last executing test programs: 20.386531656s ago: executing program 0 (id=1543): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f00000001c0)=@tcp}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x13, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7fff, 0x32, &(0x7f0000000200)=""/50, 0x41100, 0x14, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0xe, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000500), &(0x7f0000000540)=[{0x3, 0x3, 0xc, 0x6}, {0x1, 0x3, 0x1, 0xa}, {0x4005, 0x2, 0xfffffff8, 0xc}, {0x0, 0x2, 0xc, 0xc}], 0x10, 0x400}, 0x94) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) (async) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 64) r9 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r14, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) (async) r15 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 19.824862656s ago: executing program 0 (id=1549): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff500"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x20000}, 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000000040)={@empty, @local}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 19.46560561s ago: executing program 3 (id=1551): socket$inet_sctp(0x2, 0x5, 0x84) listen(0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="aa6dc5200000dc1a2b2342a3802c0000dcdf250000000067ff8e18058a3675005ed2916592a1636bb0e045e93db50494468e4a118edec54d96ff8ab6a4242e6ac5bdcd5f410fdd706bbf7e36568d5c627714493eb26976fdc5f0f15bd204043160e8e1b002639462f98fc87fe6bed52400f7f690675cc13bb78d63a986867deda80eb38e8152f70f42c946fb3831847a01438ff0c4b5a805c2d78c131dd6bd8718f69ce7bc20acdf3f66a0a6d9c3c05b76d1c627113bd79571a43b62", @ANYRES32=r5, @ANYBLOB="570da800a65a0200"], 0x20}}, 0x2000e844) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r0, 0x4, r0}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10) getuid() ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000002000000850000002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0xa6) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e2300000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000060000000000000000000000000000000000000000000000f6ffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000c0015"], 0xc4}}, 0x14) r10 = socket$netlink(0x10, 0x3, 0x6) writev(r10, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 19.464962227s ago: executing program 0 (id=1552): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000800000000000003000000000088a800008100cc"], 0x3e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB="08001f0005000000050011000100"], 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x10}, {0x7}, {0x3}}}, 0x24}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000800000000000003000000000088a800008100cc"], 0x3e) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB="08001f0005000000050011000100"], 0x70}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x10}, {0x7}, {0x3}}}, 0x24}}, 0x40) (async) 19.326285381s ago: executing program 4 (id=1553): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) (async) r6 = socket$unix(0x1, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000380)) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc800}, 0x40000) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x80000406, 0x1, 0xfdffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000006d00673c24bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000008000018003400005f7465616d00000014000300636169663000000000000400"/52], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000006a00010625bd7000fbdbdf250a0000000000000067d8ed6dee1dec303a40813d4a026e3afb2ed6a6bb0115816cc40fb4b7396b54dc882f4f3c7745b4d5a02b3a19153c755df42c292a"], 0x18}, 0x1, 0x0, 0x0, 0x44050}, 0xc044) (async) socket$key(0xf, 0x3, 0x2) 18.954544125s ago: executing program 0 (id=1558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8001}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x406}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x2000c000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r4 = socket(0x40000000015, 0x5, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000140000000000000200000008000300", @ANYRES64=r4], 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001e00)={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x144, 0x0, 0x0, @u32=0xffffffff}, @generic='\x00\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r10, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f00000004c0)='scalable', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)={0x1104, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x48c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x38}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x39c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x6}, {0x5, 0x2}, {0x0, 0x2}, {0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x80, 0x400, 0x3, 0xab, 0xa, 0xefa, 0x3]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x6, 0x48, 0x36, 0x6c, 0x6, 0x24, 0x6c, 0x1, 0x4, 0x24]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x18, 0x6, 0x0, 0x9, 0x12, 0x48, 0x24, 0x4, 0x18, 0xc, 0x5, 0x36, 0x16, 0x36, 0x24, 0x36, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x30c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x30, 0x6c, 0x24, 0x9, 0x0, 0xb, 0x6, 0x16, 0x36, 0x2, 0x2, 0xc, 0x12, 0x16, 0x48, 0x4, 0xb, 0x16, 0x6c, 0x6c, 0x16, 0x1, 0x21, 0xb]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0x3}, {0x7, 0x4}, {0x6, 0x2}, {0x5, 0x7}, {0x2, 0x8}, {0x2, 0x6}, {0x1}, {0x3, 0x3}, {0x7, 0x7}, {0x1, 0x6}, {0x6, 0x6}, {0x1, 0x5}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x8}, {0x7, 0xa}, {0x5, 0x3}, {0x1, 0x3}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x8}, {0x4, 0x2}, {0x0, 0x1}, {0x6, 0x5}, {0x4, 0x3}, {0x5, 0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x4, 0x1}, {0x7, 0x7}, {0x0, 0x3}, {0x4, 0x7}, {0x0, 0x5}, {0x5, 0x4}, {}, {0x5, 0x4}, {0x5, 0x9}, {0x4, 0x4}, {0x2}, {0x6, 0x4}, {0x1, 0x5}, {0x6, 0x9}, {0x4, 0x5}, {0x3}, {0x7, 0x3}, {0x4, 0x5}, {0x7}, {0x3, 0x8}, {0x6, 0x6}, {0x2, 0x7}, {0x3, 0x5}, {0x7, 0xa}, {0x6, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x0, 0x3}, {0x2, 0x6}, {0x7, 0x8}, {0x7, 0x6}, {0x7, 0x5}, {0x2, 0x1}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0x8}, {0x2, 0x4}, {0x1, 0x4}, {0x0, 0x7}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {}, {0x6, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x2}, {0x1, 0x5}, {0x4, 0x2}, {0x4, 0x5}, {0x4}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x18, 0x33, 0x0, 0x16, 0x6, 0x2, 0x20, 0x5, 0x53, 0x30, 0x4, 0x36, 0x48, 0x30, 0x36, 0x6, 0x4, 0xb, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x3, 0xbae, 0x5, 0xb, 0x9, 0x2]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x5, 0x6, 0x18, 0x4, 0x18, 0x30, 0x3, 0x12, 0x6c, 0x30, 0x5, 0x1, 0x1, 0x3, 0xc]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x9, 0x6, 0x30, 0x1b, 0x16, 0x9, 0x18, 0x16, 0xb, 0x30, 0x3, 0x1b, 0x16, 0x9, 0x60, 0x3, 0x1b, 0x4, 0x4, 0x5]}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x7, 0x3, 0x1, 0x1, 0x4]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x9}, {0x0, 0x8}, {0x5, 0x2}, {0x0, 0x2}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x5}, {0x7, 0xa}, {0x0, 0x3}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0x6}, {}, {0x5, 0x4}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0xa}, {0x6, 0x7}, {}, {0x4, 0x7}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {0x2, 0x7}, {0x4, 0x4}, {0x1, 0x1}, {0x0, 0x6}, {0x5, 0x8}, {0x7, 0x7}, {0x1, 0x9}, {0x7, 0x2}, {0x3, 0x3}, {0x0, 0x8}, {0x6, 0x3}, {0x2, 0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x7, 0x6}, {0x3, 0x5}, {0x2, 0x4}, {0x2, 0x6}, {0x5, 0x7}, {0x4, 0x6}, {0x4, 0x3}, {0x6, 0x2}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x4, 0x9}, {0x5, 0x3}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x7, 0x5}, {0x6, 0x5}, {0x6, 0x2}, {0x4, 0x8}, {0x4, 0x3}, {0x0, 0x7}, {0x6, 0x9}, {0x1, 0x1}, {0x3, 0x5}, {0x6}, {0x1, 0x18}, {0x5, 0x2}, {0x1}, {0x7, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0x9}, {0x5, 0x9}, {0x7}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x8}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2, 0x4}, {0x7, 0x7}, {0x1, 0x1}, {0x0, 0xa}, {0x1, 0x3}, {0x3}, {0x1, 0x2}, {0x0, 0x1}, {0x1, 0x8}, {0x4, 0x7}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0x6}, {0x2, 0x6}, {}, {0x6, 0x8}, {0x2, 0x8}, {0x4, 0x8}, {0x4, 0x8}, {0x1, 0x5}, {0x6, 0x2}, {0x2}, {0x7, 0x3}, {0x7}, {0x1}, {0x7, 0x7}, {0x7, 0x9}, {0x4, 0x7}, {0x4, 0x1}, {0x5, 0xa}, {0x0, 0x1}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x0, 0x3, 0xc3e6, 0x400, 0x7fff, 0x8001]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x6c, 0x24, 0x2ad8e84199f2560e, 0x60, 0x2, 0x1, 0x6c, 0x6, 0x9, 0x12, 0x2, 0x24, 0xc, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x321e, 0x7fff, 0x400, 0x8, 0x5, 0x6d, 0x6, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x6, 0x30b, 0x8, 0x7, 0xf4e8, 0x5, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x18, 0x36, 0x9, 0x1b, 0x1, 0x12, 0x60, 0x36, 0x6c, 0x4, 0x16, 0x9, 0x12, 0x36, 0xc, 0x1b, 0x1, 0x6, 0x24, 0x9, 0x18, 0x6c, 0x60, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0x2, 0x57, 0x6, 0x37, 0x30, 0x3, 0x48, 0x48, 0x16, 0x2, 0x30, 0x36]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x48, 0x16, 0x65, 0xb, 0x2, 0x30, 0x12, 0xb, 0x60, 0x60, 0x48, 0x1b, 0x9, 0x1, 0x16, 0xc, 0x30, 0x1b, 0x9, 0x0, 0x3, 0x12, 0x6c, 0x36, 0x5, 0x30, 0x6c, 0x16, 0x24, 0x48]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x4, 0x4}, {0x7, 0x7}, {}, {0x6, 0x7}, {0x0, 0x1}, {0x2, 0x9}, {0x4, 0x2}, {0x3, 0x7}, {0x1, 0x7}, {0x1, 0x7}, {0x6, 0x4}, {0x4, 0x3}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0x6}, {0x2, 0x8}, {0x5, 0x2}, {0x4, 0x4}, {0x0, 0x3}, {0x6}, {0x4, 0x9}, {0x5, 0x4}, {0x4, 0xa}, {0x4, 0x7}, {0x1, 0x7}, {0x2, 0x9}, {0x7, 0x2}, {0x1, 0x5}, {0x1, 0x5}, {0x5, 0x8}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0xa}, {0x2, 0x8}, {0x4, 0x2}, {0x1}, {0x4, 0x9}, {0x2, 0x9}, {0x7, 0xa}, {0x6, 0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x2, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x1a9, 0xb94, 0x8411, 0xd, 0x4, 0x9, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd57b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x63}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x9623f64117b005a1}]}]}, @NL80211_ATTR_TID_CONFIG={0x164, 0x11d, 0x0, 0x1, [{0x160, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x6}, {0x1, 0x7}, {0x4, 0x5}, {0x2, 0x6}, {0x4, 0x1}, {0x3}, {0x0, 0x7}, {0x1, 0xa}, {0x4, 0x9}, {0x6, 0x9}, {0x7}, {0x4, 0x6}, {0x6, 0x4}, {0x0, 0x2}, {0x2}, {0x7, 0xa}, {0x4, 0x9}, {0x3, 0x2}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0xa}, {0x2, 0x5}, {}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x6}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x7}, {0x6, 0x8}, {0x1}, {0x6, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x6}, {0x4, 0x9}, {0x4, 0x9}, {0x3, 0x2}, {0x7, 0x3}, {0x1, 0x4}, {0x6, 0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x1}, {0x4, 0x6}, {0x3, 0x1}, {0x2, 0x6}, {0x4, 0x5}, {0x0, 0x4}, {0x6, 0x2}, {}, {0x1, 0x3}, {0x4, 0x2}, {0x7, 0x1}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x518a, 0x5f, 0x100, 0x8, 0x2, 0xff, 0x417]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x18, 0xc, 0x6, 0x16, 0x1b, 0x60, 0x3, 0x2, 0x5, 0x30, 0x4, 0xf133f9058428136c, 0x16, 0x4, 0x4, 0x1b, 0x1b, 0xc, 0x6, 0x48, 0x36, 0x1, 0x9, 0x1b, 0x18, 0x24, 0x9, 0x6c, 0x30, 0x18, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xa2, 0xb9, 0x0, 0x8000, 0x6, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x92e2, 0x5, 0x7, 0x2, 0x0, 0x8, 0x0, 0x4]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x4, 0xf097, 0xa370, 0x1, 0x101, 0x6, 0x4]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x4}, {0x0, 0x7}, {0x7}, {0x5, 0x6}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x7, 0x8}, {0x3, 0x7}, {0x6, 0x7}, {0x5, 0x4}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x5}, {0x6, 0x7}, {0x4, 0x3}, {0x2, 0xa}, {0x4, 0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x5, 0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x7, 0xa}, {0x6, 0x3}, {0x0, 0x5}, {0x5, 0xa}, {0x5}, {0x2}, {0x5, 0x3}, {0x1}, {0x4, 0x5}, {0x5, 0xa}, {0x7, 0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x1}, {0x0, 0x2}, {0x7}, {0x1}, {0x4, 0x7}, {0x4, 0x5}, {0x3, 0x2}, {0x5, 0x9}, {0x3, 0x5}, {0x4, 0x8}, {0x3, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x0, 0x9}, {0x4, 0x9}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xffc0, 0x8, 0x9e, 0x6, 0x8, 0x800, 0xc30]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x92, 0x8, 0x101, 0x7, 0x40ce, 0x3, 0x81]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x60c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x2a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x27c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x134, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x9, 0x1, 0xfff, 0x9, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0xb, 0x4, 0xffff, 0x8, 0xe7a, 0xbc]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x6c, 0x24, 0x2, 0x4, 0x69, 0x5, 0x1d, 0x12, 0x6c, 0x16, 0x3, 0x4, 0xd6c4d5504568b9cc, 0x16, 0x4, 0x48, 0x60, 0x6, 0x6, 0x6, 0x48, 0x18, 0x9, 0x5, 0x30, 0x3, 0x24, 0x48, 0x16, 0x36, 0x14cd51f86e5bcf3c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0xf, 0x0, 0x0, 0x0, 0x6, 0x4, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0xa}, {0x1, 0xa}, {0x1, 0xa}, {0x2, 0x1}, {0x7, 0x2}, {0x5, 0x3}, {0x3, 0x9}, {0x6, 0x9}, {0x2, 0x3}, {0x6, 0x2}, {0x7, 0x2}, {0x2, 0x5}, {0x1}, {0x5, 0x9}, {0x0, 0x1}, {0x2, 0x7}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x7, 0x6}, {0x1, 0x8}, {0x4, 0x1}, {0x4, 0xa}, {0x7, 0x3}, {0x4, 0x7}, {0x3, 0x4}, {0x7, 0x3}, {0x2, 0x8}, {0x4}, {0x3, 0x6}, {0x1, 0x9}, {0x3, 0xa}, {0x1, 0x6}, {0x0, 0x6}, {0x5}, {0x0, 0x2}, {0x1, 0x8}, {0x3, 0x6}, {0x0, 0x6}, {0x0, 0x2}, {0x2}, {0x1, 0x9}, {0x6, 0x9}, {0x3, 0x9}, {0x1, 0x4}, {0x2, 0x5}, {0x6, 0xa}, {0x7, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x0, 0x7}, {0x3, 0x3}, {0x1, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x4, 0x8}, {0x2}, {0x0, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x8c, 0x0, 0xfffd, 0x101, 0x6, 0xe3, 0x7]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x8}, {0x5, 0x9}, {0x2, 0x6}, {0x7, 0x1}, {0x7, 0x5}, {0x3, 0x7}, {0x0, 0x1}, {0x7, 0x6}, {0x0, 0x6}, {0x1, 0x9}, {0x3, 0x9}, {0x4, 0x9}, {0x5, 0xa}, {0x6, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x4, 0x7}, {0x1, 0x4}, {0x7}, {0x3, 0x5}, {0x3, 0x6}, {0x6, 0xa}, {0x5, 0xa}, {0x4, 0x5}, {0x2, 0xa}, {0x6, 0x4}, {0x5, 0x8}, {0x6}, {0x0, 0x3}, {0x6, 0x6}, {0x0, 0x6}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x5, 0x6}, {0x1, 0x1}, {0x0, 0x9}, {0x2, 0x9}, {0x1, 0x4}, {0x7, 0x5}, {0x5, 0x3}, {0x0, 0x4}, {0x2, 0x3}, {0x4}, {0x6, 0x8}, {0x4, 0x4}, {0x3}, {}, {0x5, 0x5}, {0x7, 0x2}, {0x5, 0x1}, {}, {0x1, 0x6}, {0x5, 0x5}, {0x7, 0x3}, {0x4, 0x3}, {0x5, 0x7}, {0x6, 0xa}, {0x4, 0x7}, {0x0, 0x3}, {0x7, 0x5}, {0x4, 0x6}, {0x4, 0x6}, {0x2, 0x1}, {0x2, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x6, 0x5}, {0x2, 0x6}, {0x1, 0x3}, {0x7, 0x8}, {0x2, 0x3}, {0x4, 0x5}, {0x1, 0x3}, {0x5, 0x1}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x737eb0f0939ce40f, 0x6, 0x6c, 0xb, 0x60, 0x1, 0xb, 0x18, 0x24, 0x1, 0x16, 0x36, 0x9, 0x2, 0xc, 0x30, 0x5, 0xd, 0x48, 0x18, 0x36, 0x4, 0x4]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6f, 0x6, 0xe83, 0x0, 0x401, 0x8, 0x4, 0xfffa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x5, 0x2, 0x1, 0x0, 0x8, 0x8]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x536, 0x1, 0x401, 0xfff9, 0x7, 0x8, 0x3]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x6}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x8}, {0x6, 0x1}, {0x4, 0x4}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x6}, {0x3, 0x9}, {0x3, 0x4}, {0x2}, {0x0, 0x7}, {0x3, 0x7}, {0x0, 0x2}, {0x2}, {0x0, 0x3}, {0x0, 0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x2}, {0x4, 0x8}, {0x4, 0xa}, {0x5}, {0x5, 0x5}, {0x7, 0x5}, {0x7, 0x1}, {0x6, 0x2}, {0x4, 0x5}, {0x3, 0x2}, {0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0xc, 0x6c, 0x16, 0x1d, 0x16, 0x12, 0x18, 0x16, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0xa11b, 0x8001, 0x3, 0x2, 0xe8ad, 0x0, 0xf67f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1}, {0x2, 0x6}, {0x7, 0x4}, {0x5, 0x3}, {0x1, 0x3}, {0x0, 0x4}, {0x1}, {0x2, 0x9}, {0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x4, 0x9}, {}, {0x0, 0x2}, {0x6, 0x6}, {0x0, 0x8}, {0x0, 0x4}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0x7}, {0x0, 0x2}, {0x7, 0x7}, {0x5, 0x7}, {}, {0x3, 0x2}, {0x2, 0x2}, {0x6, 0x3}, {0x2, 0x7}, {0x5, 0xa}, {0x0, 0x8}, {0x6}, {0x5, 0x6}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x8}, {0x5, 0x4}, {0x0, 0x8}, {0x2}, {0x5, 0x8}, {0x0, 0x7}, {0x0, 0x3}, {0x1}, {0x4, 0x8}, {0x0, 0xa}, {0x5, 0x1}, {0x4, 0x9}, {0x2, 0xa}, {0x4, 0x7}, {0x0, 0x2}, {0x2, 0x4}, {0x6, 0x4}, {0x1, 0x2}, {0x5, 0x9}, {0x1, 0x1}, {0x0, 0x2}, {0x2, 0x6}, {0x4, 0x2}, {0x1}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x5}, {0x4, 0x7}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x4}, {0x1, 0x9}, {0x1, 0x3}, {0x3, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0xb, 0x4, 0x24, 0xc, 0x6, 0x6c, 0x9, 0x24, 0x9, 0xc, 0x6, 0x2, 0x0, 0x48, 0x48, 0x36, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x53a, 0xf81e, 0x7d, 0x5, 0x8, 0x3, 0xd026, 0xd5a]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x17, 0xb, 0x2, 0x6]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x89}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x2b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x24c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x3e, 0x4, 0x8, 0x4, 0x6, 0x8]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x912, 0x7, 0x7, 0x8, 0x8, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x24, 0xb, 0x9, 0x4, 0xb, 0x1b, 0x30, 0x62, 0x36, 0x12, 0x6c, 0x30, 0x5, 0x6, 0x9, 0x6, 0x5, 0x30, 0x18, 0x9, 0xb, 0x16, 0x5, 0x3, 0x48e0e10ca87b0299, 0x2, 0xb, 0x36, 0x60, 0x6c, 0x48, 0x4]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x4}, {0x3, 0x3}, {0x7, 0xa}, {0x2}, {0x0, 0x1}, {0x0, 0x5}, {0x6, 0x5}, {0x7, 0x9}, {0x0, 0x8}, {0x5, 0x3}, {0x5, 0x3}, {0x1, 0x9}, {0x4, 0x2}, {0x6, 0x9}, {0x5, 0x9}, {0x1, 0x6}, {0x4, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x5}, {0x1, 0xa}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0x7}, {0x4, 0x7}, {0x5, 0xa}, {0x7, 0x7}, {0x2}, {0x6, 0x4}, {0x5}, {0x6, 0x1}, {0x2, 0xa}, {0x4, 0x9}, {0x5, 0xa}, {0x7, 0x8}, {0x2, 0x1}, {0x1}, {0x3, 0x4}, {0x1, 0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x5, 0x9}, {0x4, 0x5}, {0x2, 0x2}, {0x2, 0x8}, {0x4, 0x8}, {0x1, 0xa}, {0x0, 0x9}, {0x6, 0x9}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x2, 0x48, 0xb, 0x19, 0x2, 0x4, 0x60, 0x18, 0xb, 0x66, 0x18, 0x24, 0x3, 0xc, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x3, 0x5, 0x5, 0x7, 0x7, 0x2]}}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0x2}, {0x0, 0x3}, {0x0, 0x2}, {0x4, 0x3}, {0x0, 0x1}, {0x3, 0x2}, {0x1, 0x4}, {0x5, 0x1b}, {0x2, 0x2}, {0x1, 0x4}, {0x2, 0x7}, {0x1, 0x8}, {0x5, 0xa}, {0x1, 0x2}, {0x1, 0x7}, {0x2, 0x6}, {0x3, 0x3}, {0x2, 0x3}, {0x4, 0x2}, {0x3, 0x7}, {0x6, 0x3}, {0x3, 0x4}, {0x4, 0x4}, {0x1, 0x4}, {0x7, 0x3}, {0x0, 0x1}, {0x6, 0x7}, {0x4, 0x8}, {0x2}, {0x5, 0x7}, {0x4, 0xa}, {0x7, 0x6}, {0x4, 0x3}, {0x0, 0x6}, {0x5, 0x4}, {0x1, 0x8}, {0x7, 0x2}, {0x1, 0x7}, {0x4, 0x5}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0xa}, {0x7, 0xa}, {0x3, 0x4}, {0x6, 0x3}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x5, 0x5}, {0x1, 0x3}, {0x4, 0x5}, {0x7, 0x3}, {}, {0x3, 0x1}, {0x1, 0x3}, {0x5, 0x4}, {0x7, 0x4}, {0x6, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0xb, 0x5, 0x6, 0x5, 0x8001, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0xfff3, 0x3, 0x4, 0x7, 0x6, 0xc6]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x4, 0x36, 0x18, 0x30, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfff9, 0x401, 0x1, 0x2, 0x1, 0x9c, 0x8]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x9b, 0x83, 0x5b09, 0x8, 0x8, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x45, 0x3, 0xfff9, 0x6181, 0xaff1, 0x30, 0xb, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x1b, 0x12, 0x24, 0x1b, 0x2c, 0x12, 0x30, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x4, 0x4, 0x1, 0x7, 0x7, 0x3, 0x50b]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x60, 0xb, 0xb, 0x12, 0x1b]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x7}, {}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x8}, {}, {0x5, 0x8}, {0x5, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x1}, {0x1, 0x1}, {0x0, 0x3}, {0x5, 0x5}, {0x4, 0x8}, {0x4, 0x5}, {0x5, 0x7}, {0x3, 0x2}, {0x5, 0x7}, {0x1, 0x2}, {0x1, 0x2}, {0x4, 0x11}, {0x0, 0x6}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x6}, {}, {0x5}, {0x4, 0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x3}, {0x5}, {0x3, 0x9}, {0x2, 0x2}, {0x2, 0x1}, {0x4, 0xa}, {0x1, 0x9}, {0x4, 0x3}, {0x5, 0x9}, {0x6}, {0x7, 0x7}, {0x3, 0x4}, {0x4}, {0x7, 0x3}, {0x3, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x2, 0x2}, {0x3, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0xf, 0x0, 0xfff9, 0x8, 0x8, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9ba7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3c, 0x5, 0x74370b56e176d80f, 0x0, 0x60, 0x3, 0x1b, 0x5c, 0x6c, 0x6, 0x12, 0xc, 0x4, 0x1]}]}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x19}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x4ec, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x90}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x70}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x30c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x17}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2d4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x1}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x7}, {0x1, 0x9}, {0x7, 0x7}, {0x7, 0x8}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x8}, {0x1, 0x8}, {0x0, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x0, 0xa}, {0x6}, {0x2, 0x9}, {0x0, 0x5}, {0x6, 0x8}, {0x2, 0x9}, {0x7, 0x6}, {0x7, 0x2}, {0x4, 0x7}, {0x7}, {0x3, 0x2}, {0x6, 0x6}, {0x7, 0xa}, {0x2, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x2, 0x8}]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xd, 0x81, 0x0, 0x7, 0x0, 0x80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb3, 0x8c16, 0x6, 0x9, 0x7, 0xcb, 0x9, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0xe, 0x2, 0x17, 0xaf, 0x8, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0x6, 0x48, 0x9, 0x9, 0x12, 0x18, 0x2, 0x2, 0x1b, 0x3, 0x16, 0x36, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x3, 0x48, 0x0, 0xfc, 0xf, 0x9, 0x6]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4}, {0x2, 0x4}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0x4}, {0x0, 0x1}, {0x1, 0x5}, {0x3, 0x4}, {0x4, 0x9}, {0x1, 0x7}, {0x4, 0x3}, {0x0, 0x3}, {0x2, 0x9}, {0x6, 0x9}, {0x4, 0x1}, {0x2, 0xa}, {0x2}, {0x6, 0x1}, {0x4, 0x4}, {0x0, 0x7}, {0x3, 0x3}, {0x5, 0x5}, {0x1, 0x3}, {0x4, 0xa}, {0x0, 0x2}, {0x3}, {0x3, 0x8}, {0x6, 0x7}, {0x7, 0x2}, {0x3, 0x5}, {0x1, 0x4}, {0x6}, {0x3, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x5}, {0x4, 0x3}, {0x2, 0x5}, {0x1, 0x5}, {0x6, 0x3}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x18, 0x6, 0xfff9, 0x800, 0x4, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x5, 0x10, 0x1000, 0x200, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x60, 0x1, 0x3, 0x3, 0x16, 0x60, 0xb, 0x48, 0x3b, 0x4, 0x9, 0x9, 0x48, 0x16, 0x9, 0x36, 0x52, 0x4, 0x6, 0x1, 0x30, 0x6, 0x1, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x7, 0x428, 0x6, 0x6, 0x9, 0x2]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x60, 0x9, 0x36, 0x36, 0x2, 0x6, 0x3, 0x24, 0x12, 0x12, 0x28, 0x1, 0x4, 0x6, 0xc, 0xb, 0x36, 0x36, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x1ff, 0x6, 0x6cee, 0x4, 0x2, 0xc7a5]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0x6c, 0x5, 0x16, 0x6, 0x48, 0x61, 0x12, 0x1, 0x24, 0x1b, 0x18, 0xb, 0xb, 0x1b, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0xce56, 0x4, 0x3, 0x81, 0x5, 0x9, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x5, 0x8, 0xadce, 0x8, 0x400, 0x5, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x2, 0x5f6a, 0xff01, 0x1b, 0x8001, 0x2]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x4}, {0x4, 0x3}, {0x2, 0x5}, {0x7, 0x7}, {0x6, 0x6}, {0x1, 0x3}, {0x2, 0xa}, {0x1, 0x9}, {0x7, 0x9}, {0x7}, {0x3}, {0x1, 0xa}, {0x1, 0x1}, {0x2, 0x5}, {0x5}, {0x3}, {0x3, 0xa}, {0x1, 0x9}, {0x1}, {0x6, 0x3}, {0x4, 0x3}, {0x1}, {0x2, 0x6}, {0x6, 0x6}, {0x5}, {0x2, 