last executing test programs: 58.32216737s ago: executing program 2 (id=3612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0xa0, r1, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0x84, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0x7669}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END, @NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0x4}, {0xfffffd84}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040005}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0xfe, 0xfffff00c}, {0x6, 0x0, 0x1}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x8, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c0003007ffffffed7f700004c0012802700010069703667726500003c000280050008000e00000006000f00090000000500160001000000080015005d300a0006000e000100000006000e00000000fe0500160004000000040014"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r10, &(0x7f0000000100)={0x2c, 0x0, r12}, 0x10) sendmsg$xdp(r10, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x844) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x40, r9, 0x1, 0x7, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmmsg$alg(r6, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)="1720ff5204a8f25029072f00c80a8044dfd9210547e9cae0ea", 0x19}, {&(0x7f0000000440)="a437d9f5e10de189e870cf50927a97cc437024ca3b577fd363e02225a52a59161f2f328d42d1f8c06d0508dac64175bd045c139a24a09a9af714c84b94da70934da47383dd518b0e0ec681431eacb55b6d6bf418b9b721b49602289e0ac0f78372fa4baf342d9ff6cefaeac27470d9c1127be4abdc02f2d785f73cd95b2f28af4d5c8c8558930c98a47f46bc682c46dcb6034944d1b09cdce4fe7b2b1b621fcde4", 0xa1}, {&(0x7f0000000500)="1d72e5173107fcaf0efab11c2e053232cde4fb3ab1bbee5bbd8e6e6bafcb9fe2568d2be27c8ee2e720063cdbfd47b9b08f1833d2e095e5735b042af315332265b6bbe80918166afd0c7553891989793620594493d6c097b8dbc4e1d18be43e409d8fc88a0eff64dde206ab7e0f135a82f81b79151962a241e5e26261ff99be342a4830d747cf0ff715efa7826f", 0x8d}, {&(0x7f00000005c0)="ab3b3c9f055c4cad251c81d2722a9711fcf2054c13561fe36025a4555f05dc2d531d575fa55080ffababd92e98bbf405e713d2cc0cac6a2fd4eb9dc4c9e9e5bba463869759ca9c009a2c4140effdbf5c5c1cf2173747b89c288e2aa958e07c4e57150404061041b04ec3baa6418c71552e953469004261c71b86cbdc9d0f0a0faaccb5c6f4895ed62d19fc7b906efc4c1e", 0x91}, {&(0x7f0000000680)="14f9749a9ead1dc53a4d8cf63324b775509ab2", 0x13}, {&(0x7f00000006c0)="aec86af60ed513eb2a79534a1fda54dd8f4a2fae2abf305e5979114f28e2a16f05b470334c60db790c5894a6c4219871a421a1998d4ff34fcb52d03635cf883556124a1dfb93ba64481005f9a45ba6b077cdcfcd26ffe8e5057e7859e9edbdb324c4eeb1f631b1ab8e4047f7ac75b4541c4addf26e76ea1ef74c36dd370a7779c7498c39fbbd3b35a740cf75a1127943771d9ebc862f5c67e736ac2fd20f5a2d01bdf4fb76278d9d24f39d61a4634110ea469c0297e4fcf6b7e92c00934c779922774ecb6459a0e32312cb87535f5c041f271235a52b0c4f", 0xd8}, {&(0x7f00000007c0)="29e16c8712093dd7e8bf3f3d4ac384c1de4cd24707da0ef6751ad94f113ba80b50d2cfcac75d6b21c6d2e48a40bc5bf597561b5cbdb465cbb33adf85b0c80f77ce753b3c74ab73a8e93b483216758a810dfe36dc538b34b9a2651944d7b3bd13830181af07dd53ec407be3dd", 0x6c}, {&(0x7f0000000840)="e1b21e55d5c510545a03ce8aabed3728a5eb6cff60d1a38d01f132dcbad0ee1d94e257f662113c3e4d67e8178bf53f6500deb0883a9526a82e1b330c06b3a8064c9abb191122f7d7", 0x48}, {&(0x7f00000008c0)="f3d9b44ac0a272b687f4dca576b65df1b1788c3f2e05bb27e7ff01b0709a0d8c2263c93c294fea0ec97fc3e35c70331494d60143cb404ce4f4721bee827d2af8b877f842c8634b87ff0a3632b7e3063b8d3fdf1b5678d659b55724d7d226bca463a2c3e11c4f5ddfe6ff8848ca0bb5d176f6412873f0c3ecfa5ef571b54b9d152afa8e45c36c3647a5df1764f6f23d096874ba19c852d89590c107514883b3f9e614e7dd6a14dfe42c4fd9ce1ca3b6ef847d67eac8b6881ea02fcdcc", 0xbc}], 0x9, &(0x7f0000000a40)=[@assoc={0x18, 0x117, 0x4, 0x1ff}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30, 0x8000}], 0x1, 0x20044040) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x77}}}}, [""]}, 0x20}}, 0x20000000) 57.949422221s ago: executing program 2 (id=3617): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x40, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}]}, 0x1c}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) r3 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000480)=[@flowinfo={{0x14, 0x29, 0xb, 0x17c0000}}, @dstopts={{0x58, 0x29, 0x37, {0x4, 0x7, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x23, 0xfffa}}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x81}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0xff}}}], 0x88}, 0x4) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r5, 0x20, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}}) 57.658259675s ago: executing program 2 (id=3619): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x2, 0x18, 0x0, 0x3, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffff, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x10000}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0xa0}, 0x1, 0xffffffffffffff80}, 0x0) 57.612812027s ago: executing program 2 (id=3621): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x28, r2, 0x1, 0x80000, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}}, 0x40000) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000006c0)="8c3fe11ab92621892c08002ce7ae64beb16577531055c3000000000000000000000000dcce97605c", 0x28, 0x48014, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x6, 0x1, 0xd, 0x25801, r0, 0xc6cb, '\x00', r4, r5, 0x5, 0x0, 0x1, 0x2}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(0x4) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) (async) writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000001000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b0000008500000006000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050053a16e6a000000950000000003b1e12801a5776a2400000000000000009bf7f7f4d07fc1782429af0ed7a794641e67130a951808fe173ac7b9726e98b4fd0538e5a546d814ba40b669721ab1c7744cb23335413ec40a78294287789d7c4728f7"], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800470400300000000000059078ac1414fb0a010100860800000003010200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000183c41ce75d57c4eeb5c20090788006"], 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) write$rfkill(r8, &(0x7f00000003c0)={0x0, 0x4, 0x1}, 0x8) 57.384637075s ago: executing program 2 (id=3623): r0 = socket$netlink(0x10, 0x3, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000000)={0x1100, 0x1, 0x400000, 0x8}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012cbd7000fddbdf25620000000600b400720600000600b400bf090000060090cfc791634b5271af0d3ebf00790e00000600b300000000030600b400cf0f00000600b4002e0f00000600b400bd0b00000600b400c80400000600b400"], 0x5c}, 0x1, 0x0, 0x0, 0x240000c1}, 0x80) (async) ioctl$SIOCSIFHWADDR(r4, 0x8995, &(0x7f00000002c0)={'bond0\x00', @link_local}) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) write(r3, &(0x7f0000000200)="2d0da24c270e", 0x6) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000500), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000050000000002000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r9}, 0x38) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r9, &(0x7f0000000080), &(0x7f0000000000)=""/10}, 0x20) (async, rerun: 64) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="680081008e05b25c940301aa903271d086a0eff0837d32ee", @ANYRES16=r8, @ANYBLOB="00032abd7000fedbdf25050000006c00038014000600fe88000000000000000000000000000114000600200100000000000000000000000000001400060000000000000000000000ffffe0000002140002006e657464657673696d3000000000000005000800070000000800050000000000060007004e23000008000500d20f0000"], 0x88}, 0x1, 0x0, 0x0, 0x20084000}, 0x84) (async, rerun: 64) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000088fc4ba16b3603f000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async, rerun: 64) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) socket$kcm(0x29, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async, rerun: 64) socket$kcm(0x29, 0x5, 0x0) (async, rerun: 64) sendmsg$inet(r10, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r10) 57.22407551s ago: executing program 2 (id=3625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xcc}, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x6c, &(0x7f00000002c0)=""/108, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) getsockopt$inet_opts(r3, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r7, @ANYBLOB="08000200ac1414aab2c9"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r9 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0x0, 0xa}, {0xfff1}}}, 0x24}}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x2) 42.099888427s ago: executing program 32 (id=3625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xcc}, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x6c, &(0x7f00000002c0)=""/108, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) getsockopt$inet_opts(r3, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r7, @ANYBLOB="08000200ac1414aab2c9"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r9 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0x0, 0xa}, {0xfff1}}}, 0x24}}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x2) 27.473106439s ago: executing program 1 (id=3929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x50, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44008000}, 0x4000052) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000240)) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002d80)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000040)=[{0x2, 0x3, {0x0, 0xff, 0x4}, {0x0, 0xff, 0x2}, 0xfd, 0xfe}, {0x0, 0x2, {0x0, 0x1}, {0xefebd51287de1ebd, 0xff, 0x1}, 0xfe, 0xfe}, {0x0, 0x0, {0x0, 0xf0, 0x1}, {}, 0xff, 0xfd}, {0x2, 0x1, {0x0, 0x1, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x1, 0x2, {0x1, 0xf0, 0x3}, {0x2, 0x1, 0x4}, 0xff, 0xfd}], 0xa0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x11, 0x4, &(0x7f0000001c80)=@raw=[@ringbuf_query], &(0x7f0000001cc0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40e00, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001d00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001d40)={0x0, 0x9, 0x401, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001d80)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001dc0)=[{0x2, 0x5, 0x8, 0x3}, {0x2, 0x4, 0x7, 0x7}, {0x3, 0x5, 0xd, 0x2}, {0x1, 0x4, 0x3, 0x6}], 0x10, 0x3}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001ec0)={r6}, 0xc) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r7, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002340)="98e1c6e5afda45a548", 0x9}], 0x1}}], 0x1, 0x4840) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000005c0)=0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000002c00)={{r6, &(0x7f0000002140)='\x00', 0x4084c0, &(0x7f0000002180)={@_ha_fsid={[0x6, 0x2]}, {0x6f9f, 0x400, 0x9, 0x5}}, 0x6, &(0x7f00000021c0), &(0x7f0000002200)=0x5ab}, 0x6, &(0x7f0000002b40)=[{0x1, 0x9, &(0x7f0000002240)='bridge\x00', &(0x7f0000002440)="4e848592df16cc3c88f6b32a4bdfed07c325fcac4d4b37aa15d7e74ea616d82da7cbf9e4dfe0fcf86475bf81a9a5a1a0b236de8d02a5cc2c44583aada77e9435f0d4c9f9def85f045347e6928dc3af360b4e2a1fd3950bf26874b401506e3f35e6b18d9dc0f9693d2b04e2ecc723ecd4cafa37fc948cd317378519117efbaf7caf7672a76fee61a3566e19260754d837d5ca55fcbdd295d98d5915d4218553f4c46f038196eabedafbad49cd9bbf9cbb0e240c189ef993f6c86d6652bce4c2c0678573c906d1a1190c5482c086c1f8c1ceb770b774dc584fcff4583cf7b002e7814cfd110d381b9f22f7388a17cf", 0xee, 0x20}, {0x2, 0x2, &(0x7f0000002540)='/dev/net/tun\x00', &(0x7f0000002640)="2fe63a95ff0e5658c949a0bd0e698ba9bf5333e38bb24219dd50abdca971f0be09bda30375e406bfdfa6888198683fe5b8fdf86369c1ebae1b7da06e3c65eb9f300cab4d5103fbb52b27a17becd74896828c882ffa02df11aa21317fc4420c6a3c04163c6206de2b72a4d3afeb386f27ab3d28353bb7b0caacf078d9eb142316b517e592ea11c8e1a1b0e53a129b9663d260dfaaaff16c2ebc3084eb788555665d1c937f5a8df33f66f2d8326beb3928644c872750ee08", 0xb7, 0x32}, {0x3, 0x9, &(0x7f0000002700)='\x00', &(0x7f0000002740)="dca1d675b02c0691ea68cdef91b90c61caf033e5cbfd4298c3126a8bc8dd7d7d1fbaa9237a07dbfc9069e610d6a1d55b343699e974418c4a71bdfbb915ca57d6c2f0235dfe3da8ab727f08f7", 0x4c}, {0x3, 0x2, &(0x7f00000027c0)='\x00', &(0x7f0000002800)="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", 0xfc, 0x28}, {0x1, 0x4, &(0x7f0000002900)='bridge\x00', &(0x7f0000002940)="013c648e5286dfdf3b6b615fa911e88e454b39d9eeca57d52369d2d7f0cf62f8ddcbd150bfc7f14577b97b91372cf99bbffd0c85e94eeba91a88e01cb8b33af5ee4f70538e323b25478d598f9b8bda8be105a81e14eb098bca01e6ca92e0daae876a2be5e2f8e1f6eb326b6a35db574965003d5412c0ca54bf821f9fe1a7218654bb91f865cbc39f6ef391f10186cadf6110d2cc5d032824ffd184d725aa67a124910ad434bef480caa693a68e29893e61eefce25b32be2dd50bbc6618dc6d6c7c3bf8a05328c58a3192d28219f55aaa998759d78d16e57ba86df361c186fdbcf7e81cbb047c9490751594b92d2581360a4669b9", 0xf4, 0x8}, {0x0, 0x9, &(0x7f0000002a40)='syzkaller\x00', &(0x7f0000002a80)="8a2cd58f6c88b9557b8f16eb717e5b1f387501e7ba37fcca46bae78a63a1806f72d83e98626edb90d2aae52c50b48dc1731dc62fee222cfa9a2f584b7c488ca55f9f62889d5b98d7edb4047472fb55f9215f358ce7843f32ed1101c20b0310af4a1d1fbd4630ff9d0e97c512c8a844b9422861451ab321f7a6c231c9ad2b97585c3127101cfeea27fd2d2481389e8c213015", 0x92, 0xa}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002100)={&(0x7f0000001f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc2, 0xc2, 0x6, [@datasec={0xc, 0x5, 0x0, 0xf, 0x2, [{0x2, 0x8, 0x2}, {0x2, 0x3289, 0x6}, {0x4, 0x3, 0x7}, {0x1, 0x8000, 0xe6}, {0x2, 0x939, 0x5}], "8a55"}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x37, 0x0, 0x6a, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0xea11}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x5}, @restrict={0xa, 0x0, 0x0, 0xb, 0x4}, @enum={0xf, 0x4, 0x0, 0x6, 0x4, [{0x10, 0x6}, {0x2, 0xd3}, {0x7, 0x8}, {0x6, 0x7f}]}, @volatile={0x6, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, &(0x7f0000002000)=""/206, 0xe2, 0xce, 0x1, 0xf, 0x10000, @value=r9}, 0x28) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f00000007c0)=0xe8) sendmsg$netlink(r2, &(0x7f0000001c40)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c00)=[{&(0x7f00000002c0)={0x2a0, 0x20, 0x20, 0x70bd29, 0x25dfdbfb, "", [@nested={0x34, 0x4, 0x0, 0x1, [@nested={0x4, 0x122}, @nested={0x4, 0x61}, @nested={0x4, 0xba}, @typed={0xc, 0x131, 0x0, 0x0, @u64=0x7}, @typed={0x14, 0x33, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x127}]}, @typed={0x8, 0x46, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x93, 0x0, 0x0, @uid=r4}, @typed={0x5, 0x101, 0x0, 0x0, @str='\x00'}, @nested={0xea, 0x105, 0x0, 0x1, [@nested={0x4, 0xed}, @typed={0xc, 0xff, 0x0, 0x0, @u64=0x5}, @generic="eb676a60fe6ac1c04ed7a4c8586b93c58a3486ee25c7ed3523032f492659263c8bbc0d1b82744dfa72c60078a984ed205a76be206c0120f9db6f9aea337e1105d2edaa83b42f950a1a088f80516e887f3e5bd237d69a2a6b3bed3362448752", @nested={0x4, 0x106}, @nested={0x4, 0x85}, @nested={0x4, 0x13a}, @nested={0x4, 0x7}, @generic="300ba7a8b56044f6c12e3d540a8215297b4d099f2ff19143fb8e664ba3364b25ca0ce566c619b06eebb5a637df40cb5867e5d4eedf59ab729b6263f1071a622066bc09a5b2426a238dcc76648c4cb64ff981d5e546870100f650256a0ebb0a95a5ec9fc6a0d808"]}, @generic="32dd6fa8c14b7ae5029b45c50fccc9f0c0406a6d33e6c809d07e77c5e3070fcc0f6c7e86d7eea345a9a5776d6792066df2c2bae6f4d71b3cf2069ef3c4b77789d5df6a565d7df174c1f6e976444617fa0453fb7536122cced0c9bf45368b6018a3fbc74c60af43f6a6f42266d669ec4baa6cfc2957952eb5f94fb96ca0112a315e6a9863bff36f0a9c2f126322a424578151de511012526afb7031a4a75ca3588fed3b7a6e56ae33a5bd13756125f324216f5542e9b82ab82229ba5a47ac84283b24a48e17baad2a12c0194d282f37edb26aae10d1b5fd5b074666aa30c5ce1d02eaf95b3badaf7c1e085a590267764a0c894569aedd19", @generic="5b50afe284689770e71edeb63402db573182c750c7008bba021462f4805473efd3a237fa34dfb3e38957cd6f5923f712b4aa512a90920ea5e1756205d5bac48cf1d70db2b193a96eadd26f8e4c3ed48bcb6d3456ccc0673bb335b472c284"]}, 0x2a0}, {&(0x7f0000000600)={0xb4, 0x3b, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@generic="9520904672e6f8b9367318a203f3c17f6d18baae1e7ec40e22df5f702a960b81fd0dd7a268", @nested={0x6c, 0x136, 0x0, 0x1, [@nested={0x4, 0x5e}, @generic="5e10f800a8c46a7a761fef1dea72525da9f0516d2975e68cf455309dc3fad401f27087f5f6748ddbb0237f8171a73a65324196b2d1eb0b16216a1b0502e4620fc015c988975772f9", @generic="92734d0d", @nested={0x4, 0x115}, @nested={0x4, 0x95}, @typed={0x8, 0x3a, 0x0, 0x0, @fd=r2}, @typed={0x4, 0xb8}, @nested={0x4, 0xb2}]}, @typed={0x8, 0xf1, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x3d, 0x0, 0x0, @u32=0x4}]}, 0xb4}, {&(0x7f0000000800)={0xb8, 0x39, 0x301, 0x70bd2c, 0x25dfdbfd, "", [@nested={0x8, 0xad, 0x0, 0x1, [@nested={0x4, 0x10c}]}, @nested={0x8, 0x14a, 0x0, 0x1, [@nested={0x4, 0x30}]}, @typed={0x8, 0xe, 0x0, 0x0, @uid=r10}, @generic="3304713105d3aa991bcb0e2d8f758f94c31135d563e53d0f74449b045ce48a5bb01808ccd48a2bae8a7b9469b577ed4b9d052f34929fa1953b23c0df584b52aeb1708f0ecc976b175fece17379f4f29ce6acdb206691bbfad34605393b2e85f310ef40a4e875a1e897ffc3668dc74d41658e4dbb1615322380e058dd855df250a7380b7c79ea868ba1c6d8b9a0eb4668"]}, 0xb8}, {&(0x7f00000008c0)={0x1328, 0x3d, 0x100, 0x70bd2d, 0x25dfdbff, "", [@generic="bf315a0aa2335632692e37f0b6ff3d7bdd908496750f1bdc03a509cc41bf89944e98deb4875df855cc5cd43f34c6ddf1eebff229635635c0a860edba92a42fdc1b9b80af54a50ceffadb81fbdf2c7fbbcbbb2b3e6ee2ca0a3a03c5c2bb9bdccff0a4", @generic="86d0b771bd3495515a71235b45123b609d1865be8625aa30f2303089f97619c5d433ef1905f1b358d362609dfbaf208500c9167bc7181610f50f4c83", @typed={0x8, 0xd8, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="b71962a706ea676f54413169561fb0556e710cf95a905ff96b203a9a", @generic="9215ffcc2da93b941519796137cdf5eb55c0611385baaa91bcdb87d4973cdc83b13d2877ba2d98d87df157ef11023d5bb39149d35ddc0cd338387eeb99ae1cec1f8de330cef3d6cb7604507273ab02d7ec55b0eae12a0243e0b0b540b9ec12b9ae0db773ae4b", @nested={0x19b, 0x31, 0x0, 0x1, [@generic="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", @nested={0x4, 0x91}, @generic="ae87b15229c19cac298624b96735b3b7fb524ed7cba3ee104f06c6d7b46d9bae06479a61f06cdadc40d11d53b796d30d2173768802c593a10ce21b42938ce95e6e9c2759781df427bbe20b0c93c925723699545c4d0d8b9d9d8339a48129cb917b5a5137b32717f44782b92083827a40acd076e780fc21eea4f7cd67de48ba87eca5eb6fbe4781df1a5ae65d114c20b7840f26dbf977b25813"]}, @generic="e8d3b909d34e9e2af9fbcd10cf69802be36fb8acc70b5d9a7b7b0b1caf0fa20f061768fb072235b403a5a0293569a12755dde1a120b19850b5352c8cfbbd99de813a200ec18f8eec0301edb1ec4460cdca36", @generic="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"]}, 0x1328}], 0x4, 0x0, 0x0, 0x40800}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x1}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x44}, 0x1, 0xba01}, 0x4000000) 27.117192584s ago: executing program 3 (id=3934): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x80000000, 0x9, 0x80000000, 0x1, 0xffffffffffffffff, 0x200009}, 0x50) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) unshare(0x24020400) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0x1, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0x8041, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x209, 0x4, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x0, 0x8001, 0x2b12, 0xff, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x67dc, 0x8, 0x11000, 0x8, 0x5, 0x80079b, 0x2, 0x2000001, 0x7f, 0x4, 0x9, 0x7, 0xf, 0x4, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x5, 0x4007, 0x8, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x4, 0x100002, 0x8, 0x2000752, 0x0, 0x3, 0x5, 0x10001, 0x4e7b3717, 0xffffffff, 0x6, 0x6, 0x9, 0x1, 0xfdffffff, 0x2, 0xfffffffe, 0x2, 0x100, 0x5, 0x5b, 0x3, 0x33b, 0x5, 0x20006, 0x5, 0x10003, 0x6, 0x4002, 0xd9a, 0xd, 0x29f, 0xfffffff5, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x0, 0x8, 0x5, 0x20000001, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x6e, r3}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 26.754678493s ago: executing program 1 (id=3937): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) r1 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r1, 0x3a, 0x1, 0x0, 0x20000000) recvmsg(0xffffffffffffffff, 0x0, 0x40000020) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195", @ANYRES64=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r5], 0x34}}, 0x4008000) 26.565138337s ago: executing program 3 (id=3939): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x5a, 0x1, 0x0, 0x25dfdbfb, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x4) syz_emit_ethernet(0x20, &(0x7f0000000540)={@broadcast, @remote, @void, {@llc_tr={0x11, {@snap={0x0, 0x1, 'Q', "e4d278", 0x5, "4c49e982063c09000000"}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000480)={r3}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000780)={r4, &(0x7f0000000580)='nbd\x00', 0x200004, &(0x7f00000005c0)={@align=0xffffffff, {0x5, 0xff00, 0x8, 0x1ff}}, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r5], 0x7c}}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000340)) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x4000000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000003a0096eef56015fc0701002000000000e6ffff0a00000008"], 0x1c}, 0x1, 0x0, 0x0, 0xd1}, 0x10) 26.40606428s ago: executing program 5 (id=3940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x2402c811}, 0x840) write$nci(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="410404"], 0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newqdisc={0x3a4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x310, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_STAB={0x104, 0x2, "16fc3a404fffea471aa30cda4de5093bdcd3c96793de021e77a23bd3f3a134a1c4d71fbe526bae9a59ca2d9c1d0fe60f0f4c471de115fdbb3e7cbf92d35ac8e01d5a135a3505f84ff8ff04fb9e865e0f4c431cfa1258fe6a11a34e357bc937968678d7098accf84a1f3dd279a58465bf445602810a4106022591703a6aac24538eee1fc53b2b066dc925846b74c81df5003b54894446b3ead257560629d53824ff64ae62dc83a08e6ee3720623e03262f01c26d6ec22279ad891d3bb506d8f6793a14224f2cb8d84d244aff13b09be49d2b7f95d68868ba5f73d4dc7ddb839f291d7e6cd61259d5033274264b9fdfa1a66387a67a323993febdb9b52ecda07bf"}]}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf5, 0x9, 0x8, 0x2, 0x3, 0x4, 0x2, 0x2}}, {0x8, 0x2, [0x401, 0x6]}}, {{0x1c, 0x1, {0x0, 0x0, 0x1, 0x3, 0x0, 0x503, 0x7, 0x2}}, {0x8, 0x2, [0x7e, 0x81]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff8001}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x880) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$kcm(0x11, 0x3, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r14) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r13, &(0x7f0000000280)={&(0x7f0000000380)=@sco, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 26.293346513s ago: executing program 4 (id=3942): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000280), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010003904000000000000002000000000", @ANYRES32=0x0, @ANYBLOB="0000000000080100300012800b00010062726964676500002000028008001500000000000a0014000180c200000000000500070009"], 0x50}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000006c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xa010101, @local, {[@ssrr={0x89, 0x27, 0x69, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @empty]}, @rr={0x7, 0x13, 0x57, [@rand_addr=0x64010101, @private=0xa010100, @broadcast, @private=0xa010102]}]}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000280), 0x0}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010003904000000000000002000000000", @ANYRES32=0x0, @ANYBLOB="0000000000080100300012800b00010062726964676500002000028008001500000000000a0014000180c200000000000500070009"], 0x50}}, 0x0) (async) syz_emit_ethernet(0x7a, &(0x7f00000006c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xa010101, @local, {[@ssrr={0x89, 0x27, 0x69, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @empty]}, @rr={0x7, 0x13, 0x57, [@rand_addr=0x64010101, @private=0xa010100, @broadcast, @private=0xa010102]}]}}}}}}}, 0x0) (async) 26.252121709s ago: executing program 4 (id=3943): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) pipe(0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8040) ppoll(&(0x7f0000000180), 0xfdfe, 0x0, 0x0, 0xfffffffffffffd86) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x804) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) write(r2, 0x0, 0x0) write(r1, &(0x7f00000003c0)="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", 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x180, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x1, 0xfffffffc}, 0x50) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) 26.122001642s ago: executing program 1 (id=3944): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x98, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1300}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10001}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x401}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r0}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x2, 0x8, 0x3, 0x9, 0xd, 0x0, 0x70bd2d, 0x40, [@sadb_x_sec_ctx={0xb, 0x18, 0xe, 0x1a, 0x4a, "1f0b5b2d2c275dcc34d7ba4a329a4ebec963b8311ebda19ab4828f15b795628bef38d63c6ad0d2140e62d26b90d35e96e399a9ee7fd34fd9d6c8d62a485e09540b080b21fc71930213b2"}]}, 0x68}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000052000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61f0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x22}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) listen(r6, 0x1) r7 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1d8, 0x1, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_EXP={0x70, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}]}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_EXP={0xe8, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0xe4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}]}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xd}}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfff}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xff7d}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x17f}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000010) connect$vsock_stream(r7, &(0x7f0000001500)={0x28, 