last executing test programs: 24.737387072s ago: executing program 4 (id=799): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x20000000) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000180)=0x10, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 24.589607324s ago: executing program 2 (id=801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname(r0, &(0x7f0000000080)=@xdp, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x220, 0x220, 0x308, 0x308, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async) r3 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) (async) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 24.432116918s ago: executing program 4 (id=804): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, &(0x7f0000000500)=""/16, 0x3a, 0x10, 0x1}, 0x28) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async, rerun: 32) unshare(0x6a040000) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {0x2}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {0x0, 0xfffffffc}, {}, {0x2}, {}, {0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x200000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfffffffe}, {}, {0x6}, {}, {}, {}, {0x9}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000}, {0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x5}, {0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x18, 0x2}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r2 = epoll_create(0x3ff) (async, rerun: 64) r3 = epoll_create1(0x80000) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x2000000}) r4 = accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14, 0x80000) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1, 0x11, r1, 0x0) (async, rerun: 32) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000001700)={0xfffffff9, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}}}, 0x108) (rerun: 32) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 24.333445866s ago: executing program 2 (id=805): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r3, 0x5452, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x40000}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000104400"/20, @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001", @ANYRESOCT=r5, @ANYRESOCT=0x0, @ANYRES64], 0x44}}, 0x20000010) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$netlink(0x10, 0x3, 0x2) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000140), r4) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000003a219f81143171321cd67ae347731cf2c301c536f235a9d61cd7d7f96ce428e1c84f7e9f4b9f1cc8c31b7db67f552e6aa69e41b1732b59a52f211b0ec9e0b3ca58587d28edd710000094b8c3dea79fd20eb840e89af7be36729800b2caa04700"/111, @ANYRES8=r0, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES8=r6, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000004000000000000000300000008000400f9fffbff"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 24.237455148s ago: executing program 4 (id=807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x1, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x613f, 0xe}}}}]}, 0x44}}, 0x4010804) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x8, r5, 0x1c}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="080008000600060000001400000045"], 0xfce) 22.952127153s ago: executing program 2 (id=811): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x0, 0x0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0000001300010000002000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="02080200000000000500270000ff000044001a80100002800c000180089b"], 0x6c}, 0x1, 0x0, 0x0, 0x4008081}, 0x4000004) 21.769940178s ago: executing program 2 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, 0x2, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x22e17b99}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010102}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004084}, 0x4040800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x6, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x88}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2c13a830}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x2d, 0x42, &(0x7f0000000240)=""/66, 0x40f00, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x9, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1], 0x0, 0x10, 0x400}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='timer_start\x00', r1, 0x0, 0x908}, 0x18) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000500)="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") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x8811) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000740)=""/130, &(0x7f0000000800)=0x82) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000840)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)=@ipv6_getaddrlabel={0x6c, 0x4a, 0x4, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x18, 0x0, r7}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x6c}}, 0x20040040) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f0000000a80)={'sit0\x00', &(0x7f0000000a00)={@dev={0xac, 0x14, 0x14, 0x1a}, 0x1, 0x0, 0x70, 0x0, [{@multicast1}, {@loopback}, {@broadcast}, {}, {@dev}, {@empty}, {@multicast1}]}}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40100c0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r10, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x30008045}, 0x40) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d80), r4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), r2) sendmsg$TIPC_NL_NET_GET(r11, &(0x7f0000001240)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001200)={&(0x7f0000000e40)={0x394, r12, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xff, @local, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80010}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x42e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xcda}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xab}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80000001, @mcast2, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x66b}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x77}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x77f6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x944}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfc5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ccd58ab}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7e9}]}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x84}, 0x10) write(r3, &(0x7f0000001280)="bd1259b2d912e2ef99e4da7b2102cc6498a25b4305f45831d9a640cae6b24599bbcdc1d5e60153a4160b4de19bc9ba01d3620a35a07f040dd9c6e8e12a156287c2e6c697a8363f543cc9e74a3995a89bd1862737a97b3c0f48ce7fff53cb24d115fea6d13f055d845926e211c8e3a3e6e388d47082a5a8a7a2fcafaeda781776bce56a0a7a58a80cf9cb24d097807b475f7c16a7aa30f5b7a6c273839ec3d1c6ef1157141b72404ca0dd14988edc50e36b58e5f737ba0279146535323519482bd4bc56", 0xc3) sendmsg$NL80211_CMD_GET_KEY(r11, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x34, r10, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40401}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 21.708152733s ago: executing program 4 (id=817): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "e9e22b5d3c0acf79", '\x00a\x00', "3d6774d4", "dacc67e62e32779f"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r3, 0x0, 0x20000000002) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x2, 0xffffffff, 0x20, @mcast1, @private1, 0x10, 0x20, 0x1, 0x8}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x15, 0x1, 0xd3e2, &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r3}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@map=r7, r3, 0x4, 0x0, r3, @void, @value=r5, @void, @void, r6}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6, @in=@empty}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0x0, 0x5, 0x48800, r3, 0x1000, '\x00', r4, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x1, @value=r5}, 0x50) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0x24, 0x0, &(0x7f00000001c0)) 21.473669663s ago: executing program 2 (id=820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r2, r2, 0x3, 0x8, &(0x7f0000000100)="81839c93f294064c", 0x9, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 21.349819145s ago: executing program 4 (id=824): unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x10000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000001000000000000000000085100000060000001800000043933ca64a65dd5ff23ed9b77aaa7ec999eb0474188bf73d02225f3945a1e67dbc2b2b76018419e5710824", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 21.201673955s ago: executing program 4 (id=827): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x83}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="e17136e7d35d"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x2000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 21.200929227s ago: executing program 2 (id=828): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2002, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, 0x0, 0xffffffffffffff5e, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYRES8=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x3, 0x3, 0x0) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x286043, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000400"/28], 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="10000180040004"], 0x28}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 18.9566377s ago: executing program 3 (id=849): r0 = socket(0x2b, 0x80801, 0x1) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x3}}, 0x10) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r2, &(0x7f00000005c0)=[{{&(0x7f0000000000)={0x2, 0xfffe, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xcb, r6}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) close(r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r9, r7, 0x25, 0x0, @val=@netkit={@void, @value=r9}}, 0x1c) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x8, 0x3, 0x0, 0xc0, 0xffffffffffffffff, 0xfffffff7, '\x00', r7, r10, 0x4, 0x1, 0x4, 0xf}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet6(0x10, 0x3, 0x0) r12 = socket(0x10, 0x80002, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vcan0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xfa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40080) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000400)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x2, {}, [{0x64, 0x1, [@m_simple={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0x10000000, 0x5, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4064054}, 0x0) 18.825575626s ago: executing program 3 (id=850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1e, 0x2f, 0x0, 0x401, 0x22, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x20, &(0x7f0000000a80)={&(0x7f00000008c0)=""/199, 0xc7, 0x0, &(0x7f00000009c0)=""/142, 0x8e}}, 0x10) (rerun: 32) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b00)={0xffffffffffffffff}, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xb, 0x10, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x401, 0xa7, &(0x7f00000006c0)=""/167, 0x41000, 0x7, '\x00', r6, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xa, 0x2, 0x6}, 0x10, r7, r8, 0x4, &(0x7f0000000bc0)=[r9], &(0x7f0000000c00)=[{0x3, 0x4, 0x8, 0x3}, {0x3, 0x1, 0x7, 0x5}, {0x3, 0x2, 0xe, 0xfca71742e58469c2}, {0x0, 0x3, 0x7, 0x1}], 0x10, 0x52}, 0x94) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async, rerun: 64) r11 = socket(0x10, 0x3, 0x0) (rerun: 64) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r11) sendmsg$NL80211_CMD_SET_WIPHY(r11, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000d00)={0x63, r12, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x81}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x5}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7fffffff}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x0, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x0, 