598.441548][T23411] tc action pedit 'at' offset 5 out of bounds [ 598.447917][T23411] tc action pedit 'at' offset 5 out of bounds [ 598.454304][T23411] tc action pedit 'at' offset 5 out of bounds [ 598.460854][T23411] tc action pedit 'at' offset 5 out of bounds [ 598.467243][T23411] 0: reclassify loop, rule prio 0, protocol 800 [ 598.536549][T23419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4688'. [ 598.597972][T23419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4688'. [ 598.682969][T23417] bond4: entered promiscuous mode [ 598.709994][T23417] 8021q: adding VLAN 0 to HW filter on device bond4 [ 598.734641][T23435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4688'. [ 598.749223][T23435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4688'. [ 598.879455][T23428] bond4: (slave bridge4): making interface the new active one [ 598.894194][T23428] bridge4: entered promiscuous mode [ 598.903430][T23428] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 598.917129][ T43] vlan1: left allmulticast mode [ 598.922614][ T43] geneve0: left allmulticast mode [ 598.927692][ T43] vlan1: left promiscuous mode [ 598.933271][ T43] geneve0: left promiscuous mode [ 598.940737][ T43] bridge0: port 5(vlan1) entered disabled state [ 598.950460][ T43] bond6: left allmulticast mode [ 598.955364][ T43] bond6: left promiscuous mode [ 598.961742][ T43] bridge0: port 4(bond6) entered disabled state [ 598.971330][ T43] bond2: left allmulticast mode [ 598.974809][T23443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4691'. [ 598.976244][ T43] bond2: left promiscuous mode [ 598.976480][ T43] bridge0: port 3(bond2) entered disabled state [ 598.987473][T23443] netlink: 'syz.4.4691': attribute type 10 has an invalid length. [ 599.006168][T23443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4691'. [ 599.017689][ T43] bridge_slave_1: left allmulticast mode [ 599.024371][ T43] bridge_slave_1: left promiscuous mode [ 599.030572][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.041867][ T43] bridge_slave_0: left allmulticast mode [ 599.047592][ T43] bridge_slave_0: left promiscuous mode [ 599.055280][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.342489][ T43] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 599.412957][ T43] bond8 (unregistering): (slave geneve3): Releasing active interface [ 599.466173][ T43] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 599.529918][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.547248][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.558021][ T43] bond0 (unregistering): Released all slaves [ 599.571382][ T43] bond1 (unregistering): Released all slaves [ 599.590686][ T43] bond2 (unregistering): Released all slaves [ 599.615510][ T43] bond3 (unregistering): Released all slaves [ 599.636499][ T43] bond4 (unregistering): Released all slaves [ 599.661998][ T43] bond5 (unregistering): Released all slaves [ 599.680908][ T43] bond6 (unregistering): Released all slaves [ 599.700486][ T43] bond7 (unregistering): Released all slaves [ 599.720747][ T43] bond8 (unregistering): Released all slaves [ 599.751729][ T43] bond9 (unregistering): Released all slaves [ 599.771549][ T43] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 599.785153][ T43] bond10 (unregistering): Released all slaves [ 599.804889][ T43] bond11 (unregistering): Released all slaves [ 599.822903][ T43] bond12 (unregistering): Released all slaves [ 599.844897][ T43] bond13 (unregistering): Released all slaves [ 599.868345][ T43] bond14 (unregistering): Released all slaves [ 599.886499][ T43] bond15 (unregistering): Released all slaves [ 599.904223][ T43] bond16 (unregistering): Released all slaves [ 599.928167][ T43] bond17 (unregistering): Released all slaves [ 599.947446][ T43] bond18 (unregistering): Released all slaves [ 600.273605][T23443] geneve3: entered promiscuous mode [ 600.279047][T23443] geneve3: entered allmulticast mode [ 600.395996][ T43] tipc: Left network mode [ 601.218003][T23484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4703'. [ 601.369239][T23486] bond5: option min_links: invalid value (18446744073709551614) [ 601.433326][T23486] bond5: option min_links: allowed values 0 - 2147483647 [ 601.469221][T23486] bond5 (unregistering): Released all slaves [ 601.643477][T23493] lo: entered promiscuous mode [ 601.659843][T23493] tunl0: entered promiscuous mode [ 601.683189][T23493] gre0: entered promiscuous mode [ 601.694463][T23493] gretap0: entered promiscuous mode [ 601.708616][T23493] erspan0: entered promiscuous mode [ 601.736805][T23493] ip_vti0: entered promiscuous mode [ 601.954162][T23498] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4707'. [ 602.040876][T23498] syzkaller1: entered promiscuous mode [ 602.046408][T23498] syzkaller1: entered allmulticast mode [ 602.117865][ T50] Bluetooth: hci2: link tx timeout [ 602.129552][ T50] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 602.143497][T23509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4708'. [ 602.162939][T23510] netlink: 'syz.2.4707': attribute type 6 has an invalid length. [ 602.220554][T23502] gtp0: entered promiscuous mode [ 602.225741][T23502] gtp0: entered allmulticast mode [ 603.882157][T23525] netlink: 'syz.0.4714': attribute type 22 has an invalid length. [ 603.905103][T23525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4714'. [ 603.933840][T23525] netlink: 'syz.0.4714': attribute type 22 has an invalid length. [ 603.953514][T23525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4714'. [ 603.995862][T23530] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4716'. [ 604.126099][T23534] netlink: 'syz.1.4717': attribute type 1 has an invalid length. [ 604.173618][T23536] netlink: 'syz.2.4718': attribute type 4 has an invalid length. [ 604.182611][T23521] Bluetooth: hci2: command 0x0406 tx timeout [ 604.198574][T23534] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4717'. [ 604.289648][T23537] netlink: 'syz.2.4718': attribute type 4 has an invalid length. [ 604.725816][T23563] syzkaller0: entered promiscuous mode [ 604.747047][T23569] netlink: 'syz.0.4728': attribute type 2 has an invalid length. [ 604.763367][T23563] syzkaller0: entered allmulticast mode [ 604.787352][T23569] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4728'. [ 604.909678][ T43] hsr_slave_0: left promiscuous mode [ 604.963076][ T43] hsr_slave_1: left promiscuous mode [ 605.599683][T23597] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4734'. [ 605.773157][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 606.037876][T23613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4737'. [ 606.150188][T23626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4740'. [ 606.173278][T23627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4742'. [ 606.367265][T23634] bond1: entered promiscuous mode [ 606.374208][T23634] bond1: entered allmulticast mode [ 606.382563][ T43] IPVS: stop unused estimator thread 0... [ 606.392840][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4744'. [ 606.619572][T23645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4746'. [ 606.668056][T23646] netlink: 'syz.0.4747': attribute type 5 has an invalid length. [ 606.682511][T23646] netlink: 'syz.0.4747': attribute type 12 has an invalid length. [ 606.948104][T23646] bond2: option primary_reselect: invalid value (255) [ 606.983356][T23646] bond2 (unregistering): Released all slaves [ 606.998099][T23663] netlink: 'syz.2.4751': attribute type 1 has an invalid length. [ 607.085267][T23663] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 607.273607][T23673] syzkaller1: entered promiscuous mode [ 607.331982][T23673] syzkaller1: entered allmulticast mode [ 607.353629][T23676] block nbd2: Unsupported socket: should be TCP or UNIX. [ 607.423825][T23683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4755'. [ 608.231609][T23726] xt_l2tp: v2 doesn't support IP mode [ 608.645745][T23734] xt_hl: Unknown TTL match mode: 255 [ 608.700982][T23736] syzkaller0: entered promiscuous mode [ 608.706513][T23736] syzkaller0: entered allmulticast mode [ 608.713664][T23736] tipc: Resetting bearer [ 608.811738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.002930][T23749] tipc: Resetting bearer [ 609.009091][T23749] tipc: Resetting bearer [ 610.299665][T23676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.681503][T23769] tipc: Resetting bearer [ 610.719778][T23763] tipc: Enabling of bearer rejected, already enabled [ 610.746062][T23763] netlink: 'syz.1.4769': attribute type 1 has an invalid length. [ 610.786192][T23774] __nla_validate_parse: 2 callbacks suppressed [ 610.786209][T23774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4774'. [ 610.791154][T23763] netlink: 'syz.1.4769': attribute type 2 has an invalid length. [ 610.811163][T23774] macsec1: entered promiscuous mode [ 610.811184][T23774] bridge0: entered promiscuous mode [ 610.811336][T23774] macsec1: entered allmulticast mode [ 610.849997][T23774] bridge0: entered allmulticast mode [ 611.023401][T23790] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4777'. [ 611.110811][T23790] ipt_REJECT: ECHOREPLY no longer supported. [ 611.123581][T23794] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 611.242772][T23797] xt_hashlimit: size too large, truncated to 1048576 [ 611.526287][T23816] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4782'. [ 611.546010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.629256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.875333][T23809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4784'. [ 611.916531][T23824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4786'. [ 611.949817][T23832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4788'. [ 612.643916][T23866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4798'. [ 612.673178][T23870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4800'. [ 613.076190][T23892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4804'. [ 613.121588][T23898] Cannot find del_set index 4 as target [ 613.374801][T23907] netlink: 'syz.1.4810': attribute type 1 has an invalid length. [ 613.405231][T23907] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 613.473998][T23914] veth0_to_bridge: entered promiscuous mode [ 613.509120][T23914] veth0_to_bridge: entered allmulticast mode [ 613.544325][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.629139][T23920] xt_cgroup: path and classid specified [ 613.918169][T23928] netlink: 524 bytes leftover after parsing attributes in process `syz.1.4815'. [ 614.178414][T23935] tipc: Enabling of bearer rejected, failed to enable media [ 614.491189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.514121][T23956] syzkaller1: entered promiscuous mode [ 614.534456][T23956] syzkaller1: entered allmulticast mode [ 614.739223][T23970] bond0: Error: Cannot enslave bond to itself. [ 614.846971][T23971] bridge0: port 3(wlan0) entered blocking state [ 614.855541][T23971] bridge0: port 3(wlan0) entered disabled state [ 614.862710][T23971] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 614.878126][T23971] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 615.125165][T23987] netlink: 'syz.4.4835': attribute type 1 has an invalid length. [ 615.362839][T23996] syzkaller0: entered promiscuous mode [ 615.384997][T24001] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 615.399719][T23996] syzkaller0: entered allmulticast mode [ 616.085436][T24025] __nla_validate_parse: 17 callbacks suppressed [ 616.086284][T24025] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4845'. [ 616.119418][T24028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4846'. [ 616.133090][T24025] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4845'. [ 616.144024][T24026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4845'. [ 616.187094][T24028] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4846'. [ 616.589591][T24040] IPVS: set_ctl: invalid protocol: 98 100.1.1.1:20004 [ 616.657067][T24039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4850'. [ 616.678526][T24034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4848'. [ 616.791151][T24039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4850'. [ 617.387156][T24061] xt_hl: Unknown TTL match mode: 255 [ 617.770976][ T29] audit: type=1107 audit(1784408919.348:14): pid=24075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='IÊ|z1¦¯€ÖÙàš~Oa2k´/ÏŒ}díTÀf¤9ÿ1¯Î³B' [ 617.843820][ T29] audit: type=1107 audit(1784408919.348:15): pid=24075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='IÊ|z1¦¯€ÖÙàš~Oa2k´/ÏŒ}díTÀf¤9ÿ1¯Î³B' [ 618.921134][T24115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4873'. [ 618.932382][T24116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4873'. [ 618.947153][T24113] netlink: 'syz.2.4870': attribute type 1 has an invalid length. [ 619.518998][T24035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 620.064471][T24150] netlink: 'syz.2.4883': attribute type 21 has an invalid length. [ 620.506930][ T8664] hid-generic 0005:0B57:0000.0005: item fetching failed at offset 0/1 [ 620.547559][ T8664] hid-generic 0005:0B57:0000.0005: probe with driver hid-generic failed with error -22 [ 621.227484][T24187] veth0_to_bond: Caught tx_queue_len zero misconfig [ 621.396813][T24193] __nla_validate_parse: 8 callbacks suppressed [ 621.396860][T24193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4897'. [ 621.623068][T24197] syzkaller0: entered promiscuous mode [ 621.686773][T24197] syzkaller0: entered allmulticast mode [ 622.047435][T24217] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 622.564360][T24237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4910'. [ 623.120878][T24251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4917'. [ 623.203854][T24261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4919'. [ 623.318680][T24261] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 623.771048][T24281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4924'. [ 623.797880][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4924'. [ 623.828910][T24281] netlink: 'syz.4.4924': attribute type 12 has an invalid length. [ 623.848545][T24281] netlink: 'syz.4.4924': attribute type 11 has an invalid length. [ 624.077501][T24284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.957180][T24289] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4926'. [ 628.904928][T24330] "syz.3.4936" (24330) uses obsolete ecb(arc4) skcipher [ 629.269712][T24335] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4939'. [ 630.468172][T24382] netlink: 'syz.2.4951': attribute type 1 has an invalid length. [ 630.544863][T24383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4955'. [ 630.639465][T24383] netlink: 'syz.0.4955': attribute type 1 has an invalid length. [ 630.672327][T24383] netlink: 'syz.0.4955': attribute type 2 has an invalid length. [ 630.683336][T24375] syzkaller1: entered promiscuous mode [ 630.689757][T24375] syzkaller1: entered allmulticast mode [ 630.847318][T24391] netlink: 'syz.3.4957': attribute type 1 has an invalid length. [ 630.860710][T24392] netlink: 'syz.3.4957': attribute type 1 has an invalid length. [ 631.207543][T24399] netlink: 'syz.4.4960': attribute type 1 has an invalid length. [ 631.825240][T24421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4966'. [ 632.071965][T24422] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 632.084710][ T5624] IPVS: starting estimator thread 0... [ 632.116163][T24422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4967'. [ 632.150775][T24422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4967'. [ 632.200844][T24432] IPVS: using max 29 ests per chain, 69600 per kthread [ 632.244328][T24435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4970'. [ 632.489304][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880766ddc00: rx timeout, send abort [ 632.989685][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880766dc800: rx timeout, send abort [ 633.002393][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880766ddc00: abort rx timeout. Force session deactivation [ 633.506258][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880766dc800: abort rx timeout. Force session deactivation [ 635.317920][T24414] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 635.756310][T24447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4973'. [ 636.389862][T24471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4977'. [ 636.407401][T24472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4978'. [ 636.744067][T24483] xt_bpf: check failed: parse error [ 636.792627][T24486] xt_hashlimit: size too large, truncated to 1048576 [ 637.097247][T24494] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4985'. [ 637.441587][T24505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4988'. [ 