0x0, 0x2710, @host}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80110a000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002000700000008000340000200f5087a23f2b55e67641f05e5e70ac0f1cd2800044000000001080006400000000208000140000000000900010073797a30000000000900020073797a320000000014000000"], 0x94}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000040)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1000, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x1}}, [@sec_ctx={0xc, 0x10, {0x8}}]}, 0xc4}}, 0x0) 25.879608464s ago: executing program 0 (id=3945): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x2, 0x18, 0x0, 0x3, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffff, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x10000}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0xa0}}, 0x300) 25.802963404s ago: executing program 0 (id=3946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)=ANY=[@ANYBLOB="140400002400010026bd7000fedbdf25010400800c00010002000000000000001103648045012180d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d38880800fa00", @ANYRESOCT=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0400308000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fce3e81b0d7b85b3a682167c3003000000000000ddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000"], 0x414}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000380)=""/226, 0xe2, 0x0, &(0x7f0000000480)=""/185, 0xb9}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000e2c8933d3ede572d62d6a9ac504746000000000018110000", @ANYRESDEC=r2, @ANYRES64=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 25.474890002s ago: executing program 3 (id=3947): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000280)="8a32deb4e939b19132d0a3dfcdf65eefa4e46c122c2cda1796414f1d5431028102a30d1f17b58d00be8185fa31c2b67d5e572128fecea8744e105f0901e2d839c680700def1bb9a788dd1ff5053bb6d8b0661002154591ddca31cf4c2cc6e35788e473") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'gre0\x00', 0x4000}) 25.451483603s ago: executing program 3 (id=3948): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x21, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f28bdda0a9423debbb86f9dba4a2dba4dbe076c28282900c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@private1, 0x0}, &(0x7f0000000280)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000640)={&(0x7f0000000000), 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x310, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x54c0002d}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x77d}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x3, 0x7, 0x8001}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xbb75}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x310}, 0x1, 0x0, 0x0, 0xc805}, 0x8000) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000400)) 25.351456306s ago: executing program 4 (id=3949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x28) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000100)={r5}, &(0x7f0000000280)=0x8) (async) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r6, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB="d1f10fae35a5beb1c8ee77e15a72f4b6b832a4d8f1cba5ce2c7434654f42c0216ddb53ddc1e05c483851227f86bd265141f9869638e633"], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0xa3d, 0x0, 0x0, 0x0, 0x2c, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x2, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x4810) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r6, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) (async) r8 = socket(0x2, 0x80805, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000100)={r11, 0x4, 0x7, 0xfffffff7}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000000)={0x2542, 0x9, 0x201, 0x5, 0x8, 0xab31, 0x1, 0xb6, r12}, 0x20) (async) r13 = socket$inet6_icmp(0xa, 0x2, 0x3a) r14 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r14, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}], 0x2}], 0x1, 0x40800) (async) recvmmsg$unix(r14, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/88, 0x58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/47, 0x2f}], 0x1}}], 0x2, 0x10120, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) (async) socket(0x26, 0x4, 0x5) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r13, 0x8918, 0x0) 24.9294114s ago: executing program 3 (id=3950): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe, 0xf, 0x0, 0xfffffffffffffff8}, 0x6, 0x6e6bb4, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20040090}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0xfffffffffffffdb9, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESDEC=r5, @ANYRESDEC=r5, @ANYRESHEX=r0], 0xb8}, 0x1, 0x0, 0x0, 0x40400c4}, 0x4040) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) splice(0xffffffffffffffff, &(0x7f0000000440)=0x101, r10, &(0x7f0000000480)=0x761, 0x5, 0x6) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r11, r12, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20) sendmsg$inet(r9, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0xc}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 23.631213552s ago: executing program 0 (id=3951): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x2) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x33, @private=0xa410102, 0x0, 0x0, 'wrr\x00', 0x28, 0xc, 0x43}, 0x2c) (async, rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (rerun: 64) r3 = accept(r2, 0x0, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendmmsg$inet(r4, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) (async) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) sendto$inet6(r3, &(0x7f0000000180)="a415976c", 0x4, 0x4404c06c, 0x0, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0x0, &(0x7f0000000240)) r6 = socket(0x1d, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f00000002c0)={'dvmrp1\x00', {0x2, 0x0, @multicast1}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x54, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, @mcast2={0xff, 0x5}, 0x7, 0x8000, 0xe3e1, 0xd04}}) (rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x1, 0x5c4, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8a, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000000, 0x9, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0x9, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x0, 0x0, 0x3, 0x0, 0xff}, 0x0, 0xfffffffe}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x38}}, 0x0) 23.604090324s ago: executing program 4 (id=3952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200)=0x2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0xd, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x11, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4091}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003010101"], 0x38}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x38, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}, @nested={0x4, 0x1}, @typed={0x4, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x3, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x2, 0x0, 0x3507, 0x0, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x83}, 0x1, 0x0, 0x0, 0x40008000}, 0x4000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/84, 0x54, 0x0, &(0x7f0000000200)=""/113, 0x71}}, 0x10) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r10, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x74ad3233ae3fe54b}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) 23.310190384s ago: executing program 1 (id=3953): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000080)={'veth1_to_bond\x00', {0x2, 0x0, @initdev}}) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet6(0xa, 0x2, 0x3a) getsockopt$sock_buf(r2, 0x1, 0x2e, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x4, 0x4) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000027c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r4}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x9, 0x3, 0x3000000, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r6}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000080), &(0x7f0000000440), 0x3, r6}, 0x38) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002", @ANYRES8=r6, @ANYRESOCT=r5], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4004080) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="01001000", @ANYRES16=r8, @ANYBLOB="00002abd7000ffdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40004) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ff7f0000000000000000000034000000"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) 23.309960663s ago: executing program 0 (id=3954): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f000088c000/0x2000)=nil, 0x2000, 0x3, 0x40010, r1, 0x3a114000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x12, r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="c39203100400000000008900000008800300", @ANYRES32=r3, @ANYBLOB="18001d801400008005000700f1000000060005000e000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x1ff, 0x1, 0x4, 0x7, 0x0, 0xd}, 0xc) listen(r6, 0xd8e) socket$inet6_icmp(0xa, 0x2, 0x3a) 23.289893872s ago: executing program 1 (id=3955): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c000280"], 0x80}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c000280"], 0x80}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001014d9ec"], 0x28}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001014d9ec"], 0x28}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x114, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x40, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xae}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fff}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xe}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0xa4, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff7fff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x661}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x900}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x20000000}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x40}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}]}, 0x114}, 0x1, 0x0, 0x0, 0xc0}, 0x4008844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000f00)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 23.260442488s ago: executing program 0 (id=3956): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x14, 0x3b, 0x9, 0x70bd2a, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x478, 0x2e8, 0xc0, 0xc0, 0x228, 0x2e8, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0xff, 0x2}}}, {{@ip={@private=0xa010101, @multicast2, 0x0, 0xffffff00, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @empty, 0x5607d1016e8ee1dd, 0xffffff00, 'wlan0\x00', 'syz_tun\x00', {}, {}, 0xff, 0x0, 0x1a}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x6, 0x7, 0x6, 0x2, 0x1], 0x6, 0x5}, {0x1, [0x3, 0x4, 0x3, 0x4, 0x7], 0x4, 0x6}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x9}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@addrtype={{0x30}, {0x0, 0xe48, 0x1, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf78, 0x31}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x1e, &(0x7f0000000000)=0x80, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 23.190689475s ago: executing program 4 (id=3957): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0xffe, &(0x7f0000002500)=""/4094, 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES64=r5, @ANYRES64=r6], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 23.189885354s ago: executing program 1 (id=3958): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x0, &(0x7f0000000200), &(0x7f0000000cc0)='syzkaller\x00', 0x3, 0x5, &(0x7f0000000d00)=""/5, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fa"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "a8"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001840)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x2}}, 0x18) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r4, r5, 0x1, 0x3, 0x5}, 0x50) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'netdevsim0\x00', {0x4}, 0xfff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@mcast2, 0x4e23, 0x0, 0x4e24, 0x1, 0xa, 0x80, 0x80, 0x16}, {0xffed, 0xf, 0x9, 0xc, 0x9, 0x8, 0x9, 0x6}, {0x1, 0x7ff, 0xffffffffffffff69, 0xfff}, 0x5, 0x0, 0x1}, {{@in6=@local, 0x4d2, 0x3c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0xa4, 0x401, 0x6, 0x2}}, 0xe8) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES16=r9, @ANYBLOB="370626bd7000fcdbdf252000000008000300", @ANYRES32=r7, @ANYBLOB="24002d8005000100030000000800b300020000000500040000000000080002000300000003d498b409331b2644289b"], 0x40}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r10, 0x0, 0xf3a, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000f61648087d069faaaaaaaaaabb08004523002800650000090690e5a3878801ac1414384e234e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5040ff8b90780002"], 0x3a) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r13, &(0x7f00000000c0)="519703000000", 0x6) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 23.121922156s ago: executing program 4 (id=3959): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000080009400000000588"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000037c00000c00028005007c8028000000040007000c"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) 23.019799325s ago: executing program 3 (id=3960): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1ec, r3, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x908}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @local, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "c77840aecc35ffc9bec04a46e09e83eb0bd9587a4e2f09849695955dd3"}}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002440)=@newlink={0x20, 0x10, 0x437, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x51b0b}}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x144, r4, 0x1c414b4118894568, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x429}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "eeec8b64e23c94ee1fb80c9b457eca100491dc192ef1d708e9abbc"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x18}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xea1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x58}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ab}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x5c, 0x3, "c2c2128823dd07be74efa35946e38fb2b35e761600cc656063e9ef40c093c46b50711204d82b173994ed2648be53dc1a594346c4ad45a0bc0f1178da042d606cdae22c31d5d21f53e4c99c0ecbcd6e5ad220c1050b511cda"}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000003700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10, 0x0, 0xfffffffffffffec9, 0x0, 0x0, 0x20004894}, 0x24001) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(r8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r7) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x62) listen(r9, 0x3) epoll_create1(0x80000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x10, 0x107, 0x70bd2b, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="efd2"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000040)="07000000010001", 0x7) 21.828072141s ago: executing program 0 (id=3961): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090) syz_emit_ethernet(0x5ea, &(0x7f0000001780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5b4, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "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"}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/14, 0xe}, 0xdabc}], 0x1, 0x10022, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', r2, 0x29, 0x3, 0x8, 0xf9, 0x16, @private2, @private2, 0x40, 0x8, 0x6, 0x9e}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000980)={0x6cc, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r2}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x284, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe6}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r2}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x5c, 0x0, 0x7}, {0xf2, 0x8, 0x5, 0x8}, {0x4, 0x1, 0x7, 0xfffffffb}]}}}]}}, {{0x8, 0x1, r2}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}]}}, {{0x8, 0x1, r2}, {0x4}}]}, 0x6cc}, 0x1, 0x0, 0x0, 0x44}, 0x41) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000700000505000400030000000900020073797a320000000014000780050015000000000008001240000000000500050002000000050001000600000015000300686173683a69702c706f72742c6e657400000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$kcm(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r7, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x1, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}}, 0x20048014) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x24040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16.9340329s ago: executing program 5 (id=3962): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x48040}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xff}]}}}]}, 0x40}}, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="620ac4ff000000007110b30000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a523ffff850000000400000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x94) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000480), &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000000c0)={0x1d, r3}, 0x8) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r6, @ANYBLOB="029000000080040008000a00", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000008c0)={'batadv_slave_1\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={0x1, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r10, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd0000000600050001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000009c0)={0x0, @loopback, @multicast2}, &(0x7f0000000a00)=0xc) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="0110000000000000240012800b0001006d616373656300001400028005000a000100000005000b000000000008000500", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r14, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) (async) r15 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmmsg$sock(r14, &(0x7f0000001100)=[{{&(0x7f0000000b40)=@ll={0x11, 0x7, r16, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x80, 0x0, 0x0, &(0x7f0000000f80)=[@txtime={{0x18, 0x1, 0x3d, 0x10000000000006}}], 0x18}}], 0x1, 0x200088d0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000a40)={0x4a8, 0x0, 0x404, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @bpf_hash_func={{}, {}, {0x0, 0x4, [{0x7, 0x8, 0xff}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r6}, {0x208, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0xfee4, 0x4, 0xe}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}]}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) 16.929934584s ago: executing program 5 (id=3963): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e23, 0x400, @private2, 0x4}}, 0x0, 0x8002}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002020800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x1}, 0x28) 16.874804462s ago: executing program 5 (id=3964): sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000871122b182d563dad3acc18a204d40226d261da5ba69d0c43413e99f90f83ee0853d9ebf22a9e70216da221bb726c8efa5", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf251000000008000b00010000000800320004000000"], 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x2, 0x0, 0xd, 0x4901}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1f, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x49f4, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x646}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @ldst={0x574d5ab5b68a3e12, 0x3, 0x4, 0xb, 0xa, 0xffffffffffffffff, 0x1}, @call, @alu={0x7, 0x0, 0x4, 0x8, 0x8, 0x10, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000000)="7c89c7c2", 0x4}], 0x1}}], 0x1, 0x24040040) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000340), &(0x7f0000000380)=0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20002400}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 16.282064045s ago: executing program 5 (id=3965): socket$netlink(0x10, 0x3, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x40, 0xfffffffe, 0x3}, 0x10) (async, rerun: 64) r4 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000002c000480280001800d0001007379"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) (async) setsockopt$inet6_opts(r5, 0x29, 0x37, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) (async) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x10, 0x80003, 0x0) (async) socket(0x2b, 0x80801, 0x1) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x25dfdaff, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @fd=r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) 15.948698071s ago: executing program 5 (id=3966): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x30, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x20004800) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000000280)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x134, 0x15, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0xeb, 0x8, "fd39d7c4a88a7e7c7e3552508e49abf3ffa1d94c9fd2e436cb20a774ed7036c85bf0f1fcc1dff44d63ac95e5a98d4fd880d1431b0c138c0ff33c8b82c2a6f9d585f2f93feac244580a116b8ea9832a2110cd27b8a32ad2a42e12df21935955544e9c810084c9846c014f7cd5083cf4a27947c5f025d93eb56b6df1288ace5fedd27d9ae8e3b9eadbce3c3454c8899b1b3301dff36e8c95c38ddda08357c5616d82d67865e5c18d7d6e5650c8de5c51b810190c7d7111b90319b497a0264ce70214db2b82c387e800c7ea1acbe88f0896ad3a6d1b8cf5f44ed647c479aba4a7a4388baae5750173"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x134}, 0x1, 0x0, 0x0, 0x18}, 0x4040001) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) read$rfkill(r5, &(0x7f0000001780), 0x8) 7.994293649s ago: executing program 33 (id=3958): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x0, &(0x7f0000000200), &(0x7f0000000cc0)='syzkaller\x00', 0x3, 0x5, &(0x7f0000000d00)=""/5, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fa"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "a8"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001840)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x2}}, 0x18) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r4, r5, 0x1, 0x3, 0x5}, 0x50) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'netdevsim0\x00', {0x4}, 0xfff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@mcast2, 0x4e23, 0x0, 0x4e24, 0x1, 0xa, 0x80, 0x80, 0x16}, {0xffed, 0xf, 0x9, 0xc, 0x9, 0x8, 0x9, 0x6}, {0x1, 0x7ff, 0xffffffffffffff69, 0xfff}, 0x5, 0x0, 0x1}, {{@in6=@local, 0x4d2, 0x3c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0xa4, 0x401, 0x6, 0x2}}, 0xe8) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES16=r9, @ANYBLOB="370626bd7000fcdbdf252000000008000300", @ANYRES32=r7, @ANYBLOB="24002d8005000100030000000800b300020000000500040000000000080002000300000003d498b409331b2644289b"], 0x40}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r10, 0x0, 0xf3a, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000f61648087d069faaaaaaaaaabb08004523002800650000090690e5a3878801ac1414384e234e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5040ff8b90780002"], 0x3a) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r13, &(0x7f00000000c0)="519703000000", 0x6) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 7.95584507s ago: executing program 34 (id=3959): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000080009400000000588"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000037c00000c00028005007c8028000000040007000c"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) 6.959382127s ago: executing program 35 (id=3960): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1ec, r3, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x908}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @local, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "c77840aecc35ffc9bec04a46e09e83eb0bd9587a4e2f09849695955dd3"}}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002440)=@newlink={0x20, 0x10, 0x437, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x51b0b}}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x144, r4, 0x1c414b4118894568, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x429}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "eeec8b64e23c94ee1fb80c9b457eca100491dc192ef1d708e9abbc"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x18}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xea1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x58}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ab}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x5c, 0x3, "c2c2128823dd07be74efa35946e38fb2b35e761600cc656063e9ef40c093c46b50711204d82b173994ed2648be53dc1a594346c4ad45a0bc0f1178da042d606cdae22c31d5d21f53e4c99c0ecbcd6e5ad220c1050b511cda"}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000003700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10, 0x0, 0xfffffffffffffec9, 0x0, 0x0, 0x20004894}, 0x24001) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(r8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r7) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x62) listen(r9, 0x3) epoll_create1(0x80000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x10, 0x107, 0x70bd2b, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="efd2"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000040)="07000000010001", 0x7) 6.453059601s ago: executing program 36 (id=3961): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090) syz_emit_ethernet(0x5ea, &(0x7f0000001780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5b4, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "90c8a1a190c999b1f046a5f8502e73670cb7f4ab8035ca5ba53c4253cc4da3a75b04f4b82f3a1689ee3df70953d7085fdec7f497f5cc2d62a193023253aac15e73dbd3281353568d55068daae5fac37a26b04243257dcf4dc0fbd797d756a071225dfd6cd3dc31ad8c7c0c92bbfc03794c373498d3d89d05bb6386f13aa31d109ac4810e4502e74aae68aafa112cd1e90befbd59485a3396a44ff5387f60c329e0a740e62fb7bb9d695e12d9948a6e240b80ccc2ec5f2a69358b65cfa87a4bbd80e9b803b9816992fbc6c812c65fc10082b7468954573bedffa93ffd656148cf54a7ac3ef550a2be49f3b590db70c5286751c254d6fd14c3f699d1ff2c86b9f631078a31134ea0ad64f61a87a7a6506c79db494d7ef8eecf24e9ea143c259b6ec138e37d965d5577c23d225636d30385bbd04e5b57ebcbdf1984bd45eaf6a5659c22cc323c48dbf5fb3b77ccc125b38b8eb0cd11aaac4e77334f103895d82b4c3aecbd22186cf61b1d88da424bc3ddec9c49c0606e5aa1f6121052873fb08cbf344f6352d24150a865ea12da53ef04eb518f224c035c49a48ba2926b366e4530d60d27cdb4a850f9adba7f1e26b4fa6c941ced501439ef20e06c405dd0b384bec002dd591f8df1504d5634c96d4c67597fdd66a3576a97348d9610af83519fbf13bfb40ad39235068617582b387bce8d281d508b4a0b100cf629d157e8b777847a02a242a90906e6a084588b9d7461e6fb93532615ce6ea71e9d0d3fb13bb56982788d5786272d156e96996f23330eed4f84d7c120bf74441f35a137e313dd9e1a2a2a23504918e06d9a4f320522fe0d6df149364c032d3f14250b0db7e8ba445430515edb445e3fbdd8486067083f38042e973d58e3c79b575fdba68fee6b38f09001ef9b84e38f330a1aa65e48106a8629e7591fffa4f23c681c6584144d77c624b8369f5ae99faa194c7766fae96be118514d4b83f511f484515774c6261dc99189c12d46e67b9cecfefc5ad32cd0f5f59ab032bc93adb4d4476f6c8a5c011e00ebaca53eb4469c389122db553aabaed119fd640729d9557c50d78cfca4af346803804306a9796b090265e256dc820546c58fa2d3723c7205540006e831e1cfb3960ca77f606a6de6afd49e733c3720c801e1afc2142dbfad94ffd06c036395fcc2cd12c37ebd37d4c57ca8a83c45f0dd7f0020650c0e793e997bb9be183014f7225d84edb092362fadb3b30755331f9e7dd056c9148329a8ed848603770170e7ab2e9aae5b8ad97ab61179927427093feb59da6664fd14f14f059d04adac8d525c23a1fbf59f2eb334de8a38a0dc28943662e2eed21cefbb52e24f914723579e3b6ab9419f1399cec79d1a51b2c2668af2f71bcf3cf98cef743eace692612059486cf28365f897c6ae9a5e7176ad91404def08efe340e92ea3c790218511b9d69fcda5b500d694d59a768c866839cb22b918b9322689e6ac66d21866159c84e2a0e41d9324c092a6cfc14c6e42b1bf3657ed763fb3ee007e9633253e3250f7d5d2d574e4c89b4517d9cc7a9ff92b80e5870dd822d075e6082cae341f2db748921f2909264bad93d1ca36f01aa414c3681e382bf294cf2f436e5fee6871d8acadf504f784de821ac21811b894f0c78548a9cced0ef27bc07ab29a2556318e5133623ca3f346d197632455279b111a9ed789a927cf3b09c53ac1ebc7457cf50c79f211a7402d8ff5371bbaeb8fca4b52efdc944e81ddf7737475568c8589a353687a8d7cff5e7003a696d286bc51198b07b2676c9675a161b42c33aface83cd24976ec4af28e8e5a35a60ac1798d672a0b23ea519bc6f55be62c0e3db3a432cb54e3e75ea0adc375e4a8c1a645370a921e93d2a1b040d894d9153c4ba86f60b2aae3fd2c2b86502691a0728860e9e12210d237dc9dbe1d1795ef65c81f4e2e948466ca14829b3c7ee86e0e0510a232fd0d22c1fc7c62bdb2e7d2d11f22fc74c85974c6b88c5c02b6df180cd22ba092a1ae8ea4c60cb29e2faec1e97ebbf886c34815bb906ccb2a4f86f75a"}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/14, 0xe}, 0xdabc}], 0x1, 0x10022, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', r2, 0x29, 0x3, 0x8, 0xf9, 0x16, @private2, @private2, 0x40, 0x8, 0x6, 0x9e}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000980)={0x6cc, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r2}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x284, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe6}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r2}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x5c, 0x0, 0x7}, {0xf2, 0x8, 0x5, 0x8}, {0x4, 0x1, 0x7, 0xfffffffb}]}}}]}}, {{0x8, 0x1, r2}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}]}}, {{0x8, 0x1, r2}, {0x4}}]}, 0x6cc}, 0x1, 0x0, 0x0, 0x44}, 0x41) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000700000505000400030000000900020073797a320000000014000780050015000000000008001240000000000500050002000000050001000600000015000300686173683a69702c706f72742c6e657400000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$kcm(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r7, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x1, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}}, 0x20048014) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x24040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 37 (id=3966): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x30, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x20004800) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000000280)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x134, 0x15, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0xeb, 0x8, "fd39d7c4a88a7e7c7e3552508e49abf3ffa1d94c9fd2e436cb20a774ed7036c85bf0f1fcc1dff44d63ac95e5a98d4fd880d1431b0c138c0ff33c8b82c2a6f9d585f2f93feac244580a116b8ea9832a2110cd27b8a32ad2a42e12df21935955544e9c810084c9846c014f7cd5083cf4a27947c5f025d93eb56b6df1288ace5fedd27d9ae8e3b9eadbce3c3454c8899b1b3301dff36e8c95c38ddda08357c5616d82d67865e5c18d7d6e5650c8de5c51b810190c7d7111b90319b497a0264ce70214db2b82c387e800c7ea1acbe88f0896ad3a6d1b8cf5f44ed647c479aba4a7a4388baae5750173"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x134}, 0x1, 0x0, 0x0, 0x18}, 0x4040001) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) read$rfkill(r5, &(0x7f0000001780), 0x8) kernel console output (not intermixed with test programs): 487] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 5, id = 0 [ 410.337650][ T5642] Bluetooth: hci0: command tx timeout [ 410.371537][T18493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3209'. [ 410.388601][T18495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'. [ 410.480356][T18493] veth3: entered promiscuous mode [ 410.485686][T18493] veth3: entered allmulticast mode [ 410.518364][T18498] netlink: 'syz.0.3209': attribute type 10 has an invalid length. [ 410.526234][T18498] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3209'. [ 410.539105][T18486] bond0: entered promiscuous mode [ 410.544166][T18486] bond_slave_0: entered promiscuous mode [ 410.550088][T18486] bond_slave_1: entered promiscuous mode [ 410.587113][T18486] batadv0: entered promiscuous mode [ 410.593153][T18486] debugfs: 'hsr1' already exists in 'hsr' [ 410.598904][T18486] Cannot create hsr debugfs directory [ 410.604841][T18486] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 410.627392][T18486] bond0: left promiscuous mode [ 410.632482][T18486] bond_slave_0: left promiscuous mode [ 410.638151][T18486] bond_slave_1: left promiscuous mode [ 410.644797][T18486] batadv0: left promiscuous mode [ 410.657304][T18498] dummy0: entered promiscuous mode [ 410.707854][T14841] net_ratelimit: 8 callbacks suppressed [ 410.707870][T14841] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 410.833396][T18417] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.847995][T18417] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.864031][T18417] bridge_slave_0: entered allmulticast mode [ 410.873208][T18417] bridge_slave_0: entered promiscuous mode [ 410.882840][T18417] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.890287][T18417] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.897570][T18417] bridge_slave_1: entered allmulticast mode [ 410.905509][T18417] bridge_slave_1: entered promiscuous mode [ 410.942622][T18417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.955838][T18417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.044659][T18417] team0: Port device team_slave_0 added [ 411.058131][T18417] team0: Port device team_slave_1 added [ 411.166655][T18522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3215'. [ 411.181601][T18417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.206949][T18417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.234031][T18417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.264385][T18417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.271512][T18417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.301165][T18417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.374841][T18417] hsr_slave_0: entered promiscuous mode [ 411.387388][T18417] hsr_slave_1: entered promiscuous mode [ 411.399028][T18417] debugfs: 'hsr0' already exists in 'hsr' [ 411.405171][T18417] Cannot create hsr debugfs directory [ 411.411241][T18531] nbd: must specify at least one socket [ 411.566740][T18541] netlink: 'syz.3.3221': attribute type 1 has an invalid length. [ 411.629915][T18541] bond18: entered promiscuous mode [ 411.635864][T18541] 8021q: adding VLAN 0 to HW filter on device bond18 [ 411.772383][T18546] bond18: (slave bridge16): making interface the new active one [ 411.780402][T18546] bridge16: entered promiscuous mode [ 411.788176][T18546] bridge16: left promiscuous mode [ 412.114077][T18417] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.182991][T12165] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 412.206180][T18563] netlink: 'syz.0.3227': attribute type 10 has an invalid length. [ 412.222381][T18562] netlink: 'syz.0.3227': attribute type 10 has an invalid length. [ 412.248502][T18563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.263899][T18563] team0: Port device netdevsim1 added [ 412.424327][ T5642] Bluetooth: hci0: command tx timeout [ 412.516349][T18584] netlink: 'syz.0.3232': attribute type 13 has an invalid length. [ 412.623323][ T8068] IPVS: starting estimator thread 0... [ 412.661774][T14841] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 412.727386][T18417] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.782322][T12156] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 412.847784][T18595] netlink: 'syz.4.3235': attribute type 1 has an invalid length. [ 412.855572][T18595] __nla_validate_parse: 4 callbacks suppressed [ 412.855584][T18595] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3235'. [ 412.871921][T18595] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3235'. [ 412.902408][T18588] IPVS: using max 34 ests per chain, 81600 per kthread [ 412.955428][T18417] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.990176][T18598] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3236'. [ 413.034056][T18598] netlink: 'syz.3.3236': attribute type 1 has an invalid length. [ 413.072519][T12156] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 413.081420][T18598] netlink: 'syz.3.3236': attribute type 9 has an invalid length. [ 413.133341][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.140568][ C0] bridge0: topology change detected, propagating [ 413.147243][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.154461][ C0] bridge0: topology change detected, propagating [ 413.623725][T18608] syzkaller0: entered promiscuous mode [ 413.630149][T18608] syzkaller0: entered allmulticast mode [ 413.644209][T18417] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.683869][T18611] tipc: Failed to remove unknown binding: 66,0,0/0:164729253/164729255 [ 413.692162][T18611] tipc: Failed to remove unknown binding: 66,0,0/0:164729253/164729254 [ 413.722712][ T62] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 413.739363][T18611] tipc: Failed to remove unknown binding: 66,0,0/0:164729253/164729255 [ 413.747796][T18611] tipc: Failed to remove unknown binding: 66,0,0/0:164729253/164729254 [ 413.822201][ T5760] IPVS: starting estimator thread 0... [ 413.849477][ T116] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 413.892167][T18622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3245'. [ 413.950368][T18618] IPVS: using max 25 ests per chain, 60000 per kthread [ 413.977003][T14841] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 413.981005][T18627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3246'. [ 414.031873][T18632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3248'. [ 414.047904][T18632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3248'. [ 414.107390][T18635] bond1: option ad_user_port_key: invalid value (65535) [ 414.117394][T18635] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 414.134582][T18635] bond1 (unregistering): Released all slaves [ 414.167267][T18638] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3247'. [ 414.186480][T18638] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3247'. [ 414.188700][T18642] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3250'. [ 414.205512][ T116] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 414.343446][ T116] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 414.531181][ T5642] Bluetooth: hci0: command tx timeout [ 414.681818][T18417] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 414.691762][T18417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.781497][T18417] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 414.791367][T18417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.800857][T18417] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 414.813272][T18417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.821103][T18417] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 414.862836][T18417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.041417][T18417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.083892][T18417] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.117005][T14841] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.124138][T14841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.144934][T12156] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.152057][T12156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.695941][T18417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.824228][T18417] veth0_vlan: entered promiscuous mode [ 415.854133][T18720] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 415.864066][T18417] veth1_vlan: entered promiscuous mode [ 415.892931][T12165] net_ratelimit: 5 callbacks suppressed [ 415.892946][T12165] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 415.920191][T18417] veth0_macvtap: entered promiscuous mode [ 415.930380][T18417] veth1_macvtap: entered promiscuous mode [ 416.093933][T18417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.133491][T18417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.201140][ T62] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 416.230179][ T116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.238972][ T116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.247685][ T116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.287362][ T116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.346211][ T116] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 416.407118][T18742] netlink: 'syz.3.3274': attribute type 11 has an invalid length. [ 416.528491][T18744] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 416.536663][ T116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.547261][T12165] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 416.567279][ T116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.575234][ T5642] Bluetooth: hci0: command tx timeout [ 416.661528][T18752] syzkaller0: entered promiscuous mode [ 416.667053][T18752] syzkaller0: entered allmulticast mode [ 416.704323][T18748] TCP: TCP_TX_DELAY enabled [ 416.733680][T18750] sctp: [Deprecated]: syz.4.3278 (pid 18750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.733680][T18750] Use struct sctp_sack_info instead [ 416.750141][T12165] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 416.760580][T12165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.768433][T12165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.434243][T12153] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 417.759336][ T4945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 417.777421][ T4945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 417.808865][ T4945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 417.861515][ T4945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 417.932432][ T4945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 418.459648][T18790] __nla_validate_parse: 12 callbacks suppressed [ 418.459663][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3287'. [ 418.522773][T12153] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 418.563906][T18792] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3287'. [ 418.655397][T12165] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 418.667398][T18797] netlink: 'syz.1.3288': attribute type 3 has an invalid length. [ 418.686455][T18797] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3288'. [ 418.770153][T12156] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 419.043818][T18805] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3289'. [ 419.052885][T18805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3289'. [ 419.155664][T18805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3289'. [ 419.167012][T18805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3289'. [ 419.182684][T12153] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 419.337582][T18822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3294'. [ 419.394489][T18822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3294'. [ 419.447735][T12156] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.459183][T12156] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 419.469027][T12156] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 419.481589][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.481609][ C1] bridge0: topology change detected, propagating [ 419.815607][T12156] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.827784][T12156] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 419.838321][T12156] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 419.936510][T18780] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.944526][T18780] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.964045][T18780] bridge_slave_0: entered allmulticast mode [ 419.974732][T18780] bridge_slave_0: entered promiscuous mode [ 419.986888][T18780] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.994435][T18780] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.011286][ T4945] Bluetooth: hci1: command tx timeout [ 420.026375][T18780] bridge_slave_1: entered allmulticast mode [ 420.035104][T18780] bridge_slave_1: entered promiscuous mode [ 420.059051][T12156] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.069543][T12156] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 420.080800][T12156] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 420.129125][T18780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.146034][T18780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.234261][T18780] team0: Port device team_slave_0 added [ 420.255312][T18780] team0: Port device team_slave_1 added [ 420.292988][T12156] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.309582][T18849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3301'. [ 420.317780][T12156] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 420.330576][T12156] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 420.406705][T18849] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 420.410214][T18848] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 420.450886][T18780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.466099][T18780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.648326][T18780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.699855][T18780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.706973][T18780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.764105][T18780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.785163][T18862] IPVS: set_ctl: invalid protocol: 110 172.20.20.38:20004 [ 421.168148][T18780] hsr_slave_0: entered promiscuous mode [ 421.176953][T18780] hsr_slave_1: entered promiscuous mode [ 421.184635][T18780] debugfs: 'hsr0' already exists in 'hsr' [ 421.207962][T18780] Cannot create hsr debugfs directory [ 421.355550][T14841] net_ratelimit: 2 callbacks suppressed [ 421.355566][T14841] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 421.505310][T12156] veth1_to_bridge: left allmulticast mode [ 421.527700][T12156] veth1_to_bridge: left promiscuous mode [ 421.549315][T12156] bridge0: port 1(veth1_to_bridge) entered disabled state [ 421.760335][T12156] pimreg: left allmulticast mode [ 421.777232][T12156] tipc: Resetting bearer [ 422.055304][T12156] bond1 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 422.090597][ T4945] Bluetooth: hci1: command tx timeout [ 422.127253][T12156] bond1 (unregistering): (slave ip6gretap2): Releasing backup interface [ 422.135623][T12156] bond1 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - 82:b8:85:01:b7:93 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 422.301945][T12156] tipc: Disabling bearer [ 422.365329][T12156] bond17 (unregistering): (slave geneve6): Releasing active interface [ 422.377866][T12156] bond2 (unregistering): (slave geneve5): Releasing active interface [ 424.170110][ T4945] Bluetooth: hci1: command tx timeout [ 424.521709][T12156] bond14 (unregistering): (slave bridge13): Releasing active interface [ 424.529990][T12156] bridge13 (unregistering): left promiscuous mode [ 424.536528][T12156] bridge13 (unregistering): left allmulticast mode [ 424.765431][T12156] bond16 (unregistering): (slave bridge15): Releasing active interface [ 424.879154][T12156] bond0 (unregistering): Released all slaves [ 424.894702][T12156] bond1 (unregistering): (slave veth3): Releasing backup interface [ 424.904752][T12156] bond1 (unregistering): Released all slaves [ 424.918709][T12156] bond2 (unregistering): Released all slaves [ 424.933148][T12156] bond3 (unregistering): Released all slaves [ 424.949029][T12156] bond4 (unregistering): Released all slaves [ 424.965409][T12156] bond5 (unregistering): Released all slaves [ 424.984321][T12156] bond6 (unregistering): Released all slaves [ 425.004799][T12156] bond7 (unregistering): Released all slaves [ 425.027966][T12156] bond8 (unregistering): (slave bond9): Releasing backup interface [ 425.036576][T12156] bond8 (unregistering): Released all slaves [ 425.053337][T12156] bond9 (unregistering): Released all slaves [ 425.073716][T12156] bond10 (unregistering): Released all slaves [ 425.090485][T12156] bond11 (unregistering): Released all slaves [ 425.105263][T12156] bond12 (unregistering): Released all slaves [ 425.124239][T12156] bond13 (unregistering): Released all slaves [ 425.144636][T12156] bond14 (unregistering): Released all slaves [ 425.168703][T12156] bond15 (unregistering): Released all slaves [ 425.183652][T12156] bond16 (unregistering): Released all slaves [ 425.199010][T12156] bond17 (unregistering): Released all slaves [ 425.215477][T12156] bond18 (unregistering): Released all slaves [ 425.448556][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 425.534776][T18922] __nla_validate_parse: 3 callbacks suppressed [ 425.534792][T18922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3315'. [ 425.545216][T18923] FAULT_INJECTION: forcing a failure. [ 425.545216][T18923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.552863][T12156] tipc: Left network mode [ 425.573950][T18923] CPU: 1 UID: 0 PID: 18923 Comm: syz.1.3314 Not tainted syzkaller #0 PREEMPT(full) [ 425.573973][T18923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 425.573984][T18923] Call Trace: [ 425.573991][T18923] [ 425.573998][T18923] dump_stack_lvl+0xe8/0x150 [ 425.574023][T18923] should_fail_ex+0x412/0x560 [ 425.574050][T18923] _copy_from_user+0x2d/0xb0 [ 425.574076][T18923] sk_setsockopt+0x2b3/0x2d60 [ 425.574110][T18923] ? __pfx_sk_setsockopt+0x10/0x10 [ 425.574138][T18923] ? aa_sk_perm+0x6d5/0x900 [ 425.574160][T18923] ? __fget_files+0x2a/0x420 [ 425.574184][T18923] ? __pfx_aa_sk_perm+0x10/0x10 [ 425.574208][T18923] ? __fget_files+0x2a/0x420 [ 425.574226][T18923] ? aa_sock_opt_perm+0xff/0x1a0 [ 425.574252][T18923] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 425.574279][T18923] do_sock_setsockopt+0x11b/0x1b0 [ 425.574308][T18923] __x64_sys_setsockopt+0x13d/0x1b0 [ 425.574334][T18923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.574353][T18923] do_syscall_64+0x15f/0xf80 [ 425.574378][T18923] ? trace_irq_disable+0x3b/0x140 [ 425.574404][T18923] ? clear_bhb_loop+0x40/0x90 [ 425.574425][T18923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.574442][T18923] RIP: 0033:0x7f21a5d9ce59 [ 425.574459][T18923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.574479][T18923] RSP: 002b:00007f21a6d3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 425.574496][T18923] RAX: ffffffffffffffda RBX: 00007f21a6015fa0 RCX: 00007f21a5d9ce59 [ 425.574509][T18923] RDX: 0000000000000020 RSI: 0000000000000001 RDI: 0000000000000003 [ 425.574519][T18923] RBP: 00007f21a6d3a090 R08: 0000000000000004 R09: 0000000000000000 [ 425.574529][T18923] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 425.574540][T18923] R13: 00007f21a6016038 R14: 00007f21a6015fa0 R15: 00007fff48315738 [ 425.574568][T18923] [ 425.888153][T18922] bond0: entered promiscuous mode [ 425.893349][T18922] bond_slave_0: entered promiscuous mode [ 425.899259][T18922] bond_slave_1: entered promiscuous mode [ 425.964092][T18922] bond0: left promiscuous mode [ 425.968908][T18922] bond_slave_0: left promiscuous mode [ 425.974463][T18922] bond_slave_1: left promiscuous mode [ 426.056179][T12156] IPVS: stopping backup sync thread 18487 ... [ 426.270311][ T4945] Bluetooth: hci1: command tx timeout [ 426.395282][T18946] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 426.462711][T18942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3320'. [ 426.566397][T18961] FAULT_INJECTION: forcing a failure. [ 426.566397][T18961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.579691][T18961] CPU: 1 UID: 0 PID: 18961 Comm: syz.1.3325 Not tainted