last executing test programs: 3m15.204290935s ago: executing program 2 (id=1939): syz_emit_ethernet(0x1aa, &(0x7f0000000740)={@link_local, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x170, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x84, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x33, 0x27, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x8, [0x1, 0x6]}}, @generic={0xf, 0xe5, "17654f43addd3c5ad32c482c522540a36fcfebc85509ef1b6f3214336f5aef6d71fa7128cfd07db603a74df6c46cb938230ccb9f6f0f0ff4ac38703a0af362f41d37e5baa5926cbd326c7292da6f7bf399860f647ba0104a180125ae27a720e54e27378a9a5e9be95b7d074b8f1c9451219f36ddc0b0e55ab646ca515fdd0b4d60d3024393e1fa2b5823a7e4a8c7d34ace0c0156d1f0baf94f5deedf4cdae5181de5d0d3120bad456519359d429bc3ad81b99b4c82941dc6762091b450d19404aa1a8146db91e511e7f96ace3849f84cfa72ec0a8de3ad86d7e32c2764b5f8ec6356804a71"}, @calipso={0x7, 0x10, {0x1, 0x2, 0x5, 0x9, [0x80]}}, @pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0x5, 0x7fff, [0x1, 0xb1c, 0x401]}}]}]}}}}}}}, 0x0) 3m15.03733764s ago: executing program 2 (id=1941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xf35, 0x70bd23, 0x5, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x100, 0xd, 0xa, 0xffff, 0x7ff}}, @TCA_DEF_DATA={0x6, 0x3, '\xff\xff'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x42}}]}, 0x90}, 0x1, 0x0, 0x0, 0x440}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f0000000580)) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd80000009602"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000000ce34179efde64c3937b8fee39dca8d5a81fc4193c82242f9fa143912d3e17c0955ebd3d9b17115181954e3d4f015270a3fb5d61b8d3ea8c134ace2e6a016be84c0469d6bb28bb2d2a24505df9db55c5e1cc8f5838e88d14ba4ca9f9ed553925ab0a5fc6ab9383a6987ff06c95d7d0a62d043c1817", @ANYRES32=r7, @ANYBLOB="08001b0000000000"], 0x34}}, 0x8054) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x9f0, 0x0, 0x43, 0xa0, 0x90, 0x98, 0x958, 0x178, 0x178, 0x958, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}, {0xffffffffffffffff}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0xfffffff6}, {0xdb9, 0xff1}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x10002}], 0x3, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0xffff, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x0, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x40000000, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x4}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x0, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1324f499ce9a99e8}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x3e}, {0x76a74689, 0xfffff156}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x40007ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa50) 3m14.95631419s ago: executing program 2 (id=1943): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000110011032aa1b9dfc5e787ea628eb9655a71bd7000fbdbdf25fc000000000000000000000000000001000004d30a006c001bdcb9bad8a67359d536a77476eb5a16c70f00259522f4f5b449a4851805eba836e34bf7bd0f061b56c2b819d164833b00ea4f6f661b8ed6131a852b0dc56905c070e02764ca82edca3e7290f14b506517c579292a06fcf8b03ba1b4aca02eb6c26c396e0bc734978a1da4677dae60c7677a12"], 0x28}, 0x1, 0x0, 0x0, 0x4044004}, 0x4000004) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x46, 0x0, &(0x7f0000000100)) r2 = accept(r0, 0x0, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd23, 0xffffffff, {0xa, 0x14, 0x0, 0x40, 0x1, 0x0, 0x0, 0x1, 0x1}, [@FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40810}, 0x4004044) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000080)={0x53, 0x4, 0x8, 0x5, 0xffffff1e, 0x81}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x2000, 0x2}]}, @union={0xf}]}, {0x0, [0x0, 0x2e, 0x2e, 0x2e, 0x2e, 0x0, 0x5f, 0x61]}}, &(0x7f00000000c0)=""/42, 0x4a, 0x2a, 0x1}, 0x28) 3m14.746215009s ago: executing program 2 (id=1945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xb0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x1c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x4}]}]}, 0xb0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0xf, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x38dd53c4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0xd9, &(0x7f0000000f80)=""/217, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 3m14.600711478s ago: executing program 2 (id=1947): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffff30, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x20040044) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xcc, r5, 0x4, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24008084}, 0x4004884) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800356a0000000000000a800000ff03000600000000140001002001000000000000000000000000000000007f1dbe4367d60336eb64ec4d96f3957e0769f137d590d1d017cbd4782e806acaf1ce"], 0x30}}, 0x0) 3m14.40299205s ago: executing program 2 (id=1950): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e00010000000000fddbdf2508000000010000000b"], 0x1c}], 0x1}, 0x0) pipe(&(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800ee002e00090027bd7000000000000400000004001200d9dddea63113637e9fc30100cb2453382a33addf97712e955c75b76e9668e87e1677a22b307d931b0d11cb913bd3f426be70d4c44e"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=ANY=[@ANYBLOB="14000000260009000400080080eaced106"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="84000600", @ANYRES16=r9, @ANYBLOB="13080000000000000000110000003c000980080001000000000008000100000000000800010000000000080002000000000008000200000000000800010000000000080001000000000034000980080002000000000008000100000000000800010000000000000001000000000000000200000000000800010000000000"], 0x84}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="b71d000010e5432421bb23d95a1f742016722f54aa3b8aaee3e2cd81e5d80365cacdf80978a51784ac232c863af9fe0b379ae549b6db42df0d97225c4bd8a0a0de4f5a70227c4c02064167ec182c3ce771260168fb3f92de0caeee7b", @ANYRES16=r9, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000051) 2m59.294394783s ago: executing program 32 (id=1950): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e00010000000000fddbdf2508000000010000000b"], 0x1c}], 0x1}, 0x0) pipe(&(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800ee002e00090027bd7000000000000400000004001200d9dddea63113637e9fc30100cb2453382a33addf97712e955c75b76e9668e87e1677a22b307d931b0d11cb913bd3f426be70d4c44e"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=ANY=[@ANYBLOB="14000000260009000400080080eaced106"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="84000600", @ANYRES16=r9, @ANYBLOB="13080000000000000000110000003c000980080001000000000008000100000000000800010000000000080002000000000008000200000000000800010000000000080001000000000034000980080002000000000008000100000000000800010000000000000001000000000000000200000000000800010000000000"], 0x84}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="b71d000010e5432421bb23d95a1f742016722f54aa3b8aaee3e2cd81e5d80365cacdf80978a51784ac232c863af9fe0b379ae549b6db42df0d97225c4bd8a0a0de4f5a70227c4c02064167ec182c3ce771260168fb3f92de0caeee7b", @ANYRES16=r9, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000051) 2m48.517642625s ago: executing program 0 (id=2134): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x10) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffffc}], 0x2, 0x42, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xeb}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000002c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r8, 0x0, 0x0) getsockname$packet(r6, 0x0, 0x0) bind$isdn(r5, &(0x7f00000001c0)={0x22, 0xfc, 0x2, 0x10, 0x45}, 0x6) sendmsg$nl_route(r6, 0x0, 0x440b0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000240)={0x0, 0x50, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x40000841}, 0x4000810) recvfrom(r4, &(0x7f0000000080)=""/60, 0x3c, 0x140, 0x0, 0x0) 2m46.080925475s ago: executing program 4 (id=2151): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x6720f15ce8555866) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x50, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x11) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, 0x0, &(0x7f00000017c0)) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r4) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x4000) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r14, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r15 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010402000200fedbdf2500000000", @ANYRES32=r16, @ANYBLOB="98e400007306000005002100100000001c00168018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x4cc51}, 0x4054) 2m44.887611279s ago: executing program 4 (id=2155): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000380)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @exit], &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$inet6(0xa, 0x6, 0xfffffffc) getsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2m44.670038935s ago: executing program 4 (id=2156): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) write$nci(0xffffffffffffffff, &(0x7f0000000480)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x7, {0x7, 0xd}}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m44.40562272s ago: executing program 4 (id=2158): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003804010321bd7000ffff000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x14}, 0x3}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000002c0)="5107ee0c", 0x4}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @private2, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x0, {0x2, 0x0, 0xa810a19c8cb0f7fa}, {0x1, 0xf0, 0x1}, 0xfd}, {0x2, 0x3, {0x0, 0x0, 0x774e1a5b2b1ea0cb}, {0x1, 0x1}, 0x2, 0x2}, {0x0, 0x2, {0x0, 0x0, 0x1}, {0x2, 0x1, 0x3}, 0x0, 0xff}, {0x0, 0x1, {0x1, 0xf0}, {0x1, 0xff, 0xc}, 0x2}, {0x1, 0x3, {0x1, 0x0, 0x4}, {0x1, 0xf0, 0x3}, 0x2, 0xff}], 0xa0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x5, 0x10, 0x0, 0x1, [@generic="8b"]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {0xf, 0x5}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x8044}, 0xc8c4) ioctl$FIONCLEX(r1, 0x5450) 2m43.222444282s ago: executing program 4 (id=2160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x7800, 0x1, 0x14, 0x3, {{0x16, 0x4, 0x1, 0x8, 0x58, 0x65, 0x0, 0x3, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x1c, 0x3a, 0x1, 0x4, [{@multicast1, 0x99b8}, {@rand_addr=0x64010100, 0x73}, {@broadcast, 0x8}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x23, 0xc6, [@rand_addr=0x64010101, @multicast1, @loopback, @loopback, @remote, @broadcast, @remote, @empty]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f0000000680)=""/158, 0x9e, 0x0, &(0x7f0000000740)=""/59, 0x3b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x22, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x62c}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x5e3127c2, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x10, 0x0, 0x4}, 0x10, r3, r1, 0x8, 0x0, &(0x7f0000000800)=[{0x4, 0x3, 0x8, 0xb}, {0x0, 0x1, 0xc}, {0x4, 0x4, 0x3, 0x5}, {0x4, 0x5, 0x4, 0x8}, {0x5, 0x3, 0x1, 0x4}, {0x1, 0x4, 0x9, 0x5}, {0x2, 0x1, 0x4}, {0x3, 0x7, 0x10, 0xa}], 0x10, 0x1}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000080), 0x0, 0x2000000}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380), 0xc, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m43.033129769s ago: executing program 5 (id=2161): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @empty}, 0x3ff, 0x0, 0x2}}, 0x2e) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') connect$rxrpc(r2, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e28, 0x0, @remote, 0xe}}, 0x24) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000003000)={0x0, r3}, 0x8) 2m42.868200037s ago: executing program 0 (id=2162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000001800000020646c2500000000002020207b1af8ff00000100bda100000000000007010000f8ffffffb702000008000000b70000850000006300000095000000000000001461ed5dfae9ede600"/107], &(0x7f0000000180)='syzkaller\x00', 0x6}, 0x94) 2m42.845730965s ago: executing program 4 (id=2163): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000005000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00'/28], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000380)="bbb01184a1b2214265df30e13a6c7f294ea169f66ef7e1482e024c7b08329826d61b69030d38ae16897342229ad46c4bb7a0c9859303812643f5d00a48fa87c422f6b9f9dbb8360f91c303323ba30642fac002663e9bce0fabc426c9c976bab664b820c3427edab13257922a7a3b427b62ebb8a49cabefc3168c5424510a9f5f35f1f054900efba040fc02c58873b7fcc3548cf7dfb9635096b3959179966e2cf4ff8145c9148132525e8b3ffea291a99e5f8b16e84583", &(0x7f0000000580)=@tcp=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@rand_addr=0x64010102, 0x0, 0x0, 0x90, 0x0, [{@broadcast}, {@multicast1}, {@local}, {@multicast1}, {@local}, {@initdev}, {@local}, {@local}, {@local}]}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000300)=@tcp6=r1, 0x4}, 0xfffffffffffffebe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x20000800) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x2, 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) getsockname$packet(r2, 0x0, 0x0) 2m42.496371695s ago: executing program 0 (id=2164): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c009900fb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) (async, rerun: 64) r0 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1830000001000000000000000300000018130000", @ANYRES32, @ANYBLOB="0009000000abd4fbfc00"], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 64) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000020000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000002000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000300)={r5, 0x1}, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 2m42.389611563s ago: executing program 5 (id=2165): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000251100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bc0910000000000055090100000001569500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b5020000020000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100004006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYRES8=r1], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_audit(0x10, 0x3, 0x9) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x0, @multicast, 'tunl0\x00'}}, 0x1e) 2m42.102052654s ago: executing program 0 (id=2166): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x812) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004081}, 0x20000000) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc9e1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x810) r4 = socket$nl_route(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000300)}, {&(0x7f0000000340)="6dd87169886880c14ac83a90ec5c6dbcee22d565d33f64e8c886d02022b14c3f61e252ee6c97d0d41e3abdacdc0b2ef0d100ee555ad241da03a5ae3843d8a333152655113c276ff3733c224405544cd5f758a204c60d0d378262ff9e01229938b6923d7687e7ca4a96141cb5f3f9e3aa60335291b5d8df33137c3ca7a5317f05dfecdaf59068c33ac2ad5f93c56e4cb3ec3e4d685783d6bb02b8f0", 0x9b}], 0x2) (async) sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8800042}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@bridge_setlink={0x20, 0x13, 0x20, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x20228, 0x2082}}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x804) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r5) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) sendmmsg$inet(r1, &(0x7f00000007c0)=[{{&(0x7f0000000680)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)="eecf8f8c447fdc81cab70e7486afed1133983a757181a470248ff40be9b9705cc1576ed83c143b58b497ace48f9dfa271331facd77d52eaf6c6c111ff4918e99a9538db57e", 0x45}], 0x1, &(0x7f0000000780)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x79}}], 0x18}}], 0x1, 0x40000) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4884}, 0x4004) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000044) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a00)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x10, 0x3f2, 0x100, 0x70bd29, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x8, [@restrict={0x4, 0x0, 0x0, 0xb, 0x2}, @restrict={0x4, 0x0, 0x0, 0xb, 0x4}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x1}, @struct={0xd, 0x0, 0x0, 0x4, 0x0, 0x401}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x80000001, [{0x9, 0x5, 0x81}, {0x7, 0x4, 0xd16}, {0x7, 0x0, 0x3}]}]}, {0x0, [0x61, 0x5f, 0x5f, 0x61, 0x0, 0x5f]}}, &(0x7f0000000d40)=""/74, 0x80, 0x4a, 0x1, 0x2, 0x10000}, 0x28) ioctl$FS_IOC_READ_VERITY_METADATA(r9, 0xc0286687, &(0x7f0000000f00)={0x2, 0x8, 0xec, &(0x7f0000000e00)=""/236}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001080)={r7, &(0x7f0000000f40)="6ba36119c548e94b72cd9ce1685b4a34f8b535301cb49718b06d0c67999a8a0c91d805fce206cfa998e1a1644862b9359862a6df4973697de0921c2bac1f0d4860e4e157249a3b3595bf601a6f98edba735f551db0f228db8d3d363f80bc94708a1668f7073a08cf88f5ee3563cb7a14700b3ee538b11ec69abdd42306ea3e4f2ab572d2dd3670423a10e6cc2c8019c8d8a0eabb62c6a51f606f712ccd5424b6947ea5c7f1c3b74b8533062ee066a1fb4799", &(0x7f0000001000)=@buf="a3591a0e8d798cc9da977641ca25d5e7552c1e0051f141e9dbc99efbed4709315c4d902f3dc8cf260a53d74e1bbc0671858e5a9901b6f7797522528fa7bc83ac53331d3042194bb54a66e9027060729d44d42b94a41c88c82ab086728ea60f0d0f65d7b4d8b648c443", 0x4}, 0x20) (async) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000001580)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001100)={0x428, r3, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc1, 0x3, "5c7f682cace14bdf6f4e1fff364d87df2ff32f07e379391f331b4cfaec2bd2a33ef4be85d3ae0362703a1e94be847a4317cd1168fc6a2c4fed757ab0183bd21790cd128d9d28313175a888bc78b0fc3e7b178047513003959891bf53f2bf9f8a1094453f14d1152393235894abe641dcd843380754d59a023b74641fe2a72664e33189a37609adf7d3b4d254c2a7645d4f98e9212564ca8e657a1cec47ff343fbac92ea2e132762eb76d79e2a7205831cb67b858f5625eaf752f1c4d9f"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff9}, @TIPC_NLA_NODE_ID={0x4f, 0x3, "5b5d144b65793dfdb0dcf7d74b5012474b8e568e023f2aac487ab11ad01b3d89d945802468086f5130420c211a0106682420698b4db4a263125fdccb6dc98ccfc5466c577147541ce13d1c"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x955}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xa8, 0x3, "ef2159fac015998d02f41a6092f24b2fe95653f54275dd13c8c02d0df9b133583a2cf1db8b47cd4b93e8bff678ea2ee43cde33529ebccf5e471c5ae4543c174861809f6ddd55afed256e502951266f5f24dcd8558d785b54c0dd13d7df40dea2fca30c150dd24a42c4dac863caf04806219d579552ecbb923cb2229e096b7845cfa031fc8de385f96b4ec988d30d7f34e1799cb18fff0b7d34f08ff81390b1c6bbf9d33e"}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x241}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80200000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4a5fa49f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}]}]}, 0x428}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000042) sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x70, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7c2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc2dd}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000880) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001740), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, r10, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}}, 0x8090) (async) sendto$inet6(r7, &(0x7f0000001840)="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", 0x1000, 0x8004, &(0x7f0000002840)={0xa, 0x4e24, 0x3, @private0, 0x8000}, 0x1c) (async) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000002880)={0xb12, 0x3, 0x1, 0x5, 0x1, 0x0, [{0x7f, 0x33e400000000, 0x2, '\x00', 0x4}]}) 2m42.006322761s ago: executing program 5 (id=2167): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000006d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/193, 0xc1}, 0x5}], 0x1, 0x2, 0x0) 2m41.689722404s ago: executing program 0 (id=2168): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) write$nci(0xffffffffffffffff, &(0x7f0000000480)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x7, {0x7, 0xd}}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m41.469242943s ago: executing program 0 (id=2169): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "8440e33d", "faa71d9800"}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0xf5e668d3aaf18096, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc00}, [@RTA_GATEWAY={0x8, 0x5, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) bind$rds(r7, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r8 = socket(0x2d, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000440)={0x2d, 0xffffffffffffffff, 0x7ffe}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) bind$xdp(r8, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3a, r8}, 0x10) 2m40.896561789s ago: executing program 5 (id=2171): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r2}, 0x4) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000040), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r1}, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x28, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7f}, {0x0, 0x0, 0x200000000000000}, 0xff}}, 0xb8}}, 0x2c000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m40.600001619s ago: executing program 5 (id=2172): r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001180)=@generic={&(0x7f0000001140)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000011c0)={r1, r2}) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r3, &(0x7f00000013c0)=[{0x0}, {&(0x7f00000000c0)=""/4092, 0xffc}], 0x2, 0x5, 0x45) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r4], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r4, 0x40106e8c, &(0x7f0000001100)=[0xe5, 0x5]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = getuid() r10 = gettid() r11 = getuid() getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000004f40)={0x0, 0x0, 0x0}, &(0x7f0000004f80)=0xc) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x10, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0xe, 0x1fff5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf9, 0x2, 0x3, 0x3, 0x8}, {0x77, 0x0, 0x7f, 0x8000, 0x4}, 0x1, 0x9ccd, 0x1941}}]}}]}, 0x58}}, 0x4000010) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r15, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) getsockopt$inet6_tcp_int(r15, 0x6, 0x5, 0x0, &(0x7f00000009c0)) r16 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000004fc0), 0x2, 0x0) sendmsg$netlink(r8, &(0x7f0000005080)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004f00)=[{&(0x7f0000000240)={0x4c4, 0x24, 0x2, 0x70bd28, 0x25dfdbfc, "", [@nested={0x1b9, 0xf0, 0x0, 0x1, [@nested={0x4, 0xec}, @typed={0x8, 0xea, 0x0, 0x0, @pid}, @generic="1cb7b8b368ec506d4c29c7d910fbcdb0cb6a2ee385f0d125ee9e1b20123f43e05df8483a3d702115d242c419213fe7d64091b8ae528a75825aaa9cc061962ce9d95fd4164d5fd422d2221dcd69b3d923830a2c3065a3bae589baec0d8494cb3e1296412d4a8ee0174091f73153259063308dae455797c903b813bb97437eae4c83a8d2e8971452198f72f1299dc12feaee3572449d1aaaf08ef22cbc339544fa84bc71dfa337108854f84f4a4b898d28a19ee5a3b6b9f076ac507e1d2daddb29ece3dc3566755ba888ff0eca4810188a2b4ee6e87e3be197c3e960903315a277ffa84e4014f465c4056d89df", @generic="31e9627b2b3ce9b69167da5c20af07be0d22afa8eab59df56d97512212dad4fb1f8de5001310ec25763c7c7963c6857f78e5c06714d2394b14e21755b38d9407934627d67ce331100b1396d09804f24793", @generic="fbde759e8af84d4d594dea469771fc76ce8dc63ccd0e85c229b7db878f96094ce1634333c09d8fd07246f3c29f14ad4e3d1df21252f0fcf38b6fe628b51b20cb8124a9b435ebaad0c22f004b6bf9199de7fba675013281de01a1c2ed23560a6b5a9f048286e16eab54e8a38b"]}, @generic="4a00b88ee9d5c8c815c1bfe0776fbe736ee38c45be969a4ac4c494c47da499dc541daf69c61b4775e15fd6fdd43c00c7f61e1b5f7b2df83d84977c38c20cab9a8ea627c45ec7c388e8f755c86ad1bd9c30de57edc73731ce6b2eb0b53d1b613af69b7861a27273f6d8d5849b1ef2582da08af1a0a24a1dd6b9095b06fcc6f540c36ddff303a31d5c6538e21b99859539dc239fef18acc55dddbd6d1a43424e44baeebc013b05973c6bd6634f2aafdebbdd3388f7d65fd324848b53f9c4edd2d13569215eb9afe3b189d420985de78bad3e07e594b41615cb57bc6946d4cf1e0b9a2c0edf876b31585bea24cacd30eb", @generic="47234f4f48b57be5712d833ad1fd59e90c40ce7b30e9b4e29d4b42059b43cf614049851b28ed5979f14c8ebdc7563c729c9f0055d919f911483d97663cae2f6dad225aefb808a5cb4e0c6f18da1a71e7ac0d8c38618d817e1c38aaa2afe3aa16fa2014a9134c161199f3ae0d88778ca78aa76be565dfaa941a93917382d6969e2377706dba840e6301d2820671930e384edb00337e3278310804553ddaeaa587734d7ce34bccad96224596c4c27ef06e8b7a4c385ccd1bebdf1dc22df7ec3a27860d244ddf6c378b63", @typed={0x4, 0x154}, @generic="bf0b1d494b38b46c3d77b91d1a476ed9cabcbe4a1a7b654d1b0812eb3835b2cfad93a924255b2de0b91c9ff35c20419cbdb2839cd8cde67806233d0a7c7a79649e15301a879b1040c123ac53f74a9a80228d5622513d3d118b0e160e9512180fe2710a725d466fc384da64640a61db7e61e223309f2e005c917bf5c8215878cab7de9cf7c81bb8e1210519367ff3895e91f9e363a5e4f5dc71290ed5f111636c81f65a18ec483e06302aa33f5998382b50d6f44507ea92b7e39be3e560d50f82ce68b22997c908f97002c9f469cb1000d86990cd4cd1143f6b", @nested={0x4b, 0x35, 0x0, 0x1, [@generic="5b53b17d06c7fccba01d382368ed87b289287f9743b841bc26813ba86b6055d2f313508d10de62ff036eda57198379fd3c4edcd1c8a2af9c38b3cd0412a6e05d3933282baaf9c6"]}, @generic="688265266061c41d24f2034386d01f579ae60c93"]}, 0x4c4}, {&(0x7f0000002b40)={0x11ac, 0x10, 0x605, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x14, 0x99, 0x0, 0x1, [@nested={0x4, 0x2}, @typed={0xc, 0xf4, 0x0, 0x0, @str='\'--)&&]\x00'}]}, @typed={0x8, 0xd7, 0x0, 0x0, @fd=r8}, @generic="f1fe74da8044a16762da4bbf886631f1cfedea9d404f5f3723026a86f281e52d146dc0e382808bed607a278c81455df60d9a9ecbed99e7efc738175cb15c165f3191bafafe8cab29fa96391b521b428fa988ad3c7998a4adf447cfc088106b0458abb541be0aec4ab932289d7639d1e1cf778f8202146bd7866b84f8", @generic="9dc8a96fed4e9009724aae403155af564b93c490eb38ee561204e85213418720a465192757531cca8a2dad886bac6811145b2efce2ebabb0b71c536f5befce03b507398fcac4a1c3747fc56abebcd420a96f744f7949cc84383b67846c4e16dce17009305ef92b4f4448d7580c7629df021c421bb3f883ab61ea3d8c2ce1d93712398fb19ccd30c63e27b022f2848e454c58705f57feb0e3d068bf6bc6b45188896a99a5c93a38177af005236fa02801d9b773ffb9c6e52570e33dec519b56376f597a1b94250585302dcd6841fff0b6af985de291ef449496bcb179d4ff387b179e2c5715eea3306eb6edb8d18a7d79361458831ed28c56be5ff99d5c6279985ef723d881e0496fbf8903724cf49184c3d6ec115c75001931f2e2f1f97211d6d8873c2ff1410ae26a6292f83176408a8f7fbd33abd151581867fe762a1b48a1c4e15f41a3c349e5e3df47fd68216fd47e2d084ef74d29c723d644e28fb1bf17a7798fccea5f55603365f5050e1cdf1b1d49bb3f03dd4ba4908f3cc9a30343153434416f7d49333bb2b53d1a6ff8612da1f470a92d39e682aaf0c9cd03b60cbd1ede1f3590036905d24eb1d078261b472d1cb362b691e26fae10d8cff85757aac3d2dc156013ea9250700208b7f39b78b73e843dd9fd1dbd72ce44ed927deb6ca7ad0d3762d590abf7700771023b302a4b0589c997644dda54702074aa5270ab8ea4d43b069e5e7ab73887861fa2bf70a5f895eec61bc73936f7a16023a80bf1b65490e610e9212a13c82bfe4414b5a080613478a989e5b8d7b131528141e244e23b34fef2b5bd9b124b8f9cec64ed29703c70e243b72f206c4f6440c34cc70d9c289df69d87569c12d11775373f070bab6c0a7a05d8b667641bb70946953d84803771139320a7d5d13e18a8760c1557716330245b29f9eb57052598093dfb1634da833b6ecffc5b016f5b8789d7d7b62c932d987e5d87a2403ad21e1f8f03fcb7374d125be2e126b88569e546213659c605ee900de4bf4c7c8dfd2ee9902aaeb246ef200a0ac45be523f1367120c338c4170d643513b86114b6dccd2553c3ba94e5aa5203cf7cc8ca59948f14d353496201a38e02ecc4ce5ef425d82176d92ec91f142a14cca0f7660460e360135fba89143621d6547db7e6c54200fd7c90cd3facb84a664dba536ec56903ddffbb19593bbf53d17e0c7cfb0be9ebfe65fc4b219315f2c28d27eeaa70c1b03454d18ae38839f96c9ea1888ef5c310e74815e092e79bfbbc10bb20caf614e9808720cc033d6a1ce4e479c03dd0b443c4beaeda38d0a4d3e7a40fddcb9e038dba79117a443d297a89989620314552ea3849ef7f30bc5f17f7d4bdba073540e13afeaa2145737650efa68772b6f54f0de989376b8e08756cd9411f7202b9a86c264abdcca223ef1d5af18c6e4baef0f4ed7edde116e34d9e679f188bb0c58654f4409af1d7474761e3e63f2ad8a3298ce76c7d171c3f1704a1ed7f143f60fcdccbbcef906d4e5cee28318913c5abf1f2604b800668964b98f666007428ed36443b2ea7dcd2c87650aeb4280ec48e3914554daa49bd2e77c5f230f8c3b48291088ebed5a244b782db0d8ac65ee64bd0e5593f4688df746f4ae28dc8b551baf308259de99541c75f4585a1c892d1fc49962a62cc0307383c5cd2a2808b0bcc6ca1a7b1e81f17a9b3e78b17c57b2c2fdec6da8287aea2e133c602df34a9f249ba892940549aeb3a3765f0ae3c22d6bf3f867778822a58b7870970967c59b0cf9ec51afee0a8cebe2cd196d22c76772752b1aa2261f2a6255f5eec574c8ddea6367accc5340a74447cccfbef4158c683e3a6e3f83d5128245aa244c50df8b041896fae1ec6441d0bcf24e86139fba23d8fe66cf66ba2d75c6f67f8ec8c6f37b6e263132384451e76fb81abafc8142a04bb5c97ffe93bc17d1a7a1f2b7cf268581e4ee7a9970c4b60bc79b2b6ff56b8d95bb37f68ed9fc159e297a7ae812d63462e30f9b8facf9c1595459f6044af7a93baf185b66a2942fa11c6923ff537573bff2695e67c253ec68b0edbde1f7b97f4b76a06a3fd09b32d9c7575b30570eceee0131bac0d6a37dcdb9f64a368c39eb659a2d23f20e7818635f375abce0718eba8bf0d98448668c3d46cedea56b92965126284c8d9197973921476a5aff7157bb50d2bbc9da52fcfa0e8f682787ed330906fc3bb4464c7d45c74a1b8aa498e06651ea48d1983c59e754948cb37c4edff4f72f8e689544c9377a86508d33cb54aa9b6302ac20dc5c679c958845bd81e28abd0e1f0049a296c146320c43b79d9b159af9d31f0c08308dffe605f55559691e505ba64c0b34c62645e6631ca3fb6b4b627706ff95aee1e470ac831c147d854398f7c79bf6366e8ae8cac9fd46d9cb1d7f5202c923cf1b84ac07bba4eb9c6914f55743f303954b58c7e3ed3a2d3fe28fd4528dc4642c03508a9ff3c12ebbcbcd339536235ecdea726be2d2c58b97e92bf7f3fbcd561aee1cbba953e3ea0036281d322da9b4cbea520a60f6e7562859506b9136ce7f0c32c5b1e2b3b21dc26f442908fb26a3f876396a3c72a2c6bc78dbabaaf1855309ffe394c22ddda8108cd8ddc9627b8723a4ca8e6e0c525e7938bc56970d98e581279640d7b927f4b6307fc54d8921d693324246521a512397e54a2779516fb79dfa5390f53621d02fcbd583ca7da8319e5ddab23c36d5705971f00932380a9debe1b874dbfa02c6d7c459b231edb11d0b65d853ff755a0f8febbb84cb200beded9626a5a3c75b4ff71580d6ef4096754ba0c3269ebf8adb612e4df36ff0b4c7b9a102f3e343e2a5aad59db7dae157c079ba2ccb05781697532ebedccf24d31d10174edc51e72dbd34c38834436a9e5175cc0a85efa8a7596db038816b99e00d9134ab4fb852eea0c563d000d5d11759a1d5fa1d0d131ac0dca07085d3d9c1da21b6303fa4630eecb2121308dfad0ffd7b6d4f2aff8f1e4f36cb18d9b75dbae21350eb896d0377e4e4da5ee493149f207cba58ddab32a8995c61915281075384c39d40c1be89923e56a0fc46633da7bc24d3b19dac8fdabac0861dcfccac15d48b85a27f4effa324505e692f979add4f57136c3ed5593dce2b725fccb4ee1e8d6972f26dec4522dbf20a98b993cb79be74bedc58b1e78ee8eb1ca07aaa0e5caea5c990a93c8414d4448f7ea999bc0bf98deff6f9670ff7de00f64814ceca7706a26e2ad95e219c842ca6b7a6a46b2b098baaf019a65f3df7885232ea370c8e6d7d0a681231848443b272a59fc56e9d8548f9fc8f3ce2701e835548229e9a35336d02608a10ce31c68ca9e415bbf7289fb49422130279fe96d5de0a06f4ad032aeb9828f87ed3791e855ee84af7510286dc755b5c704459903e4535f01b6193ab53326c3b916d507b08908a9a5db7bb5bfb0cf77d4461404ea7325ca737e880a1ac086883bb8a27fb47a963e722483339894604007b914e2c5d0cb4f02d20805e76ed5433e7fd5de40eab479d45e6b4a1bfbbc954883d78cac13c32120b037307b8d84fd18ed3c7aeb4b0907af8523feafc808bdce011f47e563488b0e1a449e7eb4664c2f369d6cf926aa879f27fd7726c8ab22a5ea8312c6fd82b72d6a05908afa240a3e0f19f351d1929223add81ca0e3030f6d1cc5ff562007615908a3657265bfdefd31f882af4211d1313f66abeed99cd7602276584f53b86b33a9f1448a70360840a2037336a5e125d6192fe88e6e61e1891262cd6decde053d4e75ea3bb87b503af5ee52f040e560bd122bb35714d5f794eac2e3d2b79166e642f81dd122b3c9be0534df260ca3b3c4447d60c1efb336802c9d96ec650731b34ed3a468a74df6103e37632f6bbf15814cc410d18dfcb0f769086aa559ffdc8a4a96b884f008d77de1a6bcf7bbd82a54fa2bfa7db6a65fc51698e8834c2706d270e36cb60aeffcacc833654dcbf64105bbee3a10b47753a2c2137f241f2276d5800fd40e56ef8ae7f818423370881cf4e406eddb77c0af29b6fea7a41cd83d320878c3793aee96d8ae6909474d0ba0fc19c73c4471d4554ffcaed99213c35dbed8afd1d1d18632b979ebb823bacd22b2e5598afe3a72d06e33817bf859d484969fff06b834f085f9d2569ef59746db5c2726ca79db806e1f61f7d78744c30e4a616562837d1d760478062aad70f8ed2659cbf4661344e3f05eeea23d07ac13fd94762b1a447f3b23b8be86ecdae9b7a7c476406bbe5c14fb56d83b4782cac0cb9a867a43f850b5c6cc70b8f4ae03a5b705ff56685367dd1d92e591301d854ca8dd0446ba043fe21768954d62198b9a2b55a37c01174af6b5c1abf836181bf8140dc1d6a9e5f8b6d277a15369d999f7d541cb2bcfcaec370dbe84c556f691a8cc2c15817a6074d89d6530e9f3ae2388c35607288b81f7bc98f8f54f6d90d819bb41b846f0aabe038cec69a8003d9b6384bb4fd6997df42c1d3d8bb2b5a572fb8db776e3852345b0e08727d24d8becf7326fbca0eabc445da1bfd1adbefcf99fe3ff8d982f38ba7d9f18e4a6199816f44eb00d543b20557d997ad1567d65dc2b96189d56659d1c8486f3d124471e2c832c2d7c049a7c25084d85852b72cbdf27061caeb1f8e60e960aeaa8c87c2ce388d3f74ede8f19efe59f88b042708615eae7b022d1781c1d25e252720c9dd3d04a90263dc5356e3abf0fb5fe81b26a4b3fe8fefa0c234e0e5b35ed24db64f52e9d45d81d9363a595f020dae247ad69b524426bf94f1cd7a16a18b47b7c802e20e5a3f826923821c03aee364db4351bb4f6f8a6c2be327b7ea385cb5d431b63d2ded5a97bc8fa68fd60c69f6b8dc823b471e3948f5e2d8808db24357fbf223ec267df93a5515b45d36e66de2fccee25c91e00aa3235dad9521d0b0bc918fac99df5b9ab3cd10a048e097a4ef176baddf5d4cdfe81df25c2520ef78433f4104b878e11f0a29c91d76e8ab8076fca7e1ca3c2232b3435398b011edaa4237bc3b8a63c4e2ce7288c79552df801c12f0c3f3b2de93959d25cac8ff45ea6b25db368733c43b3a489e4bdff0e83d0f4af134ae6cddf0651580ab4a95e77cd3beb5c9b22f2035f3e65ca806309b10d286b5e2eb5f937cc53618bb45a5cbc9193d6f5b10e6d2942c162a383b4befcfe45ab99067ac9c2a83ee1977703d8a28383b0cec1b6df4b9c22c4d57d72336531c4935c365ce6eb978024aef31fcfd867f3d466621b89b2aec05f2819bf1599a9fad6b5b4e68e93f41520b2d01d71d397c7237a12ad8c7508d3beb7d196ea15015b37a8d3e3583672f12c7bc8081af5e3f7f2b45640798f1cd41b5c19ee6f4b8336e99a8346154587d427bfd6874f12dfdabc556a14d531dfcc1ef17de8a3deab51e277bc588a3bdbc5176147f7f445dca8dbc823348adef68d94f3b12a296e2ffc30c38f940a54e0090a270141860255f53bce3fce13fa5c0becd42fbdf7e3fdf8adb63cc3280fb110364cd9166df45ad5a49841b788f085abe27a7b99fae46cd4035d0b9bf51e4c133a7ec0a897106f0ae37e69510bef006e744fd237128da105351b19009fde45a94613e3d9a721890c28888ad3a2be092ae4c944e33faabbafa03d1c865df4abfedc37ca83d8c914257b04d69a8a86ba874d41720a0ca7214bfd3e2f08a63237c6053935751cb67344769a7ab1b802b23aec957829ceba6170c01568c7240e1f7a02a365f512a5cb4259275cea26a8ebd92f6d9344ed2d42abc9e21e8914806415a6f8449af4afa7c44cac14b2113577add01b", @nested={0x94, 