637.608639][T24512] ip6tnl0: Caught tx_queue_len zero misconfig [ 637.741622][T24515] xt_l2tp: v2 doesn't support IP mode [ 638.157189][T24531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4993'. [ 638.221191][T24531] macvlan0: entered promiscuous mode [ 638.246585][T24527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4993'. [ 638.538783][T24542] syzkaller1: entered promiscuous mode [ 638.545557][T24545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4998'. [ 638.561492][T24547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5000'. [ 638.581451][T24542] syzkaller1: entered allmulticast mode [ 638.681045][T24547] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20003 [ 641.307177][T24536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 641.715025][T24574] Unsupported ieee802154 address type: 0 [ 641.786101][T24576] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5008'. [ 642.281296][T24585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5012'. [ 642.676800][T24606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5016'. [ 643.463709][T24633] tipc: Resetting bearer [ 643.472752][T24606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 643.943223][T24645] netlink: 'syz.2.5026': attribute type 2 has an invalid length. [ 643.988369][T24649] netlink: 'syz.2.5026': attribute type 2 has an invalid length. [ 643.993936][T24648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5025'. [ 644.023736][T24651] netlink: 'syz.1.5027': attribute type 1 has an invalid length. [ 644.227876][T24658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5029'. [ 644.577683][T24666] netlink: 'syz.4.5031': attribute type 1 has an invalid length. [ 644.706114][T24667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5032'. [ 644.722326][T24668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5032'. [ 644.816914][T24670] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 644.896207][T24674] veth3: entered promiscuous mode [ 644.935010][T24674] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 645.039870][T24677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5034'. [ 645.242839][T24691] netlink: 'syz.4.5037': attribute type 1 has an invalid length. [ 645.271210][T24677] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 645.308110][T24690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5037'. [ 645.311886][T24677] sctp: [Deprecated]: syz.0.5034 (pid 24677) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.311886][T24677] Use struct sctp_sack_info instead [ 645.542933][T24699] netlink: 'syz.2.5038': attribute type 17 has an invalid length. [ 645.594094][T24699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5038'. [ 645.726406][T24699] gretap0: entered promiscuous mode [ 645.777229][T24711] netlink: 'syz.3.5043': attribute type 1 has an invalid length. [ 645.825043][T24699] gretap0: left promiscuous mode [ 646.165770][T24711] 8021q: adding VLAN 0 to HW filter on device bond5 [ 648.516758][T24701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 649.104308][T24764] __nla_validate_parse: 1 callbacks suppressed [ 649.104464][T24764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5052'. [ 649.136279][T24767] netlink: 'syz.3.5053': attribute type 10 has an invalid length. [ 649.406701][T24778] netlink: zone id is out of range [ 649.437531][T24778] netlink: set zone limit has 4 unknown bytes [ 649.503256][T24782] netlink: zone id is out of range [ 649.539248][T24782] netlink: set zone limit has 4 unknown bytes [ 649.731568][T24786] syzkaller0: entered promiscuous mode [ 649.772926][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 649.778992][T24786] syzkaller0: entered allmulticast mode [ 649.901375][T24793] lo: Caught tx_queue_len zero misconfig [ 649.977072][T24796] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5060'. [ 650.045494][T24797] netlink: 'syz.2.5059': attribute type 1 has an invalid length. [ 650.106834][T24797] bond2: (slave veth0_to_bond): Releasing active interface [ 650.164672][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5059'. [ 651.614809][T24803] netlink: 'syz.1.5062': attribute type 4 has an invalid length. [ 651.734380][T24827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5071'. [ 652.639777][T24850] Cannot find set identified by id 65534 to match [ 652.647722][T24839] syzkaller0: entered promiscuous mode [ 652.667905][T24839] syzkaller0: entered allmulticast mode [ 652.765575][T24852] netlink: 'syz.0.5079': attribute type 1 has an invalid length. [ 656.360284][T24852] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 656.669753][T24879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5085'. [ 656.756849][T24879] netlink: 'syz.0.5085': attribute type 63 has an invalid length. [ 658.180658][T24847] infiniband syz0: set active [ 658.189775][T24847] infiniband syz0: added ipvlan1 [ 658.217095][T24847] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 658.228406][T24847] infiniband syz0: Couldn't open port 1 [ 658.246233][T24847] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 658.266059][T24847] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 658.291086][T24847] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 658.443441][T24847] RDS/IB: syz0: added [ 658.448180][T24847] smc: adding ib device syz0 with port count 1 [ 658.463623][T24922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5097'. [ 658.474632][T24847] smc: ib device syz0 port 1 has no pnetid [ 658.777223][T24930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5100'. [ 658.840401][T24930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5100'. [ 658.872181][T24930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5100'. [ 659.768905][T24954] netlink: 'syz.2.5106': attribute type 1 has an invalid length. [ 660.032928][T24965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5106'. [ 660.376706][T24954] 8021q: adding VLAN 0 to HW filter on device bond8 [ 660.459717][T24956] veth7: entered allmulticast mode [ 660.476681][T24956] bond8: (slave veth7): Enslaving as an active interface with a down link [ 660.511624][T24961] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 660.532820][T24963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5108'. [ 660.577651][T24964] bond8: entered promiscuous mode [ 660.587122][T24964] bond8: entered allmulticast mode [ 660.927186][T24974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5111'. [ 661.102407][T24982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5114'. [ 661.162052][T24982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5114'. [ 661.206681][T24982] netlink: 'syz.1.5114': attribute type 15 has an invalid length. [ 661.324608][ T1352] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 661.358006][ T1352] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 661.400642][ T1352] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 661.458832][ T1352] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 662.216909][T25011] netlink: 87 bytes leftover after parsing attributes in process `syz.4.5121'. [ 662.278393][T25011] syzkaller1: entered promiscuous mode [ 662.285078][T25011] syzkaller1: entered allmulticast mode [ 664.235156][T24988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 664.572277][T25022] netlink: 'syz.1.5122': attribute type 18 has an invalid length. [ 664.618267][T25022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5122'. [ 664.637367][T25026] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 664.799866][T25029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5125'. [ 664.858621][T25029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5125'. [ 664.975468][T25037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5126'. [ 664.996308][T25038] netlink: 'syz.2.5129': attribute type 1 has an invalid length. [ 665.008143][T25038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5129'. [ 665.133519][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 665.227504][T25038] tcf_pedit_act: 7 callbacks suppressed [ 665.227536][T25038] tc action pedit 'at' offset 5 out of bounds [ 665.241856][T25038] tc action pedit 'at' offset 5 out of bounds [ 665.248640][T25038] tc action pedit 'at' offset 5 out of bounds [ 665.255493][T25038] tc action pedit 'at' offset 5 out of bounds [ 665.262275][T25038] tc action pedit 'at' offset 5 out of bounds [ 665.269057][T25038] tc action pedit 'at' offset 5 out of bounds [ 665.275864][T25038] tc action pedit 'at' offset 5 out of bounds [ 665.284257][T25038] tc action pedit 'at' offset 5 out of bounds [ 665.291077][T25038] tc action pedit 'at' offset 5 out of bounds [ 665.297858][T25038] tc action pedit 'at' offset 5 out of bounds [ 665.304677][T25038] 0: reclassify loop, rule prio 0, protocol 800 [ 665.336658][T25047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5132'. [ 665.397020][T25047] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5132'. [ 665.444003][T25050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5132'. [ 665.596739][T25052] sit0: entered promiscuous mode [ 665.621872][T25052] netlink: 'syz.4.5132': attribute type 1 has an invalid length. [ 665.659004][T25052] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5132'. [ 665.976674][T25065] openvswitch: netlink: IP tunnel dst address not specified [ 666.008546][T25065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.037065][T25067] netlink: 'syz.0.5137': attribute type 1 has an invalid length. [ 666.046843][T25065] netlink: 'syz.2.5136': attribute type 6 has an invalid length. [ 666.262246][T25067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 666.314249][T25074] bond2: (slave gretap2): making interface the new active one [ 666.335580][T25074] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 666.525224][T25087] "syz.0.5142" (25087) uses obsolete ecb(arc4) skcipher [ 668.902520][T25065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 669.358950][T25104] netlink: 'syz.3.5145': attribute type 3 has an invalid length. [ 669.507913][T25094] IPv6: sit2: Disabled Multicast RS [ 669.594950][T25094] sit2: entered allmulticast mode [ 669.862253][T25120] bond3: option all_slaves_active: invalid value (222) [ 669.878854][T25120] bond3 (unregistering): Released all slaves [ 670.183025][T25134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.214776][T25131] smc: net device vlan1 applied user defined pnetid SYZ2 [ 671.113010][T25158] syzkaller0: entered promiscuous mode [ 671.169964][T25158] syzkaller0: entered allmulticast mode [ 672.081726][T25193] __nla_validate_parse: 1 callbacks suppressed [ 672.081759][T25193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5172'. [ 672.709915][ T5624] hid-generic 0005:10CF:0000.0006: hidraw0: BLUETOOTH HID v0.07 Device [syz0] on aa:aa:aa:aa:aa:aa [ 673.987730][T25247] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5183'. [ 674.055173][T25259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.338825][T25266] lo: entered allmulticast mode [ 674.353007][T25253] syzkaller0: entered promiscuous mode [ 674.371595][T25253] syzkaller0: entered allmulticast mode [ 674.519286][T25266] lo: left allmulticast mode [ 674.871969][T25284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5195'. [ 675.052439][T25289] syzkaller1: entered promiscuous mode [ 675.101953][T25289] syzkaller1: entered allmulticast mode [ 675.204285][T25299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5196'. [ 675.403188][T25294] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5196'. [ 675.424816][T25299] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5196'. [ 675.674461][T25316] netlink: 'syz.2.5201': attribute type 4 has an invalid length. [ 675.866879][T25322] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5204'. [ 676.465791][T25334] batadv_slave_1: entered allmulticast mode [ 676.536871][T25340] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 676.807214][T25353] tipc: Resetting bearer [ 676.958676][T25358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5214'. [ 679.207779][T25339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 679.619969][T25387] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 679.743641][T25382] vlan1: entered promiscuous mode [ 679.762851][T25382] bridge0: entered promiscuous mode [ 680.176757][T25403] vlan3: entered allmulticast mode [ 680.225736][T25409] netlink: 'syz.1.5228': attribute type 11 has an invalid length. [ 680.239630][T25409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5228'. [ 680.253227][T25409] netlink: 'syz.1.5228': attribute type 11 has an invalid length. [ 680.267887][T25409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5228'. [ 680.552772][T25417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5231'. [ 680.698176][T25419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5230'. [ 680.782058][T25417] pim6reg: entered allmulticast mode [ 680.847931][T25417] pim6reg: left allmulticast mode [ 681.213176][T25432] tipc: Resetting bearer [ 681.336281][T25431] tipc: Resetting bearer [ 681.408008][T25441] tipc: Enabling of bearer rejected, failed to enable media [ 681.791768][T25454] netlink: 'syz.3.5241': attribute type 30 has an invalid length. [ 681.895123][T25453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5240'. [ 681.950467][T25458] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 682.130635][T25460] veth1_to_bond: entered allmulticast mode [ 682.250942][T25459] veth1_to_bond: left allmulticast mode [ 683.041033][T25493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5254'. [ 683.773214][T25518] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5261'. [ 683.824503][T25521] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5261'. [ 683.985826][T25528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5263'. [ 683.998147][T25528] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5263'. [ 684.050472][T25523] IPVS: persistence engine module ip_vs_pe_À not found [ 684.092129][T25529] netlink: 'syz.2.5263': attribute type 4 has an invalid length. [ 687.637827][T25518] gretap0: entered promiscuous mode [ 687.644516][T25521] 0ªî{X¹¦: renamed from gretap0 [ 687.652809][T25521] 0ªî{X¹¦: left promiscuous mode [ 687.658445][T25521] 0ªî{X¹¦: entered allmulticast mode [ 687.671517][T25521] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 687.696422][T25530] syzkaller0: left promiscuous mode [ 687.704454][T25530] syzkaller0: left allmulticast mode [ 687.711586][T25530] tipc: Resetting bearer [ 687.734293][T25538] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 687.747408][T25538] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 687.756692][T25538] gretap3: entered promiscuous mode [ 687.763372][T25538] gretap3: entered allmulticast mode [ 688.754359][T25579] __nla_validate_parse: 1 callbacks suppressed [ 688.754377][T25579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5274'. [ 688.888854][T25574] netlink: 'syz.1.5272': attribute type 11 has an invalid length. [ 689.149804][T25599] tipc: Enabled bearer , priority 0 [ 689.254320][T25605] netlink: 'syz.1.5280': attribute type 21 has an invalid length. [ 689.284118][T25605] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5280'. [ 689.323626][T25606] netlink: 'syz.1.5280': attribute type 21 has an invalid length. [ 689.332666][T25599] syzkaller0: entered promiscuous mode [ 689.351387][T25606] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5280'. [ 689.353677][T25599] syzkaller0: entered allmulticast mode [ 689.409977][T25599] tipc: Resetting bearer [ 689.461770][T25605] netlink: 'syz.1.5280': attribute type 4 has an invalid length. [ 689.519812][T25605] netlink: 'syz.1.5280': attribute type 5 has an invalid length. [ 689.567775][T25605] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5280'. [ 689.642870][T25606] netlink: 'syz.1.5280': attribute type 4 has an invalid length. [ 689.694663][T25606] netlink: 'syz.1.5280': attribute type 5 has an invalid length. [ 689.713621][T25606] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5280'. [ 689.730973][T25623] netlink: 'syz.0.5284': attribute type 1 has an invalid length. [ 689.755255][T25597] tipc: Resetting bearer [ 690.420961][T25646] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5288'. [ 692.686758][T25597] tipc: Disabling bearer [ 693.843087][T25702] syzkaller1: entered promiscuous mode [ 693.884489][T25702] syzkaller1: entered allmulticast mode [ 694.112854][T25711] veth0_to_team: entered promiscuous mode [ 694.239552][T25717] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 694.242131][T25718] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 694.304479][T25717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5304'. [ 694.337721][T25717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5304'. [ 694.371784][T25718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5304'. [ 