0x6}, {0x4, 0x2}, {0x3, 0x5}, {0x6, 0x2}, {0x3, 0x9}, {0x4}, {0x6, 0x6}, {0x7, 0xa}, {0x6, 0x6}, {0x4, 0x9}, {0x3}, {0x1, 0x3}, {0x3, 0x7}, {0x5, 0x8}, {0x5, 0x7}, {0x1, 0x1}, {0x3, 0xa}, {}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x7, 0x8}, {0x4, 0x8}, {0x2, 0x1}, {0x0, 0x7}, {0x0, 0x2}, {0x7, 0xa}, {0x6, 0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x5}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x1}, {0x1, 0x9}, {0x4, 0x3}, {0x0, 0x9}, {0x0, 0x8}, {0x7, 0x2}, {0x5, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfff, 0x9, 0x3, 0x5, 0x4, 0x4, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfff5, 0x7, 0x401, 0xb, 0xc, 0x1, 0x87fb]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xee}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xbc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x9}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0x9}, {0x0, 0x8}, {0x3}, {0x1, 0x3}, {0x0, 0x1}, {0x5, 0x4}, {0x6}, {0x6, 0xa}, {0x2, 0x8}, {0x6, 0x3}, {0x7, 0x4}, {0x0, 0x6}, {0x6, 0x3}, {0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x4, 0x4}, {0x2, 0x3}, {0x2, 0xa}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x8}, {0x2, 0x8}, {0x7, 0x8}, {0x4, 0x6}, {0x5, 0x7}, {0x5, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x8}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x3}, {0x1}, {0x1, 0x6}, {0x2, 0x8}, {0x2, 0x1}, {0x5, 0x6}, {0x7, 0x9}, {0x4, 0x7}, {0x4, 0x9}, {0x0, 0x9}, {0x1, 0x2}, {0x0, 0x5}, {0x3, 0x6}, {0x4, 0x7}, {0x5, 0x6}, {0x1, 0x4}, {0x4, 0x3}, {0x4, 0x8}, {0x5, 0x8}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x1, 0x2}, {}, {0x7, 0x6}, {0x4, 0x6}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x101, 0x4, 0x4, 0xffa0, 0x6, 0x6, 0x8]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x6}, {0x3, 0x4}, {0x1, 0x9}, {0x6, 0x1}, {0x6, 0x5}, {0x3, 0x8}, {0x7, 0x9}, {0x3, 0x1}, {0x1, 0x2}, {0x2, 0x6}, {0x3, 0x7}, {}, {0x5, 0x6}, {0x6, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x2, 0x1}, {0x1, 0xa}, {0x3}, {0x5, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x1, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x40, 0x0, 0x8000, 0x5, 0xffff, 0x1000, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfff4, 0x1, 0x7, 0x1, 0x3, 0x5, 0x6]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xff3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x1104}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00'}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r13}, 0x18) 18.953658499s ago: executing program 4 (id=1559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x9, 0x3, 0x3, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x8010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r3 = socket(0x28, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x10, 0x1f, 0x8e, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r4, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000001540), 0xfffffffe, r4, 0x0, 0x1500}, 0x38) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRES16=r4], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r5}, 0x18) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$can_raw(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030500000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="7358ffd9b2e57dda03a527f2ee3aa1a5b94e03706fb3905cb8fe3a7060c54c29342af15477070132a5e3"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 18.872070295s ago: executing program 3 (id=1560): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000005000000020000000900000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x6}}, 0x30) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa2afcaaaaaabb0800450000282000000009000000ac141400ac1e000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780800"], 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="840100001a000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffc030000000000008000000000350000020001fd1f00000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014"], 0x184}}, 0x844) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000005000000020000000900000001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x6}}, 0x30) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) (async) syz_emit_ethernet(0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa2afcaaaaaabb0800450000282000000009000000ac141400ac1e000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780800"], 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="840100001a000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffc030000000000008000000000350000020001fd1f00000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014"], 0x184}}, 0x844) (async) 18.752923176s ago: executing program 0 (id=1562): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18.748837732s ago: executing program 1 (id=1563): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="22000a3ec100"}) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0x14, 0x0, 0x1, [@nested={0x4, 0x2}, @generic="13"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5a8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 18.696360503s ago: executing program 3 (id=1564): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000680040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000041000010400000000000f5b0b143c562f", @ANYRES32=0x0, @ANYRES64, @ANYRES16=r1, @ANYRESOCT=r0], 0x40}, 0x1, 0x0, 0x0, 0x24008000}, 0x40) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x709843, 0x0) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x3d, &(0x7f0000000580)=""/253, &(0x7f0000000440)=0xfd) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020400000e00000000000000000000000500160000000e000a009316e4370e3dfe88000000000000000000000000000107000000000000000200010000000000000000000000000005000500310000000a004e20000003fffe8008000000000000000000000000bb040000000000000041a0720c6b029e52b72438c12fa077f42b23bd7e7b13"], 0x70}}, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000540)) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 18.605366628s ago: executing program 4 (id=1566): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x20008050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, 0x0, 0x200}, [@tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3501, 0x2, 0x0, 0x73, 0x8000, 0x4, 0x7}, {{@in=@multicast2, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014}) r10 = socket$netlink(0x10, 0x3, 0x6) writev(r10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'veth1_to_bridge\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r6, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xf0, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4400c000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x13, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0xb}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) 18.501688866s ago: executing program 3 (id=1567): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r0, 0x1000) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0xe7}) 18.427927437s ago: executing program 1 (id=1568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038340300000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000008030380040300800800034000000002100002800c00028008000180000000000c000440", @ANYBLOB='FQLk'], 0x3c8}, 0x1, 0x0, 0x0, 0x4}, 0x50) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010100}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480), 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000200)={r6, 0x1, 0x6, @multicast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r7, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 18.324956222s ago: executing program 3 (id=1569): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x28000000) (async, rerun: 32) r1 = socket(0x28, 0x6, 0x3) (rerun: 32) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x43, 0x2}, 0x4}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000001c0)="74ad0df6ef1792fc9b8e5636149887d7cd46df178db0d79191425711866c59b76f13c6edb4fd6e8f0874e6d6fc4818cf5a061f39f074853f206d58ca94ca82b7f90926bd6b3f1c31eb079ba60bfcf389e6d22c0731c43b67a3a3b4ae6a1bea4cd762f308b7808c5d3d6c8b9a6a88a46522f73b1a7cb63c214883c7d5ab4770d86644f5e2f9f8f53c3da313d900ad9b13e44ffd283baa5648b671780433", 0x9d}], 0x1, &(0x7f0000000280)="996143b144c6d47eb84821541357946bbefffe542522e770b7c49374de56b5f8f8e889a14c56d455759a07b6c60915206e0b7159fdd0629ce6f2315db821e2adc086d43011d42e0feb392a8ec701028cdb30abedcdae5531e259157cedd7ce6afcf5128d3ff5bb5b7fc8d905a2e050922b1ca6b3ae94092e62524ceb20c8a123cc2359df1a66cbeccf6da3c32afe5d08d234244694f0032e01d7966177c3c8c6bc422fc6fe77c331d9b0943f9d3637644109f92310dfaa27f10bfe59c15dc79895d9ce84d0d5510857331074506251df716d86705ffae5ba21c4e45e0372", 0xde, 0x4000001}, 0x44040) 18.308313975s ago: executing program 2 (id=1570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x10, 0x2, @mcast1}]}, 0x30}}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'u'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 17.92645704s ago: executing program 2 (id=1571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16], 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x130, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000015006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 17.763642934s ago: executing program 2 (id=1572): r0 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x1000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x5}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) 17.623748818s ago: executing program 4 (id=1573): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2002b000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) (async) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2002b000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000280)=""/220, 0xdc, 0x0, &(0x7f0000000900)=""/4096, 0x1000}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r4, 0x7}, 0x14}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ac1e0001000000000000000000000000e0000001000000000000f0acc17d761a733d9f"], 0x38}}, 0x40000) (async) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ac1e0001000000000000000000000000e0000001000000000000f0acc17d761a733d9f"], 0x38}}, 0x40000) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000700)={@empty, 0x0}, &(0x7f0000000740)=0x14) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x80000000, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x80000000, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) r13 = socket(0x10, 0x803, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r15, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r15, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r15, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_EMATCHES={0x54, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x5}, {0xfff, 0xf5, 0x1, 0x5, 0x2, 0x1, 0x2}}}]}]}]}}]}, 0x88}}, 0x20040054) (async) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r15, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_EMATCHES={0x54, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x5}, {0xfff, 0xf5, 0x1, 0x5, 0x2, 0x1, 0x2}}}]}]}]}}]}, 0x88}}, 0x20040054) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r2, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], 0x0, 0xdd, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000880), &(0x7f0000001900), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000001940)}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000001cc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000001c80)={&(0x7f0000001ac0)={0x1a8, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40840}, 0x14) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000001cc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000001c80)={&(0x7f0000001ac0)={0x1a8, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40840}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad000000660000000000000016000000000000009500000000010000"], &(0x7f0000000140)='GPL\x00', 0x8, 0xb, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x5b) 17.538105348s ago: executing program 1 (id=1574): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x58}], 0x1}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) (async) close(r0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400881c) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair(0x3c, 0x4, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3a1ec7e3}}}, &(0x7f0000000200)=0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) (async, rerun: 64) r12 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (async) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r13, 0x0, 0x1, &(0x7f0000000080)=""/165, &(0x7f0000000140)=0xa5) (async, rerun: 32) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r15, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r12, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000008f5abac5ce17d5bb43c69057a266f0cd375d96f2439beebf72e1fde1fd2b799fb19ec76622d7c6151e6087b37984041f0303c302c815fbaf9c49de7bb4f2dd86bc2bf131ec5b05d0c1e0aa6d8f6c3c6d4058b51f408a7763d2d16eec66319aaf28ddb6039f369f5cec6d8304ba614fe598e9ec6957028aada2567bb1", @ANYRES16=r15, @ANYBLOB="20092abd7000ffdbdf250c0000000c00078008000100030000005800018008000300ff7f000044000400200001000a004e2000005d49fe8000000000000000000000000000bb09000000200002000a004e2300000001200100000000000000000000000000018d0000000800030003000000"], 0x78}, 0x1, 0x0, 0x0, 0x4008804}, 0x4000041) (async) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', r5, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={&(0x7f0000000440)="1e4a7619c64267da8f4f8e7e0ba0f58879e307a329a8fa4afa017aa3f6b256b4565b6a10a25053b81428758111040b514fbc03eb8192473d8c68713733d7c080b3ac035fc75f4c5d7e9c0679fe77996db33b8b4e9cc09766c03333afd256c46aa020d8bddf063037b1d91bd20cac6f85fd5b45e8ff", &(0x7f0000000a00)=""/4096, &(0x7f00000005c0)="6958bba34c92b3d346a43d01661971f03791ebf5c047e8d87cabebed481cd7fe620bd5818a70a5980982374bd3246eb5648425583c9b86ba7383abbc826a452b0bac667bda64524422684a56c0d35f9b82930866a0a61fbe9933cff6ea2f5fe72fd3fbf3d3c2593ecb9fecf13b8d52a6bab97ded8a968740e806fbfebbc43a25eba0bdf77c09baa0240f5503a78df2b3f1234e1dc83968c9f0f0c0", &(0x7f0000000680)="ff16ea6b0f865fc40a60f6058e9811d8b75537841c2b0bdda854aa96e56997e4d27123be89dbb904e66f3756581944507fdffa9157181320d97c5887e5e3926e62f18a831738bbc0c2f82fcccb245f0c1083d1ad6baca858f225c5a8e334b50633e0d97a6adc352d00d97289845342fc573864adbfa4081be0c318167553d2e5ec332316ba2a7b78509adfc586ad4fd00b8ff9212d49cb919a23847c6aa5a19594b2f3cd2a569428acfaf30e4506d111dce6b1812d48e193a731b206d49136d88645d4f1224a63733d38439c2126577f", 0x5, r16, 0x4}, 0x38) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000043c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 17.312939801s ago: executing program 3 (id=1575): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x600, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x42, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) setsockopt$inet6_int(r7, 0x29, 0xb, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r11, 0x29, 0x2d, &(0x7f0000000200)={0x7f, {{0xa, 0x1, 0x0, @mcast2, 0x1000}}, {{0xa, 0x0, 0x0, @empty, 0x2}}}, 0x108) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f00000000c0)=@req={0x7, 0xaa7c, 0x2, 0x60000}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r9], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) 17.245484449s ago: executing program 4 (id=1576): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r2, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x50bd2a, 0x25dfdbfd, {}, [@NHA_ID={0xffffffffffffff3d, 0x1, 0x800001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069107f000000000004100000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 17.02050964s ago: executing program 1 (id=1577): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x800) bind$packet(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$AUDIT_USER(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x40, 0x3ed, 0x200, 0x70bd2a, 0x25dfdbfe, "5653a766e60b4ecdd7e9d01d78a4ea01640ebb5c37a470bdcd2be1c43ef232f5de47402633996b27abc31bf4a0"}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x891b, 0x0) (async) ioctl$SIOCX25SFACILITIES(r4, 0x891b, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000004d40000060c01000000030005000000000002004e21ac1e010100000000000000000200130003"], 0x78}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000004d40000060c01000000030005000000000002004e21ac1e010100000000000000000200130003"], 0x78}, 0x1, 0x7}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000180), &(0x7f00000001c0)=0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) 17.020251892s ago: executing program 1 (id=1578): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="780000001000030500"/20, @ANYRES8=r0, @ANYBLOB="0503020000000000500012800e0001006970366772657461700000003c000280060018000200000005000b0002000000080014000900000006000f00ff01000008000c000e00000008000d000700000008000400ff"], 0x78}}, 0x0) 16.882890255s ago: executing program 2 (id=1579): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r3, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x40044}}], 0x1, 0x4) (async, rerun: 64) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE(r7, 0x89e5, 0x0) (async, rerun: 64) r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) (rerun: 64) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$rxrpc(0x21, 0x2, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000037c00000400fc80a72601"], 0x26c0}}, 0x4010) (async) sendmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f14071f623976f54726af8c3f621722292c15ac8344b275fb6034fb83ac794a06e5ec938a7bb85a66298370db233f5066e864dcb44a2268cabbc52a5b94f0f5fa88aec2de0d917cb92ba86aed33a148b282fe47", 0x54}, {&(0x7f0000000140)="89c3d7def41053db29ca41cd78d996424c23b7cb2fae7115c6a36a2e0d81ca98d473c78940cc8cf593e6a563cef4d9c8db9abda6fc8cdeac5e9b4ef9ed4b5235e23b5445fc078d93af04d18bb7f02e5ac78d35a51928fd3f7007bce84c185be5f736bfc5091faa251f9c344f79730cc9b886837b9cf5a88d1efbee6f954f6761afcd55cfd965723d0db7d0dddee2e3", 0x8f}, {&(0x7f0000000200)="d477f3b11925be1d7c361350c80cb668b36c205d323d8941ef21a63afd3ef017b67e9374b6f225b3a3d7a909ab964058eef6b90be7995bde828212bcd52723e5853d91cd4abf92759d6d00ea338743ae", 0x50}], 0x3, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r6}}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [r7, r8, r9, r10, r11]}}], 0x58, 0x1}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0) (rerun: 32) 16.743745588s ago: executing program 2 (id=1580): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f00000003c0)={r2, 0x1, 0x4, @remote}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x1b8, 0x2e0, 0x1b8, 0x0, 0x1b8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [0xffffff00], [], 'veth1_to_batadv\x00', 'ip6tnl0\x00', {}, {}, 0x32, 0x0, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x4, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) 15.769766077s ago: executing program 4 (id=1581): bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0xca07, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfa}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) getsockopt$inet_udp_int(r3, 0x11, 0x64, 0x0, &(0x7f0000000180)) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="71c82cbd7000fbdbdf250400000030000180060004004e230000060002003a0000001400030000000000000000000000000000000000060001"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xfc, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x953}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc0}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffff0c}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x95}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x77f3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x14}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) (async, rerun: 64) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) (async, rerun: 64) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x0, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, 0x14, 0x603, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d4, &(0x7f0000000080)="74e1347b44bcb3d9ad3bf533848f6f14f2afd6f24fc755539e165ae640148743205e8e07687b4fec0cee095f42ee215c1deeca36aff4fb627d783cb4b3ee95a4daa1f36669ec8f79d2bf7027c40864a309e5616515cdb6c2257a6cf0e9761adfa7ea686458b98fba81ea7ad20799a571172050796d72429232eedc3f543309af7ec63d1277c1fcb841e8fae443c2399f509c391e4e2502e8a0569450ad76af4e080fe7f9b481c1f061b80e66e25c36ccd37931995ac25feae626d4") r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "ebd2c1a20a1ed7251e211a93fce95097df"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (async, rerun: 64) socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r9, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.753945777s ago: executing program 1 (id=1582): getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xb93, 0x0, 0xfffffff3}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={r0, 0xcffc, 0x6, 0x9, 0x8, 0x21, 0x723, 0x1, {0x0, @in6={{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x5eb, 0x2, 0x4, 0x4, 0x5}}, &(0x7f0000000140)=0xb0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x37, 0x0, &(0x7f0000000200)="a79fff914547bf17731a51f4525937fb508c3b460c496066177eae007ccc399bdf39630cdbfc391c4a89e044448c0a2a995bc397198843", &(0x7f0000000240), 0x1ba5, 0x0, 0x2, 0xd1, &(0x7f0000000280)="adb8", &(0x7f00000002c0)="2aa1ab725977b019aaa0f0afd734f1f36e858fcfabb5522938e228f7eefe9debd4af508be38949ee1e5b821744046add9c2a67c712c69a47f93553c622b9e383181be5bca9be8ebf199f75b7dca8115cef0a6927ffe07a4ec8e49161fc83593c80abf5b5243e527acf8c515ea41faada07b90351bd0e0a960e92ca64436156cbb5350dea814dec75a638ec36a7cb7783dff66eaae0e5ab4aa20f93050cf81c372b2ab976e33141660c661ee2bd5de177d45419bb100c2d72d5f4d3f9088d1d7663de9392e67d87203cf704fdb8441d7166", 0x4, 0x0, 0x1}, 0x50) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000440)={0x80}) (async) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000500)={0x0, 0xd8}, &(0x7f0000000540)=0x8) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000580)={{r1}, "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"}) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000001580)=0x9, 0x4) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f00000015c0)={0x14000000, {{0x2, 0x4e21, @remote}}}, 0x88) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000019c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8004500a}, 0xc, &(0x7f0000001980)={&(0x7f00000016c0)={0x28c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf76}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffeff}]}, @TIPC_NLA_MEDIA={0x11c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4256}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15b65e14}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe007}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa54}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xed06}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "3c23450c7cc4cefe596691b8edb124bd235d042cce46c87ed5e04c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffc01}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ID={0x51, 0x3, "e64db335d568f1a4d3aa3f8d9c1f8c30585aa794f109b80cda3976832d5ec9a76f5ad51c8cdb5089b19d576960fb332ce76a8ad6df4c23c5e1760afad27f5acd7167953073477816eea59d4ea8"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4005080}, 0x40) (async) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000001a00)={{0x2, 0x4e20, @multicast2}, {0x1, @multicast}, 0x40, {0x2, 0xfff9, @multicast1}, 'vcan0\x00'}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000001a80)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), r5) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000001e00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001b40)={0x244, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xb}, @ETHTOOL_A_EEE_MODES_OURS={0x13c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/#:$-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ')\\@&^.