last executing test programs: 18.227199401s ago: executing program 3 (id=1660): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) unshare(0x6a040000) socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, 0x0) 17.748673918s ago: executing program 2 (id=1664): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000000)={0x4, 0x100, 0x2, 0x8001, 0x7e3a, 0x0, 0xc7b}) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000080)) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f00000000c0)={0x25}) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x1800) accept4$phonet_pipe(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004084) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x148, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff6}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3ee0}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6805}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x12fa}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa4}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000030) r4 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000640)=0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa8, r3, 0x801, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa66}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x890}, 0x400c040) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept$alg(r6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0x77, "4a879f5c0113dca496ab4e9bac6e9201b65c70884033afd8e0d29bec3a4a0e6f107c47e6bcdba786442e7484a44de7f92570bfdf20b09c6ec4120fbf20a5bb3f324732c52b6d7949de758a1508225533dff67cb3df9b07d33b0c3fd3630bcbc77a8e8181e602bb30543046b91dc7db121c4cc2a363deb7"}, &(0x7f0000000880)=0x7f) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000008c0)={r8, 0x5, 0xfffd}, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000900)={0x0, 'bridge_slave_1\x00', {0x1}, 0x6}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000940), &(0x7f0000000980)=0x4) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f00000009c0)) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xd4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x24}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x78]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6e3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xef}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x20b}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x80, 0x6, 0x8000, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0xffffff07]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8040}, 0x20000840) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000e40)={&(0x7f0000000c00), 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x184, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xc76d, 0x29}}}}, [@NL80211_ATTR_TID_CONFIG={0xb8, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x84, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf405}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb3}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x82}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x2004c014}, 0x8000) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000e80)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r10, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xd0, r11, 0x8, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1000c050}, 0x0) 17.687543675s ago: executing program 4 (id=1665): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$kcm(0x11, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3f}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030204590214000600006fb96dbcf706e1f5ff000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x1e3}, {&(0x7f0000000700)="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", 0x1bf}], 0x3}, 0x40010) r7 = socket$xdp(0x2c, 0x3, 0x0) (async) socketpair(0x1d, 0x3, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r9) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c9900003888ad6872e9e1505e3e9a626804d058187ac6179d3fc5c8ddaf37dc8d065bca8c5a5bc0dadbbde550d99849ee0488d84a18f4aed4fee15744799c9f3f1dbf10902cf72dda189bca4f60beec975bb01091df4662e2618f239cc551ac4d5645d05aaa05a01518d787dcd55494834597416223187f6ffae7df4170fad763a599019195", @ANYRES16=r10, @ANYBLOB="03002dbd7000000000000300000018000180110001006574683a6d6163767461703000000000"], 0x2c}}, 0x4044844) r11 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000014000104595e0000008000001e"], 0x18}}, 0x0) (async) sendmsg$TIPC_NL_MON_GET(r8, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="45020000", @ANYRES16=r10, @ANYBLOB="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"], 0x224}, 0x1, 0x0, 0x0, 0x40815}, 0x400c010) (async) r12 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r12, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYBLOB="15"], 0x40}, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, 0x14, 0xa, 0x70bd2d, 0x25dfdbfb, {0x10, 0xfa}}, 0x14}}, 0x40005) (async) r13 = getpid() sendmsg$AUDIT_SET(r8, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x200, 0x70bd29, 0x25dfdbfe, {0x81, 0x1, 0x2, r13, 0x5, 0x200, 0x25, 0x101, 0x0, 0x2, 0x2}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x82}, 0x10) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000002c0)={0xfffffffffffffffc, 0x10000, 0x1000, 0x3, 0x7}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe7}, 0x94) 17.54576084s ago: executing program 2 (id=1668): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) recvmsg(r0, &(0x7f0000000d00)={&(0x7f0000000200)=@pppol2tpin6, 0x80, &(0x7f0000000c00)=[{&(0x7f00000002c0)=""/41, 0x29}, {&(0x7f0000000300)=""/245, 0xf5}, {&(0x7f0000000500)=""/99, 0x63}, {&(0x7f0000000680)=""/158, 0x9e}, {&(0x7f0000000740)=""/10, 0xa}, {&(0x7f0000000780)=""/233, 0xe9}, {&(0x7f0000000980)=""/133, 0x85}, {&(0x7f0000000a40)=""/6, 0x6}, {&(0x7f0000000a80)=""/205, 0xcd}, {&(0x7f0000000b80)=""/77, 0x4d}], 0xa, &(0x7f0000000cc0)=""/3, 0x3}, 0x1) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = epoll_create1(0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) epoll_pwait(r4, &(0x7f0000000300)=[{}], 0x1, 0x1ff, 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000480)=[{}], 0x1, 0xffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000011c0)={0x9}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10902, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0f13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2871"], 0xe0}], 0x1}, 0x40040) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipmr_newroute={0x58, 0x18, 0x200, 0x70bd2b, 0x25dfdbfc, {0x80, 0x80, 0x20, 0x40, 0x0, 0x3, 0x0, 0x1, 0x3700}, [@RTA_UID={0x8, 0x19, r7}, @RTA_TABLE={0x8, 0xf, 0x40}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x48}}, @RTA_MARK={0x8, 0x10, 0x3}]}, 0x58}}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3, @ANYBLOB="01b754733af76c5aa24a37ca655d86a9342f87fe11752f486916bbf6a0ab3e61056e075a80b99a58397003a6e59c13e0866d837b69da781d19f33c4563cdadc50db9c43f7f064f111a894716db237ec0f57a725423374511202d1b7961be9acf81b3b3e2ad78d502628ad41954e9d4f68d1a054c75ee77d35879ea61982bb25fabf320a72864ff66fc2204093138932fcf2b9648469bcd84afefafbe83f869e0880eba5f21b72da5454950"], 0x5c}}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 17.341220798s ago: executing program 0 (id=1669): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000100000000000000", @ANYRES32=r3, @ANYBLOB="12030000000000000a000100dd"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000100000000000000", @ANYRES32=r3, @ANYBLOB="12030000000000000a000100dd"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffe59, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x7, 0x0, 0xfff, 0x7fffffff}, {0x96, 0x2, 0x9, 0x7f, 0x80d8, 0x7}, 0x8, 0x9, 0x17eb}}]}}]}, 0x58}}, 0x50) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffe59, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x7, 0x0, 0xfff, 0x7fffffff}, {0x96, 0x2, 0x9, 0x7f, 0x80d8, 0x7}, 0x8, 0x9, 0x17eb}}]}}]}, 0x58}}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @initdev}, &(0x7f00000002c0)=0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x4ae945a86957e61d, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x24000001) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.115725412s ago: executing program 4 (id=1671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}, 0x1, 0x0, 0x0, 0x8000040}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000090601020000000400000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 17.093339543s ago: executing program 4 (id=1672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) close(0x3) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004094}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x3, 0x7, 0x701, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20041000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x63}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a3200"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 16.9206883s ago: executing program 4 (id=1674): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000100001002abd70368f00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300776c616e3000000000000000000000000a0001"], 0x40}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000100001000000001b005fb5453269537d2ee3982483e35ac70000000200000a2000c97f959eb9151fa80000000000008100fffc0900010073797a300000000040000100000009f3020073797a300000000014400480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100f9ff23000480200001800700010072740000140002800800014000000014080002400000000208000b40000000000900010073797a300000000014000000020a011400000011000100"/219], 0xe8}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x44}, @val={0x8, 0x3, r5}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='c '], 0xa) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9f, "a8d1e4aed98813338e064b16eaf1a161"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmmsg$inet(r0, &(0x7f0000004200)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f0000002b00)=[{&(0x7f0000000140)="dc4271ad276ed0e8978f80f1efa295040f9c944d19c3e8ee77ed", 0x1a}, {&(0x7f0000000180)="474204ee9e5c5c7bbccbd47dee94886735a016e175b5f7c357e9312bd812dcb0afd00d75af78c14a3b85ab964ad5a7900e1a55a7d815efa2e15e5e4ce1c5938e3ec39d00f015e71330ffbe7c8a", 0x4d}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="45892639f5e6721a3c346da00670a4b7afaf14dec212b559bc6c8a60b3f24be92997f169b6c392c997a7f877f5cefa9942a3a778d7f2eb003aed654374a481182e5d2a859fe8d08dabe2a8a8a1f2d3b338b28a4b8403aa3d0b5a5af30db00e5013952378afcb68cb988ee0b68d4195d1db3f0747d8f61e63874e88c0d1d8741e935fb4a6124a364e142b447257d0a19fac97df66", 0x94}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="0fa4a0e57cec8847d76d329c862a7588320e0683b1c26a3adf0bf80658b30b84526b5ab05e06e3d66a323370395bd53acf53b3fd52317a8bbba5b22406b1c978634257947e1a79b534f9530d78d61ad35e720523f60bf86453347afca2e29e3ac9c0a26bbf9e1119f7d77e6284f55c64341dbcb55ab9bebb1cb5ed7cdf17eb5de2494c04f920b303f233ce25e52bc7057b96f1", 0x93}, {&(0x7f0000002940)="2feeb89ae5830a5c0e5bcdc4dbc208ae6267684da9277769a95d5234e1d82a638114fe3afd45000ced90c08b9263269ec586fbd8e78727515fc9a3a0eca9038a715529fd19f17efd1274a457034a58de1bfe9df404c08c1ca032fc9a9f4e17e8b1098cf06845257540e40b204a065ea1097b3bfce21e2e35cc82b6", 0x7b}, {&(0x7f00000029c0)="1c9c3afc232633728ee2917e0c391cba618300943f0e9e66494a33936e1b29e5d1b7b8b517890ec87086ea93fc318eb25cf85e9061a9e7de847d289f8b7512ce12285a68cf6d9f53f1b88f0e00e506fc89e28a91226e53c3e1e3371b4c773bddd6b8d4e1501a3e63c41fc8ab61a9847072d8db08ff736a7dee17fb2ef8f74a4f2d33a5e44fde995bd5e5c7371de441560e2a7a11ad8211b354da3945e10afa3e172c4e6d5ffde882fc75ed9362c4b4509c7f602093d1dad352ec7b77f0fdb2a95d15be7d8de1dc5105118872c0793dbdda8081cd6f94dc8b", 0xd8}, {&(0x7f0000002ac0)}], 0x9}}, {{&(0x7f0000002bc0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002e00)=[{&(0x7f0000002c00)="e31c3c79c506617454e849f1ee90fc8d03ef76b6969e7f70a0839bd4e559f84b2fb4c66b38819df1be2e2793e457f384939496424841a22b27562e95baa144d831d39a247c9a3128a73850ce609132c83f3b3a89c3117a1aa61137432c", 0x5d}, {&(0x7f0000002c80)="9b6f32d6020a267e6641c21c0768b8bef31d699d1b74ac77ec678987a6279ae3b98f3f13848a78be995a98ff14a7d7a2ec6396adb198712eb8905f704f8bc96aa7e9d9dda2eb1131f0b925aa23073761078fce45287eb395f31403068476badd29454545de5f6d7758d921b01e790f0a5b3b7cd6804dbaea3e4a5ec03c02abca1018b0b05c06c17ccc160308b182bf380a6e39685518e6e77d5ccd67eb96e9f30d6bf691fd5b590c4b6ace3868ce5fabdff81a76760a066e62e4", 0xba}, {&(0x7f0000002d40)="51b69a5289eb4f9d1dc6d1cf6a263cc08e5d83bd84dec3842aff9a0332d37e962fb0d2a091328a4609cdbecc5953c93409b92d8a3a608a8dc2c0a7688c43701967f0d4d1bb76366ce140b0e628c7791405762bf49892590a75980810e44dfb38c1ca3cbf885c783b81bdf6ab7fd5a5b18cf9529b6fa6c8214dfbffa82d56c98dc704cf00", 0x84}], 0x3, &(0x7f0000002e40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1f9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}], 0x78}}, {{&(0x7f0000002ec0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000004140)=[{&(0x7f0000002f00)="8eece7e5633bf040fe3cd2e66d42550b8c30df6ff4678e49b7dca7430434e8490790e9b21b1bbb79086cc120c33ed7612aae15417b", 0x35}, {&(0x7f0000002f40)="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", 0x1000}, {&(0x7f0000003f40)="899464b248bbaf3fb0639fb7adbbe2fc06d3e04c409cebc940043b35ad91f25d05351de25d1c6f66d1edd80d874dc266e2da52a2e809d15e493c8bef3d8f86f76ea3b3bdb5b76fc6100d4aff9463926fc2f11f56dfaef9c6f8f4abafa83540b6f5a66fe84fc3cedc4a5a657244636b34df3f8b3f5c177c13b2467f1452a9f5b8f2f15cf1bf1696eec249273085d6ed7793f025f4c70d8f58352a741b29ef5206365518a6afeda4f128836e36b12d330cd78532135644bfd8d293f00af877b054db8186639f8117c427f173842d2d8a77090446809f2f0c096817839bf8", 0xdd}, {&(0x7f0000004040)="59e7f32a546f54ce8d01f5dc02cd36e0d33cadafafeab2ea7ed91094d285633825f988a53faa7b3eb8e9df386e19eb6a0fbbb45c400c016e5652039ab1f2d2ad61e66502e4d3d2b670c76827c591b8d53ca8da0b258d020d80d151daf0641dc51d8389b1f492df2fea844baf1bdcb3b0bc3928bc4d6c001d0f7bd7280018aa7de2b2a11e4544621a543bf878290636a0200d1f7f88f0d2b532da6fa6601d7ce1c4db9b2d281eac7f39994699d5a892d18ba10dfee4cae4346a3b532077296c162cbe08b9bb5232ebfbe982a790ec8d2a40fc7f0c803a", 0xd6}], 0x4, &(0x7f0000004180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xaad1}}], 0x68}}], 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x25dfdc00, {0x60, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xa}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x1, 0x0, 0x5792b252}, 0xfffffffb, 0x1, 0x0, 0x3, 0x7, 0x12, 0x4, 0x1b, 0x0, 0x3d76d621, {0x0, 0x0, 0x0, 0x408000, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x5}, 0x8040) 16.913928895s ago: executing program 0 (id=1675): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000441a800090004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x125, 0x125, 0x3, [@float={0xf, 0x0, 0x0, 0x10, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x1d}}, @enum64={0x6, 0x5, 0x0, 0x13, 0x0, 0x1, [{0x1, 0xb, 0x81}, {0x7, 0x9, 0x7}, {0xa, 0xffffffff, 0x9}, {0x7, 0x6, 0x9}, {0x4, 0x4, 0xfff}]}, @enum={0x7, 0x5, 0x0, 0x6, 0x4, [{0x1, 0x7fff}, {0x10, 0x457c}, {0xb, 0x2}, {0x8, 0x20e3}, {0x8}]}, @float={0x8, 0x0, 0x0, 0x10, 0x8}, @datasec={0x10, 0x5, 0x0, 0xf, 0x1, [{0x2, 0x401, 0x4876}, {0x5, 0x0, 0x2}, {0x2, 0x9, 0xffff}, {0x3, 0xc3000000, 0xfffffffc}, {0x1, 0x9, 0x2}], "8e"}, @struct={0x1, 0x3, 0x0, 0x4, 0x0, 0x0, [{0xb, 0x0, 0x6}, {0xa, 0x2, 0x4}, {0x1, 0x2, 0x6}]}]}, {0x0, [0x61]}}, &(0x7f00000004c0), 0x143, 0x0, 0x0, 0x78dc}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0xf, 0x4}, 0x50) r2 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, 0x0, &(0x7f0000000040)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, 0x0, 0x0}, 0x20) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="0400"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="040000000300000004000000000000000000000000000000000000008ba6c4b310afe3dd852ea9caf482584fc9a5b6fb2f5dd3718b3721120df32c01d2e9bad7ae0f8a9eb96a438d3713611a3f502494ca43dee2a655876256c5b782fad06ae09eafdf7e5a0f2064850bd360249e37a5fc4a628a32c681fdb279ff1efb8437ddf3e575917933a8ecb51450a99b2bee7421e2fee3152f32dd9f7123e0f36b13a2c2812a95d2699ad2f912c3187b9f69bcc84c34577b053a1eab91ada41bb03c5d59fd067f947583f0a586cea365dc08780ff8e1d1b391db20b740065227317c1c0734ac91e32a415ddd20"], 0x50) 16.843560754s ago: executing program 2 (id=1676): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000010c0)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000002a2710f91e1d600000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000100)=0x1000, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000480)) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) 16.777930102s ago: executing program 3 (id=1677): r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d87a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e404003d930000", 0xd8}, {&(0x7f0000000300)="b834cc5df9c6256ec3b71206c1066321be22a2c1be2c791a7ed88437395d64490611ecca935bcf42656e7d047eafe2ca608acf66714aae09ce6e1f38394a6be61dfd3e0fc1466667c9ef415e0adb7214b2a912fda12ed92ef88b8127bd3a637f4b791d2026e200ad5ab94d726031fad562f757af0e04633b818e6d9f706d53", 0x7f}, {&(0x7f0000000240)="b24218387e403f2bd5b9fd41c8c97dcb5849ffeec223783b5c593e86563ef5920c3c8225fe112b016a35dea5e903297c2af358a85974c57f6d2ad9a509bab73d8f9ffba070a1b1bbd72c05434b132845b1b5a6f84b854814781c662f0ef95ecd234f5c6a40edf4a3b8ca6e", 0x6b}], 0x3}, 0x0) 16.691796471s ago: executing program 0 (id=1679): syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) 16.580514386s ago: executing program 2 (id=1680): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) (async) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$kcm(0x11, 0x3, 0x0) (async) r7 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xf04, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xed0, 0x2, [@TCA_MATCHALL_ACT={0xecc, 0x2, [@m_pedit={0xec8, 0x1, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x8, 0x5, 0x3, 0x8000, 0x8001}, 0x6, 0xf8, [{0x25, 0x624baed5, 0x8, 0x3, 0xd966}, {0x1000, 0x8515, 0xb, 0x5, 0x8, 0x4}, {0x0, 0x1ff, 0x5, 0x80000000, 0x1000, 0x76}, {0xd2, 0x62, 0x3, 0x1db1, 0x3, 0x8}, {0x2, 0xb, 0x2, 0x2, 0xffffffff, 0x200}]}, [{0x2, 0x1, 0x6, 0xfffffffa, 0x1, 0x5}, {0x3ff, 0x8, 0x401, 0x9, 0x0, 0x5}, {0x0, 0x9, 0x5, 0x4, 0x4, 0x100}, {0x6, 0x1, 0x9, 0x4738, 0xc37, 0x7}, {0xf, 0x6, 0x7fff, 0xd, 0xfffffffd, 0x1}, {0xb2f, 0x289, 0x2, 0xffffff46, 0x6, 0x7fffffff}, {0x4, 0xf, 0x80000000, 0x7, 0xffffc42d, 0xfffff154}, {0x9, 0x5, 0x4, 0xe6a00000, 0x80000000, 0x3}, {0x3a3, 0x40, 0x3, 0x7f, 0x6, 0x800}, {0x4, 0xa, 0xffff, 0x9, 0x3, 0x7}, {0x5, 0xa9, 0xffff, 0x1daf58aa, 0x5, 0xd7a}, {0x4, 0xcefa, 0x9, 0x2, 0x3, 0x7}, {0x5, 0x80, 0x3, 0x10, 0xf, 0x4}, {0x1afd, 0x5, 0x6, 0x9, 0x7, 0x7fffffff}, {0x9, 0x9, 0x1, 0x6, 0x1, 0x9}, {0x9, 0x5, 0x10000000, 0x9, 0xab08, 0x3}, {0x6, 0xffe4, 0x80000001, 0x9, 0x8, 0x10}, {0x7fffffff, 0x2, 0x7, 0xe30f, 0x1eff, 0xfffffc00}, {0x1, 0x10000, 0xe8, 0x4, 0xa726, 0x2}, {0x1, 0x2, 0xd, 0x40, 0x7f, 0x2}, {0x8, 0xd, 0x7ba, 0x3, 0x101, 0x7ff}, {0x7fffffff, 0x1, 0x10, 0x2, 0x8, 0xfffffff8}, {0x1, 0xff, 0x3, 0x0, 0xffffffff, 0xfff}, {0xff, 0x4, 0x0, 0xec, 0x7, 0x2}, {0x7, 0x8, 0x0, 0xb, 0x4, 0x8001}, {0x2, 0x7fff, 0x6, 0x6, 0x1a, 0x4}, {0x1ff, 0xfff, 0x2, 0x100000, 0xd7, 0xfffffff1}, {0x401, 0x400, 0x1, 0x2a, 0x5, 0x9}, {0x6, 0x0, 0x3, 0xfffffffc, 0x1, 0x4}, {0x101, 0xebab, 0x0, 0x1000, 0x5}, {0x5, 0x5, 0xf, 0xa, 0x0, 0x10000}, {0x6, 0x8, 0xc, 0x7, 0x8, 0xfffffff7}, {0x100, 0xff, 0x4, 0x1, 0xcb3, 0xffff}, {0x80000000, 0x2, 0x5, 0x0, 0x400}, {0xff, 0x74, 0xaf8, 0x0, 0x6, 0x2}, {0x8, 0xffffffff, 0x80000000, 0x1, 0x7, 0x9}, {0x10000, 0x4, 0x1, 0x5, 0x7, 0x1}, {0x55d, 0x0, 0x4, 0x7fffffff, 0x2c, 0x15dc0393}, {0x5, 0x9, 0x6, 0x0, 0x7, 0x3}, {0x8, 0x9, 0x4, 0x3fb2, 0x1, 0x9}, {0x1000, 0x3, 0x8, 0x96f6, 0x200, 0x6}, {0xb, 0x2, 0x7, 0x9, 0x8f4b58b, 0xd7}, {0x0, 0x38b834b8, 0x800, 0x7ff, 0x20000000, 0x3}, {0x6, 0x5, 0x4, 0x5, 0x3, 0x50}, {0x1, 0x9f, 0x5, 0x8, 0x7c3, 0xfffffffa}, {0x7f, 0x1c00000, 0x1, 0x8, 0x4, 0x80000001}, {0xff, 0x800, 0x475, 0x3, 0x4, 0x10001}, {0x40000000, 0x6, 0xffffffa9, 0x7608, 0x4961, 0x1f}, {0x3, 0x8, 0x6, 0x3d3, 0x1f, 0x1}, {0xfffff109, 0x3, 0x46, 0x6, 0xb, 0x5}, {0x100, 0x8000, 0x8, 0x8000, 0x7fffffff, 0x5}, {0x1, 0xe, 0x8001, 0x4, 0x5, 0x2}, {0x9, 0xc, 0x5, 0x8, 0x8000, 0x12000}, {0x7, 0x8, 0x120, 0x779, 0x7, 0x655}, {0x2, 0x1, 0x6, 0x7800, 0x8, 0x2}, {0x89f, 0x8, 0xfff, 0x9, 0x5}, {0xa, 0x8, 0x9, 0x2, 0x8, 0x7}, {0x7ff, 0x5, 0x9, 0xfffffc07, 0x7, 0x7}, {0x6, 0xf, 0x2, 0xfffffff7, 0x0, 0x5}, {0xf8, 0xfffffffc, 0x6, 0xe6, 0x7, 0x9}, {0x4, 0x619c, 0x3, 0x200, 0x5a5, 0x4}, {0x1, 0x7, 0xb13, 0xe, 0xa, 0x1}, {0x2, 0x200, 0x8, 0x4dba, 0x2, 0x10}, {0xaa1, 0x0, 0x2, 0x70, 0x5, 0x2}, {0x9, 0xffff294b, 0xd, 0x5, 0x6, 0x5}, {0x1, 0x7, 0xfffffffb, 0x2, 0xbfd, 0xfa4db72}, {0x906, 0xafee, 0x4, 0xd, 0x3ff, 0x100}, {0x1, 0x8, 0x2, 0x7, 0xd}, {0x3, 0xffff8000, 0xa16, 0x2, 0x4, 0xcf}, {0x80, 0x80000000, 0x9, 0x8, 0x80, 0x6}, {0x8, 0x9, 0x401, 0x7, 0x0, 0xfffffff9}, {0x6, 0x0, 0xa, 0x2, 0xbf4b, 0x10}, {0xfffffff8, 0x7, 0xe54f, 0x2, 0x7, 0x1}, {0x3, 0xf7, 0xb1, 0x0, 0x1, 0x7ff}, {0x0, 0x4, 0x3, 0x100, 0x3, 0x7fffffff}, {0x3, 0x2, 0x3ff, 0x2, 0x3, 0x5}, {0x9, 0x3, 0x6, 0x80, 0x8, 0x6}, {0x6, 0x9, 0x8, 0xffff, 0x9, 0x3}, {0xcb42, 0xfffffffe, 0x5, 0x1, 0x2, 0x2}, {0x100, 0x4, 0x6, 0x3, 0x9, 0x34}, {0x92cf, 0x8f, 0x2, 0x10, 0x0, 0x8}, {0x4, 0xfffffffb, 0x5, 0x8, 0x2, 0x3}, {0x7, 