694.420871][T25718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5304'. [ 694.594326][T25727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5307'. [ 694.609770][T25727] xt_TPROXY: Can be used only with -p tcp or -p udp [ 694.893008][T25742] netlink: 'syz.1.5312': attribute type 21 has an invalid length. [ 694.935381][T25742] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5312'. [ 695.038622][T25750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5314'. [ 695.173741][T25757] openvswitch: netlink: Unknown nsh attribute 0 [ 695.191875][T25750] 8021q: adding VLAN 0 to HW filter on device bond7 [ 695.217279][T25759] openvswitch: netlink: Unknown nsh attribute 0 [ 695.243289][T25767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5316'. [ 695.261707][T25750] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5314'. [ 695.276412][T25755] macvlan2: entered promiscuous mode [ 695.291414][T25755] macvlan2: entered allmulticast mode [ 695.310422][T25755] bond7: entered promiscuous mode [ 695.329017][T25763] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5314'. [ 695.365284][T25755] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 695.448640][T25755] bond7: left promiscuous mode [ 695.806307][T25778] netlink: 'syz.4.5320': attribute type 10 has an invalid length. [ 695.819852][T25784] hsr_slave_0: left promiscuous mode [ 695.828731][T25784] hsr_slave_1: left promiscuous mode [ 696.355706][T25799] 8021q: VLANs not supported on tunl0 [ 697.485444][T25858] gretap2: entered promiscuous mode [ 697.517189][T25858] batman_adv: batadv0: Adding interface: gretap2 [ 697.531466][T25860] can: request_module (can-proto-0) failed. [ 697.539448][T25858] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 697.581611][T25858] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 697.608463][T25867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.844624][T25880] netlink: 'syz.3.5353': attribute type 30 has an invalid length. [ 697.885594][T25880] bond8: option arp_missed_max: invalid value (0) [ 697.892900][T25880] bond8: option arp_missed_max: allowed values 1 - 255 [ 697.902575][T25883] netlink: 'syz.3.5353': attribute type 30 has an invalid length. [ 697.914668][T25880] bond8 (unregistering): Released all slaves [ 698.102223][T25883] bond8: option arp_missed_max: invalid value (0) [ 698.122998][T25883] bond8: option arp_missed_max: allowed values 1 - 255 [ 698.141071][T25883] bond8 (unregistering): Released all slaves [ 698.544744][T25914] netlink: 'syz.1.5361': attribute type 1 has an invalid length. [ 699.614157][T25976] netlink: 'syz.0.5377': attribute type 1 has an invalid length. [ 699.649106][T25972] netlink: 'syz.0.5377': attribute type 1 has an invalid length. [ 699.679982][T25980] __nla_validate_parse: 9 callbacks suppressed [ 699.680014][T25980] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.5380'. [ 699.715575][T25983] netlink: 'syz.1.5381': attribute type 13 has an invalid length. [ 699.728164][T25972] Cannot find del_set index 4 as target [ 699.740445][T25976] Cannot find del_set index 4 as target [ 699.806438][T25983] tipc: Resetting bearer [ 700.125235][T26000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5385'. [ 700.145891][T26000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5385'. [ 700.171546][T26006] tipc: New replicast peer: 255.255.255.255 [ 700.196741][T26006] tipc: Enabled bearer , priority 10 [ 700.224146][T26006] openvswitch: netlink: IP tunnel TTL not specified. [ 700.252391][T26000] team0 (unregistering): Port device team_slave_1 removed [ 700.496613][T26027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5391'. [ 700.795662][T26042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5394'. [ 700.819820][T26042] batadv0: Caught tx_queue_len zero misconfig [ 700.939841][T26048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5399'. [ 701.008062][T23888] batadv1: left allmulticast mode [ 701.031003][T23888] batadv1: left promiscuous mode [ 701.047797][T23888] bridge0: port 3(batadv1) entered disabled state [ 701.096787][T23888] bridge_slave_1: left allmulticast mode [ 701.126678][T23888] bridge_slave_1: left promiscuous mode [ 701.142043][T23888] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.172762][T26054] IPv6: addrconf: prefix option has invalid lifetime [ 701.179526][T26054] IPv6: addrconf: prefix option has invalid lifetime [ 701.209977][T23888] bridge_slave_0: left allmulticast mode [ 701.231742][T23888] bridge_slave_0: left promiscuous mode [ 701.254132][T23888] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.845274][T26084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5407'. [ 702.143750][T23888] bond6 (unregistering): (slave bridge8): Releasing backup interface [ 702.186103][T23888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.196176][T23888] bond_slave_0: left promiscuous mode [ 702.207809][T23888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.217253][T23888] bond_slave_1: left promiscuous mode [ 702.223208][T23888] bond0 (unregistering): Released all slaves [ 702.236532][T23888] bond1 (unregistering): Released all slaves [ 702.257018][T23888] bond2 (unregistering): Released all slaves [ 702.285209][T23888] bond3 (unregistering): Released all slaves [ 702.304450][T23888] bond4 (unregistering): Released all slaves [ 702.326365][T23888] bond5 (unregistering): Released all slaves [ 702.361591][T23888] bond6 (unregistering): Released all slaves [ 702.382498][T23888] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 702.392223][T23888] bond7 (unregistering): Released all slaves [ 702.424029][T23888] bond8 (unregistering): Released all slaves [ 702.452435][T23888] bond9 (unregistering): Released all slaves [ 702.471662][T23888] bond10 (unregistering): Released all slaves [ 702.509834][ T8660] tipc: Node number set to 1689497091 [ 702.643045][T26087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5408'. [ 702.644234][T26081] lo: entered allmulticast mode [ 702.815621][T23888] : left promiscuous mode [ 702.973751][T26092] 8021q: adding VLAN 0 to HW filter on device bond3 [ 702.986202][T26092] bond0: (slave bond3): Enslaving as a backup interface with a down link [ 703.122520][T26100] bond8 (unregistering): Released all slaves [ 703.146222][T26109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5412'. [ 703.174827][T26109] netlink: 'syz.0.5412': attribute type 10 has an invalid length. [ 703.184402][T26107] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 703.209034][T26109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5412'. [ 703.286905][T23888] tipc: Disabling bearer [ 703.309143][T23888] tipc: Left network mode [ 703.335452][T26109] geneve3: entered promiscuous mode [ 703.356988][T26109] geneve3: entered allmulticast mode [ 703.810631][T26144] netlink: 'syz.0.5421': attribute type 1 has an invalid length. [ 704.153309][T26153] netlink: 'syz.4.5424': attribute type 12 has an invalid length. [ 704.267120][T26153] bond4: option primary_reselect: invalid value (255) [ 704.279599][T26153] bond4 (unregistering): Released all slaves [ 704.418051][T26156] netlink: 'syz.0.5425': attribute type 10 has an invalid length. [ 704.433581][T14768] smbdirect: ib_dev[syz1] removed [ 704.513804][T26165] openvswitch: netlink: ct_state flags ffffffff unsupported [ 704.838442][T26170] __nla_validate_parse: 3 callbacks suppressed [ 704.838474][T26170] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5428'. [ 704.856861][T26170] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5428'. [ 704.899388][T26168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5430'. [ 704.922051][ T29] audit: type=1800 audit(1784409006.508:16): pid=26171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5429" name="memory.events" dev="tmpfs" ino=1906 res=0 errno=0 [ 705.157768][T26188] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5433'. [ 705.445402][T26201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5438'. [ 705.814338][T23888] hsr_slave_0: left promiscuous mode [ 705.825999][T26227] netlink: 'syz.3.5447': attribute type 1 has an invalid length. [ 705.842069][T23888] hsr_slave_1: left promiscuous mode [ 705.853905][T23888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.862243][T26225] netlink: 'syz.3.5447': attribute type 1 has an invalid length. [ 705.886057][T23888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.976019][T26233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5448'. [ 706.397755][T26246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5453'. [ 706.668384][T26245] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 706.678337][T14757] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 706.700665][T14757] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 706.747981][T14757] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 706.772786][T14757] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 706.963777][T26260] xt_hashlimit: size too large, truncated to 1048576 [ 707.017513][T26260] netlink: zone id is out of range [ 707.064817][T26260] netlink: zone id is out of range [ 707.086368][T26260] netlink: zone id is out of range [ 707.133316][T26271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5459'. [ 707.144373][T26260] netlink: zone id is out of range [ 707.168550][T26260] netlink: zone id is out of range [ 707.180822][T26271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5459'. [ 707.209292][T26260] netlink: zone id is out of range [ 707.227859][T26260] netlink: zone id is out of range [ 707.249926][T26260] netlink: zone id is out of range [ 707.299261][T26260] netlink: zone id is out of range [ 707.320785][T26260] netlink: zone id is out of range [ 707.477911][T26275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.527788][T23888] IPVS: stop unused estimator thread 0... [ 707.801902][T26295] batadv_slave_1: entered allmulticast mode [ 707.804622][T26294] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 708.050734][T26309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5469'. [ 708.997915][T26356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.201160][T26428] __nla_validate_parse: 7 callbacks suppressed [ 710.201179][T26428] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5499'. [ 710.408180][T26444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5505'. [ 710.424703][T26440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5502'. [ 710.439219][T26442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5504'. [ 710.531263][T26445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5502'. [ 710.534743][T26450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5507'. [ 710.643862][T26458] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5509'. [ 710.678816][T26455] syzkaller0: entered promiscuous mode [ 710.684769][T26455] syzkaller0: entered allmulticast mode [ 710.854141][T26463] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5510'. [ 711.069275][T26478] syzkaller0: entered promiscuous mode [ 711.080636][T26478] syzkaller0: entered allmulticast mode [ 711.088504][T26478] tipc: Resetting bearer [ 711.364694][T26492] wg2 speed is unknown, defaulting to 1000 [ 711.399906][T26492] wg2 speed is unknown, defaulting to 1000 [ 711.419723][T26492] wg2 speed is unknown, defaulting to 1000 [ 711.420492][T26498] netlink: 364 bytes leftover after parsing attributes in process `syz.4.5520'. [ 711.571951][T26504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 711.579266][T26504] IPv6: NLM_F_CREATE should be set when creating new route [ 711.586582][T26504] IPv6: NLM_F_CREATE should be set when creating new route [ 711.593854][T26504] IPv6: NLM_F_CREATE should be set when creating new route [ 711.603213][T26504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 711.649713][T26508] lo: Caught tx_queue_len zero misconfig [ 711.668714][T26508] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 711.769578][T26511] syzkaller0: entered promiscuous mode [ 711.782669][T26511] syzkaller0: entered allmulticast mode [ 711.804702][T26511] netlink: 'syz.0.5524': attribute type 2 has an invalid length. [ 711.816962][T26511] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5524'. [ 712.099782][T26521] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20001 [ 712.293550][T26492] infiniband syz2: set down [ 712.302732][ T8670] wg2 speed is unknown, defaulting to 1000 [ 712.319543][T26492] infiniband syz2: added wg2 [ 712.340254][T26492] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 712.348402][T26492] infiniband syz2: Couldn't open port 1 [ 712.392847][T26492] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 712.444972][T26492] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 712.463408][T26492] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 712.509728][T26492] RDS/IB: syz2: added [ 712.513984][T26492] smc: adding ib device syz2 with port count 1 [ 712.520453][T26492] smc: ib device syz2 port 1 has no pnetid [ 712.552076][ T189] wg2 speed is unknown, defaulting to 1000 [ 712.564971][T26492] wg2 speed is unknown, defaulting to 1000 [ 712.608426][T26540] syzkaller0: entered promiscuous mode [ 712.640239][T26540] syzkaller0: entered allmulticast mode [ 712.791130][T26545] gtp0: entered allmulticast mode [ 712.807466][T26545] team0: Device gtp0 is of different type [ 713.341098][T26492] wg2 speed is unknown, defaulting to 1000 [ 713.404755][T26574] netlink: 'syz.3.5543': attribute type 32 has an invalid length. [ 713.464688][T23883] tipc: Subscription rejected, illegal request [ 713.576722][T26574] bond8: Setting coupled_control to off (0) [ 714.274548][T26492] wg2 speed is unknown, defaulting to 1000 [ 714.947047][T26492] wg2 speed is unknown, defaulting to 1000 [ 715.307924][T26492] wg2 speed is unknown, defaulting to 1000 [ 715.527085][T26649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 715.745258][T26698] __nla_validate_parse: 10 callbacks suppressed [ 715.745303][T26698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5571'. [ 715.774465][T26698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5571'. [ 715.820971][T26698] netlink: 'syz.2.5571': attribute type 3 has an invalid length. [ 715.881641][T26492] wg2 speed is unknown, defaulting to 1000 [ 716.206137][T26708] net_ratelimit: 3 callbacks suppressed [ 716.206154][T26708] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 716.511508][T26722] netlink: 1371 bytes leftover after parsing attributes in process `syz.3.5576'. [ 717.567932][T26767] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 717.624231][T26770] netlink: 'syz.0.5589': attribute type 1 has an invalid length. [ 717.633829][T26768] openvswitch: netlink: IP tunnel TTL not specified. [ 717.972128][T26784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5592'. [ 718.000962][T26784] nbd: must specify at least one socket [ 718.206253][T26794] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5596'. [ 718.439654][T26752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5583'. [ 718.450587][T26752] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5583'. [ 718.547742][T26800] syzkaller1: entered promiscuous mode [ 718.565053][T26800] syzkaller1: entered allmulticast mode [ 718.788463][T26806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5599'. [ 718.896004][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5599'. [ 718.954966][T26810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5600'. [ 719.369987][T26822] rdma_rxe: rxe_newlink: failed to add wg2 [ 719.421853][T26825] veth5: entered promiscuous mode [ 719.492444][T26829] vlan2: entered allmulticast mode [ 719.498374][T26829] bridge7: entered allmulticast mode [ 719.529863][T26823] bridge7: port 1(erspan0) entered blocking state [ 719.538658][T26823] bridge7: port 1(erspan0) entered disabled state [ 719.549894][T26823] erspan0: entered allmulticast mode [ 719.581501][T26823] erspan0: entered promiscuous mode [ 719.609646][T26823] bridge7: port 1(erspan0) entered blocking state [ 719.617033][T26823] bridge7: port 1(erspan0) entered forwarding state [ 719.945353][T26844] IPv6: sit1: Disabled Multicast RS [ 720.009936][T26851] netlink: 'syz.4.5613': attribute type 29 has an invalid length. [ 720.201294][T26860] tipc: Resetting bearer [ 720.265196][T26859] tipc: Resetting bearer [ 720.346135][T26868] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 720.786750][T14767] tipc: Resetting bearer [ 721.020323][T26891] netlink: 'syz.0.5629': attribute type 1 has an invalid length. [ 721.034449][T26892] __nla_validate_parse: 12 callbacks suppressed [ 721.034466][T26892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5627'. [ 721.118254][T26891] 8021q: adding VLAN 0 to HW filter on device bond4 [ 721.179201][T26891] xt_hashlimit: invalid interval [ 721.257279][T26901] xt_ipcomp: unknown flags 1D [ 721.272875][T26898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5629'. [ 