syzkaller #0 PREEMPT(full) [ 426.579713][T18961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 426.579724][T18961] Call Trace: [ 426.579731][T18961] [ 426.579738][T18961] dump_stack_lvl+0xe8/0x150 [ 426.579763][T18961] should_fail_ex+0x412/0x560 [ 426.579791][T18961] _copy_to_user+0x31/0xb0 [ 426.579819][T18961] simple_read_from_buffer+0xe1/0x170 [ 426.579850][T18961] proc_fail_nth_read+0x1bb/0x230 [ 426.579894][T18961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.579938][T18961] ? rw_verify_area+0x2a6/0x4d0 [ 426.579966][T18961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.579993][T18961] vfs_read+0x20c/0xa70 [ 426.580026][T18961] ? __pfx___mutex_lock+0x10/0x10 [ 426.580050][T18961] ? __pfx_vfs_read+0x10/0x10 [ 426.580079][T18961] ? __fget_files+0x2a/0x420 [ 426.580107][T18961] ? __fget_files+0x3a0/0x420 [ 426.580129][T18961] ? __fget_files+0x2a/0x420 [ 426.580163][T18961] ksys_read+0x150/0x270 [ 426.580193][T18961] ? __pfx_ksys_read+0x10/0x10 [ 426.580236][T18961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.580258][T18961] do_syscall_64+0x15f/0xf80 [ 426.580284][T18961] ? trace_irq_disable+0x3b/0x140 [ 426.580314][T18961] ? clear_bhb_loop+0x40/0x90 [ 426.580338][T18961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.580358][T18961] RIP: 0033:0x7f21a5d5d68e [ 426.580376][T18961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 426.580392][T18961] RSP: 002b:00007f21a6d39fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.580413][T18961] RAX: ffffffffffffffda RBX: 00007f21a6d3a6c0 RCX: 00007f21a5d5d68e [ 426.580427][T18961] RDX: 000000000000000f RSI: 00007f21a6d3a0a0 RDI: 0000000000000004 [ 426.580438][T18961] RBP: 00007f21a6d3a090 R08: 0000000000000000 R09: 0000000000000000 [ 426.580450][T18961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.580463][T18961] R13: 00007f21a6016038 R14: 00007f21a6015fa0 R15: 00007fff48315738 [ 426.580496][T18961] [ 426.817315][ T150] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.826186][ T150] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.895982][T18964] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.995404][ T150] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.019027][ T150] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.190585][T18970] lo: Caught tx_queue_len zero misconfig [ 427.245093][ T4945] block nbd1: Receive control failed (result -32) [ 427.251957][ T5642] block nbd1: Receive control failed (result -32) [ 427.395683][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 427.489945][T18943] nbd1: detected capacity change from 0 to 63 [ 427.511119][T18978] block nbd1: Dead connection, failed to find a fallback [ 427.518198][T18978] block nbd1: shutting down sockets [ 427.523825][T18978] blk_print_req_error: 138 callbacks suppressed [ 427.523840][T18978] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.557347][T18978] buffer_io_error: 138 callbacks suppressed [ 427.557361][T18978] Buffer I/O error on dev nbd1, logical block 0, async page read [ 427.646375][T18978] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.656719][T18978] Buffer I/O error on dev nbd1, logical block 1, async page read [ 427.666440][T18978] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.677355][T18978] Buffer I/O error on dev nbd1, logical block 2, async page read [ 427.685508][T18978] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.703813][T18978] Buffer I/O error on dev nbd1, logical block 3, async page read [ 427.712121][T18978] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.721419][T18978] Buffer I/O error on dev nbd1, logical block 0, async page read [ 427.729518][T18978] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.761991][T18978] Buffer I/O error on dev nbd1, logical block 1, async page read [ 427.782371][T18978] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.800716][T18978] Buffer I/O error on dev nbd1, logical block 2, async page read [ 427.810508][T18978] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.819638][T18978] Buffer I/O error on dev nbd1, logical block 3, async page read [ 427.827523][T18978] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.836571][T18978] Buffer I/O error on dev nbd1, logical block 0, async page read [ 427.844408][T18978] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.938120][T18978] Buffer I/O error on dev nbd1, logical block 1, async page read [ 427.948250][T18978] ldm_validate_partition_table(): Disk read failed. [ 427.956712][T18978] Dev nbd1: unable to read RDB block 0 [ 427.964025][T18978] nbd1: unable to read partition table [ 428.003411][T18978] ldm_validate_partition_table(): Disk read failed. [ 428.011785][T18978] Dev nbd1: unable to read RDB block 0 [ 428.019081][T18978] nbd1: unable to read partition table [ 428.153271][T18996] bond1: entered promiscuous mode [ 428.247651][T18996] bond1: entered allmulticast mode [ 428.268172][T18996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.547760][T19029] sctp: [Deprecated]: syz.0.3337 (pid 19029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.547760][T19029] Use struct sctp_sack_info instead [ 429.239966][T19072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3346'. [ 429.249841][T19071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3346'. [ 429.851445][T19098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3348'. [ 430.195515][T19108] netlink: 'syz.2.3349': attribute type 1 has an invalid length. [ 430.203385][T19108] netlink: 'syz.2.3349': attribute type 6 has an invalid length. [ 430.211555][T19108] netlink: 'syz.2.3349': attribute type 7 has an invalid length. [ 430.219377][T19108] netlink: 'syz.2.3349': attribute type 1 has an invalid length. [ 430.335098][T19108] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.342783][T19108] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.599859][T19117] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.607579][T19117] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.831301][T19117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.844361][T19117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.988441][T19121] pimreg: entered allmulticast mode [ 430.997560][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.010446][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.064346][T12156] batadv0: left promiscuous mode [ 431.072516][T12156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.079956][T12156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.133429][T19137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3354'. [ 431.170639][T12156] pim6reg (unregistering): left allmulticast mode [ 431.421325][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.465561][T12153] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.539299][T18780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 431.558101][T18780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.594582][T18780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 431.613090][T18780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.666549][T18780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 431.678288][T18780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.692538][T18780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 431.802781][T18780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.080259][T18780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.099030][T18780] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.196227][T12153] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.203394][T12153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.276341][T12153] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.283510][T12153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.427920][T19182] netlink: 'syz.1.3361': attribute type 1 has an invalid length. [ 432.533165][T19188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3361'. [ 433.116372][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3364'. [ 433.134735][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3364'. [ 434.971741][T19182] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 435.195539][T19263] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3368'. [ 435.315727][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3370'. [ 435.742916][T19288] xt_hashlimit: size too large, truncated to 1048576 [ 435.749820][T18780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.801831][T18780] veth0_vlan: entered promiscuous mode [ 435.829626][T18780] veth1_vlan: entered promiscuous mode [ 435.859959][T19290] netlink: 'syz.4.3372': attribute type 1 has an invalid length. [ 435.867750][T19290] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3372'. [ 435.915294][T18780] veth0_macvtap: entered promiscuous mode [ 435.937003][T18780] veth1_macvtap: entered promiscuous mode [ 435.988265][T18780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.057462][T18780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.120805][T12167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.134881][T12167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.144176][T12167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.154592][T12167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.284836][T19302] netlink: 'syz.1.3374': attribute type 3 has an invalid length. [ 436.292606][T19302] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3374'. [ 436.353436][T12153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.373905][T12153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.440141][T14841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.460050][T14841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.276942][T19335] bond0: entered allmulticast mode [ 437.282112][T19335] bond_slave_0: entered allmulticast mode [ 437.287846][T19335] bond_slave_1: entered allmulticast mode [ 437.316784][T19341] workqueue: name exceeds WQ_NAME_LEN. Truncating to: πx)% ].>n6# [ 437.417521][T19348] netlink: 'syz.3.3382': attribute type 1 has an invalid length. [ 437.793021][T12156] IPVS: stop unused estimator thread 0... [ 438.273365][T19384] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3388'. [ 438.369244][T19384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3388'. [ 438.399844][T19388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3389'. [ 438.582443][T19388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3389'. [ 439.573818][T19446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3398'. [ 439.793631][T19446] bond1: entered promiscuous mode [ 439.799287][T19446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.975799][T19436] 8021q: adding VLAN 0 to HW filter on device bond2 [ 439.986936][T19436] bond2: entered promiscuous mode [ 439.994237][T19436] bond1: (slave bond2): Enslaving as an active interface with an up link [ 440.021472][ T1311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.033356][T19455] tipc: Started in network mode [ 440.038262][T19455] tipc: Node identity dee4983331f8, cluster identity 4711 [ 440.045529][T19455] tipc: Enabled bearer , priority 10 [ 440.404260][T19472] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3404'. [ 440.504797][T19475] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3405'. [ 440.579196][T19479] netlink: 'syz.3.3407': attribute type 58 has an invalid length. [ 440.587092][T19479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3407'. [ 440.643114][T19482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3408'. [ 440.687943][T19482] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.695104][T19482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.702606][T19482] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.709744][T19482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.411305][T19482] bond1: left promiscuous mode [ 441.416121][T19482] bond2: left promiscuous mode [ 443.699306][ T8064] tipc: Node number set to 4011628595 [ 443.848351][T19520] __nla_validate_parse: 1 callbacks suppressed [ 443.848366][T19520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3412'. [ 444.035264][T19526] block nbd4: NBD_DISCONNECT [ 444.092937][T19520] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 444.107238][T19520] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 444.180651][T19520] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 444.235210][T19520] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 444.406517][T19546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3419'. [ 444.438455][T19546] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 444.546483][T19546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3419'. [ 444.590657][T19546] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 444.600594][T19546] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3419'. [ 445.004488][T19570] x_tables: duplicate underflow at hook 1 [ 445.132241][T19552] bridge_slave_0: left allmulticast mode [ 445.138134][T19552] bridge_slave_0: left promiscuous mode [ 445.155361][T19552] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.220982][T19552] bridge_slave_1: left allmulticast mode [ 445.239747][T19552] bridge_slave_1: left promiscuous mode [ 445.262146][T19552] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.305585][T19552] bond0: (slave bond_slave_0): Releasing backup interface [ 445.316590][T19552] bond0: (slave bond_slave_1): Releasing backup interface [ 445.331394][T19552] team0: Port device team_slave_0 removed [ 445.341690][T19552] team0: Port device team_slave_1 removed [ 445.348254][T19552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.355760][T19552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.364276][T19552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.371790][T19552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.411635][T19552] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 445.524900][T19580] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 445.683758][T19588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3428'. [ 445.842900][T19585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 446.102484][T19597] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3432'. [ 446.515766][T19597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.553765][T19597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.556998][T19618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3435'. [ 446.569853][T19597] tipc: Resetting bearer [ 446.672840][T19597] syzkaller0: left promiscuous mode [ 446.678288][T19597] syzkaller0: left allmulticast mode [ 446.689650][T19597] wireguard0: left promiscuous mode [ 446.698263][T19597] wireguard0: left allmulticast mode [ 446.717077][ T5745] syz0: Port: 1 Link DOWN [ 446.755949][T12165] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.764846][T12165] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 446.773841][T12165] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.782801][T12165] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 446.791779][T12165] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.831641][T12165] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 446.873254][T12165] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.882308][T12165] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 447.613972][T19645] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3443'. [ 447.904404][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3445'. [ 447.944967][T19654] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.952514][T19654] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.362422][T19672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3451'. [ 448.498779][T19672] bond3: entered promiscuous mode [ 448.524027][T19672] 8021q: adding VLAN 0 to HW filter on device bond3 [ 448.574005][T19677] openvswitch: netlink: IP tunnel dst address not specified [ 448.809576][T19687] xt_hl: Unknown Hop Limit match mode: 206 [ 448.920801][T19696] netlink: 'syz.2.3458': attribute type 32 has an invalid length. [ 448.939475][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3457'. [ 448.982339][T19697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3457'. [ 449.172545][T19710] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 449.178210][T19710] pim6reg0: persist disabled [ 449.447571][T19715] syzkaller1: entered promiscuous mode [ 449.453102][T19715] syzkaller1: entered allmulticast mode [ 449.589675][T19720] netlink: 'syz.1.3463': attribute type 4 has an invalid length. [ 450.062188][T19727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3466'. [ 450.106406][T19729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3467'. [ 450.227279][T19737] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3470'. [ 450.236986][T19736] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3470'. [ 450.312733][T19738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3469'. [ 450.526855][T19758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3478'. [ 450.536810][T19758] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3478'. [ 450.588578][T19762] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3478'. [ 450.911195][T19777] set match dimension is over the limit! [ 450.938659][T19777] bridge3: entered promiscuous mode [ 450.943905][T19777] bridge3: entered allmulticast mode [ 450.951898][T19777] team0: Port device bridge3 added [ 451.290099][T19796] veth0: entered promiscuous mode [ 451.401837][T19794] veth0: left promiscuous mode [ 451.512490][T19806] set match dimension is over the limit! [ 451.557306][T19799] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.570175][T19799] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.850272][T19799] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.860580][T19799] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.117609][T19799] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.130927][T19799] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.381330][T19799] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.392480][T19799] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.426922][T19857] veth0: entered promiscuous mode [ 452.436601][T19853] veth0: left promiscuous mode [ 452.482721][T19859] xt_TCPMSS: Only works on TCP SYN packets [ 452.610113][T19859] ip6erspan0: entered promiscuous mode [ 452.615693][T19859] ip6erspan0: entered allmulticast mode [ 452.680767][T12156] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.689057][T12156] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.712698][T12156] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.720937][T12156] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.741795][T12156] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.749983][T12156] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.815824][T14841] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.824108][T14841] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.169954][T19886] veth0: entered promiscuous mode [ 453.176691][T19885] veth0: left promiscuous mode [ 453.227857][T19889] veth0: entered promiscuous mode [ 453.235460][T19889] bridge_slave_0 (unregistering): left allmulticast mode [ 453.243105][T19889] bridge_slave_0 (unregistering): left promiscuous mode [ 453.251343][T19889] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.975122][T19888] veth0: left promiscuous mode [ 454.055671][T19913] netlink: 'syz.2.3516': attribute type 21 has an invalid length. [ 454.063526][T19913] __nla_validate_parse: 2 callbacks suppressed [ 454.063539][T19913] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3516'. [ 454.078764][T19913] netlink: 'syz.2.3516': attribute type 4 has an invalid length. [ 454.086501][T19913] netlink: 'syz.2.3516': attribute type 5 has an invalid length. [ 454.123432][T19913] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3516'. [ 454.283620][T19923] netlink: 'syz.0.3519': attribute type 1 has an invalid length. [ 454.291407][T19923] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3519'. [ 454.300447][T19923] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3519'. [ 454.309346][T19923] netlink: 'syz.0.3519': attribute type 1 has an invalid length. [ 454.318336][T19923] netlink: 634 bytes leftover after parsing attributes in process `syz.0.3519'. [ 454.423690][T19935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3523'. [ 454.425132][T19931] netlink: 'syz.0.3522': attribute type 58 has an invalid length. [ 454.445599][T19931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3522'. [ 454.881038][T19963] netlink: 'syz.1.3531': attribute type 1 has an invalid length. [ 454.979321][T19963] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 454.987842][T19968] bond0: entered promiscuous mode [ 455.006427][T19968] bond_slave_0: entered promiscuous mode [ 455.014803][T19968] bond_slave_1: entered promiscuous mode [ 455.022301][T19968] bond0: left promiscuous mode [ 455.027185][T19968] bond_slave_0: left promiscuous mode [ 455.033215][T19968] bond_slave_1: left promiscuous mode [ 455.499746][T19988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3538'. [ 455.607265][T19994] vxlan0: entered promiscuous mode [ 455.620059][T19994] vxlan0: entered allmulticast mode [ 455.690880][T20001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3541'. [ 455.739774][T20000] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3542'. [ 455.979121][T20008] IPVS: Error connecting to the multicast addr [ 456.069753][T20015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.177890][T20016] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 456.186838][T20016] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 456.342170][T20008] bridge_slave_0 (unregistering): left allmulticast mode [ 456.383347][T20008] bridge_slave_0 (unregistering): left promiscuous mode [ 456.396067][T20008] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.480675][T20034] openvswitch: netlink: Key 6 has unexpected len 15 expected 2 [ 457.520707][T20069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.534198][T20069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.557462][T20069] bond0 (unregistering): Released all slaves [ 458.002448][T20084] bond0: option ad_user_port_key: invalid value (65535) [ 458.009509][T20084] bond0: option ad_user_port_key: allowed values 0 - 1023 [ 458.018032][T20084] bond0 (unregistering): Released all slaves [ 458.498609][T20099] xt_TCPMSS: Only works on TCP SYN packets [ 459.297663][T20126] __nla_validate_parse: 7 callbacks suppressed [ 459.297680][T20126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3574'. [ 459.315466][T20126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3574'. [ 459.324688][T20127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3574'. [ 459.333769][T20127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3574'. [ 459.351390][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3575'. [ 459.362403][T20130] netlink: 'syz.1.3575': attribute type 5 has an invalid length. [ 459.370403][T20130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3575'. [ 459.386926][T20130] geneve2: entered promiscuous mode [ 459.393493][T20130] geneve2: entered allmulticast mode [ 459.400941][T12165] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 459.416318][T12165] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 459.425445][T12165] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 459.435906][T12165] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 459.559112][T20135] bond0: option ad_user_port_key: invalid value (65535) [ 459.566101][T20135] bond0: option ad_user_port_key: allowed values 0 - 1023 [ 459.576212][T20135] bond0 (unregistering): Released all slaves [ 459.649537][T20143] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3576'. [ 459.788917][T20148] tipc: Started in network mode [ 459.794003][T20148] tipc: Node identity 36b2ddd3224f, cluster identity 4711 [ 459.801773][T20148] tipc: Enabled bearer , priority 0 [ 459.809321][T20148] syzkaller0: entered promiscuous mode [ 459.818705][T20148] syzkaller0: entered allmulticast mode [ 459.847586][T20148] tipc: Resetting bearer [ 459.882855][T20147] tipc: Resetting bearer [ 459.905754][T20147] tipc: Disabling bearer [ 460.505602][T20167] netlink: 'syz.2.3587': attribute type 27 has an invalid length. [ 460.587376][T20172] netlink: 'syz.4.3589': attribute type 1 has an invalid length. [ 460.603611][T20172] gretap1: entered allmulticast mode [ 460.641378][T20174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.818188][T20185] IPVS: set_ctl: invalid protocol: 55 100.1.1.0:20002 [ 460.826253][T20185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3592'. [ 461.071456][T20201] SET target dimension over the limit! [ 461.262883][T20215] bond3: left promiscuous mode [ 461.282579][T20215] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3605'. [ 461.292737][T20217] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3604'. [ 461.427232][T20217] vlan2: entered promiscuous mode [ 461.432313][T20217] veth1: entered promiscuous mode [ 462.166787][T20250] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 462.234573][T20248] syzkaller1: entered promiscuous mode [ 462.247360][T20248] syzkaller1: entered allmulticast mode [ 462.362308][ T30] audit: type=1800 audit(1778875406.226:10): pid=20257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3614" name="memory.events" dev="tmpfs" ino=682 res=0 errno=0 [ 462.420428][T20267] netlink: 'syz.2.3617': attribute type 1 has an invalid length. [ 463.095370][T20273] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 463.833943][T20320] syzkaller0: entered promiscuous mode [ 463.847707][T20320] syzkaller0: entered allmulticast mode [ 464.461540][T20338] netlink: 'syz.0.3632': attribute type 10 has an invalid length. [ 465.773360][T20329] syzkaller0: entered promiscuous mode [ 465.778949][T20329] syzkaller0: entered allmulticast mode [ 465.965855][T20351] __nla_validate_parse: 8 callbacks suppressed [ 465.965875][T20351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3635'. [ 466.059509][T20354] netlink: set zone limit has 4 unknown bytes [ 466.102918][T20354] netlink: set zone limit has 4 unknown bytes [ 466.643806][T20371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3641'. [ 466.902959][T20385] netlink: 'syz.1.3645': attribute type 1 has an invalid length. [ 466.917994][T20385] nbd: illegal input index 871591272 [ 467.007947][T20383] bond0: entered promiscuous mode [ 467.161447][T20402] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3650'. [ 467.294856][T20410] netlink: 'syz.0.3653': attribute type 3 has an invalid length. [ 467.331851][T20410] nbd: nbd0 already in use [ 467.398112][T20410] block nbd0: NBD_DISCONNECT [ 467.420857][T20410] block nbd0: Send disconnect failed -32 [ 467.426537][T20410] block nbd0: Send disconnect failed -32 [ 467.522792][T20418] bond0: left allmulticast mode [ 467.528457][T20418] bond_slave_0: left allmulticast mode [ 467.533953][T20418] bond_slave_1: left allmulticast mode [ 467.540865][T20418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.549184][T20418] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.557876][T20418] dummy0: left promiscuous mode [ 467.566955][T20418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.666745][T20418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.676134][T20418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.689623][T20418] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 467.718414][T20418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.761503][T20418] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 467.837675][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.844937][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.962969][T20437] netlink: 'syz.4.3656': attribute type 1 has an invalid length. [ 468.015116][T20437] bond0: entered promiscuous mode [ 468.020595][T20437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.030546][T20437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3656'. [ 468.039569][T20437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3656'. [ 468.099305][T20437] bond0: (slave bridge2): making interface the new active one [ 468.106815][T20437] bridge2: entered promiscuous mode [ 468.113541][T20437] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 468.219199][T20450] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3659'. [ 468.233805][T20450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3659'. [ 468.604601][T20466] netlink: 'syz.1.3663': attribute type 322 has an invalid length. [ 469.058018][T20488] bond1: invalid ARP target 0.0.0.0 specified for addition [ 469.066186][T20488] bond1: option arp_ip_target: invalid value (0) [ 469.118380][T20488] bond1 (unregistering): Released all slaves [ 469.701580][T20521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3673'. [ 469.746692][T20521] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3673'. [ 469.756042][T20522] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3673'. [ 470.714611][T20585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.921614][T20592] netlink: 'syz.3.3689': attribute type 1 has an invalid length. [ 471.106815][T20603] __nla_validate_parse: 1 callbacks suppressed [ 471.106832][T20603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3689'. [ 471.162299][T20603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3689'. [ 471.178191][T20592] bond1: entered promiscuous mode [ 471.183889][T20592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.428794][T20621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3695'. [ 471.525397][T20628] tipc: Enabling of bearer rejected, failed to enable media [ 471.535077][T20629] tipc: Enabling of bearer rejected, failed to enable media [ 471.542561][T20627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.553840][T20627] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 471.575900][T20627] syzkaller0: entered promiscuous mode [ 471.581429][T20627] syzkaller0: entered allmulticast mode [ 472.259170][T20640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3698'. [ 472.551020][T20661] SET target dimension over the limit! [ 472.594014][T20661] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3704'. [ 472.922537][T20681] netlink: 'syz.0.3710': attribute type 3 has an invalid length. [ 472.957951][T20681] netlink: 'syz.0.3710': attribute type 3 has an invalid length. [ 472.967557][T20681] netlink: 452 bytes leftover after parsing attributes in process `syz.0.3710'. [ 472.978718][T20681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3710'. [ 472.987880][T20681] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 473.117152][T20684] netlink: 'syz.0.3712': attribute type 8 has an invalid length. [ 473.126861][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3712'. [ 473.316925][T20686] batadv_slave_0: entered promiscuous mode [ 473.326165][T20686] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3711'. [ 473.336118][T20685] batadv_slave_0: left promiscuous mode [ 474.004072][T20738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3725'. [ 474.018974][T20738] gretap0: entered promiscuous mode [ 474.024822][T20738] macvlan2: entered allmulticast mode [ 474.075164][T20738] gretap0: entered allmulticast mode [ 474.108090][T20740] : entered promiscuous mode [ 474.309325][T20756] netlink: 'syz.3.3728': attribute type 13 has an invalid length. [ 474.317275][T20756] netlink: 'syz.3.3728': attribute type 17 has an invalid length. [ 474.717505][T20756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.728106][T20756] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.740128][T20756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.815760][T20756] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 474.844282][ T48] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.853316][ T48] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.936134][T20767] pim6reg: entered allmulticast mode [ 474.941543][ T48] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.951005][ T48] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.026556][T20760] pim6reg: left allmulticast mode [ 475.313691][T20780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.329635][ T5642] Bluetooth: hci1: link tx timeout [ 475.336204][ T5642] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 475.348683][ T4945] Bluetooth: hci1: link tx timeout [ 475.354499][ T4945] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 475.364568][ T4945] Bluetooth: hci1: link tx timeout [ 475.369739][ T4945] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 475.559695][T20794] IPVS: Scheduler module ip_vs_sip not found [ 475.734553][T20806] syzkaller1: entered promiscuous mode [ 475.760074][T20806] syzkaller1: entered allmulticast mode [ 476.249228][T20829] __nla_validate_parse: 4 callbacks suppressed [ 476.249245][T20829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3751'. [ 476.276513][T20831] sctp: [Deprecated]: syz.0.3750 (pid 20831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.276513][T20831] Use struct sctp_sack_info instead [ 476.631787][T20837] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 476.691607][T20833] netlink: 'syz.1.3752': attribute type 1 has an invalid length. [ 476.779095][T20841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3754'. [ 476.801788][T20839] bridge_slave_1: left allmulticast mode [ 476.807464][T20839] bridge_slave_1: left promiscuous mode [ 476.814227][T20839] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.872169][T20839] team0: Port device team_slave_0 removed [ 476.906473][T20839] team0: Port device team_slave_1 removed [ 476.919830][T20839] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 476.970805][T20852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3754'. [ 477.141819][T20856] netlink: 'syz.0.3758': attribute type 1 has an invalid length. [ 477.155090][T20859] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001 [ 477.201810][T20856] gretap1: entered allmulticast mode [ 477.370768][ T4945] Bluetooth: hci1: command 0x0406 tx timeout [ 477.529753][T20881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3765'. [ 477.913162][T20895] netlink: 'syz.4.3770': attribute type 4 has an invalid length. [ 478.167081][T20910] IPv6: NLM_F_REPLACE set, but no existing node found! [ 478.314859][T20914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3776'. [ 478.378694][ T4945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 478.390514][ T4945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 478.398438][ T4945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 478.461777][T20922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3778'. [ 478.474376][ T4945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 478.483686][ T4945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 478.511832][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3778'. [ 479.140744][T20941] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3780'. [ 479.299600][T20949] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 479.358185][T20918] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.365412][T20918] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.372590][T20918] bridge_slave_0: entered allmulticast mode [ 479.417351][T20918] bridge_slave_0: entered promiscuous mode [ 479.425494][T20918] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.432682][T20918] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.439900][T20918] bridge_slave_1: entered allmulticast mode [ 479.447463][T20918] bridge_slave_1: entered promiscuous mode [ 479.480805][T20918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.493053][T20918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.576940][T20918] team0: Port device team_slave_0 added [ 479.611665][T20959] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3784'. [ 479.618353][T20918] team0: Port device team_slave_1 added [ 479.670983][T20918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.677945][T20918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.703821][T20918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.716388][T20918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.723349][T20918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.779753][T20918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.836519][T20918] hsr_slave_0: entered promiscuous mode [ 479.842805][T20918] hsr_slave_1: entered promiscuous mode [ 479.848878][T20918] debugfs: 'hsr0' already exists in 'hsr' [ 479.854598][T20918] Cannot create hsr debugfs directory [ 480.078226][T20918] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 480.088660][T20918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.096428][T20918] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 480.106791][T20918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.139328][T20918] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 480.154828][T20918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.166666][T20918] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 480.176025][T20918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.278366][T20918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.312454][T20918] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.325654][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.332782][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.346295][T12165] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.353511][T12165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.428889][T20987] netlink: 'syz.1.3790': attribute type 3 has an invalid length. [ 480.481966][T20959] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 480.561282][ T4945] Bluetooth: hci2: command tx timeout [ 480.649636][T20998] bond0: Caught tx_queue_len zero misconfig [ 480.655697][T20998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3793'. [ 481.259164][T20918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.455192][T21037] syzkaller0: entered promiscuous mode [ 481.461432][T21037] syzkaller0: entered allmulticast mode [ 481.477497][T21042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3805'. [ 481.614783][T20918] veth0_vlan: entered promiscuous mode [ 481.627451][T20918] veth1_vlan: entered promiscuous mode [ 481.637463][T21047] No such timeout policy "syz1" [ 481.657875][T21047] netlink: 1100 bytes leftover after parsing attributes in process `syz.1.3806'. [ 481.687031][T20918] veth0_macvtap: entered promiscuous mode [ 481.697684][T20918] veth1_macvtap: entered promiscuous mode [ 481.717641][T20918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.735166][T20918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.757920][ T62] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.774638][ T62] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.801616][ T62] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.811061][ T62] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.038254][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.061865][T21054] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3809'. [ 482.070156][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.146492][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.158978][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.268674][T21063] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 482.287334][ T30] audit: type=1804 audit(1778875426.116:11): pid=21065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3813" name="/newroot/82/cgroup.controllers" dev="tmpfs" ino=439 res=1 errno=0 [ 482.385704][ T30] audit: type=1800 audit(1778875426.116:12): pid=21065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3813" name="cgroup.controllers" dev="tmpfs" ino=439 res=0 errno=0 [ 482.569413][T21084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3816'. [ 482.654205][T21086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3817'. [ 482.661672][ T4945] Bluetooth: hci2: command tx timeout [ 482.786428][T21091] netlink: 'syz.0.3819': attribute type 1 has an invalid length. [ 482.983846][T21093] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.025054][T21093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.149120][T21093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.158769][T21093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.167537][T21093] tipc: Resetting bearer [ 483.178041][T21093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 483.188408][T21093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.268180][T21093] syzkaller0: left promiscuous mode [ 483.277819][T21093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.291154][T21093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 483.302963][T21093] 8021q: adding VLAN 0 to HW filter on device eth0 [ 483.310960][T21093] 8021q: adding VLAN 0 to HW filter on device eth1 [ 483.318836][T21093] 8021q: adding VLAN 0 to HW filter on device eth2 [ 483.345879][T21093] 8021q: adding VLAN 0 to HW filter on device eth3 [ 483.355292][T21093] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 483.364896][T21093] bond0: left promiscuous mode [ 483.369832][T21093] bridge2: left promiscuous mode [ 483.392058][T21091] 8021q: adding VLAN 0 to HW filter on device bond3 [ 483.400939][T21095] tipc: Started in network mode [ 483.406007][T21095] tipc: Node identity f2ccca812232, cluster identity 4711 [ 483.413664][T21095] tipc: Enabled bearer , priority 10 [ 483.424344][ T5746] bridge0: entered promiscuous mode [ 483.501777][ T48] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.510392][ T48] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.518588][ T48] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 483.528064][ T5746] syz0: Port: 1 Link ACTIVE [ 483.536955][ T48] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.545228][ T48] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.553515][ T48] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 483.602946][ T48] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.611337][ T48] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.619549][ T48] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 483.629687][ T48] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.638734][ T48] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.647239][ T48] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 483.772510][T21120] xt_l2tp: missing protocol rule (udp|l2tpip) [ 484.107228][T21139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3830'. [ 484.223001][T21139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3830'. [ 484.235682][T21139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3830'. [ 484.414061][ T5746] tipc: Node number set to 3506358913 [ 484.464297][T21157] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3836'. [ 484.478826][T21157] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3836'. [ 484.744815][ T4945] Bluetooth: hci2: command tx timeout [ 484.944331][T21163] tipc: Resetting bearer [ 485.017152][T21163] can: request_module (can-proto-0) failed. [ 485.842942][T21223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.856941][T21223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.059930][T21232] bond5: option ad_user_port_key: invalid value (65535) [ 486.066924][T21232] bond5: option ad_user_port_key: allowed values 0 - 1023 [ 486.077378][T21232] bond5 (unregistering): Released all slaves [ 486.334875][T21239] tipc: Enabled bearer , priority 0 [ 486.346443][T21239] tipc: Resetting bearer [ 486.586154][T21246] __nla_validate_parse: 8 callbacks suppressed [ 486.586171][T21246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3861'. [ 486.800294][ T4945] Bluetooth: hci2: command tx timeout [ 487.898477][T21278] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 488.128990][T21296] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3879'. [ 488.373989][T21307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3880'. [ 488.414684][T21312] netlink: 'syz.0.3881': attribute type 2 has an invalid length. [ 488.423516][T21312] netlink: 'syz.0.3881': attribute type 2 has an invalid length. [ 488.468226][T21312] macsec1: entered promiscuous mode [ 488.660147][T21320] netlink: 'syz.3.3886': attribute type 2 has an invalid length. [ 489.098687][T21335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3890'. [ 489.361467][T21349] netlink: 'syz.4.3895': attribute type 1 has an invalid length. [ 489.369243][T21349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3895'. [ 489.454699][T21349] syzkaller0: entered promiscuous mode [ 489.489098][T21358] xt_hashlimit: size too large, truncated to 1048576 [ 489.497633][T21358] xt_hashlimit: invalid interval [ 489.557744][T21360] netlink: 'syz.4.3897': attribute type 6 has an invalid length. [ 489.701407][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3900'. [ 489.710306][T21373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3900'. [ 491.710357][T21441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3916'. [ 491.808127][T21441] xt_l2tp: invalid flags combination: 8 [ 491.840839][T21444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3918'. [ 491.882900][T21449] netlink: 'syz.0.3919': attribute type 1 has an invalid length. [ 491.942746][T21449] 8021q: adding VLAN 0 to HW filter on device bond5 [ 491.966994][T21449] vlan2: entered allmulticast mode [ 491.973243][T21449] bond5: entered allmulticast mode [ 491.998993][T21449] bond5: (slave gretap1): making interface the new active one [ 492.006488][T21449] gretap1: entered allmulticast mode [ 492.015225][T21449] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 492.899786][T21482] sctp: [Deprecated]: syz.5.3927 (pid 21482) Use of struct sctp_assoc_value in delayed_ack socket option. [ 492.899786][T21482] Use struct sctp_sack_info instead [ 493.197053][T21503] netlink: 'syz.3.3934': attribute type 1 has an invalid length. [ 493.371902][T21508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3934'. [ 493.425766][T21503] bond2: entered promiscuous mode [ 493.431190][T21503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.472937][T21494] syzkaller0: entered promiscuous mode [ 493.478444][T21494] syzkaller0: entered allmulticast mode [ 493.502675][T21514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3935'. [ 493.585178][T21515] bond2: (slave bridge1): making interface the new active one [ 493.602562][T21515] bridge1: entered promiscuous mode [ 493.617425][T21515] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 493.678622][T21517] netlink: 'syz.5.3936': attribute type 4 has an invalid length. [ 493.744494][T21524] netlink: 'syz.3.3939': attribute type 10 has an invalid length. [ 493.782753][T21521] ip6tnl0: entered promiscuous mode [ 493.789883][T21521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3937'. [ 493.803784][T21524] team0: Port device dummy0 added [ 493.884633][T21528] mac80211_hwsim hwsim46 wlan0: left promiscuous mode [ 493.896794][T21528] netlink: 'syz.4.3941': attribute type 1 has an invalid length. [ 493.904546][T21528] netlink: 'syz.4.3941': attribute type 2 has an invalid length. [ 493.915669][T21528] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3941'. [ 493.949574][T21534] netlink: 'syz.3.3939': attribute type 10 has an invalid length. [ 493.964750][T21534] team0: Port device dummy0 removed [ 493.974284][T21534] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 494.107136][T21540] syzkaller0: entered promiscuous mode [ 494.112625][T21540] syzkaller0: entered allmulticast mode [ 494.165996][T21547] xt_hashlimit: size too large, truncated to 1048576 [ 494.205501][T21530] nbd0: detected capacity change from 0 to 63 [ 494.520898][T21556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3946'. [ 494.531106][T21556] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3946'. [ 494.549072][T21556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3946'. [ 494.559726][T21556] netlink: 'syz.0.3946': attribute type 11 has an invalid length. [ 494.706230][ T4945] block nbd0: Receive control failed (result -104) [ 494.713631][ T5642] block nbd0: Receive control failed (result -32) [ 494.721389][T21557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 494.728595][T21557] IPv6: NLM_F_CREATE should be set when creating new route [ 494.735866][T21557] IPv6: NLM_F_CREATE should be set when creating new route [ 494.743099][T21557] IPv6: NLM_F_CREATE should be set when creating new route [ 494.758990][T21557] netlink: 'syz.1.3944': attribute type 6 has an invalid length. [ 496.780092][T21587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3952'. [ 497.112757][T21602] netlink: 'syz.0.3956': attribute type 3 has an invalid length. [ 497.251170][T21608] netlink: 'syz.4.3959': attribute type 1 has an invalid length. [ 497.276698][T21608] netlink: 2704 bytes leftover after parsing attributes in process `syz.4.3959'. [ 497.700312][T21602] team0: Port device netdevsim1 removed [ 498.360225][ T5642] Bluetooth: hci5: command 0x0406 tx timeout [ 501.470465][ T1311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.014433][T21639] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3965'. [ 504.023545][T21639] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3965'. [ 512.429928][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 512.441179][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 512.449038][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 512.456921][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 512.464564][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 512.488821][ T5642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 512.501295][ T5642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 512.533124][ T5642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 512.542806][ T5642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 512.550445][ T5642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 513.116117][T21650] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.123347][T21650] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.130958][T21650] bridge_slave_0: entered allmulticast mode [ 513.138534][T21650] bridge_slave_0: entered promiscuous mode [ 513.171919][T21650] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.179071][T21650] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.186186][T21650] bridge_slave_1: entered allmulticast mode [ 513.193272][T21650] bridge_slave_1: entered promiscuous mode [ 513.237262][T21650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.249602][T21650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.310922][T21650] team0: Port device team_slave_0 added [ 513.320324][T21650] team0: Port device team_slave_1 added [ 513.415329][T21650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.422351][T21650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.448728][T21650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.461943][T21650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.468913][T21650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.494860][T21650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.558983][T21647] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 513.568916][T21647] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 513.577768][T21647] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 513.585676][T21647] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 513.593242][T21647] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 513.657072][T21653] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.664682][T21653] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.672404][T21653] bridge_slave_0: entered allmulticast mode [ 513.681592][T21653] bridge_slave_0: entered promiscuous mode [ 513.733656][T21650] hsr_slave_0: entered promiscuous mode [ 513.740500][T21650] hsr_slave_1: entered promiscuous mode [ 513.746931][T21650] debugfs: 'hsr0' already exists in 'hsr' [ 513.753654][T21650] Cannot create hsr debugfs directory [ 513.760671][T21653] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.768485][T21653] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.775946][T21653] bridge_slave_1: entered allmulticast mode [ 513.784510][T21653] bridge_slave_1: entered promiscuous mode [ 513.800132][ T4945] Bluetooth: hci3: command 0x0406 tx timeout [ 513.831116][T21653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.844223][T21653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.901005][T21653] team0: Port device team_slave_0 added [ 513.917298][T21653] team0: Port device team_slave_1 added [ 514.012557][T21653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.020226][T21653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.047252][T21653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.068291][T21653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.102161][T21653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.153100][T21653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.164381][ T5642] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 514.175426][ T5642] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 514.215714][ T5642] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 514.223563][ T5642] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 514.231155][ T5642] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 514.301306][T21653] hsr_slave_0: entered promiscuous mode [ 514.308188][T21653] hsr_slave_1: entered promiscuous mode [ 514.336846][T21653] debugfs: 'hsr0' already exists in 'hsr' [ 514.342604][T21653] Cannot create hsr debugfs directory [ 514.578810][ T4945] Bluetooth: hci0: command tx timeout [ 514.585590][ T4945] Bluetooth: hci6: command tx timeout [ 515.088075][T21684] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.095312][T21684] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.102649][T21684] bridge_slave_0: entered allmulticast mode [ 515.109682][T21684] bridge_slave_0: entered promiscuous mode [ 515.129471][T21684] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.136661][T21684] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.143882][T21684] bridge_slave_1: entered allmulticast mode [ 515.151153][T21684] bridge_slave_1: entered promiscuous mode [ 515.220734][T21684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.234347][T21684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.297094][T21684] team0: Port device team_slave_0 added [ 515.305573][T21684] team0: Port device team_slave_1 added [ 515.344045][T21684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.351004][T21684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.376885][T21684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.439769][T21684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.446766][T21684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.472745][T21684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.551087][T21696] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.558323][T21696] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.565681][T21696] bridge_slave_0: entered allmulticast mode [ 515.573080][T21696] bridge_slave_0: entered promiscuous mode [ 515.585095][T21684] hsr_slave_0: entered promiscuous mode [ 515.591937][T21684] hsr_slave_1: entered promiscuous mode [ 515.598134][T21684] debugfs: 'hsr0' already exists in 'hsr' [ 515.603940][T21684] Cannot create hsr debugfs directory [ 515.609696][T21696] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.616883][T21696] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.625480][T21696] bridge_slave_1: entered allmulticast mode [ 515.632629][T21696] bridge_slave_1: entered promiscuous mode [ 515.660731][ T5642] Bluetooth: hci7: command tx timeout [ 515.710773][T21696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.727078][T21696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.791697][T21696] team0: Port device team_slave_0 added [ 515.804247][T21696] team0: Port device team_slave_1 added [ 515.846396][T21696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.853366][T21696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.897500][T21696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.914872][T21696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.921806][T21696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.947660][T21696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.021824][T21696] hsr_slave_0: entered promiscuous mode [ 516.028225][T21696] hsr_slave_1: entered promiscuous mode [ 516.034472][T21696] debugfs: 'hsr0' already exists in 'hsr' [ 516.040207][T21696] Cannot create hsr debugfs directory [ 516.370108][ T5642] Bluetooth: hci8: command tx timeout [ 516.710585][ T5642] Bluetooth: hci6: command tx timeout [ 516.716030][ T5642] Bluetooth: hci0: command tx timeout [ 517.680388][ T5642] Bluetooth: hci7: command tx timeout [ 518.417151][ T5642] Bluetooth: hci8: command tx timeout [ 518.750733][ T5642] Bluetooth: hci0: command tx timeout [ 518.765658][ T5642] Bluetooth: hci6: command tx timeout [ 519.791321][ T5642] Bluetooth: hci7: command tx timeout [ 520.378633][ T4945] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 520.386803][ T4945] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 520.394437][ T4945] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 520.402268][ T4945] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 520.409801][ T4945] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 520.490890][ T5642] Bluetooth: hci8: command tx timeout [ 520.840803][ T5642] Bluetooth: hci0: command tx timeout [ 520.858050][ T5642] Bluetooth: hci6: command tx timeout [ 520.888357][T21723] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.895588][T21723] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.903065][T21723] bridge_slave_0: entered allmulticast mode [ 520.910978][T21723] bridge_slave_0: entered promiscuous mode [ 520.918912][T21723] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.926172][T21723] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.933464][T21723] bridge_slave_1: entered allmulticast mode [ 520.940858][T21723] bridge_slave_1: entered promiscuous mode [ 520.974244][T21723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.986655][T21723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.016592][T21723] team0: Port device team_slave_0 added [ 521.024292][T21723] team0: Port device team_slave_1 added [ 521.050025][T21723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.057488][T21723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.083958][T21723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.096560][T21723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.103560][T21723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.130730][T21723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.179269][T21723] hsr_slave_0: entered promiscuous mode [ 521.185623][T21723] hsr_slave_1: entered promiscuous mode [ 521.191856][T21723] debugfs: 'hsr0' already exists in 'hsr' [ 521.197582][T21723] Cannot create hsr debugfs directory [ 521.304962][T21723] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.315021][T21723] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.621831][T21723] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.631577][T21723] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.849286][T21723] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.859076][T21723] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.951725][ T5642] Bluetooth: hci7: command tx timeout [ 521.965383][T21723] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.975730][T21723] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.510996][ T5642] Bluetooth: hci9: command tx timeout [ 522.580474][ T5642] Bluetooth: hci8: command tx timeout [ 524.581476][ T5642] Bluetooth: hci9: command tx timeout [ 526.739161][ T5642] Bluetooth: hci9: command tx timeout [ 528.840246][ T5642] Bluetooth: hci9: command tx timeout [ 547.639768][T12153] tipc: Disabling bearer [ 547.719076][T12153] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 547.728136][T12153] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 547.827025][T12153] bond3 (unregistering): (slave erspan2): Releasing active interface [ 547.835510][T12153] erspan2 (unregistering): left promiscuous mode [ 547.872753][T12153] bond2 (unregistering): (slave gretap2): Releasing active interface [ 547.891716][T12153] bond7 (unregistering): (slave gretap3): Releasing active interface [ 547.945267][T12153] bridge0 (unregistering): left allmulticast mode [ 553.277433][T12153] bond0 (unregistering): Released all slaves [ 553.288999][T12153] bond1 (unregistering): (slave batadv1): Releasing active interface [ 553.297959][T12153] bond1 (unregistering): Released all slaves [ 553.314563][T12153] bond2 (unregistering): Released all slaves [ 553.330825][T12153] bond3 (unregistering): Released all slaves [ 553.347011][T12153] bond4 (unregistering): Released all slaves [ 553.365075][T12153] bond5 (unregistering): Released all slaves [ 553.385909][T12153] bond6 (unregistering): Released all slaves [ 553.404205][T12153] bond7 (unregistering): Released all slaves [ 553.419584][T12153] bond8 (unregistering): Released all slaves [ 553.436240][T12153] bond9 (unregistering): Released all slaves [ 553.454610][T12153] bond10 (unregistering): (slave lo): Releasing backup interface [ 553.464316][T12153] bond10 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 553.475913][T12153] bond10 (unregistering): Released all slaves [ 553.494402][T12153] bond11 (unregistering): Released all slaves [ 553.513560][T12153] bond12 (unregistering): Released all slaves [ 553.538084][T12153] bond14 (unregistering): Released all slaves [ 553.552356][T12153] bond13 (unregistering): Released all slaves [ 553.768700][T12153] 5n: left promiscuous mode [ 553.882986][T12153] 5: left promiscuous mode [ 554.115056][T12153] tipc: Left network mode [ 556.527881][T12153] hsr_slave_0: left promiscuous mode [ 556.533844][T12153] batman_adv: batadv0: Removing interface: ipvlan2 [ 558.141428][T12153] IPVS: stop unused estimator thread 0... [ 561.262768][ T4995] udevd[4995]: worker [20396] /devices/virtual/block/nbd0 is taking a long time [ 562.891446][ T1311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.960431][ T5642] Bluetooth: hci4: command 0x0406 tx timeout [ 573.001640][ T5642] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 573.017885][ T5642] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 573.025716][ T5642] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 573.034156][ T5642] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 573.043303][ T5642] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 573.059311][ T5642] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 573.076438][ T4945] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 573.086403][ T4945] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 573.095356][ T4945] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 573.112214][ T4945] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 573.779704][T21813] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.786934][T21813] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.794922][T21813] bridge_slave_0: entered allmulticast mode [ 573.802086][T21813] bridge_slave_0: entered promiscuous mode [ 573.815159][T21813] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.822412][T21813] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.829556][T21813] bridge_slave_1: entered allmulticast mode [ 573.836840][T21813] bridge_slave_1: entered promiscuous mode [ 573.897772][T21813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.906989][T21811] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.914189][T21811] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.922047][T21811] bridge_slave_0: entered allmulticast mode [ 573.929184][T21811] bridge_slave_0: entered promiscuous mode [ 573.938234][T21813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.947469][T21811] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.954629][T21811] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.961870][T21811] bridge_slave_1: entered allmulticast mode [ 573.969614][T21811] bridge_slave_1: entered promiscuous mode [ 574.019292][T21811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.030379][T21813] team0: Port device team_slave_0 added [ 574.038346][T21811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.060951][T21813] team0: Port device team_slave_1 added [ 574.089484][T21811] team0: Port device team_slave_0 added [ 574.108667][T21811] team0: Port device team_slave_1 added [ 574.114785][T21813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.121752][T21813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.147650][T21813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.170674][T21813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.177640][T21813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.214897][T21813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.241740][T21811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.248756][T21811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.274650][T21811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.287400][T21811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.294436][T21811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.331366][T21811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.383622][T21813] hsr_slave_0: entered promiscuous mode [ 574.390346][T21813] hsr_slave_1: entered promiscuous mode [ 574.396869][T21813] debugfs: 'hsr0' already exists in 'hsr' [ 574.402624][T21813] Cannot create hsr debugfs directory [ 574.581052][T21651] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 574.588919][T21811] hsr_slave_0: entered promiscuous mode [ 574.591849][T21811] hsr_slave_1: entered promiscuous mode [ 574.600835][T21811] debugfs: 'hsr0' already exists in 'hsr' [ 574.606591][T21811] Cannot create hsr debugfs directory [ 574.623143][T21651] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 574.633643][ T5642] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 574.643910][T21651] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 574.647012][ T5642] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 574.666802][T21651] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 574.676805][T21651] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 574.687696][ T5642] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 574.694899][T21651] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 574.704266][ T5642] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 575.244493][T21647] Bluetooth: hci11: command tx timeout [ 575.245722][T21651] Bluetooth: hci10: command tx timeout [ 575.564263][T21849] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.571499][T21849] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.578629][T21849] bridge_slave_0: entered allmulticast mode [ 575.586139][T21849] bridge_slave_0: entered promiscuous mode [ 575.599715][T21849] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.606943][T21849] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.614064][T21849] bridge_slave_1: entered allmulticast mode [ 575.621349][T21849] bridge_slave_1: entered promiscuous mode [ 575.679692][T21849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.704279][T21849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.788025][T21847] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.795245][T21847] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.802383][T21847] bridge_slave_0: entered allmulticast mode [ 575.809484][T21847] bridge_slave_0: entered promiscuous mode [ 575.818731][T21849] team0: Port device team_slave_0 added [ 575.824466][T21847] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.831743][T21847] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.838883][T21847] bridge_slave_1: entered allmulticast mode [ 575.845901][T21847] bridge_slave_1: entered promiscuous mode [ 575.855939][T21849] team0: Port device team_slave_1 added [ 575.906104][T21849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.913073][T21849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.938981][T21849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.952563][T21847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.962385][T21849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.969693][T21849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.998037][T21849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.017255][T21847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.049173][T21847] team0: Port device team_slave_0 added [ 576.065804][T21847] team0: Port device team_slave_1 added [ 576.104602][T21849] hsr_slave_0: entered promiscuous mode [ 576.112519][T21849] hsr_slave_1: entered promiscuous mode [ 576.118876][T21849] debugfs: 'hsr0' already exists in 'hsr' [ 576.124659][T21849] Cannot create hsr debugfs directory [ 576.160541][T21847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.167517][T21847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.193413][T21847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.235900][T21847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.242868][T21847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.269439][T21847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.357006][T21847] hsr_slave_0: entered promiscuous mode [ 576.363335][T21847] hsr_slave_1: entered promiscuous mode [ 576.369439][T21847] debugfs: 'hsr0' already exists in 'hsr' [ 576.375330][T21847] Cannot create hsr debugfs directory [ 576.760358][T21651] Bluetooth: hci13: command tx timeout [ 576.814885][T21651] Bluetooth: hci12: command tx timeout [ 577.300640][T21651] Bluetooth: hci10: command tx timeout [ 577.346604][T21651] Bluetooth: hci11: command tx timeout [ 578.800890][T21651] Bluetooth: hci13: command tx timeout [ 578.881241][T21651] Bluetooth: hci12: command tx timeout [ 579.360199][T21651] Bluetooth: hci11: command tx timeout [ 579.360227][T21647] Bluetooth: hci10: command tx timeout [ 580.470982][T21651] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 580.480259][T21651] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 580.493013][T21651] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 580.504258][T21651] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 580.515955][T21651] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 580.880412][T21647] Bluetooth: hci13: command tx timeout [ 580.991539][T21647] Bluetooth: hci12: command tx timeout [ 581.058909][T21882] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.066761][T21882] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.074039][T21882] bridge_slave_0: entered allmulticast mode [ 581.081338][T21882] bridge_slave_0: entered promiscuous mode [ 581.089243][T21882] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.096460][T21882] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.104168][T21882] bridge_slave_1: entered allmulticast mode [ 581.113119][T21882] bridge_slave_1: entered promiscuous mode [ 581.144559][T21882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.156160][T21882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.185640][T21882] team0: Port device team_slave_0 added [ 581.193426][T21882] team0: Port device team_slave_1 added [ 581.217603][T21882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.236321][T21882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.262291][T21882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.274710][T21882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.281699][T21882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.307591][T21882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.352083][T21882] hsr_slave_0: entered promiscuous mode [ 581.358433][T21882] hsr_slave_1: entered promiscuous mode [ 581.364536][T21882] debugfs: 'hsr0' already exists in 'hsr' [ 581.370260][T21882] Cannot create hsr debugfs directory [ 581.450633][T21651] Bluetooth: hci11: command tx timeout [ 581.458018][T21647] Bluetooth: hci10: command tx timeout [ 582.561859][T21647] Bluetooth: hci14: command tx timeout [ 583.023196][T21647] Bluetooth: hci13: command tx timeout [ 583.080155][T21647] Bluetooth: hci12: command tx timeout [ 584.640202][T21647] Bluetooth: hci14: command tx timeout [ 586.720613][T21647] Bluetooth: hci14: command tx timeout [ 588.800675][T21647] Bluetooth: hci14: command tx timeout [ 593.622088][T12165] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 593.750621][T12165] gretap0 (unregistering): left promiscuous mode [ 593.794448][T12165] bond10 (unregistering): (slave geneve3): Releasing active interface [ 593.816536][T12165] geneve1 (unregistering): left promiscuous mode [ 593.823292][T12165] geneve1 (unregistering): left allmulticast mode [ 593.831110][T12165] team0: Port device geneve1 removed [ 593.989125][T12165] bond3 (unregistering): (slave bridge2): Releasing active interface [ 594.038116][T12165] bond4 (unregistering): (slave bridge3): Releasing active interface [ 594.146913][T12165] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 594.257810][T12165] bond7 (unregistering): (slave bridge7): Releasing backup interface [ 594.466883][T12165] bond11 (unregistering): (slave bridge0): Releasing backup interface [ 594.476102][T12165] bridge0 (unregistering): left promiscuous mode [ 594.515549][T12165] bond12 (unregistering): (slave bridge11): Releasing backup interface [ 594.523903][T12165] bridge11 (unregistering): left promiscuous mode [ 594.605366][T12165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.618805][T12165] bond_slave_0: left promiscuous mode [ 594.624691][T12165] bond_slave_0: left allmulticast mode [ 594.631521][T12165] bond0 (unregistering): (slave team0): Releasing backup interface [ 594.640004][T12165] team0: left promiscuous mode [ 594.644784][T12165] team_slave_0: left promiscuous mode [ 594.650308][T12165] team_slave_1: left promiscuous mode [ 594.658367][T12165] team0: left allmulticast mode [ 594.663268][T12165] team_slave_0: left allmulticast mode [ 594.668743][T12165] team_slave_1: left allmulticast mode [ 594.677519][T12165] bond0 (unregistering): Released all slaves [ 594.687913][T12165] bond1 (unregistering): Released all slaves [ 594.702291][T12165] bond2 (unregistering): Released all slaves [ 594.732968][T12165] bond3 (unregistering): Released all slaves [ 594.749574][T12165] bond4 (unregistering): Released all slaves [ 594.767647][T12165] bond5 (unregistering): Released all slaves [ 594.784886][T12165] bond6 (unregistering): (slave veth9): Releasing backup interface [ 594.793543][T12165] bond6 (unregistering): Released all slaves [ 594.810646][T12165] bond7 (unregistering): Released all slaves [ 594.841691][T12165] bond9 (unregistering): Released all slaves [ 594.859908][T12165] bond8 (unregistering): Released all slaves [ 594.877342][T12165] bond10 (unregistering): Released all slaves [ 594.892414][T12165] bond11 (unregistering): Released all slaves [ 594.906584][T12165] bond12 (unregistering): Released all slaves [ 594.921545][T12165] bond13 (unregistering): (slave veth21): Releasing backup interface [ 594.931367][T12165] bond13 (unregistering): Released all slaves [ 595.065864][T12165] : left promiscuous mode [ 595.378144][T12165] hm3): left promiscuous mode [ 595.443233][T12165] tipc: Disabling bearer [ 595.455968][T12165] tipc: Left network mode [ 595.558666][T12165] IPVS: stopping backup sync thread 17829 ... [ 596.312765][T12165] veth1_to_team: left promiscuous mode [ 596.319642][T12165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.327370][T12165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.359909][T12165] pim6reg (unregistering): left allmulticast mode [ 596.523251][T12165] team0 (unregistering): Port device team_slave_1 removed [ 596.539162][T12165] team0 (unregistering): Port device team_slave_0 removed [ 597.117929][T12165] IPVS: stop unused estimator thread 0... [ 600.732477][T21647] Bluetooth: hci1: command 0x0406 tx timeout [ 616.080561][T21647] Bluetooth: hci2: command 0x0406 tx timeout [ 624.244033][ T1311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.549021][T21647] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 633.563250][T21647] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 633.572514][T21647] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 633.581816][T21647] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 633.595097][T21647] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 633.653253][T21651] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 633.667114][T21651] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 633.675092][T21651] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 633.684547][T21651] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 633.694658][T21651] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 634.372891][T21908] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.380178][T21908] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.387317][T21908] bridge_slave_0: entered allmulticast mode [ 634.394651][T21908] bridge_slave_0: entered promiscuous mode [ 634.415417][T21908] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.423953][T21908] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.431383][T21908] bridge_slave_1: entered allmulticast mode [ 634.438956][T21908] bridge_slave_1: entered promiscuous mode [ 