0x1, 0x5e, 0x3, 0xc95, 0x3}, {0x6, 0x8, 0x7, 0x9, 0x3, 0x8}, {0x3ff, 0x6, 0x8, 0x9e, 0xfffffff9, 0x4}, {0x2, 0x1157, 0x6, 0x1800000, 0x101, 0x6}, {0xa65, 0xfffffffa, 0x578, 0xe, 0x5, 0x8}, {0x81, 0x3, 0xc524, 0x9, 0x5c, 0x6}, {0x6, 0x0, 0xbf, 0x200, 0x3, 0x1}, {0x0, 0x25, 0x53, 0x5, 0x4, 0x6}, {0x8530, 0xe1, 0x0, 0x1, 0x6, 0x6}, {0x0, 0x80, 0x5, 0x1, 0xb, 0x8999}, {0x0, 0x4, 0x400, 0x5, 0x8, 0x1}, {0x0, 0x0, 0x7fffffff, 0xf55, 0xfffffffa, 0x10}, {0x4, 0xf9b, 0x1, 0xa, 0x8, 0x2}, {0x2, 0x5, 0x200, 0x9, 0x9, 0x2}, {0x4, 0x4, 0xfffffff9, 0x8, 0x1, 0x2}, {0x3, 0x4, 0x0, 0x1, 0xff, 0x10001}, {0x6, 0x4, 0xfffffff3, 0x7, 0x6, 0xa}, {0x1, 0x10000, 0xfffffffb, 0x9, 0x77, 0x33d2}, {0xe894, 0x5, 0x9, 0x8, 0xcb, 0xd}, {0xb, 0x80, 0x8, 0x6, 0x3, 0x5}, {0xd, 0x10, 0x0, 0x2, 0x9}, {0x1, 0x2, 0x9, 0xf4, 0x4, 0xa50a}, {0xaf14, 0x3, 0x3, 0x7ff, 0xf5a9, 0x4}, {0x6, 0x5, 0x4, 0x5, 0xfff, 0x5}, {0x8, 0x0, 0x3, 0x5, 0x2, 0x2c36c92a}, {0x5, 0x0, 0xc07d, 0x3, 0xff, 0x6}, {0xd, 0x9, 0xfffff55c, 0x10000, 0x3, 0x7ff}, {0x8001, 0x7, 0xa18, 0xfff, 0x7c06, 0xc}, {0x10001, 0xdd, 0x9, 0xfffff556, 0x1, 0x1e4b8466}, {0x0, 0xff, 0x6, 0x7, 0x8, 0x9}, {0x6084, 0x1, 0x8, 0x5, 0x2, 0xdbb2}, {0xc, 0x2, 0x80, 0x7fff, 0x9, 0xdf42}, {0x2, 0x1, 0xa2, 0x0, 0x0, 0x7}, {0x400, 0x3, 0x9, 0x4, 0xffffffff, 0xffff}, {0x8, 0x2, 0x7, 0x7f, 0x101, 0x1ff}, {0x9, 0x81, 0x6, 0x1, 0xe8, 0x8}, {0x2, 0xbb, 0x5, 0x2, 0x8, 0x100}, {0x4b71, 0x8001, 0x6, 0x9, 0x7fff, 0x4}, {0x100, 0x9, 0xb7, 0xc488, 0x0, 0x8db}, {0x80, 0x0, 0xc, 0x8, 0xc, 0x200}, {0x372, 0x3, 0x4, 0x6e0b, 0x2, 0xe3f1}, {0x8d, 0x8, 0x5, 0x1, 0xc556, 0x3}, {0x2, 0x2, 0xed, 0xaa1, 0xfffffff7, 0x6}, {0x4, 0x57c6, 0x80000000, 0xc3, 0x6, 0xd}, {0x9, 0x9, 0xb, 0xfff, 0x2, 0x1}, {0x1, 0xff, 0x5, 0x5, 0x1, 0x9}], [{0x1, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5e4fb5088b61cff2}, {0x4}, {0x5}, {0x3}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x5}, {0x5, 0x1}, {}, {0x4}, {0x4}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x5}, {0x5}, {0x5}, {0x2da59ca39df7642}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {}, {0x2, 0x1}, {0x3}, {}, {}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xf04}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) (async) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0x6d, &(0x7f0000000280)={r13}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r13, @in6={{0xa, 0x4e23, 0x533, @mcast2, 0x4}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r13, @in6={{0xa, 0x4e23, 0x533, @mcast2, 0x4}}}, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={r14}, &(0x7f0000000080)=0x8) r15 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r15, 0x113, 0x4, 0x0, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r15, 0x113, 0x4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 16.579056783s ago: executing program 4 (id=1681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, r2, 0x10f, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000005, 0x4010, 0xffffffffffffffff, 0x4000) 16.528491522s ago: executing program 3 (id=1682): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000000611468000000000005000000000000009500000000000000779f9fa2e91cfa4af1ccc92c5a388253597a5af4a7db3b1ebf2645589098a327d63ecbd5e23c039b1c21acc73ea3ce5a35ff5c8d9aecbb8bbb1ce5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f00000000c0)={0x8, 0x100000001, 0x2, 0x4, 0x9}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000180ff5e21964151ff1811040000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f0000001200)={0x0, 0x1}, 0x8}, 0x94) r4 = socket(0x10, 0x80002, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000500)={r2, &(0x7f0000000100)='#+j$\x00', 0x424000, &(0x7f0000000440)={@_ha_fsid={[0x6, 0x10000]}, {0xd4, 0x9, 0xfffffff9, 0x2}}, 0x5, &(0x7f0000000480), &(0x7f00000004c0)=0x9}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000002300)={'gretap0\x00', &(0x7f0000002240)={'tunl0\x00', 0x0, 0x8, 0x700, 0x9, 0x648, {{0x1c, 0x4, 0x2, 0x1, 0x70, 0x64, 0x0, 0xec, 0x52, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010101, {[@timestamp_prespec={0x44, 0x1c, 0xea, 0x3, 0x9, [{@remote, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0xc1}]}, @timestamp_addr={0x44, 0x2c, 0x3f, 0x1, 0x4, [{@rand_addr=0x64010101, 0x101}, {@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x3}]}, @rr={0x7, 0x13, 0xd2, [@rand_addr=0x64010102, @broadcast, @local, @rand_addr=0x64010101]}]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r7}, 0x90) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000002400), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x5, 0x1e, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @generic={0x7f, 0x0, 0x1, 0x5, 0x7}, @alu={0x4, 0x1, 0x1, 0x6, 0x1, 0xffffffffffffffff, 0xa8e630423ee4c842}, @generic={0x6, 0x4, 0x7, 0x8, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6108, 0x0, 0x0, 0x0, 0x7}, @generic={0x3, 0x8, 0xe, 0x1, 0x2}]}, &(0x7f0000000640)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001240)=""/4096, 0x41100, 0x44, '\x00', r6, @fallback=0x1, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002340)={0x2, 0xf, 0xfff, 0x5}, 0x10, r8, r0, 0x0, &(0x7f0000002440)=[r9, r10], 0x0, 0x10, 0x1}, 0x94) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f00000002c0)=""/178, &(0x7f0000000380)=0xb2) 16.311216983s ago: executing program 4 (id=1683): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=@ipv6_delrule={0x48, 0x21, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x20, 0x80, 0x2, 0x8, 0x0, 0x0, 0x3, 0x3}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xffff}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0xf0}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b0001000000000000000000030100800c0002000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dbbdc72b1cd431e178c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f00"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 16.285463442s ago: executing program 3 (id=1684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe}, 0x38) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x2, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x3, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x43, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x80, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0x20f, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x7, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0xd20, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) close(r8) socket(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r10, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000001125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) socket$inet6(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) 16.149092734s ago: executing program 0 (id=1685): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x2b, @local, 0x4e20, 0x2000003, 'sh\x00', 0xf, 0x4, 0x76}, 0x2c) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000015000100fcfffffffcdbdf350f"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) tee(r1, r1, 0x5, 0x6) (async) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000640)="97000000", 0x4}, {&(0x7f00000000c0)="9e762d2f24d02a99cb0aa5", 0xb}, {&(0x7f0000002dc0)="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", 0x5ce}], 0x3, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010103}}}], 0x20}, 0x2400c804) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', r4, 0x2f, 0x1, 0x90, 0x800, 0x14, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x7800, 0x800, 0x3}}) 16.092967111s ago: executing program 1 (id=1686): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000420040008002900787d040008001b00"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x24, &(0x7f0000000000), 0x4) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 16.0523489s ago: executing program 2 (id=1687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x78, 0x0, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_QUOTA={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000880}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r3) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0xdc84}], 0x1, 0x100, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 15.952570284s ago: executing program 0 (id=1688): unshare(0x6a040000) unshare(0x800) (async) unshare(0x60400) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xa, 0x1, 0x0) (async) unshare(0xd9e279e6c4c16e9a) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 15.847424341s ago: executing program 1 (id=1689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x2, 0xb}, {0xfff1, 0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000001c0), 0x39) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) close(r13) r14 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r15, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x70fd2c, 0x5dddbbd, {0x0, 0x0, 0x0, r15, {0xc}, {}, {0x7, 0xfffa}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) (async) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)='\a', 0x1}], 0x1}, 0x20004014) (async) socket$nl_generic(0x10, 0x3, 0x10) 15.847051971s ago: executing program 3 (id=1690): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000022000106000200ea6356b50000000000000000000000aa"], 0x1c}], 0x1}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockname$packet(r1, 0x0, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x22757, 0x1400}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffff, 0x5c00800}}]}]}]}, 0x48}}, 0x24040800) 15.731196432s ago: executing program 2 (id=1691): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x140c, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000991) (async) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r1 = accept(r0, &(0x7f0000000440)=@ax25={{0x3, @null}, [@remote, @remote, @bcast, @null, @remote, @rose, @remote, @rose]}, &(0x7f0000000540)=0x80) sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f0000000580), 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=@ipv4_newnexthop={0xfc, 0x68, 0x2, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x1, 0x0, 0x1c}, [@NHA_RES_GROUP={0x44, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x601}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xc8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe}]}, @NHA_ENCAP={0x40, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x3c, 0x1, {0xfb, 0x38, 0x1, 0xd2, 0xe, [@mcast2, @local, @mcast2]}}}, @NHA_RES_GROUP={0x44, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x10a1}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x101}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x6a2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}]}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008801}, 0x40020) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r5, @ANYRES32], 0x40}}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000500), &(0x7f0000000280)=@udp=r5}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000fff8000002000005580004802c000180090001006d657461000000001c00028008000240000000090800014000000008080001400000001028000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x0) 15.708106321s ago: executing program 3 (id=1692): sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x33c, r1, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x96d6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x73c338}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80f0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5e5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf0000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20000}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa751}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xba}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd65fd6b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xede}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "b3cd2195251c0b0c4fc3ba704aa7e4fc8943f8d125405689b08c"}}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xce}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0xd4}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@rand_addr, @remote, 0x0}, &(0x7f0000000680)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000900)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x164, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x4895) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r7, 0x0, 0x1, &(0x7f0000000940), &(0x7f0000000980)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xa4, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40010}, 0x40) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r2) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000bc0)={0x384, r8, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff0}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbc63}]}, @TIPC_NLA_BEARER={0x178, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0xc}, 0xb}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @empty, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6704942}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72cecbe6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x41}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x1, 0x5, @remote, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x571880e1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6c9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa9c9}]}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e09}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6c8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7cd1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffadbb}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf38}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x4}, 0x20004084) sendto(r7, &(0x7f0000001000)='\n', 0x1, 0x80, &(0x7f0000001040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x1, 0x3, 0x2, {0xa, 0x4e20, 0x338, @remote, 0x4c}}}, 0x80) getsockname$unix(0xffffffffffffffff, &(0x7f00000010c0)=@abs, &(0x7f0000001140)=0x6e) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000001280)={&(0x7f0000001180), 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x30, r9, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x14, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x7ff}]}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000810) r10 = accept$inet(r7, &(0x7f00000012c0)={0x2, 0x0, @dev}, &(0x7f0000001300)=0x10) bind$inet(r10, &(0x7f0000001340)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r11, &(0x7f0000001600)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000015c0)={&(0x7f0000001400)={0x188, r12, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x58, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x70000}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x61}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x8c0}, 0x28000044) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000001640)) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, r13, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}]}, 0x24}, 0x1, 0x0, 0x0, 0xc8800}, 0xc1) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x68, r9, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x401, 0x3ff}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d63cb727a807"}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000c01}, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000001a00)={r0, &(0x7f0000001900)='TIPCv2\x00', 0x800, &(0x7f0000001940)={@_ha_fsid={[0x4, 0x10]}, {0x0, 0x9, 0x2, 0xffffffffffffffcd}}, 0xec6, &(0x7f0000001980), &(0x7f00000019c0)=0x10001}) sendmsg$IPSET_CMD_TYPE(r14, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x34, 0xd, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4005}, 0x20000800) 15.444132587s ago: executing program 1 (id=1693): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e1e, 0x5, @initdev={0xfe, 0x88, '\x00', 0x20, 0x0}, 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) (async) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 15.430584952s ago: executing program 0 (id=1694): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x1adb, 0x66f5, 0x0, 0x30412, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x2, 0x3, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xe}, 0x20, 0x8000, 0x7fff, 0x1ff}}) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001940), 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@bloom_filter={0x1e, 0x0, 0x30000000, 0x4, 0xc0225, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0xe}, 0x50) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000001c00)={{r0, &(0x7f0000001a80)='\x00', 0x42200, &(0x7f0000001ac0)={@_ha_fsid={[0xe, 0x2]}, {0x7, 0x401, 0xccd, 0x19}}, 0x9, &(0x7f0000001b00), &(0x7f0000001b40)=0xe243}, {[0x6, 0x3, 0x2]}, 0x24, 0x7e, &(0x7f0000001b80)=""/126}) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x1a, 0x14, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1ffe00}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @exit, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x7f, 0x1000, &(0x7f0000000880)=""/4096, 0x41100, 0x1, '\x00', r6, @tracing=0x19, r7, 0x8, &(0x7f0000001980)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000019c0)={0x4, 0x8, 0x400, 0xa}, 0x10, 0x0, r0, 0x4, &(0x7f0000001c80)=[0xffffffffffffffff, r8, 0x1, r9], &(0x7f0000001cc0)=[{0x0, 0x5, 0x2, 0x3}, {0x3, 0x5, 0x10, 0x5}, {0x4, 0x4, 0xd, 0x7}, {0x1, 0x2, 0xc, 0x9}], 0x10, 0x1}, 0x94) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "299246"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15.382720177s ago: executing program 1 (id=1695): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000002500000000000d00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000400"/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000da9e0000000000998500000000002174d5000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "80566ba2ba50dc45ee638dcd297d88e28ec00175e64b4fb24e448a24b9d9d771", "9d4a472fd54c2d8b439c2cbc8845efe7702ef8d0a7da9943eed625dfa8f6b887", "599b8ba4c1595abfdace8f553a9179c4de952dfebef8877b5681d4ee1bd9edd9", "1105ae55e8240295b492f1b864173f20374dcb1901a8cbd89f90df811a4bb5ad", "2280199939a2fec962d0f810b7e3c19a4d9013ac5f6850b23a353d17920dfa59", "000013f434bc0cdc6d4500", 0x235ffffd, 0x7, 0xc, 0x6, 0x800}}) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x8000, 0x9, 0xf, 0x4, 0x3, 0xac}, [@TCA_NETEM_CORR={0x10, 0x1, {0x6, 0x10, 0x8}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x200, 0xfffffffffffffffc, 0x8cb, 0x7, 0x8, 0x2}}]}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004001}, 0x20000000) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000500), &(0x7f0000000280)=@udp=r1}, 0x20) 15.276636623s ago: executing program 1 (id=1696): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x80, 0xd, 0x2, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x10, 0x4853, 0x400000}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xffffffff}) ioctl(r3, 0x8b22, &(0x7f0000000040)) (async) ioctl(r3, 0x8b22, &(0x7f0000000040)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x90}}, 0x20000000) 15.269376865s ago: executing program 1 (id=1697): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) (rerun: 32) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) (async, rerun: 32) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8800c00}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x34, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20008094) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r8, 0xffffffff00000000}, 0x38) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5a45030a3cb63c364e852b1d0b0ac8bbc455e170385fefb683affb65790000308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000080)="bafb5e5c21013cbf3ae3f8079a70fdab22ba44b431781784141d6d4910b7a82d2a3bdea00efcfef4e72739976c70b2f1c343da67798d222032b833a4375dec6a919484cb0b9fcaa731c8819bc4ac3fbd736e", &(0x7f0000000140)=""/14, &(0x7f0000000240)="f2ca8cbd01c462e6dad39364a6fb48c17d5fc2853d67845073fecf58eccf3979f54ae49a2d357ec4e2219660e9eabc266f8a96637dad2f61ee6920c1ce9637a6944782374cce58e5c293c5b3343dc7be79cf584b5fd043a62b173ba2f0996e31c323bdb52190ceec57ff5468e7bcd694e47dfef7", &(0x7f00000002c0)="5efdba1e7cbc336395be38535a426b061b35d0ded8213855caf9099a20e7e6072762b8b21121cebc6be70ca2114e84bc0e0e33b45a6dd33e5a388d303e7eddb541db4d12470ebe8ff4556a87c628a630d38f67865f3d18fd1f2e092f4fcbb1fef2a85d81e135ab2a31145645c610d0ad8aeba7e59f523d43cdc848efd4668c4d2b6ca91fc34c2fff197e6b624f05adf14a561c8a430d55df779d224779", 0x7, r8}, 0x38) sendmmsg$inet6(r9, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000180)="01cd871a14970f8494ca4465aef72ba21dc183aef868674a76fdf949dd96e6815636b4018cca3892ee96aef83e12c2978e46de95f5df9ff1e5f505474a2a188050cc2927cc8c12aa7e25aa6c6ad20b1e1f86417e0e7dee188d8833ee221a217a2a6710cbda551d425c7f8694719846a1c45e76e8c2417b2fc32d127898bcb53dc854da37b779cdce850cd2", 0x8b}], 0x1}}], 0x1, 0x20080058) (async, rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) (rerun: 32) close(r10) 1.235783732s ago: executing program 32 (id=1683): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=@ipv6_delrule={0x48, 0x21, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x20, 0x80, 0x2, 0x8, 0x0, 0x0, 0x3, 0x3}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xffff}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0xf0}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 