0x122, 0x0, 0x1, [@typed={0xc, 0x104, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x9b, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="bc665d781255f6d99db0a2070f6fb589e2e4d46ea0c14958078f0a6ff7a097ca876cd047dfa8c3d6f8f77ece2c68041f1d2d6537301141587829f930afe0c88c61d13d0c03fe1cab74c676ed8ab44af46a573e830b6e126ab69824a0a0d03e92a5514c8ab0a0b60ea15fec8880d60fbfbf827fa05c32c59c", @nested={0x4, 0xfe}]}, @typed={0x4, 0x13e}, @nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x69}]}, @generic="7a8fbba0a1f80d0eeb7d1bbe0b8c008a041785f56525dc90aafe1d5422cc788e2fb0f50ade6c208f6de98327a42899240945543b2907b9f937871e5d7b32cd45b50ca5e38bbe90c360632dce1f3c7068e59ed9682f75de6c4734d00b4e83c25f792c44"]}, 0x11ac}, {&(0x7f0000004e80)={0x60, 0x36, 0x2, 0x70bd2c, 0x25dfdbfc, "", [@generic="811b86be5088ab5a2b67cc0535d7052d51c704d6d02ceee5e9b077d19e12613994ad59aa2fd11052cae751812adad60b9cf0974a1ed79b88178b5c8e1563804df62eebbd4b3ed1326324c91f033a"]}, 0x60}], 0x3, &(0x7f0000005000)=[@cred={{0x1c, 0x1, 0x2, {0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x30, 0x1, 0x1, [r13, r15, 0xffffffffffffffff, r16, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff]}}], 0x70, 0x1}, 0x8000) r17 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000001200)=@abs={0x0, 0x0, 0x5}, 0x6e, &(0x7f0000002480)=[{&(0x7f0000001400)="785dfe86e8ec8a501d06351126adf1aa896681232d4a9c2414f2b85d39233f7f315409f99c16bc2cfac29c7265f279c8bda483b31d8b56f41d4f398904bc945e4d8d52cf0ca6d2258bb8b521db178b9a1edf62f40b5b63da14019f3e0b2f314bce81f0caed140e7e3a15af067d425018692ae220723fe8edfc87936e7457b9ccac2be406b974223958fe1af539662b73d2b14d4728800fab57de5a8c8626ddbc0f059f2a45f63055ff61003e3f83ca6bc3376ee48e9574d0901579346fa258aeb02eba4ca76e62f532601b473ad7a37c57c4343243e576446346fc167956cd0b20d9a3fdd5a7951de1fb6f76cd2fd6facd346e3a80ce60a8baa496f3fbf5567d5f748f0d0d354b639ac686c33740a785fd5eef13e12d719c9961888425595f403ff942e9f09a52d0e7fa873aaf65a5de18ba4c0fe46cc33c7ee4b31cc8cb7d52c1822e648791ae9f21a3bdfe325405f962134ab2128d5a487394a83a67d3faf35b3b15957de7971f4ccd7f8d4f5708ffe8edeb23a69e053f6bde1437db4f1b41cd13ff6812258ae586381164224adc06bf5155ee06388bda674cd243e5ffb2ff9eeabe70fbe64130041824e24aec405055aad815d97ca8bf27d3e4a604dfcaea9ce9de09c2f738e8cad079cc85bc0f8637235f5e3eac61cc45853aae12fb108979dfe8c906bd2142fac71db30f2b4c8f9d4e489085fba97382b00c16806e97dc0870430710e5a86e3d50d0d9f3594cfffd4c7eb7951dc42c722c28f041e58edcf806c29ed26db41dbaffbfa021cb81cd829aa6e7e47390d1dbf4ba19743664204064c2727be14509d8ec7274184fdcd99eeae182154cc6c316481d1dce0dbc7e56609a329f9cdd774fa8a6cfe8587d8459dd5f43e01a0cac11042bb9b18fd73953f2e6873963caff02075179295417d8e651c71cf46919a835bfc11520b7a82a9311206295d95d17921c6ead5a709ad0df01dec9cb5ec15531a45630127b370fd14675c529e7fbe2d4d6da62e954f734147f0a5048abe5346f5d3fed233f89bbb21b2a19d260e6bacb5f7b73143d6ee23ac626104a156979205453a3d9ece75c953c788e87b551a9d482ef4b994bd95b137655d29c84b53884b6853f7b4c08fc2eb7992626f813f78c8e7462c7e462e5a12c39068348b11764b71638f7eed6a2a725977c8e799172cc4b6b87494a313254af9f4340db89ffae6fdf6d696ecc3c4e2ef8eeb760af60899c0c555e7693b9dd45747b60103877d8d72dcc294898bd7d9cc64fdd32eaf4a6993fda1e576ef0f3a001caf4fd9f49e3b6241a45a7a7d85b15b54fada3083b4cf2bef46a25b10b3edec432f0ef21d0ac3b57d5805464f60cf5965cb1637d0d22b131a6871a7b20fcbd691b632f2666c1e80db5b10596c54813e71d75d3906c6c81c161370045480c080a31515e3b4d069da26072c73d0ccdf93722f78b466e9145379e8f1a3d3d066d51510b2f75787db828f32a64357644f18017cad56c8009fd830bfc8bd240208d15d8d387c4587dc63d865ed86ddbc589f63fc3a58bacdf816a2563447d74f0f0b61d7738ec1323d861ebf6e02639a398b6af28e84ac7507e48d3c7b56eca89cde58d0c7b8d228db28c4e3bec538bbf9fe446e8142ef37697784e97ab161a572484abc26e03c5e860b3b4118377af55b6127cab39077735562a3c69218045c33c97cb9b73661e846a108c0226a4076cd81163cfcd677079520b402dfed9bed36b387776bd0f8f124e6be3355f53ce12e345a37e2e2e286e1362370ac9de7c170f2fdc868f7cc62c2e96e219e02ad9592d6aa00aaf75ce6a744afcd10d971c0dacc30280b8e07712e875491ac7290f837c327b3806124a4e571b1248229949f54e42c9c2af09dcdd48eaa74a8546855b4ba6e839b9428fb8f83a52c3ccbba8a2ec9a40552d1eac00332544114ba012b0687e3ed3c9e1c1951223fb36cf3b3ab0f86a5333dd21ce7dd6bec41fd0b29c8222f30b861f731ab0011554329dd2f4b8f8a6688f9a2c92aa8dd06f3c6e4dbd40efa0122454e0d01153e8fcfe42b6cc5ef4f953583538b5e715c493aa365ecf74bc2b4e2c4ad4efba90bf6e0395df814de153727408454048a71f3588c6bb565b9aba15a961b1b6295229893aa44f476e13ae39a01e7812de922da7dfb1a23992cc5fdd7f8fcac9b9ea230007caec68b81e605a902b802109c14aca513503a312a4097466fec60329448efd6495e826cced9796aa5e6dd4325c0dcc17dee8e15ddd6bb79d531c765d9fa922a790cd538d667cf8467407492c5b59ad1901d888a2d90e91cb9b9bb0f138d1b55e4e88a77f02ba8a6e48415e79be064e5f6c46802c30103528a05d2acb01e1ba4ff210d22998fbc6934a78f0e1ee87732ca079977daf386a0d1a460c1415b233b4bae23dadf70c184a116703a9723fdedd257b596515a3213ba2fc88342fe98c491900e79c594a37cab96c61a147dffa5b56219f2132273c86a2fbbcd8c0f5b6e09ee1127bdf457d83ad279a17dc063a0db253a4fd818f5a72a796ad6909ce97c960f766752a97fa51e5ad4e34c9772527acd25841c9812f28f79cfa73150277c82af3d60f4a1b7f32768dd8519427c45cb864fa0a119016c5d887dce795941796f55bfff18cbaf2471a1a48a5f481c303d26a2780f80686a7bb4271be77582abab01ee63565dc8f49ac13ae986782eb7d885d0c24b27df29181928fb694d14f71f9b53bcf6efad3e4327c3b72b5a82c3f95776c1ed0803480d6d930e81b404b3fe8491b8317ef8d972cc646403a59c37e55cc93a62b35dfe12cd2fd16cd6d75ae18602c51cf69d7ff5c707a5ef2f4085cfbb5830a8f65d0563dd31d62b69b11982d4ada98c79bb6d6b335a649a83032252d5b21011bf16ad1647e38edffd8047cc47eb198f7d4e88fab5c7dc32d9c79cd282f6b22a079c44425d568dff3377aba062d2039943bf5386d38e4a1934a8a3e84814f70c960c5e1e42cb62a7b1e6268acffd30db84b31343deb666e153d73c9392eeecc5069398111e3d332c8f4898def3b2245e05396b228dc4c320842a960bd54308b3eda428d0faf3cf22664e68165af2af9bb482751fe55c5ecc361e82e59db13193b26972600a9dadb1cd850bd0de905d29ac8c7a8871f068b42c8594c1871ebf491a9bb2833dcb77f11f0b81207fd4c9561b5a327228a4cbb1d1bcde2f4998c5d610492775d863b7b40ad43fb6dcedf1b0556f91acf2db50be92ac8b211c5c889d031a8d11cc04abbfbdbe4ec086b08190e343c7c396727aa2cdeb52af81de3c63c19108a8c3390adadb9e592ce10cbc56cd7437db18677b0beee93d0dca64e5261d0c298332a10a4974a2a291f96fd2eb647e472097e449330b52c14bc50fd549d12bdd8caeb546f3dac06d3c19fa318644bbb1f2f60179ca9ed1b3560477cecc6107b8e4e22506134800ad45494637aa7be0cb81be801d11aebc09fe560b93c8ad20d00d9da3d5a80dbf8de8a59cc9fd32d6db140484fce5ddfdb2327346afdd9207082ebf8dd7de46c820a6bffa650d020f2673be1741f02fd6d41701321fe12544724bab240e18c6c8cc6983068fb5734e9c4f498f9f1246cedd973d9ecaf9b3ad6cff40016d04c3569b0fb2d48e0795ec8d49763008515bf5a39b89b12344eed15684f367ef418a28cce8b246fb33013186cfb079283a1b516e148511a5b2a3d2e8151cfe82d4cd087c01bb63e15ed18a676ceda73b8d4c96f578541981820201848f1416c436c3531f0936de9f52885a2683548af820bb7792e032cc24491288fe0f597400bd423a8226380811127bc48e9c632c4e4acbfbe8f56a3052dda6ca0f0e5d2127cef7c546d9fb86e7187bb064aeb3f495297f4a4310c78251d090dae7f95147b17c3e66dca5e49794a516fd3995f382be5bf8dcc405f9b8ae52b13ae021778d49b83e97fd3f09b0ddc463aa5457a7f9f0443759ae6a1ab4aa321ee5bea6ecf7415ca7429fac278ac877862e35deefa8c5898a6828121e721da893586fcb14fe21275ced26136043173eaf21538f39bf19b10e58581671781d1b8c28a76f33682d330e4b184b0276c20b22357fdaf06dbd25714839985e4400f4796e9c33618966f94b9b578c38e5aa74d5c9c52b018ec992221602a0d7634250e38102f9cc6f55c3cf14a483ecef22f1bd5a541676c47fffa67f485c8b1d3e2e2ea557c14d6d75b2ed6e8dd2553d1bb75bfdfa96f2a6543311c9010bd9c0c0b844594d13640af87fe9ec765d1b0918968c42ddde0acb02405df1ccd12db36405bccfe21bcb0996066ca6220d4c31631a337ccc9ea184aee8744886433aad798ae543a7f20b7da1fdf3b53243f6e4a1dd08fa09c33bd9dd1f5a597512e2c7685a8e8e5ce56cc7870c51bb0ed80c837f2fb7c9cc2dd256ee50fe3104275570244c73117d0eb337d7e089dac1db2d012d906a2877f0fec28a7401dbe245e9cd7085a88f24cfec6d62708c1c57ec6cec4ba6d106b8126369dac2eeef36e14d5c2a89563c5eb882e0d053caff0eb4e7d2a643927a50b362f49971152d3929a592a1c6c4a57f711509a93d08128103b07c7c1fb89602356888fab249d2e6d1ebe6cf1dc8e07d0eadb6ed179630c237ea792359127aec91ae5c2bb3e78cdca9294f523b2f8a5227520b88548ae017f4e94ed5dfda3b6c4538094461f2459b9c3d9f0f19e4328b19bfd953a6adbb1271ca11c5e54b59e26bf6a097214836d609d648b542a7f0e35b0afd561b76370f69ba877c7f57b81450681b238fe915c10890bad6305a97eb43bb1c0f1ce8fb701de8334497e6d77914f8a38c0f4a2834ec8fc7334c8618df54e8302f21b6a17809c0a234f6b3de6e1478a1f6fcd8a43e765e7a84eeff40c1cd00948137a015029734549ad9bab9bb8877aca1deac1305803d04ee326c49d9942b9027a7cc3d783ba0679dc40c44806fdec23f1a8531baef47c160e58e44c963becf72365da16f2fb7865b94e78e0b7e9d77590f3d98d1a9ab2cda06ea2574a8f1041ffac88c00b9984c310f8573a0c8ebd20b2ec3d33ca312176cf48521fcb9b2adbc21c08027f0c959566b07ded98db0141c656fbeb6fc429ada1a4e887d5676ef10810dce93e112eeef418575ceee261d3da40d43083d2d1e9d294f39c3df6a0e1180361b231d39f3d519ad17369cd85a0483656f3ebabb51ce39db8ec98492aaa17fb48c7c3bc131a44c368fec0b3ec54f898b3bb46ad1390cc37500c3caebffae48b7e78c4af9ddaa3ca8cb6ea423fee58f78a43c681768910dfb27b87ec04f9d2ba97dee32916aa5485ad43ad866a6042973ae7351f910fd465331046cdd4142bb36ed1e17cb936831fc36672ccd998261258482ac7be21fb1c146468e6f6dcb13fe4c5dc97c51706c814ad8d7ad9a753527f1b5a65c4a1305b504f4b5c2850f034154d6fd1f9e27258a87576532ad600604b76213e798771f4b74ed77449d2ba2a621f6a16565f3fc852b2a1ba2a292f80dda67cd30651a0edbe7ad10f9ae61c8942547e17bf2fe6764bb8f0be8be6013d5c1a760bc490db95c3830f6762bf0b23e77d108dc81470993cdfab02539cbf9b68a96428486744c3d29eaf6f894d0c5b09aa57ef24da8647b99513bd60f8f976e78e01cf5d00e04d4940f29b0331bce7ae8c224ab6bf077e5644cb1224c4ed743ee5a6e09c4a72b612a39130895d7cadafba843f43e07a124b1457d0ec44e2b6f65537c9240725772be0367c14ed13276382bb6f106cbda6b8ccece2b013c772703cc8ade5a8", 0x1000}, {&(0x7f0000002400)="adef467c5323162903d561dfa0e1f5a3574c377f1af9434fc342ebe7083a57a43eb1634a4e3cda763d7199a432d5ead46f37afe9dac593b87cba1de3f7cee11f9c42b1fb29d6b841e9400097174af827cb088e2f4dd359bc0c85a08e8f77399616541b9a4d03", 0x66}], 0x2, &(0x7f0000002580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r5, r3, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r5, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r12}}}], 0x90, 0x20000084}}, {{&(0x7f0000002640)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000029c0)=[{&(0x7f00000026c0)="78dad349e226136cc7f0033fcb2e24c4ca80169269f1815661454b", 0x1b}, {&(0x7f0000002700)="06acdfe681749ca3e773cd8dc0088b1bcb464b7aabe4d221c6f4f9fc948a74385a54530365c89eef1a9409e07654b5e30257a53d0a3c1174d0b12a09719ea97464757cded121d4dfeb4272c7e367f2cc85ce610d0731448df2ec6ebcc0b4", 0x5e}, {&(0x7f0000002780)="9101aae3e51c0296ccc0d8e1d3f861239826fed67ad386e92249aafd", 0x1c}, {&(0x7f00000027c0)="cd40a6ca1699ad", 0x7}, {&(0x7f0000002800)="4e7254f16faeef95d758bc890e8e5ccbb2b7930df31b56de282e7b7a43b505c9552d05501b1645f5962c561d3a7f57ea7eb1a950a176ed96239fe7fc056cea4389ec0b6d65e98837cec4b93b23658f422a419973810d5b4ee7c886e739fa16aed4fa888efbaa06bc93ae856afb2d35822aa7f4299bf75c31fdb2ea19c50d84e39fb5fccb92308293037972d171fe09ebb08402d54639aba14572d36064a7884c0e4f1245a3d352ccc9000ecf027b5d26fcf20cd4362077d365c76b9c93264fbd23836eaa4fbfc1e59721be", 0xcb}, {&(0x7f0000002900)="210c69798d929638525ac6ccd0dc6767f1703d48d8828450f654ce2f487fd2bfd4dcc6", 0x23}, {&(0x7f0000002940)="e3ba4d8dfeec74cb2e850a46b8ac891154175ff77e266b4aef93eb0b3dec9d9c3415f95ab2398000c6495737a5c02450d69c81e70366795b432ae9674a90ea52559a23d1cb7b36d66d87", 0x4a}], 0x7, &(0x7f0000002a40)=[@rights={{0x20, 0x1, 0x1, [r3, r17, r0, r4]}}], 0x20, 0x880}}], 0x2, 0x20008000) 2m39.913153706s ago: executing program 5 (id=2175): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x42}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) unshare(0x6a040000) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x4, 0x400, 0xac5]}, &(0x7f00000003c0)=0x44) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/14, 0xe}, 0xdabc}], 0x1, 0x10022, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000640)=r0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfffffffffffffeab}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfffffffffffffeab}], 0x1}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x17, &(0x7f0000000200)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x9, 0xb, 0x2, 0xfffffffffffffffc, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000002c0)='syzkaller\x00', 0xff, 0xda, &(0x7f0000000300)=""/218, 0x40f00, 0x1d, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xf, 0x8, 0x696}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000004c0)=[{0x0, 0x2, 0xe, 0x6}, {0x5, 0x4, 0xf, 0xb}, {0x5, 0x5, 0x1, 0xa}, {0x1, 0x3, 0x0, 0xe}, {0x3, 0x1, 0x3, 0x1}, {0x1, 0x3, 0x6, 0x3}, {0x0, 0x3, 0xf, 0x4}], 0x10, 0x7283}, 0x94) 2m27.795411657s ago: executing program 33 (id=2163): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000005000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00'/28], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000380)="bbb01184a1b2214265df30e13a6c7f294ea169f66ef7e1482e024c7b08329826d61b69030d38ae16897342229ad46c4bb7a0c9859303812643f5d00a48fa87c422f6b9f9dbb8360f91c303323ba30642fac002663e9bce0fabc426c9c976bab664b820c3427edab13257922a7a3b427b62ebb8a49cabefc3168c5424510a9f5f35f1f054900efba040fc02c58873b7fcc3548cf7dfb9635096b3959179966e2cf4ff8145c9148132525e8b3ffea291a99e5f8b16e84583", &(0x7f0000000580)=@tcp=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@rand_addr=0x64010102, 0x0, 0x0, 0x90, 0x0, [{@broadcast}, {@multicast1}, {@local}, {@multicast1}, {@local}, {@initdev}, {@local}, {@local}, {@local}]}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000300)=@tcp6=r1, 0x4}, 0xfffffffffffffebe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x20000800) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x2, 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) getsockname$packet(r2, 0x0, 0x0) 2m26.300872305s ago: executing program 34 (id=2169): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "8440e33d", "faa71d9800"}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0xf5e668d3aaf18096, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc00}, [@RTA_GATEWAY={0x8, 0x5, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) bind$rds(r7, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r8 = socket(0x2d, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000440)={0x2d, 0xffffffffffffffff, 0x7ffe}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) bind$xdp(r8, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3a, r8}, 0x10) 2m24.429796563s ago: executing program 35 (id=2175): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x42}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) unshare(0x6a040000) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x4, 0x400, 0xac5]}, &(0x7f00000003c0)=0x44) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/14, 0xe}, 0xdabc}], 0x1, 0x10022, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000640)=r0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfffffffffffffeab}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfffffffffffffeab}], 0x1}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x17, &(0x7f0000000200)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x9, 0xb, 0x2, 0xfffffffffffffffc, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000002c0)='syzkaller\x00', 0xff, 0xda, &(0x7f0000000300)=""/218, 0x40f00, 0x1d, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xf, 0x8, 0x696}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000004c0)=[{0x0, 0x2, 0xe, 0x6}, {0x5, 0x4, 0xf, 0xb}, {0x5, 0x5, 0x1, 0xa}, {0x1, 0x3, 0x0, 0xe}, {0x3, 0x1, 0x3, 0x1}, {0x1, 0x3, 0x6, 0x3}, {0x0, 0x3, 0xf, 0x4}], 0x10, 0x7283}, 0x94) 27.046707351s ago: executing program 3 (id=2927): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r6, 0x29, 0x17, 0x0, &(0x7f00000000c0)) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x2, {0x0, 0x0, 0x4}, 0x1}, 0x18) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e21, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c) close(0x3) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x54, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x54}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r8}, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014000780080011400000000005001500020000000500010006000000050005000a00000005000400000000000900020073797a320000000011000300686173683a69702c706f7274"], 0x60}}, 0x0) syz_emit_ethernet(0x3ce, &(0x7f0000000b40)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x398, 0x3a, 0xff, @remote, @mcast2, {[@hopopts={0x1d, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xc}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @ra={0x5, 0x2, 0x3}]}], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0xf8, 0x1, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x5, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0xe, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 26.81302408s ago: executing program 3 (id=2928): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) write$nci(0xffffffffffffffff, &(0x7f0000000480)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x7, {0x7, 0xd}}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0xd0ff}, 0x94) 26.65102088s ago: executing program 3 (id=2930): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000580)=ANY=[], 0x0) 26.520892432s ago: executing program 3 (id=2932): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000001c0)={0x8, [0x0, 0x3ff], 0x6}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000280)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000780)=[{{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/83, 0x53}, {&(0x7f00000004c0)=""/84, 0x54}, {&(0x7f0000000540)=""/111, 0x6f}], 0x3, &(0x7f0000000600)=""/30, 0x1e}, 0x5}, {{0x0, 0x23, &(0x7f0000000740)=[{&(0x7f0000000680)=""/174, 0xae}], 0x1}, 0x5}], 0x2, 0x45833af92e4b39ff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRES8=r6], 0x3c}}, 0x40000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000"], 0x50) unshare(0x22020600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r7, 0x0, 0x0, 0x700}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000305fcff0400000074d8ff930000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800900010076657468000000000400028008000a00", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x14000050) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000003800)={0x0, 0x8}, &(0x7f0000003840)=0x8) 21.840728694s ago: executing program 6 (id=2948): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0x13, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2d}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 21.213201664s ago: executing program 6 (id=2952): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x802000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4084) r1 = socket(0x1, 0x6, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000011) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:net_conf_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000003c0)={0x1, [0x0]}, &(0x7f0000000400)=0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r4, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c000}, 0x81) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000640), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r8, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x2850) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000940)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r9, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@getroute={0x14, 0x1a, 0x8, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x80) r12 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r9, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x24}}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000d00)=0x0) sendmsg$nl_generic(r1, &(0x7f00000010c0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001080)={&(0x7f0000000d40)={0x310, 0x1e, 0x400, 0x70bd27, 0x25dfdbfc, {0x10}, [@generic="73d5341183f89361fb61a95070dd2d6aea78613837a292f35c15fc4f0235ee564d16a0346a5ac2bba4140201790af31c596d844eee50998984dcf0c5a1676151025978807990fbb2ebab6c83b0173272191d609b2495d661349dbb6c", @nested={0x291, 0x3d, 0x0, 0x1, [@generic="d40a801328ee741c9108eb847ceb31f2876b1b5540761ae33350cf9f070e243a23f70ce7d8293adb5839c223617afd22d2e10ef4da8283e0c98b683bbd940e9d1fee6a52e49698a30d1aaff20099ab60521966153394e5fa916a5fb5362d5bc8feeb7d92f5bd1b28bda2e50f73f0e131ad1d4350a22c3865cc773a3e703a7a1fba5922d3e76a4907323d86422a6ac49718710eab597254775321ca68", @generic="e7ea4df5fff8735bd84aec6d840d71c234f1075ba9aa6793b8b2a1e98cb518da4c7b2a80433ddc0a9225fe9063407cfac13a6e9d3ccfc7b7c1fe73712feb5ac53ee8cf962e0a8b46d6233459580552a97ab0064af05220d07c7fdde4762ff9dbce51d903fe8287586fdec5a27d3ace264f6c93e31f6665a6efedf55cae8d35bd3d8248cf554c6d76d0514d5c31737381df8f2ccf6d175b6d8cdcc913dabe5fcbcf3d95d319ca416497699a316075529009d52b3f1b17a75c5c6f92dbbb92ad5940092a49d32a0f51cedf3f41917cf9ca62496e191144677e090b12e2b0ea5c3713b6346224598702a341974ecc8c0bf2", @typed={0x8, 0xbb, 0x0, 0x0, @u32=0xffff}, @generic="8c45c7845498112fee1c906d3d05059a6866b52751ef4899786d162f37c11b7ac077d3e249fc3a2ef26c12c3cc28fbcc3ca1f9b7f69735208311d3180890f19289085432904d0465c49894e5a3f80e3485a349f8686bdcfee50b7612af9b612f4d3a66f73f1cadd28bce2a67d55200b875aebcf466d7e79590e2f38095e4997158c2485a7aab9dddcf47c15e3895f7b4cfc8d2aac6ddab036f34cb3b99531e2e8ddfa5fa29aefe53362c04db50408e8838035e71cd9cc07aee6514563f67098bc4ee645a1757a7c49fe1ab247f894a44f2841faede49a0a133ee595656f23b7e43d743cd36432ae77e09f5c4283da7dd68cb2ea9d30b619ba9"]}, @nested={0xc, 0x67, 0x0, 0x1, [@typed={0x8, 0x105, 0x0, 0x0, @pid=r13}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xc4, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xce5e}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x661f}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe5d3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbda6}}, 0x5, 0x80000000, 0x5, 0x200, 0x10001}, &(0x7f0000001380)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000013c0)={r14, 0x6}, 0x8) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x90, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xace1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c004}, 0x40) 20.541768678s ago: executing program 6 (id=2958): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000440)=@ethtool_gstrings={0x1b, 0x5}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x3, r3, 0x1, 0x1, 0x6, @broadcast}, 0x14) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 20.414616376s ago: executing program 6 (id=2960): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet(r2, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="f1", 0x1}], 0x1}}], 0x1, 0x8000) sendmsg$inet6(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000b00)="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", 0x501}], 0x1, &(0x7f00000016c0)=ANY=[@ANYBLOB="78000000000000002923000000000000000c020900000000fe8000000000000000000000000000bbfc01000000000000000000000004000100000000000080000000000000000000fe8000000000000000000000000000aafe8000000000000005000000000000aafe88000000000000000000000000000160000000000000002900000037000000080800000000000001040000000004010a072f326c27f190541bdd0000030a020500060000000000000018000000000000000700000000000000f9ffffffffffffff020000000000000005020040050200080000000000200052a55658bdd400000000000029000000000000003c000000000000000c0000000000000038000000000000002900000039000000670401a500000000ff010000000000000000000000000b70c153b4fef00d39289aba6c6a00010000000000000000000000000000000028d541ed8b1d3a7569e80725518336ebc0c7ad385940783b0dcc3ca5bf0082696a9a3946b0de73589a94fc939f25ac81562cd9349e866ba0560104f7cc1f303c94bccf2b1035358ff88a80521f2578a6a2876dbb27345a7651416f1241dcf0883455a1c6febc08f7f52cdb482c5cbedd8534e578a08247b6942e2cb60fc50d76857a7aeb32"], 0x158}, 0x20040014) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000680)=""/4122, &(0x7f0000000000)=0x101a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x42) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)=0x3) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x6}]}) unshare(0x20000400) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 20.337375554s ago: executing program 7 (id=2961): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x8010) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}, 0x1, 0x0, 0xa801}, 0x0) 20.229468358s ago: executing program 7 (id=2962): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000030003"], 0xa) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)={0x3, [0x6d3, 0x9, 0x8]}, &(0x7f0000000180)=0xa) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000107000000000000000001"], 0x114}], 0x1}, 0x0) 20.056842944s ago: executing program 7 (id=2964): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') getsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) (async) unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x27}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x1010, r3, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000808) (async) ioctl$IMGETCOUNT(r2, 0x400261f2, &(0x7f0000000000)) 19.933544252s ago: executing program 1 (id=2965): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'batadv0\x00', @multicast}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0xa, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0xffffffff) listen(r2, 0x40000000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) sendmmsg$inet(r7, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x11e, 0x48b, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r9, 0x5000943f, &(0x7f0000000500)={{r7}, 0x0, 0x10, @inherit={0x70, &(0x7f0000000180)=ANY=[]}, @name="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"}) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x10000000, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x4}, {{@in=@loopback, 0x0, 0xe}, 0xa, @in=@remote, 0x0, 0x4}}, 0xe8) r11 = socket(0x2d, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r11, 0x11d, 0x1, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 19.778863771s ago: executing program 7 (id=2966): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x80, 0x0}}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xfffffffd}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x60}}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000400)={r2, r2, 0x6, 0x0, 0x0, 0x9, 0xfd, 0xc48, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 19.581417979s ago: executing program 7 (id=2968): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[], 0x78}}, 0x400c004) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}}, 0x24}}, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x8080) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)=@newqdisc={0x40, 0x24, 0x1, 0x0, 0x25dfdbfa, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffff5cc}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10) 19.421139647s ago: executing program 8 (id=2969): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x6, 0xffff}, {0x8, 0x8}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="811ff1", 0x3}], 0x1}, 0x200080d4) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r4, 0x2, {0x0, 0x1, 0x2}, 0x1}, 0x18) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={r1, &(0x7f0000000100)='vcan0\x00', 