634.446521][T21905] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.453988][T21905] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.461406][T21905] bridge_slave_0: entered allmulticast mode [ 634.468934][T21905] bridge_slave_0: entered promiscuous mode [ 634.508464][T21905] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.517836][T21905] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.525887][T21905] bridge_slave_1: entered allmulticast mode [ 634.535423][T21905] bridge_slave_1: entered promiscuous mode [ 634.547267][T21908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.580885][T21908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.622722][T21905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.643597][T21908] team0: Port device team_slave_0 added [ 634.651518][T21905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.662482][T21908] team0: Port device team_slave_1 added [ 634.710675][T21908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.717823][T21908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.744554][T21908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.757589][T21905] team0: Port device team_slave_0 added [ 634.763935][T21908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.771159][T21908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.800744][T21943] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 634.807241][T21943] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 634.823697][T21943] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 634.832633][T21908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.844076][T21943] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 634.853236][T21943] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 634.863102][T21905] team0: Port device team_slave_1 added [ 634.939196][T21905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.946178][T21905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.972243][T21905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.996894][T21905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.004766][T21905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.032092][T21905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.049377][T21908] hsr_slave_0: entered promiscuous mode [ 635.057280][T21908] hsr_slave_1: entered promiscuous mode [ 635.063864][T21908] debugfs: 'hsr0' already exists in 'hsr' [ 635.069668][T21908] Cannot create hsr debugfs directory [ 635.167412][T21905] hsr_slave_0: entered promiscuous mode [ 635.174547][T21905] hsr_slave_1: entered promiscuous mode [ 635.181400][T21905] debugfs: 'hsr0' already exists in 'hsr' [ 635.187185][T21905] Cannot create hsr debugfs directory [ 635.633911][T21943] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 635.649765][T21943] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 635.658750][T21943] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 635.667715][T21943] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 635.675719][T21943] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 635.683592][T21943] Bluetooth: hci15: command tx timeout [ 635.765180][T21943] Bluetooth: hci16: command tx timeout [ 635.869487][T21941] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.876650][T21941] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.883966][T21941] bridge_slave_0: entered allmulticast mode [ 635.891398][T21941] bridge_slave_0: entered promiscuous mode [ 635.899582][T21941] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.906777][T21941] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.913964][T21941] bridge_slave_1: entered allmulticast mode [ 635.933334][T21941] bridge_slave_1: entered promiscuous mode [ 635.968259][T21941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.980683][T21941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.016567][T21941] team0: Port device team_slave_0 added [ 636.025410][T21941] team0: Port device team_slave_1 added [ 636.068074][T21941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.075056][T21941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.100956][T21941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.113235][T21941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.120199][T21941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.158713][T21941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.243455][T21941] hsr_slave_0: entered promiscuous mode [ 636.249885][T21941] hsr_slave_1: entered promiscuous mode [ 636.265953][T21941] debugfs: 'hsr0' already exists in 'hsr' [ 636.272748][T21941] Cannot create hsr debugfs directory [ 636.655887][T21943] Bluetooth: hci7: command 0x0406 tx timeout [ 636.657720][T21958] Bluetooth: hci0: command 0x0406 tx timeout [ 636.662511][T21655] Bluetooth: hci6: command 0x0406 tx timeout [ 636.808881][ T4945] Bluetooth: hci8: command 0x0406 tx timeout [ 636.846517][T21955] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.853865][T21955] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.861397][T21955] bridge_slave_0: entered allmulticast mode [ 636.869508][T21955] bridge_slave_0: entered promiscuous mode [ 636.884149][T21955] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.892099][T21955] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.899292][T21955] bridge_slave_1: entered allmulticast mode [ 636.906833][T21955] bridge_slave_1: entered promiscuous mode [ 636.939532][T21955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.952085][T21955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.961674][ T4945] Bluetooth: hci17: command tx timeout [ 636.990608][T21955] team0: Port device team_slave_0 added [ 636.998372][T21955] team0: Port device team_slave_1 added [ 637.023077][T21955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.030196][T21955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.058481][T21955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.071356][T21955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.078297][T21955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.104450][T21955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.157902][T21955] hsr_slave_0: entered promiscuous mode [ 637.164829][T21955] hsr_slave_1: entered promiscuous mode [ 637.171305][T21955] debugfs: 'hsr0' already exists in 'hsr' [ 637.177490][T21955] Cannot create hsr debugfs directory [ 637.760236][ T4945] Bluetooth: hci18: command tx timeout [ 637.760244][T21647] Bluetooth: hci15: command tx timeout [ 637.841201][ T4945] Bluetooth: hci16: command tx timeout [ 639.040090][ T4945] Bluetooth: hci17: command tx timeout [ 639.840125][ T4945] Bluetooth: hci18: command tx timeout [ 639.850554][ T4945] Bluetooth: hci15: command tx timeout [ 639.920229][ T4945] Bluetooth: hci16: command tx timeout [ 641.038306][T21647] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 641.049251][T21647] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 641.057738][T21647] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 641.072117][T21647] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 641.080750][T21647] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 641.122615][ T4945] Bluetooth: hci17: command tx timeout [ 641.686937][T21979] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.694396][T21979] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.701927][T21979] bridge_slave_0: entered allmulticast mode [ 641.709036][T21979] bridge_slave_0: entered promiscuous mode [ 641.717001][T21979] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.724168][T21979] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.731758][T21979] bridge_slave_1: entered allmulticast mode [ 641.738824][T21979] bridge_slave_1: entered promiscuous mode [ 641.767781][T21979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.779379][T21979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.817891][T21979] team0: Port device team_slave_0 added [ 641.826093][T21979] team0: Port device team_slave_1 added [ 641.850894][T21979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.857849][T21979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.884690][T21979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.896486][T21979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.912338][T21979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.938257][T21979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.938378][ T4945] Bluetooth: hci15: command tx timeout [ 641.954540][T21647] Bluetooth: hci18: command tx timeout [ 641.988537][T21979] hsr_slave_0: entered promiscuous mode [ 641.995117][T21979] hsr_slave_1: entered promiscuous mode [ 642.000928][T21647] Bluetooth: hci16: command tx timeout [ 642.002263][T21979] debugfs: 'hsr0' already exists in 'hsr' [ 642.019592][T21979] Cannot create hsr debugfs directory [ 643.130311][T21647] Bluetooth: hci19: command tx timeout [ 643.210092][T21647] Bluetooth: hci17: command tx timeout [ 644.000119][T21647] Bluetooth: hci18: command tx timeout [ 645.210075][T21647] Bluetooth: hci19: command tx timeout [ 646.800390][T21647] Bluetooth: hci9: command 0x0406 tx timeout [ 647.280737][ T4945] Bluetooth: hci19: command tx timeout [ 649.360184][ T4945] Bluetooth: hci19: command tx timeout [ 660.720671][ T31] INFO: task syz.1.3958:21606 blocked for more than 143 seconds. [ 660.732322][ T31] Not tainted syzkaller #0 [ 660.737357][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 660.746220][ T31] task:syz.1.3958 state:D stack:25984 pid:21606 tgid:21605 ppid:17668 task_flags:0x400140 flags:0x00080002 [ 660.758324][ T31] Call Trace: [ 660.761806][ T31] [ 660.764771][ T31] __schedule+0x1821/0x5740 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 660.769289][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 660.774562][ T31] ? __pfx___schedule+0x10/0x10 [ 660.779502][ T31] ? schedule+0x90/0x360 [ 660.784011][ T31] schedule+0x164/0x360 [ 660.788236][ T31] schedule_preempt_disabled+0x13/0x30 [ 660.793942][ T31] __mutex_lock+0x7f7/0x1550 [ 660.798590][ T31] ? __mutex_lock+0x608/0x1550 [ 660.803721][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 660.808463][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 660.813727][ T31] ? radix_tree_lookup+0x240/0x290 [ 660.818901][ T31] genl_rcv_msg+0x10b/0x7a0 [ 660.823624][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 660.829208][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 660.834783][ T31] netlink_rcv_skb+0x232/0x4b0 [ 660.839592][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 660.845556][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 660.851095][ T31] ? down_read+0x270/0x2e0 [ 660.855574][ T31] ? genl_rcv+0xd/0x40 [ 660.859667][ T31] genl_rcv+0x28/0x40 [ 660.863842][ T31] netlink_unicast+0x75c/0x8e0 [ 660.869870][ T31] netlink_sendmsg+0x813/0xb40 [ 660.874960][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.880824][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 660.885861][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 660.891401][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.896735][ T31] __sys_sendto+0x672/0x710 [ 660.901722][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 660.906845][ T31] ? exc_page_fault+0x6a/0xc0 [ 660.911707][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 660.917039][ T31] __x64_sys_sendto+0xde/0x100 [ 660.921976][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.928113][ T31] do_syscall_64+0x15f/0xf80 [ 660.933678][ T31] ? trace_irq_disable+0x3b/0x140 [ 660.939018][ T31] ? clear_bhb_loop+0x40/0x90 [ 660.944059][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.951180][ T31] RIP: 0033:0x7f21a5d5d68e [ 660.955654][ T31] RSP: 002b:00007f21a6d38e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 660.976261][ T31] RAX: ffffffffffffffda RBX: 00007f21a6d3a6c0 RCX: 00007f21a5d5d68e [ 660.987346][ T31] RDX: 0000000000000024 RSI: 00007f21a6d39000 RDI: 0000000000000008 [ 660.995648][ T31] RBP: 0000000000000000 R08: 00007f21a6d38f04 R09: 000000000000000c [ 661.004127][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 661.012532][ T31] R13: 00007f21a6d38f58 R14: 00007f21a6d39000 R15: 0000000000000000 [ 661.025065][ T31] [ 661.051057][ T31] INFO: task syz.4.3959:21608 blocked for more than 143 seconds. [ 661.078893][ T31] Not tainted syzkaller #0 [ 661.091112][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.099846][ T31] task:syz.4.3959 state:D stack:26312 pid:21608 tgid:21607 ppid:17231 task_flags:0x480140 flags:0x00080002 [ 661.112481][ T31] Call Trace: [ 661.115797][ T31] [ 661.118747][ T31] __schedule+0x1821/0x5740 [ 661.126676][ T31] ? __pfx___schedule+0x10/0x10 [ 661.131592][ T31] ? schedule+0x90/0x360 [ 661.135915][ T31] schedule+0x164/0x360 [ 661.140202][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 661.145816][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 661.152057][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 661.158426][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 661.164623][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 661.171387][ T31] nbd_set_size+0x454/0x680 [ 661.175923][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 661.180981][ T31] ? nla_memcpy+0x5b/0xc0 [ 661.185323][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 661.198757][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 661.204498][ T31] ? rcu_is_watching+0x15/0xb0 [ 661.209288][ T31] ? trace_kmalloc+0x2a/0xf0 [ 661.213914][ T31] ? __nla_parse+0x40/0x60 [ 661.218371][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 661.224725][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 661.231083][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 661.236674][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 661.242814][ T31] genl_rcv_msg+0x61c/0x7a0 [ 661.247319][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 661.252339][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 661.258058][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 661.263436][ T31] netlink_rcv_skb+0x232/0x4b0 [ 661.268198][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 661.273230][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 661.278517][ T31] ? down_read+0x270/0x2e0 [ 661.282936][ T31] ? genl_rcv+0xd/0x40 [ 661.287059][ T31] genl_rcv+0x28/0x40 [ 661.291052][ T31] netlink_unicast+0x75c/0x8e0 [ 661.295854][ T31] netlink_sendmsg+0x813/0xb40 [ 661.310127][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.315477][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 661.320742][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 661.326125][ T31] ____sys_sendmsg+0x972/0x9f0 [ 661.331176][ T31] ? __might_fault+0xaf/0x130 [ 661.335918][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.341247][ T31] ? import_iovec+0x73/0xa0 [ 661.345783][ T31] ___sys_sendmsg+0x2a5/0x360 [ 661.350483][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 661.355456][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.361562][ T31] ? futex_wait+0x2a2/0x390 [ 661.366160][ T31] ? __fget_files+0x2a/0x420 [ 661.371078][ T31] ? __fget_files+0x3a0/0x420 [ 661.375822][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 661.380930][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.386439][ T31] ? rcu_is_watching+0x15/0xb0 [ 661.391492][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.397595][ T31] do_syscall_64+0x15f/0xf80 [ 661.402302][ T31] ? trace_irq_disable+0x3b/0x140 [ 661.407364][ T31] ? clear_bhb_loop+0x40/0x90 [ 661.412626][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.418558][ T31] RIP: 0033:0x7ff1c5b9ce59 [ 661.423140][ T31] RSP: 002b:00007ff1c69fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.431713][ T31] RAX: ffffffffffffffda RBX: 00007ff1c5e15fa0 RCX: 00007ff1c5b9ce59 [ 661.439753][ T31] RDX: 0000000000004040 RSI: 0000200000000140 RDI: 0000000000000003 [ 661.448503][ T31] RBP: 00007ff1c5c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 661.456670][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.464812][ T31] R13: 00007ff1c5e16038 R14: 00007ff1c5e15fa0 R15: 00007ffcc0d819c8 [ 661.472955][ T31] [ 661.476058][ T31] INFO: task syz.3.3960:21614 blocked for more than 144 seconds. [ 661.483931][ T31] Not tainted syzkaller #0 [ 661.488900][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.497741][ T31] task:syz.3.3960 state:D stack:25464 pid:21614 tgid:21613 ppid:18780 task_flags:0x400140 flags:0x00080002 [ 661.509799][ T31] Call Trace: [ 661.513328][ T31] [ 661.516305][ T31] __schedule+0x1821/0x5740 [ 661.521078][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 661.526105][ T31] ? __pfx___schedule+0x10/0x10 [ 661.531128][ T31] ? schedule+0x90/0x360 [ 661.535406][ T31] schedule+0x164/0x360 [ 661.539588][ T31] schedule_preempt_disabled+0x13/0x30 [ 661.545646][ T31] __mutex_lock+0x7f7/0x1550 [ 661.550526][ T31] ? __mutex_lock+0x608/0x1550 [ 661.555371][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 661.560299][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 661.565396][ T31] ? radix_tree_lookup+0x240/0x290 [ 661.570717][ T31] genl_rcv_msg+0x10b/0x7a0 [ 661.575299][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 661.580457][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 661.586711][ T31] netlink_rcv_skb+0x232/0x4b0 [ 661.591613][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 661.596672][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 661.602259][ T31] ? down_read+0x270/0x2e0 [ 661.606723][ T31] ? genl_rcv+0xd/0x40 [ 661.611055][ T31] genl_rcv+0x28/0x40 [ 661.615106][ T31] netlink_unicast+0x75c/0x8e0 [ 661.620089][ T31] netlink_sendmsg+0x813/0xb40 [ 661.624921][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.630393][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 661.635420][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 661.641381][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.646806][ T31] __sys_sendto+0x672/0x710 [ 661.651833][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 661.656962][ T31] ? fd_install+0x94/0x3d0 [ 661.661609][ T31] ? fd_install+0x306/0x3d0 [ 661.666178][ T31] __x64_sys_sendto+0xde/0x100 [ 661.671129][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.677314][ T31] do_syscall_64+0x15f/0xf80 [ 661.683006][ T31] ? trace_irq_disable+0x3b/0x140 [ 661.688088][ T31] ? clear_bhb_loop+0x40/0x90 [ 661.693074][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.699010][ T31] RIP: 0033:0x7fa07df5d68e [ 661.703688][ T31] RSP: 002b:00007fa07eeb7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 661.712230][ T31] RAX: ffffffffffffffda RBX: 00007fa07eeb96c0 RCX: 00007fa07df5d68e [ 661.720359][ T31] RDX: 0000000000000020 RSI: 00007fa07eeb8000 RDI: 0000000000000005 [ 661.728383][ T31] RBP: 0000000000000000 R08: 00007fa07eeb7f04 R09: 000000000000000c [ 661.736497][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 661.744604][ T31] R13: 00007fa07eeb7f58 R14: 00007fa07eeb8000 R15: 0000000000000000 [ 661.753212][ T31] [ 661.756309][ T31] INFO: task syz.3.3960:21617 blocked for more than 144 seconds. [ 661.765427][ T31] Not tainted syzkaller #0 [ 661.770598][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.779315][ T31] task:syz.3.3960 state:D stack:25528 pid:21617 tgid:21613 ppid:18780 task_flags:0x400140 flags:0x00080002 [ 661.791409][ T31] Call Trace: [ 661.794728][ T31] [ 661.797689][ T31] __schedule+0x1821/0x5740 [ 661.802277][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 661.807274][ T31] ? __pfx___schedule+0x10/0x10 [ 661.812348][ T31] ? schedule+0x90/0x360 [ 661.816637][ T31] schedule+0x164/0x360 [ 661.820911][ T31] schedule_preempt_disabled+0x13/0x30 [ 661.826417][ T31] __mutex_lock+0x7f7/0x1550 [ 661.831213][ T31] ? __mutex_lock+0x608/0x1550 [ 661.836036][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 661.842301][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 661.847378][ T31] ? radix_tree_lookup+0x240/0x290 [ 661.853090][ T31] genl_rcv_msg+0x10b/0x7a0 [ 661.857658][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 661.862857][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 661.868265][ T31] netlink_rcv_skb+0x232/0x4b0 [ 661.873167][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 661.878234][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 661.883687][ T31] ? down_read+0x270/0x2e0 [ 661.888137][ T31] ? genl_rcv+0xd/0x40 [ 661.892346][ T31] genl_rcv+0x28/0x40 [ 661.896364][ T31] netlink_unicast+0x75c/0x8e0 [ 661.901350][ T31] netlink_sendmsg+0x813/0xb40 [ 661.906204][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.911739][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 661.916744][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 661.923013][ T31] ____sys_sendmsg+0x972/0x9f0 [ 661.927828][ T31] ? __might_fault+0xaf/0x130 [ 661.932650][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.937980][ T31] ? import_iovec+0x73/0xa0 [ 661.942576][ T31] ___sys_sendmsg+0x2a5/0x360 [ 661.947286][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 661.952467][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.958095][ T31] ? futex_wake+0x4ac/0x580 [ 661.962729][ T31] ? __fget_files+0x2a/0x420 [ 661.967346][ T31] ? __fget_files+0x3a0/0x420 [ 661.972189][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 661.977162][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.982728][ T31] ? rcu_is_watching+0x15/0xb0 [ 661.987521][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.993769][ T31] do_syscall_64+0x15f/0xf80 [ 661.998401][ T31] ? trace_irq_disable+0x3b/0x140 [ 662.004524][ T31] ? clear_bhb_loop+0x40/0x90 [ 662.009269][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.015358][ T31] RIP: 0033:0x7fa07df9ce59 [ 662.019814][ T31] RSP: 002b:00007fa07ee98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.028279][ T31] RAX: ffffffffffffffda RBX: 00007fa07e216090 RCX: 00007fa07df9ce59 [ 662.036434][ T31] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 000000000000000e [ 662.044505][ T31] RBP: 00007fa07e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 662.052668][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.061288][ T31] R13: 00007fa07e216128 R14: 00007fa07e216090 R15: 00007ffd46475e88 [ 662.069326][ T31] [ 662.072516][ T31] INFO: task syz.0.3961:21623 blocked for more than 144 seconds. [ 662.080577][ T31] Not tainted syzkaller #0 [ 662.085571][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.094400][ T31] task:syz.0.3961 state:D stack:27224 pid:21623 tgid:21622 ppid:17984 task_flags:0x400140 flags:0x00080002 [ 662.108848][ T31] Call Trace: [ 662.112294][ T31] [ 662.115275][ T31] __schedule+0x1821/0x5740 [ 662.119778][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 662.124894][ T31] ? __pfx___schedule+0x10/0x10 [ 662.129796][ T31] ? schedule+0x90/0x360 [ 662.134188][ T31] schedule+0x164/0x360 [ 662.138385][ T31] schedule_preempt_disabled+0x13/0x30 [ 662.144021][ T31] __mutex_lock+0x7f7/0x1550 [ 662.148646][ T31] ? kernel_text_address+0xa5/0xe0 [ 662.153997][ T31] ? __mutex_lock+0x608/0x1550 [ 662.159164][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 662.164431][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 662.169521][ T31] ? stack_trace_save+0xa9/0x100 [ 662.174625][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 662.179632][ T31] ? radix_tree_lookup+0x240/0x290 [ 662.184830][ T31] genl_rcv_msg+0x10b/0x7a0 [ 662.189369][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 662.194556][ T31] netlink_rcv_skb+0x232/0x4b0 [ 662.199363][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 662.204487][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 662.209822][ T31] ? down_read+0x270/0x2e0 [ 662.214869][ T31] ? genl_rcv+0xd/0x40 [ 662.219000][ T31] genl_rcv+0x28/0x40 [ 662.223124][ T31] netlink_unicast+0x75c/0x8e0 [ 662.227955][ T31] netlink_sendmsg+0x813/0xb40 [ 662.233001][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.238306][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 662.243536][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.248865][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.254399][ T31] __sys_sendto+0x672/0x710 [ 662.258989][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 662.264607][ T31] ? exc_page_fault+0x6a/0xc0 [ 662.269350][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 662.274827][ T31] __x64_sys_sendto+0xde/0x100 [ 662.279636][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.285822][ T31] do_syscall_64+0x15f/0xf80 [ 662.290581][ T31] ? trace_irq_disable+0x3b/0x140 [ 662.295698][ T31] ? clear_bhb_loop+0x40/0x90 [ 662.300470][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.306400][ T31] RIP: 0033:0x7f1129b5d68e [ 662.310937][ T31] RSP: 002b:00007f112aae1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 662.319439][ T31] RAX: ffffffffffffffda RBX: 00007f112aae36c0 RCX: 00007f1129b5d68e [ 662.327723][ T31] RDX: 0000000000000028 RSI: 00007f112aae2000 RDI: 0000000000000004 [ 662.335886][ T31] RBP: 0000000000000000 R08: 00007f112aae1f04 R09: 000000000000000c [ 662.344024][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 662.352141][ T31] R13: 00007f112aae1f58 R14: 00007f112aae2000 R15: 0000000000000000 [ 662.360321][ T31] [ 662.363812][ T31] INFO: task syz.0.3961:21624 blocked for more than 144 seconds. [ 662.371723][ T31] Not tainted syzkaller #0 [ 662.376702][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.385478][ T31] task:syz.0.3961 state:D stack:26744 pid:21624 tgid:21622 ppid:17984 task_flags:0x400140 flags:0x00080002 [ 662.397545][ T31] Call Trace: [ 662.401202][ T31] [ 662.404213][ T31] __schedule+0x1821/0x5740 [ 662.408761][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 662.413912][ T31] ? __pfx___schedule+0x10/0x10 [ 662.418851][ T31] ? schedule+0x90/0x360 [ 662.423205][ T31] schedule+0x164/0x360 [ 662.427393][ T31] schedule_preempt_disabled+0x13/0x30 [ 662.433086][ T31] __mutex_lock+0x7f7/0x1550 [ 