208.104839ms ago: executing program 33 (id=1694): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x1adb, 0x66f5, 0x0, 0x30412, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x2, 0x3, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xe}, 0x20, 0x8000, 0x7fff, 0x1ff}}) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001940), 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@bloom_filter={0x1e, 0x0, 0x30000000, 0x4, 0xc0225, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0xe}, 0x50) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000001c00)={{r0, &(0x7f0000001a80)='\x00', 0x42200, &(0x7f0000001ac0)={@_ha_fsid={[0xe, 0x2]}, {0x7, 0x401, 0xccd, 0x19}}, 0x9, &(0x7f0000001b00), &(0x7f0000001b40)=0xe243}, {[0x6, 0x3, 0x2]}, 0x24, 0x7e, &(0x7f0000001b80)=""/126}) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x1a, 0x14, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1ffe00}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @exit, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x7f, 0x1000, &(0x7f0000000880)=""/4096, 0x41100, 0x1, '\x00', r6, @tracing=0x19, r7, 0x8, &(0x7f0000001980)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000019c0)={0x4, 0x8, 0x400, 0xa}, 0x10, 0x0, r0, 0x4, &(0x7f0000001c80)=[0xffffffffffffffff, r8, 0x1, r9], &(0x7f0000001cc0)=[{0x0, 0x5, 0x2, 0x3}, {0x3, 0x5, 0x10, 0x5}, {0x4, 0x4, 0xd, 0x7}, {0x1, 0x2, 0xc, 0x9}], 0x10, 0x1}, 0x94) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "299246"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 146.084246ms ago: executing program 34 (id=1697): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) (rerun: 32) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) (async, rerun: 32) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8800c00}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x34, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20008094) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r8, 0xffffffff00000000}, 0x38) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5a45030a3cb63c364e852b1d0b0ac8bbc455e170385fefb683affb65790000308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000080)="bafb5e5c21013cbf3ae3f8079a70fdab22ba44b431781784141d6d4910b7a82d2a3bdea00efcfef4e72739976c70b2f1c343da67798d222032b833a4375dec6a919484cb0b9fcaa731c8819bc4ac3fbd736e", &(0x7f0000000140)=""/14, &(0x7f0000000240)="f2ca8cbd01c462e6dad39364a6fb48c17d5fc2853d67845073fecf58eccf3979f54ae49a2d357ec4e2219660e9eabc266f8a96637dad2f61ee6920c1ce9637a6944782374cce58e5c293c5b3343dc7be79cf584b5fd043a62b173ba2f0996e31c323bdb52190ceec57ff5468e7bcd694e47dfef7", &(0x7f00000002c0)="5efdba1e7cbc336395be38535a426b061b35d0ded8213855caf9099a20e7e6072762b8b21121cebc6be70ca2114e84bc0e0e33b45a6dd33e5a388d303e7eddb541db4d12470ebe8ff4556a87c628a630d38f67865f3d18fd1f2e092f4fcbb1fef2a85d81e135ab2a31145645c610d0ad8aeba7e59f523d43cdc848efd4668c4d2b6ca91fc34c2fff197e6b624f05adf14a561c8a430d55df779d224779", 0x7, r8}, 0x38) sendmmsg$inet6(r9, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000180)="01cd871a14970f8494ca4465aef72ba21dc183aef868674a76fdf949dd96e6815636b4018cca3892ee96aef83e12c2978e46de95f5df9ff1e5f505474a2a188050cc2927cc8c12aa7e25aa6c6ad20b1e1f86417e0e7dee188d8833ee221a217a2a6710cbda551d425c7f8694719846a1c45e76e8c2417b2fc32d127898bcb53dc854da37b779cdce850cd2", 0x8b}], 0x1}}], 0x1, 0x20080058) (async, rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) (rerun: 32) close(r10) 89.924484ms ago: executing program 35 (id=1691): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x140c, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000991) (async) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r1 = accept(r0, &(0x7f0000000440)=@ax25={{0x3, @null}, [@remote, @remote, @bcast, @null, @remote, @rose, @remote, @rose]}, &(0x7f0000000540)=0x80) sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f0000000580), 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=@ipv4_newnexthop={0xfc, 0x68, 0x2, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x1, 0x0, 0x1c}, [@NHA_RES_GROUP={0x44, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x601}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xc8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe}]}, @NHA_ENCAP={0x40, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x3c, 0x1, {0xfb, 0x38, 0x1, 0xd2, 0xe, [@mcast2, @local, @mcast2]}}}, @NHA_RES_GROUP={0x44, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x10a1}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x101}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x6a2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}]}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008801}, 0x40020) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r5, @ANYRES32], 0x40}}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000500), &(0x7f0000000280)=@udp=r5}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000fff8000002000005580004802c000180090001006d657461000000001c00028008000240000000090800014000000008080001400000001028000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x0) 0s ago: executing program 36 (id=1692): sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x33c, r1, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x96d6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x73c338}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80f0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5e5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf0000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20000}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa751}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xba}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd65fd6b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xede}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "b3cd2195251c0b0c4fc3ba704aa7e4fc8943f8d125405689b08c"}}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xce}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0xd4}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@rand_addr, @remote, 0x0}, &(0x7f0000000680)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000900)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x164, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x4895) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r7, 0x0, 0x1, &(0x7f0000000940), &(0x7f0000000980)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xa4, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40010}, 0x40) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r2) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000bc0)={0x384, r8, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff0}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbc63}]}, @TIPC_NLA_BEARER={0x178, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0xc}, 0xb}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @empty, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6704942}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72cecbe6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x41}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x1, 0x5, @remote, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x571880e1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6c9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa9c9}]}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e09}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6c8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7cd1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffadbb}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf38}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x4}, 0x20004084) sendto(r7, &(0x7f0000001000)='\n', 0x1, 0x80, &(0x7f0000001040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x1, 0x3, 0x2, {0xa, 0x4e20, 0x338, @remote, 0x4c}}}, 0x80) getsockname$unix(0xffffffffffffffff, &(0x7f00000010c0)=@abs, &(0x7f0000001140)=0x6e) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000001280)={&(0x7f0000001180), 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x30, r9, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x14, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x7ff}]}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000810) r10 = accept$inet(r7, &(0x7f00000012c0)={0x2, 0x0, @dev}, &(0x7f0000001300)=0x10) bind$inet(r10, &(0x7f0000001340)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r11, &(0x7f0000001600)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000015c0)={&(0x7f0000001400)={0x188, r12, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x58, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x70000}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x61}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x8c0}, 0x28000044) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000001640)) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, r13, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}]}, 0x24}, 0x1, 0x0, 0x0, 0xc8800}, 0xc1) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x68, r9, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x401, 0x3ff}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d63cb727a807"}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000c01}, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000001a00)={r0, &(0x7f0000001900)='TIPCv2\x00', 0x800, &(0x7f0000001940)={@_ha_fsid={[0x4, 0x10]}, {0x0, 0x9, 0x2, 0xffffffffffffffcd}}, 0xec6, &(0x7f0000001980), &(0x7f00000019c0)=0x10001}) sendmsg$IPSET_CMD_TYPE(r14, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x34, 0xd, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4005}, 0x20000800) kernel console output (not intermixed with test programs): ng up backlog [ 137.966739][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.975882][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.276005][ T7260] syzkaller0: entered promiscuous mode [ 138.285275][ T7260] syzkaller0: entered allmulticast mode [ 138.318700][ T1126] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.350983][ T1126] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.380622][ T1126] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 138.410558][ T1126] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.439980][ T1126] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.460048][ T1126] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 138.585493][ T1126] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.619522][ T1126] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.662957][ T1126] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 138.691284][ T1126] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.722482][ T1126] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.739678][ T7304] __nla_validate_parse: 1 callbacks suppressed [ 138.739697][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'. [ 138.762771][ T1126] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 138.858430][ T7293] batman_adv: batadv0: Adding interface: dummy0 [ 138.865723][ T7293] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.892641][ T7293] batman_adv: batadv0: Interface activated: dummy0 [ 138.960928][ T7310] 8021q: adding VLAN 0 to HW filter on device bond4 [ 138.974019][ T7310] bond4 (unregistering): Released all slaves [ 139.158415][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.405'. [ 139.339744][ T7328] xt_CT: No such helper "snmp" [ 139.462640][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.409'. [ 139.515814][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.409'. [ 139.560430][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 139.599582][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.409'. [ 139.631901][ T7347] macvlan0: entered promiscuous mode [ 139.678903][ T7352] net_ratelimit: 27 callbacks suppressed [ 139.678925][ T7352] openvswitch: netlink: IP tunnel dst address not specified [ 139.715375][ T7352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.785984][ T7426] netlink: 32 bytes leftover after parsing attributes in process `syz.1.420'. [ 141.069369][ T7438] trusted_key: syz.3.426 sent an empty control message without MSG_MORE. [ 141.297130][ T7446] openvswitch: netlink: Missing valid actions attribute. [ 141.332233][ T7446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.386046][ T7446] netlink: 'syz.1.429': attribute type 1 has an invalid length. [ 141.407209][ T7446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.429'. [ 141.748456][ T7467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.435'. [ 141.862934][ T7472] ip6t_srh: unknown srh invflags 4000 [ 142.049505][ T7475] batadv_slave_0: entered promiscuous mode [ 142.066232][ T7475] batadv_slave_0: entered allmulticast mode [ 142.107191][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 142.359382][ T7498] netlink: 'syz.4.445': attribute type 32 has an invalid length. [ 143.254602][ T5619] IPVS: starting estimator thread 0... [ 143.354867][ T7553] IPVS: using max 25 ests per chain, 60000 per kthread [ 143.427662][ T7568] netlink: 'syz.4.464': attribute type 1 has an invalid length. [ 143.849860][ T7592] ipvlan1: entered promiscuous mode [ 143.855429][ T7592] ipvlan1: entered allmulticast mode [ 143.860744][ T7592] veth0_vlan: entered allmulticast mode [ 145.696315][ T7516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.346636][ T7631] veth1_to_bond: entered allmulticast mode [ 146.375187][ T7633] netlink: 'syz.4.482': attribute type 1 has an invalid length. [ 146.574175][ T7633] __nla_validate_parse: 9 callbacks suppressed [ 146.574196][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.482'. [ 146.628139][ T7638] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 146.711753][ T7642] veth3: entered promiscuous mode [ 146.731249][ T7642] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 146.757300][ T7644] veth1_to_bond: entered allmulticast mode [ 146.772855][ T7647] veth1_to_bond: left allmulticast mode [ 146.809748][ T7408] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 146.816314][ T7633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.840889][ T7641] tipc: Started in network mode [ 146.846303][ T7641] tipc: Node identity 5e3ec4d84492, cluster identity 4711 [ 146.857224][ T7641] tipc: Enabled bearer , priority 0 [ 146.884350][ T7648] syzkaller0: entered promiscuous mode [ 146.904664][ T7648] syzkaller0: entered allmulticast mode [ 146.936222][ T7641] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 146.988136][ T7406] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 147.031731][ T7631] veth1_to_bond: left allmulticast mode [ 147.043218][ T7662] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.491'. [ 147.056195][ T7641] tipc: Resetting bearer [ 147.071225][ T7662] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.080830][ T7640] tipc: Resetting bearer [ 147.126855][ T7640] tipc: Disabling bearer [ 147.788582][ T7693] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 147.917429][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 147.940928][ T7704] netlink: 240 bytes leftover after parsing attributes in process `syz.0.505'. [ 148.241393][ T7714] ipvlan2: entered promiscuous mode [ 148.336022][ T7721] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.395244][ T7721] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.406877][ T7721] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.419889][ T7721] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.432492][ T7721] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.444761][ T7721] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.464805][ T7721] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.475832][ T7721] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.486600][ T7721] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.498176][ T7721] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.771660][ T7732] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 148.807854][ T7732] team0: Device ipvlan2 is already an upper device of the team interface [ 148.861521][ T7740] netlink: 808 bytes leftover after parsing attributes in process `syz.2.515'. [ 148.894362][ T7741] netlink: 808 bytes leftover after parsing attributes in process `syz.2.515'. [ 149.126572][ T7746] nbd: couldn't find device at index 134217728 [ 149.154764][ T7745] nbd: couldn't find device at index 134217728 [ 149.480919][ T7753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.498903][ T7746] lo speed is unknown, defaulting to 1000 [ 149.568092][ T7745] lo speed is unknown, defaulting to 1000 [ 149.987120][ T7774] veth0: entered promiscuous mode [ 149.995558][ T7778] vcan0: entered allmulticast mode [ 150.210968][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 150.221248][ T7773] veth0: left promiscuous mode [ 150.221676][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 150.419631][ T7794] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 150.473644][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 150.492648][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.559200][ T7797] bridge3: entered promiscuous mode [ 150.566424][ T7797] bridge3: entered allmulticast mode [ 150.824449][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 150.916355][ T7816] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 150.934782][ T7816] netlink: 'syz.0.538': attribute type 2 has an invalid length. [ 151.045734][ T7813] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 151.155643][ T7828] netlink: 'syz.0.538': attribute type 8 has an invalid length. [ 151.367750][ T7843] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 151.767525][ T7865] syzkaller0: entered promiscuous mode [ 151.795806][ T7865] syzkaller0: entered allmulticast mode [ 152.047837][ T7881] __nla_validate_parse: 1 callbacks suppressed [ 152.047856][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 152.269901][ T7886] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 152.285749][ T7886] bond3 (unregistering): Released all slaves [ 152.355008][ T7894] netlink: 'syz.0.558': attribute type 3 has an invalid length. [ 152.424904][ T7894] IPVS: length: 139 != 8 [ 152.629530][ T7900] nbd1: detected capacity change from 0 to 63 [ 152.662340][ T7900] netlink: 40 bytes leftover after parsing attributes in process `syz.3.560'. [ 152.734210][ T7913] netlink: 'syz.0.563': attribute type 7 has an invalid length. [ 152.747874][ T7913] netlink: 140 bytes leftover after parsing attributes in process `syz.0.563'. [ 152.857206][ T5649] block nbd1: Receive control failed (result -104) [ 153.201482][ T7929] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 153.530753][ T30] audit: type=1800 audit(1783977752.735:4): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.578" name="memory.events" dev="tmpfs" ino=616 res=0 errno=0 [ 153.560331][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 153.601767][ T7949] syzkaller1: entered promiscuous mode [ 153.623921][ T30] audit: type=1800 audit(1783977752.735:5): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.578" name="memory.events" dev="tmpfs" ino=616 res=0 errno=0 [ 153.667157][ T7949] syzkaller1: entered allmulticast mode [ 153.742924][ T30] audit: type=1800 audit(1783977752.765:6): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.578" name="memory.events" dev="tmpfs" ino=616 res=0 errno=0 [ 153.851197][ T30] audit: type=1800 audit(1783977752.765:7): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.578" name="memory.events" dev="tmpfs" ino=616 res=0 errno=0 [ 153.920350][ T30] audit: type=1800 audit(1783977752.765:8): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.578" name="memory.events" dev="tmpfs" ino=616 res=0 errno=0 [ 153.950788][ T30] audit: type=1800 audit(1783977752.765:9): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.578" name="memory.events" dev="tmpfs" ino=616 res=0 errno=0 [ 153.967671][ T7966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.094953][ T7968] syzkaller0: entered promiscuous mode [ 154.129239][ T7968] syzkaller0: entered allmulticast mode [ 154.175952][ T7976] xt_hashlimit: size too large, truncated to 1048576 [ 154.294752][ T7982] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.340219][ T7982] bridge_slave_0 (unregistering): left allmulticast mode [ 154.374592][ T7982] bridge_slave_0 (unregistering): left promiscuous mode [ 154.413338][ T7982] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.481513][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'. [ 154.525405][ T7984] syzkaller0: entered promiscuous mode [ 154.539043][ T7984] syzkaller0: entered allmulticast mode [ 154.633761][ T7996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.590'. [ 154.645268][ T7996] openvswitch: netlink: Flow key attr not present in new flow. [ 154.941216][ T8008] sctp: [Deprecated]: syz.2.595 (pid 8008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.941216][ T8008] Use struct sctp_sack_info instead [ 155.047810][ T8009] tipc: Started in network mode [ 155.069554][ T8009] tipc: Node identity a25b51c7a7ae, cluster identity 4711 [ 155.095594][ T8009] tipc: Enabled bearer , priority 0 [ 155.116813][ T8016] netlink: 2308 bytes leftover after parsing attributes in process `syz.4.598'. [ 155.207739][ T8019] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 