0x3, 0x8}]}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x9}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7a}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) close(r10) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000020605000000000000000000000000000900020073797a32000000000500040000000000050001"], 0x64}}, 0x0) (async, rerun: 64) r15 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x2000006}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0xfffffffffffffffc, 0x0, 0x5, 0x4}}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x240080c1}, 0x800) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r16, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 18.662743683s ago: executing program 3 (id=851): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d8ba7c43"]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x5}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) writev(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f0000002ac0)='l', 0x1}], 0x2) 18.545024474s ago: executing program 3 (id=853): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @mcast2, 0x7}, 0xf) sendto(r1, &(0x7f0000002040)="727c969f78ad4c", 0x7, 0x400c000, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1b22", 0x2, 0x800, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5000000010000b040102000000000000000074002f8fd55add384f5b22b91fb599c3fc31d339130e589aecf09139ba2c875e82706119a06f3bae6fbed8c971ae0bd5dcfbe91d0ad47cb43c44fbe0b1135509c500000000c42462789c36a84ce6ef4d409548a9f4255f97fa01c2fa006056e26c582b30964961142892d0f18b3d672d05a23f84d7fe5fe6add2627bc02ddd92caf8a5a3dda6248a2b11247dad9f6bcee90354d26a55e0c1d0d000000090e02043eb1fb66613", @ANYRES32=0x0, @ANYBLOB="0008000007500500300012800b00010062726964676500002000028005001700010000000c00220006000000000000000800040081000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x48, r11, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfffffff9, 0x4}}) r13 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0x104, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xb}}, [@TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xb, 0x7, 0xea, 0x0, 0x101, 0x80000001, 0x7}}, {0x12, 0x2, [0x402, 0x8, 0x5, 0x1, 0x81, 0x80, 0xc338]}}, {{0x1c, 0x1, {0x3, 0x6f, 0xff81, 0xbb91, 0x0, 0x3, 0x6, 0x5}}, {0xe, 0x2, [0xfff, 0x3ff, 0x6, 0xfffd, 0x2]}}, {{0x1c, 0x1, {0x5, 0x6, 0x4, 0x1eb, 0x2, 0x6, 0x9e2, 0x4}}, {0xc, 0x2, [0x1, 0x80, 0x0, 0x1]}}, {{0x1c, 0x1, {0x7, 0x1, 0x1, 0x6, 0x1, 0x2, 0x0, 0xa}}, {0x18, 0x2, [0x6, 0x7, 0xff, 0x3, 0x401, 0x7, 0x1000, 0x0, 0x7, 0x3]}}, {{0x1c, 0x1, {0x7, 0x2, 0x8, 0x9, 0x2, 0xa62d, 0x1, 0x2}}, {0x8, 0x2, [0x9, 0x100]}}]}]}, 0x104}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x16, 0x2}, {0xfff5, 0x7}, {0xffff, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x70}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) 17.672930255s ago: executing program 3 (id=857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) pread64(r0, &(0x7f0000000200)=""/159, 0x9f, 0xee) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16, @ANYBLOB="010000100000fedbdf2503000000400001802c000405112c08fce900ffff010002000800ac14140f00000000000000001400020002002cb184b91c3dabf182f75af500f2315c51ee7b5024e00000010000000000009500b3bd01007564783a73757a3200000000429e79ae2d6eb79f0bf3e2112288a02e1ab594e9b0503120cfb7b961415f1e4e31f0f5af93c9c586cc138f0266d87f631b21aa31e32395ea0bbd081b6374d1d49cbb571c41fe949737efdb"], 0x54}}, 0x40000000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff3, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1809266a0e4b0c7b5f5f800700000000000000000000000000000061125400000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) 17.633762898s ago: executing program 0 (id=859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000180000000000000001a0000000c000c400000000000000003"], 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x68}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) unshare(0x8040600) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 17.521693793s ago: executing program 0 (id=860): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008004) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$sock_int(r1, 0x1, 0x5, 0x0, &(0x7f0000000440)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) 17.357793274s ago: executing program 0 (id=861): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x0, 0x158, 0x0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x11, "fc1a"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x64010102, 0xff000000, 0x0, 'veth0\x00', 'pim6reg0\x00', {0xff}, {}, 0x1, 0x1, 0x58}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x6, 0x4, 0x1, 0x5, 0x4], 0x4}, {0x3, [0x2, 0x6, 0x2, 0x5, 0x5], 0x5, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000009900000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) connect$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) 17.288841723s ago: executing program 0 (id=862): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x98, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x81}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004884}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x58811}, 0x0) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019580)=""/102400, &(0x7f0000000400)=0x19000) 17.184265047s ago: executing program 0 (id=863): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0xfce) 16.409077418s ago: executing program 1 (id=864): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000000000000fe8000000000000000000000000000aaffffffff0000000000000000000000000000003e190000000a0030a0890a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000033000000fc0200000000000000000000000000010080000000000000fffffffffffffffffeffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000001900000000000000000000000000000000000000002bbd7000ffffffff0a0002800000000000000000"], 0xf0}}, 0x80) syz_emit_ethernet(0x46, &(0x7f0000000a80)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x6, 0x6, "e295e6", 0x8, 0x11, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {0x4e20, 0x4e21, 0x8}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 16.368665588s ago: executing program 1 (id=865): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r6}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x20, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r15, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 16.341756244s ago: executing program 3 (id=866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5c26}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7788}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x99a}, @alu={0x7, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000327bd7000fedbdf251100000008000100", @ANYRES32=r3, @ANYBLOB="08002a47821540bc8519304a614c87a72c0100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080015000000000008000100", @ANYRES32=0x0, @ANYBLOB="080015000200000008000100", @ANYRES32=r8, @ANYBLOB="0800150000000000080015000dfae115"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 16.129527603s ago: executing program 0 (id=867): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040)=0x2, 0x4) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r2, r4, 0x25, 0x4, @val=@iter={0x0}}, 0x20) (async) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000000)="69a2540a4290a9c69035e388831f", 0xe}, {&(0x7f0000000080)="ea34776219", 0x5}], 0x2) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async, rerun: 32) listen(r0, 0x0) (async, rerun: 32) close(r5) 16.061625349s ago: executing program 1 (id=868): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab0000000140a01010000000000000000010000050c00064000001900ea0000020900010073797a300000000076000800444f23041ea8c3150d2f8e1726757ac72160a6fba7d3ae1a624e8f43a6591702530a0164760765e9a0af66daa16f9819595bb877ec6dfdcb8c70003294a936034f75c584ec8ff5fce8406e948e5f836feeaad9fcaa2638cd827218e919219ce7de237874d46dd43896810b5b110f8c00000c00064000000000003b5b66e95c7ac9f600010000000000000000000100000a000000"], 0xd8}}, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000340), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000826bd7000fddbdf25070000020800990001000000ffefffff080025000c00000400cc00"], 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/89, 0x59, 0x10000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800b00010065787468647200002c00028008000340000000000500020007000000080001400000000c080004400000002208000540000000e60800010073797a30"], 0xdc}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000c0000000400000002"], 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00'}) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000400ffe516000002000000000095000000ba711989"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r8], 0x18}}, 0x0) unshare(0x6a040000) 15.816545523s ago: executing program 1 (id=869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000005800)={&(0x7f0000005780)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x86df5cc3eb3e0791}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 15.74492496s ago: executing program 1 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x54, 0x18, 0x1, 0x70bd29, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=@updpolicy={0xcc, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x100000000}, 0x10000000, 0x0, 0x0, 0x1, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @mark={0xc, 0x15, {0x35075d, 0xf05}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0xb, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x10001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'pim6reg1\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) 15.625414296s ago: executing program 1 (id=871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x1000000, 0x2, 0xa3d}]}]}}, 0x0, 0x32}, 0x28) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002cc0)=""/186, 0xba}, {&(0x7f00000001c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000380)=""/149, 0x95}], 0x4}, 0x400000}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/105, 0x69}, {&(0x7f0000000500)=""/14, 0xe}, {&(0x7f0000000540)=""/59, 0x3b}], 0x3, &(0x7f0000000600)=""/239, 0xef}, 0x100}, {{&(0x7f0000000700)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f0000000880)=""/234, 0xea}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/8, 0x8}, {&(0x7f00000019c0)=""/4, 0x4}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/182, 0xb6}, {&(0x7f0000002ac0)=""/2, 0x2}], 0x8}, 0x7fffffff}], 0x3, 0x40000000, &(0x7f0000002c40)={0x0, 0x3938700}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x800}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, 0x0) 6.10486658s ago: executing program 32 (id=828): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2002, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, 0x0, 0xffffffffffffff5e, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYRES8=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x3, 0x3, 0x0) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x286043, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000400"/28], 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="10000180040004"], 0x28}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 6.079686791s ago: executing program 33 (id=827): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x83}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="e17136e7d35d"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x2000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.056693489s ago: executing program 34 (id=867): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040)=0x2, 0x4) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r2, r4, 0x25, 0x4, @val=@iter={0x0}}, 0x20) (async) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000000)="69a2540a4290a9c69035e388831f", 0xe}, {&(0x7f0000000080)="ea34776219", 0x5}], 0x2) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async, rerun: 