721.298048][T26891] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 721.309190][T26898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5629'. [ 721.334125][T26891] bond5 (unregistering): Released all slaves [ 722.015376][T26938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5641'. [ 722.043150][T26938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5641'. [ 722.492983][T26966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5648'. [ 722.561466][T26968] netlink: 'syz.2.5651': attribute type 5 has an invalid length. [ 722.577403][T26973] netlink: 'syz.4.5650': attribute type 1 has an invalid length. [ 722.592085][T26973] netlink: 'syz.4.5650': attribute type 4 has an invalid length. [ 722.608369][T26973] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5650'. [ 722.633577][T26975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5652'. [ 722.671736][T26975] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5652'. [ 722.785430][T26985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5655'. [ 723.154631][T27002] tipc: Resetting bearer [ 723.161134][T27002] veth0_macvtap: entered allmulticast mode [ 723.167118][T27002] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 723.925600][T27038] netlink: 'syz.3.5670': attribute type 2 has an invalid length. [ 724.351491][T27061] openvswitch: netlink: IP tunnel TTL not specified. [ 724.361127][T27061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.361682][T27062] x_tables: duplicate underflow at hook 1 [ 724.462222][T27057] netlink: 'syz.3.5676': attribute type 2 has an invalid length. [ 725.202076][T27091] openvswitch: netlink: IPv6 tunnel dst address is zero [ 725.257250][T27076] wg2 speed is unknown, defaulting to 1000 [ 725.492396][T27099] netlink: 'syz.2.5690': attribute type 1 has an invalid length. [ 725.512740][T27099] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 726.633164][T27140] __nla_validate_parse: 12 callbacks suppressed [ 726.633185][T27140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5701'. [ 726.805108][T27145] netlink: 'syz.2.5703': attribute type 10 has an invalid length. [ 726.827355][T27145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5703'. [ 727.384150][T27166] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5709'. [ 727.637477][T27182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5713'. [ 727.665914][T27179] tun0: tun_chr_ioctl cmd 1074025675 [ 727.679302][T27179] tun0: persist enabled [ 727.733920][T27156] wg2 speed is unknown, defaulting to 1000 [ 728.257545][T27209] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5720'. [ 728.285674][T27209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5720'. [ 728.424478][T27214] bond0: Error: Cannot enslave bond to itself. [ 728.425987][T27215] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5722'. [ 728.626894][T27222] openvswitch: netlink: IP tunnel dst address not specified [ 728.639695][T27223] netlink: 'syz.0.5725': attribute type 21 has an invalid length. [ 728.642075][T27221] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5724'. [ 728.683282][T27224] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5724'. [ 729.339258][T27243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5729'. [ 729.823430][T27258] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 730.035755][T27271] syzkaller0: entered promiscuous mode [ 730.041620][T27271] syzkaller0: entered allmulticast mode [ 730.543994][T27300] netlink: 'syz.1.5745': attribute type 1 has an invalid length. [ 730.703096][T27300] 8021q: adding VLAN 0 to HW filter on device bond11 [ 730.719775][T27304] bond5: (slave veth0_to_bond): Releasing active interface [ 730.779294][T27304] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 730.834737][T27309] bond11: entered promiscuous mode [ 730.854580][T27309] bond11: entered allmulticast mode [ 731.644534][T27371] __nla_validate_parse: 6 callbacks suppressed [ 731.644552][T27371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5763'. [ 732.055371][T27386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5766'. [ 732.236960][T27394] veth1_to_bond: entered allmulticast mode [ 732.282383][T27394] veth1_to_bond: entered promiscuous mode [ 732.303949][T27394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5771'. [ 732.332136][T27394] veth1_to_bond (unregistering): left allmulticast mode [ 732.348773][T27394] veth1_to_bond (unregistering): left promiscuous mode [ 732.759362][T27413] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5778'. [ 732.825092][T27413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5778'. [ 732.826604][T27414] netlink: 'syz.4.5778': attribute type 32 has an invalid length. [ 732.877725][T27404] nbd1: detected capacity change from 0 to 63 [ 732.901501][T27413] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5778'. [ 732.920299][T27413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5778'. [ 732.944450][ T5636] block nbd1: Receive control failed (result -104) [ 732.974425][T27413] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5778'. [ 733.040670][T27413] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5778'. [ 733.072124][T27425] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 733.091154][T27413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5778'. [ 733.158521][T27428] sctp: [Deprecated]: syz.1.5782 (pid 27428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 733.158521][T27428] Use struct sctp_sack_info instead [ 733.770822][T27455] tc_dump_action: action bad kind [ 733.945777][T27465] netlink: 'syz.3.5792': attribute type 3 has an invalid length. [ 734.622407][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 734.637126][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 734.647114][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 734.655046][T27486] netlink: 'syz.3.5798': attribute type 2 has an invalid length. [ 734.669279][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 734.679100][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 734.734415][T27491] xt_hl: Unknown TTL match mode: 255 [ 734.906814][T27495] xt_hashlimit: size too large, truncated to 1048576 [ 735.666275][T27517] 8021q: adding VLAN 0 to HW filter on device .` [ 736.332801][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 736.731623][ T5636] Bluetooth: hci1: command tx timeout [ 736.797725][T27484] wg2 speed is unknown, defaulting to 1000 [ 737.014654][T27566] tcf_pedit_act: 7 callbacks suppressed [ 737.014687][T27566] tc action pedit 'at' offset 5 out of bounds [ 737.028768][T27566] tc action pedit 'at' offset 5 out of bounds [ 737.035559][T27566] tc action pedit 'at' offset 5 out of bounds [ 737.042380][T27566] tc action pedit 'at' offset 5 out of bounds [ 737.049189][T27566] tc action pedit 'at' offset 5 out of bounds [ 737.056042][T27566] tc action pedit 'at' offset 5 out of bounds [ 737.062889][T27566] tc action pedit 'at' offset 5 out of bounds [ 737.069725][T27566] tc action pedit 'at' offset 5 out of bounds [ 737.076518][T27566] tc action pedit 'at' offset 5 out of bounds [ 737.083296][T27566] tc action pedit 'at' offset 5 out of bounds [ 737.090098][T27566] 0: reclassify loop, rule prio 0, protocol 800 [ 737.291024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.472696][T27574] xt_time: unknown flags 0xf4 [ 737.500700][T27574] xt_time: unknown flags 0xf4 [ 737.651748][T27581] netlink: 'syz.3.5822': attribute type 11 has an invalid length. [ 737.946927][T27593] __nla_validate_parse: 8 callbacks suppressed [ 737.946947][T27593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5827'. [ 738.006243][T27593] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5827'. [ 738.075604][T27606] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5830'. [ 738.315344][T27621] netlink: 'syz.2.5835': attribute type 1 has an invalid length. [ 738.434505][T27611] syzkaller0: entered promiscuous mode [ 738.440894][T27611] syzkaller0: entered allmulticast mode [ 738.522801][T27634] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5838'. [ 738.590544][T27639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5840'. [ 738.592479][T27637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5839'. [ 738.692977][T27643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5839'. [ 738.818962][ T5636] Bluetooth: hci1: command tx timeout [ 740.896035][ T5636] Bluetooth: hci1: command tx timeout [ 741.208025][T27484] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.216656][T27484] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.224757][T27484] bridge_slave_0: entered allmulticast mode [ 741.233951][T27484] bridge_slave_0: entered promiscuous mode [ 741.242680][T27484] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.249881][T27484] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.257276][T27484] bridge_slave_1: entered allmulticast mode [ 741.266119][T27484] bridge_slave_1: entered promiscuous mode [ 741.365856][T27484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.403404][T27484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.487577][T27663] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5844'. [ 741.495095][T27484] team0: Port device team_slave_0 added [ 741.511412][T27663] openvswitch: netlink: Flow key attr not present in new flow. [ 741.526758][T27484] team0: Port device team_slave_1 added [ 741.628410][T27484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.666515][T27484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.769606][T27484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.934951][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 741.954285][T27681] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 742.013074][T27484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.032965][T27484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.064802][T27484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.101735][T27688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5843'. [ 742.324866][T27484] hsr_slave_0: entered promiscuous mode [ 742.353447][T27484] hsr_slave_1: entered promiscuous mode [ 742.371714][T27484] debugfs: 'hsr0' already exists in 'hsr' [ 742.388264][T27484] Cannot create hsr debugfs directory [ 742.412918][T27694] tipc: Resetting bearer [ 742.606912][T27693] tipc: Resetting bearer [ 742.782454][T27706] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5855'. [ 742.970959][ T5636] Bluetooth: hci1: command tx timeout [ 743.105979][T27484] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.120190][T27484] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.338543][T27484] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.404106][T27484] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.582534][T23883] tipc: Resetting bearer [ 743.689691][T27484] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.701913][T27484] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.857568][T27484] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.875298][T27484] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.547934][T27770] syzkaller0: left promiscuous mode [ 744.555611][T27770] syzkaller0: left allmulticast mode [ 744.563080][T27770] tipc: Resetting bearer [ 744.612824][T27772] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 744.809735][T27484] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 744.836635][T27484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 744.857180][T27484] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 744.888579][T27484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 744.903323][T27484] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 744.927322][T27484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 744.957830][T27484] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 744.994943][T27484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 745.004328][T27781] veth1_to_team: Caught tx_queue_len zero misconfig [ 745.108983][T27789] netlink: 996 bytes leftover after parsing attributes in process `syz.1.5874'. [ 745.477380][T27484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.582698][T27484] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.646954][T14757] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.654911][T14757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.714036][T14757] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.721878][T14757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.938914][T27812] ip6tnl0: Caught tx_queue_len zero misconfig [ 746.421626][T27824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5885'. [ 747.158229][T27840] netlink: 576 bytes leftover after parsing attributes in process `syz.2.5889'. [ 747.630081][T27859] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5893'. [ 747.798790][T27864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5893'. [ 747.802367][T27863] x_tables: duplicate underflow at hook 1 [ 747.825791][T27864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5893'. [ 748.184834][T27484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.807260][T27885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5901'. [ 748.831855][T27885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5901'. [ 749.333128][T27896] netlink: 'syz.3.5903': attribute type 11 has an invalid length. [ 749.627469][T27484] veth0_vlan: entered promiscuous mode [ 749.691168][T27484] veth1_vlan: entered promiscuous mode [ 749.909874][T27484] veth0_macvtap: entered promiscuous mode [ 749.969054][T27891] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 749.971154][T27484] veth1_macvtap: entered promiscuous mode [ 749.981370][T27910] netlink: 'syz.1.5907': attribute type 2 has an invalid length. [ 750.030663][T27910] netlink: 'syz.1.5907': attribute type 2 has an invalid length. [ 750.061369][T27910] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5907'. [ 750.095312][T27484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.153117][T27484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.242586][T23883] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.286042][T23883] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.325896][T23883] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.391469][T23883] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.897927][T14767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.932627][T14767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.043237][T14757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.080014][T14757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.414815][T27941] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.451061][T27941] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.444267][T27981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5923'. [ 752.682083][T27989] tipc: Enabling of bearer rejected, failed to enable media [ 752.707740][T27989] netlink: 170676 bytes leftover after parsing attributes in process `syz.2.5926'. [ 752.757014][T27989] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 752.798176][T27993] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5927'. [ 752.847813][T27989] openvswitch: netlink: Message has 512 unknown bytes. [ 753.169915][T28010] netlink: 'syz.3.5932': attribute type 8 has an invalid length. [ 753.200381][T28010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5932'. [ 753.372341][T28021] netlink: 'syz.4.5934': attribute type 18 has an invalid length. [ 753.434155][T28021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5934'. [ 753.484844][T28026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5935'. [ 753.820971][T28033] netlink: 'syz.1.5936': attribute type 10 has an invalid length. [ 754.036982][T28029] bond12 (unregistering): Released all slaves [ 754.429400][T28033] team0: Port device dummy0 added [ 754.459842][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 755.196668][T28084] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5948'. [ 755.278843][T28091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5947'. [ 755.492337][T28091] netlink: 284 bytes leftover after parsing attributes in process `syz.4.5947'. [ 755.533495][T28096] syzkaller0: entered promiscuous mode [ 755.538249][T28091] netlink: 'syz.4.5947': attribute type 18 has an invalid length. [ 755.563419][T28096] syzkaller0: entered allmulticast mode [ 755.581859][T28096] tipc: Resetting bearer [ 755.589004][T28099] netlink: 576 bytes leftover after parsing attributes in process `syz.4.5947'. [ 755.747695][T28093] tipc: Enabling of bearer rejected, already enabled [ 755.768928][T23883] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.812368][T23883] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.843857][T23883] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.879516][T23883] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.160990][T28122] netlink: 'syz.0.5955': attribute