155.288707][ T8024] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.297976][ T8024] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 155.342081][ T8026] netlink: 'syz.4.602': attribute type 11 has an invalid length. [ 155.425524][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 155.489721][ T8032] xfrm1: entered promiscuous mode [ 155.505102][ T8032] xfrm1: entered allmulticast mode [ 155.789666][ T8009] tipc: Disabling bearer [ 155.999967][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 156.015658][ T8060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.610'. [ 156.474956][ T8081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.654805][ T8087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.687255][ T7284] lo speed is unknown, defaulting to 1000 [ 156.693223][ T7284] syú2: Port: 1 Link DOWN [ 156.885002][ T8094] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 156.996323][ T8094] bond4 (unregistering): Released all slaves [ 157.258350][ T8122] ip6t_srh: unknown srh invflags 4000 [ 157.330821][ T8127] __nla_validate_parse: 3 callbacks suppressed [ 157.330840][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'. [ 157.347560][ T8127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.629'. [ 157.357053][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'. [ 157.366351][ T8127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.629'. [ 157.584366][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 157.615574][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 157.683444][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 157.927718][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 158.329293][ T8174] netlink: 48 bytes leftover after parsing attributes in process `syz.0.644'. [ 158.440353][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 158.592197][ T7404] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.618213][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.649398][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.670255][ T8188] netlink: 'syz.1.650': attribute type 2 has an invalid length. [ 158.680175][ T8188] netlink: 'syz.1.650': attribute type 11 has an invalid length. [ 158.686761][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.805397][ T8191] sctp: [Deprecated]: syz.4.651 (pid 8191) Use of int in max_burst socket option. [ 158.805397][ T8191] Use struct sctp_assoc_value instead [ 158.956946][ T8203] tap0: tun_chr_ioctl cmd 2148553947 [ 159.280846][ T8217] syzkaller0: entered promiscuous mode [ 159.318208][ T8217] syzkaller0: entered allmulticast mode [ 159.795637][ T8248] nbd: must specify a size in bytes for the device [ 160.408707][ T8276] bond4 (unregistering): Released all slaves [ 160.547514][ T8275] syzkaller0: entered promiscuous mode [ 160.559440][ T8275] syzkaller0: entered allmulticast mode [ 160.752872][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.270816][ T8319] x_tables: duplicate underflow at hook 3 [ 161.288523][ T8314] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20003 [ 161.553321][ T8332] syzkaller0: entered promiscuous mode [ 161.575725][ T8332] syzkaller0: entered allmulticast mode [ 161.683822][ T8338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.050935][ T8350] veth0: entered promiscuous mode [ 162.145351][ T8354] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 162.168380][ T8354] bond4 (unregistering): Released all slaves [ 162.379891][ T8350] syzkaller0: entered promiscuous mode [ 162.408356][ T8350] syzkaller0: entered allmulticast mode [ 162.513048][ T8373] __nla_validate_parse: 13 callbacks suppressed [ 162.513068][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 162.551929][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 162.732163][ T8377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.701'. [ 162.761800][ T8381] IPVS: length: 4096 != 8 [ 165.219324][ T8348] veth0: left promiscuous mode [ 165.597831][ T8456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.710'. [ 165.614371][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 165.743430][ T8476] netlink: 'syz.4.716': attribute type 1 has an invalid length. [ 165.870965][ T8476] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.198881][ T8498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'. [ 166.412795][ T8513] netlink: 96 bytes leftover after parsing attributes in process `syz.4.722'. [ 166.715042][ T8528] netlink: 'syz.0.727': attribute type 1 has an invalid length. [ 166.771383][ T8528] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 166.775185][ T8517] tun0: tun_chr_ioctl cmd 1074025675 [ 166.840568][ T8517] tun0: persist disabled [ 166.965745][ T8548] netlink: 44 bytes leftover after parsing attributes in process `syz.0.731'. [ 167.028568][ T8553] netlink: 44 bytes leftover after parsing attributes in process `syz.0.731'. [ 167.211422][ T8561] netlink: 808 bytes leftover after parsing attributes in process `syz.2.733'. [ 167.281103][ T8560] vlan2: entered allmulticast mode [ 167.302510][ T8560] bond0: entered allmulticast mode [ 167.332219][ T8560] bond_slave_0: entered allmulticast mode [ 167.351441][ T8560] bond_slave_1: entered allmulticast mode [ 167.383147][ T8569] netlink: 'syz.4.735': attribute type 2 has an invalid length. [ 167.398509][ T8567] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 167.453592][ T8567] openvswitch: netlink: Message has 512 unknown bytes. [ 167.548319][ T8573] __nla_validate_parse: 1 callbacks suppressed [ 167.548338][ T8573] netlink: 60 bytes leftover after parsing attributes in process `syz.2.737'. [ 167.688084][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 167.724922][ T8577] tap0: tun_chr_ioctl cmd 1074025676 [ 167.739018][ T8577] tap0: owner set to 0 [ 167.744253][ T8586] netlink: 'syz.3.742': attribute type 32 has an invalid length. [ 167.753056][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.742'. [ 167.948456][ T8586] bond4: Setting coupled_control to off (0) [ 168.286898][ T8620] netlink: 4604 bytes leftover after parsing attributes in process `syz.1.749'. [ 168.333359][ T8617] xt_hashlimit: size too large, truncated to 1048576 [ 168.387807][ T8624] netlink: 'syz.0.748': attribute type 1 has an invalid length. [ 168.430310][ T8624] netlink: 'syz.0.748': attribute type 3 has an invalid length. [ 168.493762][ T8624] netlink: 224 bytes leftover after parsing attributes in process `syz.0.748'. [ 169.754287][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'. [ 169.817337][ T7282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.279729][ T8701] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.758'. [ 170.350784][ T8701] 0ªX¹¦Dö»: renamed from gretap0 [ 170.416285][ T8701] 0ªX¹¦Dö»: entered allmulticast mode [ 170.481515][ T8706] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 170.580941][ T8706] netlink: 76 bytes leftover after parsing attributes in process `syz.2.761'. [ 170.722421][ T8710] tipc: Can't bind to reserved service type 1 [ 170.750155][ T8710] netlink: 'syz.0.762': attribute type 1 has an invalid length. [ 170.866751][ T7279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.939413][ T8717] lo speed is unknown, defaulting to 1000 [ 170.953717][ T8717] lo speed is unknown, defaulting to 1000 [ 170.980021][ T8717] lo speed is unknown, defaulting to 1000 [ 170.995772][ T8717] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 171.043866][ T8717] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 171.103454][ T8717] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 171.157846][ T8722] ip6gre2: entered promiscuous mode [ 171.189801][ T8722] ip6gre2: entered allmulticast mode [ 171.248718][ T8733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.769'. [ 171.322426][ T8717] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 171.451466][ T8717] lo speed is unknown, defaulting to 1000 [ 171.481242][ T8717] lo speed is unknown, defaulting to 1000 [ 171.513347][ T8717] lo speed is unknown, defaulting to 1000 [ 171.534353][ T8717] lo speed is unknown, defaulting to 1000 [ 171.570134][ T8717] lo speed is unknown, defaulting to 1000 [ 171.642834][ T8721] smbdirect: ib_dev[syú2] removed [ 171.785194][ T8751] netlink: 104 bytes leftover after parsing attributes in process `syz.0.775'. [ 171.865919][ T8756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.907595][ T7279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.985864][ T7285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.156319][ T7285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.386789][ T8785] lo: entered promiscuous mode [ 172.399983][ T8785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.552898][ T8792] netlink: 'syz.0.787': attribute type 1 has an invalid length. [ 172.625606][ T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.690974][ T8792] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.727725][ T8801] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 172.946011][ T7279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.543869][ T8841] __nla_validate_parse: 35 callbacks suppressed [ 173.543888][ T8841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.802'. [ 173.902961][ T8856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.808'. [ 173.989573][ T7276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.189863][ T8872] netlink: 104 bytes leftover after parsing attributes in process `syz.1.814'. [ 174.222394][ T8874] xt_l2tp: missing protocol rule (udp|l2tpip) [ 174.448869][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 174.492122][ T8889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.820'. [ 174.504012][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 174.519483][ T8889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.820'. [ 174.752438][ T8906] netlink: 96 bytes leftover after parsing attributes in process `syz.4.824'. [ 174.826686][ T8906] vlan1: entered allmulticast mode [ 174.845434][ T8906] gretap0: entered allmulticast mode [ 174.882970][ T8906] xt_TPROXY: Can be used only with -p tcp or -p udp [ 175.025731][ T7411] wlan1: Trigger new scan to find an IBSS to join [ 175.061158][ T8916] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 175.069149][ T8916] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 175.105356][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'. [ 175.130894][ T8916] hsr_slave_0: left promiscuous mode [ 175.155212][ T8916] hsr_slave_1: left promiscuous mode [ 175.429903][ T8931] tun0: tun_chr_ioctl cmd 1074025675 [ 175.435444][ T8931] tun0: persist enabled [ 175.997430][ T8920] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.029930][ T8920] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 176.118514][ T8960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.838'. [ 176.204279][ T8920] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.228574][ T8920] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 176.305147][ T8969] netlink: 'syz.4.840': attribute type 21 has an invalid length. [ 176.380467][ T8920] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.393118][ T8920] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 176.446193][ T8976] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 176.489280][ T8968] bond4: entered allmulticast mode [ 176.509534][ T8968] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.565944][ T8920] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 176.593052][ T8920] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 176.818090][ T8990] netlink: 'syz.4.843': attribute type 1 has an invalid length. [ 176.968516][ T8993] syzkaller0: entered promiscuous mode [ 176.974036][ T8993] syzkaller0: entered allmulticast mode [ 177.037373][ T8997] veth7: entered promiscuous mode [ 177.048664][ T8997] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 177.060994][ T8999] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 177.065709][ T9003] 8021q: adding VLAN 0 to HW filter on device bond5 [ 177.720106][ T9014] netlink: 'syz.2.849': attribute type 1 has an invalid length. [ 177.996037][ T36] wlan1: Trigger new scan to find an IBSS to join [ 179.237964][ T9043] __nla_validate_parse: 3 callbacks suppressed [ 179.237983][ T9043] netlink: 48 bytes leftover after parsing attributes in process `syz.1.856'. [ 179.836116][ T9068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.151836][ T9085] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 180.199551][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'. [ 180.320586][ T9043] netlink: 64 bytes leftover after parsing attributes in process `syz.1.856'. [ 180.351747][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 180.472995][ T9094] team0: Port device team_slave_0 removed [ 180.569953][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.871'. [ 180.685904][ T9112] netlink: 156 bytes leftover after parsing attributes in process `syz.4.872'. [ 180.707648][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 180.748182][ T9117] netlink: 'syz.3.873': attribute type 1 has an invalid length. [ 180.757242][ T9117] netlink: 'syz.3.873': attribute type 2 has an invalid length. [ 181.192794][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 181.235225][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 181.326794][ T9152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.683776][ T9167] netlink: 236 bytes leftover after parsing attributes in process `syz.1.883'. [ 181.725830][ T9167] netlink: 'syz.1.883': attribute type 10 has an invalid length. [ 181.767872][ T9169] veth3: entered allmulticast mode [ 181.826303][ T9167] veth0_to_bond: entered allmulticast mode [ 181.834282][ T9167] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 182.165192][ T9186] xt_hashlimit: size too large, truncated to 1048576 [ 182.275785][ T9185] bond3: entered allmulticast mode [ 182.301973][ T9185] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.865070][ T1618] block nbd1: Possible stuck request ffff888028887000: control (read@0,1024B). Runtime 30 seconds [ 182.876984][ T1618] block nbd1: Possible stuck request ffff8880288871c0: control (read@1024,1024B). Runtime 30 seconds [ 182.891555][ T1618] block nbd1: Possible stuck request ffff888028887380: control (read@2048,1024B). Runtime 30 seconds [ 182.902687][ T1618] block nbd1: Possible stuck request ffff888028887540: control (read@3072,1024B). Runtime 30 seconds [ 183.456043][ T9257] FAULT_INJECTION: forcing a failure. [ 183.456043][ T9257] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 183.528870][ T9257] CPU: 1 UID: 0 PID: 9257 Comm: syz.2.901 Not tainted syzkaller #0 PREEMPT(full) [ 183.528901][ T9257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 183.528922][ T9257] Call Trace: [ 183.528930][ T9257] [ 183.528939][ T9257] dump_stack_lvl+0xe8/0x150 [ 183.528989][ T9257] should_fail_ex+0x40c/0x560 [ 183.529020][ T9257] _copy_from_user+0x2d/0xb0 [ 183.529052][ T9257] ___sys_sendmsg+0x1c6/0x360 [ 183.529085][ T9257] ? __lock_acquire+0x683/0x2cf0 [ 183.529119][ T9257] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.529189][ T9257] ? __fget_files+0x2a/0x420 [ 183.529217][ T9257] ? __fget_files+0x3a2/0x420 [ 183.529254][ T9257] __x64_sys_sendmsg+0x1b1/0x290 [ 183.529289][ T9257] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.529341][ T9257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.529364][ T9257] do_syscall_64+0x174/0x580 [ 183.529393][ T9257] ? trace_irq_disable+0x3b/0x140 [ 183.529419][ T9257] ? clear_bhb_loop+0x40/0x90 [ 183.529445][ T9257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.529472][ T9257] RIP: 0033:0x7eff2fb9de59 [ 183.529507][ T9257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.529524][ T9257] RSP: 002b:00007eff30a8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.529555][ T9257] RAX: ffffffffffffffda RBX: 00007eff2fe26180 RCX: 00007eff2fb9de59 [ 183.529571][ T9257] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 183.529585][ T9257] RBP: 00007eff30a8d090 R08: 0000000000000000 R09: 0000000000000000 [ 183.529598][ T9257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.529611][ T9257] R13: 00007eff2fe26218 R14: 00007eff2fe26180 R15: 00007fff9f2abd38 [ 183.529645][ T9257] [ 183.768756][ T9250] syzkaller0: entered promiscuous mode [ 183.786848][ T9250] syzkaller0: entered allmulticast mode [ 183.995890][ T9227] netlink: 'syz.1.897': attribute type 3 has an invalid length. [ 186.689859][ T9351] __nla_validate_parse: 5 callbacks suppressed [ 186.689879][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 186.834146][ T9355] syzkaller1: entered promiscuous mode [ 186.847315][ T9355] syzkaller1: entered allmulticast mode [ 186.860782][ T9353] syzkaller0: entered promiscuous mode [ 186.873864][ T9353] syzkaller0: entered allmulticast mode [ 187.263649][ T9384] syzkaller0: entered promiscuous mode [ 187.271895][ T9384] syzkaller0: entered allmulticast mode [ 187.280515][ T9384] FAULT_INJECTION: forcing a failure. [ 187.280515][ T9384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.307309][ T9384] CPU: 0 UID: 0 PID: 9384 Comm: syz.2.922 Not tainted syzkaller #0 PREEMPT(full) [ 187.307332][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 187.307341][ T9384] Call Trace: [ 187.307347][ T9384] [ 187.307354][ T9384] dump_stack_lvl+0xe8/0x150 [ 187.307386][ T9384] should_fail_ex+0x40c/0x560 [ 187.307408][ T9384] _copy_from_user+0x2d/0xb0 [ 187.307432][ T9384] __copy_msghdr+0x390/0x590 [ 187.307471][ T9384] ___sys_sendmsg+0x213/0x360 [ 187.307496][ T9384] ? __lock_acquire+0x683/0x2cf0 [ 187.307526][ T9384] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.307587][ T9384] ? __fget_files+0x2a/0x420 [ 187.307611][ T9384] ? __fget_files+0x3a2/0x420 [ 187.307644][ T9384] __x64_sys_sendmsg+0x1b1/0x290 [ 187.307675][ T9384] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.307722][ T9384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.307743][ T9384] do_syscall_64+0x174/0x580 [ 187.307769][ T9384] ? trace_irq_disable+0x3b/0x140 [ 187.307793][ T9384] ? clear_bhb_loop+0x40/0x90 [ 187.307835][ T9384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.307855][ T9384] RIP: 0033:0x7eff2fb9de59 [ 187.307874][ T9384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.307891][ T9384] RSP: 002b:00007eff30acf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.307912][ T9384] RAX: ffffffffffffffda RBX: 00007eff2fe25fa0 RCX: 00007eff2fb9de59 [ 187.307927][ T9384] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 187.307940][ T9384] RBP: 00007eff30acf090 R08: 0000000000000000 R09: 0000000000000000 [ 187.307952][ T9384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.307963][ T9384] R13: 00007eff2fe26038 R14: 00007eff2fe25fa0 R15: 00007fff9f2abd38 [ 187.307996][ T9384] [ 187.694836][ T9394] syzkaller0: entered promiscuous mode [ 187.706492][ T9394] syzkaller0: entered allmulticast mode [ 187.893045][ T9403] syzkaller1: entered promiscuous mode [ 187.910232][ T9403] syzkaller1: entered allmulticast mode [ 188.181662][ T9414] syzkaller0: entered promiscuous mode [ 188.187778][ T9414] syzkaller0: entered allmulticast mode [ 188.195026][ T9418] batadv_slave_1: entered promiscuous mode [ 188.228503][ T9417] batadv_slave_1: left promiscuous mode [ 188.619744][ T9438] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 188.666307][ T9438] bond6: entered promiscuous mode [ 188.678987][ T9438] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.750870][ T9438] bond6: (slave bridge1): making interface the new active one [ 188.758527][ T9438] bridge1: entered promiscuous mode [ 188.779541][ T9438] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 188.868481][ T9449] netlink: 'syz.0.943': attribute type 16 has an invalid length. [ 188.890620][ T9449] netlink: 48 bytes leftover after parsing attributes in process `syz.0.943'. [ 188.905836][ T9449] veth0_macvtap: entered allmulticast mode [ 188.913997][ T9449] netlink: 40 bytes leftover after parsing attributes in process `syz.0.943'. [ 189.018571][ T9451] vlan2: entered allmulticast mode [ 189.023936][ T9451] bond0: entered allmulticast mode [ 189.038283][ T9451] bond_slave_0: entered allmulticast mode [ 189.044172][ T9451] bond_slave_1: entered allmulticast mode [ 189.173121][ T9466] netlink: 'syz.1.949': attribute type 10 has an invalid length. [ 189.272913][ T9466] dummy0: entered allmulticast mode [ 189.302638][ T9466] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 189.322002][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'. [ 189.527472][ T9484] netlink: 56 bytes leftover after parsing attributes in process `syz.1.953'. [ 189.589198][ T9484] netlink: 'syz.1.953': attribute type 11 has an invalid length. [ 189.691979][ T9490] netlink: 'syz.1.953': attribute type 1 has an invalid length. [ 189.731251][ T9484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.953'. [ 189.742159][ T9500] netlink: 'syz.0.958': attribute type 2 has an invalid length. [ 189.765618][ T9490] netlink: 228 bytes leftover after parsing attributes in process `syz.1.953'. [ 189.786854][ T9484] netlink: 36 bytes leftover after parsing attributes in process `syz.1.953'. [ 189.957485][ T30] audit: type=1804 audit(1783977789.165:10): pid=9506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.960" name="/newroot/193/cgroup.controllers" dev="tmpfs" ino=999 res=1 errno=0 [ 190.021685][ T30] audit: type=1800 