0x247bfdf8f6328514, &(0x7f0000000180)={@align=0x2, {0xd, 0x1000, 0x400, 0xa928}}, 0x7fffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x7}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x7}, &(0x7f0000000380)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000400)={r6, 0x7, 0xfffa, 0x8000, 0x2, 0x2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 19.353706358s ago: executing program 1 (id=2970): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000006cc0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000006dc0)={0x0, 0x0, &(0x7f0000006d80)={&(0x7f0000006d00)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x64, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x55}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1a000}], 0x1}, 0x80d1) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r6) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c001917", @ANYRES16=r7, @ANYBLOB="010029bd7000fcdbdf251000000005003300010000000800340009000000050033000100000005002f000000000005003000000000000800340000000000060028000400000005003800000000000800340008000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r8) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @none, 0x3, 0x1}, 0xe) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000004000000b73d000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r10, &(0x7f00000003c0), &(0x7f0000000400)=@udp, 0x1}, 0x20) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, &(0x7f0000000100)) close(r0) 19.299129768s ago: executing program 3 (id=2971): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115300000000008510000002000000850000008800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) (async) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x60000000, 0x30}, 0xc) (async) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000240)=0x4) (async) pselect6(0x40, &(0x7f0000000040)={0x6, 0xa, 0xc97, 0x1000000dd43, 0x10000000004, 0x3c, 0x27, 0x4}, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r5, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200200, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r7, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) (async) write$tun(r6, &(0x7f0000000240)=ANY=[], 0xfdef) 19.063918236s ago: executing program 1 (id=2972): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x8010) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}, 0x1, 0x0, 0x2000000}, 0x0) 19.013086854s ago: executing program 7 (id=2973): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000005cc0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040841) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000005e00)={0x0, 0x0, &(0x7f0000005dc0)={&(0x7f0000005d00)={0x60, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xda0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x60}, 0x1, 0x0, 0x0, 0x4d0a37aee7f2bf53}, 0x20000000) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) 18.923034421s ago: executing program 1 (id=2974): r0 = socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.90538451s ago: executing program 3 (id=2975): r0 = epoll_create1(0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) r2 = socket(0x10, 0x803, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000004000000000000000e1ff390fff00005caad88f61781f3f76f6c4b021119404a8185300f47900173eb6f4e004e35824e31c78f16592be8adce86fac60f57327cdf138231ebcfb2d49d1f9f3550ca65844dec44efd653e1289010c7f88c19c953ac2870e26eb0d1621c0dd3e0dac1fbceb7dc43f9671323903f829dbcf3b40c2929038465e4d7a891eb0bb8d45490a67a77a6fea881b3132cd057e31301de03e7947"], 0x50) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0xc0189436, &(0x7f0000000140)) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000880)={'erspan0\x00', 0x0, 0x10, 0x7, 0x6, 0xff, {{0x3c, 0x4, 0x2, 0x29, 0xf0, 0x67, 0x0, 0x2, 0x2f, 0x0, @broadcast, @local, {[@cipso={0x86, 0x4a, 0x1, [{0x7, 0x2}, {0x1, 0x12, "d16068b8d82dae589dbe250496112284"}, {0x5, 0x5, "c79ac3"}, {0x6, 0x7, "8343c012e0"}, {0x6, 0x4, '#V'}, {0x0, 0x12, "53d43d9af5eb7e25171ebe3baa0000dc"}, {0x2, 0xe, "c1bbb7b36f35be1f3f34d068"}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xd2, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x40000}, {@multicast1, 0x217f}, {@multicast1, 0x1}]}, @rr={0x7, 0xb, 0xe8, [@broadcast, @rand_addr=0x64010102]}, @cipso={0x86, 0x68, 0x2, [{0x0, 0x5, "6dcc94"}, {0x7, 0x6, "45fb19cc"}, {0x1, 0x6, "13e9bada"}, {0x2, 0x10, "0d7aff9a549fd9faabd6d6333f7f"}, {0x2, 0x5, "c882ff"}, {0x0, 0x3, "e2"}, {0x0, 0xf, "f7de14c0e3029b82282d00e93b"}, {0x6, 0x10, "bb284db860bc6a370814673fb32b"}, {0x4, 0x12, "00000000000000000000003eacc5a14f"}, {0x5, 0x8, "5be652d7b51d"}]}]}}}}}) bind$packet(r3, &(0x7f00000004c0)={0x11, 0x19, r4, 0x1, 0xfb, 0x6, @random="26005196d786"}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x28, 0x2, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x414}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c0}, 0x44) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01070000000000100000670000000800c30000"], 0x2c}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000240)=r9}, 0x20) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) (rerun: 32) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10040, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000340)={0xb0000000}) (async, rerun: 32) r10 = socket(0x2a, 0x5, 0x3) (rerun: 32) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001780)=@newtfilter={0x13e0, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r11, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x13b4, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_ACT={0x138c, 0x1, [@m_connmark={0xe8, 0x1, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x0, 0x86, 0x8}, 0xff80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x6, 0x1, 0x3, 0x5}, 0x27}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x1, 0x49, 0xc3}, 0xb987}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a1a, 0x1ff, 0x7, 0x9}, 0x8f35}}]}, {0x45, 0x6, "d1f4c80d887bad1ad8b27f849152ef9411ef7352379e752ee18c9c9b047dc7a070742d804380a12605e3fdfbc1f2d06b9644be6b724706bc685516ff7938885e61"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x5c, 0xc, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfff, 0x1, 0x1000000a, 0x3, 0x5}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x14, 0x6, "8ea7ee24e8f939a91349cc1faf61fd3b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0xdc, 0x19, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xc3c, 0x10000000}}]}, {0xa2, 0x6, "e20fa22b5536cf43c869344009272cefb1418247bb8ea82bf6d4c401ddd71746c408534e495379351bd6d46245596b4f5ae44d61a6c130c7bc3d87f089aa96097f7ff4a04d4aa746d888477723d3e1d3d3e36bb86e73a307ff18f8c6927b67e8596c1e253649bcd93f2ddcd7fd04ec18a524d576572a2c4ee00740ecd7df031738b8713b6793c6febde60e927bdb2c0dd784b142c1c29cf44671755a5781"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x107c, 0x10, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x179e02e9}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_ACTION={0x6}, @TCA_CT_LABELS={0x14, 0x7, "d676adf1e677aaa6a2138f2a5f7de962"}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xec, 0xc, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xc018, 0x80000001, 0xffffffffffffffff, 0x7e0, 0x6}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffff0000, 0x811, 0x8, 0x101, 0x9837}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x824}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x3, 0x8, 0x8, 0x80}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x66c}]}, {0x5b, 0x6, "cca2ac59b1900cb4656538df4d71b71213bc43e9822206352b405bea817b6d691961f711da576bbf0d417c5fca3c95eba566790fa4019441cc98ddfe8ede820b1f54364d5afef19354faeb1f56cbb4f3ab79a4c1e1a8ae"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}}]}, 0x13e0}}, 0x2000c800) (async, rerun: 32) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$rose(0xffffffffffffffff, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 18.672962647s ago: executing program 6 (id=2976): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=0x0, @ANYBLOB="090001"], 0x38}}, 0x40000) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'bridge_slave_1\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x6, 0x6, "3febd94a5de9"}}) 18.564053401s ago: executing program 6 (id=2977): syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2ad1c7f0, 0x3a}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xca6}]}, 0x28}}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r3, 0x29, 0x14, 0x0, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)={0x80, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4000801) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x27) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="050000000800000042001f9d1b2c74478e01d2416bd092f19b46000040000000c09dde329df8948a9c0c9d6e15b8d9ffa4084b010143ded46140bc8fc1b092cac88de6cf76301e6e0caa1d37edf8f010f0bd7c58a3d092fe23304c18d7aa003d03de74e6a4d7445bf987fe40f6bbcf46ffc5a8350a36d6a4c4d1887669534a56d79aa38719372c8add7eafbfcd96c551dd4baaf361b6719f4853e1ab5920544924cce23ec0671793b8576538b4a6fca59e2d9bc01aebb8d490151368d05f97c087508da48f98c858d816226c96fdfd85f9aaa9090b339cc1f7279b70a7688a6519e855537708248f7be795619a64", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) unshare(0x400) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000044c00000400000009"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff, r9}, 0x38) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x44, r11, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r13, 0x84, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$sock_SIOCBRDELBR(r12, 0x80108906, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 18.532608856s ago: executing program 8 (id=2978): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x80, 0x0}}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xfffffffd}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x60}}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000400)={r2, r2, 0x6, 0x0, 0x0, 0x9, 0xfd, 0xc48, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 18.375330443s ago: executing program 8 (id=2979): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000580)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00283aff00000000000000000000ffffffffffffff0200000000000000000000000000018900907800000000200100"/75], 0x0) 15.835635733s ago: executing program 1 (id=2980): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d00)={{0xffffffffffffffff, &(0x7f0000000040)='#\x00', 0x100, &(0x7f0000000080)={@align=0x554b, {0xa6d, 0x3, 0x8, 0x5}}, 0x8, &(0x7f00000000c0), &(0x7f0000000140)=0xfffffff6}, 0x9, &(0x7f0000000a40)=[{0x3, 0xd0, &(0x7f0000000cc0)='./cgroup/syz1\x00', &(0x7f00000001c0)="44e7", 0x2, 0x12}, {0x2, 0x8, &(0x7f0000000240)='./cgroup/syz1\x00', &(0x7f0000000d80)="f552ca2ed1cccd9b01d4be9641ddda10d157fad27d9665bb6922d18a495f16aabdb4682292ca5d75fdd0b4d79cbc7dad62280eaec142594699aa3a08fd12b278fd57ea7b240925fdc4daad6002f33b7f9c428c4b8699a39834245f02f806539d5a447e5047f429bb2e4e7e12802f67fc0ffc885fb92070eec0884489d7e145921633910fec99cd594fab5d9693135177778786863f2e64af17b5cad3941ad669de23a3ef775bfcc26028ce2c14cc1cfa7995e07705b5a252344112249f617cf247", 0xc1}, {0x1, 0x8, &(0x7f0000000380)='\\&-..$!$\x00', &(0x7f00000003c0)="a94688549e2c472b61021e4595bf7168838644b99e09a1516d9265fee02d3b0ae369757638a5f400777f143cc06999fb71d911cb9c514cdef064a03779aa903619e0a51203ce62c627c0deaf7057c54861f83941fd32e17f237d80422be01920111666a407c89cad776e9676992c5cb19b3b0d1a7919adc855f36a54ec31dc585963fc0466557da1f18a961b9a", 0x8d}, {0x1, 0x8001, &(0x7f0000000480)='./cgroup/syz1\x00', &(0x7f00000004c0)="3aab06ad120058cb4360eb855381106fdef848956fb85633025f554f646c6e13beb288", 0x23}, {0x3, 0x0, &(0x7f0000000500)='!\x00', &(0x7f0000000540)="14b07f6c57d4a86d6babeb1b01efb29744c0a825e02b364ef76f4f4b4445d0932e66a8128d1806e020199488fb3d01aaa72b62218dd98a8f54184c398819bf8d81c8e5851b7d17e7267be31f91dc5929f72f4445f5ce221013397f2e012c8e51fef417d36fa412e95e298cbcf6baecd48f21d7dc763a259970b839614e385c344ff0b6bfc8915d81011d5a092f39d9f7511b058f88723947e6ccad764a81d569e1c9bdee77a6406243342e306f327debf589ea04c3277100baa79afe29e4ac5b1b10123109141c61790ffa699c769acb434e9459cc1e", 0xd6}, {0x2, 0xb, &(0x7f0000000640)='$-\x00', &(0x7f0000000680)="a5a89862f4d6cf44eba1d5fe0f0648e2118be2005cd72ec835848da31107a015279675cf3d10bf7cf5b68dc8de5a6c745f8bc794dcd6d6dcb7f018d01b50befaa9dbd8e3e4a5de2f9914573445cf314953cfd11b81110985c57c51e58b17797408b42d8ba97b427b659283cd8a79b02531b57cbba5e977a0fa8d37334ff72321da4f8320f5d05e01c2f67b648fca482bc8f39837eb2efd98de090b1978e146e2a7d78cfb61971b18c1e7d6f2417385dd9074f27700f36d7322", 0xb9, 0x8}, {0x1, 0x7, &(0x7f0000000740)='./cgroup/syz1\x00', &(0x7f0000000780)="00ccdd30a00a80fd193d4267db69635febab4addb4dfcff6b02a7ed63af2e8c48db93f575c62d6b897fe24cdb7d64d6127dd092fcdfb4cb3b2ed4f7e4009e0dd438a03bfcff4b3c3117ca29e243856f5c22fec5fa1460e904956d9792053cc9f28a0abef4013365d17016ece30b5af4d56ec19057221728c205f2036c1610b72293ff949069018942f16e705347ffd80c5480481b9334dd70bef05c83dcb74649d5752c0fd6aa98a413c29e8994f0e00ef797594b215e44cc07b4e0f57cc30db2ea29e436867aae2b1869de3ec19c8d79b7d23524468ca9d40634e508a7268986032c4", 0xe3, 0x10}, {0x3, 0x6, &(0x7f0000000180)='&\'\x00', &(0x7f00000008c0)="4244fe8454f44fd8bd6e10f60126a939d98074412a589a265af7558d3a151fde158efdcfa4e4ac2cec3b0446a0e13d9fcb4f6ac5aa134887953bcd09b303b4562a109447f38a7f794fd1b6957caa3df5e749432178b8342f01719eb99b66a7614caa", 0x62, 0x18}, {0x1, 0x5, &(0x7f0000000940)='./cgroup/syz1\x00', &(0x7f0000000980)="6596c79a4fb1ac3e64a9feec81cc983ff128bb80270b69193773b3efaf287a8805e62bf1d554fb90cc90e79345154e33e31ecefec1591775a5f868e793e079c852fba5dd50ddd7de49e5e9f43ddc782996512ac748e400f77f6199ec433f8ec75765cd7c0070fd1c6baf6ca6133ae61e516dd41507c44d2477ab39238329f20e8a06c282c919a658761e4ac4cc36a543d31fe433f079784e7c78162928408e06", 0xa0}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x1010, r1, 0xac8b000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r0}, &(0x7f0000000c00), &(0x7f0000000c40)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14001180090001006c617374000000000400028014000000110000000000000000000700000a0000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 15.834371161s ago: executing program 8 (id=2981): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x80000) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)={0x20000014}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x891d, &(0x7f0000000040)={'erspan0\x00', 0x0}) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000140)={r1, r2, 0x5, 0x24, &(0x7f0000000000)="bb4d530a2ddd285bbdb0f80b2b5905aac50e5fbb6e28c5d19f65c0cfe81cab4ba9001881", 0x0, 0x4, 0xe, 0x8, 0x3, 0x0, 0x7, 'syz1\x00'}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2004}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) 15.721750455s ago: executing program 1 (id=2982): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x16, &(0x7f0000000340)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x12}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @alu={0x4, 0x0, 0xa, 0xa, 0x7, 0x8, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000400)='syzkaller\x00', 0x6fa, 0xcf, &(0x7f0000000580)=""/207, 0x41100, 0x65, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0xf, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeb9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xaa, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10, 0x0, r3}, 0x94) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, 0x0, 0x4000) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x810) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x200008c0}, 0x40004071) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x44041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004880}, 0x440b0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r4, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x0) 15.72070637s ago: executing program 8 (id=2983): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1d00000000"], 0x0, 0x3}, 0x94) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000000)='GPL\x00', 0x202, &(0x7f0000000040)={@_ha_fsid={[0x1000, 0x3c00000]}, {0x9, 0x4d, 0x0, 0x3ff}}, 0x0, &(0x7f0000000080), &(0x7f0000000180)=0xf00}) openat$cgroup_ro(r1, &(0x7f0000000200)='memory.events\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) (async) socketpair$tipc(0x1e, 0x1741fac063ca0aa0, 0x0, &(0x7f0000000280)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000090000000800000000000000", @ANYRES32, @ANYBLOB='\x00 \x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x9, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14028000}, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0x1, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0x9, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="000000000000fda496c0983ef403ba47d96c0000b70800b5f3c2dd00ffffffff7b8af8ff00000000bfa200000000ffffffb703000008000000b704000000000000850000001d000000950000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="dbd1251b000000060021006100000000000000000000ca5907d9b434ebe630e0b2b5fdc983f8b14e"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000000180)) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x2ae}], 0x1}}], 0x1, 0x20040140) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240001000000000000000000000000000600030000ff"], 0x24}}, 0x8004) 15.581872955s ago: executing program 8 (id=2984): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000040000090000"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0x9, 0x5}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x48000, &(0x7f0000000200)={0xa, 0x4e23, 0x3ff, @loopback, 0x10001}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x7f}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x81, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae09b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0x5, 0x1, 0x1, 0x5392, 0xffff, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x7, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) 3.131401171s ago: executing program 36 (id=2973): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000005cc0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040841) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000005e00)={0x0, 0x0, &(0x7f0000005dc0)={&(0x7f0000005d00)={0x60, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xda0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x60}, 0x1, 0x0, 0x0, 0x4d0a37aee7f2bf53}, 0x20000000) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) 3.099523379s ago: executing program 37 (id=2975): r0 = epoll_create1(0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) r2 = socket(0x10, 0x803, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000004000000000000000e1ff390fff00005caad88f61781f3f76f6c4b021119404a8185300f47900173eb6f4e004e35824e31c78f16592be8adce86fac60f57327cdf138231ebcfb2d49d1f9f3550ca65844dec44efd653e1289010c7f88c19c953ac2870e26eb0d1621c0dd3e0dac1fbceb7dc43f9671323903f829dbcf3b40c2929038465e4d7a891eb0bb8d45490a67a77a6fea881b3132cd057e31301de03e7947"], 0x50) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0xc0189436, &(0x7f0000000140)) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000880)={'erspan0\x00', 0x0, 0x10, 0x7, 0x6, 0xff, {{0x3c, 0x4, 0x2, 0x29, 0xf0, 0x67, 0x0, 0x2, 0x2f, 0x0, @broadcast, @local, {[@cipso={0x86, 0x4a, 0x1, [{0x7, 0x2}, {0x1, 0x12, "d16068b8d82dae589dbe250496112284"}, {0x5, 0x5, "c79ac3"}, {0x6, 0x7, "8343c012e0"}, {0x6, 0x4, '#V'}, {0x0, 0x12, "53d43d9af5eb7e25171ebe3baa0000dc"}, {0x2, 0xe, "c1bbb7b36f35be1f3f34d068"}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xd2, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x40000}, {@multicast1, 0x217f}, {@multicast1, 0x1}]}, @rr={0x7, 0xb, 0xe8, [@broadcast, @rand_addr=0x64010102]}, @cipso={0x86, 0x68, 0x2, [{0x0, 0x5, "6dcc94"}, {0x7, 0x6, "45fb19cc"}, {0x1, 0x6, "13e9bada"}, {0x2, 0x10, "0d7aff9a549fd9faabd6d6333f7f"}, {0x2, 0x5, "c882ff"}, {0x0, 0x3, "e2"}, {0x0, 0xf, "f7de14c0e3029b82282d00e93b"}, {0x6, 0x10, "bb284db860bc6a370814673fb32b"}, {0x4, 0x12, "00000000000000000000003eacc5a14f"}, {0x5, 0x8, "5be652d7b51d"}]}]}}}}}) bind$packet(r3, &(0x7f00000004c0)={0x11, 0x19, r4, 0x1, 0xfb, 0x6, @random="26005196d786"}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x28, 0x2, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x414}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c0}, 0x44) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01070000000000100000670000000800c30000"], 0x2c}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000240)=r9}, 0x20) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) (rerun: 32) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10040, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000340)={0xb0000000}) (async, rerun: 32) r10 = socket(0x2a, 0x5, 0x3) (rerun: 32) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001780)=@newtfilter={0x13e0, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r11, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x13b4, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_ACT={0x138c, 0x1, [@m_connmark={0xe8, 0x1, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x0, 0x86, 0x8}, 0xff80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x6, 0x1, 0x3, 0x5}, 0x27}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x1, 0x49, 0xc3}, 0xb987}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a1a, 0x1ff, 0x7, 0x9}, 0x8f35}}]}, {0x45, 0x6, "d1f4c80d887bad1ad8b27f849152ef9411ef7352379e752ee18c9c9b047dc7a070742d804380a12605e3fdfbc1f2d06b9644be6b724706bc685516ff7938885e61"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x5c, 0xc, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfff, 0x1, 0x1000000a, 0x3, 0x5}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x14, 0x6, "8ea7ee24e8f939a91349cc1faf61fd3b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0xdc, 0x19, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xc3c, 0x10000000}}]}, {0xa2, 0x6, "e20fa22b5536cf43c869344009272cefb1418247bb8ea82bf6d4c401ddd71746c408534e495379351bd6d46245596b4f5ae44d61a6c130c7bc3d87f089aa96097f7ff4a04d4aa746d888477723d3e1d3d3e36bb86e73a307ff18f8c6927b67e8596c1e253649bcd93f2ddcd7fd04ec18a524d576572a2c4ee00740ecd7df031738b8713b6793c6febde60e927bdb2c0dd784b142c1c29cf44671755a5781"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x107c, 0x10, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x179e02e9}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_ACTION={0x6}, @TCA_CT_LABELS={0x14, 0x7, "d676adf1e677aaa6a2138f2a5f7de962"}]}, {0x1004, 0x6, "bb2191c1eb33d55f070b31e13d3b05d2d29f25cf40b66e26fcd2fec66dc6697434cdbe86f95a7b43325dcccb39042760fdd8164c00201ba63147a308cb59b30e67924d461bea2720c389a38037a157282962f4a15308ce21d921d1b4c83e709731b5f0f374624d74562ee58deb5848b8765c4bac7a863167c199229511487f946679a091b77acec231b7bce131547cc2fca44de5d24aaca45b4c9b60d2c7d9cd3ccc0f064bfac7e26315147ea7e616665360b07f0dce3ef6a17a1129d7d7837b23efedd6c474e62cf990828f3e034660aa1a736b14dd10343759b9bfbc882db47995766892dcc6da2c2c64bc78065e09331926d7ae4b181dccc70009d5c52489f5e177ff4bc47c28f078cedd5f276559900bc6636a7fdf51f02df2cabb905e8c08129239f8101457ad29913e048fae56e3d41b64e5c777405cfaec2d5910eeef779bba26ef2b76517574100c3c0b62da3a57438ec862a6b5c9ef807844397f2e407026fdf5a152219b0e3ca8892a83c902800fd541d6080fa51eea2314dce2f24f80dccaa11bd47b0e0871aadd896b52763a4d84fc6fe8416639b7d5d9f8e7f72ae5feba03f880f661348cc83daac4ddb9547234dbc152f20eb1f61bbf93bef56a6b9869f04836d2bca037f73769535fa731c672880735a9c8edd7f304995ac8cdf73b8259e7f4f4f2522e9f892cdc97a7ba7f05043ae7feb6711af19566da26e77a1d90c7d3da6f2f7b1185cb2170dc1bbc1843f754d61271d6a48957a0221ecec1cd5cc28325c6763ed5c93a1b71b7d7c25e8e46a5e96bdaa1e7e87188c7eed0b7ee2a5f20d34db709ebd2a504b6900206c61aa3d98e977b9518e548e78e1efccc192ec29ec2adc1fbd0bdb44a0b51ce653f67b364c74ef399d5aa6ef29eb897c0070830bc1a3b6d72e924283c3ce0ca66cdddebbdc106c3b1103c049097d3e4c380686f2390accb09baee76312011591e8651c3d119591732e95406ad41f692aa48e7962936a920f43fe274074c3552b51713f021b0f86bde354940b7fdb9d948c27dec56c9676085cf0848815c576d1adc0ecd068c4f418db3006763f91963b6c1ca00cc1c4a13cbf0c2d8abcc2d8697fa2b5f06ca7ce941a4e85c4f9c93cb0992dcb8dd81cfa3f365e38d9d00cc38422de23ad3b85c202ffe925268cfea4c4d2bf16b0d7f15973e5d60efcf91fa08f68e9d76773ea015b712c197c98dac727a0511df1f017e0f4a72780cae411f29c32f83aea1f0b2dab3c58b4e12d71463609f3878c8bb747885d8da391c49818cb325eccfa8fd763559a04334172bb47c858cbc08610e377ad3bd4c48666bd12a285249ca15d95a9b4b82ff27f55f6181801c7cf215f2b56854db737f89774477a27f89bd9e38dcc70b1853be57f99bb52f7fb92fc49dbe00dd8913d2ab0973f326cdbeedd4982fa0185aa8013078863c6bd5df064dfded84ce55f1aa2b40b26dd6ea9d8c53be2bfc0ae7af5597a136981f00ea7396d9861c2139dc52afaf44c4917b1be3ed8649bc7ae76a7de766cdc474c587c92ec7aaaf4ecf87be2fff77a5cb53302b520b3687b230f3c6c9f678752687567151e76e1b273ddee208a6a8688abefc66b5327354b4d3c9182fcc10e0f720f106d36867f0b07c00a6bfc9aed7c2eee5de613395165f6e4962010b19397bde840da3f5b47f212b4647eba82eba42a0309696f98acc93b80634d685679d435715e88cc29a566b09364a33462ec7c1e8cfe0ba64e64f3eff49651e410f057eaab046d7d9a54eb02f4190fb37c402820c6b76f1ca6070101a8da36a7eee37738e3ce27e8163395a06d0d92141d2a5c3bc98b120a714206e235c9eec22d35cb6bd81c6c2fcde203bec5cb6a2ccf4ebb033f00c238e4565526a79934f68888c870f6771ad54e7cf8c8330ebd93fd3e8a083928d557e0937634f36eab848632e669653fc489c1f027874099e92f77c107051e75c3bced0afc00f992d7e9c71b1fb6776dae785d667ba98606719fc05520dd95ac5be308896ee42cf6976aa16fc02b35af25e77cad474bf5d19f4fb1410c71955fc4b440b6c92e2c310d4981aa8bf547f50981508d43e0bc5b475f6af2acdc706b7d83f9d4e1cf757492148aa8f66f960989c2fdc6b28193966aea0cec22a6b7a58434d0fffeff46458bbafb3498e3f15cd852845332e5d62f40f3ca91789bd5951bbd81cafbb5a2ec63983c353c140afada4d51069fbe1a2e616309976dc3f7b1fff9fc4e9398faab4b03e82236b6a62b5a9e28f22ee663d259dc25cae5a45fd3c0adcf5ff29348461645f7c3ebd8089df8b4203d78d54fa622b6bb639180322a6ba749929ea27c9a040c9909c105bc57d35c1ebf2e89c6249dcc361032d164b63613142504f251548cee6c07a1795a3898c69dfd7667600fe68ed4fe24f32dfacfe94fe7c056786260f6d713b981d8aa6e3b95f32a970c5ccb67d01a566bcba35830b6abda80823f48085d7a64abfced91f402f4dcb1c9d1712d01f6c7e4bd8c1cb32463bda717b3a71c8d94aa0ae781e4ef7cd302b353b5000ea69f6e9bfd6abc60ff4d8ec3491397a76d9ed6f9fa5e514562f88b9f2a4620d684a843b912169118a244e684447c128253517208c8653f9a5ee75197a1fa6eb7440052fd7e1547f0a539f3d7c09a7a48bf9d03c96277bbd6d155006fa0ea6a3370540fb5632a9869f6371faeaf3e685ffc86cf79acae5a39995d41647de6c6d34b441cf0167e90c7a263d5c612fb1b2644fe8139488f8b84800ced47f11ee88a1cf61fda922f80795a042269d61b946cc1cb678a32f28491d9777f00e06181e8c7de18c7f7ac675b4681f42429d4468282ffc0cdd96a1ba59722455096f3cf086d7e580a5848d0aa8d71e909a8514c229cc2220d83e36389606bafb378b703686d9a163f5abc36259635f12ef4510e91a92294a690f6ec1cfe333e3b2e9073029a1a7b475567e25b2a44b7f113bc5aab7f7b07e9b29bd99eef64c67a1aaf661f6e860829be4c9a008a4dd697ed2db559fbdcf4544a4667cc53e81fda07118e34da3838d95e8e354da1dd1aa35c04829668ac681aa03d67e96095e539dd009171e75a4ac72b9c9856782ce64c1fb8eaaef5720ab32b611cc9b9d15a49a86cc740e13aa2d10d192d4ae482a0358e1754e05e08de18688ad3b0b6d2e9720008d24fc0635b99b4ae99ce247829ebaaf46e2ae298e3c52fdb08860a651bca48c7907c92c5c135741f7d3fdaac14a6a523d23b100ee7a232e11f6e9803d959198ee02110b1b5500853dcb37120c21815e9bdda7c171bfee9c8e7cc28b0ccfd8bbfb8deac0f9e5059e927a2b8d8c3b07a66a8c07d0ec66834f76be550070671c294d95ca2475fc575df5efdf2ad1bee3db1cbf3b41880ffaba33c06e39cf13a4cfd2c5be95a68e1bf06b76719e2bb68fdaec8fbd3b1222337bfd3a8362d7c34e97ceb173ebc557a2141561a3e572a29b5ef82f4d36963132c5b36e73dc9c488367e602eaf487f78c86361b1f3bda92ad412a586ede5040558c8f00eafe4e2411fe84ac5346dbe313300f4d9e7d68188a07858dec69fdcf8481ed8232b75dc97c271c7b96eff88fa43c0a2baf9e03b2eb553ede57b23ff19c50f940d3cb7e415b59dbdff212fe989d1c36a6972ca6dbf64adfbb1ec883bf8428ce5a63ae031b289a7c285b894ef13ab41143e5e2cd4f6d1c2424bde7ccd67ba759eced4fe295ab4397f064ed5091eb10591f9573900aed31eb7662ec444e3b8d958bf69925084a5412a298dca47ebabe1d8c24cd4cbe58b4b8ed58e8df0f9e8ab23a59a581dd9f960a153164ef8879b2a1b0dfcee1e8fe144185a8246a618160ad0458f04d134d91c0ef17adb83216fb66bc1251461b1b5fbc86c0ba39cc9bf302fc59a1397a04c62478fcf26ce62939e0691ebba884e55a28eb371ac786e6eaafa657fcd005e9941ea30290156f884d065505001b1ec40bd10cd3b79b2a46b508a5c8c5429d39b8ca4cf201df50c22f25a788fdced722d1a8e0bf7ff484214b574114c5c3c7db846edcc153821f096ec5b1a2e54dbeca6e7c2b51e9c5a0efea3d71ea369e71dbe723ed5019fb2417737a5697ae9a4de7e96748f1536774c0fc06429fd30921a3dc33fd827e4145d37858cd9e02bba767e532b9630a9c931a493adf18309d247a5442a2ad52cde5ae3104ddc7e6e088840a2212e51dcb73d7ef70f6b04f36fe114caa0caa1e20c1be764f8d2e29ae31ef6a50fb31a0bdb3ec49bcd4f5e264eaeaed257b1b674855bd0669749a8458c854f056e2b30e149f61277464cbf57ef71bb30b9cd6fc726a9afc4b528cc99f6c64e2c46cd999c148353cbc7a32a2499f85aa0ebc005bae28b17cd128e1a357f0df6410382b424235dc512f0fa6d722e0d6a77efc279b6307b53099f6be7cde4ece61115a45bf2206a0f7f0f769ffaecae5e7ea131a497869dcf915ec0fede98ac719c57a9f900a977411b34d2116f0f5a7c2c85a5befeb0490f6a39d6f46ae006c829751c5053dc66da1d3bc7ca21de341e30d8d42b1fcd6482b8d20c2e57f0a409e78ff8a7a29498c081df12daa7b8ccc1cfa87ff36afb683300e066a415a242ffcc30cf8ee6c5c4f530246275431f885010de9d7d61e777209d6e0a242a0bd9fa2db7e63fb76e6df6f41c3191c62f85e5f058747a3968d5102d75433acdd7c0b5d39b4c0415df3ca4800a342d9ddedfd24d2dc1992cbd8439bf8cecc79bd64ff4231ce763a274a1bb4782bc91a1d5bb703dc0c2a97286b6fbdba4ecb4f5b083afe92b517ef2149f164d6f0f38f82c8e3ed0414eb5b2fab53a74df6f8841e72d5b7f3bdcab574be1fe59fdeb1518b23429166b87c7fe0cdc69ab93c4bf0ed13c750a388da4f740c50e837b763330d8a84da5e59a447254634325375a1c961e852bd0e5e760852ebc0859d775661575bf1648cc919859e41bc065eb4a0c7f763753364ebda66aa6fb28973adda7363fd0062f9458a3a3440d4a821a149e3fb98deb7bb71f3746938c1ace9ee113f661b12e24588d030e02517e44c09a9faa4e6028171eba412166e7dc2f987a469aaefc9b569e3d2e1031b6a1ad62fccf10acd584e1f037cd646b8210070eeb13063a75224bd4c35be90e551852813b022e2724b0de6901b3f378a92e3228543494677bc469a69b28959bc463db763ba93fbe6aaa759deadada364e70f2280984224a41de473f41878dd253bf00d818108416a8753ca92fabeb5bd1ff6a95f136ed0c3ba454dcb243d57293de9def6344182dceb9534a418c74dc63e252abc754f9347cf3cd029a8ef722fe5d671ac6540eb1f74b7df2c59241c13526f5380ca91bd9f263e8dc0dbc66b3b665626e3f48873cf7f98b3be4bc700a1e1a8649d4367c63c7cec45fe22ef4ab1644ecdabd4904aa7b98be2cf02f9796c2d35d57ab325867102fc08702254c9999e8bc863c9fe8ed9eb8cc262d23f3d526f6d61fd83feea8fcf6537f7d99a4eb8c2f7e0123052ee034a2da22147aca56f549348422f121a41d251942d33b2cc888d6938553221c652d4f5fa5baa0f7d240547e0f93c9781f80b7c8373717985e7ffe0deeef956a623e74eb2e92f40c3f9dab41bd79b9f64f86e645ff429232a257bda4475ae6f760bc24dfb64ba4686498e14d9d285b60a65c9f0a91fff4772a16e8b1b224194c169fec3fa9bde1dae911485b422fef0632eb0db6f5bac39f2e3ad0cab9f70b8a484efcac6680f4fd2bb239d0d8a160113f8a9def25806700e35d4351d0566a44f19fa8b4abb0675"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xec, 