$-\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '//\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x589}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ',%^],:($\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x95, 0x5, "542a59c002b97c5596fec5ff53dfdf40952984a80c5fddf9e743b9f241d33998aa6bce005b53a35f31f523d750d3ee023ce3f4cb73ec44509a6aa1976a36e746fd398d471aefbcd0a40063eb036f5b872bb6740228c93a68322f9a0bcc9e3e6f2bf31261466e94a74ae13560ca879a2ac5aea639cff91eb497fa6e49add98dc69c36b5febc1e24fa5d07ef89645a4fc4bf"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}]}, @ETHTOOL_A_EEE_MODES_OURS={0xcc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_MASK={0xb2, 0x5, "49b19caf3247ecf2538446f603ac12d89a5656b6330841332cd77aa579b591ae4c3371bcdac6307ddeae4083c544cb75dd984d6b9c878f726024a4339d23644a4a6b1158b9cfb0fbaff962bdf9fe34f6c33dcde3282552dbbff9ba1bb4790b724168381476ff3d950534a4f196190d899fa744faebf7ffe1c45f30d1e8f3f35cb96e0175a3cca90f69f96cc9f57701f42052e20f344aff59cde56f2cf6ff73edb2d7a5640eab4aa0f53756124cb2"}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x8040}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001f00)={0x1, 0x58, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001f40)={'wg1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001fc0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002080)={0xffffffffffffffff, 0x58, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002140)={'syztnl1\x00', &(0x7f00000020c0)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x10, 0x7ff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x8000, 0x40, 0xf, 0x4}}) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002180)={0x0, @local, @initdev}, &(0x7f00000021c0)=0xc) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002200)={0x0, @initdev, @multicast1}, &(0x7f0000002240)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'wg0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002300)={'erspan0\x00', &(0x7f00000022c0)={'tunl0\x00', 0x0, 0x4ca0ae9536238917, 0x7800, 0x8, 0x7, {{0x6, 0x4, 0x2, 0x5, 0x18, 0x66, 0x0, 0x8b, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@noop]}}}}}) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002340)={0x0, @private, @empty}, &(0x7f0000002380)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000023c0)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000002700)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002480)={0x228, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb1a55f17f9ba229f}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000001) 15.652846301s ago: executing program 2 (id=1583): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000100)="0232e60039", 0x5}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="778f28bd7000ffdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4080) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x4c, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x40800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0xd, &(0x7f00000009c0)=@framed={{}, [@map_fd={0x18, 0xa, 0x1, 0x0, r0}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000240), &(0x7f00000002c0)=r3}, 0x20) 15.651207594s ago: executing program 0 (id=1584): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000600000004000000000000070000000004000000000000070000000000000000b7f9"], 0x0, 0x36, 0x0, 0x1}, 0x28) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c00931ef9334c4e74310000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x20008010) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xc5c7}, 0x0, 0x0) close(r1) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 2.195885916s ago: executing program 32 (id=1575): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x600, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x42, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) setsockopt$inet6_int(r7, 0x29, 0xb, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r11, 0x29, 0x2d, &(0x7f0000000200)={0x7f, {{0xa, 0x1, 0x0, @mcast2, 0x1000}}, {{0xa, 0x0, 0x0, @empty, 0x2}}}, 0x108) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f00000000c0)=@req={0x7, 0xaa7c, 0x2, 0x60000}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r9], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) 169.393534ms ago: executing program 33 (id=1584): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000600000004000000000000070000000004000000000000070000000000000000b7f9"], 0x0, 0x36, 0x0, 0x1}, 0x28) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c00931ef9334c4e74310000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x20008010) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xc5c7}, 0x0, 0x0) close(r1) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 128.883329ms ago: executing program 34 (id=1582): getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xb93, 0x0, 0xfffffff3}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={r0, 0xcffc, 0x6, 0x9, 0x8, 0x21, 0x723, 0x1, {0x0, @in6={{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x5eb, 0x2, 0x4, 0x4, 0x5}}, &(0x7f0000000140)=0xb0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x37, 0x0, &(0x7f0000000200)="a79fff914547bf17731a51f4525937fb508c3b460c496066177eae007ccc399bdf39630cdbfc391c4a89e044448c0a2a995bc397198843", &(0x7f0000000240), 0x1ba5, 0x0, 0x2, 0xd1, &(0x7f0000000280)="adb8", &(0x7f00000002c0)="2aa1ab725977b019aaa0f0afd734f1f36e858fcfabb5522938e228f7eefe9debd4af508be38949ee1e5b821744046add9c2a67c712c69a47f93553c622b9e383181be5bca9be8ebf199f75b7dca8115cef0a6927ffe07a4ec8e49161fc83593c80abf5b5243e527acf8c515ea41faada07b90351bd0e0a960e92ca64436156cbb5350dea814dec75a638ec36a7cb7783dff66eaae0e5ab4aa20f93050cf81c372b2ab976e33141660c661ee2bd5de177d45419bb100c2d72d5f4d3f9088d1d7663de9392e67d87203cf704fdb8441d7166", 0x4, 0x0, 0x1}, 0x50) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000440)={0x80}) (async) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000500)={0x0, 0xd8}, &(0x7f0000000540)=0x8) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000580)={{r1}, "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"}) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000001580)=0x9, 0x4) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f00000015c0)={0x14000000, {{0x2, 0x4e21, @remote}}}, 0x88) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000019c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8004500a}, 0xc, &(0x7f0000001980)={&(0x7f00000016c0)={0x28c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf76}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffeff}]}, @TIPC_NLA_MEDIA={0x11c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4256}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15b65e14}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe007}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa54}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xed06}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "3c23450c7cc4cefe596691b8edb124bd235d042cce46c87ed5e04c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffc01}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ID={0x51, 0x3, "e64db335d568f1a4d3aa3f8d9c1f8c30585aa794f109b80cda3976832d5ec9a76f5ad51c8cdb5089b19d576960fb332ce76a8ad6df4c23c5e1760afad27f5acd7167953073477816eea59d4ea8"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4005080}, 0x40) (async) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000001a00)={{0x2, 0x4e20, @multicast2}, {0x1, @multicast}, 0x40, {0x2, 0xfff9, @multicast1}, 'vcan0\x00'}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000001a80)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), r5) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000001e00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001b40)={0x244, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xb}, @ETHTOOL_A_EEE_MODES_OURS={0x13c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/#:$-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ')\\@&^.$-\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '//\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x589}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ',%^],:($\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x95, 0x5, "542a59c002b97c5596fec5ff53dfdf40952984a80c5fddf9e743b9f241d33998aa6bce005b53a35f31f523d750d3ee023ce3f4cb73ec44509a6aa1976a36e746fd398d471aefbcd0a40063eb036f5b872bb6740228c93a68322f9a0bcc9e3e6f2bf31261466e94a74ae13560ca879a2ac5aea639cff91eb497fa6e49add98dc69c36b5febc1e24fa5d07ef89645a4fc4bf"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}]}, @ETHTOOL_A_EEE_MODES_OURS={0xcc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_MASK={0xb2, 0x5, "49b19caf3247ecf2538446f603ac12d89a5656b6330841332cd77aa579b591ae4c3371bcdac6307ddeae4083c544cb75dd984d6b9c878f726024a4339d23644a4a6b1158b9cfb0fbaff962bdf9fe34f6c33dcde3282552dbbff9ba1bb4790b724168381476ff3d950534a4f196190d899fa744faebf7ffe1c45f30d1e8f3f35cb96e0175a3cca90f69f96cc9f57701f42052e20f344aff59cde56f2cf6ff73edb2d7a5640eab4aa0f53756124cb2"}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x8040}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001f00)={0x1, 0x58, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001f40)={'wg1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001fc0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002080)={0xffffffffffffffff, 0x58, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002140)={'syztnl1\x00', &(0x7f00000020c0)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x10, 0x7ff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x8000, 0x40, 0xf, 0x4}}) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002180)={0x0, @local, @initdev}, &(0x7f00000021c0)=0xc) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002200)={0x0, @initdev, @multicast1}, &(0x7f0000002240)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'wg0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002300)={'erspan0\x00', &(0x7f00000022c0)={'tunl0\x00', 0x0, 0x4ca0ae9536238917, 0x7800, 0x8, 0x7, {{0x6, 0x4, 0x2, 0x5, 0x18, 0x66, 0x0, 0x8b, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@noop]}}}}}) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002340)={0x0, @private, @empty}, &(0x7f0000002380)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000023c0)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000002700)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002480)={0x228, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb1a55f17f9ba229f}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000001) 79.647919ms ago: executing program 35 (id=1583): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000100)="0232e60039", 0x5}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="778f28bd7000ffdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4080) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x4c, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x40800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0xd, &(0x7f00000009c0)=@framed={{}, [@map_fd={0x18, 0xa, 0x1, 0x0, r0}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}}, 0x8010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000240), &(0x7f00000002c0)=r3}, 0x20) 0s ago: executing program 36 (id=1581): bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0xca07, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfa}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) getsockopt$inet_udp_int(r3, 0x11, 0x64, 0x0, &(0x7f0000000180)) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="71c82cbd7000fbdbdf250400000030000180060004004e230000060002003a0000001400030000000000000000000000000000000000060001"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xfc, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x953}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc0}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffff0c}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x95}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x77f3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x14}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) (async, rerun: 64) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) (async, rerun: 64) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x0, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, 0x14, 0x603, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d4, &(0x7f0000000080)="74e1347b44bcb3d9ad3bf533848f6f14f2afd6f24fc755539e165ae640148743205e8e07687b4fec0cee095f42ee215c1deeca36aff4fb627d783cb4b3ee95a4daa1f36669ec8f79d2bf7027c40864a309e5616515cdb6c2257a6cf0e9761adfa7ea686458b98fba81ea7ad20799a571172050796d72429232eedc3f543309af7ec63d1277c1fcb841e8fae443c2399f509c391e4e2502e8a0569450ad76af4e080fe7f9b481c1f061b80e66e25c36ccd37931995ac25feae626d4") r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "ebd2c1a20a1ed7251e211a93fce95097df"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (async, rerun: 64) socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r9, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 4711 [ 162.175528][ T8243] tipc: Enabled bearer , priority 0 [ 162.220002][ T8242] syzkaller0: entered promiscuous mode [ 162.225633][ T8242] syzkaller0: entered allmulticast mode [ 162.269148][ T8253] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 162.278484][ T8242] tipc: Resetting bearer [ 162.302391][ T8242] tipc: Disabling bearer [ 162.420721][ T8246] syzkaller0: entered promiscuous mode [ 162.430431][ T8246] syzkaller0: entered allmulticast mode [ 162.552716][ T8267] netlink: 'syz.2.560': attribute type 58 has an invalid length. [ 162.561017][ T8267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.560'. [ 162.593408][ T8269] Bluetooth: MGMT ver 1.23 [ 162.663832][ T8273] netlink: 64 bytes leftover after parsing attributes in process `syz.1.561'. [ 162.693946][ T8273] netlink: 732 bytes leftover after parsing attributes in process `syz.1.561'. [ 162.703333][ T8273] netlink: 732 bytes leftover after parsing attributes in process `syz.1.561'. [ 163.901023][ T8275] erspan0 speed is unknown, defaulting to 1000 [ 164.150528][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 164.900935][ T8286] erspan0 speed is unknown, defaulting to 1000 [ 165.683994][ T8333] syzkaller0: entered promiscuous mode [ 165.690138][ T8333] syzkaller0: entered allmulticast mode [ 165.807501][ T8340] netlink: 200 bytes leftover after parsing attributes in process `syz.3.575'. [ 166.160861][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 166.266835][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.315397][ T8351] netlink: 'syz.0.583': attribute type 16 has an invalid length. [ 166.679622][ T8367] __nla_validate_parse: 2 callbacks suppressed [ 166.679643][ T8367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.588'. [ 166.698553][ T8361] netlink: 'syz.1.587': attribute type 1 has an invalid length. [ 166.711145][ T8367] tipc: Enabling of bearer rejected, failed to enable media [ 166.864678][ T8361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.978382][ T8373] netlink: 'syz.0.590': attribute type 2 has an invalid length. [ 167.017506][ T8373] 9: entered promiscuous mode [ 167.049105][ T8377] netlink: 'syz.0.590': attribute type 2 has an invalid length. [ 167.081044][ T8377] : entered promiscuous mode [ 167.260376][ T8380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.566098][ T8399] tipc: Enabled bearer , priority 0 [ 167.574649][ T8399] syzkaller0: entered promiscuous mode [ 167.580406][ T8399] syzkaller0: entered allmulticast mode [ 167.630882][ T8399] tipc: Resetting bearer [ 167.688341][ T8397] tipc: Resetting bearer [ 167.712400][ T8397] tipc: Disabling bearer [ 167.784324][ T8406] erspan0 speed is unknown, defaulting to 1000 [ 168.199049][ T56] block nbd0: Possible stuck request ffff888024ab5080: control (read@0,1024B). Runtime 60 seconds [ 168.210013][ T56] block nbd0: Possible stuck request ffff888024ab5240: control (read@1024,1024B). Runtime 60 seconds [ 168.221213][ T56] block nbd0: Possible stuck request ffff888024ab5400: control (read@2048,1024B). Runtime 60 seconds [ 168.232773][ T56] block nbd0: Possible stuck request ffff888024ab55c0: control (read@3072,1024B). Runtime 60 seconds [ 168.918207][ T8465] netlink: 'syz.2.614': attribute type 21 has an invalid length. [ 169.177003][ T8465] nbd2: detected capacity change from 0 to 63 [ 169.228829][ T8474] block nbd2: NBD_DISCONNECT [ 169.238838][ T8474] block nbd2: Disconnected due to user request. [ 169.281432][ T8474] block nbd2: shutting down sockets [ 169.378037][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.388022][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 169.397267][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.406431][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 169.414382][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.423518][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 169.431388][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.440504][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 169.458367][ T5829] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.469030][ T5829] Buffer I/O error on dev nbd2, logical block 0, async page read [ 169.486794][ T8476] can: request_module (can-proto-4) failed. [ 169.511285][ T5829] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.522735][ T5829] Buffer I/O error on dev nbd2, logical block 1, async page read [ 169.530981][ T5829] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.540624][ T5829] Buffer I/O error on dev nbd2, logical block 2, async page read [ 169.549618][ T5829] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.597874][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.620'. [ 169.606594][ T5829] Buffer I/O error on dev nbd2, logical block 3, async page read [ 169.625253][ T5829] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.645126][ T5829] Buffer I/O error on dev nbd2, logical block 0, async page read [ 169.655288][ T5829] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.700812][ T30] audit: type=1800 audit(1762105897.687:2): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.622" name="devices.list" dev="tmpfs" ino=615 res=0 errno=0 [ 169.723181][ T8509] netlink: 67 bytes leftover after parsing attributes in process `syz.1.623'. [ 169.725140][ T5829] Buffer I/O error on dev nbd2, logical block 1, async page read [ 169.756234][ T8509] netlink: 67 bytes leftover after parsing attributes in process `syz.1.623'. [ 169.789413][ T8509] netlink: 67 bytes leftover after parsing attributes in process `syz.1.623'. [ 169.800860][ T5829] ldm_validate_partition_table(): Disk read failed. [ 169.853861][ T5829] Dev nbd2: unable to read RDB block 0 [ 169.875667][ T5829] nbd2: unable to read partition table [ 169.981049][ T5829] ldm_validate_partition_table(): Disk read failed. [ 170.000851][ T5829] Dev nbd2: unable to read RDB block 0 [ 170.009127][ T8522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.627'. [ 170.032253][ T5829] nbd2: unable to read partition table [ 170.099775][ T8527] netlink: 220 bytes leftover after parsing attributes in process `syz.0.628'. [ 170.165388][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.626'. [ 170.182346][ T8528] erspan0 speed is unknown, defaulting to 1000 [ 170.280202][ T8531] syz_tun: entered promiscuous mode [ 170.316879][ T8531] macvtap1: entered promiscuous mode [ 170.363400][ T8531] syz_tun: left promiscuous mode [ 170.864441][ T8556] : renamed from bond_slave_0 [ 171.112090][ T8570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.638'. [ 171.775888][ T8590] tipc: Started in network mode [ 171.786301][ T8590] tipc: Node identity 52f74ce68b89, cluster identity 4711 [ 171.803253][ T8590] tipc: Enabled bearer , priority 0 [ 171.815857][ T8590] syzkaller0: entered promiscuous mode [ 171.826656][ T8590] syzkaller0: entered allmulticast mode [ 171.865652][ T8596] veth7: entered promiscuous mode [ 171.928926][ T8589] tipc: Resetting bearer [ 172.011110][ T8589] tipc: Disabling bearer [ 172.449350][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'. [ 172.478342][ T8624] erspan0 speed is unknown, defaulting to 1000 [ 172.714556][ T8635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.656'. [ 173.121701][ T8655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.664'. [ 173.128394][ T8652] netlink: 'syz.4.663': attribute type 298 has an invalid length. [ 173.153623][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 173.175749][ T8648] erspan0 speed is unknown, defaulting to 1000 [ 173.177895][ T8665] bridge_slave_1: left allmulticast mode [ 173.193524][ T8665] bridge_slave_1: left promiscuous mode [ 173.204646][ T8652] netlink: 'syz.4.663': attribute type 1 has an invalid length. [ 173.210560][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.237849][ T8665] bridge_slave_0: left allmulticast mode [ 173.256633][ T8665] bridge_slave_0: left promiscuous mode [ 173.269318][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.284459][ T8668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.667'. [ 173.304428][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.663'. [ 173.413955][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 173.564237][ T8666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.643380][ T8674] bond1: (slave bridge1): making interface the new active one [ 173.654095][ T8674] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 173.690029][ T8684] netlink: 'syz.1.668': attribute type 1 has an invalid length. [ 173.698731][ T8684] netlink: 224 bytes leftover after parsing attributes in process `syz.1.668'. [ 173.728618][ T8685] netlink: 'syz.1.668': attribute type 1 has an invalid length. [ 173.736791][ T8685] netlink: 224 bytes leftover after parsing attributes in process `syz.1.668'. [ 174.052115][ T8694] erspan0 speed is unknown, defaulting to 1000 [ 174.155972][ T8705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.671'. [ 174.480534][ T8714] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 68 [ 174.627763][ T89] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.681193][ T8716] erspan0 speed is unknown, defaulting to 1000 [ 174.997105][ T89] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.009075][ T8729] syzkaller1: entered promiscuous mode [ 175.037253][ T8729] syzkaller1: entered allmulticast mode [ 175.105612][ T8714] erspan0 speed is unknown, defaulting to 1000 [ 175.590363][ T8745] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 175.639495][ T8742] syz_tun: entered allmulticast mode [ 175.668732][ T8739] syz_tun (unregistering): left allmulticast mode [ 175.831180][ T8751] x_tables: duplicate underflow at hook 1 [ 176.174439][ T8754] debugfs: 'netdev:nicvf0' already exists in 'phy3' [ 176.838338][ T8787] erspan0 speed is unknown, defaulting to 1000 [ 176.924949][ T8792] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003 [ 177.871820][ T8790] netlink: 'syz.1.691': attribute type 17 has an invalid length. [ 177.929405][ T8822] syzkaller0: entered promiscuous mode [ 177.935485][ T8822] syzkaller0: entered allmulticast mode [ 177.954132][ T8790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.054759][ T8835] tipc: Enabled bearer , priority 0 [ 178.064348][ T8838] xt_cluster: node mask cannot exceed total number of nodes [ 178.088893][ T8822] tipc: Resetting bearer [ 178.113596][ T8821] tipc: Resetting bearer [ 178.154083][ T8821] tipc: Disabling bearer [ 178.572357][ T8854] __nla_validate_parse: 6 callbacks suppressed [ 178.572378][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.707'. [ 178.848089][ T8867] syzkaller0: entered promiscuous mode [ 178.856996][ T8867] syzkaller0: entered allmulticast mode [ 179.444648][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 179.751463][ T8894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.716'. [ 180.093100][ T8898] bond4 (unregistering): Released all slaves [ 180.388727][ T8903] erspan0 speed is unknown, defaulting to 1000 [ 180.497596][ T8909] netlink: 32 bytes leftover after parsing attributes in process `syz.1.721'. [ 180.529252][ T8912] tipc: Enabling of bearer rejected, failed to enable media [ 180.638059][ T8920] IPVS: set_ctl: invalid protocol: 0 172.20.20.57:20002 [ 180.760136][ T8923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.724'. [ 180.769723][ T8919] nbd1: detected capacity change from 0 to 127 [ 180.776234][ T8927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.724'. [ 180.788723][ T5831] block nbd1: Receive control failed (result -32) [ 180.800253][ T5829] block nbd1: Dead connection, failed to find a fallback [ 180.808131][ T8922] bond4 (unregistering): Released all slaves [ 180.814827][ T5829] block nbd1: shutting down sockets [ 180.821666][ T5829] blk_print_req_error: 138 callbacks suppressed [ 180.821685][ T5829] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.837590][ T5829] buffer_io_error: 138 callbacks suppressed [ 180.837608][ T5829] Buffer I/O error on dev nbd1, logical block 0, async page read [ 180.852532][ T5829] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.861956][ T5829] Buffer I/O error on dev nbd1, logical block 1, async page read [ 180.870096][ T5829] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.879335][ T5829] Buffer I/O error on dev nbd1, logical block 2, async page read [ 180.896946][ T5829] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.906158][ T5829] Buffer I/O error on dev nbd1, logical block 3, async page read [ 180.914468][ T5829] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.924176][ T5829] Buffer