audit(1783977789.165:11): pid=9506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.960" name="cgroup.controllers" dev="tmpfs" ino=999 res=0 errno=0 [ 190.304239][ T9524] netlink: 'syz.0.965': attribute type 2 has an invalid length. [ 190.328642][ T9524] netlink: 'syz.0.965': attribute type 2 has an invalid length. [ 190.373472][ T9520] lo speed is unknown, defaulting to 1000 [ 190.378299][ T9524] netlink: 'syz.0.965': attribute type 3 has an invalid length. [ 190.415095][ T9524] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 190.663564][ T9537] syzkaller0: entered promiscuous mode [ 190.676164][ T9537] syzkaller0: entered allmulticast mode [ 190.772212][ T9548] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 190.923794][ T9553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.973'. [ 190.995255][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.973'. [ 191.008255][ T9548] block nbd0: reconnected socket [ 191.013261][ T9548] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 191.021540][ T9548] nbd: error processing sock list [ 191.050079][ T9551] bond5: (slave geneve3): making interface the new active one [ 191.060199][ T9551] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 191.241161][ T9553] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.263295][ T7411] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.274063][ T5649] block nbd0: Receive control failed (result -104) [ 191.298192][ T7411] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.308175][ T7411] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.327236][ T9559] tc_dump_action: action bad kind [ 191.417141][ T7411] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.463919][ T9563] Bluetooth: MGMT ver 1.23 [ 191.826181][ T9587] openvswitch: netlink: Message has 12 unknown bytes. [ 191.844186][ T9587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.212474][ T9600] __nla_validate_parse: 4 callbacks suppressed [ 192.212495][ T9600] netlink: 666 bytes leftover after parsing attributes in process `syz.1.988'. [ 192.288371][ T9604] netlink: 76 bytes leftover after parsing attributes in process `syz.3.990'. [ 192.315544][ T9604] nbd: illegal input index 65508 [ 192.459538][ T9603] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 192.585970][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 192.626621][ T9613] netlink: 224 bytes leftover after parsing attributes in process `syz.4.993'. [ 192.642237][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 192.972342][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 193.049287][ T9640] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1000'. [ 193.061632][ T9640] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1000'. [ 193.169273][ T9640] siw: device registration error -23 [ 193.371662][ T9652] syzkaller0: entered promiscuous mode [ 193.392804][ T9652] syzkaller0: entered allmulticast mode [ 193.425291][ T9659] xt_TCPMSS: Only works on TCP SYN packets [ 193.470839][ T9661] xt_TCPMSS: Only works on TCP SYN packets [ 193.674027][ T9664] ip6gretap0: entered promiscuous mode [ 193.693603][ T9664] ip6gretap0: entered allmulticast mode [ 193.758476][ T9669] lo: entered allmulticast mode [ 193.821783][ T9667] lo: left allmulticast mode [ 193.849190][ T9675] lo: left promiscuous mode [ 193.866980][ T9675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.072952][ T9695] validate_nla: 2 callbacks suppressed [ 194.072969][ T9695] netlink: 'syz.1.1015': attribute type 2 has an invalid length. [ 194.389354][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.467372][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1019'. [ 194.814440][ T9735] Bluetooth: MGMT ver 1.23 [ 194.939685][ T9738] syzkaller0: entered promiscuous mode [ 194.957276][ T9738] syzkaller0: entered allmulticast mode [ 195.050437][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 195.339052][ T9762] openvswitch: netlink: Duplicate or invalid key (type 0). [ 195.361980][ T9762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.561735][ T9818] __nla_validate_parse: 1 callbacks suppressed [ 197.561755][ T9818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1038'. [ 197.598986][ T9822] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1039'. [ 197.714330][ T9826] team0: Device ipvlan2 is already an upper device of the team interface [ 197.980613][ T9841] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1047'. [ 198.029225][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'. [ 198.043566][ T9841] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1047'. [ 198.087339][ T9845] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1046'. [ 198.205257][ T9843] bridge2: port 1(erspan0) entered blocking state [ 198.222345][ T9843] bridge2: port 1(erspan0) entered disabled state [ 198.231597][ T9843] erspan0: entered allmulticast mode [ 198.249597][ T9843] erspan0: entered promiscuous mode [ 198.620520][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 198.701897][ T9869] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 198.801334][ T9871] bond6: Unable to set up delay as MII monitoring is disabled [ 198.843187][ T9871] bond6 (unregistering): Released all slaves [ 198.998339][ T9884] syzkaller0: entered promiscuous mode [ 199.038824][ T9884] syzkaller0: entered allmulticast mode [ 199.312923][ T9895] IPVS: persistence engine module ip_vs_pe_À not found [ 199.491347][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1067'. [ 199.645030][ T9917] syzkaller0: entered promiscuous mode [ 199.660485][ T9917] syzkaller0: entered allmulticast mode [ 199.690639][ T9920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1071'. [ 199.913315][ T9932] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1075'. [ 199.925235][ T9930] netlink: 'syz.0.1074': attribute type 3 has an invalid length. [ 200.254407][ T9956] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 200.372681][ T9956] bond6: entered promiscuous mode [ 200.388750][ T9956] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.832298][ T9986] bond6: Unable to set up delay as MII monitoring is disabled [ 200.842670][ T9986] bond6 (unregistering): Released all slaves [ 200.878792][ T9989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.897297][ T9992] x_tables: duplicate entry at hook 1 [ 201.229858][T10003] netlink: 'syz.3.1094': attribute type 3 has an invalid length. [ 202.188586][T10052] ipip1: entered promiscuous mode [ 202.193880][T10052] ipip1: entered allmulticast mode [ 202.411422][T10041] bond6: entered promiscuous mode [ 202.422685][T10041] bond6: entered allmulticast mode [ 202.430136][T10041] 8021q: adding VLAN 0 to HW filter on device bond6 [ 202.547846][T10081] netlink: 'syz.3.1118': attribute type 5 has an invalid length. [ 202.577258][T10081] netlink: 'syz.3.1118': attribute type 6 has an invalid length. [ 202.594719][T10081] __nla_validate_parse: 5 callbacks suppressed [ 202.594739][T10081] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1118'. [ 202.843505][T10088] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 202.986972][T10099] sctp: [Deprecated]: syz.2.1124 (pid 10099) Use of int in max_burst socket option. [ 202.986972][T10099] Use struct sctp_assoc_value instead [ 203.172702][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1126'. [ 204.606428][T10123] netlink: 'syz.1.1129': attribute type 8 has an invalid length. [ 204.664676][T10124] tipc: Enabling of bearer rejected, failed to enable media [ 204.776139][T10116] syzkaller0: entered promiscuous mode [ 204.785536][T10116] syzkaller0: entered allmulticast mode [ 204.909469][T10129] netlink: 'syz.4.1131': attribute type 2 has an invalid length. [ 204.936321][T10129] netlink: 'syz.4.1131': attribute type 2 has an invalid length. [ 205.217613][T10147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'. [ 205.267606][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'. [ 205.357419][T10154] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20003 [ 205.432270][T10154] bridge4: entered promiscuous mode [ 205.441831][T10154] bridge4: entered allmulticast mode [ 205.455009][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.471534][T10162] bond1: option mode: unable to set because the bond device is up [ 205.489668][T10160] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 205.489759][T10161] bond1: option mode: unable to set because the bond device is up [ 205.505806][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.527680][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.538514][T10160] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 205.550450][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.581812][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.604009][T10160] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 205.612498][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.612557][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.612590][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.612622][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.612654][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.644049][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1144'. [ 205.661935][T10163] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.669214][T10163] bridge0: port 1(bridge_slave_0) entered listening state [ 205.687288][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.705887][T10160] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 205.723041][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.732955][T10168] netlink: 'syz.2.1144': attribute type 24 has an invalid length. [ 205.739901][T10160] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 205.771467][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.793169][T10160] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 205.809131][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.817021][T10163] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 205.821504][T10160] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 205.846240][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.855424][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.862629][ T77] bridge0: port 2(bridge_slave_1) entered listening state [ 205.870966][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.887558][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.913961][T10160] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 205.928826][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.953130][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.960636][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.968292][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.975680][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 205.980090][T10170] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1146'. [ 205.982957][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 206.000194][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 206.007991][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 206.042250][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 206.089317][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 206.110327][T10172] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 206.146204][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 206.183356][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 206.206108][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 206.223790][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 206.241160][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 206.257038][T10158] IPVS: set_ctl: invalid protocol: 103 0.0.0.44:20001 [ 206.280590][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1150'. [ 206.412109][T10191] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.1152'. [ 206.717576][T10198] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1155'. [ 206.750048][T10203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.856607][T10203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.189329][T10219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.305510][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'. [ 208.069086][T10261] x_tables: duplicate underflow at hook 1 [ 208.085661][T10261] __nla_validate_parse: 1 callbacks suppressed [ 208.085676][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 208.130145][T10261] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1176'. [ 208.149585][T10262] x_tables: duplicate underflow at hook 1 [ 208.164300][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 208.193019][T10263] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1176'. [ 208.371778][T10271] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 208.508177][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1181'. [ 208.723198][T10283] nbd: must specify an index to disconnect [ 208.939192][T10309] tipc: Failed to remove unknown binding: 66,1,1/0:2830964924/2830964926 [ 208.955298][T10309] tipc: Failed to remove unknown binding: 66,1,1/0:2830964924/2830964926 [ 209.026569][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1187'. [ 209.831335][T10344] 8021q: adding VLAN 0 to HW filter on device bond7 [ 210.008162][T10348] bond7: (slave veth9): Enslaving as an active interface with a down link [ 210.076625][T10346] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 210.095347][T10363] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 210.107208][T10346] bond7: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 210.135327][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 210.642893][T10381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1206'. [ 210.703039][T10380] lo speed is unknown, defaulting to 1000 [ 211.275348][T10405] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1213'. [ 211.289245][T10408] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1212'. [ 211.402374][T10368] validate_nla: 26 callbacks suppressed [ 211.402396][T10368] netlink: 'syz.1.1202': attribute type 5 has an invalid length. [ 211.557969][T10415] syzkaller0: entered promiscuous mode [ 211.574526][T10415] syzkaller0: entered allmulticast mode [ 211.929950][T10427] netlink: 'syz.4.1219': attribute type 1 has an invalid length. [ 211.963286][T10430] netlink: 'syz.4.1219': attribute type 1 has an invalid length. [ 212.340946][T10453] netlink: 'syz.4.1224': attribute type 24 has an invalid length. [ 212.368181][T10459] tipc: Enabling of bearer rejected, failed to enable media [ 212.946668][ T1618] block nbd1: Possible stuck request ffff888028887000: control (read@0,1024B). Runtime 60 seconds [ 212.957547][ T1618] block nbd1: Possible stuck request ffff8880288871c0: control (read@1024,1024B). Runtime 60 seconds [ 212.968675][ T1618] block nbd1: Possible stuck request ffff888028887380: control (read@2048,1024B). Runtime 60 seconds [ 212.979693][ T1618] block nbd1: Possible stuck request ffff888028887540: control (read@3072,1024B). Runtime 60 seconds [ 213.389809][T10503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.410368][T10507] __nla_validate_parse: 7 callbacks suppressed [ 213.410390][T10507] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1237'. [ 213.561140][T10509] netlink: 'syz.4.1238': attribute type 10 has an invalid length. [ 213.583655][T10509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.617348][T10509] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 213.692290][T10510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.721953][T10510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.743324][T10510] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 213.781729][T10510] bond0 (unregistering): Released all slaves [ 214.042607][T10524] pimreg3: entered allmulticast mode [ 214.239607][T10533] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20001 [ 214.528839][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1250'. [ 214.708171][T10553] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1251'. [ 214.749870][T10557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1251'. [ 214.788898][T10553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1251'. [ 214.840877][T10569] netlink: 'syz.3.1255': attribute type 10 has an invalid length. [ 214.934836][T10569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.984396][T10569] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 215.194878][T10580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1258'. [ 216.234244][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 216.333314][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1280'. [ 216.468670][T10635] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.603518][T10645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.823049][T10664] x_tables: duplicate underflow at hook 1 [ 216.839305][T10668] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 216.866205][T10635] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.029460][T10672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'. [ 217.050415][T10675] netdevsim netdevsim0: Direct firmware load for ÿ failed with error -2 [ 217.073785][T10675] netdevsim netdevsim0: Falling back to sysfs fallback for: ÿ [ 217.077367][T10672] netlink: 'syz.1.1293': attribute type 8 has an invalid length. [ 217.110856][T10672] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1293'. [ 217.133495][T10678] netlink: 'syz.0.1290': attribute type 2 has an invalid length. [ 217.199547][T10635] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.254109][T10685] netlink: 'syz.2.1292': attribute type 49 has an invalid length. [ 217.373549][T10635] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.559796][T10697] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 217.572149][T10697] bond7 (unregistering): Released all slaves [ 217.607911][T10695] lo speed is unknown, defaulting to 1000 [ 217.623499][T10704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.794666][ T7397] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.881998][ T7399] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.906577][T10712] syzkaller0: entered promiscuous mode [ 217.916964][T10712] syzkaller0: entered allmulticast mode [ 217.989927][ T7411] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.117346][ T7397] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.610419][T10724] syzkaller0: entered promiscuous mode [ 218.632026][T10746] netdevsim netdevsim3: Direct firmware load for ÿ failed with error -2 [ 218.634869][T10724] syzkaller0: entered allmulticast mode [ 218.641999][T10746] netdevsim netdevsim3: Falling back to sysfs fallback for: ÿ [ 218.683507][T10717] lo speed is unknown, defaulting to 1000 [ 218.869570][T10751] Unsupported ieee802154 address type: 0 [ 219.122093][T10758] __nla_validate_parse: 8 callbacks suppressed [ 219.122113][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1309'. [ 219.243142][T10736] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 219.591608][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 220.683997][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.802794][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.830642][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.014891][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'. [ 221.045518][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.208508][T10788] tap0: tun_chr_ioctl cmd 1074025672 [ 221.221863][T10788] tap0: ignored: set checksum disabled [ 221.265577][ T1602] block nbd0: Connection timed out, retrying (0/1 alive) [ 221.272804][ T1602] block nbd0: Connection timed out, retrying (0/1 alive) [ 221.282447][ T1602] block nbd0: Connection timed out, retrying (0/1 alive) [ 221.289808][ T7085] block nbd0: Dead connection, failed to find a fallback [ 221.303440][ T1602] block nbd0: Connection timed out, retrying (0/1 alive) [ 221.341096][T10803] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 221.413289][T10803] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 221.532931][T10806] bond3 (unregistering): Released all slaves [ 221.848670][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 221.907763][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1333'. [ 221.909855][T10833] syzkaller0: entered promiscuous mode [ 221.928723][T10835] block nbd0: Unsupported socket: should be TCP or UNIX. [ 221.944973][T10833] syzkaller0: entered allmulticast mode [ 222.086017][T10842] veth1_macvtap: left promiscuous mode [ 222.246297][T10851] 8021q: VLANs not supported on gre0 [ 222.259777][T10851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.381458][T10857] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1340'. [ 222.409822][T10858] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 222.614238][T10873] netlink: 'syz.2.1345': attribute type 11 has an invalid length. [ 222.667664][T10873] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1345'. [ 223.309674][T10905] veth0: entered promiscuous mode [ 223.328673][T10904] veth0: left promiscuous mode [ 223.489361][T10916] tipc: Trying to set illegal importance in message [ 223.504340][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1359'. [ 223.589662][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1359'. [ 223.742249][T10933] netlink: 'syz.2.1363': attribute type 2 has an invalid length. [ 223.984421][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'. [ 