0xc, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xc018, 0x80000001, 0xffffffffffffffff, 0x7e0, 0x6}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffff0000, 0x811, 0x8, 0x101, 0x9837}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x824}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x3, 0x8, 0x8, 0x80}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x66c}]}, {0x5b, 0x6, "cca2ac59b1900cb4656538df4d71b71213bc43e9822206352b405bea817b6d691961f711da576bbf0d417c5fca3c95eba566790fa4019441cc98ddfe8ede820b1f54364d5afef19354faeb1f56cbb4f3ab79a4c1e1a8ae"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}}]}, 0x13e0}}, 0x2000c800) (async, rerun: 32) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$rose(0xffffffffffffffff, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 3.042694048s ago: executing program 38 (id=2977): syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2ad1c7f0, 0x3a}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xca6}]}, 0x28}}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r3, 0x29, 0x14, 0x0, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)={0x80, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4000801) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x27) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="050000000800000042001f9d1b2c74478e01d2416bd092f19b46000040000000c09dde329df8948a9c0c9d6e15b8d9ffa4084b010143ded46140bc8fc1b092cac88de6cf76301e6e0caa1d37edf8f010f0bd7c58a3d092fe23304c18d7aa003d03de74e6a4d7445bf987fe40f6bbcf46ffc5a8350a36d6a4c4d1887669534a56d79aa38719372c8add7eafbfcd96c551dd4baaf361b6719f4853e1ab5920544924cce23ec0671793b8576538b4a6fca59e2d9bc01aebb8d490151368d05f97c087508da48f98c858d816226c96fdfd85f9aaa9090b339cc1f7279b70a7688a6519e855537708248f7be795619a64", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) unshare(0x400) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000044c00000400000009"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff, r9}, 0x38) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x44, r11, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r13, 0x84, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$sock_SIOCBRDELBR(r12, 0x80108906, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 111.129792ms ago: executing program 39 (id=2982): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x16, &(0x7f0000000340)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x12}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @alu={0x4, 0x0, 0xa, 0xa, 0x7, 0x8, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000400)='syzkaller\x00', 0x6fa, 0xcf, &(0x7f0000000580)=""/207, 0x41100, 0x65, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0xf, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeb9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xaa, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10, 0x0, r3}, 0x94) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, 0x0, 0x4000) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x810) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x200008c0}, 0x40004071) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x44041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004880}, 0x440b0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r4, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x0) 0s ago: executing program 40 (id=2984): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000040000090000"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0x9, 0x5}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x48000, &(0x7f0000000200)={0xa, 0x4e23, 0x3ff, @loopback, 0x10001}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x7f}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x81, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae09b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0x5, 0x1, 0x1, 0x5392, 0xffff, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x7, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) kernel console output (not intermixed with test programs): rface: batadv_slave_1 [ 463.258756][T14656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.368557][T14656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.691592][T14672] chnl_net:caif_netlink_parms(): no params data found [ 463.766940][ C0] net_ratelimit: 7385 callbacks suppressed [ 463.766962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.785354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:b6:4c:84:bf:80, vlan:0) [ 463.798326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.810838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.823708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.836230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:b6:4c:84:bf:80, vlan:0) [ 463.848783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.861260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.873936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.886404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.472061][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 464.589490][T14659] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.601021][T14659] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.617031][T14659] bridge_slave_0: entered allmulticast mode [ 464.641555][T14659] bridge_slave_0: entered promiscuous mode [ 465.054784][T14659] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.080546][T14659] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.107719][T14659] bridge_slave_1: entered allmulticast mode [ 465.120945][T14659] bridge_slave_1: entered promiscuous mode [ 465.124030][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 465.134960][ C0] lec:lec_tx_timeout: lec0 [ 465.152363][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 465.421956][T14656] hsr_slave_0: entered promiscuous mode [ 465.495277][T14656] hsr_slave_1: entered promiscuous mode [ 465.510126][T14656] debugfs: 'hsr0' already exists in 'hsr' [ 465.526170][T14656] Cannot create hsr debugfs directory [ 465.799225][T14659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.817032][T14672] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.837582][T14672] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.878242][T14672] bridge_slave_0: entered allmulticast mode [ 465.966100][T14672] bridge_slave_0: entered promiscuous mode [ 465.994149][T14672] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.026062][T14672] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.078286][T14672] bridge_slave_1: entered allmulticast mode [ 466.129958][T14672] bridge_slave_1: entered promiscuous mode [ 466.205707][T14659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.225839][ T5983] tipc: Disabling bearer [ 466.272872][ T5983] tipc: Left network mode [ 466.835001][T14672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.849048][T14672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.018657][T14659] team0: Port device team_slave_0 added [ 467.336046][T14792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2217'. [ 467.365879][T14792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2217'. [ 467.409581][T14659] team0: Port device team_slave_1 added [ 467.474323][T14672] team0: Port device team_slave_0 added [ 467.879167][T14672] team0: Port device team_slave_1 added [ 468.420193][T14659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.431047][T14659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.488196][T14659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.519228][ T5489] 8021q: adding VLAN 0 to HW filter on device eth3 [ 468.589073][T14659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.618895][T14659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.650878][T14659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.663972][T14672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.672293][T14672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.702055][T14672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.776915][ C0] net_ratelimit: 7324 callbacks suppressed [ 468.776934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.795459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.809146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.822053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.834511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:b6:4c:84:bf:80, vlan:0) [ 468.847409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.859985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.873229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.885750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:b6:4c:84:bf:80, vlan:0) [ 468.898286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.075464][T14672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.099574][T14672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.167736][T14672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.246153][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 469.320444][T14811] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2220'. [ 469.511733][T14812] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2220'. [ 469.583708][T14659] hsr_slave_0: entered promiscuous mode [ 469.609200][T14659] hsr_slave_1: entered promiscuous mode [ 469.635552][T14659] debugfs: 'hsr0' already exists in 'hsr' [ 469.654769][T14659] Cannot create hsr debugfs directory [ 470.103677][T14672] hsr_slave_0: entered promiscuous mode [ 470.142802][T14672] hsr_slave_1: entered promiscuous mode [ 470.170843][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 470.178957][ C0] lec:lec_tx_timeout: lec0 [ 470.186499][T14672] debugfs: 'hsr0' already exists in 'hsr' [ 470.199988][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 470.217262][T14672] Cannot create hsr debugfs directory [ 471.479360][T14839] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 471.532730][T14839] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 471.610164][T14839] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 472.065314][ T5489] 8021q: adding VLAN 0 to HW filter on device eth4 [ 472.756912][ T5983] hsr_slave_0: left promiscuous mode [ 472.804982][ T5983] hsr_slave_1: left promiscuous mode [ 473.338208][T14864] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input11 [ 473.786977][ C0] net_ratelimit: 7922 callbacks suppressed [ 473.787000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.806594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.819397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.831892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:b6:4c:84:bf:80, vlan:0) [ 473.844875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.857557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.870518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.883253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:b6:4c:84:bf:80, vlan:0) [ 473.895777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.908432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 474.716364][T14656] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 474.772411][T14656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.822536][T14656] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 474.893893][T14656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 474.932371][T14656] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 475.029821][T14656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 475.174361][T14656] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 475.222590][T14656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 475.988165][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 475.996368][ C0] lec:lec_tx_timeout: lec0 [ 476.013791][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 476.470879][ T5983] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.172760][ T5983] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.551578][ T5983] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.593434][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 477.751428][ T5983] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.813189][T14656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.879850][T14656] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.929158][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.936428][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.013520][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.021002][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.572609][ T5983] veth0_to_bridge: left allmulticast mode [ 478.578789][ T5983] veth0_to_bridge: left promiscuous mode [ 478.587521][ T5983] bridge0: port 3(veth0_to_bridge) entered disabled state [ 478.600837][ T5983] bridge_slave_1: left allmulticast mode [ 478.606516][ T5983] bridge_slave_1: left promiscuous mode [ 478.612537][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.624261][ T5983] bridge_slave_0: left allmulticast mode [ 478.634141][ T5983] bridge_slave_0: left promiscuous mode [ 478.640114][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.863891][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.875896][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.886043][ T5983] bond0 (unregistering): Released all slaves [ 478.981901][T14897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.100565][T14659] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 479.116289][T14659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.127558][T14659] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 479.138617][T14659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.175167][T14659] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 479.198220][T14659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.246620][T14659] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 479.264478][T14928] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input12 [ 479.284412][T14659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 479.410643][T14672] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 479.439580][T14672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.459433][T14672] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 479.485972][T14672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.570169][T14672] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 479.615809][T14672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.643690][T14672] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 479.697327][T14672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 479.711318][T14948] ip6t_srh: unknown srh invflags 4000 [ 479.890657][T14656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.236225][T14672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.285268][T14659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.393465][T14659] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.479098][ T5983] hsr_slave_0: left promiscuous mode [ 480.532410][ T5983] hsr_slave_1: left promiscuous mode [ 480.549254][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.569029][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.595464][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.611007][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.658815][ T5983] veth1_macvtap: left promiscuous mode [ 480.676871][ T5983] veth0_macvtap: left promiscuous mode [ 480.692591][ T5983] veth1_vlan: left promiscuous mode [ 480.702959][ T5983] veth0_vlan: left promiscuous mode [ 480.770831][T14978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2242'. [ 480.789081][T14978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2242'. [ 480.809048][T14978] netlink: 58 bytes leftover after parsing attributes in process `syz.1.2242'. [ 481.027000][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 481.035137][ C0] lec:lec_tx_timeout: lec0 [ 481.039895][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 481.096559][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 481.114608][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 481.301948][T14672] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.322111][ T5489] 8021q: adding VLAN 0 to HW filter on device eth5 [ 481.432603][ T7550] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.439800][ T7550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.579376][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.586616][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.631787][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.639049][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.700356][ T7550] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.707692][ T7550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.024224][T15007] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input13 [ 482.160007][T14656] veth0_vlan: entered promiscuous mode [ 482.214840][T14656] veth1_vlan: entered promiscuous mode [ 482.340372][T14656] veth0_macvtap: entered promiscuous mode [ 482.376678][T14656] veth1_macvtap: entered promiscuous mode [ 482.450184][T14656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.493658][T14656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.538203][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.555917][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.610969][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.642689][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.974587][ T129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.013306][ T129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.108520][T14672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.143561][T15048] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2251'. [ 483.258289][ T7550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.284017][T14659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.284834][ T7550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.486466][ T5489] 8021q: adding VLAN 0 to HW filter on device eth6 [ 483.657018][T15064] lo speed is unknown, defaulting to 1000 [ 484.243170][T14672] veth0_vlan: entered promiscuous mode [ 484.319792][T14672] veth1_vlan: entered promiscuous mode [ 484.494934][T14659] veth0_vlan: entered promiscuous mode [ 484.514980][T14672] veth0_macvtap: entered promiscuous mode [ 484.602617][T14672] veth1_macvtap: entered promiscuous mode [ 484.671974][T15088] sit1: entered promiscuous mode [ 484.692428][T15092] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input14 [ 484.706149][T14659] veth1_vlan: entered promiscuous mode [ 484.960549][T14672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.012875][T14672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.122755][ T129] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.152206][ T129] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.228468][ T129] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.278787][ T129] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.346402][T14659] veth0_macvtap: entered promiscuous mode [ 485.388652][ T5489] 8021q: adding VLAN 0 to HW filter on device eth7 [ 485.442771][T14659] veth1_macvtap: entered promiscuous mode [ 485.662614][T15115] netlink: 770 bytes leftover after parsing attributes in process `syz.6.2261'. [ 485.782501][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.835890][T14659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.847402][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.966426][T14659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.995421][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.024737][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.041697][ T5985] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.046920][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 486.058547][ C0] lec:lec_tx_timeout: lec0 [ 486.096676][T15133] xt_TPROXY: Can be used only with -p tcp or -p udp [ 486.118263][T15133] xt_TPROXY: Can be used only with -p tcp or -p udp [ 486.142931][ T5985] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.191832][ T5985] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.236002][ T5985] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.498421][ T129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.544959][ T129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.725360][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.764640][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.167564][T15164] lo speed is unknown, defaulting to 1000 [ 487.426333][T15167] syzkaller0: entered promiscuous mode [ 487.456011][T15167] syzkaller0: entered allmulticast mode [ 487.590643][T15181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2273'. [ 488.001037][T15194] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2275'. [ 489.095310][T15203] netlink: 'syz.3.2277': attribute type 2 has an invalid length. [ 490.615773][ T5489] 8021q: adding VLAN 0 to HW filter on device eth8 [ 490.809378][T15203] l2: entered promiscuous mode [ 491.514259][T15236] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 491.538451][T15236] bridge1: entered allmulticast mode [ 491.585032][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2288'. [ 491.614073][T15244] veth1_macvtap: left promiscuous mode [ 491.683478][T15239] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2286'. [ 492.514671][T15276] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input15 [ 492.531479][T15267] lo speed is unknown, defaulting to 1000 [ 492.911081][ T30] audit: type=1107 audit(1776894419.155:5): pid=15289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 493.125025][ T6428] IPVS: starting estimator thread 0... [ 493.212873][T15306] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2302'. [ 493.230457][T15301] IPVS: using max 27 ests per chain, 64800 per kthread [ 493.239612][T15299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2303'. [ 493.370755][ T6428] IPVS: starting estimator thread 0... [ 493.426969][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 493.487447][T15312] IPVS: using max 28 ests per chain, 67200 per kthread [ 493.628789][T10211] IPVS: starting estimator thread 0... [ 493.628826][T15318] net_ratelimit: 8084 callbacks suppressed [ 493.628918][T15318] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 493.738929][T15322] IPVS: using max 28 ests per chain, 67200 per kthread [ 493.761774][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2309'. [ 493.785125][T15327] netlink: 312 bytes leftover after parsing attributes in process `syz.8.2309'. [ 493.818653][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2309'. [ 493.850067][T15326] lo speed is unknown, defaulting to 1000 [ 493.932430][T15330] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2311'. [ 494.084138][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2313'. [ 494.140968][T15333] team0: Port device syz_tun added [ 494.152795][T15341] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2313'. [ 494.204148][T15336] team0: Port device syz_tun removed [ 494.230221][T15336] bridge_slave_0: left allmulticast mode [ 494.239634][T15336] bridge_slave_0: left promiscuous mode [ 494.245537][T15336] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.260128][T15336] bridge_slave_1: left allmulticast mode [ 494.265946][T15336] bridge_slave_1: left promiscuous mode [ 494.272222][T15336] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.313846][T15336] bond0: (slave bond_slave_0): Releasing backup interface [ 494.351720][T15336] bond0: (slave bond_slave_1): Releasing backup interface [ 494.382124][T15336] team0: Port device team_slave_0 removed [ 494.411294][T15336] team0: Port device team_slave_1 removed [ 494.421254][T15336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.433094][T15336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.445444][T15336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.454904][T15336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.473134][T15336] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 494.706987][ T5840] Bluetooth: hci8: command tx timeout [ 494.864023][T15352] netlink: 'syz.7.2316': attribute type 1 has an invalid length. [ 494.973222][T15357] batadv_slave_0: entered promiscuous mode [ 494.989643][T15357] batadv_slave_0: entered allmulticast mode [ 495.142651][T15361] netlink: 'syz.6.2318': attribute type 1 has an invalid length. [ 496.198432][T15387] syzkaller1: entered promiscuous mode [ 496.216438][T15387] syzkaller1: entered allmulticast mode [ 496.392889][T15394] sit1: entered allmulticast mode [ 496.462417][T15405] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2329'. [ 496.498769][T15405] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2329'. [ 496.595028][T15405] bond1: option arp_all_targets: invalid value (129) [ 496.617883][T15405] bond1 (unregistering): Released all slaves [ 496.675129][T15414] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input16 [ 496.742483][T15420] netlink: 'syz.8.2331': attribute type 10 has an invalid length. [ 497.262859][T15446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.612082][T15474] 8021q: VLANs not supported on caif0 [ 497.784304][T15479] batadv0: entered promiscuous mode [ 497.814707][T15479] macsec0: entered promiscuous mode [ 497.826061][T15479] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 498.283738][T15505] lo speed is unknown, defaulting to 1000 [ 498.294160][T15505] lo speed is unknown, defaulting to 1000 [ 498.307557][T15505] lo speed is unknown, defaulting to 1000 [ 498.403759][T15505] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 498.564957][T15505] lo speed is unknown, defaulting to 1000 [ 498.628060][T15505] lo speed is unknown, defaulting to 1000 [ 498.673541][T15505] lo speed is unknown, defaulting to 1000 [ 498.726654][T15505] lo speed is unknown, defaulting to 1000 [ 498.751828][T15505] lo speed is unknown, defaulting to 1000 [ 498.760129][T15505] lo speed is unknown, defaulting to 1000 [ 498.790124][T15505] lo speed is unknown, defaulting to 1000 [ 498.970114][T15535] syzkaller0: entered promiscuous mode [ 498.975758][T15535] syzkaller0: entered allmulticast mode [ 499.391097][T15561] __nla_validate_parse: 1 callbacks suppressed [ 499.391119][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2362'. [ 499.534792][T15566] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2363'. [ 499.574080][T15568] netlink: 'syz.8.2364': attribute type 2 has an invalid length. [ 499.655627][T15568] netlink: 'syz.8.2364': attribute type 5 has an invalid length. [ 499.889062][T15582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.535500][T15610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2371'. [ 500.853712][T15632] netlink: 'syz.3.2375': attribute type 1 has an invalid length. [ 501.134513][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2378'. [ 501.604510][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 501.958204][T15670] nbd7: detected capacity change from 0 to 63 [ 502.043908][ T5840] block nbd7: Receive control failed (result -104) [ 502.065497][T15687] lo speed is unknown, defaulting to 1000 [ 502.670459][T15728] syzkaller1: entered promiscuous mode [ 502.696991][T15728] syzkaller1: entered allmulticast mode [ 502.887542][T15687] lo speed is unknown, defaulting to 1000 [ 503.418815][T15742] lo speed is unknown, defaulting to 1000 [ 503.535740][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2403'. [ 503.575751][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2403'. [ 503.752557][T15767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2406'. [ 503.912260][T15770] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2406'. [ 503.952655][T15767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.016550][T15742] lo speed is unknown, defaulting to 1000 [ 504.318395][T15769] 8021q: adding VLAN 0 to HW filter on device bond2 [ 504.393972][T15769] bond1: (slave bond2): Enslaving as an active interface with an up link [ 505.200223][T15807] sctp: [Deprecated]: syz.6.2417 (pid 15807) Use of int in max_burst socket option deprecated. [ 505.200223][T15807] Use struct sctp_assoc_value instead [ 505.285792][T15798] bond7: entered allmulticast mode [ 505.300536][T15798] 8021q: adding VLAN 0 to HW filter on device bond7 [ 505.316535][T15800] lo speed is unknown, defaulting to 1000 [ 506.263384][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2428'. [ 506.311687][T15800] lo speed is unknown, defaulting to 1000 [ 506.395863][T15862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2430'. [ 506.407295][T15862] netlink: 'syz.1.2430': attribute type 58 has an invalid length. [ 506.416146][T15862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2430'. [ 506.677539][T15865] syzkaller1: entered promiscuous mode [ 506.683204][T15865] syzkaller1: entered allmulticast mode [ 507.026725][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 507.034884][ C0] lec:lec_tx_timeout: lec0 [ 507.041829][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 507.361253][T15878] syzkaller0: entered promiscuous mode [ 507.378668][T15878] syzkaller0: entered allmulticast mode [ 507.393486][T15878] tipc: Resetting bearer [ 507.422332][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'. [ 507.433166][T15878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 507.442841][T15878] netlink: 'syz.1.2434': attribute type 13 has an invalid length. [ 507.476375][T15883] netlink: zone id is out of range [ 507.498468][T15883] netlink: zone id is out of range [ 507.510039][T15883] netlink: zone id is out of range [ 507.521352][T15883] netlink: zone id is out of range [ 507.532670][T15883] netlink: zone id is out of range [ 507.547544][T15883] netlink: zone id is out of range [ 507.554947][T15883] netlink: zone id is out of range [ 507.560646][T15883] netlink: zone id is out of range [ 507.565881][T15883] netlink: zone id is out of range [ 507.572194][T15883] netlink: zone id is out of range [ 508.709097][T15831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.029317][T15941] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 509.073938][T15950] erspan0: entered promiscuous mode [ 509.873763][T15991] raw_sendmsg: syz.8.2451 forgot to set AF_INET. Fix it! [ 510.072760][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2455'. [ 510.123227][T16006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2455'. [ 