type 24 has an invalid length. [ 757.500575][T28174] __nla_validate_parse: 10 callbacks suppressed [ 757.500612][T28174] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5970'. [ 758.409196][T28213] netlink: 'syz.3.5984': attribute type 1 has an invalid length. [ 758.526236][T28213] bond11: entered promiscuous mode [ 758.537251][T28213] 8021q: adding VLAN 0 to HW filter on device bond11 [ 758.610286][T28221] netlink: 'syz.4.5986': attribute type 83 has an invalid length. [ 758.647253][T28215] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 758.767017][T28215] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 758.832841][T28215] bond11: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 758.907666][T28216] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 758.924786][T28216] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 759.296581][T28238] netlink: 'syz.4.5990': attribute type 1 has an invalid length. [ 759.417220][T28247] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 759.452236][T28238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 759.499377][ T29] audit: type=1800 audit(1784409061.078:17): pid=28247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5994" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2843 res=0 errno=0 [ 759.832462][T28264] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5996'. [ 760.195347][T28277] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 760.238883][T28282] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 760.547602][T28290] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 760.601214][T28290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 760.666401][T28289] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6006'. [ 761.195358][T28316] netlink: 'syz.1.6012': attribute type 3 has an invalid length. [ 761.249873][T28322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6014'. [ 761.478238][T28324] netlink: 'syz.0.6015': attribute type 13 has an invalid length. [ 761.600608][ T8652] syz_tun: tun_net_xmit 110 [ 761.672781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 761.907146][T28346] xt_hashlimit: overflow, try lower: 3/0 [ 762.116933][T28349] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6023'. [ 762.232596][ T8652] syz_tun: tun_net_xmit 110 [ 762.300796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.682144][T28370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6029'. [ 763.049682][T28387] netlink: 'syz.1.6034': attribute type 1 has an invalid length. [ 763.081056][T28387] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6034'. [ 763.091291][ T1682] block nbd1: Possible stuck request ffff888051380000: control (read@0,1024B). Runtime 30 seconds [ 763.107158][ T1682] block nbd1: Possible stuck request ffff8880513801c0: control (read@1024,1024B). Runtime 30 seconds [ 763.119699][ T1682] block nbd1: Possible stuck request ffff888051380380: control (read@2048,1024B). Runtime 30 seconds [ 763.140719][ T1682] block nbd1: Possible stuck request ffff888051380540: control (read@3072,1024B). Runtime 30 seconds [ 763.295617][T28392] dvmrp8: entered allmulticast mode [ 779.064755][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 779.078617][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 779.088292][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 779.100877][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 779.111421][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 779.365318][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 779.378927][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 779.388545][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 779.402556][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 779.414594][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 779.481967][ T5636] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 779.499664][ T5636] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 779.512957][ T5636] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 779.524041][ T5636] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 779.533873][ T5636] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 779.572019][ T4942] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 779.595049][ T4942] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 779.618385][ T5636] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 779.623820][ T4942] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 779.643142][ T4942] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 779.654724][T28424] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 779.664834][ T4942] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 779.675297][T28424] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 779.675504][ T4942] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 779.704263][ T4942] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 781.210251][ T4942] Bluetooth: hci5: command tx timeout [ 781.450858][ T4942] Bluetooth: hci6: command tx timeout [ 781.595084][T28409] wg2 speed is unknown, defaulting to 1000 [ 781.690367][ T4942] Bluetooth: hci7: command tx timeout [ 781.770188][ T4942] Bluetooth: hci9: command tx timeout [ 781.850365][ T4942] Bluetooth: hci8: command tx timeout [ 782.067055][T28412] wg2 speed is unknown, defaulting to 1000 [ 782.784349][T28409] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.794903][T28409] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.803457][T28409] bridge_slave_0: entered allmulticast mode [ 782.816703][T28409] bridge_slave_0: entered promiscuous mode [ 782.851169][T28418] wg2 speed is unknown, defaulting to 1000 [ 782.868187][T28409] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.877747][T28409] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.887021][T28409] bridge_slave_1: entered allmulticast mode [ 782.932807][T28409] bridge_slave_1: entered promiscuous mode [ 783.077512][T28409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.110142][T28409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.240790][T28409] team0: Port device team_slave_0 added [ 783.286078][T28409] team0: Port device team_slave_1 added [ 783.300423][ T4942] Bluetooth: hci5: command tx timeout [ 783.442828][T28409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.451046][T28409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.480167][T28409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.520410][T28409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.529898][T28409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.560191][T28409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.565814][ T4942] Bluetooth: hci6: command tx timeout [ 783.625162][T28417] wg2 speed is unknown, defaulting to 1000 [ 783.770330][ T4942] Bluetooth: hci7: command tx timeout [ 783.860660][ T4942] Bluetooth: hci9: command tx timeout [ 783.930401][ T4942] Bluetooth: hci8: command tx timeout [ 783.951758][T28409] hsr_slave_0: entered promiscuous mode [ 783.960733][T28409] hsr_slave_1: entered promiscuous mode [ 783.968731][T28409] debugfs: 'hsr0' already exists in 'hsr' [ 783.975866][T28409] Cannot create hsr debugfs directory [ 784.175735][T28414] wg2 speed is unknown, defaulting to 1000 [ 784.827000][T28412] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.835624][T28412] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.844179][T28412] bridge_slave_0: entered allmulticast mode [ 784.854464][T28412] bridge_slave_0: entered promiscuous mode [ 784.954884][T28412] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.963624][T28412] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.976078][T28412] bridge_slave_1: entered allmulticast mode [ 784.986393][T28412] bridge_slave_1: entered promiscuous mode [ 785.198838][T28412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.255446][T28412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.370395][ T4942] Bluetooth: hci5: command tx timeout [ 785.448648][T28412] team0: Port device team_slave_0 added [ 785.547740][T28412] team0: Port device team_slave_1 added [ 785.621710][ T4942] Bluetooth: hci6: command tx timeout [ 785.674975][T28412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.683625][T28412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.713391][T28412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.786082][T28412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.794347][T28412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.823674][T28412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.850430][ T4942] Bluetooth: hci7: command tx timeout [ 785.930771][ T4942] Bluetooth: hci9: command tx timeout [ 786.010388][ T4942] Bluetooth: hci8: command tx timeout [ 786.070065][T28418] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.077974][T28418] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.086943][T28418] bridge_slave_0: entered allmulticast mode [ 786.097631][T28418] bridge_slave_0: entered promiscuous mode [ 786.203846][T28412] hsr_slave_0: entered promiscuous mode [ 786.212513][T28412] hsr_slave_1: entered promiscuous mode [ 786.219936][T28412] debugfs: 'hsr0' already exists in 'hsr' [ 786.226536][T28412] Cannot create hsr debugfs directory [ 786.233041][T28418] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.243943][T28418] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.252564][T28418] bridge_slave_1: entered allmulticast mode [ 786.263223][T28418] bridge_slave_1: entered promiscuous mode [ 786.458436][T28418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.535924][T28418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.546298][T28417] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.554248][T28417] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.562431][T28417] bridge_slave_0: entered allmulticast mode [ 786.572967][T28417] bridge_slave_0: entered promiscuous mode [ 786.662484][T28417] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.670962][T28417] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.679112][T28417] bridge_slave_1: entered allmulticast mode [ 786.687385][T28417] bridge_slave_1: entered promiscuous mode [ 786.811336][T28418] team0: Port device team_slave_0 added [ 786.873386][T28418] team0: Port device team_slave_1 added [ 786.884508][T28417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.964369][T28417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.087100][T28414] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.095082][T28414] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.103432][T28414] bridge_slave_0: entered allmulticast mode [ 787.113489][T28414] bridge_slave_0: entered promiscuous mode [ 787.124682][T28418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.132738][T28418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.162161][T28418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.234655][T28414] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.242784][T28414] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.251415][T28414] bridge_slave_1: entered allmulticast mode [ 787.259955][T28414] bridge_slave_1: entered promiscuous mode [ 787.270957][T28418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.278889][T28418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.308688][T28418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.326932][T28417] team0: Port device team_slave_0 added [ 787.409511][T28417] team0: Port device team_slave_1 added [ 787.460849][ T4942] Bluetooth: hci5: command tx timeout [ 787.469495][T28414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.527058][T28414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.665752][T28414] team0: Port device team_slave_0 added [ 787.673176][T28417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.680785][T28417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.709905][ T4942] Bluetooth: hci6: command tx timeout [ 787.711305][T28417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.734816][T28417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.742721][T28417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.771607][T28417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.814550][T28414] team0: Port device team_slave_1 added [ 787.889335][T28418] hsr_slave_0: entered promiscuous mode [ 787.898051][T28418] hsr_slave_1: entered promiscuous mode [ 787.905677][T28418] debugfs: 'hsr0' already exists in 'hsr' [ 787.912129][T28418] Cannot create hsr debugfs directory [ 787.941083][ T4942] Bluetooth: hci7: command tx timeout [ 787.984249][T28414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.991920][T28414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.022192][ T4942] Bluetooth: hci9: command tx timeout [ 788.022872][T28414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.045609][T28414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.053715][T28414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.084390][T28414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.098045][ T4942] Bluetooth: hci8: command tx timeout [ 788.297025][T28417] hsr_slave_0: entered promiscuous mode [ 788.305195][T28417] hsr_slave_1: entered promiscuous mode [ 788.313790][T28417] debugfs: 'hsr0' already exists in 'hsr' [ 788.320603][T28417] Cannot create hsr debugfs directory [ 788.568206][T28414] hsr_slave_0: entered promiscuous mode [ 788.577223][T28414] hsr_slave_1: entered promiscuous mode [ 788.585523][T28414] debugfs: 'hsr0' already exists in 'hsr' [ 788.592886][T28414] Cannot create hsr debugfs directory [ 793.135755][ T1682] block nbd1: Possible stuck request ffff888051380000: control (read@0,1024B). Runtime 60 seconds [ 793.147919][ T1682] block nbd1: Possible stuck request ffff8880513801c0: control (read@1024,1024B). Runtime 60 seconds [ 793.171187][ T1682] block nbd1: Possible stuck request ffff888051380380: control (read@2048,1024B). Runtime 60 seconds [ 793.183799][ T1682] block nbd1: Possible stuck request ffff888051380540: control (read@3072,1024B). Runtime 60 seconds [ 795.540990][ T4991] udevd[4991]: worker [25554] /devices/virtual/block/nbd1 is taking a long time [ 823.212525][ T1682] block nbd1: Possible stuck request ffff888051380000: control (read@0,1024B). Runtime 90 seconds [ 823.225235][ T1682] block nbd1: Possible stuck request ffff8880513801c0: control (read@1024,1024B). Runtime 90 seconds [ 823.237473][ T1682] block nbd1: Possible stuck request ffff888051380380: control (read@2048,1024B). Runtime 90 seconds [ 823.249947][ T1682] block nbd1: Possible stuck request ffff888051380540: control (read@3072,1024B). Runtime 90 seconds [ 839.545668][T28415] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 839.558716][T28415] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 839.569711][T28415] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 839.584682][T28415] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 839.599482][T28415] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 839.711915][T28415] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 839.728000][T28415] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 839.750864][T28415] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 839.766847][T28415] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 839.779258][T28415] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 839.948712][ T4942] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 839.966876][ T4942] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 839.977853][ T4942] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 839.998837][ T4942] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 840.003362][T28424] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 840.024485][ T4942] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 840.027282][T28424] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 840.042001][T28424] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 840.056641][T28424] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 840.110844][T28415] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 840.216032][T28424] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 840.242570][T28424] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 840.253774][T28424] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 840.273773][T28424] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 840.287660][T28424] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 841.692234][T23521] Bluetooth: hci10: command tx timeout [ 841.850443][T23521] Bluetooth: hci11: command tx timeout [ 842.087542][T28506] wg2 speed is unknown, defaulting to 1000 [ 842.170495][T23521] Bluetooth: hci13: command tx timeout [ 842.170496][T28424] Bluetooth: hci12: command tx timeout [ 842.420459][T23521] Bluetooth: hci14: command tx timeout [ 842.528331][T28508] wg2 speed is unknown, defaulting to 1000 [ 