224.136068][T10963] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1371'. [ 224.155509][T10963] openvswitch: netlink: Message has 512 unknown bytes. [ 224.163782][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 224.187947][T10955] bond3: Invalid ad_actor_system MAC address. [ 224.211262][T10955] bond3: option ad_actor_system: invalid value (1) [ 224.241119][T10955] bond3 (unregistering): Released all slaves [ 224.399545][T10973] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 224.612325][T10985] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1375'. [ 226.309931][T10996] macvtap0: entered allmulticast mode [ 226.315642][T10996] veth0_macvtap: entered allmulticast mode [ 226.402256][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1379'. [ 226.592467][T11006] vlan1: mtu greater than device maximum [ 226.610093][T11008] netlink: 'syz.0.1382': attribute type 1 has an invalid length. [ 226.671172][T11008] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.730555][T11008] bond7: (slave veth0_to_bond): making interface the new active one [ 226.749702][T11008] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 226.763991][T11014] netlink: 'syz.3.1385': attribute type 6 has an invalid length. [ 226.828746][T11015] 8021q: adding VLAN 0 to HW filter on device bond8 [ 226.838546][T11015] bond7: (slave bond8): Enslaving as an active interface with a down link [ 227.006004][T11029] netlink: 'syz.3.1389': attribute type 21 has an invalid length. [ 227.014198][T11029] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1389'. [ 227.057959][T11030] netlink: 'syz.3.1389': attribute type 21 has an invalid length. [ 227.072900][T11030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1389'. [ 227.399752][T11046] netlink: 'syz.0.1394': attribute type 1 has an invalid length. [ 227.423685][T11046] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1394'. [ 227.537948][ T7282] IPVS: starting estimator thread 0... [ 227.647705][T11053] IPVS: using max 26 ests per chain, 62400 per kthread [ 227.788286][T11067] netlink: 'syz.1.1398': attribute type 49 has an invalid length. [ 227.958779][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x76 [ 228.152764][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1402'. [ 228.178177][T11087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1403'. [ 228.978020][T11131] netlink: 'syz.4.1416': attribute type 17 has an invalid length. [ 229.969899][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'. [ 230.651801][T11227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1445'. [ 230.751978][T11234] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.1447'. [ 231.102557][T11250] syzkaller0: entered promiscuous mode [ 231.114621][T11250] syzkaller0: entered allmulticast mode [ 231.132377][T11253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.242655][T11263] netlink: 'syz.0.1458': attribute type 1 has an invalid length. [ 231.298902][T11263] bond9: entered promiscuous mode [ 231.305692][T11263] 8021q: adding VLAN 0 to HW filter on device bond9 [ 231.340263][T11263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1458'. [ 231.402592][T11263] bond9: (slave bridge5): making interface the new active one [ 231.422861][T11263] bridge5: entered promiscuous mode [ 231.430481][T11263] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 231.450348][T11263] netlink: 'syz.0.1458': attribute type 3 has an invalid length. [ 231.599709][T11273] xt_cgroup: xt_cgroup: no path or classid specified [ 231.653750][T11275] tunl0: entered promiscuous mode [ 231.669641][T11275] netlink: 'syz.0.1461': attribute type 3 has an invalid length. [ 231.687151][T11275] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1461'. [ 231.763947][T11282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1463'. [ 231.791930][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 232.062604][T11295] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1466'. [ 232.148562][T11298] tipc: Enabled bearer , priority 24 [ 232.167435][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 232.423852][T11314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.468119][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'. [ 233.930787][T11363] netlink: 'syz.4.1487': attribute type 39 has an invalid length. [ 233.969349][T11363] hsr_slave_0: left promiscuous mode [ 234.001778][T11363] hsr_slave_1: left promiscuous mode [ 234.411801][T11385] xt_ecn: cannot match TCP bits for non-tcp packets [ 235.139668][T11405] __nla_validate_parse: 4 callbacks suppressed [ 235.139696][T11405] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1498'. [ 235.198328][T11402] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1498'. [ 235.225232][T11405] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1498'. [ 235.400718][T11438] ip6erspan0: entered allmulticast mode [ 235.578135][T11444] netlink: 'syz.2.1509': attribute type 1 has an invalid length. [ 235.622230][T11444] netlink: 'syz.2.1509': attribute type 3 has an invalid length. [ 235.657801][T11444] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1509'. [ 235.729317][T11446] syzkaller0: entered promiscuous mode [ 235.752009][T11446] syzkaller0: entered allmulticast mode [ 235.917627][T11457] dvmrp0: entered allmulticast mode [ 235.986896][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 235.995360][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 236.166907][T11472] netlink: 6208 bytes leftover after parsing attributes in process `syz.3.1515'. [ 236.208701][T11474] sctp: [Deprecated]: syz.1.1516 (pid 11474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.208701][T11474] Use struct sctp_sack_info instead [ 236.330281][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1519'. [ 236.390962][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'. [ 236.447553][T11487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1519'. [ 236.543709][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'. [ 236.599516][T11487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1519'. [ 236.898593][T11512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.835187][T11545] netlink: 'syz.4.1532': attribute type 1 has an invalid length. [ 237.868328][T11545] netlink: 'syz.4.1532': attribute type 4 has an invalid length. [ 240.999171][T11552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.026814][ T1618] block nbd1: Possible stuck request ffff888028887000: control (read@0,1024B). Runtime 90 seconds [ 243.038253][ T1618] block nbd1: Possible stuck request ffff8880288871c0: control (read@1024,1024B). Runtime 90 seconds [ 243.049813][ T1618] block nbd1: Possible stuck request ffff888028887380: control (read@2048,1024B). Runtime 90 seconds [ 243.061002][ T1618] block nbd1: Possible stuck request ffff888028887540: control (read@3072,1024B). Runtime 90 seconds [ 244.178328][ T4993] udevd[4993]: worker [5648] /devices/virtual/block/nbd1 is taking a long time [ 244.187475][ T4993] udevd[4993]: worker [5627] /devices/virtual/block/nbd0 is taking a long time [ 255.827837][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.526424][T11596] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 261.537158][T11596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.584044][T11599] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 261.828835][T11616] syzkaller0: entered promiscuous mode [ 261.840911][T11616] syzkaller0: entered allmulticast mode [ 262.007241][T11623] tipc: Started in network mode [ 262.012423][T11623] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 262.020674][T11623] tipc: Enabled bearer , priority 24 [ 262.162886][T11628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.216686][T11631] __nla_validate_parse: 2 callbacks suppressed [ 262.216708][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'. [ 262.423614][ T7282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.468309][T11637] set match dimension is over the limit! [ 262.518839][T11616] tipc: Enabling of bearer rejected, failed to enable media [ 262.771519][T11655] netlink: 'syz.2.1562': attribute type 33 has an invalid length. [ 262.851882][T11655] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 262.869013][T11655] bond4 (unregistering): Released all slaves [ 262.947211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.957461][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1566'. [ 262.963739][T11666] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 263.135106][ T7285] tipc: Node number set to 10005162 [ 263.260925][T11674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1568'. [ 263.304099][T11674] block nbd2: Unsupported socket: should be TCP or UNIX. [ 263.314850][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.425147][ T7282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.516420][T11695] veth0: entered promiscuous mode [ 263.564007][T11693] veth0: left promiscuous mode [ 263.585872][ T7285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.629467][T11703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1577'. [ 263.660267][T11699] syzkaller0: entered promiscuous mode [ 263.687310][T11699] syzkaller0: entered allmulticast mode [ 263.984890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.149260][T11735] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1585'. [ 264.175971][T11734] bridge_slave_1: left allmulticast mode [ 264.191965][T11734] bridge_slave_1: left promiscuous mode [ 264.205538][T11734] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.246667][T11734] bridge_slave_0: left allmulticast mode [ 264.262961][T11734] bridge_slave_0: left promiscuous mode [ 264.270213][T11734] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.355577][T11745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.735306][T11774] netlink: 'syz.2.1595': attribute type 9 has an invalid length. [ 264.883262][T11782] netlink: 'syz.2.1598': attribute type 8 has an invalid length. [ 265.009102][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 265.080999][T11791] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1600'. [ 265.272624][T11802] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1602'. [ 265.769129][T11828] netlink: 'syz.3.1611': attribute type 10 has an invalid length. [ 265.777646][T11808] netlink: 'syz.2.1604': attribute type 1 has an invalid length. [ 265.803618][T11828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.811696][T11828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.820637][T11828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.828741][T11828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.896645][T11826] bond4: (slave ip6erspan1): making interface the new active one [ 265.906172][T11826] bond4: (slave ip6erspan1): Enslaving as an active interface with an up link [ 265.915291][ T5619] syzkaller0: tun_net_xmit 76 [ 266.064783][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.072080][ C0] bridge0: topology change detected, propagating [ 266.078791][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.086060][ C1] bridge0: topology change detected, propagating [ 266.115941][ T5619] syzkaller0: tun_net_xmit 76 [ 266.395081][ T5619] syzkaller0: tun_net_xmit 76 [ 266.516429][T11818] syzkaller0: delete flow: hash 693660346 index 1 [ 266.562094][ T5619] net_ratelimit: 6 callbacks suppressed [ 266.562115][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.632760][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.667496][ T7397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.974632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.470814][T11754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.588811][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.804760][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.999646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.343644][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1614'. [ 268.399805][T11844] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 268.566379][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 268.578898][T11844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.599460][T11860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1620'. [ 268.638894][ T7279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.749717][T11863] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1619'. [ 268.789377][T11863] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1619'. [ 268.809091][T11872] bond0: option ad_select: unable to set because the bond device is up [ 268.935077][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.997567][T11883] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1625'. [ 269.024734][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.584385][T11914] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 269.817656][T11929] raw_sendmsg: syz.3.1636 forgot to set AF_INET. Fix it! [ 269.987950][T11936] netlink: 'syz.0.1639': attribute type 21 has an invalid length. [ 270.047659][T11936] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1639'. [ 270.258668][T11949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'. [ 270.802724][T11961] tipc: Enabling of bearer rejected, failed to enable media [ 270.922018][T11983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1652'. [ 270.954170][T11983] netlink: 'syz.0.1652': attribute type 7 has an invalid length. [ 270.989288][T11983] netlink: 'syz.0.1652': attribute type 8 has an invalid length. [ 271.027015][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 271.513641][T12019] tipc: Enabling of bearer rejected, failed to enable media [ 271.559685][T12013] lo speed is unknown, defaulting to 1000 [ 271.707832][T12019] net_ratelimit: 9 callbacks suppressed [ 271.707851][T12019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.724091][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.782302][T12019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.790517][T12019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.989510][T12037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.999180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.009041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.021347][T12038] netlink: 'syz.2.1668': attribute type 1 has an invalid length. [ 272.067373][T12028] syzkaller0: entered promiscuous mode [ 272.080074][T12028] syzkaller0: entered allmulticast mode [ 272.246577][T12050] netlink: 'syz.0.1669': attribute type 1 has an invalid length. [ 272.295889][ T7397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.385401][T12050] 8021q: adding VLAN 0 to HW filter on device bond10 [ 272.619089][T12074] netlink: 'syz.0.1675': attribute type 21 has an invalid length. [ 272.707941][ T7273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.868577][ T7282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.041923][T12092] tc action pedit offset must be on 32 bit boundaries [ 273.114629][ T1618] block nbd1: Possible stuck request ffff888028887000: control (read@0,1024B). Runtime 120 seconds [ 273.126607][ T1618] block nbd1: Possible stuck request ffff8880288871c0: control (read@1024,1024B). Runtime 120 seconds [ 273.137877][ T1618] block nbd1: Possible stuck request ffff888028887380: control (read@2048,1024B). Runtime 120 seconds [ 273.151973][ T1618] block nbd1: Possible stuck request ffff888028887540: control (read@3072,1024B). Runtime 120 seconds [ 273.230244][T12102] netlink: 'syz.4.1683': attribute type 1 has an invalid length. [ 273.369883][T12110] __nla_validate_parse: 3 callbacks suppressed [ 273.369903][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'. [ 273.396277][T12111] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000 [ 273.442094][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'. [ 273.520795][T12118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1687'. [ 273.580417][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1687'. [ 273.637393][T12120] lo speed is unknown, defaulting to 1000 [ 273.711577][T12122] syzkaller0: entered promiscuous mode [ 273.728996][T12122] syzkaller0: entered allmulticast mode [ 276.744997][ T36] net_ratelimit: 12 callbacks suppressed [ 276.745018][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.025243][ T7282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.054636][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.864822][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.064634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.072810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.785004][ T7273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.964822][ T7397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.104722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.112922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.825026][ T5738] net_ratelimit: 6 callbacks suppressed [ 281.825047][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.839546][ T7395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.849666][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.859543][ T7282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.084701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.225313][ T7276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.275048][ T7395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.104721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.266484][ T7282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.312198][ T4993] udevd[4993]: worker [5627] /devices/virtual/block/nbd0 timeout; kill it [ 283.322062][ T4993] udevd[4993]: seq 10757 '/devices/virtual/block/nbd0' killed [ 283.385009][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.124666][ C0] net_ratelimit: 9 callbacks suppressed [ 287.124688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.185978][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.425038][ T7282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.795013][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.985710][ T7285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.144667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.298762][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.309294][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.317231][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.325786][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.334094][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.472650][ T7279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.585351][T12179] lo speed is unknown, defaulting to 1000 [ 288.807312][T12179] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.815082][T12179] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.822274][T12179] bridge_slave_0: entered allmulticast mode [ 288.829773][T12179] bridge_slave_0: entered promiscuous mode [ 288.838284][T12179] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.845632][T12179] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.852905][T12179] bridge_slave_1: entered allmulticast mode [ 288.860828][T12179] bridge_slave_1: entered promiscuous mode [ 288.891537][T12179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.900969][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.909682][T12179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.941683][T12179] team0: Port device team_slave_0 added [ 288.950080][T12179] team0: Port device team_slave_1 added [ 288.978018][T12179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.985057][T12179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.011055][T12179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.024856][T12179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.031837][T12179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.058210][T12179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.104150][T12179] hsr_slave_0: entered promiscuous mode [ 289.111226][T12179] hsr_slave_1: entered promiscuous mode [ 289.184797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.508279][ T7279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.590152][ T5641] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 289.609152][ T5646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 289.623581][ T5646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 289.633117][ T5646] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 289.635299][ T5641] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 289.651948][ T5646] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 289.663148][ T5641] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 289.670921][ T5641] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 289.679811][ T5641] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 289.679828][ T5646] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 289.732719][ T5649] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 289.749428][ T5649] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 289.759471][ T5649] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 289.768122][ T5649] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 289.779356][ T5649] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 289.858323][ T5649] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 289.879173][ T5649] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 289.889115][ T5649] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 289.898581][ T5649] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 289.907627][ T5649] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 290.384562][ T5641] Bluetooth: hci5: command tx timeout [ 290.509803][T12201] lo speed is unknown, defaulting to 1000 [ 290.625848][T12204] lo speed is unknown, defaulting to 1000 [ 290.659848][T12200] lo speed is unknown, defaulting to 1000 [ 290.694705][T12210] lo speed is unknown, defaulting to 1000 [ 291.310382][T12201] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.317768][T12201] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.325148][T12201] bridge_slave_0: entered allmulticast mode [ 291.332575][T12201] bridge_slave_0: entered promiscuous mode [ 291.373619][T12201] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.381099][T12201] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.388814][T12201] bridge_slave_1: entered allmulticast mode [ 291.396850][T12201] bridge_slave_1: entered promiscuous mode [ 291.457049][T12200] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.464350][T12200] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.471884][T12200] bridge_slave_0: entered allmulticast mode [ 291.479978][T12200] bridge_slave_0: entered promiscuous mode [ 291.522934][T12200] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.530455][T12200] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.537929][T12200] bridge_slave_1: entered allmulticast mode [ 291.545969][T12200] bridge_slave_1: entered promiscuous mode [ 291.555786][T12201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.603806][T12201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.670473][T12204] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.678034][T12204] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.685655][T12204] bridge_slave_0: entered allmulticast mode [ 291.693078][T12204] bridge_slave_0: entered promiscuous mode [ 291.701305][T12210] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.708906][T12210] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.716273][T12210] bridge_slave_0: entered allmulticast mode [ 291.723827][T12210] bridge_slave_0: entered promiscuous mode [ 291.734828][T12200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.744991][ T5641] Bluetooth: hci6: command tx timeout [ 291.745046][ T5649] Bluetooth: hci7: command tx timeout [ 291.759316][T12201] team0: Port device team_slave_0 added [ 291.765561][T12204] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.772857][T12204] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.780593][T12204] bridge_slave_1: entered allmulticast mode [ 291.788288][T12204] bridge_slave_1: entered promiscuous mode [ 291.795937][T12210] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.803079][T12210] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.810531][T12210] bridge_slave_1: entered allmulticast mode [ 291.818484][T12210] bridge_slave_1: entered promiscuous mode [ 291.825035][ T5649] Bluetooth: hci8: command tx timeout [ 291.835875][T12200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.847363][T12201] team0: Port device team_slave_1 added [ 291.951509][T12204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.963888][T12210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.976505][T12200] team0: Port device team_slave_0 added [ 291.982913][T12201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.990395][T12201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.996595][ T5649] Bluetooth: hci9: command tx timeout [ 292.017090][T12201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.030184][T12204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.047145][T12210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.059071][T12200] team0: Port device team_slave_1 added [ 292.065830][T12201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.072841][T12201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.099739][T12201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.184782][ C0] net_ratelimit: 5 callbacks suppressed [ 292.184802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.202775][T12200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.210168][T12200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.237554][T12200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.250890][T12204] team0: Port device team_slave_0 added [ 292.255730][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.266331][T12204] team0: Port device team_slave_1 added [ 292.273939][T12210] team0: Port device team_slave_0 added [ 292.283239][T12210] team0: Port device team_slave_1 added [ 292.290262][T12200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.297838][T12200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.324360][T12200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.339657][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.396897][T12210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.403930][T12210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.431578][T12210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.464949][ T5649] Bluetooth: hci5: command tx timeout [ 292.481839][T12210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.489635][T12210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.516638][T12210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.528554][T12204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.536415][T12204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.562789][T12204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.580676][T12201] hsr_slave_0: entered promiscuous mode [ 292.587355][T12201] hsr_slave_1: entered promiscuous mode [ 292.593594][T12201] debugfs: 'hsr0' already exists in 'hsr' [ 292.599768][T12201] Cannot create hsr debugfs directory [ 292.625147][T12204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.629128][ T7276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.632170][T12204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.669685][T12204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.695377][T12200] hsr_slave_0: entered promiscuous mode [ 292.701876][T12200] hsr_slave_1: entered promiscuous mode [ 292.708556][T12200] debugfs: 'hsr0' already exists in 'hsr' [ 292.714319][T12200] Cannot create hsr debugfs directory [ 292.838677][T12210] hsr_slave_0: entered promiscuous mode [ 292.845464][T12210] hsr_slave_1: entered promiscuous mode [ 292.851694][T12210] debugfs: 'hsr0' already exists in 'hsr' [ 292.857756][T12210] Cannot create hsr debugfs directory [ 292.903289][T12204] hsr_slave_0: entered promiscuous mode [ 292.910575][T12204] hsr_slave_1: entered promiscuous mode [ 292.917284][T12204] debugfs: 'hsr0' already exists in 'hsr' [ 292.923043][T12204] Cannot create hsr debugfs directory [ 292.945247][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.264758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.365806][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.665006][ T7282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.824725][ T5649] Bluetooth: hci7: command tx timeout [ 293.824940][ T5641] Bluetooth: hci6: command tx timeout [ 293.905199][ T5641] Bluetooth: hci8: command tx timeout [ 294.064923][ T5641] Bluetooth: hci9: command tx timeout [ 294.070481][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.304655][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.544598][ T5641] Bluetooth: hci5: command tx timeout [ 295.904800][ T5649] Bluetooth: hci7: command tx timeout [ 295.905460][ T5641] Bluetooth: hci6: command tx timeout [ 295.984952][ T5641] Bluetooth: hci8: command tx timeout [ 296.145048][ T5641] Bluetooth: hci9: command tx timeout [ 296.624637][ T5641] Bluetooth: hci5: command tx timeout [ 297.204658][ C0] net_ratelimit: 5 callbacks suppressed [ 297.204680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.775233][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.984950][ T5641] Bluetooth: hci6: command tx timeout [ 297.985140][ T5649] Bluetooth: hci7: command tx timeout [ 298.064889][ T5649] Bluetooth: hci8: command tx timeout [ 298.066628][ T7397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.080511][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.224647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.225313][ T5649] Bluetooth: hci9: command tx timeout [ 298.875144][ T7397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.264657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.975181][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.985206][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.145429][ T7285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.244635][ C0] net_ratelimit: 3 callbacks suppressed [ 302.244658][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.184971][ T1618] block nbd1: Possible stuck request ffff888028887000: control (read@0,1024B). Runtime 150 seconds [ 303.185177][ T7285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.196103][ T1618] block nbd1: Possible stuck request ffff8880288871c0: control (read@1024,1024B). Runtime 150 seconds [ 303.215287][ T1618] block nbd1: Possible stuck request ffff888028887380: control (read@2048,1024B). Runtime 150 seconds [ 303.226655][ T1618] block nbd1: Possible stuck request ffff888028887540: control (read@3072,1024B). Runtime 150 seconds [ 303.264638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.274840][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.825335][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.833512][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.304653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.375092][ T7397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.484817][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.745322][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.284673][ C0] net_ratelimit: 3 callbacks suppressed [ 307.284688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.694831][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.304742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.805032][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.265722][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.344763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.585772][ T7397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.593955][ T7397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.904962][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.005038][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.306495][ T5738] net_ratelimit: 3 callbacks suppressed [ 312.306516][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.324597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.234809][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.344686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.335028][ T7397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.384797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.345088][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.353245][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.362332][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.434701][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.268138][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.364632][ C0] net_ratelimit: 3 callbacks suppressed [ 317.364653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.635019][ T7397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.384609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.393138][ T7273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.735094][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.424761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.834891][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.944944][ T7397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.105166][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.113352][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.404639][ C0] net_ratelimit: 3 callbacks suppressed [ 322.404662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.025456][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.154928][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.424639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.255070][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.464680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.473269][ T7285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.364939][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.145292][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.474953][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.444619][ C0] net_ratelimit: 1 callbacks suppressed [ 327.444641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.506163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.518134][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.585856][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.145949][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.464687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.705267][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.785522][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.504726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.805025][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.484678][ C0] net_ratelimit: 4 callbacks suppressed [ 332.484701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.629147][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.105528][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.265888][ T1618] block nbd1: Possible stuck request ffff888028887000: control (read@0,1024B). Runtime 180 seconds [ 333.276782][ T1618] block nbd1: Possible stuck request ffff8880288871c0: control (read@1024,1024B). Runtime 180 seconds [ 333.287919][ T1618] block nbd1: Possible stuck request ffff888028887380: control (read@2048,1024B). Runtime 180 seconds [ 333.299328][ T1618] block nbd1: Possible stuck request ffff888028887540: control (read@3072,1024B). Runtime 180 seconds [ 333.504609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.585179][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.905198][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.913480][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.214764][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.544688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.325111][ T7397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.590654][ T4993] udevd[4993]: worker [5648] /devices/virtual/block/nbd1 timeout; kill it [ 335.599451][ T4993] udevd[4993]: seq 12691 '/devices/virtual/block/nbd1' killed [ 337.524620][ C0] net_ratelimit: 3 callbacks suppressed [ 337.524646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.539021][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.746045][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.544615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.645562][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.945389][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.584663][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.665958][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.674225][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.746427][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.564720][ C0] net_ratelimit: 2 callbacks suppressed [ 342.564741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.704848][ T7273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.869518][ T7395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.085892][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.505697][ T7395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.584654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.145489][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.185212][ T7395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.624632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.285882][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.604793][ C0] net_ratelimit: 4 callbacks suppressed [ 347.604829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.992202][ T7395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.429479][ T5641] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 348.437881][ T5641] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 348.446234][ T5641] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 348.458512][ T5641] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 348.467998][ T5641] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 348.585547][ T7397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.625729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.748712][T12274] lo speed is unknown, defaulting to 1000 [ 348.785021][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.983736][T12274] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.991269][T12274] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.998835][T12274] bridge_slave_0: entered allmulticast mode [ 349.006658][T12274] bridge_slave_0: entered promiscuous mode [ 349.015229][T12274] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.022394][T12274] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.029872][T12274] bridge_slave_1: entered allmulticast mode [ 349.038149][T12274] bridge_slave_1: entered promiscuous mode [ 349.069902][T12274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.082377][T12274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.115848][T12274] team0: Port device team_slave_0 added [ 349.123866][T12274] team0: Port device team_slave_1 added [ 349.151541][T12274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.158683][T12274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.185644][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.193950][T12274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.206783][T12274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.213750][T12274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.240257][T12274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.266756][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.296107][T12274] hsr_slave_0: entered promiscuous mode [ 349.302734][T12274] hsr_slave_1: entered promiscuous mode [ 349.309306][T12274] debugfs: 'hsr0' already exists in 'hsr' [ 349.315346][T12274] Cannot create hsr debugfs directory [ 349.515532][ T5649] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 349.528526][ T5649] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 349.537258][ T5649] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 349.547099][ T5649] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 349.558301][ T5649] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 349.643342][ T5649] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 349.655455][ T5649] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 349.664574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.677344][ T5649] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 349.689131][ T5649] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 349.700535][ T5649] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 349.717984][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.088930][T12293] lo speed is unknown, defaulting to 1000 [ 350.266109][T12296] lo speed is unknown, defaulting to 1000 [ 350.547688][ T5649] Bluetooth: hci10: command tx timeout [ 350.656389][ T5641] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 350.677496][ T5641] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 350.688514][ T5641] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 350.702773][ T5641] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 350.715645][ T5628] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 350.736666][ T5646] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 350.755475][ T5649] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 350.771976][ T5628] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 350.783232][ T5628] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 350.796471][ T5628] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 350.855587][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.954371][T12293] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.965072][T12293] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.972406][T12293] bridge_slave_0: entered allmulticast mode [ 350.980299][T12293] bridge_slave_0: entered promiscuous mode [ 351.022691][T12293] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.043479][T12293] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.051513][T12293] bridge_slave_1: entered allmulticast mode [ 351.070513][T12293] bridge_slave_1: entered promiscuous mode [ 351.139778][T12296] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.147959][T12296] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.155412][T12296] bridge_slave_0: entered allmulticast mode [ 351.162712][T12296] bridge_slave_0: entered promiscuous mode [ 351.173435][T12293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.187432][T12293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.210989][T12296] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.219106][T12296] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.227161][T12296] bridge_slave_1: entered allmulticast mode [ 351.235593][T12296] bridge_slave_1: entered