510.188473][T16012] sctp: [Deprecated]: syz.3.2455 (pid 16012) Use of int in maxseg socket option. [ 510.188473][T16012] Use struct sctp_assoc_value instead [ 510.413940][T16020] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input17 [ 510.461815][T16010] syzkaller0: entered promiscuous mode [ 510.530444][T16010] syzkaller0: entered allmulticast mode [ 511.201423][T16057] netlink: 'syz.1.2467': attribute type 1 has an invalid length. [ 511.494617][T16064] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2469'. [ 511.514206][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2469'. [ 511.524307][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2469'. [ 511.535239][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2469'. [ 511.545783][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2469'. [ 511.982246][T16073] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input18 [ 512.066433][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 512.074573][ C0] lec:lec_tx_timeout: lec0 [ 514.193288][T16058] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 514.233374][T16072] sit1: entered promiscuous mode [ 514.586423][T16095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2478'. [ 514.714446][T16098] netlink: 'syz.7.2480': attribute type 20 has an invalid length. [ 515.062543][T16111] lo speed is unknown, defaulting to 1000 [ 515.217427][T16118] net_ratelimit: 336 callbacks suppressed [ 515.217451][T16118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.365396][T16122] No such timeout policy "syz0" [ 515.395065][T16121] žÿ: renamed from team_slave_1 (while UP) [ 515.625411][T16111] lo speed is unknown, defaulting to 1000 [ 515.834087][T16135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2489'. [ 517.122320][T16157] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.2494'. [ 517.770312][T16104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.045796][T16172] syzkaller0: entered promiscuous mode [ 518.057342][T16172] syzkaller0: entered allmulticast mode [ 518.161702][T16183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2502'. [ 518.437438][T16195] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input19 [ 518.518578][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2506'. [ 518.605410][T16206] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2508'. [ 518.744217][T16215] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.2511'. [ 518.847773][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2509'. [ 518.888992][T16222] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input20 [ 519.170433][T16224] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.178246][T16224] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.330936][T16237] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 519.354367][T16237] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 519.399779][T16224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.430734][T16224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.575295][ T5913] lo speed is unknown, defaulting to 1000 [ 519.590902][ T5913] syz2: Port: 1 Link DOWN [ 519.608783][T16241] batadv0: entered allmulticast mode [ 519.654588][ T129] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.681586][ T129] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.771603][T16257] netlink: 'syz.3.2522': attribute type 1 has an invalid length. [ 519.810415][ T129] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.863607][T16258] pimreg: entered allmulticast mode [ 519.886001][ T129] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.250093][T16281] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2530'. [ 520.321109][T16287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2533'. [ 520.415318][T16291] netlink: 'syz.6.2532': attribute type 13 has an invalid length. [ 520.460559][T16291] netlink: 'syz.6.2532': attribute type 17 has an invalid length. [ 520.511427][T16292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2532'. [ 520.609582][T16298] netlink: 'syz.1.2537': attribute type 1 has an invalid length. [ 520.747417][T16291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 520.901302][T16298] 8021q: adding VLAN 0 to HW filter on device bond8 [ 520.981122][T16305] bond8: (slave geneve3): making interface the new active one [ 521.025692][T16305] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 521.077538][T16309] ipip0: entered promiscuous mode [ 521.096333][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 521.112370][ T57] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 521.130602][ T57] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 521.144739][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 521.353304][T16321] mac80211_hwsim hwsim13 syzkaller0: left promiscuous mode [ 521.376227][T16321] mac80211_hwsim hwsim13 syzkaller0: left allmulticast mode [ 521.397085][T16319] syzkaller1: entered promiscuous mode [ 521.404637][T16319] syzkaller1: entered allmulticast mode [ 521.755336][T16333] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2547'. [ 522.192220][T16360] netlink: 'syz.6.2552': attribute type 1 has an invalid length. [ 522.406136][T16372] __nla_validate_parse: 2 callbacks suppressed [ 522.406157][T16372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2555'. [ 522.422324][T16373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2555'. [ 522.876309][T16373] veth7: entered allmulticast mode [ 522.960203][T16373] bond10: (slave veth7): Enslaving as an active interface with an up link [ 523.011691][T16372] bond10 (unregistering): (slave veth7): Releasing backup interface [ 523.025281][T16372] bond10 (unregistering): Released all slaves [ 523.384274][T16389] bond1 (unregistering): Released all slaves [ 523.595236][T16398] bond0: entered promiscuous mode [ 523.603001][T16398] batadv0: entered promiscuous mode [ 523.635192][T16398] debugfs: 'hsr1' already exists in 'hsr' [ 523.652834][T16398] Cannot create hsr debugfs directory [ 523.682746][T16398] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 523.703454][T16398] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 523.718185][T16398] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 523.726203][T16398] bond0: left promiscuous mode [ 523.734736][T16398] batadv0: left promiscuous mode [ 525.446469][T16461] lo speed is unknown, defaulting to 1000 [ 525.674825][T16461] lo speed is unknown, defaulting to 1000 [ 525.900209][T16472] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2585'. [ 525.914502][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2585'. [ 525.984025][T16478] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2586'. [ 526.356066][T16489] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2590'. [ 526.369289][T16489] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2590'. [ 526.387131][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2589'. [ 526.422147][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2592'. [ 526.477005][T16498] netlink: 'syz.1.2592': attribute type 13 has an invalid length. [ 526.486402][T16498] netlink: 'syz.1.2592': attribute type 17 has an invalid length. [ 526.542686][T16494] hsr0: entered promiscuous mode [ 526.564173][T16494] macvlan2: entered allmulticast mode [ 526.578003][T16494] hsr0: entered allmulticast mode [ 526.606529][T16494] hsr_slave_0: entered allmulticast mode [ 526.631616][T16494] hsr_slave_1: entered allmulticast mode [ 526.731166][T16498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.901975][T16514] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2596'. [ 527.675792][T16546] dummy0: entered allmulticast mode [ 527.709539][T16546] __nla_validate_parse: 1 callbacks suppressed [ 527.709577][T16546] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2599'. [ 527.823390][T16551] syzkaller1: entered promiscuous mode [ 527.848540][T16551] syzkaller1: entered allmulticast mode [ 528.536264][T16584] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2613'. [ 528.555712][T16587] x_tables: duplicate underflow at hook 2 [ 528.722103][T16591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2615'. [ 528.778233][T16597] netlink: 'syz.8.2618': attribute type 1 has an invalid length. [ 528.886475][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2618'. [ 528.967447][T16597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.055925][T16617] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2621'. [ 529.147994][T16618] IPVS: Scheduler module ip_vs_sip not found [ 529.160865][T16622] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2621'. [ 529.197847][T16601] bond1: (slave gretap1): making interface the new active one [ 529.225840][T16601] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 529.811585][T16655] netlink: 'syz.8.2629': attribute type 10 has an invalid length. [ 529.835105][T16655] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2629'. [ 529.866214][T16655] dummy0: entered promiscuous mode [ 529.892756][T16655] bridge0: port 1(dummy0) entered blocking state [ 529.918227][T16655] bridge0: port 1(dummy0) entered disabled state [ 529.969842][T16655] dummy0: entered allmulticast mode [ 530.073144][T16655] bridge0: port 1(dummy0) entered blocking state [ 530.079736][T16655] bridge0: port 1(dummy0) entered forwarding state [ 530.145043][T16655] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2629'. [ 530.231457][T16655] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2629'. [ 530.374605][T16655] bond0: entered promiscuous mode [ 530.411483][T16655] bond0: left promiscuous mode [ 530.692680][T16692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 530.954871][T16703] bridge_slave_0: left allmulticast mode [ 530.974304][T16703] bridge_slave_0: left promiscuous mode [ 530.986562][T16703] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.028822][T16703] bridge_slave_1: left allmulticast mode [ 531.048118][T16703] bridge_slave_1: left promiscuous mode [ 531.075871][T16703] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.172950][T16703] bond0: (slave bond_slave_0): Releasing backup interface [ 531.235236][T16703] bond0: (slave bond_slave_1): Releasing backup interface [ 531.299129][T16703] team0: Port device team_slave_0 removed [ 531.373096][T16703] team0: Port device team_slave_1 removed [ 531.405325][T16703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.425867][T16703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.443030][T16703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.460145][T16703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.483196][T16703] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 531.602315][T16718] syzkaller1: entered promiscuous mode [ 531.628898][T16718] syzkaller1: entered allmulticast mode [ 531.904702][T16743] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input21 [ 532.263270][T16763] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.313065][T16075] block nbd7: Possible stuck request ffff888026a05080: control (read@0,1024B). Runtime 30 seconds [ 532.327902][T16075] block nbd7: Possible stuck request ffff888026a05240: control (read@1024,1024B). Runtime 30 seconds [ 532.340202][T16075] block nbd7: Possible stuck request ffff888026a05400: control (read@2048,1024B). Runtime 30 seconds [ 532.351991][T16075] block nbd7: Possible stuck request ffff888026a055c0: control (read@3072,1024B). Runtime 30 seconds [ 532.420433][T16767] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2650'. [ 532.500416][T16763] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.612120][T16763] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.706164][T16763] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.885268][ T1144] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.931824][ T1146] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.004952][ T5985] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.112726][T16794] __nla_validate_parse: 3 callbacks suppressed [ 533.112748][T16794] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2659'. [ 533.139093][ T1146] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.166238][T16798] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input22 [ 533.241412][T16791] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2659'. [ 533.294311][T16791] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2659'. [ 533.358778][T16805] netlink: 'syz.8.2662': attribute type 1 has an invalid length. [ 533.502255][T16814] atomic_op ffff888057623198 conn xmit_atomic 0000000000000000 [ 533.528310][T16816] netlink: 'syz.7.2664': attribute type 2 has an invalid length. [ 533.578973][T16816] hmac(sha224): entered promiscuous mode [ 533.633930][T16809] syzkaller1: entered promiscuous mode [ 533.642868][T16816] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.2664'. [ 533.654348][T16809] syzkaller1: entered allmulticast mode [ 533.764156][T16821] netlink: 'syz.1.2665': attribute type 12 has an invalid length. [ 533.814586][T16826] netlink: 'syz.8.2667': attribute type 21 has an invalid length. [ 533.835846][T16826] netlink: 'syz.8.2667': attribute type 22 has an invalid length. [ 533.847009][T16821] netlink: 'syz.1.2665': attribute type 21 has an invalid length. [ 533.854992][T16826] netlink: 'syz.8.2667': attribute type 23 has an invalid length. [ 533.855017][T16826] netlink: 136 bytes leftover after parsing attributes in process `syz.8.2667'. [ 533.914155][T16821] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2665'. [ 534.389470][T16846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input23 [ 534.546528][T16852] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input24 [ 534.709147][T16860] tipc: Resetting bearer [ 534.866563][T16859] tipc: Resetting bearer [ 535.041407][T16878] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2677'. [ 535.096213][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2679'. [ 535.141887][T16884] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2677'. [ 535.294084][T16889] netlink: del zone limit has 8 unknown bytes [ 535.301924][ T3493] tipc: Resetting bearer [ 535.363747][T16889] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.2681'. [ 535.532221][T16894] netlink: 'syz.1.2683': attribute type 32 has an invalid length. [ 535.634444][T16894] bond9: Setting coupled_control to off (0) [ 535.664613][T16901] vlan2: entered promiscuous mode [ 535.677438][T16901] bond0: entered promiscuous mode [ 535.689567][T16901] bond_slave_0: entered promiscuous mode [ 535.707534][T16901] bond_slave_1: entered promiscuous mode [ 536.730445][T16949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.889777][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 536.902097][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 536.918907][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 536.934409][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 536.943655][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 537.312689][T16953] lo speed is unknown, defaulting to 1000 [ 537.607866][T16977] netlink: 'syz.1.2708': attribute type 11 has an invalid length. [ 537.934644][T16953] lo speed is unknown, defaulting to 1000 [ 538.295740][T16997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.492528][T16953] chnl_net:caif_netlink_parms(): no params data found [ 538.777550][T17013] __nla_validate_parse: 6 callbacks suppressed [ 538.777572][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2717'. [ 538.801658][T17013] openvswitch: netlink: Key type 1543 is out of range max 32 [ 538.813330][T17013] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2717'. [ 538.860623][T17015] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input25 [ 539.027164][ T5840] Bluetooth: hci0: command tx timeout [ 539.062794][T16953] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.079935][T16953] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.088324][T16953] bridge_slave_0: entered allmulticast mode [ 539.115889][T16953] bridge_slave_0: entered promiscuous mode [ 539.135540][T16953] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.154705][T16953] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.169368][T16953] bridge_slave_1: entered allmulticast mode [ 539.189380][T16953] bridge_slave_1: entered promiscuous mode [ 539.292203][ T30] audit: type=1800 audit(1776894465.535:6): pid=17031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2721" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=505 res=0 errno=0 [ 539.367244][T16953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.400962][T16953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.528623][T16953] team0: Port device team_slave_0 added [ 539.548537][T16953] team0: Port device team_slave_1 added [ 539.634787][T17042] netlink: 'syz.6.2726': attribute type 30 has an invalid length. [ 539.692976][T16953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.710952][T16953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.740476][T16953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.754404][T16953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.762889][T16953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.789465][T16953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.921655][T16953] hsr_slave_0: entered promiscuous mode [ 539.928898][T16953] hsr_slave_1: entered promiscuous mode [ 539.935537][T16953] debugfs: 'hsr0' already exists in 'hsr' [ 539.942179][T16953] Cannot create hsr debugfs directory [ 539.973580][T17053] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2728'. [ 540.254767][T16953] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.275872][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2731'. [ 540.369934][T16953] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.504735][T16953] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.593492][T17069] netlink: 'syz.6.2734': attribute type 10 has an invalid length. [ 540.610795][T17069] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2734'. [ 540.672518][T16953] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.828388][T17072] tipc: Resetting bearer [ 540.898317][T17073] tipc: Resetting bearer [ 541.092372][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2737'. [ 541.092392][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2737'. [ 541.112404][ T5840] Bluetooth: hci0: command tx timeout [ 541.371558][T16953] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 541.429399][T16953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.449353][T16953] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 541.494782][T16953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.536944][T17098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 541.552234][T16953] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 541.594228][T16953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 541.627916][T16953] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 541.678180][T16953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 541.718931][ T5985] tipc: Resetting bearer [ 541.854078][T17112] sctp: [Deprecated]: syz.1.2741 (pid 17112) Use of int in max_burst socket option. [ 541.854078][T17112] Use struct sctp_assoc_value instead [ 541.990609][T16953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.066096][T16953] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.106331][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.113617][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.140409][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2743'. [ 542.160007][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.167275][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.764866][T17135] can: request_module (can-proto-5) failed. [ 542.765404][T17142] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input26 [ 543.049868][T16953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.188274][ T5840] Bluetooth: hci0: command tx timeout [ 543.221796][T16953] veth0_vlan: entered promiscuous mode [ 543.242535][T16953] veth1_vlan: entered promiscuous mode [ 543.381992][T16953] veth0_macvtap: entered promiscuous mode [ 543.403165][T17161] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2752'. [ 543.425469][T17158] bond10: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 543.445153][T17158] bond10 (unregistering): Released all slaves [ 543.468709][T17163] netlink: 'syz.1.2750': attribute type 33 has an invalid length. [ 543.471727][T17161] xt_hashlimit: max too large, truncated to 1048576 [ 543.480376][T17163] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2750'. [ 543.544605][T16953] veth1_macvtap: entered promiscuous mode [ 543.552608][T17161] netem: change failed [ 543.610882][T16953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.640237][T16953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.665622][ T3493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.694181][ T3493] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.719689][ T3493] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.739602][ T3493] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.936385][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.961776][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.033845][ T7550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.047912][ T7550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.492559][T17185] lo speed is unknown, defaulting to 1000 [ 545.267766][ T5840] Bluetooth: hci0: command tx timeout [ 545.392132][T17185] lo speed is unknown, defaulting to 1000 [ 546.295369][T17249] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.2769'. [ 546.382071][T17247] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.2769'. [ 546.398945][ T5840] block nbd0: Receive control failed (result -32) [ 546.399051][ T50] block nbd0: Receive control failed (result -32) [ 546.426065][T17256] : renamed from veth0_to_bond (while UP) [ 546.714373][T17271] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2773'. [ 547.139425][T17282] netlink: 'syz.3.2775': attribute type 1 has an invalid length. [ 547.488927][T17291] lo speed is unknown, defaulting to 1000 [ 547.890171][T17310] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 547.927705][T17319] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2785'. [ 548.020515][T17323] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2785'. [ 548.161071][T17310] bond2 (unregistering): Released all slaves [ 548.458544][T17291] lo speed is unknown, defaulting to 1000 [ 548.701802][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2789'. [ 549.098873][T17355] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2793'. [ 549.240972][T17361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.735728][T17388] netlink: 'syz.3.2794': attribute type 3 has an invalid length. [ 549.804389][T17388] netlink: 'syz.3.2794': attribute type 3 has an invalid length. [ 550.025118][T17394] vxcan3: entered promiscuous mode [ 550.609718][T17412] netlink: 'syz.6.2806': attribute type 1 has an invalid length. [ 550.719439][T17423] netlink: 'syz.6.2806': attribute type 4 has an invalid length. [ 550.800304][T17426] netlink: 'syz.6.2806': attribute type 1 has an invalid length. [ 550.813412][T17425] FAULT_INJECTION: forcing a failure. [ 550.813412][T17425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.825468][T17412] 8021q: adding VLAN 0 to HW filter on device bond5 [ 550.847525][T17426] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2806'. [ 550.871265][T17425] CPU: 0 UID: 0 PID: 17425 Comm: syz.8.2809 Not tainted syzkaller #0 PREEMPT(full) [ 550.871309][T17425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 550.871339][T17425] Call Trace: [ 550.871348][T17425] [ 550.871357][T17425] dump_stack_lvl+0xe8/0x150 [ 550.871397][T17425] should_fail_ex+0x412/0x560 [ 550.871434][T17425] _copy_from_user+0x2d/0xb0 [ 550.871457][T17425] ___sys_sendmsg+0x1c6/0x360 [ 550.871490][T17425] ? __lock_acquire+0x6b5/0x2cf0 [ 550.871523][T17425] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.871596][T17425] ? __fget_files+0x2a/0x420 [ 550.871623][T17425] ? __fget_files+0x3a0/0x420 [ 550.871663][T17425] __x64_sys_sendmsg+0x1bd/0x2a0 [ 550.871700][T17425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 550.871743][T17425] ? __pfx_ksys_write+0x10/0x10 [ 550.871785][T17425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.871808][T17425] do_syscall_64+0x15f/0xf80 [ 550.871834][T17425] ? trace_irq_disable+0x3b/0x140 [ 550.871858][T17425] ? clear_bhb_loop+0x40/0x90 [ 550.871885][T17425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.871910][T17425] RIP: 0033:0x7f8a6ad9c819 [ 550.871936][T17425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.871955][T17425] RSP: 002b:00007f8a6bcec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.871991][T17425] RAX: ffffffffffffffda RBX: 00007f8a6b015fa0 RCX: 00007f8a6ad9c819 [ 550.872014][T17425] RDX: 0000000000004080 RSI: 0000200000000480 RDI: 0000000000000003 [ 550.872029][T17425] RBP: 00007f8a6bcec090 R08: 0000000000000000 R09: 0000000000000000 [ 550.872043][T17425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.872056][T17425] R13: 00007f8a6b016038 R14: 00007f8a6b015fa0 R15: 00007ffd29e6f6e8 [ 550.872091][T17425] [ 551.115095][T17431] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2806'. [ 551.162613][T17426] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2806'. [ 551.172573][T17426] netlink: 'syz.6.2806': attribute type 1 has an invalid length. [ 551.182154][T17426] netlink: 'syz.6.2806': attribute type 8 has an invalid length. [ 551.418931][T17442] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 551.419413][T17439] __nla_validate_parse: 1 callbacks suppressed [ 551.419432][T17439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2811'. [ 551.754652][T17408] infiniband !yz!: set down [ 551.782270][T17408] infiniband !yz!: added team_slave_0 [ 551.827744][ T50] Bluetooth: hci0: command tx timeout [ 551.942130][T17408] RDS/IB: !yz!: added [ 551.956609][T17408] smc: adding ib device !yz! with port count 1 [ 551.968057][T17408] smc: ib device !yz! port 1 has no pnetid [ 552.218433][T17463] bridge0: port 3(vlan2) entered blocking state [ 552.244153][T17463] bridge0: port 3(vlan2) entered disabled state [ 552.268949][T17463] vlan2: entered allmulticast mode [ 552.274264][T17463] geneve0: entered allmulticast mode [ 552.282479][T17463] vlan2: entered promiscuous mode [ 552.290489][T17463] geneve0: entered promiscuous mode [ 552.351075][T17471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2821'. [ 552.410721][T17475] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2823'. [ 552.420211][T17475] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2823'. [ 552.432143][T17475] netlink: 580 bytes leftover after parsing attributes in process `syz.8.2823'. [ 553.074310][T17487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2826'. [ 553.365705][T17500] FAULT_INJECTION: forcing a failure. [ 553.365705][T17500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.392977][T17500] CPU: 1 UID: 0 PID: 17500 Comm: syz.8.2830 Not tainted syzkaller #0 PREEMPT(full) [ 553.393008][T17500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 553.393022][T17500] Call Trace: [ 553.393031][T17500] [ 553.393047][T17500] dump_stack_lvl+0xe8/0x150 [ 553.393086][T17500] should_fail_ex+0x412/0x560 [ 553.393124][T17500] _copy_from_iter+0x1d3/0x1670 [ 553.393160][T17500] ? rcu_is_watching+0x15/0xb0 [ 553.393198][T17500] ? __pfx__copy_from_iter+0x10/0x10 [ 553.393227][T17500] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 553.393270][T17500] ? netlink_sendmsg+0x650/0xb40 [ 553.393299][T17500] ? skb_put+0x11b/0x210 [ 553.393333][T17500] netlink_sendmsg+0x6c0/0xb40 [ 553.393376][T17500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.393411][T17500] ? aa_sock_msg_perm+0xf1/0x1b0 [ 553.393443][T17500] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 553.393480][T17500] ____sys_sendmsg+0x972/0x9f0 [ 553.393513][T17500] ? __might_fault+0xaf/0x130 [ 553.393549][T17500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.393593][T17500] ? import_iovec+0x73/0xa0 [ 553.393619][T17500] ___sys_sendmsg+0x2a5/0x360 [ 553.393650][T17500] ? __lock_acquire+0x6b5/0x2cf0 [ 553.393683][T17500] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.393756][T17500] ? __fget_files+0x2a/0x420 [ 553.393784][T17500] ? __fget_files+0x3a0/0x420 [ 553.393824][T17500] __x64_sys_sendmsg+0x1bd/0x2a0 [ 553.393861][T17500] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 553.393905][T17500] ? __pfx_ksys_write+0x10/0x10 [ 553.393947][T17500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.393976][T17500] do_syscall_64+0x15f/0xf80 [ 553.394002][T17500] ? trace_irq_disable+0x3b/0x140 [ 553.394025][T17500] ? clear_bhb_loop+0x40/0x90 [ 553.394060][T17500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.394083][T17500] RIP: 0033:0x7f8a6ad9c819 [ 553.394104][T17500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.394122][T17500] RSP: 002b:00007f8a6bcec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.394146][T17500] RAX: ffffffffffffffda RBX: 00007f8a6b015fa0 RCX: 00007f8a6ad9c819 [ 553.394162][T17500] RDX: 0000000000004080 RSI: 0000200000000480 RDI: 0000000000000003 [ 553.394177][T17500] RBP: 00007f8a6bcec090 R08: 0000000000000000 R09: 0000000000000000 [ 553.394191][T17500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.394204][T17500] R13: 00007f8a6b016038 R14: 00007f8a6b015fa0 R15: 00007ffd29e6f6e8 [ 553.394240][T17500] [ 553.690372][T17502] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2831'. [ 554.031827][T17509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2834'. [ 554.036593][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2835'. [ 554.052552][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2835'. [ 554.292328][T17516] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input27 [ 554.375779][ T7411] udevd[7411]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 554.427645][ T7411] udevd[7411]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 554.484108][T17521] lo speed is unknown, defaulting to 1000 [ 555.434927][T17521] lo speed is unknown, defaulting to 1000 [ 556.969285][T17603] __nla_validate_parse: 3 callbacks suppressed [ 556.969309][T17603] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2861'. [ 557.199441][T17605] ipvlan2: entered promiscuous mode [ 557.870354][T17621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 557.907487][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 559.377789][T17656] erspan0: entered