32) listen(r0, 0x0) (async, rerun: 32) close(r5) 1.029681129s ago: executing program 35 (id=866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5c26}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7788}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x99a}, @alu={0x7, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000327bd7000fedbdf251100000008000100", @ANYRES32=r3, @ANYBLOB="08002a47821540bc8519304a614c87a72c0100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080015000000000008000100", @ANYRES32=0x0, @ANYBLOB="080015000200000008000100", @ANYRES32=r8, @ANYBLOB="0800150000000000080015000dfae115"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 0s ago: executing program 36 (id=871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x1000000, 0x2, 0xa3d}]}]}}, 0x0, 0x32}, 0x28) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002cc0)=""/186, 0xba}, {&(0x7f00000001c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000380)=""/149, 0x95}], 0x4}, 0x400000}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/105, 0x69}, {&(0x7f0000000500)=""/14, 0xe}, {&(0x7f0000000540)=""/59, 0x3b}], 0x3, &(0x7f0000000600)=""/239, 0xef}, 0x100}, {{&(0x7f0000000700)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f0000000880)=""/234, 0xea}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/8, 0x8}, {&(0x7f00000019c0)=""/4, 0x4}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/182, 0xb6}, {&(0x7f0000002ac0)=""/2, 0x2}], 0x8}, 0x7fffffff}], 0x3, 0x40000000, &(0x7f0000002c40)={0x0, 0x3938700}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x800}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts. [ 67.741870][ T5818] cgroup: Unknown subsys name 'net' [ 67.888542][ T5818] cgroup: Unknown subsys name 'cpuset' [ 67.897113][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.239609][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.358541][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.364898][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.243705][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.252494][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.260332][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.269371][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.276973][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.284943][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.292964][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.300605][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.330813][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.339606][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.425730][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.433642][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.441946][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.457264][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.465206][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.489365][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.500825][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.511053][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.518864][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.525614][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.534619][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.534724][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.550483][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.551528][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.558546][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.072436][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 74.131163][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 74.268699][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 74.304563][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.312848][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.320670][ T5828] bridge_slave_0: entered allmulticast mode [ 74.327986][ T5828] bridge_slave_0: entered promiscuous mode [ 74.370812][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.378100][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.385502][ T5828] bridge_slave_1: entered allmulticast mode [ 74.392500][ T5828] bridge_slave_1: entered promiscuous mode [ 74.461928][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 74.514950][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.552486][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 74.564401][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.573688][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.581308][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.589323][ T5832] bridge_slave_0: entered allmulticast mode [ 74.596670][ T5832] bridge_slave_0: entered promiscuous mode [ 74.639614][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.646848][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.653970][ T5832] bridge_slave_1: entered allmulticast mode [ 74.661349][ T5832] bridge_slave_1: entered promiscuous mode [ 74.716300][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.723414][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.731095][ T5837] bridge_slave_0: entered allmulticast mode [ 74.738506][ T5837] bridge_slave_0: entered promiscuous mode [ 74.758117][ T5828] team0: Port device team_slave_0 added [ 74.778673][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.786083][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.793222][ T5837] bridge_slave_1: entered allmulticast mode [ 74.800536][ T5837] bridge_slave_1: entered promiscuous mode [ 74.813329][ T5828] team0: Port device team_slave_1 added [ 74.821367][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.869280][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.937623][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.944839][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.952384][ T5839] bridge_slave_0: entered allmulticast mode [ 74.959927][ T5839] bridge_slave_0: entered promiscuous mode [ 74.970285][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.989572][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.996577][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.022869][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.050026][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.057284][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.064421][ T5839] bridge_slave_1: entered allmulticast mode [ 75.071693][ T5839] bridge_slave_1: entered promiscuous mode [ 75.080254][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.100815][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.108325][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.134473][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.147465][ T5832] team0: Port device team_slave_0 added [ 75.173396][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.180620][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.188019][ T5840] bridge_slave_0: entered allmulticast mode [ 75.194974][ T5840] bridge_slave_0: entered promiscuous mode [ 75.210764][ T5832] team0: Port device team_slave_1 added [ 75.237916][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.245109][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.252731][ T5840] bridge_slave_1: entered allmulticast mode [ 75.259842][ T5840] bridge_slave_1: entered promiscuous mode [ 75.280893][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.291967][ T5837] team0: Port device team_slave_0 added [ 75.321349][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.332341][ T5837] team0: Port device team_slave_1 added [ 75.346601][ T5831] Bluetooth: hci1: command tx timeout [ 75.364007][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.371213][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.398006][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.425295][ T5831] Bluetooth: hci0: command tx timeout [ 75.434800][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.454595][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.461665][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.488263][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.505420][ T5831] Bluetooth: hci2: command tx timeout [ 75.528217][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.542955][ T5828] hsr_slave_0: entered promiscuous mode [ 75.549653][ T5828] hsr_slave_1: entered promiscuous mode [ 75.564624][ T5839] team0: Port device team_slave_0 added [ 75.570971][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.578870][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.604856][ T51] Bluetooth: hci3: command tx timeout [ 75.610527][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.610654][ T5831] Bluetooth: hci4: command tx timeout [ 75.642823][ T5839] team0: Port device team_slave_1 added [ 75.649716][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.656953][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.682901][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.736295][ T5840] team0: Port device team_slave_0 added [ 75.764066][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.771068][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.797163][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.810474][ T5840] team0: Port device team_slave_1 added [ 75.834454][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.841700][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.867905][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.900988][ T5832] hsr_slave_0: entered promiscuous mode [ 75.907298][ T5832] hsr_slave_1: entered promiscuous mode [ 75.913340][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 75.919204][ T5832] Cannot create hsr debugfs directory [ 76.012480][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.019823][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.045883][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.068763][ T5837] hsr_slave_0: entered promiscuous mode [ 76.075578][ T5837] hsr_slave_1: entered promiscuous mode [ 76.081874][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 76.087751][ T5837] Cannot create hsr debugfs directory [ 76.098020][ T5839] hsr_slave_0: entered promiscuous mode [ 76.104276][ T5839] hsr_slave_1: entered promiscuous mode [ 76.110526][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 76.116522][ T5839] Cannot create hsr debugfs directory [ 76.133600][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.141001][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.167025][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.384442][ T5840] hsr_slave_0: entered promiscuous mode [ 76.392043][ T5840] hsr_slave_1: entered promiscuous mode [ 76.398966][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 76.404728][ T5840] Cannot create hsr debugfs directory [ 76.723259][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.739624][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.762667][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.780866][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.865947][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.877574][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.889723][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.902239][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.950752][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.975011][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.988963][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.012294][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.093301][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.117293][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.128588][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.152344][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.204761][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.247153][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.272964][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.299458][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.308543][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.326902][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.363464][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.370776][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.409862][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.417024][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.426168][ T5831] Bluetooth: hci1: command tx timeout [ 77.442431][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.517291][ T5831] Bluetooth: hci0: command tx timeout [ 77.525666][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.552139][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.573835][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.581023][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.595839][ T5831] Bluetooth: hci2: command tx timeout [ 77.608448][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.621662][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.628794][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.652522][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.666734][ T51] Bluetooth: hci3: command tx timeout [ 77.672375][ T5831] Bluetooth: hci4: command tx timeout [ 77.692342][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.699581][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.725601][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.766094][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.773345][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.791569][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.798767][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.849899][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.857120][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.950643][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.009478][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.031266][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.066655][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.073831][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.136796][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.143977][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.290843][ T5828] veth0_vlan: entered promiscuous mode [ 78.302497][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.360351][ T5828] veth1_vlan: entered promiscuous mode [ 78.429267][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.476725][ T5832] veth0_vlan: entered promiscuous mode [ 78.520995][ T5828] veth0_macvtap: entered promiscuous mode [ 78.562244][ T5828] veth1_macvtap: entered promiscuous mode [ 78.583176][ T5832] veth1_vlan: entered promiscuous mode [ 78.610900][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.645045][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.666121][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.683119][ T5840] veth0_vlan: entered promiscuous mode [ 78.692481][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.710593][ T1162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.727426][ T1162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.748673][ T1162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.767428][ T1162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.790424][ T5840] veth1_vlan: entered promiscuous mode [ 78.816181][ T5832] veth0_macvtap: entered promiscuous mode [ 78.829802][ T5832] veth1_macvtap: entered promiscuous mode [ 78.931729][ T5839] veth0_vlan: entered promiscuous mode [ 78.956704][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.989783][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.999035][ T5839] veth1_vlan: entered promiscuous mode [ 79.007008][ T5840] veth0_macvtap: entered promiscuous mode [ 79.029356][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.036363][ T5840] veth1_macvtap: entered promiscuous mode [ 79.049033][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.069941][ T3533] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.080489][ T3533] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.106666][ T3533] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.116751][ T3533] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.157051][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.167918][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.180424][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.201130][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.256896][ T2998] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.269241][ T2998] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.279446][ T2998] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.292030][ T2998] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.310230][ T5839] veth0_macvtap: entered promiscuous mode [ 79.317054][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.379573][ T5839] veth1_macvtap: entered promiscuous mode [ 79.433266][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.446846][ T5837] veth0_vlan: entered promiscuous mode [ 79.464036][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.501455][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.516164][ T5831] Bluetooth: hci1: command tx timeout [ 79.530988][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.552669][ T5947] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.577871][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.586282][ T5831] Bluetooth: hci0: command tx timeout [ 79.588755][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.593649][ T5837] veth1_vlan: entered promiscuous mode [ 79.656661][ T5947] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.674091][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.675655][ T5831] Bluetooth: hci2: command tx timeout [ 79.695603][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.696641][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.712556][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.731279][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.742882][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.751894][ T51] Bluetooth: hci3: command tx timeout [ 79.758808][ T5831] Bluetooth: hci4: command tx timeout [ 79.800881][ T5947] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.842119][ T4607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.875909][ T4607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.914810][ T5947] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.997236][ T5837] veth0_macvtap: entered promiscuous mode [ 80.031761][ T5837] veth1_macvtap: entered promiscuous mode [ 80.163227][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.180390][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.200939][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.219481][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.242741][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.272074][ T1162] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.339174][ T1162] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.351331][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.370371][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.394620][ T5954] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.428070][ T1162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.438413][ T1162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.448746][ T1162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.464853][ T1162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.538750][ T5954] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.571750][ T5957] Bluetooth: MGMT ver 1.23 [ 80.600764][ T1162] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.689983][ T5954] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.834186][ T5954] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.932502][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.956803][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.988622][ T5972] syzkaller1: entered allmulticast mode [ 81.067906][ T3839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.082019][ T3839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.350167][ T5981] xt_connbytes: Forcing CT accounting to be enabled [ 81.394252][ T5984] x_tables: duplicate underflow at hook 1 [ 81.491915][ T5990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.521064][ T5987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12'. [ 81.534586][ T5990] bridge_slave_1: left allmulticast mode [ 81.542142][ T5990] bridge_slave_1: left promiscuous mode [ 81.548997][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.585452][ T51] Bluetooth: hci1: command tx timeout [ 81.675963][ T51] Bluetooth: hci0: command tx timeout [ 81.712546][ T5990] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 81.757826][ T51] Bluetooth: hci2: command tx timeout [ 81.825571][ T5831] Bluetooth: hci4: command tx timeout [ 81.831117][ T51] Bluetooth: hci3: command tx timeout [ 82.008867][ T6003] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 82.016979][ T6001] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15'. [ 82.124764][ T6006] bridge_slave_0: default FDB implementation only supports local addresses [ 82.819991][ T6027] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.420796][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 83.477155][ T2998] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.581323][ T3533] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.638862][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.25'. [ 83.660899][ T3533] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.676370][ T6036] netlink: 64 bytes leftover after parsing attributes in process `syz.0.25'. [ 83.684052][ T6039] netlink: 388 bytes leftover after parsing attributes in process `syz.4.24'. [ 83.701432][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 83.726286][ T6042] netlink: 'syz.3.27': attribute type 5 has an invalid length. [ 83.737123][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.25'. [ 83.750901][ T6038] syzkaller0: entered promiscuous mode [ 83.763071][ T6038] syzkaller0: entered allmulticast mode [ 83.845634][ T6041] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 83.857141][ T6041] team0 (unregistering): Port device team_slave_0 removed [ 83.869991][ T6041] team0 (unregistering): Failed to send options change via netlink (err -105) [ 83.880416][ T6041] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 83.891772][ T6041] team0 (unregistering): Port device team_slave_1 removed [ 83.912894][ T3533] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.954387][ T6042] batman_adv: batadv0: Adding interface: vxlan0 [ 83.961242][ T6042] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.990348][ T6042] batman_adv: batadv0: Interface activated: vxlan0 [ 84.007233][ T6042] Zero length message leads to an empty skb [ 84.024496][ T6048] tipc: Started in network mode [ 84.030296][ T6048] tipc: Node identity 4ebb7a453733, cluster identity 4711 [ 84.041632][ T6048] tipc: Enabled bearer , priority 0 [ 84.054963][ T3533] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.068339][ T3533] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.101394][ T6038] tipc: Resetting bearer [ 84.129243][ T3533] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.222888][ T3533] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.289207][ T6037] tipc: Resetting bearer [ 84.318130][ T6037] tipc: Disabling bearer [ 84.342779][ T6069] netlink: 'syz.3.31': attribute type 2 has an invalid length. [ 84.410677][ T6069] !: entered promiscuous mode [ 84.598479][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 84.717548][ T6080] bond1: option all_slaves_active: invalid value (4) [ 84.737417][ T6080] bond1 (unregistering): Released all slaves [ 85.383081][ T6102] netlink: 'syz.0.39': attribute type 16 has an invalid length. [ 85.395381][ T6107] netlink: 'syz.2.43': attribute type 1 has an invalid length. [ 85.405265][ T6102] netlink: 'syz.0.39': attribute type 17 has an invalid length. [ 85.467260][ T6097] veth0: entered promiscuous mode [ 85.544765][ T6102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.618715][ T6097] veth0: left promiscuous mode [ 85.618725][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 85.714436][ T6114] macsec1: entered promiscuous mode [ 85.732134][ T6114] macsec1: entered allmulticast mode [ 85.813826][ T6122] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.858843][ T6122] bridge_slave_1: left allmulticast mode [ 85.878525][ T6122] bridge_slave_1: left promiscuous mode [ 85.899211][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.978367][ T6122] bridge_slave_0: left allmulticast mode [ 85.989254][ T6122] bridge_slave_0: left promiscuous mode [ 85.995100][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.350441][ T6131] netlink: 'syz.2.48': attribute type 12 has an invalid length. [ 86.727788][ T55] cfg80211: failed to load regulatory.db [ 87.120076][ T6186] __nla_validate_parse: 3 callbacks suppressed [ 87.120093][ T6186] netlink: 156 bytes leftover after parsing attributes in process `syz.1.60'. [ 87.228274][ T6185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.327147][ T6185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.370688][ T6197] netlink: 52 bytes leftover after parsing attributes in process `syz.2.65'. [ 87.414565][ T6199] netlink: 40 bytes leftover after parsing attributes in process `syz.3.66'. [ 87.442919][ T6185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.469463][ T6199] warning: `syz.3.