I/O error on dev nbd1, logical block 0, async page read [ 180.932680][ T5829] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.942856][ T5829] Buffer I/O error on dev nbd1, logical block 1, async page read [ 180.958989][ T5829] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.969150][ T5829] Buffer I/O error on dev nbd1, logical block 2, async page read [ 180.977323][ T5829] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.986861][ T5829] Buffer I/O error on dev nbd1, logical block 3, async page read [ 181.021502][ T5829] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.059939][ T5829] Buffer I/O error on dev nbd1, logical block 0, async page read [ 181.084792][ T5829] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.107841][ T5829] Buffer I/O error on dev nbd1, logical block 1, async page read [ 181.154471][ T5829] ldm_validate_partition_table(): Disk read failed. [ 181.179653][ T5829] Dev nbd1: unable to read RDB block 0 [ 181.194235][ T5829] nbd1: unable to read partition table [ 181.210546][ T8935] netlink: 20 bytes leftover after parsing attributes in process `syz.0.727'. [ 181.222474][ T5829] ldm_validate_partition_table(): Disk read failed. [ 181.223480][ T8931] erspan0 speed is unknown, defaulting to 1000 [ 181.243353][ T5829] Dev nbd1: unable to read RDB block 0 [ 181.244871][ T8935] netlink: 68 bytes leftover after parsing attributes in process `syz.0.727'. [ 181.271475][ T5829] nbd1: unable to read partition table [ 181.754501][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 181.789949][ T8942] netlink: 'syz.1.729': attribute type 1 has an invalid length. [ 182.315886][ T8957] erspan0 speed is unknown, defaulting to 1000 [ 182.848504][ T8977] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 182.872808][ T8977] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 182.951229][ T8983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.739'. [ 183.095761][ T8991] netlink: 'syz.3.742': attribute type 1 has an invalid length. [ 183.117378][ T8991] netlink: 'syz.3.742': attribute type 2 has an invalid length. [ 183.613499][ T8996] erspan0 speed is unknown, defaulting to 1000 [ 183.758069][ T9009] tipc: Enabled bearer , priority 0 [ 183.822402][ T9009] tipc: Disabling bearer [ 184.000491][ T9013] __nla_validate_parse: 1 callbacks suppressed [ 184.000510][ T9013] netlink: 124 bytes leftover after parsing attributes in process `syz.4.747'. [ 184.195850][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 184.383796][ T9020] hsr_slave_1 (unregistering): left promiscuous mode [ 185.675114][ T9066] erspan0 speed is unknown, defaulting to 1000 [ 185.724074][ T9070] netlink: 'syz.3.759': attribute type 4 has an invalid length. [ 186.423549][ T9105] netlink: 256 bytes leftover after parsing attributes in process `syz.4.765'. [ 186.447634][ T9102] netlink: 40 bytes leftover after parsing attributes in process `syz.4.765'. [ 186.974853][ T9125] netlink: 'syz.1.769': attribute type 11 has an invalid length. [ 186.993938][ T9125] netlink: 'syz.1.769': attribute type 11 has an invalid length. [ 187.012569][ T9125] netlink: 224 bytes leftover after parsing attributes in process `syz.1.769'. [ 187.178550][ T9128] netlink: zone id is out of range [ 187.184047][ T9128] netlink: zone id is out of range [ 187.193433][ T9128] netlink: set zone limit has 8 unknown bytes [ 187.255812][ T9118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.399743][ T9132] tipc: Enabled bearer , priority 0 [ 187.418421][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 187.447676][ T9132] syzkaller0: entered promiscuous mode [ 187.453437][ T9132] syzkaller0: entered allmulticast mode [ 187.455497][ T9134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.466673][ T9134] IPv6: NLM_F_CREATE should be set when creating new route [ 187.479849][ T9134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.487221][ T9134] IPv6: NLM_F_CREATE should be set when creating new route [ 187.510991][ T9139] netlink: 'syz.2.774': attribute type 16 has an invalid length. [ 187.519127][ T9139] netlink: 'syz.2.774': attribute type 17 has an invalid length. [ 188.018420][ T9132] tipc: Resetting bearer [ 188.085390][ T9147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.129523][ T9147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.188753][ T8061] erspan0 speed is unknown, defaulting to 1000 [ 188.188775][ T3571] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.205576][ T8061] syz2: Port: 1 Link DOWN [ 188.230909][ T3571] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.276224][ T3571] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.316612][ T3571] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.367194][ T9131] tipc: Resetting bearer [ 188.381560][ T9131] tipc: Disabling bearer [ 188.392428][ T8060] erspan0 speed is unknown, defaulting to 1000 [ 188.430386][ T9147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.448618][ T9147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.468690][ T3571] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.482976][ T3571] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.488693][ T9171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.782'. [ 188.502664][ T3571] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.528090][ T3571] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.565385][ T9147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.596216][ T9147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.697850][ T9147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.742354][ T9147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.822434][ T9178] netlink: 'syz.0.785': attribute type 15 has an invalid length. [ 188.843232][ T9180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.786'. [ 188.858113][ T9182] netlink: 'syz.0.785': attribute type 1 has an invalid length. [ 188.888076][ T9182] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 188.936548][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.953991][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.977026][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.786'. [ 189.020336][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.034540][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.059216][ T9193] x_tables: duplicate underflow at hook 2 [ 189.086700][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.095267][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.115424][ T9192] tipc: Enabled bearer , priority 0 [ 189.149975][ T9192] syzkaller0: entered promiscuous mode [ 189.168037][ T9192] syzkaller0: entered allmulticast mode [ 189.223735][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.242547][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.312694][ T9192] tipc: Resetting bearer [ 189.346890][ T9190] tipc: Resetting bearer [ 189.368549][ T9190] tipc: Disabling bearer [ 189.395445][ T9200] erspan0 speed is unknown, defaulting to 1000 [ 189.926790][ T9222] syzkaller1: entered promiscuous mode [ 189.932439][ T9222] syzkaller1: entered allmulticast mode [ 190.115503][ T9230] netlink: 32 bytes leftover after parsing attributes in process `syz.3.799'. [ 190.719205][ T9249] syzkaller0: entered promiscuous mode [ 190.724720][ T9249] syzkaller0: entered allmulticast mode [ 191.061961][ T9269] tipc: Enabled bearer , priority 0 [ 191.090902][ T9269] syzkaller0: entered promiscuous mode [ 191.100887][ T9269] syzkaller0: entered allmulticast mode [ 191.154802][ T9269] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 191.193181][ T9269] tipc: Resetting bearer [ 191.207831][ T9274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.237579][ T9267] tipc: Resetting bearer [ 191.280204][ T9267] tipc: Disabling bearer [ 191.561895][ T9303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.816'. [ 191.576359][ T9303] unsupported nlmsg_type 40 [ 191.655649][ T9305] netlink: 'syz.3.817': attribute type 1 has an invalid length. [ 191.685882][ T9305] netlink: 92 bytes leftover after parsing attributes in process `syz.3.817'. [ 192.118922][ T9342] tipc: Enabled bearer , priority 0 [ 192.131099][ T9338] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 192.438349][ T9331] tipc: Resetting bearer [ 192.531821][ T9364] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 192.551208][ T9331] tipc: Disabling bearer [ 192.600130][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 192.739499][ T9373] erspan0 speed is unknown, defaulting to 1000 [ 193.169087][ T9397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.840'. [ 193.587272][ T9393] erspan0 speed is unknown, defaulting to 1000 [ 193.647188][ T940] syz_tun: tun_net_xmit 90 [ 193.947070][ T9155] syz_tun: tun_net_xmit 90 [ 194.668341][ T9153] syz_tun: tun_net_xmit 90 [ 195.089309][ T30] audit: type=1804 audit(1762105923.087:3): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.854" name="/newroot/170/cgroup.controllers" dev="tmpfs" ino=890 res=1 errno=0 [ 195.147314][ T30] audit: type=1800 audit(1762105923.087:4): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.854" name="cgroup.controllers" dev="tmpfs" ino=890 res=0 errno=0 [ 195.178665][ T30] audit: type=1800 audit(1762105923.147:5): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.854" name="cgroup.controllers" dev="tmpfs" ino=890 res=0 errno=0 [ 195.297648][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'. [ 195.313161][ T9462] erspan0 speed is unknown, defaulting to 1000 [ 195.385856][ T9473] netlink: 48 bytes leftover after parsing attributes in process `syz.2.858'. [ 195.466182][ T9475] netlink: 'syz.1.859': attribute type 4 has an invalid length. [ 195.519365][ T9478] netlink: 'syz.1.859': attribute type 4 has an invalid length. [ 195.624437][ T9477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.860'. [ 195.807365][ T9158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 195.960285][ T9493] netlink: 56 bytes leftover after parsing attributes in process `syz.4.863'. [ 195.999989][ T9158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.157656][ T9500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.867'. [ 196.568721][ T9158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.857456][ T9535] netlink: 'syz.2.873': attribute type 1 has an invalid length. [ 196.986717][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 197.324232][ T9563] sctp: [Deprecated]: syz.1.882 (pid 9563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.324232][ T9563] Use struct sctp_sack_info instead [ 197.549382][ T9567] erspan0 speed is unknown, defaulting to 1000 [ 197.617095][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 197.775362][ T9577] netlink: 32 bytes leftover after parsing attributes in process `syz.0.886'. [ 198.268622][ T56] block nbd0: Possible stuck request ffff888024ab5080: control (read@0,1024B). Runtime 90 seconds [ 198.279731][ T56] block nbd0: Possible stuck request ffff888024ab5240: control (read@1024,1024B). Runtime 90 seconds [ 198.291323][ T56] block nbd0: Possible stuck request ffff888024ab5400: control (read@2048,1024B). Runtime 90 seconds [ 198.302883][ T56] block nbd0: Possible stuck request ffff888024ab55c0: control (read@3072,1024B). Runtime 90 seconds [ 198.538515][ T9598] pim6reg1: entered promiscuous mode [ 198.549163][ T9598] pim6reg1: entered allmulticast mode [ 198.734532][ T9596] delete_channel: no stack [ 199.290755][ T9633] syz_tun: tun_net_xmit 42 [ 199.295771][ T9633] syz_tun: tun_net_xmit 42 [ 199.309801][ T9633] syz_tun: tun_net_xmit 42 [ 199.317572][ T9636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.903'. [ 199.327120][ T9633] syz_tun: tun_net_xmit 42 [ 199.331765][ T9633] syz_tun: tun_net_xmit 42 [ 199.336383][ T9633] syz_tun: tun_net_xmit 42 [ 199.351505][ T9158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.367117][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.900'. [ 199.370992][ T9633] syz_tun: tun_net_xmit 42 [ 199.408030][ T9158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.454401][ T9648] x_tables: duplicate underflow at hook 3 [ 199.551588][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.558833][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.855309][ T9669] syzkaller1: entered promiscuous mode [ 199.861215][ T9669] syzkaller1: entered allmulticast mode [ 199.972848][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.914'. [ 200.182676][ T9680] netlink: 'syz.3.916': attribute type 15 has an invalid length. [ 200.346883][ T9158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.485813][ T9685] __nla_validate_parse: 1 callbacks suppressed [ 200.485833][ T9685] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.917'. [ 200.504403][ T9685] netlink: 'syz.2.917': attribute type 11 has an invalid length. [ 200.512645][ T9685] netlink: 'syz.2.917': attribute type 11 has an invalid length. [ 200.521200][ T9685] netlink: 204 bytes leftover after parsing attributes in process `syz.2.917'. [ 200.584165][ T9689] netlink: 'syz.2.918': attribute type 6 has an invalid length. [ 200.648697][ T9690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.918'. [ 200.657839][ T9690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.918'. [ 200.667403][ T9690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.918'. [ 200.676412][ T9690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.918'. [ 201.864814][ T9761] vlan2: entered promiscuous mode [ 201.877815][ T9761] hsr_slave_1: entered promiscuous mode [ 201.884017][ T9761] vlan2: entered allmulticast mode [ 201.890966][ T9761] hsr_slave_1: entered allmulticast mode [ 201.924238][ T9761] erspan0 speed is unknown, defaulting to 1000 [ 202.466385][ T9769] netlink: 'syz.3.939': attribute type 13 has an invalid length. [ 202.503037][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.940'. [ 202.762014][ T9769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.777975][ T9769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.959258][ T9769] batman_adv: batadv0: Interface deactivated: gretap1 [ 203.092348][ T36] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.131918][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.172273][ T36] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.196773][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.229886][ T36] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.255703][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.264408][ T9776] erspan0 speed is unknown, defaulting to 1000 [ 203.275050][ T36] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.283720][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.697496][ T9808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.945'. [ 204.251850][ T9821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.490612][ T9829] netlink: 96 bytes leftover after parsing attributes in process `syz.4.949'. [ 205.153521][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 205.203621][ T9846] dvmrp1: left allmulticast mode [ 205.268853][ T9851] netlink: 'syz.3.956': attribute type 6 has an invalid length. [ 205.314262][ T9851] netlink: 'syz.3.956': attribute type 6 has an invalid length. [ 205.850275][ T9882] __nla_validate_parse: 1 callbacks suppressed [ 205.850293][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'. [ 205.866988][ T9882] netlink: 'syz.1.961': attribute type 1 has an invalid length. [ 205.874921][ T9882] netlink: 224 bytes leftover after parsing attributes in process `syz.1.961'. [ 206.442623][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 206.532139][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 206.557014][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 206.566452][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 206.631212][ T9936] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.972'. [ 206.893989][ T9949] macvtap1: entered promiscuous mode [ 206.913788][ T9949] veth1_to_hsr: entered promiscuous mode [ 206.954942][ T9949] macvtap1: entered allmulticast mode [ 206.984283][ T9949] veth1_to_hsr: entered allmulticast mode [ 207.026380][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.976'. [ 207.036094][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.976'. [ 207.047259][ T9951] netlink: 'syz.2.976': attribute type 6 has an invalid length. [ 207.047311][ T9963] Cannot find del_set index 2 as target [ 207.157758][ T9957] erspan0 speed is unknown, defaulting to 1000 [ 207.179100][ T9969] xt_TCPMSS: Only works on TCP SYN packets [ 207.932070][ T9965] erspan0 speed is unknown, defaulting to 1000 [ 208.205313][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 208.498748][ T9987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.588909][ T9990] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 208.593959][ T9993] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 208.968297][T10003] erspan0 speed is unknown, defaulting to 1000 [ 209.433668][T10010] erspan0 speed is unknown, defaulting to 1000 [ 209.881260][T10020] netlink: 'syz.1.991': attribute type 21 has an invalid length. [ 210.117424][T10020] netlink: 'syz.1.991': attribute type 4 has an invalid length. [ 210.126753][T10020] netlink: 'syz.1.991': attribute type 5 has an invalid length. [ 210.379753][T10027] syzkaller1: entered promiscuous mode [ 210.395616][T10027] syzkaller1: entered allmulticast mode [ 210.867586][T10033] syzkaller0: entered promiscuous mode [ 210.873239][T10033] syzkaller0: entered allmulticast mode [ 211.080844][T10034] __nla_validate_parse: 6 callbacks suppressed [ 211.080864][T10034] netlink: 2 bytes leftover after parsing attributes in process `syz.1.996'. [ 211.505623][T10047] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1000'. [ 211.569373][T10049] netlink: 'syz.3.1001': attribute type 1 has an invalid length. [ 211.608455][T10049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.622573][T10049] netlink: 'syz.3.1001': attribute type 21 has an invalid length. [ 211.634375][T10049] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1001'. [ 211.659665][T10051] netlink: 'syz.2.1002': attribute type 21 has an invalid length. [ 211.686726][T10051] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1002'. [ 211.761257][T10058] vxcan3: entered allmulticast mode [ 211.772256][T10061] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1005'. [ 212.148532][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1008'. [ 212.179534][T10085] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1010'. [ 212.201421][T10084] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 212.238323][T10084] netlink: 'syz.2.1009': attribute type 1 has an invalid length. [ 212.264421][T10082] erspan0 speed is unknown, defaulting to 1000 [ 212.577377][T10088] erspan0 speed is unknown, defaulting to 1000 [ 212.824099][T10108] tipc: Enabled bearer , priority 0 [ 212.838443][T10108] syzkaller0: entered promiscuous mode [ 212.844176][T10108] syzkaller0: entered allmulticast mode [ 212.969173][T10107] tipc: Resetting bearer [ 213.004486][T10107] tipc: Disabling bearer [ 213.125882][T10116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1019'. [ 213.140720][T10116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1019'. [ 213.201996][T10111] erspan0 speed is unknown, defaulting to 1000 [ 213.209987][T10117] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 3, id = 0 [ 213.225745][T10116] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1019'. [ 213.420839][T10119] netlink: 'syz.0.1020': attribute type 14 has an invalid length. [ 213.891225][T10133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.081818][T10143] netlink: 'syz.4.1027': attribute type 8 has an invalid length. [ 214.632892][T10161] erspan0 speed is unknown, defaulting to 1000 [ 215.276897][T10182] ip6tnl0: entered promiscuous mode [ 215.288111][T10182] ip6tnl0: entered allmulticast mode [ 215.405175][T10190] netlink: 'syz.4.1043': attribute type 83 has an invalid length. [ 215.698956][T10195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.753714][T10195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.989097][T10161] netlink: 'syz.1.1034': attribute type 4 has an invalid length. [ 216.144949][T10207] __nla_validate_parse: 11 callbacks suppressed [ 216.144969][T10207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1047'. [ 216.318036][T10213] 8021q: VLANs not supported on ip_vti0 [ 216.325365][T10213] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1048'. [ 216.463086][T10222] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 216.489564][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 216.836291][T10219] erspan0 speed is unknown, defaulting to 1000 [ 216.862506][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 216.883931][T10234] netlink: 'syz.3.1053': attribute type 1 has an invalid length. [ 217.052183][T10241] gretap3: entered allmulticast mode [ 217.061750][T10241] bond2: (slave gretap3): making interface the new active one [ 217.074392][T10241] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 217.101004][T10259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1057'. [ 217.285085][T10267] tipc: Enabled bearer , priority 0 [ 217.335850][T10267] syzkaller0: entered promiscuous mode [ 217.346654][T10267] syzkaller0: entered allmulticast mode [ 217.415890][T10267] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 217.459242][T10275] netlink: 'syz.1.1062': attribute type 1 has an invalid length. [ 217.492272][T10267] tipc: Resetting bearer [ 217.577552][T10266] tipc: Resetting bearer [ 217.585782][T10283] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1063'. [ 217.645597][T10266] tipc: Disabling bearer [ 217.727964][T10268] erspan0 speed is unknown, defaulting to 1000 [ 217.768659][T10278] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 217.779360][T10278] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 217.812581][T10278] bond5: (slave vcan1): making interface the new active one [ 217.821393][T10278] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 217.834024][T10275] 8021q: adding VLAN 0 to HW filter on device bond5 [ 217.979708][T10292] netlink: 'syz.1.1065': attribute type 21 has an invalid length. [ 218.044775][T10292] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1065'. [ 218.540517][T10305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1069'. [ 219.074044][T10322] netlink: 'syz.2.1076': attribute type 21 has an invalid length. [ 219.084146][T10322] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1076'. [ 219.094453][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 219.245732][T10334] wg1 speed is unknown, defaulting to 1000 [ 219.259297][T10334] wg1 speed is unknown, defaulting to 1000 [ 219.275970][T10334] wg1 speed is unknown, defaulting to 1000 [ 219.298880][T10334] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 219.339880][T10331] erspan0 speed is unknown, defaulting to 1000 [ 219.345536][T10334] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 219.372725][T10340] xt_TCPMSS: Only works on TCP SYN packets [ 219.468535][T10334] wg1 speed is unknown, defaulting to 1000 [ 219.477872][T10334] wg1 speed is unknown, defaulting to 1000 [ 219.486368][T10334] wg1 speed is unknown, defaulting to 1000 [ 219.494799][T10334] wg1 speed is unknown, defaulting to 1000 [ 219.504331][T10334] wg1 speed is unknown, defaulting to 1000 [ 219.513801][T10334] wg1 speed is unknown, defaulting to 1000 [ 219.522027][T10334] wg1 speed is unknown, defaulting to 1000 [ 219.729084][T10347] ip6tnl0: left promiscuous mode [ 219.736638][T10347] ip6tnl0: left allmulticast mode [ 219.768997][T10347] caif0: left promiscuous mode [ 219.773931][T10347] caif0: left allmulticast mode [ 219.778756][T10341] netlink: 'syz.0.1080': attribute type 6 has an invalid length. [ 219.944819][T10339] erspan0 speed is unknown, defaulting to 1000 [ 219.975591][ T9801] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.008241][ T9801] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.049183][ T9801] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.067084][ T9801] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.549614][T10371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.763204][T10380] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 221.162845][T10397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1095'. [ 221.240617][T10403] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.249766][T10403] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.488452][T10398] erspan0 speed is unknown, defaulting to 1000 [ 221.570495][T10412] tipc: Enabled bearer , priority 0 [ 221.578149][T10408] netlink: 'syz.1.1097': attribute type 1 has an invalid length. [ 221.599555][T10408] netlink: 'syz.1.1097': attribute type 7 has an invalid length. [ 221.617140][T10408] netlink: 'syz.1.1097': attribute type 8 has an invalid length. [ 