promiscuous mode [ 559.384508][T17656] macsec1: entered promiscuous mode [ 559.394148][T17656] erspan0: left promiscuous mode [ 559.402034][T17658] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2877'. [ 559.446281][T17658] gretap0: entered promiscuous mode [ 559.482841][T17658] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2877'. [ 559.499122][T17658] 0ªî{X¹¦: renamed from gretap0 [ 559.508232][T17658] 0ªî{X¹¦: left promiscuous mode [ 559.513374][T17658] 0ªî{X¹¦: entered allmulticast mode [ 559.533773][T17658] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 559.552877][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2877'. [ 559.692803][T17667] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input28 [ 559.821626][T17672] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2881'. [ 559.832565][T17674] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2882'. [ 559.849770][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2881'. [ 559.864992][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2881'. [ 559.874811][T17674] netlink: zone id is out of range [ 559.881432][T17674] netlink: zone id is out of range [ 559.890353][T17674] netlink: zone id is out of range [ 559.895880][T17674] netlink: zone id is out of range [ 559.902056][T17674] netlink: zone id is out of range [ 559.918041][T17674] netlink: zone id is out of range [ 559.923581][T17674] netlink: zone id is out of range [ 559.947435][T17674] netlink: zone id is out of range [ 559.964543][T17674] netlink: zone id is out of range [ 560.130821][T17684] lo speed is unknown, defaulting to 1000 [ 560.178438][T17690] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2886'. [ 560.398534][T17690] 8021q: adding VLAN 0 to HW filter on device bond6 [ 560.707959][T17706] lo speed is unknown, defaulting to 1000 [ 560.716340][T17684] lo speed is unknown, defaulting to 1000 [ 560.893869][T17717] tipc: Started in network mode [ 560.900693][T17717] tipc: Node identity ffffffff, cluster identity 4711 [ 560.913466][T17717] tipc: Enabling of bearer rejected, failed to enable media [ 561.250622][T17723] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input29 [ 561.467231][T17731] tipc: Resetting bearer [ 561.483126][T17731] tipc: Enabling of bearer rejected, already enabled [ 561.566233][T17731] tipc: Resetting bearer [ 561.664218][T17706] lo speed is unknown, defaulting to 1000 [ 561.802159][T17740] syzkaller1: entered promiscuous mode [ 561.821954][T17740] syzkaller1: entered allmulticast mode [ 562.043870][ T7550] tipc: Resetting bearer [ 562.393282][T16075] block nbd7: Possible stuck request ffff888026a05080: control (read@0,1024B). Runtime 60 seconds [ 562.404999][T16075] block nbd7: Possible stuck request ffff888026a05240: control (read@1024,1024B). Runtime 60 seconds [ 562.416889][T16075] block nbd7: Possible stuck request ffff888026a05400: control (read@2048,1024B). Runtime 60 seconds [ 562.430601][T16075] block nbd7: Possible stuck request ffff888026a055c0: control (read@3072,1024B). Runtime 60 seconds [ 562.630955][T17771] tipc: Resetting bearer [ 562.878257][T17772] tipc: Resetting bearer [ 563.043571][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 563.050522][ T3493] tipc: Resetting bearer [ 564.114417][T17817] __nla_validate_parse: 3 callbacks suppressed [ 564.114454][T17817] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2918'. [ 564.889372][T17830] tipc: Started in network mode [ 564.900157][T17830] tipc: Node identity 1e01661a3eca, cluster identity 4711 [ 564.929740][T17830] tipc: Enabled bearer , priority 0 [ 565.021430][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2925'. [ 565.099281][T17831] syzkaller0: entered promiscuous mode [ 565.115124][T17831] syzkaller0: entered allmulticast mode [ 565.131843][T17831] tipc: Resetting bearer [ 565.166508][T17852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2925'. [ 565.265977][T17839] vlan0: entered promiscuous mode [ 565.297707][T17839] bridge0: entered promiscuous mode [ 565.313932][T17831] tipc: Resetting bearer [ 568.060032][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 568.068547][ C0] lec:lec_tx_timeout: lec0 [ 568.790761][ T5194] udevd[5194]: worker [7300] /devices/virtual/block/nbd7 is taking a long time [ 568.980801][T17831] tipc: Disabling bearer [ 568.995340][T12134] tipc: Node number set to 550200858 [ 569.025866][T17866] lo speed is unknown, defaulting to 1000 [ 569.451252][T17902] xt_hashlimit: size too large, truncated to 1048576 [ 569.560671][ T8507] lec:lec_start_xmit: lec0:No lecd attached [ 569.633607][T17899] bridge0: port 2(syz_tun) entered blocking state [ 569.663163][T17899] bridge0: port 2(syz_tun) entered disabled state [ 569.692487][T17899] syz_tun: entered allmulticast mode [ 569.722820][T17899] syz_tun: entered promiscuous mode [ 569.795866][T17907] xt_CT: No such helper "snmp_trap" [ 569.836641][T17866] lo speed is unknown, defaulting to 1000 [ 569.839194][T17912] xt_CT: No such helper "snmp_trap" [ 570.227023][T17881] Bluetooth: hci7: command 0x0406 tx timeout [ 570.233155][T16955] Bluetooth: hci6: command 0x0406 tx timeout [ 570.330865][T17932] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2946'. [ 570.370830][T17936] netlink: 'syz.6.2948': attribute type 10 has an invalid length. [ 570.449679][T17937] netlink: 'syz.6.2948': attribute type 10 has an invalid length. [ 570.481035][T17936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.499397][T17937] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2948'. [ 570.533074][T17936] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 570.603385][T17937] batadv0: entered promiscuous mode [ 570.613160][T17937] batadv0: entered allmulticast mode [ 570.630420][T17937] bond0: (slave batadv0): Releasing backup interface [ 570.659891][T17937] bridge0: port 1(batadv0) entered blocking state [ 570.681621][T17937] bridge0: port 1(batadv0) entered disabled state [ 570.813187][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2950'. [ 571.019074][ T1146] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 571.029548][ T1146] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 571.421087][T17974] netlink: 'syz.8.2956': attribute type 5 has an invalid length. [ 571.915962][T17997] netlink: 'syz.7.2962': attribute type 1 has an invalid length. [ 572.159816][T18003] batadv0: entered promiscuous mode [ 572.180367][T18003] batadv0: entered allmulticast mode [ 572.209729][T18003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.833039][T18027] nbd: socks must be embedded in a SOCK_ITEM attr [ 573.351160][T18025] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2969'. [ 573.595993][T18055] sit2: entered promiscuous mode [ 575.026933][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5460 ms [ 575.035176][ C0] lec:lec_tx_timeout: lec0 [ 576.391251][T18068] lo speed is unknown, defaulting to 1000 [ 576.619557][T18068] lo speed is unknown, defaulting to 1000 [ 589.141103][T17250] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 589.159252][T17250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 589.171431][T17250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 589.179980][T17250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 589.190214][T17250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 589.272338][T17250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 589.287747][T17250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 589.301185][T17250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 589.312086][T17250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 589.317743][T18089] lo speed is unknown, defaulting to 1000 [ 589.326016][T17250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 589.386405][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 589.402403][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 589.411945][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 589.421958][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 589.436115][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 589.581464][T18091] lo speed is unknown, defaulting to 1000 [ 589.586066][T18089] lo speed is unknown, defaulting to 1000 [ 589.835058][T18091] lo speed is unknown, defaulting to 1000 [ 589.843642][T18093] lo speed is unknown, defaulting to 1000 [ 590.069578][T18089] chnl_net:caif_netlink_parms(): no params data found [ 590.253517][T18093] lo speed is unknown, defaulting to 1000 [ 590.281479][T18089] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.288943][T18089] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.296298][T18089] bridge_slave_0: entered allmulticast mode [ 590.305010][T18089] bridge_slave_0: entered promiscuous mode [ 590.333872][T18089] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.341321][T18089] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.349402][T18089] bridge_slave_1: entered allmulticast mode [ 590.359077][T18089] bridge_slave_1: entered promiscuous mode [ 590.441345][T18089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.454745][T18089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.539310][T18089] team0: Port device team_slave_0 added [ 590.553682][T18089] team0: Port device team_slave_1 added [ 590.621974][T18089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.629280][T18089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.655797][T18089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.686686][T18089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.693814][T18089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.720577][T18089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.853585][T18089] hsr_slave_0: entered promiscuous mode [ 590.861250][T18089] hsr_slave_1: entered promiscuous mode [ 590.868016][T18089] debugfs: 'hsr0' already exists in 'hsr' [ 590.873784][T18089] Cannot create hsr debugfs directory [ 590.879826][T18091] chnl_net:caif_netlink_parms(): no params data found [ 591.062923][T18091] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.070590][T18091] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.078021][T18091] bridge_slave_0: entered allmulticast mode [ 591.085548][T18091] bridge_slave_0: entered promiscuous mode [ 591.115072][T18091] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.122895][T18091] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.130407][T18091] bridge_slave_1: entered allmulticast mode [ 591.138240][T18091] bridge_slave_1: entered promiscuous mode [ 591.225616][T18091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.240491][T18091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.267886][T17250] Bluetooth: hci1: command tx timeout [ 591.283869][T18093] chnl_net:caif_netlink_parms(): no params data found [ 591.314857][T18091] team0: Port device team_slave_0 added [ 591.333042][T18091] team0: Port device team_slave_1 added [ 591.393355][T18091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.401097][T18091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.427875][T17250] Bluetooth: hci3: command tx timeout [ 591.428213][T18091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.470053][T18091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.477423][T18091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.505121][T18091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.515922][T17250] Bluetooth: hci5: command tx timeout [ 591.615170][T18091] hsr_slave_0: entered promiscuous mode [ 591.622571][T18091] hsr_slave_1: entered promiscuous mode [ 591.629782][T18091] debugfs: 'hsr0' already exists in 'hsr' [ 591.635676][T18091] Cannot create hsr debugfs directory [ 591.652979][T18093] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.660995][T18093] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.669653][T18093] bridge_slave_0: entered allmulticast mode [ 591.677564][T18093] bridge_slave_0: entered promiscuous mode [ 591.699260][T18093] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.708341][T18093] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.715989][T18093] bridge_slave_1: entered allmulticast mode [ 591.723950][T18093] bridge_slave_1: entered promiscuous mode [ 591.800351][T18093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.825998][T18093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.889107][T18093] team0: Port device team_slave_0 added [ 591.906961][T18093] team0: Port device team_slave_1 added [ 591.998821][T18093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.015136][T18093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.042373][T18093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.082299][T18093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.107301][T18093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.156985][T18093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.270746][ T5840] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 592.291324][ T5840] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 592.301407][ T5840] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 592.345789][T16955] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 592.359711][T16955] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 592.400629][T17250] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 592.419680][T17250] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 592.429510][T17250] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 592.440047][T17250] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 592.450482][T17250] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 592.468460][T16075] block nbd7: Possible stuck request ffff888026a05080: control (read@0,1024B). Runtime 90 seconds [ 592.488471][T16075] block nbd7: Possible stuck request ffff888026a05240: control (read@1024,1024B). Runtime 90 seconds [ 592.508295][T16075] block nbd7: Possible stuck request ffff888026a05400: control (read@2048,1024B). Runtime 90 seconds [ 592.519906][T16075] block nbd7: Possible stuck request ffff888026a055c0: control (read@3072,1024B). Runtime 90 seconds [ 592.789007][T18116] lo speed is unknown, defaulting to 1000 [ 592.816029][T18093] hsr_slave_0: entered promiscuous mode [ 592.841780][T18093] hsr_slave_1: entered promiscuous mode [ 592.857790][T18093] debugfs: 'hsr0' already exists in 'hsr' [ 592.863662][T18093] Cannot create hsr debugfs directory [ 593.321865][T18118] lo speed is unknown, defaulting to 1000 [ 593.339710][T18116] lo speed is unknown, defaulting to 1000 [ 593.348195][T17250] Bluetooth: hci1: command tx timeout [ 593.507755][T17250] Bluetooth: hci3: command tx timeout [ 593.587150][T17250] Bluetooth: hci5: command tx timeout [ 593.781673][T18093] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.796913][T18093] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.908247][T18118] lo speed is unknown, defaulting to 1000 [ 594.040507][T18093] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.056874][T18093] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.208929][T18093] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.230415][T18093] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.376550][T18093] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.391499][T17250] Bluetooth: hci9: command tx timeout [ 594.402631][T18093] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.549178][T17250] Bluetooth: hci10: command tx timeout [ 594.793869][T18116] chnl_net:caif_netlink_parms(): no params data found [ 595.017798][T18116] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.025104][T18116] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.033093][T18116] bridge_slave_0: entered allmulticast mode [ 595.042240][T18116] bridge_slave_0: entered promiscuous mode [ 595.053345][T18116] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.060912][T18116] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.068395][T18116] bridge_slave_1: entered allmulticast mode [ 595.076366][T18116] bridge_slave_1: entered promiscuous mode [ 595.121402][T18116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.137052][T18116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.185282][T18118] chnl_net:caif_netlink_parms(): no params data found [ 595.204975][T18116] team0: Port device team_slave_0 added [ 595.223409][T18116] team0: Port device team_slave_1 added [ 595.298938][T18116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.306199][T18116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.332559][T18116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.362140][T18116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.369629][T18116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.397026][T18116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.426925][T17250] Bluetooth: hci1: command tx timeout [ 595.492259][T18118] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.500988][T18118] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.508746][T18118] bridge_slave_0: entered allmulticast mode [ 595.516942][T18118] bridge_slave_0: entered promiscuous mode [ 595.545255][T18118] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.552749][T18118] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.560296][T18118] bridge_slave_1: entered allmulticast mode [ 595.568751][T18118] bridge_slave_1: entered promiscuous mode [ 595.587215][T17250] Bluetooth: hci3: command tx timeout [ 595.606270][T18116] hsr_slave_0: entered promiscuous mode [ 595.613821][T18116] hsr_slave_1: entered promiscuous mode [ 595.620567][T18116] debugfs: 'hsr0' already exists in 'hsr' [ 595.626383][T18116] Cannot create hsr debugfs directory [ 595.667321][T17250] Bluetooth: hci5: command tx timeout [ 595.693426][T18118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.712442][T18118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.808447][T18118] team0: Port device team_slave_0 added [ 595.830373][T18118] team0: Port device team_slave_1 added [ 595.892932][T18118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.902881][T18118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.933995][T18118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.955549][T18118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.964063][T18118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.993685][T18118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.101146][T18118] hsr_slave_0: entered promiscuous mode [ 596.108485][T18118] hsr_slave_1: entered promiscuous mode [ 596.115430][T18118] debugfs: 'hsr0' already exists in 'hsr' [ 596.122056][T18118] Cannot create hsr debugfs directory [ 596.480010][T17250] Bluetooth: hci9: command tx timeout [ 596.629239][T17250] Bluetooth: hci10: command tx timeout [ 597.507333][T17250] Bluetooth: hci1: command tx timeout [ 597.666981][T17250] Bluetooth: hci3: command tx timeout [ 597.747006][T17250] Bluetooth: hci5: command tx timeout [ 598.548548][T17250] Bluetooth: hci9: command tx timeout [ 598.707007][T17250] Bluetooth: hci10: command tx timeout [ 600.627015][T17250] Bluetooth: hci9: command tx timeout [ 600.787843][T17250] Bluetooth: hci10: command tx timeout [ 622.547195][T16075] block nbd7: Possible stuck request ffff888026a05080: control (read@0,1024B). Runtime 120 seconds [ 622.559399][T16075] block nbd7: Possible stuck request ffff888026a05240: control (read@1024,1024B). Runtime 120 seconds [ 622.572337][T16075] block nbd7: Possible stuck request ffff888026a05400: control (read@2048,1024B). Runtime 120 seconds [ 622.583538][T16075] block nbd7: Possible stuck request ffff888026a055c0: control (read@3072,1024B). Runtime 120 seconds [ 624.474137][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 629.601702][ T1146] veth0_to_bridge: left allmulticast mode [ 629.608584][ T1146] veth0_to_bridge: left promiscuous mode [ 629.617108][ T1146] bridge0: port 1(veth0_to_bridge) entered disabled state [ 629.646618][ T1146] dvmrp0: left allmulticast mode [ 629.652025][ T1146] lo: left allmulticast mode [ 629.986964][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 629.995082][ C0] lec:lec_tx_timeout: lec0 [ 630.110788][ T1146] batman_adv: batadv0: Removing interface: vlan0 [ 630.151479][ T1146] bond7 (unregistering): (slave gretap1): Releasing active interface [ 630.412584][ T1146] bond9 (unregistering): (slave bridge3): Releasing backup interface [ 630.421357][ T1146] bridge3 (unregistering): left promiscuous mode [ 630.427867][ T1146] bridge3 (unregistering): left allmulticast mode [ 630.534497][ T1146] bond1 (unregistering): Released all slaves [ 630.550571][ T1146] bond2 (unregistering): Released all slaves [ 630.566710][ T1146] bond3 (unregistering): Released all slaves [ 630.588276][ T1146] bond4 (unregistering): (slave bond5): Releasing backup interface [ 630.597472][ T1146] bond5 (unregistering): left promiscuous mode [ 630.604000][ T1146] bond4 (unregistering): Released all slaves [ 630.620995][ T1146] bond5 (unregistering): Released all slaves [ 630.638158][ T1146] bond0 (unregistering): Released all slaves [ 630.658870][ T1146] bond6 (unregistering): Released all slaves [ 630.682685][ T1146] bond7 (unregistering): Released all slaves [ 630.699149][ T1146] bond8 (unregistering): Released all slaves [ 630.722653][ T1146] bond9 (unregistering): Released all slaves [ 630.896276][ T1146] : left promiscuous mode [ 631.007710][ T1146] l2: left promiscuous mode [ 631.093028][ T1146] tipc: Disabling bearer [ 631.116048][ T1146] tipc: Left network mode [ 632.214694][ T1146] hsr_slave_0: left promiscuous mode [ 632.223822][ T1146] hsr_slave_1: left promiscuous mode [ 632.243059][ T1146] hsr0: left allmulticast mode [ 632.248369][ T1146] veth0_to_team: left allmulticast mode [ 632.254002][ T1146] veth0_to_team: left promiscuous mode [ 633.169576][ T1146] IPVS: stop unused estimator thread 0... [ 633.991035][ T8507] lec:lec_start_xmit: lec0:No lecd attached [ 639.026777][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 639.034856][ C0] lec:lec_tx_timeout: lec0 [ 649.655913][ T5840] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 649.672657][ T5840] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 649.681141][ T5840] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 649.696075][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 649.709996][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 649.803478][T16955] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 649.819766][T16955] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 649.823616][T18622] lo speed is unknown, defaulting to 1000 [ 649.833236][T16955] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 649.848672][T17881] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 649.857106][T16955] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 649.867959][T16955] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 649.886566][T17881] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 649.895494][T17881] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 649.927041][T17250] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 649.934924][T17250] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 650.095298][T18625] lo speed is unknown, defaulting to 1000 [ 650.100775][T18622] lo speed is unknown, defaulting to 1000 [ 650.338863][T18624] lo speed is unknown, defaulting to 1000 [ 650.350273][T18625] lo speed is unknown, defaulting to 1000 [ 650.595353][T18622] chnl_net:caif_netlink_parms(): no params data found [ 650.713982][T18624] lo speed is unknown, defaulting to 1000 [ 650.803276][T18622] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.810730][T18622] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.818525][T18622] bridge_slave_0: entered allmulticast mode [ 650.827394][T18622] bridge_slave_0: entered promiscuous mode [ 650.843721][T18622] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.851380][T18622] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.859409][T18622] bridge_slave_1: entered allmulticast mode [ 650.868966][T18622] bridge_slave_1: entered promiscuous mode [ 650.954588][T18622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.971395][T18622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.023357][T18622] team0: Port device team_slave_0 added [ 651.044346][T18622] team0: Port device team_slave_1 added [ 651.095021][T18622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.102829][T18622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.130090][T18622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.160481][T18622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.167757][T18622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.194602][T18622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.301580][T18622] hsr_slave_0: entered promiscuous mode [ 651.309618][T18622] hsr_slave_1: entered promiscuous mode [ 651.316185][T18622] debugfs: 'hsr0' already exists in 'hsr' [ 651.323249][T18622] Cannot create hsr debugfs directory [ 651.353519][T18625] chnl_net:caif_netlink_parms(): no params data found [ 651.562293][T18625] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.570210][T18625] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.577872][T18625] bridge_slave_0: entered allmulticast mode [ 651.585676][T18625] bridge_slave_0: entered promiscuous mode [ 651.610007][T18625] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.617922][T18625] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.625265][T18625] bridge_slave_1: entered allmulticast mode [ 651.633464][T18625] bridge_slave_1: entered promiscuous mode [ 651.641361][T18624] chnl_net:caif_netlink_parms(): no params data found [ 651.724349][T18625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.747173][ T5840] Bluetooth: hci11: command tx timeout [ 651.763873][T18625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.851924][T18625] team0: Port device team_slave_0 added [ 651.871463][T18625] team0: Port device team_slave_1 added [ 651.877769][T18624] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.884996][T18624] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.893292][T18624] bridge_slave_0: entered allmulticast mode [ 651.903570][T18624] bridge_slave_0: entered promiscuous mode [ 651.917318][ T5840] Bluetooth: hci13: command tx timeout [ 651.943899][T18624] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.951496][T18624] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.959116][T18624] bridge_slave_1: entered allmulticast mode [ 651.966589][T18624] bridge_slave_1: entered promiscuous mode [ 651.985238][T18625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.992779][ T5840] Bluetooth: hci12: command tx timeout [ 651.999011][T18625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.028200][T18625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.064059][T18625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.071204][T18625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.097684][T18625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.134191][T18624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.150148][T18624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.208145][T18624] team0: Port device team_slave_0 added [ 652.228484][T18624] team0: Port device team_slave_1 added [ 652.244001][T18625] hsr_slave_0: entered promiscuous mode [ 652.252770][T18625] hsr_slave_1: entered promiscuous mode [ 652.259493][T18625] debugfs: 'hsr0' already exists in 'hsr' [ 652.265277][T18625] Cannot create hsr debugfs directory [ 652.298848][T18624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.305877][T18624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.332986][T18624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.347032][T18624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.354075][T18624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.383556][T18624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.564482][T18624] hsr_slave_0: entered promiscuous mode [ 652.580261][T18624] hsr_slave_1: entered promiscuous mode [ 652.607202][T18624] debugfs: 'hsr0' already exists in 'hsr' [ 652.613219][T18624] Cannot create hsr debugfs directory [ 652.630283][T16075] block nbd7: Possible stuck request ffff888026a05080: control (read@0,1024B). Runtime 150 seconds [ 652.642634][T16075] block nbd7: Possible stuck request ffff888026a05240: control (read@1024,1024B). Runtime 150 seconds [ 652.653879][T16075] block nbd7: Possible stuck request ffff888026a05400: control (read@2048,1024B). Runtime 150 seconds [ 652.665499][T16075] block nbd7: Possible stuck request ffff888026a055c0: control (read@3072,1024B). Runtime 150 seconds [ 652.754546][T17250] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 652.774880][T17250] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 652.775740][T16955] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 652.795467][T17250] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 652.809551][T16955] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 652.815210][T17250] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 652.828777][T17250] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 652.831885][T16955] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 652.849943][T17250] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 652.861841][T17250] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 653.076798][T18648] lo speed is unknown, defaulting to 1000 [ 653.314884][T18649] lo speed is unknown, defaulting to 1000 [ 653.319916][T18648] lo speed is unknown, defaulting to 1000 [ 653.686539][T18649] lo speed is unknown, defaulting to 1000 [ 653.830039][T16955] Bluetooth: hci11: command tx timeout [ 653.961901][T18648] chnl_net:caif_netlink_parms(): no params data found [ 653.987344][T16955] Bluetooth: hci13: command tx timeout [ 654.067494][T16955] Bluetooth: hci12: command tx timeout [ 654.192392][T18648] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.199893][T18648] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.207730][T18648] bridge_slave_0: entered allmulticast mode [ 654.215257][T18648] bridge_slave_0: entered promiscuous mode [ 654.224330][T18648] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.232389][T18648] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.240148][T18648] bridge_slave_1: entered allmulticast mode [ 654.248112][T18648] bridge_slave_1: entered promiscuous mode [ 654.309306][T18648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.337596][T18648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.413813][T18648] team0: Port device team_slave_0 added [ 654.435550][T18648] team0: Port device team_slave_1 