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.544582][ T6185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.750260][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.801748][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.843683][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.857529][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.185933][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 88.239735][ T6230] netlink: 'syz.2.75': attribute type 1 has an invalid length. [ 88.270389][ T6233] netlink: 32 bytes leftover after parsing attributes in process `syz.0.76'. [ 88.526441][ T6241] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 88.596493][ T6245] netlink: 'syz.1.79': attribute type 11 has an invalid length. [ 88.690176][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 89.307945][ T6275] smc: net device hsr0 applied user defined pnetid SYZ2 [ 89.332014][ T6275] smc: net device hsr0 erased user defined pnetid SYZ2 [ 89.550759][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'. [ 89.629783][ T6289] netlink: 64 bytes leftover after parsing attributes in process `syz.4.92'. [ 89.654795][ T6289] block nbd0: not configured, cannot reconfigure [ 89.664941][ T6303] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 89.765855][ T6305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.96'. [ 89.784173][ T6086] IPVS: starting estimator thread 0... [ 90.056513][ T6310] IPVS: using max 32 ests per chain, 76800 per kthread [ 90.355330][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 90.448749][ T6329] syz.0.102 (6329) used greatest stack depth: 17656 bytes left [ 90.541118][ T6334] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 91.149990][ T6368] netlink: 'syz.2.112': attribute type 5 has an invalid length. [ 91.288950][ T6370] ieee802154 phy0 wpan0: encryption failed: -90 [ 91.300180][ T6370] netlink: 'syz.1.113': attribute type 16 has an invalid length. [ 91.328402][ T6374] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 91.372610][ T6375] IPv6: addrconf: prefix option has invalid lifetime [ 91.873979][ T6402] netlink: 'syz.2.124': attribute type 18 has an invalid length. [ 92.011492][ T6407] tipc: Started in network mode [ 92.035716][ T6407] tipc: Node identity 660ee6997633, cluster identity 4711 [ 92.044651][ T6407] tipc: Enabled bearer , priority 0 [ 92.092269][ T6401] syzkaller0: entered promiscuous mode [ 92.101269][ T6401] syzkaller0: entered allmulticast mode [ 92.270415][ T6401] tipc: Resetting bearer [ 92.376302][ T6399] tipc: Resetting bearer [ 92.390912][ T6399] tipc: Disabling bearer [ 92.410150][ T6426] syzkaller1: entered promiscuous mode [ 92.437766][ T6426] syzkaller1: entered allmulticast mode [ 92.452223][ T6424] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 93.331580][ T6455] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 93.710898][ T6470] __nla_validate_parse: 12 callbacks suppressed [ 93.729212][ T6470] netlink: 48 bytes leftover after parsing attributes in process `syz.2.141'. [ 93.873638][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 93.891145][ T3494] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.913716][ T6467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.923087][ T6467] batadv_slave_1: entered allmulticast mode [ 93.956027][ T3494] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.068492][ T3494] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.093981][ T3494] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.206881][ T6493] netlink: 'syz.1.147': attribute type 1 has an invalid length. [ 94.254392][ T6484] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20003 [ 94.275871][ T6486] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20003 [ 94.350772][ T6497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.403099][ T6488] syzkaller0: entered promiscuous mode [ 94.411164][ T6488] syzkaller0: entered allmulticast mode [ 94.944847][ T6525] sctp: [Deprecated]: syz.0.154 (pid 6525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.944847][ T6525] Use struct sctp_sack_info instead [ 95.150075][ T6528] veth0: entered promiscuous mode [ 95.156588][ T6526] veth0: left promiscuous mode [ 95.663226][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 95.677154][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 95.993206][ T6564] netlink: 1 bytes leftover after parsing attributes in process `syz.0.166'. [ 96.118122][ T6564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.194891][ T6569] netlink: 'syz.3.168': attribute type 4 has an invalid length. [ 96.530290][ T6584] netlink: 'syz.3.171': attribute type 1 has an invalid length. [ 96.629207][ T6584] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 96.643141][ T6565] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 97.758738][ T6622] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 97.775409][ T6622] dvmrp1: linktype set to 270 [ 97.835441][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'. [ 98.020518][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 98.479674][ T6659] gre0: entered allmulticast mode [ 98.644112][ T6668] netlink: 'syz.4.188': attribute type 10 has an invalid length. [ 98.819976][ T6659] bond0: (slave bond_slave_0): Releasing backup interface [ 98.833328][ T6659] bond0: (slave bond_slave_1): Releasing backup interface [ 98.858364][ T6659] team0: Port device team_slave_0 removed [ 98.872776][ T6659] team0: Port device team_slave_1 removed [ 98.881852][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.897923][ T6659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.915320][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.927889][ T6659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.958426][ T6659] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.025737][ T6668] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 99.064444][ T6671] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.190'. [ 99.201058][ T6697] netlink: 136 bytes leftover after parsing attributes in process `syz.2.195'. [ 99.380380][ T6708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.196'. [ 99.472707][ T6711] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 99.475254][ T6708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.196'. [ 99.508219][ T6711] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 99.659563][ T6701] netlink: 68 bytes leftover after parsing attributes in process `syz.4.196'. [ 99.668796][ T6701] netlink: 68 bytes leftover after parsing attributes in process `syz.4.196'. [ 100.504858][ T6767] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 100.843611][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 101.003276][ T6793] netlink: 388 bytes leftover after parsing attributes in process `syz.0.213'. [ 101.036356][ T6798] netlink: 48 bytes leftover after parsing attributes in process `syz.3.211'. [ 101.417063][ T6810] tipc: Enabled bearer , priority 0 [ 101.568022][ T6810] syzkaller0: entered promiscuous mode [ 101.573743][ T6810] syzkaller0: entered allmulticast mode [ 101.591852][ T6824] netlink: 'syz.1.217': attribute type 4 has an invalid length. [ 101.632785][ T6810] tipc: Resetting bearer [ 101.702872][ T6809] tipc: Resetting bearer [ 102.227468][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 102.596487][ T6873] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 102.614532][ T6873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.408710][ T6809] tipc: Disabling bearer [ 103.426831][ T6852] team0: No ports can be present during mode change [ 103.434922][ T6843] syzkaller0: entered promiscuous mode [ 103.441643][ T6843] syzkaller0: entered allmulticast mode [ 103.479487][ T6862] macvlan2: entered promiscuous mode [ 103.503719][ T6862] macvlan2: entered allmulticast mode [ 103.532213][ T6862] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 103.583194][ T24] tipc: Node number set to 272492185 [ 103.870299][ T6913] netlink: 'syz.2.228': attribute type 10 has an invalid length. [ 103.889204][ T6913] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.918135][ T6913] bond0: (slave team0): Enslaving as an active interface with an up link [ 103.942715][ T6920] bond0: (slave erspan0): Opening slave failed [ 104.054231][ T6913] netlink: 'syz.2.228': attribute type 1 has an invalid length. [ 104.300445][ T6941] x_tables: duplicate underflow at hook 2 [ 104.339238][ T6942] tipc: Started in network mode [ 104.345990][ T6942] tipc: Node identity 5e126ca5f98b, cluster identity 4711 [ 104.354722][ T6942] tipc: Enabled bearer , priority 0 [ 104.381145][ T6942] syzkaller0: entered promiscuous mode [ 104.398643][ T6942] syzkaller0: entered allmulticast mode [ 104.419950][ T6940] tipc: Resetting bearer [ 104.469590][ T6940] tipc: Disabling bearer [ 104.641962][ T6960] x_tables: duplicate underflow at hook 1 [ 104.799363][ T6972] batadv_slave_1: entered promiscuous mode [ 104.810107][ T6971] batadv_slave_1: left promiscuous mode [ 105.082040][ T6987] __nla_validate_parse: 1 callbacks suppressed [ 105.082056][ T6987] netlink: 268 bytes leftover after parsing attributes in process `syz.3.249'. [ 105.216859][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 105.251165][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 105.280433][ T6992] veth0_to_bond: entered allmulticast mode [ 105.593329][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.255'. [ 105.602716][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.255'. [ 105.831227][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 105.875255][ T7029] netlink: 32 bytes leftover after parsing attributes in process `syz.4.260'. [ 105.903620][ T7027] syzkaller0: entered promiscuous mode [ 105.913904][ T7027] syzkaller0: entered allmulticast mode [ 106.031400][ T7034] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.107253][ T7034] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.234670][ T7034] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.297615][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 106.367196][ T7034] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.600757][ T68] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.703096][ T68] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.761578][ T68] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.848520][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.282598][ T7089] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 107.325658][ T7096] tipc: Enabled bearer , priority 0 [ 107.325725][ T7094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.276'. [ 107.354355][ T7096] syzkaller0: entered promiscuous mode [ 107.372920][ T7096] syzkaller0: entered allmulticast mode [ 107.752727][ T7120] tipc: Resetting bearer [ 107.908588][ T7093] tipc: Resetting bearer [ 107.920741][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 107.960096][ T7093] tipc: Disabling bearer [ 108.096459][ T7142] netlink: 'syz.0.285': attribute type 13 has an invalid length. [ 108.292998][ T7151] syzkaller1: entered promiscuous mode [ 108.317284][ T7151] syzkaller1: entered allmulticast mode [ 108.374013][ T7153] nbd0: detected capacity change from 0 to 3 [ 108.394483][ T6188] Buffer I/O error on dev nbd0, logical block 1, async page read [ 108.522754][ T51] block nbd0: Receive control failed (result -104) [ 108.574935][ T7158] xt_TCPMSS: Only works on TCP SYN packets [ 108.668117][ T7163] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 108.715999][ T7169] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 108.759441][ T7169] bond1 (unregistering): Released all slaves [ 108.891621][ T7185] vlan2: entered promiscuous mode [ 108.903334][ T7185] bond0: entered promiscuous mode [ 108.912407][ T7185] bond_slave_0: entered promiscuous mode [ 108.918801][ T7185] bond_slave_1: entered promiscuous mode [ 109.461325][ T7204] netlink: 'syz.3.298': attribute type 13 has an invalid length. [ 109.715946][ T7204] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.950713][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.976420][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.255056][ T7204] batman_adv: batadv0: Interface deactivated: vxlan0 [ 110.303915][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.323260][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.353720][ T36] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.377684][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.412338][ T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.432667][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.446073][ T36] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.454978][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.061790][ T7266] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 111.096546][ T7267] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 111.179609][ T7266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.246961][ T7277] __nla_validate_parse: 8 callbacks suppressed [ 111.246978][ T7277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.313'. [ 111.266755][ T7270] ipvlan2: entered allmulticast mode [ 111.272091][ T7270] bond1: entered allmulticast mode [ 111.292881][ T7273] bond1: (slave gretap2): making interface the new active one [ 111.300930][ T7273] gretap2: entered allmulticast mode [ 111.310239][ T7273] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 111.444444][ T7278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.313'. [ 111.487232][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 111.806324][ T7253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.329049][ T7323] netlink: 'syz.0.322': attribute type 4 has an invalid length. [ 112.510531][ T7217] IPVS: starting estimator thread 0... [ 112.614270][ T7334] IPVS: using max 34 ests per chain, 81600 per kthread [ 112.714706][ T7340] batadv1: entered promiscuous mode [ 112.818960][ T7344] netlink: 32 bytes leftover after parsing attributes in process `syz.4.328'. [ 113.060422][ T7349] syzkaller1: entered promiscuous mode [ 113.066974][ T7349] syzkaller1: entered allmulticast mode [ 113.801028][ T7377] tipc: Started in network mode [ 113.816039][ T7377] tipc: Node identity 121e0b102218, cluster identity 4711 [ 113.833769][ T7377] tipc: Enabled bearer , priority 0 [ 113.923626][ T7383] syzkaller0: entered promiscuous mode [ 113.935896][ T7383] syzkaller0: entered allmulticast mode [ 113.943833][ T7384] syzkaller0: entered promiscuous mode [ 113.950544][ T7384] syzkaller0: entered allmulticast mode [ 114.477202][ T7419] trusted_key: syz.1.347 sent an empty control message without MSG_MORE. [ 115.276675][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.345'. [ 115.287549][ T7400] tipc: Resetting bearer [ 115.333132][ T7374] tipc: Resetting bearer [ 115.365953][ T7374] tipc: Disabling bearer [ 115.444581][ T7214] tipc: Node number set to 805702416 [ 115.453977][ T749] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 115.473338][ T749] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 115.485372][ T7214] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 115.572947][ T7431] netlink: 'syz.3.351': attribute type 11 has an invalid length. [ 115.916074][ T7453] macsec1: entered allmulticast mode [ 115.931336][ T7453] macsec0: entered allmulticast mode [ 115.936923][ T7453] veth1_macvtap: entered allmulticast mode [ 115.979232][ T7456] macsec2: entered promiscuous mode [ 116.013792][ T7456] macsec2: entered allmulticast mode [ 116.025501][ T7214] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 116.267600][ T7465] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 116.285709][ T7468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.360'. [ 116.310033][ T7472] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 116.505835][ T7478] netlink: 'syz.0.363': attribute type 31 has an invalid length. [ 116.546780][ T6086] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 116.790704][ T7486] bond0: (slave team0): Releasing backup interface [ 116.833782][ T7486] bridge_slave_0: left allmulticast mode [ 116.906761][ T7486] bridge_slave_0: left promiscuous mode [ 116.939216][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.989658][ T7486] bridge_slave_1: left allmulticast mode [ 117.012924][ T7486] bridge_slave_1: left promiscuous mode [ 117.034114][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.080770][ T7486] bond0: (slave bond_slave_0): Releasing backup interface [ 117.130051][ T7486] bond0: (slave bond_slave_1): Releasing backup interface [ 117.149707][ T7500] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 117.189897][ T7486] team0: Port device team_slave_0 removed [ 117.204835][ T7486] team0: Port device team_slave_1 removed [ 117.214671][ T7486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.225928][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.237311][ T7486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.245592][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.256814][ T7486] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 117.652660][ T7507] netlink: 'syz.4.370': attribute type 1 has an invalid length. [ 117.661582][ T7507] netlink: 244 bytes leftover after parsing attributes in process `syz.4.370'. [ 118.193206][ T7527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.377'. [ 118.258721][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 118.276638][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 118.374514][ T7534] netlink: 36 bytes leftover after parsing attributes in process `syz.4.378'. [ 118.470045][ T7544] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:0 [ 118.509747][ T7540] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.683387][ T7551] netlink: 136 bytes leftover after parsing attributes in process `syz.0.382'. [ 118.755279][ T7551] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 119.204192][ T7583] 8021q: VLANs not supported on wg0 [ 119.215031][ T7585] x_tables: unsorted underflow at hook 3 [ 119.433711][ T7591] netlink: 'syz.1.391': attribute type 29 has an invalid length. [ 119.453697][ T7591] netlink: 'syz.1.391': attribute type 29 has an invalid length. [ 119.505455][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 119.884125][ T7612] tc_dump_action: action bad kind [ 120.234032][ T7627] syzkaller0: entered promiscuous mode [ 120.252703][ T7627] syzkaller0: entered allmulticast mode [ 120.327984][ T7636] netlink: 132 bytes leftover after parsing attributes in process `syz.2.400'. [ 120.370942][ T7635] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 120.919493][ T7665] netlink: 'syz.0.406': attribute type 1 has an invalid length. [ 120.951079][ T7665] netlink: 96 bytes leftover after parsing attributes in process `syz.0.406'. [ 120.971680][ T7665] netlink: 658 bytes leftover after parsing attributes in process `syz.0.406'. [ 121.002787][ T7671] netlink: 'syz.2.407': attribute type 7 has an invalid length. [ 121.054964][ T7671] netlink: 'syz.2.407': attribute type 7 has an invalid length. [ 121.394272][ T7682] __nla_validate_parse: 3 callbacks suppressed [ 121.394289][ T7682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.408'. [ 121.999976][ T7709] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 122.074208][ T7709] bond3 (unregistering): Released all slaves [ 122.354417][ T7736] netlink: 'syz.0.419': attribute type 1 has an invalid length. [ 122.377681][ T7736] netlink: 52 bytes leftover after parsing attributes in process `syz.0.419'. [ 122.590620][ T7744] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.421'. [ 122.824461][ T7754] netlink: 132 bytes leftover after parsing attributes in process `syz.3.423'. [ 122.929085][ T7766] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 122.940163][ T7766] netlink: 224 bytes leftover after parsing attributes in process `syz.0.424'. [ 123.009151][ T7754] syzkaller0: entered promiscuous mode [ 123.043474][ T7754] syzkaller0: entered allmulticast mode [ 123.318955][ T7783] netlink: 40 bytes leftover after parsing attributes in process `syz.2.428'. [ 123.502777][ T7789] netlink: 68 bytes leftover after parsing attributes in process `syz.4.427'. [ 124.702592][ T13] tipc: Subscription rejected, illegal request [ 124.803188][ T7803] netlink: 'syz.3.432': attribute type 9 has an invalid length. [ 124.846493][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 124.857726][ T7811] netlink: 'syz.0.433': attribute type 3 has an invalid length. [ 125.829689][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'. [ 125.863923][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'. [ 125.897078][ T7855] netlink: 'syz.1.445': attribute type 29 has an invalid length. [ 126.183902][ T7874] pim6reg: entered allmulticast mode [ 126.202918][ T7875] netlink: 'syz.0.451': attribute type 11 has an invalid length. [ 126.465847][ T7891] __nla_validate_parse: 2 callbacks suppressed [ 126.465863][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 126.578996][ T7900] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.460'. [ 126.747834][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'. [ 126.792809][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.462'. [ 126.825998][ T7910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.462'. [ 126.888791][ T7910] macvlan0: entered allmulticast mode [ 126.911967][ T7910] veth1_vlan: entered allmulticast mode [ 127.167288][ T7922] xt_CT: No such helper "pptp" [ 127.318145][ T7928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.466'. [ 127.424431][ T7944] netem: change failed [ 127.801639][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 127.810922][ T7965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.477'. [ 127.851201][ T7965] geneve2: entered promiscuous mode [ 127.866505][ T7965] geneve2: entered allmulticast mode [ 127.925114][ T7970] IPVS: set_ctl: invalid protocol: 90 0.0.0.0:20000 [ 127.931710][ T7969] batman_adv: batadv0: Adding interface: ip6gretap1 [ 127.965234][ T7969] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.991907][ T7969] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 128.026810][ T7972] netlink: 'syz.1.479': attribute type 13 has an invalid length. [ 128.062363][ T7212] IPVS: starting estimator thread 0... [ 128.155342][ T7980] IPVS: using max 32 ests