843.299023][T28506] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.307277][T28506] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.317488][T28506] bridge_slave_0: entered allmulticast mode [ 843.330501][T28506] bridge_slave_0: entered promiscuous mode [ 843.343914][T28506] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.352923][T28506] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.364579][T28506] bridge_slave_1: entered allmulticast mode [ 843.376062][T28506] bridge_slave_1: entered promiscuous mode [ 843.391695][T28515] wg2 speed is unknown, defaulting to 1000 [ 843.543534][T28506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.574880][T28506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.734837][T28506] team0: Port device team_slave_0 added [ 843.768325][T28506] team0: Port device team_slave_1 added [ 843.781291][T23521] Bluetooth: hci10: command tx timeout [ 843.901047][T28506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.922437][T28506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.950873][T23521] Bluetooth: hci11: command tx timeout [ 843.970404][T28506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.989712][T28506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.999303][T28506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.028918][T28506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.183043][T28513] wg2 speed is unknown, defaulting to 1000 [ 844.251439][T23521] Bluetooth: hci13: command tx timeout [ 844.252450][T28424] Bluetooth: hci12: command tx timeout [ 844.263397][T28506] hsr_slave_0: entered promiscuous mode [ 844.265891][T28506] hsr_slave_1: entered promiscuous mode [ 844.292903][T28506] debugfs: 'hsr0' already exists in 'hsr' [ 844.300584][T28506] Cannot create hsr debugfs directory [ 844.490362][T28424] Bluetooth: hci14: command tx timeout [ 844.878780][T28519] wg2 speed is unknown, defaulting to 1000 [ 845.363548][T28508] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.372727][T28508] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.381525][T28508] bridge_slave_0: entered allmulticast mode [ 845.392744][T28508] bridge_slave_0: entered promiscuous mode [ 845.473101][T28508] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.481770][T28508] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.489895][T28508] bridge_slave_1: entered allmulticast mode [ 845.500847][T28508] bridge_slave_1: entered promiscuous mode [ 845.793527][T28508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.860263][T28424] Bluetooth: hci10: command tx timeout [ 845.885411][T28508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.010406][T28424] Bluetooth: hci11: command tx timeout [ 846.099525][T28508] team0: Port device team_slave_0 added [ 846.157634][T28508] team0: Port device team_slave_1 added [ 846.226489][T28515] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.234507][T28515] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.242945][T28515] bridge_slave_0: entered allmulticast mode [ 846.258240][T28515] bridge_slave_0: entered promiscuous mode [ 846.325219][T28515] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.333858][T28424] Bluetooth: hci12: command tx timeout [ 846.340610][T28424] Bluetooth: hci13: command tx timeout [ 846.346955][T28515] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.362190][T28515] bridge_slave_1: entered allmulticast mode [ 846.372614][T28515] bridge_slave_1: entered promiscuous mode [ 846.407924][T28508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.418148][T28508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.447253][T28508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.523246][T28508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.530963][T28508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.559936][T28508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.573206][T28424] Bluetooth: hci14: command tx timeout [ 846.642719][T28515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.670937][T28515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.879178][T28515] team0: Port device team_slave_0 added [ 846.905185][T28515] team0: Port device team_slave_1 added [ 847.033662][T28508] hsr_slave_0: entered promiscuous mode [ 847.043150][T28508] hsr_slave_1: entered promiscuous mode [ 847.054852][T28508] debugfs: 'hsr0' already exists in 'hsr' [ 847.062153][T28508] Cannot create hsr debugfs directory [ 847.267219][T28515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.276854][T28515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.305996][T28515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.410972][T28515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.418687][T28515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.449722][T28515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.515125][T28513] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.523367][T28513] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.532787][T28513] bridge_slave_0: entered allmulticast mode [ 847.544612][T28513] bridge_slave_0: entered promiscuous mode [ 847.647150][T28513] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.655618][T28513] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.663859][T28513] bridge_slave_1: entered allmulticast mode [ 847.673947][T28513] bridge_slave_1: entered promiscuous mode [ 847.898124][T28513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.930712][T28424] Bluetooth: hci10: command tx timeout [ 847.968104][T28515] hsr_slave_0: entered promiscuous mode [ 847.976731][T28515] hsr_slave_1: entered promiscuous mode [ 847.984725][T28515] debugfs: 'hsr0' already exists in 'hsr' [ 847.991192][T28515] Cannot create hsr debugfs directory [ 848.003003][T28513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.090470][T28424] Bluetooth: hci11: command tx timeout [ 848.113868][T28519] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.122273][T28519] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.131353][T28519] bridge_slave_0: entered allmulticast mode [ 848.142655][T28519] bridge_slave_0: entered promiscuous mode [ 848.232570][T28519] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.243093][T28519] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.252417][T28519] bridge_slave_1: entered allmulticast mode [ 848.262785][T28519] bridge_slave_1: entered promiscuous mode [ 848.308195][T28513] team0: Port device team_slave_0 added [ 848.387399][T28513] team0: Port device team_slave_1 added [ 848.410427][T28424] Bluetooth: hci13: command tx timeout [ 848.413125][T23521] Bluetooth: hci12: command tx timeout [ 848.524301][T28519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.588155][T28513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.596346][T28513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.625729][T28513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.643973][T28519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.654152][T23521] Bluetooth: hci14: command tx timeout [ 848.749409][T28513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.757613][T28513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.785809][T28513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.889106][T28519] team0: Port device team_slave_0 added [ 848.962359][T28519] team0: Port device team_slave_1 added [ 849.124288][T28513] hsr_slave_0: entered promiscuous mode [ 849.133981][T28513] hsr_slave_1: entered promiscuous mode [ 849.142567][T28513] debugfs: 'hsr0' already exists in 'hsr' [ 849.149029][T28513] Cannot create hsr debugfs directory [ 849.176913][T28519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.184660][T28519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.213658][T28519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.232345][T28519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.240802][T28519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.270926][T28519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.502785][T28519] hsr_slave_0: entered promiscuous mode [ 849.513214][T28519] hsr_slave_1: entered promiscuous mode [ 849.523242][T28519] debugfs: 'hsr0' already exists in 'hsr' [ 849.529642][T28519] Cannot create hsr debugfs directory [ 851.532239][T23521] Bluetooth: hci2: command 0x0406 tx timeout [ 853.291156][ T1682] block nbd1: Possible stuck request ffff888051380000: control (read@0,1024B). Runtime 120 seconds [ 853.303427][ T1682] block nbd1: Possible stuck request ffff8880513801c0: control (read@1024,1024B). Runtime 120 seconds [ 853.315727][ T1682] block nbd1: Possible stuck request ffff888051380380: control (read@2048,1024B). Runtime 120 seconds [ 853.328329][ T1682] block nbd1: Possible stuck request ffff888051380540: control (read@3072,1024B). Runtime 120 seconds [ 854.633277][T14768] pim6reg: left allmulticast mode [ 854.638935][T14768] vcan0: left allmulticast mode [ 854.645163][T14768] lo: left allmulticast mode [ 854.653169][T14768] dvmrp8: left allmulticast mode [ 854.857056][T14768] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 854.867474][T14768] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 12:af:15:76:a4:f0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 855.503726][T14768] bond0 (unregistering): (slave bond3): Releasing backup interface [ 855.514340][T14768] bond0 (unregistering): Released all slaves [ 855.544969][T14768] bond1 (unregistering): Released all slaves [ 855.587540][T14768] bond2 (unregistering): (slave veth3): Releasing backup interface [ 855.611987][T14768] bond2 (unregistering): Released all slaves [ 855.643035][T14768] bond3 (unregistering): Released all slaves [ 855.823478][T14768] tipc: Disabling bearer [ 855.835703][T14768] tipc: Disabling bearer [ 855.843264][T14768] tipc: Left network mode [ 856.879844][T14768] hsr_slave_0: left promiscuous mode [ 856.909691][T14768] hsr_slave_1: left promiscuous mode [ 857.814455][T14767] smc: removing ib device syz2 [ 857.873737][T14767] smbdirect: ib_dev[syz2] removed [ 872.010469][T28424] Bluetooth: hci1: command 0x0406 tx timeout [ 883.377717][ T1682] block nbd1: Possible stuck request ffff888051380000: control (read@0,1024B). Runtime 150 seconds [ 883.389945][ T1682] block nbd1: Possible stuck request ffff8880513801c0: control (read@1024,1024B). Runtime 150 seconds [ 883.402800][ T1682] block nbd1: Possible stuck request ffff888051380380: control (read@2048,1024B). Runtime 150 seconds [ 883.415197][ T1682] block nbd1: Possible stuck request ffff888051380540: control (read@3072,1024B). Runtime 150 seconds [ 899.901004][T28424] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 899.919439][T28424] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 899.931607][T28424] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 899.944344][T28424] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 899.961779][T28424] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 900.141362][T28424] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 900.156327][T28424] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 900.169107][T28424] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 900.182208][T28424] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 900.193840][T28424] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 900.343972][T28424] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 900.358043][T28424] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 900.375079][T28424] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 900.393282][T28424] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 900.404899][T28424] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 900.469307][T23521] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 900.493937][T28424] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 900.505084][T28424] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 900.515101][T28424] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 900.525701][T28424] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 900.526594][T23521] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 900.555816][T23521] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 900.576859][T28415] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 900.617620][T23521] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 900.627096][T23521] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 902.014493][T28619] Bluetooth: hci15: command tx timeout [ 902.250759][T28619] Bluetooth: hci16: command tx timeout [ 902.491381][T28619] Bluetooth: hci17: command tx timeout [ 902.570652][T28618] Bluetooth: hci18: command tx timeout [ 902.730396][T28618] Bluetooth: hci19: command tx timeout [ 902.730823][T28619] Bluetooth: hci9: command 0x0406 tx timeout [ 902.737607][T28618] Bluetooth: hci8: command 0x0406 tx timeout [ 902.763884][T28619] Bluetooth: hci6: command 0x0406 tx timeout [ 902.766982][T28618] Bluetooth: hci5: command 0x0406 tx timeout [ 902.771896][T28619] Bluetooth: hci7: command 0x0406 tx timeout [ 903.317165][T28601] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.328785][T28601] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.341096][T28601] bridge_slave_0: entered allmulticast mode [ 903.352079][T28601] bridge_slave_0: entered promiscuous mode [ 903.376884][T28601] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.387477][T28601] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.398133][T28601] bridge_slave_1: entered allmulticast mode [ 903.409882][T28601] bridge_slave_1: entered promiscuous mode [ 903.524000][T28601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.585842][T28601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.795748][T28601] team0: Port device team_slave_0 added [ 903.865875][T28601] team0: Port device team_slave_1 added [ 904.033193][T28601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.041004][T28601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.069860][T28601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.090318][ T50] Bluetooth: hci15: command tx timeout [ 904.150615][T28601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.158312][T28601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.187066][T28601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.331075][ T50] Bluetooth: hci16: command tx timeout [ 904.461070][T28601] hsr_slave_0: entered promiscuous mode [ 904.469877][T28601] hsr_slave_1: entered promiscuous mode [ 904.570318][ T50] Bluetooth: hci17: command tx timeout [ 904.651066][ T50] Bluetooth: hci18: command tx timeout [ 904.663206][T28604] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.671727][T28604] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.680191][T28604] bridge_slave_0: entered allmulticast mode [ 904.688531][T28604] bridge_slave_0: entered promiscuous mode [ 904.790393][T28604] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.798414][T28604] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.808474][T28604] bridge_slave_1: entered allmulticast mode [ 904.819783][T28604] bridge_slave_1: entered promiscuous mode [ 904.820416][ T50] Bluetooth: hci19: command tx timeout [ 904.984621][T28604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.076119][T28604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.338468][T28604] team0: Port device team_slave_0 added [ 905.410805][T28604] team0: Port device team_slave_1 added [ 905.642927][T28604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.650591][T28604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.679893][T28604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.761682][T28604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.769321][T28604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.801377][T28604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.883794][T28610] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.891902][T28610] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.901941][T28610] bridge_slave_0: entered allmulticast mode [ 905.912081][T28610] bridge_slave_0: entered promiscuous mode [ 905.923283][T28610] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.932695][T28610] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.941704][T28610] bridge_slave_1: entered allmulticast mode [ 905.951538][T28610] bridge_slave_1: entered promiscuous mode [ 906.170554][ T50] Bluetooth: hci15: command tx timeout [ 906.356071][T28610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.392970][T28604] hsr_slave_0: entered promiscuous mode [ 906.400579][T28604] hsr_slave_1: entered promiscuous mode [ 906.407958][T28604] debugfs: 'hsr0' already exists in 'hsr' [ 906.414912][ T50] Bluetooth: hci16: command tx timeout [ 906.415872][T28604] Cannot create hsr debugfs directory [ 906.451435][T28608] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.459399][T28608] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.468278][T28608] bridge_slave_0: entered allmulticast mode [ 906.479265][T28608] bridge_slave_0: entered promiscuous mode [ 906.509941][T28610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.557910][T28608] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.567922][T28608] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.581290][T28608] bridge_slave_1: entered allmulticast mode [ 906.593548][T28608] bridge_slave_1: entered promiscuous mode [ 906.650662][ T50] Bluetooth: hci17: command tx timeout [ 906.722946][T28610] team0: Port device team_slave_0 added [ 906.732479][ T50] Bluetooth: hci18: command tx timeout [ 906.801879][T28610] team0: Port device team_slave_1 added [ 906.841542][T28608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.901078][ T50] Bluetooth: hci19: command tx timeout [ 906.954273][T28608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.104046][T28610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.113458][T28610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.143663][T28610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.222259][T28610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.229891][T28610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.259020][T28610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.298667][T28608] team0: Port device team_slave_0 added [ 907.312358][T28612] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.320536][T28612] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.328627][T28612] bridge_slave_0: entered allmulticast mode [ 907.338726][T28612] bridge_slave_0: entered promiscuous mode [ 907.350664][T28612] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.358477][T28612] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.367471][T28612] bridge_slave_1: entered allmulticast mode [ 907.378206][T28612] bridge_slave_1: entered promiscuous mode [ 907.423569][T28608] team0: Port device team_slave_1 added [ 907.610319][T28612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.665039][T28608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.672738][T28608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.701914][T28608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.748507][T28612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.798226][T28608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.806578][T28608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.835576][T28608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.960180][T28610] hsr_slave_0: entered promiscuous mode [ 907.968480][T28610] hsr_slave_1: entered promiscuous mode [ 907.976141][T28610] debugfs: 'hsr0' already exists in 'hsr' [ 907.982508][T28610] Cannot create hsr debugfs directory [ 908.040382][T28612] team0: Port device team_slave_0 added [ 908.099464][T28612] team0: Port device team_slave_1 added [ 908.250543][ T50] Bluetooth: hci15: command tx timeout [ 908.315540][T28608] hsr_slave_0: entered promiscuous mode [ 908.323744][T28608] hsr_slave_1: entered promiscuous mode [ 908.337146][T28608] debugfs: 'hsr0' already exists in 'hsr' [ 908.344083][T28608] Cannot create hsr debugfs directory [ 908.353095][T28612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.360796][T28612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.390211][T28612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.435707][T28612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.444967][T28612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.473403][T28612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.491165][ T50] Bluetooth: hci16: command tx timeout [ 908.730669][ T50] Bluetooth: hci17: command tx timeout [ 908.756613][T28612] hsr_slave_0: entered promiscuous mode [ 908.766052][T28612] hsr_slave_1: entered promiscuous mode [ 908.774802][T28612] debugfs: 'hsr0' already exists in 'hsr' [ 908.781302][T28612] Cannot create hsr debugfs directory [ 908.810291][ T50] Bluetooth: hci18: command tx timeout [ 908.970727][ T50] Bluetooth: hci19: command tx timeout [ 912.811122][ T30] INFO: task syz.1.6034:28387 blocked for more than 143 seconds. [ 912.819847][ T30] Not tainted syzkaller #0 [ 912.826037][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 912.835937][ T30] task:syz.1.6034 state:D stack:26312 pid:28387 tgid:28386 ppid:17256 task_flags:0x480140 flags:0x00080002 [ 912.849072][ T30] Call Trace: [ 912.853296][ T30] [ 912.856586][ T30] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 912.862152][ T30] ? __lock_acquire+0x683/0x2cf0 [ 912.867651][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 912.874847][ T30] ? irqentry_exit+0x218/0x8f0 [ 912.880268][ T30] ? trace_irq_disable+0x3b/0x140 [ 912.885886][ T30] ? __pfx___schedule+0x10/0x10 [ 912.891493][ T30] ? schedule+0x90/0x2b0 [ 912.896188][ T30] schedule+0x164/0x2b0 [ 912.901293][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 912.907511][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 912.920634][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 912.950260][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 912.981249][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 912.994172][ T30] nbd_set_size+0x454/0x680 [ 912.999269][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 913.005410][ T30] ? nla_memcpy+0x5b/0xc0 [ 913.012150][ T30] nbd_genl_reconfigure+0x7e9/0x1e80 [ 913.018072][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 913.025756][ T30] ? rcu_is_watching+0x15/0xb0 [ 913.033320][ T30] ? trace_kmalloc+0x2a/0xf0 [ 913.038764][ T30] ? __kmalloc_noprof+0x396/0x720 [ 913.044875][ T30] ? __nla_parse+0x40/0x60 [ 913.049888][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 913.057389][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 913.065216][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 913.071790][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 913.078682][ T30] ? __lock_acquire+0x683/0x2cf0 [ 913.084361][ T30] genl_rcv_msg+0x614/0x7a0 [ 913.089471][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 913.095818][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 913.102584][ T30] netlink_rcv_skb+0x226/0x4a0 [ 913.108085][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 913.113787][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 913.119777][ T30] ? down_read+0x2be/0x330 [ 913.125716][ T30] genl_rcv+0x28/0x40 [ 913.130695][ T30] netlink_unicast+0x7bb/0x940 [ 913.136681][ T30] netlink_sendmsg+0x813/0xb40 [ 913.142224][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 913.148123][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.154446][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 913.160277][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.166274][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 913.172238][ T30] ____sys_sendmsg+0x54e/0x850 [ 913.177714][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 913.184461][ T30] ? import_iovec+0x73/0xa0 [ 913.189684][ T30] ___sys_sendmsg+0x2a5/0x360 [ 913.195045][ T30] ? __lock_acquire+0x683/0x2cf0 [ 913.200655][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 913.206426][ T30] ? futex_wait+0x2a2/0x390 [ 913.211958][ T30] ? __fget_files+0x2a/0x420 [ 913.217174][ T30] ? __fget_files+0x3a2/0x420 [ 913.222581][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 913.228151][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 913.235126][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.242698][ T30] do_syscall_64+0x174/0x580 [ 913.248003][ T30] ? clear_bhb_loop+0x40/0x90 [ 913.253321][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.259937][ T30] RIP: 0033:0x7f1c74b9de99 [ 913.265272][ T30] RSP: 002b:00007f1c75a6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.275270][ T30] RAX: ffffffffffffffda RBX: 00007f1c74e25fa0 RCX: 00007f1c74b9de99 [ 913.284347][ T30] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 913.302342][ T30] RBP: 00007f1c74c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 913.311624][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 913.320727][ T30] R13: 00007f1c74e26038 R14: 00007f1c74e25fa0 R15: 00007ffff11a2f98 [ 913.329515][ T30] [ 913.333014][ T30] INFO: task syz.3.6035:28391 blocked for more than 143 seconds. [ 913.342312][ T30] Not tainted syzkaller #0 [ 913.347707][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 913.357705][ T30] task:syz.3.6035 state:D stack:27464 pid:28391 tgid:28390 ppid:17755 task_flags:0x400040 flags:0x00080002 [ 913.374623][ T30] Call Trace: [ 913.378354][ T30] [ 913.382197][ T30] __schedule+0x17d9/0x56c0 [ 913.387333][ T30] ? __lock_acquire+0x683/0x2cf0 [ 913.393559][ T30] ? __lock_acquire+0x683/0x2cf0 [ 913.399155][ T30] ? __pfx___schedule+0x10/0x10 [ 913.404779][ T30] ? schedule+0x90/0x2b0 [ 913.409588][ T30] schedule+0x164/0x2b0 [ 913.414405][ T30] schedule_preempt_disabled+0x13/0x30 [ 913.420993][ T30] __mutex_lock+0x7bf/0x1550 [ 913.426199][ T30] ? __mutex_lock+0x5d4/0x1550 [ 913.431834][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 913.437120][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 913.443370][ T30] ? irqentry_exit+0x218/0x8f0 [ 913.448750][ T30] ? radix_tree_lookup+0x240/0x290 [ 913.456076][ T30] genl_rcv_msg+0x10b/0x7a0 [ 913.461752][ T1682] block nbd1: Possible stuck request ffff888051380000: control (read@0,1024B). Runtime 180 seconds [ 913.466625][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 913.473948][ T1682] block nbd1: Possible stuck request ffff8880513801c0: control (read@1024,1024B). Runtime 180 seconds [ 913.479149][ T30] ? netlink_rcv_skb+0x12c/0x4a0 [ 913.491609][ T1682] block nbd1: Possible stuck request ffff888051380380: control (read@2048,1024B). Runtime 180 seconds [ 913.509786][ T30] ? kasan_check_range+0x97/0x2c0 [ 913.509997][ T1682] block nbd1: Possible stuck request ffff888051380540: control (read@3072,1024B). Runtime 180 seconds [ 913.516307][ T30] netlink_rcv_skb+0x226/0x4a0 [ 913.533187][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 913.538750][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 913.545216][ T30] ? down_read+0x2be/0x330 [ 913.550765][ T30] genl_rcv+0x28/0x40 [ 913.555252][ T30] netlink_unicast+0x7bb/0x940 [ 913.560887][ T30] netlink_sendmsg+0x813/0xb40 [ 913.566295][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.572454][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 913.578048][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.584776][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 913.590475][ T30] __sys_sendto+0x408/0x5a0 [ 913.595590][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 913.601553][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 913.607581][ T30] __x64_sys_sendto+0xde/0x100 [ 913.613941][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.620775][ T30] do_syscall_64+0x174/0x580 [ 913.625892][ T30] ? trace_irq_disable+0x3b/0x140 [ 913.631581][ T30] ? clear_bhb_loop+0x40/0x90 [ 913.636807][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.644870][ T30] RIP: 0033:0x7f1c8d15e6ce [ 913.649731][ T30] RSP: 002b:00007f1c8e0fce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 913.659253][ T30] RAX: ffffffffffffffda RBX: 00007f1c8e0fe6c0 RCX: 00007f1c8d15e6ce [ 913.668206][ T30] RDX: 000000000000001c RSI: 00007f1c8e0fd000 RDI: 0000000000000007 [ 913.677433][ T30] RBP: 0000000000000000 R08: 00007f1c8e0fcf04 R09: 000000000000000c [ 913.686584][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 913.696151][ T30] R13: 00007f1c8e0fcf58 R14: 00007f1c8e0fd000 R15: 0000000000000000 [ 913.705656][ T30] [ 913.709094][ T30] INFO: task syz.0.6036:28395 blocked for more than 144 seconds. [ 913.721936][ T30] Not tainted syzkaller #0 [ 913.727393][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 913.737099][ T30] task:syz.0.6036 state:D stack:25192 pid:28395 tgid:28393 ppid:18860 task_flags:0x400140 flags:0x00080002 [ 913.751331][ T30] Call Trace: [ 913.755089][ T30] [ 913.758275][ T30] __schedule+0x17d9/0x56c0 [ 913.763550][ T30] ? __lock_acquire+0x683/0x2cf0 [ 913.768995][ T30] ? __lock_acquire+0x683/0x2cf0 [ 913.774779][ T30] ? __pfx___schedule+0x10/0x10 [ 913.780177][ T30] ? schedule+0x90/0x2b0 [ 913.784841][ T30] schedule+0x164/0x2b0 [ 913.789415][ T30] schedule_preempt_disabled+0x13/0x30 [ 913.795620][ T30] __mutex_lock+0x7bf/0x1550 [ 913.800734][ T30] ? __mutex_lock+0x5d4/0x1550 [ 913.805993][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 913.811224][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 913.816781][ T30] ? __dev_queue_xmit+0x29b/0x3820 [ 913.822530][ T30] ? radix_tree_lookup+0x240/0x290 [ 913.828160][ T30] genl_rcv_msg+0x10b/0x7a0 [ 913.834985][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 913.840684][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 913.846657][ T30] netlink_rcv_skb+0x226/0x4a0 [ 913.852559][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 913.858113][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 913.864113][ T30] ? down_read+0x2be/0x330 [ 913.868928][ T30] genl_rcv+0x28/0x40 [ 913.873603][ T30] netlink_unicast+0x7bb/0x940 [ 913.878811][ T30] netlink_sendmsg+0x813/0xb40 [ 913.884068][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.889898][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 913.895375][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.901208][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 913.906724][ T30] ____sys_sendmsg+0x54e/0x850 [ 913.912140][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 913.917957][ T30] ? import_iovec+0x73/0xa0 [ 913.922961][ T30] ___sys_sendmsg+0x2a5/0x360 [ 913.928106][ T30] ? __lock_acquire+0x683/0x2cf0 [ 913.933651][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 913.936252][ T4991] udevd[4991]: worker [25554] /devices/virtual/block/nbd1 timeout; kill it [ 913.939369][ T30] ? futex_wake+0x51b/0x5f0 [ 913.950293][ T4991] udevd[4991]: seq 32064 '/devices/virtual/block/nbd1' killed [ 913.954157][ T30] ? __fget_files+0x2a/0x420 [ 913.967271][ T30] ? __fget_files+0x3a2/0x420 [ 913.972586][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 913.978044][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 913.984271][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.991042][ T30] do_syscall_64+0x174/0x580 [ 913.996273][ T30] ? clear_bhb_loop+0x40/0x90 [ 914.001470][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.007923][ T30] RIP: 0033:0x7f0decf9de99 [ 914.013616][ T30] RSP: 002b:00007f0dede52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.022795][ T30] RAX: ffffffffffffffda RBX: 00007f0ded225fa0 RCX: 00007f0decf9de99 [ 914.031516][ T30] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000004 [ 914.040257][ T30] RBP: 00007f0ded033eaf R08: 0000000000000000 R09: 0000000000000000 [ 914.048940][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.058112][ T30] R13: 00007f0ded226038 R14: 00007f0ded225fa0 R15: 00007ffc7dac5ae8 [ 914.067019][ T30] [ 914.070528][ T30] INFO: task syz.2.6037:28397 blocked for more than 144 seconds. [ 914.078992][ T30] Not tainted syzkaller #0 [ 914.085127][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 914.095090][ T30] task:syz.2.6037 state:D stack:28720 pid:28397 tgid:28396 ppid:18340 task_flags:0x400040 flags:0x00080002 [ 914.108278][ T30] Call Trace: [ 914.111920][ T30] [ 914.115131][ T30] __schedule+0x17d9/0x56c0 [ 914.120107][ T30] ? __lock_acquire+0x683/0x2cf0 [ 914.125527][ T30] ? __lock_acquire+0x683/0x2cf0 [ 914.130977][ T30] ? unwind_next_frame+0x8f/0x2550 [ 914.136578][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 914.143315][ T30] ? __pfx___schedule+0x10/0x10 [ 914.148660][ T30] ? schedule+0x90/0x2b0 [ 914.153412][ T30] schedule+0x164/0x2b0 [ 914.158446][ T30] schedule_preempt_disabled+0x13/0x30 [ 914.164538][ T30] __mutex_lock+0x7bf/0x1550 [ 914.169606][ T30] ? __mutex_lock+0x5d4/0x1550 [ 914.175130][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 914.180361][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 914.185921][ T30] ? stack_trace_save+0xa9/0x100 [ 914.191359][ T30] ? __lock_acquire+0x683/0x2cf0 [ 914.196799][ T30] ? radix_tree_lookup+0x240/0x290 [ 914.202650][ T30] genl_rcv_msg+0x10b/0x7a0 [ 914.207639][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 914.213196][ T30] ? irqentry_exit+0x218/0x8f0 [ 914.218452][ T30] netlink_rcv_skb+0x226/0x4a0 [ 914.223767][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 914.229283][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 914.235143][ T30] ? down_read+0x2be/0x330 [ 914.239958][ T30] genl_rcv+0x28/0x40 [ 914.244355][ T30] netlink_unicast+0x7bb/0x940 [ 914.249581][ T30] netlink_sendmsg+0x813/0xb40 [ 914.255115][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.261481][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 914.266958][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.272788][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 