added [ 654.500308][T18648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.507396][T18648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.533941][T18648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.545495][T18649] chnl_net:caif_netlink_parms(): no params data found [ 654.559832][T18648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.567213][T18648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.594433][T18648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.698374][T18648] hsr_slave_0: entered promiscuous mode [ 654.705142][T18648] hsr_slave_1: entered promiscuous mode [ 654.712363][T18648] debugfs: 'hsr0' already exists in 'hsr' [ 654.718289][T18648] Cannot create hsr debugfs directory [ 654.748214][T18649] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.755547][T18649] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.763326][T18649] bridge_slave_0: entered allmulticast mode [ 654.771296][T18649] bridge_slave_0: entered promiscuous mode [ 654.792543][T18649] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.800035][T18649] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.808019][T18649] bridge_slave_1: entered allmulticast mode [ 654.815675][T18649] bridge_slave_1: entered promiscuous mode [ 654.866868][T16955] Bluetooth: hci14: command tx timeout [ 654.884560][T18649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.897996][T18649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.947215][T16955] Bluetooth: hci15: command tx timeout [ 654.961171][T18649] team0: Port device team_slave_0 added [ 654.977428][T18649] team0: Port device team_slave_1 added [ 655.033306][T18649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.040625][T18649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.067367][T18649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.087650][T18649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.095526][T18649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.122396][T18649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.212908][T18649] hsr_slave_0: entered promiscuous mode [ 655.220619][T18649] hsr_slave_1: entered promiscuous mode [ 655.227399][T18649] debugfs: 'hsr0' already exists in 'hsr' [ 655.233187][T18649] Cannot create hsr debugfs directory [ 655.908065][T16955] Bluetooth: hci11: command tx timeout [ 656.066967][T16955] Bluetooth: hci13: command tx timeout [ 656.147130][T16955] Bluetooth: hci12: command tx timeout [ 656.946990][T16955] Bluetooth: hci14: command tx timeout [ 657.027072][T16955] Bluetooth: hci15: command tx timeout [ 657.986959][T16955] Bluetooth: hci11: command tx timeout [ 658.146856][T16955] Bluetooth: hci13: command tx timeout [ 658.227499][T16955] Bluetooth: hci12: command tx timeout [ 659.027112][T16955] Bluetooth: hci14: command tx timeout [ 659.106984][T16955] Bluetooth: hci15: command tx timeout [ 661.106921][T16955] Bluetooth: hci14: command tx timeout [ 661.186937][T16955] Bluetooth: hci15: command tx timeout [ 665.438189][ T129] bridge_slave_1: left allmulticast mode [ 665.443904][ T129] bridge_slave_1: left promiscuous mode [ 665.449926][ T129] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.459535][ T129] bridge_slave_0: left allmulticast mode [ 665.465235][ T129] bridge_slave_0: left promiscuous mode [ 665.472904][ T129] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.490853][ T129] vlan3: left promiscuous mode [ 665.495702][ T129] team0: left promiscuous mode [ 665.500734][ T129] team_slave_0: left promiscuous mode [ 665.506346][ T129] team_slave_1: left promiscuous mode [ 665.513664][ T129] bridge4: port 2(vlan3) entered disabled state [ 665.524113][ T129] veth0_to_bond: left allmulticast mode [ 665.529992][ T129] veth0_to_bond: left promiscuous mode [ 665.535670][ T129] bridge4: port 1(veth0_to_bond) entered disabled state [ 665.547012][ T129] pimreg: left allmulticast mode [ 665.729353][ T129] bond3 (unregistering): (slave erspan2): Releasing active interface [ 665.914612][ T129] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 666.056178][ T129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.065416][ T129] bond_slave_0: left promiscuous mode [ 666.073500][ T129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.083463][ T129] bond_slave_1: left promiscuous mode [ 666.090094][ T129] bond0 (unregistering): Released all slaves [ 666.101634][ T129] bond1 (unregistering): Released all slaves [ 666.118064][ T129] bond2 (unregistering): Released all slaves [ 666.134919][ T129] bond3 (unregistering): Released all slaves [ 666.155736][ T129] bond4 (unregistering): Released all slaves [ 666.179740][ T129] bond5 (unregistering): Released all slaves [ 666.327770][ T129] tipc: Left network mode [ 666.493122][ T129] IPVS: stopping backup sync thread 7100 ... [ 667.016582][ T129] batadv0: left promiscuous mode [ 667.039144][ T129] hsr_slave_0: left promiscuous mode [ 667.045232][ T129] hsr_slave_1: left promiscuous mode [ 667.051615][ T129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.060174][ T129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.354950][ T129] team_slave_1 (unregistering): left allmulticast mode [ 667.363095][ T129] team0 (unregistering): Port device team_slave_1 removed [ 667.384826][ T129] team_slave_0 (unregistering): left allmulticast mode [ 667.392747][ T129] team0 (unregistering): Port device team_slave_0 removed [ 667.504907][ T3493] smc: removing ib device sqz0 [ 667.520026][ T24] lo speed is unknown, defaulting to 1000 [ 667.525945][ T24] sqz0: Port: 1 Link DOWN [ 670.202586][ T129] IPVS: stop unused estimator thread 0... [ 682.274846][ T5194] udevd[5194]: worker [7300] /devices/virtual/block/nbd7 timeout; kill it [ 682.283701][ T5194] udevd[5194]: seq 25200 '/devices/virtual/block/nbd7' killed [ 682.708997][T16075] block nbd7: Possible stuck request ffff888026a05080: control (read@0,1024B). Runtime 180 seconds [ 682.719937][T16075] block nbd7: Possible stuck request ffff888026a05240: control (read@1024,1024B). Runtime 180 seconds [ 682.731441][T16075] block nbd7: Possible stuck request ffff888026a05400: control (read@2048,1024B). Runtime 180 seconds [ 682.743706][T16075] block nbd7: Possible stuck request ffff888026a055c0: control (read@3072,1024B). Runtime 180 seconds [ 685.912227][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 687.991746][T17881] Bluetooth: hci8: command 0x0406 tx timeout [ 691.028069][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 691.036164][ C0] lec:lec_tx_timeout: lec0 [ 696.146972][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 698.465963][ T8507] lec:lec_start_xmit: lec0:No lecd attached [ 703.986902][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5520 ms [ 703.994976][ C0] lec:lec_tx_timeout: lec0 [ 709.687758][T17881] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 709.704265][T17881] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 709.713282][T17881] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 709.735219][ T5840] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 709.744353][ T5840] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 709.745523][T17250] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 709.775795][T17250] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 709.789079][T17250] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 709.806498][T17250] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 709.815198][T17250] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 709.848897][T18671] lo speed is unknown, defaulting to 1000 [ 709.880748][T18673] lo speed is unknown, defaulting to 1000 [ 710.250378][T17250] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 710.266236][T17250] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 710.275141][T17250] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 710.284828][T17250] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 710.297008][T17250] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 710.349028][T18671] chnl_net:caif_netlink_parms(): no params data found [ 710.505565][T18678] lo speed is unknown, defaulting to 1000 [ 710.509233][T18671] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.518739][T18671] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.526436][T18671] bridge_slave_0: entered allmulticast mode [ 710.534786][T18671] bridge_slave_0: entered promiscuous mode [ 710.557087][T18671] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.568795][T18671] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.576172][T18671] bridge_slave_1: entered allmulticast mode [ 710.585688][T18671] bridge_slave_1: entered promiscuous mode [ 710.641647][T18671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.662370][T18671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.745816][T18671] team0: Port device team_slave_0 added [ 710.777567][T18671] team0: Port device team_slave_1 added [ 710.861745][T18671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.869163][T18671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.895732][T18671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.918072][T18673] chnl_net:caif_netlink_parms(): no params data found [ 710.931748][T18671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.938796][T18671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.967128][T18671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.129038][T18671] hsr_slave_0: entered promiscuous mode [ 711.135765][T18671] hsr_slave_1: entered promiscuous mode [ 711.165717][T18673] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.173286][T18673] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.180923][T18673] bridge_slave_0: entered allmulticast mode [ 711.189654][T18673] bridge_slave_0: entered promiscuous mode [ 711.213283][T18673] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.220738][T18673] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.228631][T18673] bridge_slave_1: entered allmulticast mode [ 711.236137][T18673] bridge_slave_1: entered promiscuous mode [ 711.322512][T18673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.351150][T18673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.411809][T18673] team0: Port device team_slave_0 added [ 711.423304][T18673] team0: Port device team_slave_1 added [ 711.533143][T18678] chnl_net:caif_netlink_parms(): no params data found [ 711.546248][T18673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.553812][T18673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.580278][T18673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.594540][T18673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.601774][T18673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.629093][T18673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.812089][T18673] hsr_slave_0: entered promiscuous mode [ 711.819141][T18673] hsr_slave_1: entered promiscuous mode [ 711.826110][T18673] debugfs: 'hsr0' already exists in 'hsr' [ 711.832223][ T50] Bluetooth: hci16: command tx timeout [ 711.838321][T18673] Cannot create hsr debugfs directory [ 711.845581][T18678] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.853804][T18678] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.862752][T18678] bridge_slave_0: entered allmulticast mode [ 711.873938][T18678] bridge_slave_0: entered promiscuous mode [ 711.906649][T18678] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.912709][ T50] Bluetooth: hci17: command tx timeout [ 711.914024][T18678] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.928681][T18678] bridge_slave_1: entered allmulticast mode [ 711.937543][T18678] bridge_slave_1: entered promiscuous mode [ 712.014197][T18678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.034163][T18678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.111434][T18678] team0: Port device team_slave_0 added [ 712.120247][T18678] team0: Port device team_slave_1 added [ 712.211670][T18678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.219484][T18678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.246455][T18678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.259566][T18678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.266559][T18678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.294859][T18678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.387004][ T50] Bluetooth: hci18: command tx timeout [ 712.432436][T18678] hsr_slave_0: entered promiscuous mode [ 712.441782][T18678] hsr_slave_1: entered promiscuous mode [ 712.448767][T18678] debugfs: 'hsr0' already exists in 'hsr' [ 712.454546][T18678] Cannot create hsr debugfs directory [ 712.739104][ T5840] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 712.749689][ T5840] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 712.764088][ T5840] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 712.774870][ T5840] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 712.783120][ T5840] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 712.792299][T16075] block nbd7: Possible stuck request ffff888026a05080: control (read@0,1024B). Runtime 210 seconds [ 712.803720][T16075] block nbd7: Possible stuck request ffff888026a05240: control (read@1024,1024B). Runtime 210 seconds [ 712.814907][T16075] block nbd7: Possible stuck request ffff888026a05400: control (read@2048,1024B). Runtime 210 seconds [ 712.827592][T16075] block nbd7: Possible stuck request ffff888026a055c0: control (read@3072,1024B). Runtime 210 seconds [ 712.933708][T18697] lo speed is unknown, defaulting to 1000 [ 713.362829][T18697] chnl_net:caif_netlink_parms(): no params data found [ 713.457832][T18697] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.465375][T18697] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.473034][T18697] bridge_slave_0: entered allmulticast mode [ 713.480671][T18697] bridge_slave_0: entered promiscuous mode [ 713.489338][T18697] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.496543][T18697] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.504308][T18697] bridge_slave_1: entered allmulticast mode [ 713.513158][T18697] bridge_slave_1: entered promiscuous mode [ 713.546075][T18697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.560318][T18697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.595036][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 713.601410][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 713.607632][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 713.670534][T18697] team0: Port device team_slave_0 added [ 713.681478][T18697] team0: Port device team_slave_1 added [ 713.721212][T18697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.728566][T18697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.755070][T18697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.769115][T18697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.776117][T18697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.803063][T18697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.876145][T18697] hsr_slave_0: entered promiscuous mode [ 713.882370][T17881] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 713.893805][T18697] hsr_slave_1: entered promiscuous mode [ 713.894371][T17881] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 713.904096][T18697] debugfs: 'hsr0' already exists in 'hsr' [ 713.913571][T17250] Bluetooth: hci16: command tx timeout [ 713.914859][T18697] Cannot create hsr debugfs directory [ 713.927217][T17881] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 713.938839][T17881] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 713.946916][T17881] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 713.987058][T16955] Bluetooth: hci17: command tx timeout [ 714.049452][T18708] lo speed is unknown, defaulting to 1000 [ 714.429570][T18708] chnl_net:caif_netlink_parms(): no params data found [ 714.478670][T16955] Bluetooth: hci18: command tx timeout [ 714.567222][T18708] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.574476][T18708] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.582065][T18708] bridge_slave_0: entered allmulticast mode [ 714.590767][T18708] bridge_slave_0: entered promiscuous mode [ 714.610342][T18708] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.617966][T18708] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.625323][T18708] bridge_slave_1: entered allmulticast mode [ 714.634104][T18708] bridge_slave_1: entered promiscuous mode [ 714.690461][T18708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.703494][T18708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.739412][T18708] team0: Port device team_slave_0 added [ 714.747954][T18708] team0: Port device team_slave_1 added [ 714.778071][T18708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.785194][T18708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.813144][T18708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.825964][T18708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.833488][T18708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.859669][T18708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.877011][T16955] Bluetooth: hci19: command tx timeout [ 714.916105][T18708] hsr_slave_0: entered promiscuous mode [ 714.923368][T18708] hsr_slave_1: entered promiscuous mode [ 714.930132][T18708] debugfs: 'hsr0' already exists in 'hsr' [ 714.935908][T18708] Cannot create hsr debugfs directory [ 715.987124][T17881] Bluetooth: hci16: command tx timeout [ 715.991938][T16955] Bluetooth: hci20: command tx timeout [ 716.067046][T16955] Bluetooth: hci17: command tx timeout [ 716.546988][T16955] Bluetooth: hci18: command tx timeout [ 716.947043][T16955] Bluetooth: hci19: command tx timeout [ 718.066937][T16955] Bluetooth: hci20: command tx timeout [ 718.067970][T17881] Bluetooth: hci16: command tx timeout [ 718.147044][T16955] Bluetooth: hci17: command tx timeout [ 718.627009][T16955] Bluetooth: hci18: command tx timeout [ 718.713063][T16955] Bluetooth: hci10: command 0x0406 tx timeout [ 718.713077][T17881] Bluetooth: hci9: command 0x0406 tx timeout [ 719.027257][T18707] Bluetooth: hci19: command tx timeout [ 720.147030][T18707] Bluetooth: hci20: command tx timeout [ 721.116897][T18707] Bluetooth: hci19: command tx timeout [ 722.236977][T18707] Bluetooth: hci20: command tx timeout [ 736.467315][ T31] INFO: task syz.7.2973:18038 blocked for more than 143 seconds. [ 736.475334][ T31] Not tainted syzkaller #0 [ 736.480457][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 736.489386][ T31] task:syz.7.2973 state:D stack:26328 pid:18038 tgid:18035 ppid:14659 task_flags:0x480140 flags:0x00080002 [ 736.502744][ T31] Call Trace: [ 736.506110][ T31] [ 736.509826][ T31] __schedule+0x17b4/0x5680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 736.514431][ T31] ? __pfx___schedule+0x10/0x10 [ 736.519713][ T31] ? schedule+0x90/0x360 [ 736.524093][ T31] schedule+0x164/0x360 [ 736.528760][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 736.534768][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 736.541319][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 736.549259][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 736.555442][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 736.562470][ T31] nbd_set_size+0x454/0x680 [ 736.567413][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 736.572594][ T31] ? nla_memcpy+0x5b/0xc0 [ 736.577436][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 736.585783][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 736.607836][ T31] ? rcu_is_watching+0x15/0xb0 [ 736.623259][ T31] ? trace_kmalloc+0x2a/0xf0 [ 736.641798][ T31] ? __nla_parse+0x40/0x60 [ 736.650234][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 736.657068][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 736.663498][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 736.669865][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 736.676038][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 736.682193][ T31] genl_rcv_msg+0x61c/0x7a0 [ 736.687518][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 736.692649][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 736.701332][ T31] netlink_rcv_skb+0x232/0x4b0 [ 736.706486][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 736.712071][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 736.717590][ T31] ? down_read+0x270/0x2e0 [ 736.722094][ T31] ? genl_rcv+0xd/0x40 [ 736.726219][ T31] genl_rcv+0x28/0x40 [ 736.730628][ T31] netlink_unicast+0x75c/0x8e0 [ 736.735594][ T31] netlink_sendmsg+0x813/0xb40 [ 736.741070][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.746489][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 736.752387][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 736.758182][ T31] ____sys_sendmsg+0x972/0x9f0 [ 736.763048][ T31] ? __might_fault+0xaf/0x130 [ 736.768327][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 736.773721][ T31] ? import_iovec+0x73/0xa0 [ 736.778580][ T31] ___sys_sendmsg+0x2a5/0x360 [ 736.783678][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 736.790049][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 736.795354][ T31] ? futex_wake+0x4ac/0x580 [ 736.800286][ T31] ? __fget_files+0x2a/0x420 [ 736.804981][ T31] ? __fget_files+0x3a0/0x420 [ 736.810409][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 736.815509][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 736.821331][ T31] ? rcu_is_watching+0x15/0xb0 [ 736.826191][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.832567][ T31] do_syscall_64+0x15f/0xf80 [ 736.837506][ T31] ? trace_irq_disable+0x3b/0x140 [ 736.842592][ T31] ? clear_bhb_loop+0x40/0x90 [ 736.847506][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.853467][ T31] RIP: 0033:0x7f3d15b9c819 [ 736.858016][ T31] RSP: 002b:00007f3d16a5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.866479][ T31] RAX: ffffffffffffffda RBX: 00007f3d15e15fa0 RCX: 00007f3d15b9c819 [ 736.874875][ T31] RDX: 0000000020000000 RSI: 0000200000005e00 RDI: 0000000000000004 [ 736.883032][ T31] RBP: 00007f3d15c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 736.891269][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.899513][ T31] R13: 00007f3d15e16038 R14: 00007f3d15e15fa0 R15: 00007fff3560a178 [ 736.907740][ T31] [ 736.911166][ T31] INFO: task syz.7.2973:18039 blocked for more than 143 seconds. [ 736.919358][ T31] Not tainted syzkaller #0 [ 736.924378][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 736.933336][ T31] task:syz.7.2973 state:D stack:28024 pid:18039 tgid:18035 ppid:14659 task_flags:0x400040 flags:0x00080002 [ 736.945404][ T31] Call Trace: [ 736.950776][ T31] [ 736.953794][ T31] __schedule+0x17b4/0x5680 [ 736.958805][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 736.963887][ T31] ? __pfx___schedule+0x10/0x10 [ 736.969065][ T31] ? schedule+0x90/0x360 [ 736.973390][ T31] schedule+0x164/0x360 [ 736.977894][ T31] schedule_preempt_disabled+0x13/0x30 [ 736.983453][ T31] __mutex_lock+0x7f5/0x1550 [ 736.988643][ T31] ? kernel_text_address+0xa5/0xe0 [ 736.993932][ T31] ? __mutex_lock+0x606/0x1550 [ 736.998945][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 737.003698][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 737.009130][ T31] ? stack_trace_save+0xa9/0x100 [ 737.014986][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 737.020260][ T31] ? radix_tree_lookup+0x240/0x290 [ 737.025440][ T31] genl_rcv_msg+0x10b/0x7a0 [ 737.030514][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 737.035621][ T31] netlink_rcv_skb+0x232/0x4b0 [ 737.040694][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 737.045892][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 737.051636][ T31] ? down_read+0x270/0x2e0 [ 737.056146][ T31] ? genl_rcv+0xd/0x40 [ 737.060524][ T31] genl_rcv+0x28/0x40 [ 737.064559][ T31] netlink_unicast+0x75c/0x8e0 [ 737.069625][ T31] netlink_sendmsg+0x813/0xb40 [ 737.074485][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.079984][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 737.084992][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 737.090628][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.096094][ T31] __sys_sendto+0x672/0x710 [ 737.100813][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 737.105905][ T31] ? do_futex+0x333/0x420 [ 737.112195][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 737.119362][ T31] ? rcu_is_watching+0x15/0xb0 [ 737.124270][ T31] __x64_sys_sendto+0xde/0x100 [ 737.130451][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.136981][ T31] do_syscall_64+0x15f/0xf80 [ 737.141646][ T31] ? trace_irq_disable+0x3b/0x140 [ 737.146929][ T31] ? clear_bhb_loop+0x40/0x90 [ 737.151673][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.157805][ T31] RIP: 0033:0x7f3d15b5d04e [ 737.162274][ T31] RSP: 002b:00007f3d16a37e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 737.171069][ T31] RAX: ffffffffffffffda RBX: 00007f3d16a396c0 RCX: 00007f3d15b5d04e [ 737.179186][ T31] RDX: 000000000000001c RSI: 00007f3d16a38000 RDI: 0000000000000004 [ 737.187569][ T31] RBP: 0000000000000000 R08: 00007f3d16a37f04 R09: 000000000000000c [ 737.195606][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 737.204105][ T31] R13: 00007f3d16a37f58 R14: 00007f3d16a38000 R15: 0000000000000000 [ 737.212510][ T31] [ 737.215631][ T31] INFO: task syz.3.2975:18047 blocked for more than 144 seconds. [ 737.226973][ T31] Not tainted syzkaller #0 [ 737.232032][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 737.241052][ T31] task:syz.3.2975 state:D stack:27936 pid:18047 tgid:18043 ppid:16953 task_flags:0x400040 flags:0x00080002 [ 737.253234][ T31] Call Trace: [ 737.257950][ T31] [ 737.261012][ T31] __schedule+0x17b4/0x5680 [ 737.265570][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 737.272160][ T31] ? __pfx___schedule+0x10/0x10 [ 737.277341][ T31] ? schedule+0x90/0x360 [ 737.281674][ T31] schedule+0x164/0x360 [ 737.285891][ T31] schedule_preempt_disabled+0x13/0x30 [ 737.291664][ T31] __mutex_lock+0x7f5/0x1550 [ 737.296329][ T31] ? __mutex_lock+0x606/0x1550 [ 737.301294][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 737.306044][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 737.311321][ T31] ? radix_tree_lookup+0x240/0x290 [ 737.316513][ T31] genl_rcv_msg+0x10b/0x7a0 [ 737.322278][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 737.327531][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 737.332991][ T31] netlink_rcv_skb+0x232/0x4b0 [ 737.338000][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 737.343091][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 737.348872][ T31] ? down_read+0x270/0x2e0 [ 737.353367][ T31] ? genl_rcv+0xd/0x40 [ 737.357924][ T31] genl_rcv+0x28/0x40 [ 737.361996][ T31] netlink_unicast+0x75c/0x8e0 [ 737.367006][ T31] netlink_sendmsg+0x813/0xb40 [ 737.371850][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.377460][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 737.382495][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 737.388005][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.393407][ T31] __sys_sendto+0x672/0x710 [ 737.398389][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 737.403610][ T31] ? exc_page_fault+0x6a/0xc0 [ 737.408573][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 737.413934][ T31] __x64_sys_sendto+0xde/0x100 [ 737.418865][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.425326][ T31] do_syscall_64+0x15f/0xf80 [ 737.430423][ T31] ? trace_irq_disable+0x3b/0x140 [ 737.435530][ T31] ? clear_bhb_loop+0x40/0x90 [ 737.440920][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.446994][ T31] RIP: 0033:0x7fd44ed5d04e [ 737.451471][ T31] RSP: 002b:00007fd44cff4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 737.460261][ T31] RAX: ffffffffffffffda RBX: 00007fd44cff66c0 RCX: 00007fd44ed5d04e [ 737.468737][ T31] RDX: 0000000000000020 RSI: 00007fd44cff5000 RDI: 0000000000000007 [ 737.476952][ T31] RBP: 0000000000000000 R08: 00007fd44cff4f04 R09: 000000000000000c [ 737.484987][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 737.493102][ T31] R13: 00007fd44cff4f58 R14: 00007fd44cff5000 R15: 0000000000000000 [ 737.501450][ T31] [ 737.504574][ T31] INFO: task syz.6.2977:18053 blocked for more than 144 seconds. [ 737.516803][ T31] Not tainted syzkaller #0 [ 737.525546][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 737.534528][ T31] task:syz.6.2977 state:D stack:27936 pid:18053 tgid:18052 ppid:14656 task_flags:0x400040 flags:0x00080002 [ 737.546889][ T31] Call Trace: [ 737.550251][ T31] [ 737.553203][ T31] __schedule+0x17b4/0x5680 [ 737.557850][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 737.562851][ T31] ? __pfx___schedule+0x10/0x10 [ 737.568010][ T31] ? schedule+0x90/0x360 [ 737.572344][ T31] schedule+0x164/0x360 [ 737.576530][ T31] schedule_preempt_disabled+0x13/0x30 [ 737.582537][ T31] __mutex_lock+0x7f5/0x1550 [ 737.587804][ T31] ? __mutex_lock+0x606/0x1550 [ 737.592686][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 737.597682][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 737.602796][ T31] ? radix_tree_lookup+0x240/0x290 [ 737.608228][ T31] genl_rcv_msg+0x10b/0x7a0 [ 737.612829][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 737.618057][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 737.623514][ T31] netlink_rcv_skb+0x232/0x4b0 [ 737.629738][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 737.634851][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 737.640412][ T31] ? down_read+0x270/0x2e0 [ 737.644905][ T31] ? genl_rcv+0xd/0x40 [ 737.649329][ T31] genl_rcv+0x28/0x40 [ 737.653401][ T31] netlink_unicast+0x75c/0x8e0 [ 737.658414][ T31] netlink_sendmsg+0x813/0xb40 [ 737.663264][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.669030][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 737.674089][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 737.679763][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.685144][ T31] __sys_sendto+0x672/0x710 [ 737.690140][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 737.695278][ T31] ? exc_page_fault+0x6a/0xc0 [ 737.700306][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 737.705788][ T31] __x64_sys_sendto+0xde/0x100 [ 737.710681][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.717053][ T31] do_syscall_64+0x15f/0xf80 [ 737.721729][ T31] ? trace_irq_disable+0x3b/0x140 [ 737.727226][ T31] ? clear_bhb_loop+0x40/0x90 [ 737.732586][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.739082][ T31] RIP: 0033:0x7fc769f5d04e [ 