promiscuous mode [ 351.276460][T12293] team0: Port device team_slave_0 added [ 351.287633][T12293] team0: Port device team_slave_1 added [ 351.324786][T12296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.382395][T12296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.392616][T12293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.416430][T12293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.450679][T12293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.503584][T12293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.518649][T12293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.545209][T12293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.583892][T12296] team0: Port device team_slave_0 added [ 351.593132][T12296] team0: Port device team_slave_1 added [ 351.662393][T12296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.669580][ T5628] Bluetooth: hci11: command tx timeout [ 351.675420][T12296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.701570][T12296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.719281][T12293] hsr_slave_0: entered promiscuous mode [ 351.725899][T12293] hsr_slave_1: entered promiscuous mode [ 351.732076][T12293] debugfs: 'hsr0' already exists in 'hsr' [ 351.738439][T12293] Cannot create hsr debugfs directory [ 351.744027][T12325] lo speed is unknown, defaulting to 1000 [ 351.750658][T12296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.761100][T12296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.787527][T12296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.823486][T12327] lo speed is unknown, defaulting to 1000 [ 351.830065][ T5628] Bluetooth: hci12: command tx timeout [ 351.963331][T12296] hsr_slave_0: entered promiscuous mode [ 351.970706][T12296] hsr_slave_1: entered promiscuous mode [ 351.977304][T12296] debugfs: 'hsr0' already exists in 'hsr' [ 351.983057][T12296] Cannot create hsr debugfs directory [ 352.581689][T12325] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.589055][T12325] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.597089][T12325] bridge_slave_0: entered allmulticast mode [ 352.604636][T12325] bridge_slave_0: entered promiscuous mode [ 352.612604][T12325] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.621332][T12325] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.636276][ T5628] Bluetooth: hci10: command tx timeout [ 352.636722][T12325] bridge_slave_1: entered allmulticast mode [ 352.650726][T12325] bridge_slave_1: entered promiscuous mode [ 352.656786][ C0] net_ratelimit: 3 callbacks suppressed [ 352.656801][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.672374][T12327] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.679863][T12327] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.687425][T12327] bridge_slave_0: entered allmulticast mode [ 352.695015][T12327] bridge_slave_0: entered promiscuous mode [ 352.702907][T12327] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.710279][T12327] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.717961][T12327] bridge_slave_1: entered allmulticast mode [ 352.725800][T12327] bridge_slave_1: entered promiscuous mode [ 352.784836][ T5628] Bluetooth: hci13: command tx timeout [ 352.798209][T12327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.812209][T12325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.824180][T12327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.857868][T12325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.867366][ T5628] Bluetooth: hci14: command tx timeout [ 352.892079][T12327] team0: Port device team_slave_0 added [ 352.911340][T12327] team0: Port device team_slave_1 added [ 352.942787][T12325] team0: Port device team_slave_0 added [ 352.963674][T12325] team0: Port device team_slave_1 added [ 352.980058][T12327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.987576][T12327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.013985][T12327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.038415][T12327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.045733][T12327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.072137][T12327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.117927][T12325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.125191][T12325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.151644][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.161160][T12325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.190531][T12325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.198576][T12325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.224895][T12325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.272883][T12327] hsr_slave_0: entered promiscuous mode [ 353.279423][T12327] hsr_slave_1: entered promiscuous mode [ 353.286304][T12327] debugfs: 'hsr0' already exists in 'hsr' [ 353.292070][T12327] Cannot create hsr debugfs directory [ 353.383073][T12325] hsr_slave_0: entered promiscuous mode [ 353.389869][T12325] hsr_slave_1: entered promiscuous mode [ 353.396459][T12325] debugfs: 'hsr0' already exists in 'hsr' [ 353.402209][T12325] Cannot create hsr debugfs directory [ 353.664593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.745090][ T5628] Bluetooth: hci11: command tx timeout [ 353.745210][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.905085][ T5628] Bluetooth: hci12: command tx timeout [ 354.254926][ T7395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.704643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.712927][ T5628] Bluetooth: hci10: command tx timeout [ 354.865573][ T7273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.867012][ T5628] Bluetooth: hci13: command tx timeout [ 354.954715][ T5628] Bluetooth: hci14: command tx timeout [ 355.025377][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.033547][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.354952][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.824821][ T5628] Bluetooth: hci11: command tx timeout [ 355.985301][ T5628] Bluetooth: hci12: command tx timeout [ 356.784807][ T5628] Bluetooth: hci10: command tx timeout [ 356.945533][ T5628] Bluetooth: hci13: command tx timeout [ 357.026267][ T5628] Bluetooth: hci14: command tx timeout [ 357.684625][ C0] net_ratelimit: 3 callbacks suppressed [ 357.684640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.904659][ T5628] Bluetooth: hci11: command tx timeout [ 357.910377][ T7273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.064975][ T5628] Bluetooth: hci12: command tx timeout [ 358.655539][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.704650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.865203][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.034590][ T5628] Bluetooth: hci13: command tx timeout [ 359.104828][ T5628] Bluetooth: hci14: command tx timeout [ 359.744729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.755127][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.785413][ T7395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.865679][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.944940][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.705802][ T7402] net_ratelimit: 1 callbacks suppressed [ 362.705822][ T7402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.724622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.064866][ T7402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.353252][ T1618] block nbd1: Possible stuck request ffff888028887000: control (read@0,1024B). Runtime 210 seconds [ 363.367301][ T1618] block nbd1: Possible stuck request ffff8880288871c0: control (read@1024,1024B). Runtime 210 seconds [ 363.378427][ T1618] block nbd1: Possible stuck request ffff888028887380: control (read@2048,1024B). Runtime 210 seconds [ 363.389669][ T1618] block nbd1: Possible stuck request ffff888028887540: control (read@3072,1024B). Runtime 210 seconds [ 363.744624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.985548][ T7402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.995165][ T7273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.165153][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.784709][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.265898][ T7395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.825255][ T7395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.764690][ C0] net_ratelimit: 3 callbacks suppressed [ 367.764707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.467473][ T7402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.564939][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.784640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.665432][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.745237][ T7402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.824717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.065307][ T7273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.764930][ T7395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.025397][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.664972][ T31] INFO: task kworker/0:2H:7085 blocked for more than 143 seconds. [ 371.672989][ T31] Not tainted syzkaller #0 [ 371.678167][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.686948][ T31] task:kworker/0:2H state:D stack:26568 pid:7085 tgid:7085 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 371.699261][ T31] Workqueue: kblockd blk_mq_requeue_work [ 371.705149][ T31] Call Trace: [ 371.708458][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 371.711394][ T31] __schedule+0x17d9/0x56c0 [ 371.716146][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 371.721949][ T31] ? __pfx___schedule+0x10/0x10 [ 371.726986][ T31] ? schedule+0x90/0x2b0 [ 371.731711][ T31] schedule+0x164/0x2b0 [ 371.736086][ T31] schedule_timeout+0x152/0x2c0 [ 371.741002][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 371.747054][ T31] ? __pfx_process_timeout+0x10/0x10 [ 371.752427][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 371.758639][ T31] ? prepare_to_wait_event+0x436/0x480 [ 371.764242][ T31] nbd_queue_rq+0x889/0x1150 [ 371.769246][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 371.774339][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 371.780671][ T31] blk_mq_dispatch_rq_list+0x499/0x1990 [ 371.786340][ T31] ? sbitmap_get+0x229/0x390 [ 371.790984][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 371.797185][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 371.803097][ T31] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 371.810209][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 371.817710][ T31] ? blk_mq_hw_queue_need_run+0x134/0x630 [ 371.823521][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 371.830813][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 371.838183][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 371.844243][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 371.852813][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 371.867208][ T31] blk_mq_run_hw_queues+0x268/0x3f0 [ 371.881908][ T31] blk_mq_requeue_work+0x703/0x760 [ 371.900442][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 371.913207][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.922361][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 371.928602][ T31] process_scheduled_works+0xa8e/0x14e0 [ 371.934814][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 371.940881][ T31] ? assign_work+0x3cf/0x5d0 [ 371.945951][ T31] worker_thread+0xa47/0xfb0 [ 371.950632][ T31] ? __kthread_parkme+0x71/0x1f0 [ 371.956132][ T31] kthread+0x388/0x470 [ 371.960308][ T31] ? __pfx_worker_thread+0x10/0x10 [ 371.965891][ T31] ? __pfx_kthread+0x10/0x10 [ 371.970554][ T31] ret_from_fork+0x514/0xb70 [ 371.976637][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 371.981863][ T31] ? __switch_to+0xc89/0x1420 [ 371.987587][ T31] ? __pfx_kthread+0x10/0x10 [ 371.993149][ T31] ret_from_fork_asm+0x1a/0x30 [ 371.998572][ T31] [ 372.001760][ T31] [ 372.001760][ T31] Showing all locks held in the system: [ 372.009595][ T31] 1 lock held by khungtaskd/31: [ 372.014609][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 372.024631][ T31] 2 locks held by getty/5381: [ 372.029331][ T31] #0: ffff8880331ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 372.039435][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 372.049635][ T31] 1 lock held by udevd/5627: [ 372.054222][ T31] #0: ffff88802835a350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 372.063620][ T31] 1 lock held by udevd/5648: [ 372.068428][ T31] #0: ffff88802835e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 372.077907][ T31] 4 locks held by kworker/0:2H/7085: [ 372.083230][ T31] #0: ffff88801ee9bd40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 372.095111][ T31] #1: ffffc90005f27c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 372.108362][ T31] #2: ffff88802814ed98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 372.118068][ T31] #3: ffff8880283d04f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 372.127200][ T31] 5 locks held by kworker/u8:11/7395: [ 372.132679][ T31] 6 locks held by syz.4.1683/12102: [ 372.138072][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.146553][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.155768][ T31] #2: ffff888028346260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 372.166218][ T31] #3: ffff888028393e78 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 372.175866][ T31] #4: ffff888028393840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 372.188064][ T31] #5: ffff888028393878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 372.200541][ T31] 2 locks held by syz.2.1691/12134: [ 372.205810][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.214011][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.223170][ T31] 2 locks held by syz.3.1692/12136: [ 372.228588][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.236962][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.246013][ T31] 2 locks held by syz.3.1692/12138: [ 372.251216][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.259590][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.268678][ T31] 2 locks held by syz.3.1692/12139: [ 372.273895][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.282265][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.291333][ T31] 2 locks held by syz.3.1692/12140: [ 372.296720][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.305729][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.314957][ T31] 2 locks held by syz.3.1692/12145: [ 372.320200][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.329232][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.338498][ T31] 2 locks held by syz.3.1692/12156: [ 372.343730][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.351987][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.361142][ T31] 2 locks held by syz.0.1694/12147: [ 372.366489][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.374994][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.384063][ T31] 2 locks held by syz.1.1697/12163: [ 372.389538][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.397888][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.407069][ T31] 2 locks held by syz.1.1697/12164: [ 372.412289][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.420645][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.429725][ T31] 2 locks held by syz-executor/12179: [ 372.435337][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.443612][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.452690][ T31] 2 locks held by syz-executor/12200: [ 372.458221][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.466766][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.476039][ T31] 2 locks held by syz-executor/12201: [ 372.481459][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.489823][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.498986][ T31] 2 locks held by syz-executor/12204: [ 372.504384][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.512712][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.521895][ T31] 2 locks held by syz-executor/12210: [ 372.527386][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.535771][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.545035][ T31] 2 locks held by syz-executor/12274: [ 372.550474][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.558909][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.568022][ T31] 2 locks held by syz-executor/12293: [ 372.573616][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.581990][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.591116][ T31] 2 locks held by syz-executor/12296: [ 372.596635][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.604984][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.613995][ T31] 2 locks held by syz-executor/12325: [ 372.619513][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.628255][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.637474][ T31] 2 locks held by syz-executor/12327: [ 372.642894][ T31] #0: ffffffff9009c868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.651225][ T31] #1: ffffffff9009c6a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.660417][ T31] [ 372.662783][ T31] ============================================= [ 372.662783][ T31] [ 372.671394][ T31] NMI backtrace for cpu 0 [ 372.671418][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 372.671441][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 372.671453][ T31] Call Trace: [ 372.671461][ T31] [ 372.671470][ T31] dump_stack_lvl+0xe8/0x150 [ 372.671505][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 372.671531][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 372.671563][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 372.671591][ T31] sys_info+0x135/0x170 [ 372.671612][ T31] watchdog+0xfd7/0x1030 [ 372.671645][ T31] ? watchdog+0x1c7/0x1030 [ 372.671675][ T31] kthread+0x388/0x470 [ 372.671704][ T31] ? __pfx_watchdog+0x10/0x10 [ 372.671726][ T31] ? __pfx_kthread+0x10/0x10 [ 372.671756][ T31] ret_from_fork+0x514/0xb70 [ 372.671788][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 372.671817][ T31] ? __switch_to+0xc89/0x1420 [ 372.671846][ T31] ? __pfx_kthread+0x10/0x10 [ 372.671876][ T31] ret_from_fork_asm+0x1a/0x30 [ 372.671912][ T31] [ 372.671920][ T31] Sending NMI from CPU 0 to CPUs 1: [ 372.782298][ C1] NMI backtrace for cpu 1 [ 372.782316][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 372.782336][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 372.782347][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 372.782379][ C1] Code: 7c 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 5a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 372.782395][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 372.782411][ C1] RAX: 000000000010265f RBX: ffffffff819ab33c RCX: 0000000080000001 [ 372.782424][ C1] RDX: 0000000000000001 RSI: ffffffff8e22a5a0 RDI: ffffffff8c4bd380 [ 372.782437][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 372.782450][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 372.782463][ C1] R13: 1ffff11003c50000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 372.782476][ C1] FS: 0000000000000000(0000) GS:ffff888125058000(0000) knlGS:0000000000000000 [ 372.782491][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.782503][ C1] CR2: 0000563bcd3b5f40 CR3: 000000000e946000 CR4: 00000000003526f0 [ 372.782520][ C1] Call Trace: [ 372.782528][ C1] [ 372.782534][ C1] default_idle+0x9/0x20 [ 372.782551][ C1] default_idle_call+0x72/0xb0 [ 372.782568][ C1] do_idle+0x1cc/0x540 [ 372.782602][ C1] ? __pfx_do_idle+0x10/0x10 [ 372.782626][ C1] ? do_idle+0x4d1/0x540 [ 372.782650][ C1] cpu_startup_entry+0x43/0x60 [ 372.782673][ C1] start_secondary+0x101/0x110 [ 372.782697][ C1] common_startup_64+0x13e/0x157 [ 372.782727][ C1] [ 372.948666][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 372.955547][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 372.964711][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 372.974792][ T31] Call Trace: [ 372.978088][ T31] [ 372.981020][ T31] vpanic+0x56c/0xa60 [ 372.985018][ T31] ? __pfx___schedule+0x10/0x10 [ 372.989885][ T31] ? __pfx_vpanic+0x10/0x10 [ 372.994417][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 373.000696][ T31] panic+0xc5/0xd0 [ 373.004513][ T31] ? __pfx_panic+0x10/0x10 [ 373.008968][ T31] ? preempt_schedule_common+0x82/0xd0 [ 373.014471][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 373.019875][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 373.026062][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 373.032243][ T31] watchdog+0x1030/0x1030 [ 373.036606][ T31] ? watchdog+0x1c7/0x1030 [ 373.041054][ T31] kthread+0x388/0x470 [ 373.045149][ T31] ? __pfx_watchdog+0x10/0x10 [ 373.049855][ T31] ? __pfx_kthread+0x10/0x10 [ 373.054473][ T31] ret_from_fork+0x514/0xb70 [ 373.059108][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 373.064246][ T31] ? __switch_to+0xc89/0x1420 [ 373.068949][ T31] ? __pfx_kthread+0x10/0x10 [ 373.073564][ T31] ret_from_fork_asm+0x1a/0x30 [ 373.078359][ T31] [ 373.082143][ T31] Kernel Offset: disabled [ 373.086483][ T31] Rebooting in 86400 seconds..