221.625119][T10408] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1097'. [ 221.641935][T10408] NCSI netlink: No device for ifindex 65584 [ 222.688085][ T89] tipc: Node number set to 859310991 [ 222.982348][T10407] tipc: Resetting bearer [ 224.202133][T10407] tipc: Disabling bearer [ 224.211362][T10398] wg1 speed is unknown, defaulting to 1000 [ 224.217495][T10434] netlink: 508 bytes leftover after parsing attributes in process `syz.3.1102'. [ 224.234847][T10433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1102'. [ 224.431578][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1103'. [ 224.452345][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1103'. [ 224.482974][T10443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1103'. [ 224.502685][T10443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1103'. [ 225.296972][T10488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1113'. [ 225.306352][T10488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.313686][T10488] IPv6: NLM_F_CREATE should be set when creating new route [ 226.075959][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'. [ 226.540158][T10495] batadv1: entered allmulticast mode [ 226.547710][T10495] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 226.740722][T10518] netlink: 'syz.0.1121': attribute type 16 has an invalid length. [ 226.748732][T10518] __nla_validate_parse: 1 callbacks suppressed [ 226.748750][T10518] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1121'. [ 226.778867][T10518] v: renamed from vlan0 [ 226.899799][T10522] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1124'. [ 227.064343][T10529] erspan0 speed is unknown, defaulting to 1000 [ 227.303569][T10529] wg1 speed is unknown, defaulting to 1000 [ 227.374047][T10542] syzkaller0: entered promiscuous mode [ 227.380623][T10542] syzkaller0: entered allmulticast mode [ 227.399283][T10550] pim6reg: entered allmulticast mode [ 227.445725][T10551] pim6reg: left allmulticast mode [ 227.849211][T10569] netlink: 'syz.4.1131': attribute type 10 has an invalid length. [ 227.867358][T10569] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1131'. [ 228.351236][ T56] block nbd0: Possible stuck request ffff888024ab5080: control (read@0,1024B). Runtime 120 seconds [ 228.368740][ T56] block nbd0: Possible stuck request ffff888024ab5240: control (read@1024,1024B). Runtime 120 seconds [ 228.380728][ T56] block nbd0: Possible stuck request ffff888024ab5400: control (read@2048,1024B). Runtime 120 seconds [ 228.392741][ T56] block nbd0: Possible stuck request ffff888024ab55c0: control (read@3072,1024B). Runtime 120 seconds [ 229.038054][T10571] lo: entered promiscuous mode [ 229.043732][T10571] tunl0: entered promiscuous mode [ 229.050268][T10571] gre0: entered promiscuous mode [ 229.064341][T10571] ip_vti0: entered promiscuous mode [ 229.075110][T10571] ip6_vti0: entered promiscuous mode [ 229.087702][T10571] sit0: entered promiscuous mode [ 229.099268][T10571] ip6tnl0: entered promiscuous mode [ 229.106434][T10571] ip6gre0: entered promiscuous mode [ 229.114430][T10571] ip6gretap0: entered promiscuous mode [ 229.121780][T10571] vcan0: entered promiscuous mode [ 229.128436][T10571] bond0: entered promiscuous mode [ 229.133518][T10571] bond_slave_0: entered promiscuous mode [ 229.139662][T10571] bond_slave_1: entered promiscuous mode [ 229.147133][T10571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.154307][T10582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1136'. [ 229.155202][T10571] team0: entered promiscuous mode [ 229.168834][T10571] team_slave_0: entered promiscuous mode [ 229.174653][T10571] team_slave_1: entered promiscuous mode [ 229.181502][T10571] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.189096][T10571] dummy0: entered promiscuous mode [ 229.196699][T10571] nlmon0: entered promiscuous mode [ 229.203033][T10571] caif0: entered promiscuous mode [ 229.208197][T10571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.229161][T10578] tipc: Enabled bearer , priority 0 [ 229.373583][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 229.487934][T10586] tipc: Enabled bearer , priority 0 [ 229.509577][T10586] tipc: Resetting bearer [ 229.585198][T10585] tipc: Disabling bearer [ 229.616230][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 229.625745][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 229.635657][T10603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1140'. [ 229.679263][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 229.731825][T10603] veth0_macvtap: left promiscuous mode [ 229.838549][T10596] erspan0 speed is unknown, defaulting to 1000 [ 230.202679][T10596] wg1 speed is unknown, defaulting to 1000 [ 230.235533][T10624] dvmrp1: tun_chr_ioctl cmd 1074025680 [ 230.347207][ T89] tipc: Node number set to 3116806982 [ 230.733958][T10631] siw: device registration error -23 [ 230.754305][T10631] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 230.821691][T10631] xt_TCPMSS: Only works on TCP SYN packets [ 231.032346][T10645] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 231.134165][T10652] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 231.211921][T10652] netlink: 'syz.0.1151': attribute type 1 has an invalid length. [ 231.331292][T10668] dvmrp0: entered allmulticast mode [ 231.577179][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'. [ 232.067480][T10715] erspan0 speed is unknown, defaulting to 1000 [ 232.380968][T10715] wg1 speed is unknown, defaulting to 1000 [ 232.796417][T10722] Can't find ip_set type hash:ip$mec [ 232.938994][T10737] syzkaller1: entered promiscuous mode [ 232.965144][T10737] syzkaller1: entered allmulticast mode [ 232.983280][T10744] netlink: 'syz.0.1169': attribute type 24 has an invalid length. [ 232.991360][T10744] __nla_validate_parse: 1 callbacks suppressed [ 232.991379][T10744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1169'. [ 233.329164][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 233.426337][T10761] erspan0 speed is unknown, defaulting to 1000 [ 233.550072][T10766] nftables ruleset with unbound set [ 233.614585][T10769] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1179'. [ 233.720844][T10761] wg1 speed is unknown, defaulting to 1000 [ 234.077078][T10793] netlink: 'syz.2.1184': attribute type 1 has an invalid length. [ 234.106378][T10793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1184'. [ 234.199266][T10796] tap0: tun_chr_ioctl cmd 1074025678 [ 234.205075][T10796] tap0: group set to 0 [ 234.505831][T10798] erspan0 speed is unknown, defaulting to 1000 [ 234.830866][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1194'. [ 235.080933][T10828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.201455][T10828] bond0: (slave rose0): Enslaving as an active interface with an up link [ 235.428384][T10825] erspan0 speed is unknown, defaulting to 1000 [ 235.435824][T10798] wg1 speed is unknown, defaulting to 1000 [ 235.769325][T10843] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 235.780292][T10838] tipc: Invalid UDP bearer configuration [ 235.780348][T10838] tipc: Enabling of bearer rejected, failed to enable media [ 235.872123][T10848] xt_TCPMSS: Only works on TCP SYN packets [ 235.928056][T10825] wg1 speed is unknown, defaulting to 1000 [ 236.097570][T10855] netlink: 'syz.3.1202': attribute type 9 has an invalid length. [ 236.605184][T10872] netlink: 'syz.3.1207': attribute type 2 has an invalid length. [ 236.763894][T10877] netlink: 'syz.4.1209': attribute type 1 has an invalid length. [ 236.824222][T10877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.874701][T10879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.882003][T10879] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 236.893305][T10879] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 236.938391][T10877] veth5: entered promiscuous mode [ 236.948606][T10877] bond2: (slave veth5): Enslaving as an active interface with a down link [ 236.957456][T10872] erspan0 speed is unknown, defaulting to 1000 [ 237.005875][T10881] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1207'. [ 237.044321][T10875] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1207'. [ 237.160987][T10883] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1211'. [ 237.442592][T10899] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1214'. [ 237.464582][T10901] netlink: 'syz.1.1210': attribute type 54 has an invalid length. [ 237.476673][T10899] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1214'. [ 237.536112][T10872] wg1 speed is unknown, defaulting to 1000 [ 237.934362][ T30] audit: type=1804 audit(1762105965.927:6): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1218" name="/newroot/252/cgroup.controllers" dev="tmpfs" ino=1303 res=1 errno=0 [ 238.009873][ T30] audit: type=1800 audit(1762105965.927:7): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1218" name="cgroup.controllers" dev="tmpfs" ino=1303 res=0 errno=0 [ 238.108515][ T30] audit: type=1800 audit(1762105965.957:8): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1218" name="cgroup.controllers" dev="tmpfs" ino=1303 res=0 errno=0 [ 238.213445][T10925] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 238.314667][ T9803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.322967][ T9803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.334866][T10931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1225'. [ 238.536419][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 238.669584][T10957] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1231'. [ 238.687255][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1231'. [ 238.699784][T10957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1231'. [ 238.909814][T10975] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1234'. [ 238.926181][T10977] netlink: 'syz.2.1235': attribute type 4 has an invalid length. [ 238.942629][T10977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1235'. [ 238.966055][T10977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1235'. [ 238.978905][T10979] netlink: 'syz.4.1236': attribute type 5 has an invalid length. [ 239.003674][T10977] tipc: Enabling of bearer rejected, already enabled [ 239.112639][T10989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1240'. [ 239.239011][T10995] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1241'. [ 239.333102][T10992] netlink: 'syz.1.1238': attribute type 33 has an invalid length. [ 239.397245][T10992] erspan0 speed is unknown, defaulting to 1000 [ 239.712759][T10992] wg1 speed is unknown, defaulting to 1000 [ 239.781897][T11021] netlink: 'syz.3.1247': attribute type 1 has an invalid length. [ 239.997909][T11032] netlink: 'syz.1.1250': attribute type 4 has an invalid length. [ 240.017144][ T940] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.057196][ T985] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.256250][T11039] tipc: Enabled bearer , priority 0 [ 240.281452][T11039] syzkaller0: entered promiscuous mode [ 240.287857][ T985] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.309434][T11039] syzkaller0: entered allmulticast mode [ 240.410580][T11039] tipc: Resetting bearer [ 240.441591][T11039] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 240.478899][T11038] tipc: Resetting bearer [ 240.512088][T11054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.523873][T11056] nbd: must specify at least one socket [ 240.531175][T11038] tipc: Disabling bearer [ 240.732095][T11062] erspan0 speed is unknown, defaulting to 1000 [ 240.787338][T11064] gretap1: entered promiscuous mode [ 240.853209][T11074] netlink: 'syz.0.1260': attribute type 2 has an invalid length. [ 241.146275][T11085] bond0: (slave team0): Releasing backup interface [ 241.232705][T11085] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 241.273893][T11085] ieee802154 phy0 wpan0: encryption failed: -22 [ 241.317718][T11085] team0: Mode changed to "loadbalance" [ 241.374768][T11062] wg1 speed is unknown, defaulting to 1000 [ 241.661986][T11110] erspan0 speed is unknown, defaulting to 1000 [ 242.155124][T11107] erspan0 speed is unknown, defaulting to 1000 [ 242.269123][T11126] pim6reg1: entered promiscuous mode [ 242.274488][T11126] pim6reg1: entered allmulticast mode [ 242.285134][ T30] audit: type=1800 audit(1762105970.277:9): pid=11131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1272" name="memory.events" dev="tmpfs" ino=1339 res=0 errno=0 [ 242.506823][ T5831] Bluetooth: hci0: command tx timeout [ 242.563930][T11110] wg1 speed is unknown, defaulting to 1000 [ 242.595387][T11107] wg1 speed is unknown, defaulting to 1000 [ 243.013323][T11158] syzkaller1: entered promiscuous mode [ 243.019050][T11158] syzkaller1: entered allmulticast mode [ 243.027683][T11157] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 243.462880][T11167] netlink: 'syz.3.1285': attribute type 3 has an invalid length. [ 243.486684][T11167] __nla_validate_parse: 12 callbacks suppressed [ 243.486704][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'. [ 243.515511][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'. [ 243.809478][T11182] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001 [ 244.315091][T11200] netlink: 'syz.2.1290': attribute type 11 has an invalid length. [ 244.364260][T11200] netlink: 'syz.2.1290': attribute type 11 has an invalid length. [ 244.406651][T11200] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1290'. [ 244.437417][T11202] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 244.476917][T11202] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 244.508141][T11202] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 244.787302][T11212] batadv1: left allmulticast mode [ 244.804165][T11212] veth5: left promiscuous mode [ 245.200008][T11208] batadv_slave_1: entered promiscuous mode [ 245.217161][T11229] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 245.264689][T11208] batadv_slave_1: left promiscuous mode [ 245.342857][T11234] erspan0 speed is unknown, defaulting to 1000 [ 245.485576][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1306'. [ 246.210431][T11255] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1309'. [ 246.387458][T11234] wg1 speed is unknown, defaulting to 1000 [ 246.498337][T11263] ipvlan1: entered promiscuous mode [ 246.539632][T11260] ipvlan1: left promiscuous mode [ 246.809224][T11282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1318'. [ 246.815187][T11278] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.867339][T11276] pim6reg1: entered promiscuous mode [ 246.872738][T11276] pim6reg1: entered allmulticast mode [ 247.182041][T11294] syzkaller0: entered promiscuous mode [ 247.191526][T11294] syzkaller0: entered allmulticast mode [ 247.957843][T11325] tap0: tun_chr_ioctl cmd 1074025677 [ 247.974153][T11325] tap0: linktype set to 773 [ 247.987366][T11331] tipc: Enabled bearer , priority 0 [ 247.998116][T11324] syzkaller0: entered promiscuous mode [ 248.003626][T11324] syzkaller0: entered allmulticast mode [ 248.137149][T11324] tipc: Resetting bearer [ 248.159144][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 248.209208][T11323] tipc: Resetting bearer [ 248.245645][T11323] tipc: Disabling bearer [ 248.282732][T11344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1336'. [ 248.335869][T11347] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1325'. [ 248.415061][T11348] tipc: Enabled bearer , priority 0 [ 248.442664][T11349] syzkaller0: entered promiscuous mode [ 248.463286][T11349] syzkaller0: entered allmulticast mode [ 248.535942][T11342] syzkaller0: mtu less than device minimum [ 248.721871][T11341] tipc: Resetting bearer [ 248.867934][T11341] tipc: Disabling bearer [ 248.882036][T11364] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 248.941373][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 248.972884][T11364] netlink: 364 bytes leftover after parsing attributes in process `syz.0.1341'. [ 248.997750][T11364] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1341'. [ 249.083024][T11367] bond4: option arp_all_targets: invalid value (3) [ 249.118413][T11367] bond4 (unregistering): Released all slaves [ 249.218228][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 249.280301][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 249.415081][T11380] syzkaller0: entered promiscuous mode [ 249.448875][T11380] syzkaller0: entered allmulticast mode [ 249.760752][T11397] netlink: 'syz.4.1349': attribute type 10 has an invalid length. [ 250.921013][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1354'. [ 252.838912][T11429] tipc: Enabling of bearer rejected, already enabled [ 252.849126][T11432] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 252.881486][T11432] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 252.940171][T11439] tipc: Resetting bearer [ 252.968157][T11441] erspan0 speed is unknown, defaulting to 1000 [ 252.985333][T11443] netlink: 'syz.4.1359': attribute type 12 has an invalid length. [ 253.100509][T11448] xt_CONNSECMARK: invalid mode: 0 [ 253.183182][T11457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1364'. [ 253.350287][T11461] æÿîÿ: entered promiscuous mode [ 253.366653][T11457] erspan0 speed is unknown, defaulting to 1000 [ 253.367069][T11441] wg1 speed is unknown, defaulting to 1000 [ 253.733750][T11474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.746275][T11474] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.759125][T11474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.804011][T11457] wg1 speed is unknown, defaulting to 1000 [ 254.070731][T11486] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1372'. [ 254.101692][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1370'. [ 254.155738][T11487] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1371'. [ 254.168893][T11487] 0ªX¹¦À: renamed from caif0 [ 254.196184][T11487] 0ªX¹¦À: entered allmulticast mode [ 254.212441][T11487] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 254.360833][T11488] erspan0 speed is unknown, defaulting to 1000 [ 254.513509][T11503] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1376'. [ 254.900562][T11517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1382'. [ 255.065298][T11514] erspan0 speed is unknown, defaulting to 1000 [ 255.406150][T11514] wg1 speed is unknown, defaulting to 1000 [ 255.539805][T11488] wg1 speed is unknown, defaulting to 1000 [ 255.847136][T11539] tipc: Enabling of bearer rejected, failed to enable media [ 255.866729][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.913841][T11538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1386'. [ 255.949477][T11536] erspan0 speed is unknown, defaulting to 1000 [ 256.209534][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 256.538118][T11536] wg1 speed is unknown, defaulting to 1000 [ 256.835693][T11553] netlink: 'syz.3.1390': attribute type 7 has an invalid length. [ 257.285897][T11567] erspan0 speed is unknown, defaulting to 1000 [ 257.312901][T11568] tipc: Enabling of bearer rejected, failed to enable media [ 257.343533][T11568] syzkaller0: entered promiscuous mode [ 257.359580][T11568] syzkaller0: entered allmulticast mode [ 257.588682][T11581] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1400'. [ 257.785376][T11585] erspan0 speed is unknown, defaulting to 1000 [ 257.793186][T11567] wg1 speed is unknown, defaulting to 1000 [ 258.119743][T11585] wg1 speed is unknown, defaulting to 1000 [ 258.427520][ T56] block nbd0: Possible stuck request ffff888024ab5080: control (read@0,1024B). Runtime 150 seconds [ 258.438980][ T56] block nbd0: Possible stuck request ffff888024ab5240: control (read@1024,1024B). Runtime 150 seconds [ 258.450524][ T56] block nbd0: Possible stuck request ffff888024ab5400: control (read@2048,1024B). Runtime 150 seconds [ 258.467005][ T56] block nbd0: Possible stuck request ffff888024ab55c0: control (read@3072,1024B). Runtime 150 seconds [ 258.876976][T11634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1414'. [ 258.899599][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1416'. [ 258.940351][T11637] vlan1: entered promiscuous mode [ 258.945534][T11637] gretap0: entered promiscuous mode [ 259.170256][T11651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.184715][T11653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.192455][T11634] nbd: socks must be embedded in a SOCK_ITEM attr [ 259.618265][T11661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1421'. [ 259.642952][T11634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1414'. [ 259.676241][ T5831] block nbd2: Receive control failed (result -107) [ 259.677431][T11663] xt_connbytes: Forcing CT accounting to be enabled [ 259.783154][T11670] tipc: Enabling of bearer rejected, failed to enable media [ 259.984378][T11679] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1424'. [ 260.018567][T11679] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1424'. [ 260.318807][T11691] bond6 (unregistering): Released all slaves [ 260.530528][T11710] syzkaller0: entered promiscuous mode [ 260.554073][T11710] syzkaller0: entered allmulticast mode [ 260.583069][T11708] tipc: Enabled bearer , priority 0 [ 260.641626][T11708] tipc: Resetting bearer [ 260.672119][T11708] tipc: Disabling bearer [ 260.698048][T11719] dvmrp0: entered allmulticast mode [ 260.711920][T11722] vlan1: entered promiscuous mode [ 260.718230][T11722] team0: entered promiscuous mode [ 260.973007][T11735] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1444'. [ 260.975797][T11738] tipc: Enabled bearer , priority 10 [ 261.011274][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.025489][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.176111][T11748] netlink: 'syz.1.1447': attribute type 31 has an invalid length. [ 261.341112][T11759] 8021q: VLANs not supported on vxcan0 [ 261.347328][T11760] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1450'. [ 261.356609][T11759] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1450'. [ 261.431852][ T940] IPVS: starting estimator thread 0... [ 261.540022][T11766] IPVS: using max 26 ests per chain, 62400 per kthread [ 261.812700][T11785] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1457'. [ 261.829171][T11786] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 261.851236][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1460'. [ 261.856805][T11786] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 262.022401][T11795] netlink: 956 bytes leftover after parsing attributes in process `syz.2.1461'. [ 262.075153][T11797] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 262.092774][ T985] tipc: Node number set to 3648933094 [ 262.120277][T11799] netlink: 'syz.3.1462': attribute type 58 has an invalid length. [ 262.991606][T11832] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.344640][T11852] netlink: 'syz.1.1481': attribute type 49 has an invalid length. [ 263.855983][T11879] bond4: entered allmulticast mode [ 263.874752][T11879] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.038660][T11872] bridge4: entered allmulticast mode [ 264.044672][T11872] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 264.901396][T11921] erspan0 speed is unknown, defaulting to 1000 [ 265.135871][ T9793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.145555][ T9793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.199323][T11939] syzkaller1: entered promiscuous mode [ 265.204858][T11939] syzkaller1: entered allmulticast mode [ 265.334149][T11942] __nla_validate_parse: 12 callbacks suppressed [ 265.334170][T11942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1509'. [ 265.643389][T11947] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1511'. [ 265.781933][T11921] wg1 speed is unknown, defaulting to 1000 [ 265.787965][T11953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.898548][T11957] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.994767][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1513'. [ 267.133851][T11993] netlink: 'syz.3.1523': attribute type 1 has an invalid length. [ 267.235290][T11995] syz.4.1522: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 267.235713][T11993] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.285924][T12002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1524'. [ 267.298393][T11995] CPU: 1 UID: 0 PID: 11995 Comm: syz.4.1522 Not tainted syzkaller #0 PREEMPT(full) [ 267.298442][T11995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 267.298468][T11995] Call Trace: [ 267.298477][T11995] [ 267.298487][T11995] dump_stack_lvl+0x189/0x250 [ 267.298528][T11995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.298558][T11995] ? __pfx__printk+0x10/0x10 [ 267.298580][T11995] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 