737.743546][ T31] RSP: 002b:00007fc76ae5ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 737.752663][ T31] RAX: ffffffffffffffda RBX: 00007fc76ae5c6c0 RCX: 00007fc769f5d04e [ 737.760801][ T31] RDX: 0000000000000020 RSI: 00007fc76ae5b000 RDI: 0000000000000003 [ 737.769098][ T31] RBP: 0000000000000000 R08: 00007fc76ae5af04 R09: 000000000000000c [ 737.777248][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 737.785438][ T31] R13: 00007fc76ae5af58 R14: 00007fc76ae5b000 R15: 0000000000000000 [ 737.793922][ T31] [ 737.797398][ T31] INFO: task syz.6.2977:18056 blocked for more than 144 seconds. [ 737.805178][ T31] Not tainted syzkaller #0 [ 737.810606][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 737.819666][ T31] task:syz.6.2977 state:D stack:27288 pid:18056 tgid:18052 ppid:14656 task_flags:0x400040 flags:0x00080002 [ 737.833919][ T31] Call Trace: [ 737.837426][ T31] [ 737.840415][ T31] __schedule+0x17b4/0x5680 [ 737.844990][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 737.850211][ T31] ? __pfx___schedule+0x10/0x10 [ 737.855145][ T31] ? schedule+0x90/0x360 [ 737.859623][ T31] schedule+0x164/0x360 [ 737.863942][ T31] schedule_preempt_disabled+0x13/0x30 [ 737.869670][ T31] __mutex_lock+0x7f5/0x1550 [ 737.874344][ T31] ? __mutex_lock+0x606/0x1550 [ 737.879499][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 737.884239][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 737.889544][ T31] ? radix_tree_lookup+0x240/0x290 [ 737.894828][ T31] genl_rcv_msg+0x10b/0x7a0 [ 737.899480][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 737.904595][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 737.910480][ T31] netlink_rcv_skb+0x232/0x4b0 [ 737.915346][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 737.920735][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 737.926123][ T31] ? down_read+0x270/0x2e0 [ 737.930828][ T31] ? genl_rcv+0xd/0x40 [ 737.935687][ T31] genl_rcv+0x28/0x40 [ 737.939873][ T31] netlink_unicast+0x75c/0x8e0 [ 737.944696][ T31] netlink_sendmsg+0x813/0xb40 [ 737.949762][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.955124][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 737.960318][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 737.965648][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.971261][ T31] __sys_sendto+0x672/0x710 [ 737.975937][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 737.981096][ T31] ? fd_install+0x94/0x3d0 [ 737.985561][ T31] ? fd_install+0x306/0x3d0 [ 737.990735][ T31] __x64_sys_sendto+0xde/0x100 [ 737.995581][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.001800][ T31] do_syscall_64+0x15f/0xf80 [ 738.006553][ T31] ? trace_irq_disable+0x3b/0x140 [ 738.012015][ T31] ? clear_bhb_loop+0x40/0x90 [ 738.016839][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.022778][ T31] RIP: 0033:0x7fc769f5d04e [ 738.027496][ T31] RSP: 002b:00007fc76ae39e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 738.037174][ T31] RAX: ffffffffffffffda RBX: 00007fc76ae3b6c0 RCX: 00007fc769f5d04e [ 738.045225][ T31] RDX: 0000000000000020 RSI: 00007fc76ae3a000 RDI: 0000000000000004 [ 738.053434][ T31] RBP: 0000000000000000 R08: 00007fc76ae39f04 R09: 000000000000000c [ 738.061540][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 738.069779][ T31] R13: 00007fc76ae39f58 R14: 00007fc76ae3a000 R15: 0000000000000000 [ 738.078072][ T31] [ 738.081181][ T31] INFO: task syz.6.2977:18057 blocked for more than 144 seconds. [ 738.089118][ T31] Not tainted syzkaller #0 [ 738.094124][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.102987][ T31] task:syz.6.2977 state:D stack:27928 pid:18057 tgid:18052 ppid:14656 task_flags:0x400040 flags:0x00080002 [ 738.115254][ T31] Call Trace: [ 738.119078][ T31] [ 738.122094][ T31] __schedule+0x17b4/0x5680 [ 738.126969][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 738.132029][ T31] ? __pfx___schedule+0x10/0x10 [ 738.137064][ T31] ? schedule+0x90/0x360 [ 738.142105][ T31] schedule+0x164/0x360 [ 738.146344][ T31] schedule_preempt_disabled+0x13/0x30 [ 738.152179][ T31] __mutex_lock+0x7f5/0x1550 [ 738.156952][ T31] ? __mutex_lock+0x606/0x1550 [ 738.161827][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 738.166560][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 738.171854][ T31] ? radix_tree_lookup+0x240/0x290 [ 738.177092][ T31] genl_rcv_msg+0x10b/0x7a0 [ 738.181643][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 738.186989][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 738.192468][ T31] netlink_rcv_skb+0x232/0x4b0 [ 738.197361][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 738.202414][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 738.207981][ T31] ? down_read+0x270/0x2e0 [ 738.212478][ T31] ? genl_rcv+0xd/0x40 [ 738.216566][ T31] genl_rcv+0x28/0x40 [ 738.220765][ T31] netlink_unicast+0x75c/0x8e0 [ 738.225569][ T31] netlink_sendmsg+0x813/0xb40 [ 738.230786][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.236150][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 738.242135][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 738.247801][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.253182][ T31] __sys_sendto+0x672/0x710 [ 738.257923][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 738.263061][ T31] ? fd_install+0x94/0x3d0 [ 738.267678][ T31] ? fd_install+0x306/0x3d0 [ 738.272347][ T31] __x64_sys_sendto+0xde/0x100 [ 738.277231][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.283423][ T31] do_syscall_64+0x15f/0xf80 [ 738.288258][ T31] ? trace_irq_disable+0x3b/0x140 [ 738.293357][ T31] ? clear_bhb_loop+0x40/0x90 [ 738.298221][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.304179][ T31] RIP: 0033:0x7fc769f5d04e [ 738.308838][ T31] RSP: 002b:00007fc76ae18e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 738.317520][ T31] RAX: ffffffffffffffda RBX: 00007fc76ae1a6c0 RCX: 00007fc769f5d04e [ 738.325560][ T31] RDX: 0000000000000020 RSI: 00007fc76ae19000 RDI: 000000000000000a [ 738.333759][ T31] RBP: 0000000000000000 R08: 00007fc76ae18f04 R09: 000000000000000c [ 738.341843][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 738.351066][ T31] R13: 00007fc76ae18f58 R14: 00007fc76ae19000 R15: 0000000000000000 [ 738.359305][ T31] [ 738.362415][ T31] INFO: task syz.6.2977:18060 blocked for more than 145 seconds. [ 738.370985][ T31] Not tainted syzkaller #0 [ 738.375976][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.384771][ T31] task:syz.6.2977 state:D stack:27200 pid:18060 tgid:18052 ppid:14656 task_flags:0x400040 flags:0x00080002 [ 738.397427][ T31] Call Trace: [ 738.400773][ T31] [ 738.403801][ T31] __schedule+0x17b4/0x5680 [ 738.408820][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 738.414125][ T31] ? __pfx___schedule+0x10/0x10 [ 738.419267][ T31] ? schedule+0x90/0x360 [ 738.423578][ T31] schedule+0x164/0x360 [ 738.428448][ T31] schedule_preempt_disabled+0x13/0x30 [ 738.433972][ T31] __mutex_lock+0x7f5/0x1550 [ 738.438772][ T31] ? __mutex_lock+0x606/0x1550 [ 738.443600][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 738.449179][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 738.454271][ T31] ? radix_tree_lookup+0x240/0x290 [ 738.459607][ T31] genl_rcv_msg+0x10b/0x7a0 [ 738.464197][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 738.469939][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 738.475370][ T31] netlink_rcv_skb+0x232/0x4b0 [ 738.480448][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 738.485567][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 738.491019][ T31] ? down_read+0x270/0x2e0 [ 738.495514][ T31] ? genl_rcv+0xd/0x40 [ 738.499792][ T31] genl_rcv+0x28/0x40 [ 738.503854][ T31] netlink_unicast+0x75c/0x8e0 [ 738.508759][ T31] netlink_sendmsg+0x813/0xb40 [ 738.513583][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.519108][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 738.524122][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 738.529880][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.535301][ T31] __sys_sendto+0x672/0x710 [ 738.540070][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 738.545183][ T31] ? exc_page_fault+0x6a/0xc0 [ 738.551752][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 738.557269][ T31] __x64_sys_sendto+0xde/0x100 [ 738.562127][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.568323][ T31] do_syscall_64+0x15f/0xf80 [ 738.572997][ T31] ? trace_irq_disable+0x3b/0x140 [ 738.578287][ T31] ? clear_bhb_loop+0x40/0x90 [ 738.583057][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.589209][ T31] RIP: 0033:0x7fc769f5d04e [ 738.593695][ T31] RSP: 002b:00007fc76adf7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 738.602417][ T31] RAX: ffffffffffffffda RBX: 00007fc76adf96c0 RCX: 00007fc769f5d04e [ 738.610478][ T31] RDX: 0000000000000020 RSI: 00007fc76adf8000 RDI: 000000000000000b [ 738.618632][ T31] RBP: 0000000000000000 R08: 00007fc76adf7f04 R09: 000000000000000c [ 738.626851][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 738.634979][ T31] R13: 00007fc76adf7f58 R14: 00007fc76adf8000 R15: 0000000000000000 [ 738.643231][ T31] [ 738.646345][ T31] INFO: task syz.1.2982:18080 blocked for more than 145 seconds. [ 738.655344][ T31] Not tainted syzkaller #0 [ 738.661779][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.670799][ T31] task:syz.1.2982 state:D stack:27264 pid:18080 tgid:18067 ppid:5832 task_flags:0x400040 flags:0x00080002 [ 738.683166][ T31] Call Trace: [ 738.686516][ T31] [ 738.689662][ T31] __schedule+0x17b4/0x5680 [ 738.694332][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 738.699569][ T31] ? __pfx___schedule+0x10/0x10 [ 738.704502][ T31] ? schedule+0x90/0x360 [ 738.709451][ T31] schedule+0x164/0x360 [ 738.713777][ T31] schedule_preempt_disabled+0x13/0x30 [ 738.719536][ T31] __mutex_lock+0x7f5/0x1550 [ 738.724236][ T31] ? __mutex_lock+0x606/0x1550 [ 738.729292][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 738.734050][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 738.739342][ T31] ? radix_tree_lookup+0x240/0x290 [ 738.744557][ T31] genl_rcv_msg+0x10b/0x7a0 [ 738.749310][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 738.754710][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 738.760382][ T31] netlink_rcv_skb+0x232/0x4b0 [ 738.765229][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 738.770654][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 738.776043][ T31] ? down_read+0x270/0x2e0 [ 738.780718][ T31] ? genl_rcv+0xd/0x40 [ 738.784860][ T31] genl_rcv+0x28/0x40 [ 738.789334][ T31] netlink_unicast+0x75c/0x8e0 [ 738.794210][ T31] netlink_sendmsg+0x813/0xb40 [ 738.799351][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.804732][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 738.809853][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 738.815401][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.820932][ T31] __sys_sendto+0x672/0x710 [ 738.825508][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 738.830682][ T31] ? exc_page_fault+0x6a/0xc0 [ 738.835414][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 738.840976][ T31] __x64_sys_sendto+0xde/0x100 [ 738.845825][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.852062][ T31] do_syscall_64+0x15f/0xf80 [ 738.857156][ T31] ? trace_irq_disable+0x3b/0x140 [ 738.862253][ T31] ? clear_bhb_loop+0x40/0x90 [ 738.867298][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.873273][ T31] RIP: 0033:0x7f7eebd5d04e [ 738.878097][ T31] RSP: 002b:00007f7ee9bf2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 738.886620][ T31] RAX: ffffffffffffffda RBX: 00007f7ee9bf46c0 RCX: 00007f7eebd5d04e [ 738.894646][ T31] RDX: 0000000000000020 RSI: 00007f7ee9bf3000 RDI: 0000000000000009 [ 738.903029][ T31] RBP: 0000000000000000 R08: 00007f7ee9bf2f04 R09: 000000000000000c [ 738.911126][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 738.919291][ T31] R13: 00007f7ee9bf2f58 R14: 00007f7ee9bf3000 R15: 0000000000000000 [ 738.927884][ T31] [ 738.930987][ T31] INFO: task syz.1.2982:18083 blocked for more than 145 seconds. [ 738.939160][ T31] Not tainted syzkaller #0 [ 738.944147][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.953412][ T31] task:syz.1.2982 state:D stack:27936 pid:18083 tgid:18067 ppid:5832 task_flags:0x400040 flags:0x00080002 [ 738.965899][ T31] Call Trace: [ 738.969468][ T31] [ 738.972440][ T31] __schedule+0x17b4/0x5680 [ 738.977142][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 738.982165][ T31] ? __pfx___schedule+0x10/0x10 [ 738.987385][ T31] ? schedule+0x90/0x360 [ 738.991687][ T31] schedule+0x164/0x360 [ 738.995872][ T31] schedule_preempt_disabled+0x13/0x30 [ 739.001684][ T31] __mutex_lock+0x7f5/0x1550 [ 739.006354][ T31] ? __mutex_lock+0x606/0x1550 [ 739.011381][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 739.016149][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 739.021351][ T31] ? radix_tree_lookup+0x240/0x290 [ 739.026520][ T31] genl_rcv_msg+0x10b/0x7a0 [ 739.034539][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 739.039991][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 739.045547][ T31] netlink_rcv_skb+0x232/0x4b0 [ 739.051121][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 739.056240][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 739.061898][ T31] ? down_read+0x270/0x2e0 [ 739.066446][ T31] ? genl_rcv+0xd/0x40 [ 739.070762][ T31] genl_rcv+0x28/0x40 [ 739.074814][ T31] netlink_unicast+0x75c/0x8e0 [ 739.079727][ T31] netlink_sendmsg+0x813/0xb40 [ 739.084570][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.090060][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 739.095073][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 739.100690][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.106044][ T31] __sys_sendto+0x672/0x710 [ 739.110913][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 739.116037][ T31] ? fd_install+0x94/0x3d0 [ 739.120594][ T31] ? fd_install+0x306/0x3d0 [ 739.125167][ T31] __x64_sys_sendto+0xde/0x100 [ 739.130120][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.136251][ T31] do_syscall_64+0x15f/0xf80 [ 739.140931][ T31] ? trace_irq_disable+0x3b/0x140 [ 739.146098][ T31] ? clear_bhb_loop+0x40/0x90 [ 739.151002][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.157143][ T31] RIP: 0033:0x7f7eebd5d04e [ 739.161665][ T31] RSP: 002b:00007f7ee93ace88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 739.171173][ T31] RAX: ffffffffffffffda RBX: 00007f7ee93ae6c0 RCX: 00007f7eebd5d04e [ 739.179486][ T31] RDX: 0000000000000020 RSI: 00007f7ee93ad000 RDI: 000000000000000b [ 739.187849][ T31] RBP: 0000000000000000 R08: 00007f7ee93acf04 R09: 000000000000000c [ 739.195905][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 739.204421][ T31] R13: 00007f7ee93acf58 R14: 00007f7ee93ad000 R15: 0000000000000000 [ 739.212780][ T31] [ 739.215895][ T31] INFO: task syz.8.2984:18078 blocked for more than 146 seconds. [ 739.223800][ T31] Not tainted syzkaller #0 [ 739.228852][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 739.237831][ T31] task:syz.8.2984 state:D stack:23832 pid:18078 tgid:18077 ppid:14672 task_flags:0x400140 flags:0x00080002 [ 739.249892][ T31] Call Trace: [ 739.253189][ T31] [ 739.256132][ T31] __schedule+0x17b4/0x5680 [ 739.260878][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 739.266296][ T31] ? __pfx___schedule+0x10/0x10 [ 739.271581][ T31] ? schedule+0x90/0x360 [ 739.275962][ T31] schedule+0x164/0x360 [ 739.280347][ T31] schedule_preempt_disabled+0x13/0x30 [ 739.285894][ T31] __mutex_lock+0x7f5/0x1550 [ 739.290627][ T31] ? __mutex_lock+0x606/0x1550 [ 739.295430][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 739.300346][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 739.305456][ T31] ? radix_tree_lookup+0x240/0x290 [ 739.310671][ T31] genl_rcv_msg+0x10b/0x7a0 [ 739.315235][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 739.320664][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 739.326144][ T31] netlink_rcv_skb+0x232/0x4b0 [ 739.331042][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 739.336115][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 739.341597][ T31] ? down_read+0x270/0x2e0 [ 739.346107][ T31] ? genl_rcv+0xd/0x40 [ 739.351072][ T31] genl_rcv+0x28/0x40 [ 739.355141][ T31] netlink_unicast+0x75c/0x8e0 [ 739.360241][ T31] netlink_sendmsg+0x813/0xb40 [ 739.365097][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.370761][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 739.375758][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 739.381240][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.386788][ T31] __sys_sendto+0x672/0x710 [ 739.391356][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 739.396437][ T31] ? exc_page_fault+0x6a/0xc0 [ 739.401409][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 739.406816][ T31] __x64_sys_sendto+0xde/0x100 [ 739.411647][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.418028][ T31] do_syscall_64+0x15f/0xf80 [ 739.422682][ T31] ? trace_irq_disable+0x3b/0x140 [ 739.428096][ T31] ? clear_bhb_loop+0x40/0x90 [ 739.432880][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.439008][ T31] RIP: 0033:0x7f8a6ad5d04e [ 739.443486][ T31] RSP: 002b:00007f8a6bceae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 739.452012][ T31] RAX: ffffffffffffffda RBX: 00007f8a6bcec6c0 RCX: 00007f8a6ad5d04e [ 739.460137][ T31] RDX: 0000000000000020 RSI: 00007f8a6bceb000 RDI: 0000000000000009 [ 739.468203][ T31] RBP: 0000000000000000 R08: 00007f8a6bceaf04 R09: 000000000000000c [ 739.476523][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 739.484754][ T31] R13: 00007f8a6bceaf58 R14: 00007f8a6bceb000 R15: 0000000000000000 [ 739.492858][ T31] [ 739.495918][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 739.505186][ T31] INFO: task syz-executor:18089 blocked for more than 146 seconds. [ 739.513348][ T31] Not tainted syzkaller #0 [ 739.518519][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 739.527288][ T31] task:syz-executor state:D stack:22680 pid:18089 tgid:18089 ppid:1 task_flags:0x400140 flags:0x00080002 [ 739.539575][ T31] Call Trace: [ 739.542925][ T31] [ 739.545888][ T31] __schedule+0x17b4/0x5680 [ 739.550515][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 739.555535][ T31] ? __pfx___schedule+0x10/0x10 [ 739.560610][ T31] ? schedule+0x90/0x360 [ 739.564944][ T31] schedule+0x164/0x360 [ 739.569219][ T31] schedule_preempt_disabled+0x13/0x30 [ 739.575131][ T31] __mutex_lock+0x7f5/0x1550 [ 739.579962][ T31] ? kernel_text_address+0xa5/0xe0 [ 739.585158][ T31] ? __mutex_lock+0x606/0x1550 [ 739.590206][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 739.594959][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 739.601051][ T31] ? stack_trace_save+0xa9/0x100 [ 739.606073][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 739.611155][ T31] ? radix_tree_lookup+0x240/0x290 [ 739.616355][ T31] genl_rcv_msg+0x10b/0x7a0 [ 739.621091][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 739.626203][ T31] netlink_rcv_skb+0x232/0x4b0 [ 739.631071][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 739.636248][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 739.641963][ T31] ? down_read+0x270/0x2e0 [ 739.646460][ T31] ? genl_rcv+0xd/0x40 [ 739.650805][ T31] genl_rcv+0x28/0x40 [ 739.654864][ T31] netlink_unicast+0x75c/0x8e0 [ 739.659894][ T31] netlink_sendmsg+0x813/0xb40 [ 739.664757][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.670538][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 739.675871][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 739.681462][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.687658][ T31] __sys_sendto+0x672/0x710 [ 739.692291][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 739.697552][ T31] ? fd_install+0x94/0x3d0 [ 739.702043][ T31] ? fd_install+0x306/0x3d0 [ 739.706571][ T31] __x64_sys_sendto+0xde/0x100 [ 739.711466][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.717768][ T31] do_syscall_64+0x15f/0xf80 [ 739.722430][ T31] ? clear_bhb_loop+0x40/0x90 [ 739.727260][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.733227][ T31] RIP: 0033:0x7fa894d5d04e [ 739.737847][ T31] RSP: 002b:00007ffcb7b732e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 739.746349][ T31] RAX: ffffffffffffffda RBX: 0000555584485500 RCX: 00007fa894d5d04e [ 739.754647][ T31] RDX: 0000000000000020 RSI: 00007fa895b44670 RDI: 0000000000000005 [ 739.762977][ T31] RBP: 0000000000000001 R08: 00007ffcb7b73364 R09: 000000000000000c [ 739.771176][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 739.779644][ T31] R13: 00007ffcb7b733b8 R14: 00007fa895b44670 R15: 0000000000000000 [ 739.787784][ T31] [ 739.790879][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 739.800799][ T31] [ 739.800799][ T31] Showing all locks held in the system: [ 739.808686][ T31] 1 lock held by khungtaskd/31: [ 739.813591][ T31] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 739.823842][ T31] 2 locks held by syslogd/5176: [ 739.828989][ T31] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 739.839293][ T31] #1: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: psi_task_switch+0x53/0x880 [ 739.848959][ T31] 2 locks held by getty/5578: [ 739.853674][ T31] #0: ffff888035e280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 739.863643][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 739.874163][ T31] 1 lock held by udevd/7300: [ 739.878931][ T31] #0: ffff8880269b2350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 739.888578][ T31] 2 locks held by syz.2.1950/13688: [ 739.893838][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.902232][ T31] #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 739.912743][ T31] 6 locks held by syz.7.2973/18038: [ 739.918136][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.926523][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.935608][ T31] #2: ffff88802698d260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 739.946325][ T31] #3: ffff888026720698 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 739.955865][ T31] #4: ffff888026720060 (&q->q_usage_counter(io)#56){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 739.968206][ T31] #5: ffff888026720098 (&q->q_usage_counter(queue)#40){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 739.980760][ T31] 2 locks held by syz.7.2973/18039: [ 739.986284][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.995015][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.004113][ T31] 2 locks held by syz.3.2975/18047: [ 740.009500][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.017974][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.027190][ T31] 2 locks held by syz.6.2977/18053: [ 740.032448][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.040754][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.049972][ T31] 2 locks held by syz.6.2977/18056: [ 740.055236][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.063581][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.076216][ T31] 2 locks held by syz.6.2977/18057: [ 740.081498][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.090276][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.099441][ T31] 2 locks held by syz.6.2977/18060: [ 740.104672][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.113070][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.122174][ T31] 2 locks held by syz.1.2982/18080: [ 740.127551][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.135826][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.144922][ T31] 2 locks held by syz.1.2982/18083: [ 740.150311][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.158637][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.167853][ T31] 2 locks held by syz.8.2984/18078: [ 740.173128][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.181452][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.190903][ T31] 2 locks held by syz-executor/18089: [ 740.196334][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.204854][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.214211][ T31] 2 locks held by syz-executor/18091: [ 740.219777][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.228593][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.237948][ T31] 2 locks held by syz-executor/18093: [ 740.243377][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.251826][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.261291][ T31] 2 locks held by syz-executor/18116: [ 740.267012][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.275290][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.284632][ T31] 2 locks held by syz-executor/18118: [ 740.291011][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.299626][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.309573][ T31] 2 locks held by syz-executor/18622: [ 740.315031][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.323468][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.332720][ T31] 2 locks held by syz-executor/18624: [ 740.338330][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.346901][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.355981][ T31] 2 locks held by syz-executor/18625: [ 740.361582][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.369983][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.379263][ T31] 2 locks held by syz-executor/18648: [ 740.384657][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.394258][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.403454][ T31] 2 locks held by syz-executor/18649: [ 740.409100][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.417491][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.426543][ T31] 2 locks held by syz-executor/18671: [ 740.432196][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.440542][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.449767][ T31] 2 locks held by syz-executor/18673: [ 740.455205][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.463691][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.473089][ T31] 2 locks held by syz-executor/18678: [ 740.478599][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.487033][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.496882][ T31] 2 locks held by syz-executor/18697: [ 740.502350][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.510959][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.520158][ T31] 2 locks held by syz-executor/18708: [ 740.525580][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.534036][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.543185][ T31] [ 740.545804][ T31] ============================================= [ 740.545804][ T31] [ 740.555904][ T31] NMI backtrace for cpu 0 [ 740.555926][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 740.555962][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 740.555981][ T31] Call Trace: [ 740.555995][ T31] [ 740.556008][ T31] dump_stack_lvl+0xe8/0x150 [ 740.556064][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 740.556116][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 740.556148][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 740.556184][ T31] sys_info+0x135/0x170 [ 740.556211][ T31] watchdog+0xfaa/0x1000 [ 740.556240][ T31] ? watchdog+0x209/0x1000 [ 740.556271][ T31] kthread+0x388/0x470 [ 740.556294][ T31] ? __pfx_watchdog+0x10/0x10 [ 740.556314][ T31] ? __pfx_kthread+0x10/0x10 [ 740.556337][ T31] ret_from_fork+0x514/0xb70 [ 740.556370][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 740.556399][ T31] ? __switch_to+0xc79/0x1410 [ 740.556426][ T31] ? __pfx_kthread+0x10/0x10 [ 740.556449][ T31] ret_from_fork_asm+0x1a/0x30 [ 740.556498][ T31] [ 740.556515][ T31] Sending NMI from CPU 0 to CPUs 1: [ 740.668955][ C1] NMI backtrace for cpu 1 [ 740.668973][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 740.668993][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 740.669005][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 740.669031][ C1] Code: 5b 74 02 e9 c3 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 4d 16 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 740.669047][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 740.669064][ C1] RAX: 000000000023a0b7 RBX: ffffffff819a67ea RCX: 0000000080000001 [ 740.669077][ C1] RDX: 0000000000000001 RSI: ffffffff8dfb65fa RDI: ffffffff8c27f000 [ 740.669090][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 740.669103][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 740.669116][ C1] R13: 1ffff11003bd0000 R14: 0000000000000001 R15: 1ffff11003bd0000 [ 740.669129][ C1] FS: 0000000000000000(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 740.669144][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 740.669155][ C1] CR2: 0000557cd7e8af40 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 740.669172][ C1] Call Trace: [ 740.669181][ C1] [ 740.669187][ C1] default_idle+0x9/0x20 [ 740.669212][ C1] default_idle_call+0x72/0xb0 [ 740.669237][ C1] do_idle+0x36a/0x5f0 [ 740.669268][ C1] ? __pfx_do_idle+0x10/0x10 [ 740.669299][ C1] cpu_startup_entry+0x43/0x60 [ 740.669325][ C1] start_secondary+0x101/0x110 [ 740.669348][ C1] common_startup_64+0x13e/0x147 [ 740.669377][ C1] [ 740.833158][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 740.840060][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 740.849268][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 740.859352][ T31] Call Trace: [ 740.862643][ T31] [ 740.865581][ T31] vpanic+0x56c/0xa60 [ 740.869577][ T31] ? __pfx___schedule+0x10/0x10 [ 740.874440][ T31] ? __pfx_vpanic+0x10/0x10 [ 740.878957][ T31] ? __pfx_console_unlock+0x10/0x10 [ 740.884175][ T31] panic+0xc5/0xd0 [ 740.887916][ T31] ? __pfx_panic+0x10/0x10 [ 740.892389][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 740.897850][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 740.904064][ T31] watchdog+0xff4/0x1000 [ 740.908353][ T31] ? watchdog+0x209/0x1000 [ 740.912810][ T31] kthread+0x388/0x470 [ 740.916902][ T31] ? __pfx_watchdog+0x10/0x10 [ 740.921599][ T31] ? __pfx_kthread+0x10/0x10 [ 740.926217][ T31] ret_from_fork+0x514/0xb70 [ 740.930851][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 740.935997][ T31] ? __switch_to+0xc79/0x1410 [ 740.940704][ T31] ? __pfx_kthread+0x10/0x10 [ 740.945321][ T31] ret_from_fork_asm+0x1a/0x30 [ 740.950134][ T31] [ 740.953781][ T31] Kernel Offset: disabled [ 740.958122][ T31] Rebooting in 86400 seconds..