914.278324][ T30] __sys_sendto+0x408/0x5a0 [ 914.283438][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 914.289029][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 914.294868][ T30] __x64_sys_sendto+0xde/0x100 [ 914.300154][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.306801][ T30] do_syscall_64+0x174/0x580 [ 914.312103][ T30] ? trace_irq_disable+0x3b/0x140 [ 914.317688][ T30] ? clear_bhb_loop+0x40/0x90 [ 914.322892][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.329342][ T30] RIP: 0033:0x7f9db3b5e6ce [ 914.334697][ T30] RSP: 002b:00007f9db1df4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 914.343977][ T30] RAX: ffffffffffffffda RBX: 00007f9db1df66c0 RCX: 00007f9db3b5e6ce [ 914.352936][ T30] RDX: 0000000000000020 RSI: 00007f9db1df5000 RDI: 0000000000000003 [ 914.362129][ T30] RBP: 0000000000000000 R08: 00007f9db1df4f04 R09: 000000000000000c [ 914.370873][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 914.379587][ T30] R13: 00007f9db1df4f58 R14: 00007f9db1df5000 R15: 0000000000000000 [ 914.388310][ T30] [ 914.391889][ T30] INFO: task syz.2.6037:28398 blocked for more than 144 seconds. [ 914.400381][ T30] Not tainted syzkaller #0 [ 914.405785][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 914.415630][ T30] task:syz.2.6037 state:D stack:26736 pid:28398 tgid:28396 ppid:18340 task_flags:0x400140 flags:0x00080002 [ 914.428883][ T30] Call Trace: [ 914.432586][ T30] [ 914.435833][ T30] __schedule+0x17d9/0x56c0 [ 914.440841][ T30] ? __lock_acquire+0x683/0x2cf0 [ 914.446280][ T30] ? __lock_acquire+0x683/0x2cf0 [ 914.451768][ T30] ? __pfx___schedule+0x10/0x10 [ 914.457119][ T30] ? schedule+0x90/0x2b0 [ 914.461844][ T30] schedule+0x164/0x2b0 [ 914.466872][ T30] schedule_preempt_disabled+0x13/0x30 [ 914.472933][ T30] __mutex_lock+0x7bf/0x1550 [ 914.477948][ T30] ? __mutex_lock+0x5d4/0x1550 [ 914.483215][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 914.488308][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 914.494169][ T30] ? stack_trace_save+0xa9/0x100 [ 914.499615][ T30] ? __lock_acquire+0x683/0x2cf0 [ 914.505171][ T30] ? radix_tree_lookup+0x240/0x290 [ 914.510908][ T30] genl_rcv_msg+0x10b/0x7a0 [ 914.515884][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 914.521447][ T30] ? __lock_acquire+0x683/0x2cf0 [ 914.526951][ T30] netlink_rcv_skb+0x226/0x4a0 [ 914.532392][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 914.538116][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 914.544080][ T30] ? down_read+0x2be/0x330 [ 914.548924][ T30] genl_rcv+0x28/0x40 [ 914.553301][ T30] netlink_unicast+0x7bb/0x940 [ 914.558544][ T30] netlink_sendmsg+0x813/0xb40 [ 914.563838][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.570225][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 914.575677][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.581482][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 914.586994][ T30] __sys_sendto+0x408/0x5a0 [ 914.591939][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 914.597451][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 914.603355][ T30] __x64_sys_sendto+0xde/0x100 [ 914.608620][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.615306][ T30] do_syscall_64+0x174/0x580 [ 914.620412][ T30] ? trace_irq_disable+0x3b/0x140 [ 914.625934][ T30] ? clear_bhb_loop+0x40/0x90 [ 914.631090][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.637547][ T30] RIP: 0033:0x7f9db3b5e6ce [ 914.642649][ T30] RSP: 002b:00007f9db1dd3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 914.652113][ T30] RAX: ffffffffffffffda RBX: 00007f9db1dd56c0 RCX: 00007f9db3b5e6ce [ 914.660921][ T30] RDX: 000000000000001c RSI: 00007f9db1dd4000 RDI: 0000000000000011 [ 914.669901][ T30] RBP: 0000000000000000 R08: 00007f9db1dd3f04 R09: 000000000000000c [ 914.678604][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 914.687301][ T30] R13: 00007f9db1dd3f58 R14: 00007f9db1dd4000 R15: 0000000000000000 [ 914.696056][ T30] [ 914.699386][ T30] INFO: task syz.4.6038:28400 blocked for more than 145 seconds. [ 914.709249][ T30] Not tainted syzkaller #0 [ 914.714728][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 914.724204][ T30] task:syz.4.6038 state:D stack:27872 pid:28400 tgid:28399 ppid:27484 task_flags:0x400040 flags:0x00080002 [ 914.737894][ T30] Call Trace: [ 914.741585][ T30] [ 914.744830][ T30] __schedule+0x17d9/0x56c0 [ 914.749806][ T30] ? __lock_acquire+0x683/0x2cf0 [ 914.755411][ T30] ? __lock_acquire+0x683/0x2cf0 [ 914.760959][ T30] ? __pfx___schedule+0x10/0x10 [ 914.766291][ T30] ? schedule+0x90/0x2b0 [ 914.771422][ T30] schedule+0x164/0x2b0 [ 914.776028][ T30] schedule_preempt_disabled+0x13/0x30 [ 914.782044][ T30] __mutex_lock+0x7bf/0x1550 [ 914.787110][ T30] ? __mutex_lock+0x5d4/0x1550 [ 914.792378][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 914.797529][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 914.803091][ T30] ? __dev_queue_xmit+0x29b/0x3820 [ 914.808698][ T30] ? radix_tree_lookup+0x240/0x290 [ 914.814413][ T30] genl_rcv_msg+0x10b/0x7a0 [ 914.819383][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 914.824942][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 914.830869][ T30] netlink_rcv_skb+0x226/0x4a0 [ 914.836041][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 914.841963][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 914.847822][ T30] ? down_read+0x2be/0x330 [ 914.852730][ T30] genl_rcv+0x28/0x40 [ 914.857121][ T30] netlink_unicast+0x7bb/0x940 [ 914.862628][ T30] netlink_sendmsg+0x813/0xb40 [ 914.867871][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.874178][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 914.879615][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.885415][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 914.891568][ T30] __sys_sendto+0x408/0x5a0 [ 914.896569][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 914.902163][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 914.907969][ T30] __x64_sys_sendto+0xde/0x100 [ 914.913223][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.919867][ T30] do_syscall_64+0x174/0x580 [ 914.924952][ T30] ? trace_irq_disable+0x3b/0x140 [ 914.930524][ T30] ? clear_bhb_loop+0x40/0x90 [ 914.935674][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.942100][ T30] RIP: 0033:0x7f691d35e6ce [ 914.946895][ T30] RSP: 002b:00007f691e1ade88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 914.956212][ T30] RAX: ffffffffffffffda RBX: 00007f691e1af6c0 RCX: 00007f691d35e6ce [ 914.964963][ T30] RDX: 000000000000001c RSI: 00007f691e1ae000 RDI: 0000000000000004 [ 914.973939][ T30] RBP: 0000000000000000 R08: 00007f691e1adf04 R09: 000000000000000c [ 914.983195][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 914.991986][ T30] R13: 00007f691e1adf58 R14: 00007f691e1ae000 R15: 0000000000000000 [ 915.000739][ T30] [ 915.004150][ T30] [ 915.004150][ T30] Showing all locks held in the system: [ 915.012628][ T30] 1 lock held by khungtaskd/30: [ 915.017939][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 915.028804][ T30] 2 locks held by getty/5380: [ 915.033946][ T30] #0: ffff888036d380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 915.044748][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 915.055899][ T30] 2 locks held by kworker/1:14/8670: [ 915.062154][ T30] 1 lock held by udevd/25554: [ 915.067272][ T30] #0: ffff88807e084350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 915.077924][ T30] 6 locks held by syz.1.6034/28387: [ 915.083789][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.092874][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.102740][ T30] #2: ffff88807b32b260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 915.114187][ T30] #3: ffff888026eef658 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 915.124534][ T30] #4: ffff888026eef020 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 915.138018][ T30] #5: ffff888026eef058 (&q->q_usage_counter(queue)#54){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 915.151584][ T30] 2 locks held by syz.3.6035/28391: [ 915.157263][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.166229][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.176160][ T30] 2 locks held by syz.0.6036/28395: [ 915.182437][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.191586][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.201430][ T30] 2 locks held by syz.2.6037/28397: [ 915.207114][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.216360][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.226245][ T30] 2 locks held by syz.2.6037/28398: [ 915.231964][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.240947][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.250790][ T30] 2 locks held by syz.4.6038/28400: [ 915.256465][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.265460][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.275346][ T30] 2 locks held by syz-executor/28409: [ 915.281252][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.290917][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.300993][ T30] 2 locks held by syz-executor/28412: [ 915.306909][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.315905][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.325748][ T30] 2 locks held by syz-executor/28414: [ 915.331693][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.340682][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.350813][ T30] 2 locks held by syz-executor/28417: [ 915.356634][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.365647][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.375766][ T30] 2 locks held by syz-executor/28418: [ 915.381770][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.391267][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.401216][ T30] 2 locks held by syz-executor/28506: [ 915.407108][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.416347][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.426247][ T30] 2 locks held by syz-executor/28508: [ 915.432151][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.441124][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.451184][ T30] 2 locks held by syz-executor/28513: [ 915.457132][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.466118][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.475939][ T30] 2 locks held by syz-executor/28515: [ 915.481876][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.491352][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.501306][ T30] 2 locks held by syz-executor/28519: [ 915.507186][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.516313][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.526379][ T30] 2 locks held by syz-executor/28601: [ 915.532511][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.541599][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.551467][ T30] 2 locks held by syz-executor/28604: [ 915.557333][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.566360][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.576237][ T30] 2 locks held by syz-executor/28608: [ 915.582134][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.591647][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.601568][ T30] 2 locks held by syz-executor/28610: [ 915.607446][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.616536][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.626528][ T30] 2 locks held by syz-executor/28612: [ 915.632649][ T30] #0: ffffffff9009c8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 915.641654][ T30] #1: ffffffff9009c6e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 915.651503][ T30] [ 915.653839][ T30] ============================================= [ 915.653839][ T30] [ 915.663709][ T30] NMI backtrace for cpu 0 [ 915.663726][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 915.663750][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 915.663762][ T30] Call Trace: [ 915.663770][ T30] [ 915.663778][ T30] dump_stack_lvl+0xe8/0x150 [ 915.663841][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 915.663867][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 915.663904][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 915.663932][ T30] sys_info+0x135/0x170 [ 915.663952][ T30] watchdog+0xfd7/0x1030 [ 915.663983][ T30] ? watchdog+0x1c7/0x1030 [ 915.664013][ T30] kthread+0x388/0x470 [ 915.664051][ T30] ? __pfx_watchdog+0x10/0x10 [ 915.664071][ T30] ? __pfx_kthread+0x10/0x10 [ 915.664099][ T30] ret_from_fork+0x514/0xb70 [ 915.664144][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 915.664171][ T30] ? __switch_to+0xc89/0x1420 [ 915.664197][ T30] ? __pfx_kthread+0x10/0x10 [ 915.664224][ T30] ret_from_fork_asm+0x1a/0x30 [ 915.664259][ T30] [ 915.664323][ T30] Sending NMI from CPU 0 to CPUs 1: [ 915.784296][ C1] NMI backtrace for cpu 1 [ 915.784314][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 915.784334][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 915.784345][ C1] RIP: 0010:debug_smp_processor_id+0x12/0x20 [ 915.784376][ C1] Code: cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 20 d3 4b 8c 48 c7 c6 60 d3 4b 8c 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 915.784392][ C1] RSP: 0018:ffffc90000a08ef0 EFLAGS: 00000087 [ 915.784408][ C1] RAX: ffff88801e2b0000 RBX: ffff8880b8724268 RCX: dffffc0000000000 [ 915.784421][ C1] RDX: 0000000000000100 RSI: ffffffff8c4bd360 RDI: ffffffff8c4bd320 [ 915.784435][ C1] RBP: 0000000000000000 R08: ffffffff905777f7 R09: 1ffffffff20aeefe [ 915.784448][ C1] R10: dffffc0000000000 R11: fffffbfff20aeeff R12: dffffc0000000000 [ 915.784461][ C1] R13: 0000000000000785 R14: ffff88801def8000 R15: 000000d538ff3efe [ 915.784475][ C1] FS: 0000000000000000(0000) GS:ffff888125057000(0000) knlGS:0000000000000000 [ 915.784489][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 915.784501][ C1] CR2: 000055a088db7f40 CR3: 000000000e946000 CR4: 00000000003526f0 [ 915.784517][ C1] Call Trace: [ 915.784525][ C1] [ 915.784531][ C1] irqtime_account_irq+0x186/0x260 [ 915.784555][ C1] handle_softirqs+0x63a/0x840 [ 915.784577][ C1] ? __irq_exit_rcu+0xca/0x220 [ 915.784602][ C1] __irq_exit_rcu+0xca/0x220 [ 915.784621][ C1] irq_exit_rcu+0x9/0x30 [ 915.784640][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 915.784664][ C1] [ 915.784671][ C1] [ 915.784678][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 915.784697][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 915.784723][ C1] Code: 5c 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 3a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 915.784737][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 915.784751][ C1] RAX: 0000000002d82a7f RBX: ffffffff819ab450 RCX: 0000000080000001 [ 915.784765][ C1] RDX: 0000000000000001 RSI: ffffffff8e22a902 RDI: ffffffff8c4bd380 [ 915.784777][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 915.784791][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 915.784804][ C1] R13: 1ffff11003bdf000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 915.784820][ C1] ? do_idle+0x2e0/0x540 [ 915.784848][ C1] default_idle+0x9/0x20 [ 915.784863][ C1] default_idle_call+0x72/0xb0 [ 915.784881][ C1] do_idle+0x2e0/0x540 [ 915.784904][ C1] ? __pfx_do_idle+0x10/0x10 [ 915.784932][ C1] cpu_startup_entry+0x43/0x60 [ 915.784954][ C1] start_secondary+0x101/0x110 [ 915.784979][ C1] common_startup_64+0x13e/0x157 [ 915.785007][ C1] [ 916.089187][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 916.096051][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 916.105166][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 916.115222][ T30] Call Trace: [ 916.118499][ T30] [ 916.121425][ T30] vpanic+0x56c/0xa60 [ 916.125416][ T30] ? __pfx___schedule+0x10/0x10 [ 916.130270][ T30] ? __pfx_vpanic+0x10/0x10 [ 916.134785][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 916.140950][ T30] panic+0xc5/0xd0 [ 916.144680][ T30] ? __pfx_panic+0x10/0x10 [ 916.149092][ T30] ? preempt_schedule_common+0x82/0xd0 [ 916.154552][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 916.159923][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 916.166077][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 916.172232][ T30] watchdog+0x1030/0x1030 [ 916.176569][ T30] ? watchdog+0x1c7/0x1030 [ 916.180988][ T30] kthread+0x388/0x470 [ 916.185059][ T30] ? __pfx_watchdog+0x10/0x10 [ 916.189729][ T30] ? __pfx_kthread+0x10/0x10 [ 916.194320][ T30] ret_from_fork+0x514/0xb70 [ 916.198917][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 916.204028][ T30] ? __switch_to+0xc89/0x1420 [ 916.208710][ T30] ? __pfx_kthread+0x10/0x10 [ 916.213303][ T30] ret_from_fork_asm+0x1a/0x30 [ 916.218075][ T30] [ 916.221371][ T30] Kernel Offset: disabled [ 916.225692][ T30] Rebooting in 86400 seconds..