267.298610][T11995] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 267.298641][T11995] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 267.298674][T11995] warn_alloc+0x214/0x310 [ 267.298713][T11995] ? __pfx_warn_alloc+0x10/0x10 [ 267.298754][T11995] ? __get_vm_area_node+0x28f/0x300 [ 267.298785][T11995] ? xskq_create+0xbf/0x170 [ 267.298816][T11995] __vmalloc_node_range_noprof+0x690/0x12d0 [ 267.298880][T11995] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 267.298916][T11995] ? __kasan_kmalloc+0x93/0xb0 [ 267.298955][T11995] vmalloc_user_noprof+0xad/0xf0 [ 267.298986][T11995] ? xskq_create+0xbf/0x170 [ 267.299013][T11995] xskq_create+0xbf/0x170 [ 267.299042][T11995] xsk_init_queue+0xb0/0x110 [ 267.299071][T11995] xsk_setsockopt+0x57b/0x8d0 [ 267.299099][T11995] ? __pfx_xsk_setsockopt+0x10/0x10 [ 267.299127][T11995] ? __pfx_aa_sk_perm+0x10/0x10 [ 267.299159][T11995] ? aa_sock_opt_perm+0xff/0x1b0 [ 267.299195][T11995] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 267.299224][T11995] ? __pfx_xsk_setsockopt+0x10/0x10 [ 267.299257][T11995] do_sock_setsockopt+0x17c/0x1b0 [ 267.299285][T11995] __x64_sys_setsockopt+0x13f/0x1b0 [ 267.299313][T11995] do_syscall_64+0xfa/0xfa0 [ 267.299340][T11995] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.299369][T11995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.299390][T11995] ? clear_bhb_loop+0x60/0xb0 [ 267.299416][T11995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.299438][T11995] RIP: 0033:0x7f5e3a58efc9 [ 267.299458][T11995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.299478][T11995] RSP: 002b:00007f5e3b483038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 267.299502][T11995] RAX: ffffffffffffffda RBX: 00007f5e3a7e6090 RCX: 00007f5e3a58efc9 [ 267.299518][T11995] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 267.299530][T11995] RBP: 00007f5e3a611f91 R08: 0000000000000004 R09: 0000000000000000 [ 267.299544][T11995] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 267.299558][T11995] R13: 00007f5e3a7e6128 R14: 00007f5e3a7e6090 R15: 00007ffc6d410558 [ 267.299593][T11995] [ 267.299609][T11995] Mem-Info: [ 267.619653][T11995] active_anon:7307 inactive_anon:0 isolated_anon:0 [ 267.619653][T11995] active_file:3140 inactive_file:39949 isolated_file:0 [ 267.619653][T11995] unevictable:768 dirty:150 writeback:0 [ 267.619653][T11995] slab_reclaimable:11750 slab_unreclaimable:158865 [ 267.619653][T11995] mapped:30152 shmem:3374 pagetables:984 [ 267.619653][T11995] sec_pagetables:0 bounce:0 [ 267.619653][T11995] kernel_misc_reclaimable:0 [ 267.619653][T11995] free:1263699 free_pcp:17023 free_cma:0 [ 267.687596][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1525'. [ 267.706127][T12007] chnl_net:caif_netlink_parms(): no params data found [ 267.733331][T11995] Node 0 active_anon:25828kB inactive_anon:0kB active_file:12560kB inactive_file:159592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116708kB dirty:596kB writeback:0kB shmem:11960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14160kB pagetables:3784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 267.778719][T12010] netlink: 'syz.1.1526': attribute type 6 has an invalid length. [ 267.799430][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'. [ 267.808428][T11995] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 267.808533][T11995] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.808613][T11995] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 267.808664][T11995] Node 0 DMA32 free:1146516kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24628kB inactive_anon:0kB active_file:12560kB inactive_file:159592kB unevictable:1536kB writepending:596kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:53368kB local_pcp:30852kB free_cma:0kB [ 267.808731][T11995] lowmem_reserve[]: 0 0 0 0 0 [ 267.808779][T11995] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.808839][T11995] lowmem_reserve[]: 0 0 0 0 0 [ 267.808886][T11995] Node 1 Normal free:3898660kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14068kB local_pcp:8320kB free_cma:0kB [ 267.808951][T11995] lowmem_reserve[]: 0 0 0 0 0 [ 267.809000][T11995] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 267.809152][T11995] Node 0 DMA32: 440*4kB (UM) 851*8kB (UM) 243*16kB (UM) 631*32kB (UME) 601*64kB (UME) 142*128kB (UM) 34*256kB (UM) 14*512kB (UM) 15*1024kB (UME) 3*2048kB (UME) 249*4096kB (UM) = 1146568kB [ 268.021815][T11995] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 268.036407][T11995] Node 1 Normal: 201*4kB (UME) 58*8kB (UME) 33*16kB (UME) 153*32kB (UME) 46*64kB (UME) 7*128kB (UME) 2*256kB (M) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3898660kB [ 268.067317][T11995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.102170][T11995] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.128767][T11995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.165508][T12019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1530'. [ 268.174870][T11995] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.174898][T11995] 44445 total pagecache pages [ 268.174921][T11995] 0 pages in swap cache [ 268.174930][T11995] Free swap = 124996kB [ 268.174940][T11995] Total swap = 124996kB [ 268.174951][T11995] 2097051 pages RAM [ 268.174960][T11995] 0 pages HighMem/MovableOnly [ 268.174969][T11995] 424117 pages reserved [ 268.174977][T11995] 0 pages cma reserved [ 268.263779][T12019] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1530'. [ 268.298047][T12023] vlan1: entered promiscuous mode [ 268.303439][T12023] vlan1: entered allmulticast mode [ 268.309131][T12023] hsr_slave_1: entered allmulticast mode [ 268.350216][T12027] xt_connbytes: Forcing CT accounting to be enabled [ 268.428693][T12023] erspan0 speed is unknown, defaulting to 1000 [ 268.444700][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1531'. [ 268.488707][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1534'. [ 268.660368][T12039] kthread_run failed with err -4 [ 268.702617][T12046] netlink: 'syz.4.1536': attribute type 6 has an invalid length. [ 268.719024][T12046] netlink: 'syz.4.1536': attribute type 5 has an invalid length. [ 268.779168][T12046] netlink: 'syz.4.1536': attribute type 4 has an invalid length. [ 268.864862][T12046] netlink: 'syz.4.1536': attribute type 4 has an invalid length. [ 268.872350][T12023] wg1 speed is unknown, defaulting to 1000 [ 269.061301][T12067] netlink: 'syz.4.1542': attribute type 1 has an invalid length. [ 269.096903][T12067] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.202267][T12081] tipc: Enabling of bearer rejected, already enabled [ 269.245684][T12084] netlink: 'syz.1.1544': attribute type 5 has an invalid length. [ 269.261735][T12067] bond4: (slave veth9): Enslaving as an active interface with a down link [ 269.370840][T12089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.228230][T12119] netlink: 'syz.2.1554': attribute type 1 has an invalid length. [ 270.268855][T12119] 8021q: adding VLAN 0 to HW filter on device bond5 [ 270.355967][T12119] veth5: entered promiscuous mode [ 270.376885][T12119] bond5: (slave veth5): Enslaving as an active interface with an up link [ 270.385548][T12128] __nla_validate_parse: 9 callbacks suppressed [ 270.385567][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1555'. [ 270.519129][T12132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1558'. [ 270.860636][T12160] openvswitch: netlink: IP tunnel dst address not specified [ 270.890466][T12157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.916091][T12159] erspan0 speed is unknown, defaulting to 1000 [ 271.033377][T12152] syzkaller0: entered promiscuous mode [ 271.069077][T12152] syzkaller0: entered allmulticast mode [ 271.252462][T12178] netlink: 732 bytes leftover after parsing attributes in process `syz.1.1568'. [ 271.281417][T12178] netlink: 732 bytes leftover after parsing attributes in process `syz.1.1568'. [ 271.338647][T12168] wg1: entered promiscuous mode [ 271.344801][T12168] wg1: entered allmulticast mode [ 271.444218][T12175] bond5 (unregistering): Released all slaves [ 271.493683][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1568'. [ 271.584338][T12178] batadv_slave_1: entered promiscuous mode [ 271.659213][T12186] batadv_slave_1 (unregistering): left promiscuous mode [ 271.667224][T12186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.853456][T12175] bond5 (unregistering): Released all slaves [ 271.957270][T12159] wg1 speed is unknown, defaulting to 1000 [ 272.042348][T12175] bond5 (unregistering): Released all slaves [ 272.307581][T12216] netlink: 'syz.3.1575': attribute type 3 has an invalid length. [ 272.315602][T12216] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1575'. [ 272.468678][T12226] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1578'. [ 272.946416][T12236] xt_TPROXY: Can be used only with -p tcp or -p udp [ 273.669390][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'. [ 273.687309][T12233] veth0_to_bridge: entered promiscuous mode [ 273.697224][T12235] veth0_to_bridge: left promiscuous mode [ 287.487686][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.496850][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.504979][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.513735][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.521590][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.553702][T12256] erspan0 speed is unknown, defaulting to 1000 [ 287.692458][T12256] wg1 speed is unknown, defaulting to 1000 [ 287.825387][T12256] chnl_net:caif_netlink_parms(): no params data found [ 287.907520][T12256] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.915731][T12256] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.923051][T12256] bridge_slave_0: entered allmulticast mode [ 287.931029][T12256] bridge_slave_0: entered promiscuous mode [ 287.939556][T12256] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.946933][T12256] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.954144][T12256] bridge_slave_1: entered allmulticast mode [ 287.961492][T12256] bridge_slave_1: entered promiscuous mode [ 287.997022][T12256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.009705][T12256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.047436][T12256] team0: Port device team_slave_0 added [ 288.058762][T12256] team0: Port device team_slave_1 added [ 288.088556][T12256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.095620][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.122859][T12256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.135123][T12256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.142148][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.168673][T12256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.215761][T12256] hsr_slave_0: entered promiscuous mode [ 288.223618][T12256] hsr_slave_1: entered promiscuous mode [ 288.230161][T12256] debugfs: 'hsr0' already exists in 'hsr' [ 288.235917][T12256] Cannot create hsr debugfs directory [ 288.516787][ T56] block nbd0: Possible stuck request ffff888024ab5080: control (read@0,1024B). Runtime 180 seconds [ 288.527819][ T56] block nbd0: Possible stuck request ffff888024ab5240: control (read@1024,1024B). Runtime 180 seconds [ 288.539047][ T56] block nbd0: Possible stuck request ffff888024ab5400: control (read@2048,1024B). Runtime 180 seconds [ 288.550161][ T56] block nbd0: Possible stuck request ffff888024ab55c0: control (read@3072,1024B). Runtime 180 seconds [ 289.547263][ T5834] Bluetooth: hci5: command tx timeout [ 289.757259][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 289.766287][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 289.775026][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 289.788672][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 289.807455][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 289.920110][T12268] erspan0 speed is unknown, defaulting to 1000 [ 289.930163][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 289.939235][ T5831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 289.947817][ T5831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 289.956094][ T5831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 289.964156][ T5831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 290.120335][ T5831] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 290.130368][ T5831] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 290.138618][ T5831] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 290.147350][ T5831] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 290.155170][ T5831] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 290.187326][ T5831] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 290.196021][ T5831] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 290.205030][ T5831] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 290.217255][ T5831] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 290.225121][ T5831] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 290.304240][T12268] wg1 speed is unknown, defaulting to 1000 [ 290.304295][T12270] erspan0 speed is unknown, defaulting to 1000 [ 290.525840][T12268] chnl_net:caif_netlink_parms(): no params data found [ 290.542007][T12272] erspan0 speed is unknown, defaulting to 1000 [ 290.550619][T12270] wg1 speed is unknown, defaulting to 1000 [ 290.708539][T12268] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.716347][T12268] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.723683][T12268] bridge_slave_0: entered allmulticast mode [ 290.732640][T12268] bridge_slave_0: entered promiscuous mode [ 290.742952][T12268] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.752211][T12268] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.760480][T12268] bridge_slave_1: entered allmulticast mode [ 290.768847][T12268] bridge_slave_1: entered promiscuous mode [ 290.814975][T12274] erspan0 speed is unknown, defaulting to 1000 [ 290.820457][T12268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.843141][T12272] wg1 speed is unknown, defaulting to 1000 [ 290.850127][T12268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.938081][T12268] team0: Port device team_slave_0 added [ 290.983256][T12268] team0: Port device team_slave_1 added [ 291.072431][T12268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.080783][T12268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.107524][T12268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.124694][T12274] wg1 speed is unknown, defaulting to 1000 [ 291.138821][T12268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.145814][T12268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.173105][T12268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.244594][T12270] chnl_net:caif_netlink_parms(): no params data found [ 291.347755][T12268] hsr_slave_0: entered promiscuous mode [ 291.354305][T12268] hsr_slave_1: entered promiscuous mode [ 291.360974][T12268] debugfs: 'hsr0' already exists in 'hsr' [ 291.367000][T12268] Cannot create hsr debugfs directory [ 291.536920][T12272] chnl_net:caif_netlink_parms(): no params data found [ 291.557190][T12270] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.564337][T12270] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.571957][T12270] bridge_slave_0: entered allmulticast mode [ 291.579363][T12270] bridge_slave_0: entered promiscuous mode [ 291.593034][T12270] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.601177][T12270] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.608555][T12270] bridge_slave_1: entered allmulticast mode [ 291.615835][T12270] bridge_slave_1: entered promiscuous mode [ 291.639326][ T5831] Bluetooth: hci5: command tx timeout [ 291.668508][T12270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.721516][T12270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.809043][T12270] team0: Port device team_slave_0 added [ 291.853570][T12270] team0: Port device team_slave_1 added [ 291.866968][ T5831] Bluetooth: hci6: command tx timeout [ 291.924364][T12274] chnl_net:caif_netlink_parms(): no params data found [ 291.937231][T12270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.944335][T12270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.970868][T12270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.009737][T12270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.016971][T12270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.043405][ T5831] Bluetooth: hci7: command tx timeout [ 292.049974][T12270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.068474][T12272] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.075651][T12272] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.083067][T12272] bridge_slave_0: entered allmulticast mode [ 292.090829][T12272] bridge_slave_0: entered promiscuous mode [ 292.147751][T12272] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.154942][T12272] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.162324][T12272] bridge_slave_1: entered allmulticast mode [ 292.170190][T12272] bridge_slave_1: entered promiscuous mode [ 292.193252][ T5831] Bluetooth: hci8: command tx timeout [ 292.224260][T12270] hsr_slave_0: entered promiscuous mode [ 292.231231][T12270] hsr_slave_1: entered promiscuous mode [ 292.237820][T12270] debugfs: 'hsr0' already exists in 'hsr' [ 292.243570][T12270] Cannot create hsr debugfs directory [ 292.267852][ T5831] Bluetooth: hci9: command tx timeout [ 292.312942][T12272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.349653][T12272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.442635][T12272] team0: Port device team_slave_0 added [ 292.448679][T12274] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.456001][T12274] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.463754][T12274] bridge_slave_0: entered allmulticast mode [ 292.471237][T12274] bridge_slave_0: entered promiscuous mode [ 292.494169][T12272] team0: Port device team_slave_1 added [ 292.500574][T12274] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.508279][T12274] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.515730][T12274] bridge_slave_1: entered allmulticast mode [ 292.523590][T12274] bridge_slave_1: entered promiscuous mode [ 292.614802][T12274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.628882][T12274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.650522][T12272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.658277][T12272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.684676][T12272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.717809][T12272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.724811][T12272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.751385][T12272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.803665][T12274] team0: Port device team_slave_0 added [ 292.813843][T12274] team0: Port device team_slave_1 added [ 292.889503][T12274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.897229][T12274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.924140][T12274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.940577][T12272] hsr_slave_0: entered promiscuous mode [ 292.947401][T12272] hsr_slave_1: entered promiscuous mode [ 292.953599][T12272] debugfs: 'hsr0' already exists in 'hsr' [ 292.959947][T12272] Cannot create hsr debugfs directory [ 292.975028][T12274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.982376][T12274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.009659][T12274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.104328][T12274] hsr_slave_0: entered promiscuous mode [ 293.111422][T12274] hsr_slave_1: entered promiscuous mode [ 293.117957][T12274] debugfs: 'hsr0' already exists in 'hsr' [ 293.123730][T12274] Cannot create hsr debugfs directory [ 293.706809][ T5831] Bluetooth: hci5: command tx timeout [ 293.946832][ T5831] Bluetooth: hci6: command tx timeout [ 294.107096][ T5831] Bluetooth: hci7: command tx timeout [ 294.266964][ T5831] Bluetooth: hci8: command tx timeout [ 294.346805][ T5831] Bluetooth: hci9: command tx timeout [ 295.786744][ T5831] Bluetooth: hci5: command tx timeout [ 296.027149][ T5831] Bluetooth: hci6: command tx timeout [ 296.186971][ T5831] Bluetooth: hci7: command tx timeout [ 296.347134][ T5831] Bluetooth: hci8: command tx timeout [ 296.437039][ T5831] Bluetooth: hci9: command tx timeout [ 298.106955][ T5834] Bluetooth: hci6: command tx timeout [ 298.266738][ T5834] Bluetooth: hci7: command tx timeout [ 298.427105][ T5834] Bluetooth: hci8: command tx timeout [ 298.506690][ T5834] Bluetooth: hci9: command tx timeout [ 318.589309][ T56] block nbd0: Possible stuck request ffff888024ab5080: control (read@0,1024B). Runtime 210 seconds [ 318.600586][ T56] block nbd0: Possible stuck request ffff888024ab5240: control (read@1024,1024B). Runtime 210 seconds [ 318.612504][ T56] block nbd0: Possible stuck request ffff888024ab5400: control (read@2048,1024B). Runtime 210 seconds [ 318.623987][ T56] block nbd0: Possible stuck request ffff888024ab55c0: control (read@3072,1024B). Runtime 210 seconds [ 322.430652][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.437473][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.570929][ T5831] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 347.580499][ T5831] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 347.589896][ T5831] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 347.598480][ T5831] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 347.606371][ T5831] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 347.640172][T12301] erspan0 speed is unknown, defaulting to 1000 [ 347.779405][T12301] wg1 speed is unknown, defaulting to 1000 [ 347.923069][T12301] chnl_net:caif_netlink_parms(): no params data found [ 348.002214][T12301] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.009755][T12301] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.017112][T12301] bridge_slave_0: entered allmulticast mode [ 348.024531][T12301] bridge_slave_0: entered promiscuous mode [ 348.034050][T12301] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.041922][T12301] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.049435][T12301] bridge_slave_1: entered allmulticast mode [ 348.057159][T12301] bridge_slave_1: entered promiscuous mode [ 348.092329][T12301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.104674][T12301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.142200][T12301] team0: Port device team_slave_0 added [ 348.151247][T12301] team0: Port device team_slave_1 added [ 348.182517][T12301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.190141][T12301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.216461][T12301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.229917][T12301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.237007][T12301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.264029][T12301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.312345][T12301] hsr_slave_0: entered promiscuous mode [ 348.319197][T12301] hsr_slave_1: entered promiscuous mode [ 348.325527][T12301] debugfs: 'hsr0' already exists in 'hsr' [ 348.331531][T12301] Cannot create hsr debugfs directory [ 348.667723][ T56] block nbd0: Possible stuck request ffff888024ab5080: control (read@0,1024B). Runtime 240 seconds [ 348.678890][ T56] block nbd0: Possible stuck request ffff888024ab5240: control (read@1024,1024B). Runtime 240 seconds [ 348.691932][ T56] block nbd0: Possible stuck request ffff888024ab5400: control (read@2048,1024B). Runtime 240 seconds [ 348.703516][ T56] block nbd0: Possible stuck request ffff888024ab55c0: control (read@3072,1024B). Runtime 240 seconds [ 349.626606][ T5834] Bluetooth: hci10: command tx timeout [ 349.696743][ T5831] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 349.705502][ T5831] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 349.715139][ T5831] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 349.724078][ T5831] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 349.725648][ T5151] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 349.741013][ T5831] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 349.742022][ T5151] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 349.757207][ T5151] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 349.765425][ T5151] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 349.774145][ T5151] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 349.795460][T12311] erspan0 speed is unknown, defaulting to 1000 [ 349.945041][T12311] wg1 speed is unknown, defaulting to 1000 [ 349.945057][T12313] erspan0 speed is unknown, defaulting to 1000 [ 350.152625][T12313] wg1 speed is unknown, defaulting to 1000 [ 350.194313][T12311] chnl_net:caif_netlink_parms(): no params