662.437741][ T31] ? __mutex_lock+0x608/0x1550 [ 662.442668][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 662.447387][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 662.452607][ T31] ? radix_tree_lookup+0x240/0x290 [ 662.457773][ T31] genl_rcv_msg+0x10b/0x7a0 [ 662.462363][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 662.467884][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 662.473440][ T31] netlink_rcv_skb+0x232/0x4b0 [ 662.478247][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 662.483507][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 662.488843][ T31] ? down_read+0x270/0x2e0 [ 662.493463][ T31] ? genl_rcv+0xd/0x40 [ 662.497570][ T31] genl_rcv+0x28/0x40 [ 662.501659][ T31] netlink_unicast+0x75c/0x8e0 [ 662.506456][ T31] netlink_sendmsg+0x813/0xb40 [ 662.511405][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.516736][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 662.521851][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.527199][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.532670][ T31] __sys_sendto+0x672/0x710 [ 662.537222][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 662.542507][ T31] ? fd_install+0x94/0x3d0 [ 662.546964][ T31] ? fd_install+0x306/0x3d0 [ 662.551624][ T31] __x64_sys_sendto+0xde/0x100 [ 662.556483][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.562855][ T31] do_syscall_64+0x15f/0xf80 [ 662.567495][ T31] ? trace_irq_disable+0x3b/0x140 [ 662.573154][ T31] ? clear_bhb_loop+0x40/0x90 [ 662.577913][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.583967][ T31] RIP: 0033:0x7f1129b5d68e [ 662.588607][ T31] RSP: 002b:00007f112aac0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 662.597129][ T31] RAX: ffffffffffffffda RBX: 00007f112aac26c0 RCX: 00007f1129b5d68e [ 662.605227][ T31] RDX: 0000000000000020 RSI: 00007f112aac1000 RDI: 0000000000000006 [ 662.613483][ T31] RBP: 0000000000000000 R08: 00007f112aac0f04 R09: 000000000000000c [ 662.621562][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 662.629557][ T31] R13: 00007f112aac0f58 R14: 00007f112aac1000 R15: 0000000000000000 [ 662.637727][ T31] [ 662.641065][ T31] INFO: task syz.5.3966:21644 blocked for more than 145 seconds. [ 662.648843][ T31] Not tainted syzkaller #0 [ 662.653980][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.662729][ T31] task:syz.5.3966 state:D stack:25800 pid:21644 tgid:21643 ppid:20918 task_flags:0x400040 flags:0x00080002 [ 662.675216][ T31] Call Trace: [ 662.678556][ T31] [ 662.681628][ T31] __schedule+0x1821/0x5740 [ 662.686217][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 662.691378][ T31] ? __pfx___schedule+0x10/0x10 [ 662.696323][ T31] ? schedule+0x90/0x360 [ 662.700683][ T31] schedule+0x164/0x360 [ 662.704896][ T31] schedule_preempt_disabled+0x13/0x30 [ 662.710594][ T31] __mutex_lock+0x7f7/0x1550 [ 662.715268][ T31] ? __mutex_lock+0x608/0x1550 [ 662.720752][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 662.725865][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 662.731028][ T31] ? radix_tree_lookup+0x240/0x290 [ 662.736166][ T31] genl_rcv_msg+0x10b/0x7a0 [ 662.740929][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 662.746234][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 662.751875][ T31] netlink_rcv_skb+0x232/0x4b0 [ 662.756709][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 662.762012][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 662.767343][ T31] ? down_read+0x270/0x2e0 [ 662.771895][ T31] ? genl_rcv+0xd/0x40 [ 662.776386][ T31] genl_rcv+0x28/0x40 [ 662.780544][ T31] netlink_unicast+0x75c/0x8e0 [ 662.785366][ T31] netlink_sendmsg+0x813/0xb40 [ 662.790288][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.795634][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 662.801233][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.806558][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.811978][ T31] __sys_sendto+0x672/0x710 [ 662.816535][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 662.821714][ T31] ? exc_page_fault+0x6a/0xc0 [ 662.826436][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 662.831894][ T31] __x64_sys_sendto+0xde/0x100 [ 662.836708][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.842891][ T31] do_syscall_64+0x15f/0xf80 [ 662.847522][ T31] ? trace_irq_disable+0x3b/0x140 [ 662.852796][ T31] ? clear_bhb_loop+0x40/0x90 [ 662.857528][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.863538][ T31] RIP: 0033:0x7f574d55d68e [ 662.867974][ T31] RSP: 002b:00007f574e46de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 662.876992][ T31] RAX: ffffffffffffffda RBX: 00007f574e46f6c0 RCX: 00007f574d55d68e [ 662.885279][ T31] RDX: 0000000000000020 RSI: 00007f574e46e000 RDI: 0000000000000004 [ 662.893489][ T31] RBP: 0000000000000000 R08: 00007f574e46df04 R09: 000000000000000c [ 662.901571][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 662.909555][ T31] R13: 00007f574e46df58 R14: 00007f574e46e000 R15: 0000000000000000 [ 662.917752][ T31] [ 662.920916][ T31] INFO: task syz-executor:21650 blocked for more than 145 seconds. [ 662.928824][ T31] Not tainted syzkaller #0 [ 662.933935][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.942709][ T31] task:syz-executor state:D stack:23048 pid:21650 tgid:21650 ppid:1 task_flags:0x400140 flags:0x00080002 [ 662.954805][ T31] Call Trace: [ 662.958129][ T31] [ 662.961208][ T31] __schedule+0x1821/0x5740 [ 662.965878][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 662.971045][ T31] ? __pfx___schedule+0x10/0x10 [ 662.975982][ T31] ? schedule+0x90/0x360 [ 662.980941][ T31] schedule+0x164/0x360 [ 662.985185][ T31] schedule_preempt_disabled+0x13/0x30 [ 662.990877][ T31] __mutex_lock+0x7f7/0x1550 [ 662.995522][ T31] ? kernel_text_address+0xa5/0xe0 [ 663.000853][ T31] ? __mutex_lock+0x608/0x1550 [ 663.005662][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 663.010517][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 663.015586][ T31] ? stack_trace_save+0xa9/0x100 [ 663.020738][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 663.025729][ T31] ? radix_tree_lookup+0x240/0x290 [ 663.030999][ T31] genl_rcv_msg+0x10b/0x7a0 [ 663.035560][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.041192][ T31] netlink_rcv_skb+0x232/0x4b0 [ 663.046023][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.051228][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 663.056558][ T31] ? down_read+0x270/0x2e0 [ 663.061082][ T31] ? genl_rcv+0xd/0x40 [ 663.065211][ T31] genl_rcv+0x28/0x40 [ 663.069220][ T31] netlink_unicast+0x75c/0x8e0 [ 663.074167][ T31] netlink_sendmsg+0x813/0xb40 [ 663.078978][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.084814][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 663.089783][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.095300][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.100729][ T31] __sys_sendto+0x672/0x710 [ 663.105305][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 663.110572][ T31] ? fd_install+0x94/0x3d0 [ 663.115052][ T31] ? fd_install+0x306/0x3d0 [ 663.119596][ T31] __x64_sys_sendto+0xde/0x100 [ 663.124619][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.130900][ T31] do_syscall_64+0x15f/0xf80 [ 663.135544][ T31] ? trace_irq_disable+0x3b/0x140 [ 663.140659][ T31] ? clear_bhb_loop+0x40/0x90 [ 663.145416][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.151447][ T31] RIP: 0033:0x7f961b55d68e [ 663.155894][ T31] RSP: 002b:00007ffe2d1490f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 663.164407][ T31] RAX: ffffffffffffffda RBX: 0000555572728500 RCX: 00007f961b55d68e [ 663.172503][ T31] RDX: 0000000000000020 RSI: 00007f961c344670 RDI: 0000000000000005 [ 663.180588][ T31] RBP: 0000000000000001 R08: 00007ffe2d149174 R09: 000000000000000c [ 663.189077][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 663.197216][ T31] R13: 00007ffe2d1491c8 R14: 00007f961c344670 R15: 0000000000000000 [ 663.205672][ T31] [ 663.208760][ T31] INFO: task syz-executor:21653 blocked for more than 145 seconds. [ 663.216798][ T31] Not tainted syzkaller #0 [ 663.221868][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 663.230745][ T31] task:syz-executor state:D stack:22376 pid:21653 tgid:21653 ppid:1 task_flags:0x400140 flags:0x00080002 [ 663.242854][ T31] Call Trace: [ 663.246187][ T31] [ 663.249131][ T31] __schedule+0x1821/0x5740 [ 663.253823][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 663.258821][ T31] ? __pfx___schedule+0x10/0x10 [ 663.263792][ T31] ? schedule+0x90/0x360 [ 663.268056][ T31] schedule+0x164/0x360 [ 663.272363][ T31] schedule_preempt_disabled+0x13/0x30 [ 663.277920][ T31] __mutex_lock+0x7f7/0x1550 [ 663.283109][ T31] ? kernel_text_address+0xa5/0xe0 [ 663.288779][ T31] ? __mutex_lock+0x608/0x1550 [ 663.293745][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 663.298475][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 663.303588][ T31] ? stack_trace_save+0xa9/0x100 [ 663.308583][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 663.313705][ T31] ? radix_tree_lookup+0x240/0x290 [ 663.318861][ T31] genl_rcv_msg+0x10b/0x7a0 [ 663.323512][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.328606][ T31] netlink_rcv_skb+0x232/0x4b0 [ 663.333582][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.338651][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 663.344029][ T31] ? down_read+0x270/0x2e0 [ 663.348480][ T31] ? genl_rcv+0xd/0x40 [ 663.352726][ T31] genl_rcv+0x28/0x40 [ 663.356780][ T31] netlink_unicast+0x75c/0x8e0 [ 663.361673][ T31] netlink_sendmsg+0x813/0xb40 [ 663.366462][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.371909][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 663.376888][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.382251][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.387970][ T31] __sys_sendto+0x672/0x710 [ 663.392680][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 663.397777][ T31] ? fd_install+0x94/0x3d0 [ 663.402273][ T31] ? fd_install+0x306/0x3d0 [ 663.406801][ T31] __x64_sys_sendto+0xde/0x100 [ 663.411724][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.417827][ T31] do_syscall_64+0x15f/0xf80 [ 663.422621][ T31] ? trace_irq_disable+0x3b/0x140 [ 663.427693][ T31] ? clear_bhb_loop+0x40/0x90 [ 663.432506][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.438436][ T31] RIP: 0033:0x7f575f15d68e [ 663.443026][ T31] RSP: 002b:00007ffd4d2cb258 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 663.451609][ T31] RAX: ffffffffffffffda RBX: 00005555939b6500 RCX: 00007f575f15d68e [ 663.459626][ T31] RDX: 0000000000000020 RSI: 00007f575ff44670 RDI: 0000000000000005 [ 663.467755][ T31] RBP: 0000000000000001 R08: 00007ffd4d2cb2d4 R09: 000000000000000c [ 663.475906][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 663.484011][ T31] R13: 00007ffd4d2cb328 R14: 00007f575ff44670 R15: 0000000000000000 [ 663.492647][ T31] [ 663.495748][ T31] INFO: task syz-executor:21684 blocked for more than 146 seconds. [ 663.503978][ T31] Not tainted syzkaller #0 [ 663.508944][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 663.517803][ T31] task:syz-executor state:D stack:23368 pid:21684 tgid:21684 ppid:1 task_flags:0x400140 flags:0x00080002 [ 663.529797][ T31] Call Trace: [ 663.533253][ T31] [ 663.536245][ T31] __schedule+0x1821/0x5740 [ 663.540914][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 663.545924][ T31] ? __pfx___schedule+0x10/0x10 [ 663.551037][ T31] ? schedule+0x90/0x360 [ 663.555439][ T31] schedule+0x164/0x360 [ 663.559620][ T31] schedule_preempt_disabled+0x13/0x30 [ 663.565209][ T31] __mutex_lock+0x7f7/0x1550 [ 663.569819][ T31] ? kernel_text_address+0xa5/0xe0 [ 663.575130][ T31] ? __mutex_lock+0x608/0x1550 [ 663.580010][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 663.584735][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 663.589773][ T31] ? stack_trace_save+0xa9/0x100 [ 663.595312][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 663.600546][ T31] ? radix_tree_lookup+0x240/0x290 [ 663.605724][ T31] genl_rcv_msg+0x10b/0x7a0 [ 663.610387][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.615483][ T31] netlink_rcv_skb+0x232/0x4b0 [ 663.620370][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.625539][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 663.631036][ T31] ? down_read+0x270/0x2e0 [ 663.635518][ T31] ? genl_rcv+0xd/0x40 [ 663.639585][ T31] genl_rcv+0x28/0x40 [ 663.643745][ T31] netlink_unicast+0x75c/0x8e0 [ 663.648567][ T31] netlink_sendmsg+0x813/0xb40 [ 663.653488][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.658807][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 663.663921][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.669249][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.674663][ T31] __sys_sendto+0x672/0x710 [ 663.679217][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 663.684416][ T31] ? fd_install+0x94/0x3d0 [ 663.688864][ T31] ? fd_install+0x306/0x3d0 [ 663.693522][ T31] __x64_sys_sendto+0xde/0x100 [ 663.698804][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.704977][ T31] do_syscall_64+0x15f/0xf80 [ 663.709593][ T31] ? trace_irq_disable+0x3b/0x140 [ 663.714831][ T31] ? clear_bhb_loop+0x40/0x90 [ 663.719550][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.725527][ T31] RIP: 0033:0x7feaa1d5d68e [ 663.730141][ T31] RSP: 002b:00007fffc4d26668 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 663.738612][ T31] RAX: ffffffffffffffda RBX: 0000555558c3a500 RCX: 00007feaa1d5d68e [ 663.746720][ T31] RDX: 0000000000000020 RSI: 00007feaa2b44670 RDI: 0000000000000005 [ 663.754872][ T31] RBP: 0000000000000001 R08: 00007fffc4d266e4 R09: 000000000000000c [ 663.763172][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 663.771327][ T31] R13: 00007fffc4d26738 R14: 00007feaa2b44670 R15: 0000000000000000 [ 663.779340][ T31] [ 663.782451][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 663.791626][ T31] INFO: task syz-executor:21696 blocked for more than 146 seconds. [ 663.800023][ T31] Not tainted syzkaller #0 [ 663.805000][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 663.813842][ T31] task:syz-executor state:D stack:22928 pid:21696 tgid:21696 ppid:1 task_flags:0x400140 flags:0x00080002 [ 663.825847][ T31] Call Trace: [ 663.829142][ T31] [ 663.832205][ T31] __schedule+0x1821/0x5740 [ 663.836752][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 663.842107][ T31] ? __pfx___schedule+0x10/0x10 [ 663.847041][ T31] ? schedule+0x90/0x360 [ 663.851524][ T31] schedule+0x164/0x360 [ 663.855788][ T31] schedule_preempt_disabled+0x13/0x30 [ 663.861411][ T31] __mutex_lock+0x7f7/0x1550 [ 663.866054][ T31] ? kernel_text_address+0xa5/0xe0 [ 663.871357][ T31] ? __mutex_lock+0x608/0x1550 [ 663.876183][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 663.881069][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 663.886138][ T31] ? stack_trace_save+0xa9/0x100 [ 663.891284][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 663.896263][ T31] ? radix_tree_lookup+0x240/0x290 [ 663.901932][ T31] genl_rcv_msg+0x10b/0x7a0 [ 663.906486][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.911698][ T31] netlink_rcv_skb+0x232/0x4b0 [ 663.916501][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.922172][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 663.927544][ T31] ? down_read+0x270/0x2e0 [ 663.932083][ T31] ? genl_rcv+0xd/0x40 [ 663.936212][ T31] genl_rcv+0x28/0x40 [ 663.940273][ T31] netlink_unicast+0x75c/0x8e0 [ 663.945104][ T31] netlink_sendmsg+0x813/0xb40 [ 663.949881][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.955391][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 663.960422][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.965741][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.971253][ T31] __sys_sendto+0x672/0x710 [ 663.975838][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 663.980998][ T31] ? fd_install+0x94/0x3d0 [ 663.985459][ T31] ? fd_install+0x306/0x3d0 [ 663.990147][ T31] __x64_sys_sendto+0xde/0x100 [ 663.994967][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.001207][ T31] do_syscall_64+0x15f/0xf80 [ 664.006234][ T31] ? clear_bhb_loop+0x40/0x90 [ 664.011153][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.017107][ T31] RIP: 0033:0x7f554755d68e [ 664.021627][ T31] RSP: 002b:00007ffff324d458 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 664.030163][ T31] RAX: ffffffffffffffda RBX: 000055555d015500 RCX: 00007f554755d68e [ 664.038161][ T31] RDX: 0000000000000020 RSI: 00007f5548344670 RDI: 0000000000000005 [ 664.046214][ T31] RBP: 0000000000000001 R08: 00007ffff324d4d4 R09: 000000000000000c [ 664.054288][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 664.062373][ T31] R13: 00007ffff324d528 R14: 00007f5548344670 R15: 0000000000000000 [ 664.070486][ T31] [ 664.073516][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 664.083086][ T31] [ 664.083086][ T31] Showing all locks held in the system: [ 664.090952][ T31] 1 lock held by khungtaskd/31: [ 664.095839][ T31] #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 664.107301][ T31] 2 locks held by kworker/u8:5/116: [ 664.112726][ T31] 2 locks held by getty/5385: [ 664.117437][ T31] #0: ffff888036c6e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 664.127337][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 664.137583][ T31] 1 lock held by udevd/20396: [ 664.142325][ T31] #0: ffff8880273cd350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 664.151714][ T31] 2 locks held by syz.1.3958/21606: [ 664.156939][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.165395][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.174562][ T31] 6 locks held by syz.4.3959/21608: [ 664.179784][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.188058][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.197219][ T31] #2: ffff8880273e2260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 664.208181][ T31] #3: ffff888027036d08 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 664.217787][ T31] #4: ffff8880270366d0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 664.230082][ T31] #5: ffff888027036708 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 664.242577][ T31] 2 locks held by syz.3.3960/21614: [ 664.247854][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.256229][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.265309][ T31] 2 locks held by syz.3.3960/21617: [ 664.270672][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.278912][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.288004][ T31] 2 locks held by syz.0.3961/21623: [ 664.293299][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.301645][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.311204][ T31] 2 locks held by syz.0.3961/21624: [ 664.316446][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.324827][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.333962][ T31] 2 locks held by syz.5.3966/21644: [ 664.339192][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.347594][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.356714][ T31] 2 locks held by syz-executor/21650: [ 664.362165][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.370579][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.379659][ T31] 2 locks held by syz-executor/21653: [ 664.385101][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.393448][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.402613][ T31] 2 locks held by syz-executor/21684: [ 664.408029][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.416882][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.425993][ T31] 2 locks held by syz-executor/21696: [ 664.431528][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.439745][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.448809][ T31] 2 locks held by syz-executor/21723: [ 664.454314][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.462580][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.471763][ T31] 2 locks held by syz-executor/21811: [ 664.477163][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.485586][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.494768][ T31] 2 locks held by syz-executor/21813: [ 664.500256][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.508488][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.518098][ T31] 2 locks held by syz-executor/21847: [ 664.523641][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.531968][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.541083][ T31] 2 locks held by syz-executor/21849: [ 664.546485][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.554802][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.564239][ T31] 2 locks held by syz-executor/21882: [ 664.569657][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.577991][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.587104][ T31] 2 locks held by syz-executor/21905: [ 664.592644][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.600959][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.610110][ T31] 2 locks held by syz-executor/21908: [ 664.615520][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.624495][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.633781][ T31] 2 locks held by syz-executor/21941: [ 664.639178][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.647434][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.656545][ T31] 2 locks held by syz-executor/21955: [ 664.662003][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.670347][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.679339][ T31] 2 locks held by syz-executor/21979: [ 664.684773][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 664.693184][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 664.702269][ T31] [ 664.704621][ T31] ============================================= [ 664.704621][ T31] [ 664.713176][ T31] NMI backtrace for cpu 1 [ 664.713190][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 664.713209][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 664.713220][ T31] Call Trace: [ 664.713226][ T31] [ 664.713233][ T31] dump_stack_lvl+0xe8/0x150 [ 664.713256][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 664.713278][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 664.713298][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 664.713321][ T31] sys_info+0x135/0x170 [ 664.713338][ T31] watchdog+0xfd3/0x1030 [ 664.713371][ T31] ? watchdog+0x1c9/0x1030 [ 664.713401][ T31] kthread+0x389/0x470 [ 664.713425][ T31] ? __pfx_watchdog+0x10/0x10 [ 664.713448][ T31] ? __pfx_kthread+0x10/0x10 [ 664.713471][ T31] ret_from_fork+0x514/0xb70 [ 664.713492][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 664.713511][ T31] ? __switch_to+0xc79/0x1410 [ 664.713539][ T31] ? __pfx_kthread+0x10/0x10 [ 664.713562][ T31] ret_from_fork_asm+0x1a/0x30 [ 664.713607][ T31] [ 664.713614][ T31] Sending NMI from CPU 1 to CPUs 0: [ 664.824866][ C0] NMI backtrace for cpu 0 [ 664.824878][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 664.824895][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 664.824904][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 664.824928][ C0] Code: 8b 7c 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 21 1f 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 664.824942][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 664.824955][ C0] RAX: 0000000001b8c6bb RBX: ffffffff819a958a RCX: 0000000080000001 [ 664.824967][ C0] RDX: 0000000000000001 RSI: ffffffff8dfafcec RDI: ffffffff8c28afe0 [ 664.824977][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 664.824989][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 664.824999][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 664.825010][ C0] FS: 0000000000000000(0000) GS:ffff88812527a000(0000) knlGS:0000000000000000 [ 664.825022][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 664.825033][ C0] CR2: 000056420412bee8 CR3: 000000007d748000 CR4: 00000000003526f0 [ 664.825047][ C0] Call Trace: [ 664.825053][ C0] [ 664.825058][ C0] default_idle+0x9/0x20 [ 664.825073][ C0] default_idle_call+0x72/0xb0 [ 664.825088][ C0] do_idle+0x36a/0x5f0 [ 664.825108][ C0] ? __pfx_do_idle+0x10/0x10 [ 664.825129][ C0] cpu_startup_entry+0x43/0x60 [ 664.825146][ C0] rest_init+0x2de/0x300 [ 664.825163][ C0] start_kernel+0x38a/0x3e0 [ 664.825184][ C0] x86_64_start_reservations+0x24/0x30 [ 664.825199][ C0] x86_64_start_kernel+0x143/0x1c0 [ 664.825214][ C0] common_startup_64+0x13e/0x147 [ 664.825242][ C0] [ 665.001846][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 665.008718][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 665.017858][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 665.028001][ T31] Call Trace: [ 665.031291][ T31] [ 665.034237][ T31] vpanic+0x56c/0xa60 [ 665.038226][ T31] ? __pfx___schedule+0x10/0x10 [ 665.043085][ T31] ? __pfx_vpanic+0x10/0x10 [ 665.047601][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 665.053769][ T31] panic+0xc5/0xd0 [ 665.057496][ T31] ? __pfx_panic+0x10/0x10 [ 665.061919][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 665.067329][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 665.073582][ T31] watchdog+0x102c/0x1030 [ 665.077926][ T31] ? watchdog+0x1c9/0x1030 [ 665.082355][ T31] kthread+0x389/0x470 [ 665.086433][ T31] ? __pfx_watchdog+0x10/0x10 [ 665.091126][ T31] ? __pfx_kthread+0x10/0x10 [ 665.095741][ T31] ret_from_fork+0x514/0xb70 [ 665.100347][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 665.105484][ T31] ? __switch_to+0xc79/0x1410 [ 665.110187][ T31] ? __pfx_kthread+0x10/0x10 [ 665.114805][ T31] ret_from_fork_asm+0x1a/0x30 [ 665.119600][ T31] [ 665.125536][ T31] Kernel Offset: disabled [ 665.129885][ T31] Rebooting in 86400 seconds..