data found [ 350.313636][T12311] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.321421][T12311] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.329060][T12311] bridge_slave_0: entered allmulticast mode [ 350.336390][T12311] bridge_slave_0: entered promiscuous mode [ 350.345801][T12311] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.353473][T12311] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.360990][T12311] bridge_slave_1: entered allmulticast mode [ 350.369061][T12311] bridge_slave_1: entered promiscuous mode [ 350.414177][T12311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.444507][T12311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.612015][T12311] team0: Port device team_slave_0 added [ 350.631350][T12311] team0: Port device team_slave_1 added [ 350.764504][T12311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.786669][T12311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.828657][T12311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.859017][T12311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.866006][T12311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.926972][T12311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.947569][T12313] chnl_net:caif_netlink_parms(): no params data found [ 350.968767][ T5831] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 350.978459][ T5831] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 350.986765][ T5831] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 350.995397][ T5831] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 351.001263][ T5834] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 351.005406][ T5831] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 351.013544][ T5834] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 351.019267][ T5831] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 351.033348][ T5831] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 351.041413][ T5831] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 351.099568][T12311] hsr_slave_0: entered promiscuous mode [ 351.106331][T12311] hsr_slave_1: entered promiscuous mode [ 351.112814][T12311] debugfs: 'hsr0' already exists in 'hsr' [ 351.119299][T12311] Cannot create hsr debugfs directory [ 351.144741][T12326] erspan0 speed is unknown, defaulting to 1000 [ 351.246391][T12313] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.257456][T12313] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.264764][T12313] bridge_slave_0: entered allmulticast mode [ 351.273385][T12313] bridge_slave_0: entered promiscuous mode [ 351.291570][T12313] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.299163][T12313] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.306948][T12313] bridge_slave_1: entered allmulticast mode [ 351.315060][T12313] bridge_slave_1: entered promiscuous mode [ 351.402042][T12327] erspan0 speed is unknown, defaulting to 1000 [ 351.410723][T12326] wg1 speed is unknown, defaulting to 1000 [ 351.414429][T12313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.444421][T12313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.561706][T12313] team0: Port device team_slave_0 added [ 351.571913][T12313] team0: Port device team_slave_1 added [ 351.671410][T12327] wg1 speed is unknown, defaulting to 1000 [ 351.672401][T12313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.684438][T12313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.710613][ T5831] Bluetooth: hci10: command tx timeout [ 351.710796][T12313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.754116][T12313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.761302][T12313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.787825][ T5831] Bluetooth: hci11: command tx timeout [ 351.787834][T12313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.867034][ T5831] Bluetooth: hci12: command tx timeout [ 351.904692][T12313] hsr_slave_0: entered promiscuous mode [ 351.911883][T12313] hsr_slave_1: entered promiscuous mode [ 351.920805][T12313] debugfs: 'hsr0' already exists in 'hsr' [ 351.927375][T12313] Cannot create hsr debugfs directory [ 352.212349][T12326] chnl_net:caif_netlink_parms(): no params data found [ 352.363257][T12327] chnl_net:caif_netlink_parms(): no params data found [ 352.452222][T12326] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.459662][T12326] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.468845][T12326] bridge_slave_0: entered allmulticast mode [ 352.476316][T12326] bridge_slave_0: entered promiscuous mode [ 352.489697][T12326] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.498707][T12326] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.505988][T12326] bridge_slave_1: entered allmulticast mode [ 352.519154][T12326] bridge_slave_1: entered promiscuous mode [ 352.592966][T12326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.606290][T12326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.648141][T12327] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.655342][T12327] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.664145][T12327] bridge_slave_0: entered allmulticast mode [ 352.672287][T12327] bridge_slave_0: entered promiscuous mode [ 352.694296][T12326] team0: Port device team_slave_0 added [ 352.708592][T12327] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.715744][T12327] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.723264][T12327] bridge_slave_1: entered allmulticast mode [ 352.731572][T12327] bridge_slave_1: entered promiscuous mode [ 352.741163][T12326] team0: Port device team_slave_1 added [ 352.806678][T12326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.813671][T12326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.840602][T12326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.855211][T12327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.874824][T12326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.882788][T12326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.909743][T12326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.923219][T12327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.977742][T12327] team0: Port device team_slave_0 added [ 352.987213][T12327] team0: Port device team_slave_1 added [ 353.065857][T12326] hsr_slave_0: entered promiscuous mode [ 353.071834][ T5831] Bluetooth: hci13: command tx timeout [ 353.077056][ T5831] Bluetooth: hci14: command tx timeout [ 353.080067][T12326] hsr_slave_1: entered promiscuous mode [ 353.090387][T12326] debugfs: 'hsr0' already exists in 'hsr' [ 353.096390][T12326] Cannot create hsr debugfs directory [ 353.102944][T12327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.110226][T12327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.136318][T12327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.152071][T12327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.159403][T12327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.185801][T12327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.286073][T12327] hsr_slave_0: entered promiscuous mode [ 353.293666][T12327] hsr_slave_1: entered promiscuous mode [ 353.300270][T12327] debugfs: 'hsr0' already exists in 'hsr' [ 353.306021][T12327] Cannot create hsr debugfs directory [ 353.797156][ T5831] Bluetooth: hci10: command tx timeout [ 353.866685][ T5831] Bluetooth: hci11: command tx timeout [ 353.957651][ T5831] Bluetooth: hci12: command tx timeout [ 355.146767][ T5831] Bluetooth: hci14: command tx timeout [ 355.146786][ T5847] Bluetooth: hci13: command tx timeout [ 355.866639][ T5831] Bluetooth: hci10: command tx timeout [ 355.947422][ T5831] Bluetooth: hci11: command tx timeout [ 356.026888][ T5831] Bluetooth: hci12: command tx timeout [ 357.226786][ T5831] Bluetooth: hci14: command tx timeout [ 357.228810][ T5847] Bluetooth: hci13: command tx timeout [ 358.026795][ T5847] Bluetooth: hci11: command tx timeout [ 358.107284][ T5847] Bluetooth: hci12: command tx timeout [ 359.306813][ T5847] Bluetooth: hci14: command tx timeout [ 359.306977][ T5831] Bluetooth: hci13: command tx timeout [ 373.626673][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.748424][ T56] block nbd0: Possible stuck request ffff888024ab5080: control (read@0,1024B). Runtime 270 seconds [ 378.759442][ T56] block nbd0: Possible stuck request ffff888024ab5240: control (read@1024,1024B). Runtime 270 seconds [ 378.770511][ T56] block nbd0: Possible stuck request ffff888024ab5400: control (read@2048,1024B). Runtime 270 seconds [ 378.781940][ T56] block nbd0: Possible stuck request ffff888024ab55c0: control (read@3072,1024B). Runtime 270 seconds [ 383.870239][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.877047][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.130848][ T5847] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 408.140536][ T5847] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 408.148912][ T5847] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 408.157601][ T5847] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 408.166747][ T5847] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 408.199511][T12346] erspan0 speed is unknown, defaulting to 1000 [ 408.339146][T12346] wg1 speed is unknown, defaulting to 1000 [ 408.482973][T12346] chnl_net:caif_netlink_parms(): no params data found [ 408.565047][T12346] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.572526][T12346] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.580135][T12346] bridge_slave_0: entered allmulticast mode [ 408.588756][T12346] bridge_slave_0: entered promiscuous mode [ 408.597534][T12346] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.604692][T12346] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.612082][T12346] bridge_slave_1: entered allmulticast mode [ 408.620092][T12346] bridge_slave_1: entered promiscuous mode [ 408.655749][T12346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.671356][T12346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.707593][T12346] team0: Port device team_slave_0 added [ 408.716689][T12346] team0: Port device team_slave_1 added [ 408.749354][T12346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.756323][T12346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.783094][T12346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.795422][T12346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.802611][T12346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.829792][T12346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.846369][ T56] block nbd0: Possible stuck request ffff888024ab5080: control (read@0,1024B). Runtime 300 seconds [ 408.866573][ T56] block nbd0: Possible stuck request ffff888024ab5240: control (read@1024,1024B). Runtime 300 seconds [ 408.877747][ T56] block nbd0: Possible stuck request ffff888024ab5400: control (read@2048,1024B). Runtime 300 seconds [ 408.889318][ T56] block nbd0: Possible stuck request ffff888024ab55c0: control (read@3072,1024B). Runtime 300 seconds [ 408.912019][T12346] hsr_slave_0: entered promiscuous mode [ 408.919132][T12346] hsr_slave_1: entered promiscuous mode [ 408.925400][T12346] debugfs: 'hsr0' already exists in 'hsr' [ 408.931235][T12346] Cannot create hsr debugfs directory [ 410.198883][ T5831] Bluetooth: hci15: command tx timeout [ 410.247118][ T5151] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 410.256185][ T5151] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 410.265450][ T5151] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 410.274008][ T5151] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 410.275565][T12361] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 410.284129][ T5151] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 410.289961][T12361] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 410.296636][ T5151] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 410.304422][T12361] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 410.319301][T12361] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 410.351886][T12356] erspan0 speed is unknown, defaulting to 1000 [ 410.499913][T12356] wg1 speed is unknown, defaulting to 1000 [ 410.499942][T12358] erspan0 speed is unknown, defaulting to 1000 [ 410.717759][T12356] chnl_net:caif_netlink_parms(): no params data found [ 410.738711][T12358] wg1 speed is unknown, defaulting to 1000 [ 410.849933][T12356] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.857956][T12356] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.865232][T12356] bridge_slave_0: entered allmulticast mode [ 410.873425][T12356] bridge_slave_0: entered promiscuous mode [ 410.887358][T12356] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.894518][T12356] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.901868][T12356] bridge_slave_1: entered allmulticast mode [ 410.909485][T12356] bridge_slave_1: entered promiscuous mode [ 410.953805][T12356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.967919][T12356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.072086][T12356] team0: Port device team_slave_0 added [ 411.090993][T12356] team0: Port device team_slave_1 added [ 411.284754][T12356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.308967][T12356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.339429][T12356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.339827][T12361] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 411.360774][T12361] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 411.376753][T12361] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 411.388367][T12361] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 411.396205][T12361] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 411.408364][T12356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.415470][T12356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.444232][T12356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.543519][T12372] erspan0 speed is unknown, defaulting to 1000 [ 411.547940][T12361] Bluetooth: hci5: command 0x0406 tx timeout [ 411.561969][T12356] hsr_slave_0: entered promiscuous mode [ 411.569477][T12356] hsr_slave_1: entered promiscuous mode [ 411.576113][T12356] debugfs: 'hsr0' already exists in 'hsr' [ 411.582277][T12356] Cannot create hsr debugfs directory [ 411.589396][T12358] chnl_net:caif_netlink_parms(): no params data found [ 411.631705][T12361] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 411.641545][T12361] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 411.657599][T12361] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 411.677310][T12361] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 411.685158][T12361] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 411.873512][T12372] wg1 speed is unknown, defaulting to 1000 [ 411.891179][T12375] erspan0 speed is unknown, defaulting to 1000 [ 411.892648][T12358] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.904889][T12358] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.913472][T12358] bridge_slave_0: entered allmulticast mode [ 411.921951][T12358] bridge_slave_0: entered promiscuous mode [ 411.980686][T12358] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.988629][T12358] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.995957][T12358] bridge_slave_1: entered allmulticast mode [ 412.004664][T12358] bridge_slave_1: entered promiscuous mode [ 412.114002][T12358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.129493][T12358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.176530][T12375] wg1 speed is unknown, defaulting to 1000 [ 412.209844][T12358] team0: Port device team_slave_0 added [ 412.224021][T12358] team0: Port device team_slave_1 added [ 412.270733][ T5847] Bluetooth: hci15: command tx timeout [ 412.284769][T12358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.292103][T12358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.318535][T12358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.331381][T12358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.338445][T12358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.364718][ T5847] Bluetooth: hci17: command tx timeout [ 412.366888][ T5847] Bluetooth: hci16: command tx timeout [ 412.371416][T12358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.478257][T12358] hsr_slave_0: entered promiscuous mode [ 412.485045][T12358] hsr_slave_1: entered promiscuous mode [ 412.493091][T12358] debugfs: 'hsr0' already exists in 'hsr' [ 412.499053][T12358] Cannot create hsr debugfs directory [ 412.684933][T12372] chnl_net:caif_netlink_parms(): no params data found [ 412.893670][T12375] chnl_net:caif_netlink_parms(): no params data found [ 412.950711][T12372] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.958651][T12372] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.966006][T12372] bridge_slave_0: entered allmulticast mode [ 412.973680][T12372] bridge_slave_0: entered promiscuous mode [ 413.012746][T12372] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.020547][T12372] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.028793][T12372] bridge_slave_1: entered allmulticast mode [ 413.036213][T12372] bridge_slave_1: entered promiscuous mode [ 413.101883][T12372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.115511][T12372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.199824][T12372] team0: Port device team_slave_0 added [ 413.205696][T12375] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.213093][T12375] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.220560][T12375] bridge_slave_0: entered allmulticast mode [ 413.229933][T12375] bridge_slave_0: entered promiscuous mode [ 413.248684][T12372] team0: Port device team_slave_1 added [ 413.254479][T12375] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.261949][T12375] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.269610][T12375] bridge_slave_1: entered allmulticast mode [ 413.279123][T12375] bridge_slave_1: entered promiscuous mode [ 413.335344][T12372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.342901][T12372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.369714][T12372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.404494][T12372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.412112][T12372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.438689][T12372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.463770][T12375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.477053][ T5847] Bluetooth: hci18: command tx timeout [ 413.477484][T12375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.567575][T12375] team0: Port device team_slave_0 added [ 413.579278][T12372] hsr_slave_0: entered promiscuous mode [ 413.587737][T12372] hsr_slave_1: entered promiscuous mode [ 413.594077][T12372] debugfs: 'hsr0' already exists in 'hsr' [ 413.600728][T12372] Cannot create hsr debugfs directory [ 413.621323][T12375] team0: Port device team_slave_1 added [ 413.687890][T12375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.694955][T12375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.721912][T12375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.727457][ T5847] Bluetooth: hci19: command tx timeout [ 413.735385][T12375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.745251][T12375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.771683][T12375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.891632][T12375] hsr_slave_0: entered promiscuous mode [ 413.898788][T12375] hsr_slave_1: entered promiscuous mode [ 413.904990][T12375] debugfs: 'hsr0' already exists in 'hsr' [ 413.911760][T12375] Cannot create hsr debugfs directory [ 414.347046][ T5847] Bluetooth: hci15: command tx timeout [ 414.427199][T12361] Bluetooth: hci17: command tx timeout [ 414.429823][ T5847] Bluetooth: hci16: command tx timeout [ 415.546851][T12392] Bluetooth: hci18: command tx timeout [ 415.786780][T12392] Bluetooth: hci19: command tx timeout [ 416.426755][T12392] Bluetooth: hci15: command tx timeout [ 416.506842][T12392] Bluetooth: hci16: command tx timeout [ 416.512391][T12392] Bluetooth: hci17: command tx timeout [ 416.673582][T12392] Bluetooth: hci9: command 0x0406 tx timeout [ 416.674633][ T5151] Bluetooth: hci6: command 0x0406 tx timeout [ 416.680101][T12360] Bluetooth: hci7: command 0x0406 tx timeout [ 416.686148][ T5151] Bluetooth: hci8: command 0x0406 tx timeout [ 417.627514][T12393] Bluetooth: hci18: command tx timeout [ 417.867204][T12393] Bluetooth: hci19: command tx timeout [ 418.586768][T12393] Bluetooth: hci17: command tx timeout [ 418.586779][ T5847] Bluetooth: hci16: command tx timeout [ 419.707174][T12393] Bluetooth: hci18: command tx timeout [ 419.956597][T12393] Bluetooth: hci19: command tx timeout [ 431.867151][ T31] INFO: task syz.3.1575:12216 blocked for more than 143 seconds. [ 431.874972][ T31] Not tainted syzkaller #0 [ 431.880083][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.888927][ T31] task:syz.3.1575 state:D stack:26024 pid:12216 tgid:12210 ppid:5832 task_flags:0x480140 flags:0x00080002 [ 431.901050][ T31] Call Trace: [ 431.904358][ T31] [ 431.907387][ T31] __schedule+0x1798/0x4cc0 [ 431.912095][ T31] ? __lock_acquire+0xab9/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 431.917176][ T31] ? __lock_acquire+0xab9/0xd20 [ 431.922198][ T31] ? __pfx___schedule+0x10/0x10 [ 431.927585][ T31] ? schedule+0x91/0x360 [ 431.932313][ T31] schedule+0x165/0x360 [ 431.936669][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 431.942177][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 431.976924][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 431.983081][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 432.015486][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 432.022802][ T31] nbd_set_size+0x47e/0x6a0 [ 432.027931][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 432.033030][ T31] ? nla_memcpy+0x5b/0xc0 [ 432.037929][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 432.042911][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 432.048770][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 432.054792][ T31] ? bpf_lsm_capable+0x9/0x20 [ 432.059664][ T31] ? security_capable+0x7e/0x2e0 [ 432.064642][ T31] ? radix_tree_lookup+0x240/0x290 [ 432.069840][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 432.075153][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 432.081301][ T31] ? rcu_is_watching+0x15/0xb0 [ 432.086103][ T31] ? __nla_parse+0x40/0x60 [ 432.090894][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 432.097286][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 432.102848][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 432.109117][ T31] ? stack_trace_save+0x9c/0xe0 [ 432.114023][ T31] genl_rcv_msg+0x60e/0x790 [ 432.118624][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.123673][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 432.129536][ T31] netlink_rcv_skb+0x208/0x470 [ 432.134317][ T31] ? __lock_acquire+0xab9/0xd20 [ 432.139578][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.144623][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.150044][ T31] ? down_read+0x1ad/0x2e0 [ 432.154538][ T31] genl_rcv+0x28/0x40 [ 432.158599][ T31] netlink_unicast+0x82f/0x9e0 [ 432.163455][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 432.168907][ T31] ? netlink_sendmsg+0x642/0xb30 [ 432.173879][ T31] ? skb_put+0x11b/0x210 [ 432.178191][ T31] netlink_sendmsg+0x805/0xb30 [ 432.182995][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.188856][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 432.193849][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.199178][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.204477][ T31] __sock_sendmsg+0x21c/0x270 [ 432.209223][ T31] ____sys_sendmsg+0x505/0x830 [ 432.214014][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.219371][ T31] ? import_iovec+0x74/0xa0 [ 432.223896][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 432.228728][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.233980][ T31] ? __fget_files+0x2a/0x420 [ 432.238834][ T31] ? __fget_files+0x3a0/0x420 [ 432.243544][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 432.248632][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.254136][ T31] ? do_syscall_64+0xbe/0xfa0 [ 432.258864][ T31] do_syscall_64+0xfa/0xfa0 [ 432.263378][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.268822][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.274948][ T31] ? clear_bhb_loop+0x60/0xb0 [ 432.279722][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.285645][ T31] RIP: 0033:0x7f68e9f8efc9 [ 432.290325][ T31] RSP: 002b:00007f68eae93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.298780][ T31] RAX: ffffffffffffffda RBX: 00007f68ea1e6090 RCX: 00007f68e9f8efc9 [ 432.306814][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 000000000000000a [ 432.314792][ T31] RBP: 00007f68ea011f91 R08: 0000000000000000 R09: 0000000000000000 [ 432.322798][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.330914][ T31] R13: 00007f68ea1e6128 R14: 00007f68ea1e6090 R15: 00007fff66bd3f58 [ 432.339180][ T31] [ 432.342222][ T31] INFO: task syz.4.1581:12239 blocked for more than 143 seconds. [ 432.350321][ T31] Not tainted syzkaller #0 [ 432.355278][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.364188][ T31] task:syz.4.1581 state:D stack:25800 pid:12239 tgid:12238 ppid:5841 task_flags:0x400140 flags:0x00080002 [ 432.376204][ T31] Call Trace: [ 432.379542][ T31] [ 432.382491][ T31] __schedule+0x1798/0x4cc0 [ 432.387348][ T31] ? __lock_acquire+0xab9/0xd20 [ 432.392216][ T31] ? __lock_acquire+0xab9/0xd20 [ 432.397096][ T31] ? __pfx___schedule+0x10/0x10 [ 432.401990][ T31] ? schedule+0x91/0x360 [ 432.406243][ T31] schedule+0x165/0x360 [ 432.410443][ T31] schedule_preempt_disabled+0x13/0x30 [ 432.415928][ T31] __mutex_lock+0x7e6/0x1350 [ 432.420647][ T31] ? __mutex_lock+0x5bb/0x1350 [ 432.425455][ T31] ? genl_rcv_msg+0x10d/0x790 [ 432.430210][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 432.435400][ T31] ? stack_trace_save+0x9c/0xe0 [ 432.440560][ T31] ? radix_tree_lookup+0x240/0x290 [ 432.445686][ T31] genl_rcv_msg+0x10d/0x790 [ 432.450253][ T31] ? __lock_acquire+0xab9/0xd20 [ 432.455116][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.460204][ T31] netlink_rcv_skb+0x208/0x470 [ 432.464987][ T31] ? __lock_acquire+0xab9/0xd20 [ 432.470035][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.475075][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.480435][ T31] ? down_read+0x1ad/0x2e0 [ 432.484869][ T31] genl_rcv+0x28/0x40 [ 432.489127][ T31] netlink_unicast+0x82f/0x9e0 [ 432.493917][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 432.499257][ T31] ? netlink_sendmsg+0x642/0xb30 [ 432.504197][ T31] ? skb_put+0x11b/0x210 [ 432.508740][ T31] netlink_sendmsg+0x805/0xb30 [ 432.513545][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.518870][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 432.523850][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.529210][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.534664][ T31] __sock_sendmsg+0x21c/0x270 [ 432.539645][ T31] __sys_sendto+0x3bd/0x520 [ 432.544158][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 432.549305][ T31] ? count_memcg_event_mm+0x21/0x260 [ 432.554657][ T31] ? exc_page_fault+0x82/0x100 [ 432.559482][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 432.564779][ T31] __x64_sys_sendto+0xde/0x100 [ 432.569636][ T31] do_syscall_64+0xfa/0xfa0 [ 432.574170][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.579414][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.585489][ T31] ? clear_bhb_loop+0x60/0xb0 [ 432.594331][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.600283][ T31] RIP: 0033:0x7f5e3a590e5c [ 432.604704][ T31] RSP: 002b:00007f5e3b4a2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 432.613184][ T31] RAX: ffffffffffffffda RBX: 00007f5e3b4a2fc0 RCX: 00007f5e3a590e5c [ 432.621203][ T31] RDX: 0000000000000020 RSI: 00007f5e3b4a3010 RDI: 0000000000000042 [ 432.629404][ T31] RBP: 0000000000000000 R08: 00007f5e3b4a2f14 R09: 000000000000000c [ 432.637914][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000042 [ 432.646018][ T31] R13: 00007f5e3b4a2f68 R14: 00007f5e3b4a3010 R15: 0000000000000000 [ 432.654747][ T31] [ 432.657841][ T31] INFO: task syz.1.1582:12244 blocked for more than 144 seconds. [ 432.665575][ T31] Not tainted syzkaller #0 [ 432.670679][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.679417][ T31] task:syz.1.1582 state:D stack:27656 pid:12244 tgid:12242 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 432.691637][ T31] Call Trace: [ 432.694920][ T31] [ 432.697894][ T31] __schedule+0x1798/0x4cc0 [ 432.702416][ T31] ? __lock_acquire+0xab9/0xd20 [ 432.707317][ T31] ? __lock_acquire+0xab9/0xd20 [ 432.712176][ T31] ? __pfx___schedule+0x10/0x10 [ 432.717092][ T31] ? schedule+0x91/0x360 [ 432.721369][ T31] schedule+0x165/0x360 [ 432.725547][ T31] schedule_preempt_disabled+0x13/0x30 [ 432.731104][ T31] __mutex_lock+0x7e6/0x1350 [ 432.735710][ T31] ? __mutex_lock+0x5bb/0x1350 [ 432.740824][ T31] ? genl_rcv_msg+0x10d/0x790 [ 432.745594][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 432.750829][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 432.756241][ T31] ? radix_tree_lookup+0x240/0x290 [ 432.761452][ T31] genl_rcv_msg+0x10d/0x790 [ 432.765991][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.771067][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 432.776098][ T31] ? __asan_memcpy+0x40/0x70 [ 432.780746][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 432.786236][ T31] netlink_rcv_skb+0x208/0x470 [ 432.791297][ T31] ? __lock_acquire+0xab9/0xd20 [ 432.796156][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.801212][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.806611][ T31] ? down_read+0x1ad/0x2e0 [ 432.811062][ T31] genl_rcv+0x28/0x40 [ 432.815046][ T31] netlink_unicast+0x82f/0x9e0 [ 432.819879][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 432.825185][ T31] ? netlink_sendmsg+0x642/0xb30 [ 432.830223][ T31] ? skb_put+0x11b/0x210 [ 432.834493][ T31] netlink_sendmsg+0x805/0xb30 [ 432.839554][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.844928][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 432.849919][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.855212][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.860537][ T31] __sock_sendmsg+0x21c/0x270 [ 432.865225][ T31] __sys_sendto+0x3bd/0x520 [ 432.869795][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 432.874854][ T31] ? count_memcg_event_mm+0x21/0x260 [ 432.880205][ T31] ? exc_page_fault+0x82/0x100 [ 432.884980][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 432.890614][ T31] __x64_sys_sendto+0xde/0x100 [ 432.895393][ T31] do_syscall_64+0xfa/0xfa0 [ 432.899964][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.905172][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.911424][ T31] ? clear_bhb_loop+0x60/0xb0 [ 432.916136][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.922105][ T31] RIP: 0033:0x7f897a190e5c [ 432.926585][ T31] RSP: 002b:00007f897b08eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 432.935026][ T31] RAX: ffffffffffffffda RBX: 00007f897b08efc0 RCX: 00007f897a190e5c [ 432.943271][ T31] RDX: 0000000000000020 RSI: 00007f897b08f010 RDI: 0000000000000006 [ 432.951379][ T31] RBP: 0000000000000000 R08: 00007f897b08ef14 R09: 000000000000000c [ 432.959405][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 432.967418][ T31] R13: 00007f897b08ef68 R14: 00007f897b08f010 R15: 0000000000000000 [ 432.975411][ T31] [ 432.978498][ T31] INFO: task syz.2.1583:12247 blocked for more than 144 seconds. [ 432.986226][ T31] Not tainted syzkaller #0 [ 432.995556][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.004404][ T31] task:syz.2.1583 state:D stack:27272 pid:12247 tgid:12246 ppid:5836 task_flags:0x400040 flags:0x00080002 [ 433.017269][ T31] Call Trace: [ 433.020578][ T31] [ 433.023518][ T31] __schedule+0x1798/0x4cc0 [ 433.028368][ T31] ? __lock_acquire+0xab9/0xd20 [ 433.033247][ T31] ? __lock_acquire+0xab9/0xd20 [ 433.038256][ T31] ? __pfx___schedule+0x10/0x10 [ 433.043163][ T31] ? schedule+0x91/0x360 [ 433.047807][ T31] schedule+0x165/0x360 [ 433.051976][ T31] schedule_preempt_disabled+0x13/0x30 [ 433.057622][ T31] __mutex_lock+0x7e6/0x1350 [ 433.062252][ T31] ? __mutex_lock+0x5bb/0x1350 [ 433.067241][ T31] ? genl_rcv_msg+0x10d/0x790 [ 433.071965][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 433.077598][ T31] ? stack_trace_save+0x9c/0xe0 [ 433.082484][ T31] ? radix_tree_lookup+0x240/0x290 [ 433.087704][ T31] genl_rcv_msg+0x10d/0x790 [ 433.092221][ T31] ? __lock_acquire+0xab9/0xd20 [ 433.097293][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.102860][ T31] netlink_rcv_skb+0x208/0x470 [ 433.108233][ T31] ? __lock_acquire+0xab9/0xd20 [ 433.113114][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.118270][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.123588][ T31] ? down_read+0x1ad/0x2e0 [ 433.128150][ T31] genl_rcv+0x28/0x40 [ 433.132172][ T31] netlink_unicast+0x82f/0x9e0 [ 433.137480][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 433.142794][ T31] ? netlink_sendmsg+0x642/0xb30 [ 433.148116][ T31] ? skb_put+0x11b/0x210 [ 433.152531][ T31] netlink_sendmsg+0x805/0xb30 [ 433.157491][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.162806][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 433.168105][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.173415][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.178809][ T31] __sock_sendmsg+0x21c/0x270 [ 433.183502][ T31] __sys_sendto+0x3bd/0x520 [ 433.188151][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 433.193227][ T31] ? count_memcg_event_mm+0x21/0x260 [ 433.198957][ T31] ? exc_page_fault+0x82/0x100 [ 433.203779][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 433.209241][ T31] __x64_sys_sendto+0xde/0x100 [ 433.214019][ T31] do_syscall_64+0xfa/0xfa0 [ 433.218656][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.223973][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.230795][ T31] ? clear_bhb_loop+0x60/0xb0 [ 433.235523][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.241560][ T31] RIP: 0033:0x7f968bd90e5c [ 433.245981][ T31] RSP: 002b:00007f968cbf5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 433.254682][ T31] RAX: ffffffffffffffda RBX: 00007f968cbf5fc0 RCX: 00007f968bd90e5c [ 433.263032][ T31] RDX: 000000000000001c RSI: 00007f968cbf6010 RDI: 0000000000000004 [ 433.271139][ T31] RBP: 0000000000000000 R08: 00007f968cbf5f14 R09: 000000000000000c [ 433.279271][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 433.287552][ T31] R13: 00007f968cbf5f68 R14: 00007f968cbf6010 R15: 0000000000000000 [ 433.295565][ T31] [ 433.298714][ T31] INFO: task syz.0.1584:12249 blocked for more than 144 seconds. [ 433.307136][ T31] Not tainted syzkaller #0 [ 433.312099][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.321253][ T31] task:syz.0.1584 state:D stack:26472 pid:12249 tgid:12248 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 433.333271][ T31] Call Trace: [ 433.336713][ T31] [ 433.339674][ T31] __schedule+0x1798/0x4cc0 [ 433.344200][ T31] ? __lock_acquire+0xab9/0xd20 [ 433.349466][ T31] ? __lock_acquire+0xab9/0xd20 [ 433.354434][ T31] ? __pfx___schedule+0x10/0x10 [ 433.359622][ T31] ? schedule+0x91/0x360 [ 433.363894][ T31] schedule+0x165/0x360 [ 433.368119][ T31] schedule_preempt_disabled+0x13/0x30 [ 433.373718][ T31] __mutex_lock+0x7e6/0x1350 [ 433.378708][ T31] ? __mutex_lock+0x5bb/0x1350 [ 433.383535][ T31] ? genl_rcv_msg+0x10d/0x790 [ 433.388543][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 433.393666][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 433.399158][ T31] ? radix_tree_lookup+0x240/0x290 [ 433.404291][ T31] genl_rcv_msg+0x10d/0x790 [ 433.409249][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.414325][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 433.419535][ T31] ? __asan_memcpy+0x40/0x70 [ 433.424163][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 433.429728][ T31] netlink_rcv_skb+0x208/0x470 [ 433.434587][ T31] ? __lock_acquire+0xab9/0xd20 [ 433.439902][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.444976][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.450391][ T31] ? down_read+0x1ad/0x2e0 [ 433.454835][ T31] genl_rcv+0x28/0x40 [ 433.459200][ T31] netlink_unicast+0x82f/0x9e0 [ 433.464063][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 433.469742][ T31] ? netlink_sendmsg+0x642/0xb30 [ 433.474716][ T31] ? skb_put+0x11b/0x210 [ 433.479040][ T31] netlink_sendmsg+0x805/0xb30 [ 433.483815][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.489242][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 433.494224][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.499920][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.505216][ T31] __sock_sendmsg+0x21c/0x270 [ 433.510177][ T31] __sys_sendto+0x3bd/0x520 [ 433.514714][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 433.519866][ T31] ? count_memcg_event_mm+0x21/0x260 [ 433.525233][ T31] ? rcu_is_watching+0x15/0xb0 [ 433.530398][ T31] __x64_sys_sendto+0xde/0x100 [ 433.535175][ T31] do_syscall_64+0xfa/0xfa0 [ 433.539826][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.545053][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.551501][ T31] ? clear_bhb_loop+0x60/0xb0 [ 433.556226][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.562520][ T31] RIP: 0033:0x7f63aa190e5c [ 433.567114][ T31] RSP: 002b:00007f63aafc8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 433.575563][ T31] RAX: ffffffffffffffda RBX: 00007f63aafc8fc0 RCX: 00007f63aa190e5c [ 433.583998][ T31] RDX: 0000000000000020 RSI: 00007f63aafc9010 RDI: 0000000000000005 [ 433.592394][ T31] RBP: 0000000000000000 R08: 00007f63aafc8f14 R09: 000000000000000c [ 433.600940][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 433.609016][ T31] R13: 00007f63aafc8f68 R14: 00007f63aafc9010 R15: 0000000000000000 [ 433.617281][ T31] [ 433.620317][ T31] INFO: task syz-executor:12256 blocked for more than 145 seconds. [ 433.628660][ T31] Not tainted syzkaller #0 [ 433.633618][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.642364][ T31] task:syz-executor state:D stack:22568 pid:12256 tgid:12256 ppid:1 task_flags:0x400140 flags:0x00080002 [ 433.654722][ T31] Call Trace: [ 433.658103][ T31] [ 433.661126][ T31] __schedule+0x1798/0x4cc0 [ 433.665763][ T31] ? __lock_acquire+0xab9/0xd20 [ 433.670737][ T31] ? __lock_acquire+0xab9/0xd20 [ 433.675620][ T31] ? __pfx___schedule+0x10/0x10 [ 433.680832][ T31] ? schedule+0x91/0x360 [ 433.685092][ T31] schedule+0x165/0x360 [ 433.689480][ T31] schedule_preempt_disabled+0x13/0x30 [ 433.694963][ T31] __mutex_lock+0x7e6/0x1350 [ 433.699701][ T31] ? __mutex_lock+0x5bb/0x1350 [ 433.704481][ T31] ? genl_rcv_msg+0x10d/0x790 [ 433.709695][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 433.714797][ T31] ? stack_trace_save+0x9c/0xe0 [ 433.719766][ T31] ? radix_tree_lookup+0x240/0x290 [ 433.725013][ T31] genl_rcv_msg+0x10d/0x790 [ 433.729638][ T31] ? __lock_acquire+0xab9/0xd20 [ 433.734516][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.739885][ T31] netlink_rcv_skb+0x208/0x470 [ 433.744666][ T31] ? __lock_acquire+0xab9/0xd20 [ 433.749615][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.754654][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.760083][ T31] ? down_read+0x1ad/0x2e0 [ 433.764626][ T31] genl_rcv+0x28/0x40 [ 433.768925][ T31] netlink_unicast+0x82f/0x9e0 [ 433.773715][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 433.779335][ T31] ? netlink_sendmsg+0x642/0xb30 [ 433.784280][ T31] ? skb_put+0x11b/0x210 [ 433.789155][ T31] netlink_sendmsg+0x805/0xb30 [ 433.793959][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.799694][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 433.804657][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.810049][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.815340][ T31] __sock_sendmsg+0x21c/0x270 [ 433.820088][ T31] __sys_sendto+0x3bd/0x520 [ 433.824608][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 433.829992][ T31] ? __lock_acquire+0xab9/0xd20 [ 433.834871][ T31] ? fd_install+0x97/0x540 [ 433.839364][ T31] ? fd_install+0x30d/0x540 [ 433.843911][ T31] __x64_sys_sendto+0xde/0x100 [ 433.848850][ T31] do_syscall_64+0xfa/0xfa0 [ 433.853367][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.859128][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.865357][ T31] ? clear_bhb_loop+0x60/0xb0 [ 433.870401][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.876323][ T31] RIP: 0033:0x7f0696390e5c [ 433.880797][ T31] RSP: 002b:00007ffe17fdb760 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 433.889650][ T31] RAX: ffffffffffffffda RBX: 00007f0697114620 RCX: 00007f0696390e5c [ 433.897805][ T31] RDX: 0000000000000020 RSI: 00007f0697114670 RDI: 0000000000000005 [ 433.905804][ T31] RBP: 0000000000000000 R08: 00007ffe17fdb7b4 R09: 000000000000000c [ 433.914025][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 433.922291][ T31] R13: 00007ffe17fdb808 R14: 00007f0697114670 R15: 0000000000000000 [ 433.930400][ T31] [ 433.933494][ T31] [ 433.933494][ T31] Showing all locks held in the system: [ 433.941291][ T31] 1 lock held by khungtaskd/31: [ 433.946136][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 433.956690][ T31] 2 locks held by kworker/0:2/89: [ 433.961745][ T31] #0: ffff8880b883a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 433.971833][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 433.980954][ T31] 2 locks held by getty/5591: [ 433.985665][ T31] #0: ffff88814d9f60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 433.995756][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 434.006060][ T31] 1 lock held by udevd/5840: [ 434.010767][ T31] #0: ffff888143b37358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 434.020461][ T31] 6 locks held by syz.3.1575/12216: [ 434.025658][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.034305][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.043466][ T31] #2: ffff888024a02a70 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 434.054134][ T31] #3: ffff88814378e928 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 434.063672][ T31] #4: ffff88814378e2c8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 434.075967][ T31] #5: ffff88814378e300 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 434.088914][ T31] 2 locks held by syz.4.1581/12239: [ 434.094120][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.102509][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.111727][ T31] 2 locks held by syz.1.1582/12244: [ 434.117454][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.125701][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.134931][ T31] 2 locks held by syz.2.1583/12247: [ 434.140190][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.148743][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.157883][ T31] 2 locks held by syz.0.1584/12249: [ 434.163091][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.171472][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.181083][ T31] 2 locks held by syz-executor/12256: [ 434.186744][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.194997][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.204234][ T31] 2 locks held by syz-executor/12268: [ 434.209940][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.218200][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.227411][ T31] 2 locks held by syz-executor/12270: [ 434.232782][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.241386][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.250516][ T31] 2 locks held by syz-executor/12272: [ 434.255885][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.264171][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.273773][ T31] 2 locks held by syz-executor/12274: [ 434.279480][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.287963][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.297233][ T31] 2 locks held by syz-executor/12301: [ 434.302601][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.310960][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.320009][ T31] 2 locks held by syz-executor/12311: [ 434.325375][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.333933][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.343103][ T31] 2 locks held by syz-executor/12313: [ 434.349167][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.357774][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.366897][ T31] 2 locks held by syz-executor/12326: [ 434.372285][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.380711][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.390055][ T31] 2 locks held by syz-executor/12327: [ 434.395429][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.403744][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.412895][ T31] 2 locks held by syz-executor/12346: [ 434.418620][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.426920][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.435910][ T31] 2 locks held by syz-executor/12356: [ 434.441385][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.450208][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.459422][ T31] 2 locks held by syz-executor/12358: [ 434.464798][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.473212][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.482573][ T31] 2 locks held by syz-executor/12372: [ 434.488042][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.496250][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.505346][ T31] 2 locks held by syz-executor/12375: [ 434.511414][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.519758][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.528944][ T31] [ 434.531301][ T31] ============================================= [ 434.531301][ T31] [ 434.540007][ T31] NMI backtrace for cpu 1 [ 434.540024][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 434.540041][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.540051][ T31] Call Trace: [ 434.540057][ T31] [ 434.540064][ T31] dump_stack_lvl+0x189/0x250 [ 434.540091][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.540113][ T31] ? __pfx__printk+0x10/0x10 [ 434.540139][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 434.540157][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 434.540175][ T31] ? __pfx__printk+0x10/0x10 [ 434.540193][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 434.540220][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 434.540238][ T31] watchdog+0xf60/0xfa0 [ 434.540257][ T31] ? watchdog+0x1e2/0xfa0 [ 434.540277][ T31] kthread+0x711/0x8a0 [ 434.540299][ T31] ? __pfx_watchdog+0x10/0x10 [ 434.540313][ T31] ? __pfx_kthread+0x10/0x10 [ 434.540335][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.540353][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.540372][ T31] ? __pfx_kthread+0x10/0x10 [ 434.540398][ T31] ret_from_fork+0x4bc/0x870 [ 434.540416][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 434.540437][ T31] ? __switch_to_asm+0x39/0x70 [ 434.540449][ T31] ? __switch_to_asm+0x33/0x70 [ 434.540460][ T31] ? __pfx_kthread+0x10/0x10 [ 434.540482][ T31] ret_from_fork_asm+0x1a/0x30 [ 434.540507][ T31] [ 434.540513][ T31] Sending NMI from CPU 1 to CPUs 0: [ 434.688015][ C0] NMI backtrace for cpu 0 [ 434.688034][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 434.688054][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.688065][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 434.688094][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 f1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 434.688111][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 434.688127][ C0] RAX: c766374242b50300 RBX: ffffffff81967be7 RCX: c766374242b50300 [ 434.688141][ C0] RDX: 0000000000000001 RSI: ffffffff8d70d771 RDI: ffffffff8bbf05e0 [ 434.688153][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 434.688167][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cd170 [ 434.688180][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 434.688191][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 434.688206][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.688218][ C0] CR2: 00005622a6613000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 434.688234][ C0] Call Trace: [ 434.688241][ C0] [ 434.688247][ C0] default_idle+0x13/0x20 [ 434.688273][ C0] default_idle_call+0x73/0xb0 [ 434.688302][ C0] do_idle+0x1e7/0x510 [ 434.688325][ C0] ? __pfx_do_idle+0x10/0x10 [ 434.688368][ C0] cpu_startup_entry+0x44/0x60 [ 434.688388][ C0] rest_init+0x2de/0x300 [ 434.688405][ C0] start_kernel+0x3ae/0x410 [ 434.688432][ C0] x86_64_start_reservations+0x24/0x30 [ 434.688453][ C0] x86_64_start_kernel+0x143/0x1c0 [ 434.688472][ C0] common_startup_64+0x13e/0x147 [ 434.688506][ C0] [ 438.907435][ T56] block nbd0: Possible stuck request ffff888024ab5080: control (read@0,1024B). Runtime 330 seconds [ 438.918621][ T56] block nbd0: Possible stuck request ffff888024ab5240: control (read@1024,1024B). Runtime 330 seconds [ 438.929684][ T56] block nbd0: Possible stuck request ffff888024ab5400: control (read@2048,1024B). Runtime 330 seconds [ 438.940765][ T56] block nbd0: Possible stuck request ffff888024ab55c0: control (read@3072,1024B). Runtime 330 seconds