per chain, 76800 per kthread [ 128.203421][ T7984] netlink: 68 bytes leftover after parsing attributes in process `syz.2.483'. [ 128.234453][ T7988] netlink: 68 bytes leftover after parsing attributes in process `syz.2.483'. [ 128.305304][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 128.501552][ T5900] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 128.979576][ T8026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.998282][ T8040] netlink: 'syz.2.497': attribute type 1 has an invalid length. [ 129.028143][ T8032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.064023][ T8025] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.200013][ T8040] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.235000][ T8047] bond3: (slave veth3): Enslaving as an active interface with a down link [ 129.251532][ T8053] bond3: (slave dummy0): making interface the new active one [ 129.260855][ T8053] dummy0: entered promiscuous mode [ 129.267510][ T8053] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 129.297061][ T8025] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.397387][ T8040] bond3 (unregistering): (slave veth3): Releasing active interface [ 129.408378][ T8040] bond3 (unregistering): (slave dummy0): Releasing active interface [ 129.418449][ T8040] bond3 (unregistering): Released all slaves [ 129.445799][ T8025] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.515595][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 129.614707][ T8025] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.756285][ T1323] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.777721][ T3533] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.889185][ T1323] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.075232][ T3533] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.571718][ T8158] __nla_validate_parse: 7 callbacks suppressed [ 131.571734][ T8158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.520'. [ 131.655506][ T8158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.520'. [ 131.820363][ T8172] tipc: Enabling of bearer rejected, failed to enable media [ 132.326058][ T1323] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 132.800054][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.595971][ T8231] syzkaller0: entered promiscuous mode [ 133.608417][ T8231] syzkaller0: entered allmulticast mode [ 133.692093][ T8232] syz.3.531: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 133.710011][ T8232] CPU: 0 UID: 0 PID: 8232 Comm: syz.3.531 Not tainted syzkaller #0 PREEMPT(full) [ 133.710035][ T8232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.710052][ T8232] Call Trace: [ 133.710062][ T8232] [ 133.710069][ T8232] dump_stack_lvl+0x189/0x250 [ 133.710103][ T8232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.710121][ T8232] ? __pfx__printk+0x10/0x10 [ 133.710143][ T8232] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 133.710167][ T8232] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 133.710192][ T8232] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 133.710219][ T8232] warn_alloc+0x214/0x310 [ 133.710245][ T8232] ? __pfx_warn_alloc+0x10/0x10 [ 133.710274][ T8232] ? __get_vm_area_node+0x28f/0x300 [ 133.710295][ T8232] ? htable_create+0x101/0x7a0 [ 133.710321][ T8232] __vmalloc_node_range_noprof+0x690/0x12d0 [ 133.710367][ T8232] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 133.710383][ T8232] ? htable_create+0x101/0x7a0 [ 133.710406][ T8232] ? rcu_is_watching+0x15/0xb0 [ 133.710426][ T8232] ? htable_create+0x101/0x7a0 [ 133.710447][ T8232] __kvmalloc_node_noprof+0x670/0x910 [ 133.710467][ T8232] ? htable_create+0x101/0x7a0 [ 133.710485][ T8232] ? hashlimit_pernet+0x23/0x240 [ 133.710505][ T8232] ? hashlimit_pernet+0x23/0x240 [ 133.710522][ T8232] ? hashlimit_pernet+0x23/0x240 [ 133.710547][ T8232] htable_create+0x101/0x7a0 [ 133.710570][ T8232] hashlimit_mt_check_common+0x719/0xa10 [ 133.710599][ T8232] hashlimit_mt_check_v1+0x221/0x360 [ 133.710631][ T8232] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 133.710658][ T8232] ? xt_find_match+0x1f7/0x250 [ 133.710684][ T8232] xt_check_match+0x3d1/0xab0 [ 133.710710][ T8232] ? __pfx_xt_check_match+0x10/0x10 [ 133.710733][ T8232] ? pcpu_alloc_noprof+0xf95/0x1750 [ 133.710763][ T8232] ? xt_find_match+0x1f7/0x250 [ 133.710790][ T8232] translate_table+0x150b/0x2000 [ 133.710832][ T8232] ? __pfx_translate_table+0x10/0x10 [ 133.710855][ T8232] ? __might_fault+0xb0/0x130 [ 133.710894][ T8232] ? _copy_from_user+0x94/0xb0 [ 133.710922][ T8232] do_ipt_set_ctl+0x967/0xcd0 [ 133.710946][ T8232] ? rcu_is_watching+0x15/0xb0 [ 133.710965][ T8232] ? trace_contention_end+0x39/0x100 [ 133.710984][ T8232] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 133.711026][ T8232] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.711059][ T8232] ? __pfx_aa_sk_perm+0x10/0x10 [ 133.711088][ T8232] nf_setsockopt+0x26f/0x290 [ 133.711118][ T8232] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 133.711140][ T8232] do_sock_setsockopt+0x17c/0x1b0 [ 133.711168][ T8232] __x64_sys_setsockopt+0x13f/0x1b0 [ 133.711196][ T8232] do_syscall_64+0xfa/0xf80 [ 133.711218][ T8232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.711234][ T8232] ? clear_bhb_loop+0x60/0xb0 [ 133.711254][ T8232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.711270][ T8232] RIP: 0033:0x7fe5c9f8f749 [ 133.711291][ T8232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.711305][ T8232] RSP: 002b:00007fe5cade2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 133.711322][ T8232] RAX: ffffffffffffffda RBX: 00007fe5ca1e6090 RCX: 00007fe5c9f8f749 [ 133.711334][ T8232] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000027 [ 133.711344][ T8232] RBP: 00007fe5ca013f91 R08: 0000000000000448 R09: 0000000000000000 [ 133.711359][ T8232] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 133.711369][ T8232] R13: 00007fe5ca1e6128 R14: 00007fe5ca1e6090 R15: 00007ffd32b0edb8 [ 133.711398][ T8232] [ 133.711413][ T8232] Mem-Info: [ 133.755999][ T8231] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 133.795795][ T8232] active_anon:5712 inactive_anon:0 isolated_anon:0 [ 133.795795][ T8232] active_file:2615 inactive_file:39904 isolated_file:0 [ 133.795795][ T8232] unevictable:768 dirty:103 writeback:0 [ 133.795795][ T8232] slab_reclaimable:10955 slab_unreclaimable:129660 [ 133.795795][ T8232] mapped:29277 shmem:1355 pagetables:1179 [ 133.795795][ T8232] sec_pagetables:0 bounce:0 [ 133.795795][ T8232] kernel_misc_reclaimable:0 [ 133.795795][ T8232] free:1299613 free_pcp:16658 free_cma:0 [ 134.135329][ T8232] Node 0 active_anon:22972kB inactive_anon:0kB active_file:10700kB inactive_file:159416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117068kB dirty:412kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12840kB pagetables:4596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 134.236859][ T8232] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 134.275961][ T8232] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.306882][ T8232] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 134.312650][ T8232] Node 0 DMA32 free:1299864kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22972kB inactive_anon:0kB active_file:10700kB inactive_file:159416kB unevictable:1536kB writepending:412kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:42556kB local_pcp:23992kB free_cma:0kB [ 134.320924][ T8253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.535'. [ 134.358081][ T8232] lowmem_reserve[]: 0 0 0 0 0 [ 134.362820][ T8232] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.393280][ T8232] lowmem_reserve[]: 0 0 0 0 0 [ 134.435433][ T8232] Node 1 Normal free:3885644kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22224kB local_pcp:12480kB free_cma:0kB [ 134.476486][ T8232] lowmem_reserve[]: 0 0 0 0 0 [ 134.481248][ T8232] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 134.494170][ T8232] Node 0 DMA32: 1759*4kB (UM) 778*8kB (UM) 307*16kB (UME) 178*32kB (UME) 58*64kB (UME) 53*128kB (UME) 27*256kB (UME) 14*512kB (UM) 10*1024kB (UME) 6*2048kB (UME) 300*4096kB (UM) = 1299772kB [ 134.513255][ T8232] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 134.585308][ T8232] Node 1 Normal: 199*4kB (UE) 60*8kB (UME) 39*16kB (UME) 63*32kB (UME) 24*64kB (UME) 12*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3885644kB [ 134.614038][ T8232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.627623][ T8232] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.746367][ T8232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.780855][ T8232] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.793275][ T8232] 43948 total pagecache pages [ 134.798791][ T8232] 0 pages in swap cache [ 134.803270][ T8232] Free swap = 124996kB [ 134.810237][ T8232] Total swap = 124996kB [ 134.814601][ T8232] 2097051 pages RAM [ 134.819565][ T8232] 0 pages HighMem/MovableOnly [ 134.824245][ T8232] 424280 pages reserved [ 134.846021][ T8232] 0 pages cma reserved [ 135.160481][ T8274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.455526][ T8286] netlink: 'syz.3.545': attribute type 1 has an invalid length. [ 135.575828][ T8299] sctp: [Deprecated]: syz.4.548 (pid 8299) Use of int in maxseg socket option. [ 135.575828][ T8299] Use struct sctp_assoc_value instead [ 135.646453][ T8286] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.704479][ T8293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.547'. [ 135.768335][ T8293] nbd: must specify a size in bytes for the device [ 135.811227][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 136.843903][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 137.038369][ T8355] sctp: [Deprecated]: syz.4.561 (pid 8355) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.038369][ T8355] Use struct sctp_sack_info instead [ 137.954798][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 137.986702][ T8399] netlink: 84 bytes leftover after parsing attributes in process `syz.1.573'. [ 138.348029][ T8410] netlink: 64 bytes leftover after parsing attributes in process `syz.3.576'. [ 138.443416][ T8420] netlink: 'syz.0.579': attribute type 1 has an invalid length. [ 138.451394][ T8421] netlink: 'syz.0.579': attribute type 1 has an invalid length. [ 138.479878][ T8420] bond1: entered promiscuous mode [ 138.480772][ T8424] netlink: 40 bytes leftover after parsing attributes in process `syz.3.580'. [ 138.488294][ T8420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.503913][ T8425] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 138.512780][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.580'. [ 138.552744][ T25] block nbd0: Possible stuck request ffff888024fde000: control (read@0,1024B). Runtime 30 seconds [ 138.623553][ T8437] sctp: [Deprecated]: syz.3.583 (pid 8437) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.623553][ T8437] Use struct sctp_sack_info instead [ 138.642787][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 138.652143][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.581'. [ 139.113451][ T8461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.189721][ T8461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.958132][ T8502] netlink: 'syz.1.600': attribute type 4 has an invalid length. [ 139.982893][ T8502] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.600'. [ 140.012519][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 140.021429][ T8504] netlink: 'syz.1.600': attribute type 13 has an invalid length. [ 140.049593][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.064167][ T8504] netlink: 'syz.1.600': attribute type 13 has an invalid length. [ 140.084900][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.129354][ T8511] Bluetooth: MGMT ver 1.23 [ 140.143564][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.197429][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.479747][ T8529] veth0_vlan: entered allmulticast mode [ 140.547871][ T8534] ªªªªªª: renamed from vlan0 [ 140.763683][ T8545] tipc: New replicast peer: 255.255.255.255 [ 140.771582][ T8545] tipc: Enabled bearer , priority 10 [ 140.798736][ T8548] netlink: 'syz.1.611': attribute type 11 has an invalid length. [ 140.829452][ T8548] netlink: 'syz.1.611': attribute type 11 has an invalid length. [ 140.933676][ T8552] netlink: 'syz.0.612': attribute type 2 has an invalid length. [ 140.986922][ T8554] netlink: 'syz.0.612': attribute type 2 has an invalid length. [ 141.005994][ T8545] netlink: 'syz.1.611': attribute type 11 has an invalid length. [ 141.038957][ T8545] netlink: 'syz.1.611': attribute type 11 has an invalid length. [ 141.052899][ T8552] !: entered promiscuous mode [ 141.100156][ T8554] !: left promiscuous mode [ 141.495401][ T8566] netlink: 'syz.0.616': attribute type 4 has an invalid length. [ 141.703527][ T8577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.885259][ T6086] tipc: Node number set to 2038987333 [ 141.926548][ T8592] __nla_validate_parse: 6 callbacks suppressed [ 141.926566][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'. [ 142.043494][ T8595] batadv_slave_0: entered promiscuous mode [ 142.072894][ T8595] netlink: 'syz.4.625': attribute type 30 has an invalid length. [ 142.121963][ T8595] netlink: zone id is out of range [ 142.151532][ T8595] netlink: zone id is out of range [ 142.163997][ T8595] netlink: zone id is out of range [ 142.183548][ T8595] netlink: zone id is out of range [ 142.190637][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'. [ 142.204604][ T8595] netlink: zone id is out of range [ 142.242768][ T8595] netlink: zone id is out of range [ 142.255620][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 142.277413][ T8595] netlink: zone id is out of range [ 142.317104][ T8595] netlink: zone id is out of range [ 142.347905][ T8595] netlink: zone id is out of range [ 142.453569][ T8622] ip6_vti0: Caught tx_queue_len zero misconfig [ 142.521800][ T8593] batadv_slave_0: left promiscuous mode [ 142.546890][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 142.597351][ T8626] batadv0: entered promiscuous mode [ 142.614013][ T8626] macvtap1: entered promiscuous mode [ 142.619843][ T8626] macvtap1: entered allmulticast mode [ 142.635857][ T8626] batadv0: entered allmulticast mode [ 142.642902][ T8626] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 142.693356][ T8635] macvtap1: left promiscuous mode [ 142.710271][ T8635] macvtap1: left allmulticast mode [ 142.725382][ T8635] batadv0: left allmulticast mode [ 142.954205][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.638'. [ 142.963190][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 143.031040][ T8658] netlink: 'syz.4.637': attribute type 15 has an invalid length. [ 143.154843][ T8661] nbd: must specify a size in bytes for the device [ 143.293267][ T8667] netlink: 220 bytes leftover after parsing attributes in process `syz.0.640'. [ 144.021472][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 144.259678][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 144.509188][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 144.529169][ T8734] netlink: 'syz.2.652': attribute type 2 has an invalid length. [ 145.585501][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 145.674367][ T8733] netlink: 'syz.1.650': attribute type 1 has an invalid length. [ 145.682342][ T8733] netlink: 'syz.1.650': attribute type 2 has an invalid length. [ 146.339182][ T8800] rdma_op ffff888027f9d9f0 conn xmit_rdma 0000000000000000 [ 146.612617][ T8815] pim6reg: entered allmulticast mode [ 146.687460][ T8815] pim6reg: left allmulticast mode [ 147.111508][ T8836] syzkaller1: entered promiscuous mode [ 147.117143][ T8836] syzkaller1: entered allmulticast mode [ 147.148226][ T8849] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 147.422235][ T8876] __nla_validate_parse: 4 callbacks suppressed [ 147.422251][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'. [ 147.452499][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'. [ 147.485606][ T8849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.519971][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'. [ 147.533994][ T8856] bond3: entered allmulticast mode [ 147.625943][ T8878] veth5: entered promiscuous mode [ 147.634626][ T8878] bond3: (slave veth5): Enslaving as an active interface with a down link [ 147.769572][ T8892] netlink: 68 bytes leftover after parsing attributes in process `syz.4.684'. [ 147.830026][ T8892] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 148.346689][ T8928] netlink: 200 bytes leftover after parsing attributes in process `syz.2.694'. [ 148.389265][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 148.555286][ T8939] x_tables: unsorted entry at hook 2 [ 148.565447][ T8940] tipc: Invalid UDP bearer configuration [ 148.565497][ T8940] tipc: Enabling of bearer rejected, failed to enable media [ 148.585322][ T8937] x_tables: unsorted entry at hook 2 [ 148.711976][ T8943] bond3: ARP target 9.0.0.0 is already present [ 148.718631][ T8943] bond3: option arp_ip_target: invalid value (9) [ 148.744736][ T8943] bond3 (unregistering): Released all slaves [ 149.210216][ T8979] net_ratelimit: 5 callbacks suppressed [ 149.210233][ T8979] openvswitch: netlink: Missing valid actions attribute. [ 149.264210][ T8979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.469323][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'. [ 149.471463][ T8988] vlan2: entered promiscuous mode [ 149.507318][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'. [ 149.509313][ T8988] team0: entered promiscuous mode [ 149.764488][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 149.797552][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 150.148258][ T9032] syzkaller0: entered promiscuous mode [ 150.153770][ T9032] syzkaller0: entered allmulticast mode [ 150.311600][ T9043] xt_ecn: cannot match TCP bits for non-tcp packets [ 150.675637][ T51] Bluetooth: hci4: link tx timeout [ 150.681083][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.691834][ T5831] Bluetooth: hci4: link tx timeout [ 150.698452][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.866210][ T9065] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 150.873255][ T9065] syzkaller1: linktype set to 769 [ 150.976386][ T9083] bridge0: port 1(batadv1) entered blocking state [ 150.983175][ T9083] bridge0: port 1(batadv1) entered disabled state [ 150.989891][ T9083] batadv1: entered allmulticast mode [ 151.021233][ T9083] batadv1: entered promiscuous mode [ 151.051510][ T9082] bridge0: port 2(batadv2) entered blocking state [ 151.058789][ T9082] bridge0: port 2(batadv2) entered disabled state [ 151.065517][ T9082] batadv2: entered allmulticast mode [ 151.073819][ T9082] batadv2: entered promiscuous mode [ 151.081651][ T9077] tipc: Enabled bearer , priority 0 [ 151.101170][ T9084] syzkaller0: entered promiscuous mode [ 151.110724][ T9084] syzkaller0: entered allmulticast mode [ 151.179572][ T9084] x_tables: unsorted underflow at hook 1 [ 151.189116][ T9086] bond2: (slave ip_vti0): Device is not bonding slave [ 151.199486][ T9086] bond2: option active_slave: invalid value (ip_vti0) [ 151.209239][ T9086] bond2 (unregistering): Released all slaves [ 151.284162][ T9098] tipc: Resetting bearer [ 151.299866][ T9076] tipc: Resetting bearer [ 151.322469][ T9076] tipc: Disabling bearer [ 151.478731][ T8168] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 151.488214][ T8168] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 151.566577][ T8168] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 151.575892][ T8168] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 151.979925][ T9137] syzkaller0: entered promiscuous mode [ 152.007572][ T9137] syzkaller0: entered allmulticast mode [ 152.142086][ T9137] tipc: Started in network mode [ 152.172778][ T9137] tipc: Node identity 1e156a33e7e1, cluster identity 4711 [ 152.219535][ T9137] tipc: Enabled bearer , priority 0 [ 152.279095][ T9151] ieee802154 phy1 wpan1: encryption failed: -22 [ 152.357538][ T9161] x_tables: duplicate underflow at hook 3 [ 152.429530][ T9135] tipc: Resetting bearer [ 152.568590][ T9135] tipc: Disabling bearer [ 152.707014][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 152.977215][ T9184] netlink: 'syz.2.750': attribute type 1 has an invalid length. [ 153.155391][ T9199] No such timeout policy "syz0" [ 153.291958][ T9200] xt_CT: No such helper "pptp" [ 153.622875][ T9213] __nla_validate_parse: 5 callbacks suppressed [ 153.622892][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 153.642029][ T9215] netlink: 132 bytes leftover after parsing attributes in process `syz.0.757'. [ 153.655565][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.755'. [ 153.683601][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 153.725214][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.755'. [ 153.960964][ T9225] syzkaller0: entered promiscuous mode [ 153.968242][ T9225] syzkaller0: entered allmulticast mode [ 154.036136][ T9225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.762'. [ 154.061479][ T9224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.762'. [ 154.080224][ T9239] netlink: 277 bytes leftover after parsing attributes in process `syz.1.764'. [ 154.711815][ T9266] vlan3: entered promiscuous mode [ 154.719685][ T9266] ip6gretap0: entered promiscuous mode [ 155.255338][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.263194][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.541152][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 155.551633][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'. [ 156.084123][ T9335] nbd: must specify at least one socket [ 156.344716][ T9345] tipc: Enabled bearer , priority 0 [ 156.374097][ T9345] syzkaller0: entered promiscuous mode [ 156.391178][ T9345] syzkaller0: entered allmulticast mode [ 156.422558][ T9345] tipc: Resetting bearer [ 156.432592][ T9344] tipc: Resetting bearer [ 156.448709][ T9344] tipc: Disabling bearer [ 156.493763][ T10] IPVS: starting estimator thread 0... [ 156.510577][ T9364] IPVS: set_ctl: invalid protocol: 131 10.1.1.1:20001 [ 156.525886][ T9364] IPVS: nq: FWM 3 0x00000003 - no destination available [ 156.595415][ T9365] IPVS: using max 38 ests per chain, 91200 per kthread [ 156.815696][ T9385] netlink: 'syz.3.800': attribute type 10 has an invalid length. [ 156.836315][ T9385] batadv0: entered promiscuous mode [ 156.841669][ T9385] batadv0: entered allmulticast mode [ 156.847626][ T9385] bridge0: port 2(batadv0) entered blocking state [ 156.854431][ T9385] bridge0: port 2(batadv0) entered disabled state [ 156.926667][ T9391] IPVS: nq: FWM 3 0x00000003 - no destination available [ 156.944054][ T9386] IPVS: nq: FWM 3 0x00000003 - no destination available [ 157.082481][ T9397] syzkaller0: entered promiscuous mode [ 157.146408][ T9397] syzkaller0: entered allmulticast mode [ 157.168844][ T9417] netlink: 'syz.0.802': attribute type 16 has an invalid length. [ 157.177106][ T68] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 157.186438][ T68] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 157.216674][ T9417] netlink: 'syz.0.802': attribute type 17 has an invalid length. [ 157.359702][ T9404] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.404208][ T9404] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.659807][ T9417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.797587][ T9448] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 157.814649][ T9448] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 157.847682][ T9448] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 159.634017][ T9490] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 159.790351][ T9502] netlink: 'syz.2.814': attribute type 2 has an invalid length. [ 159.829640][ T9502] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 159.844716][ T9502] netlink: 'syz.2.814': attribute type 2 has an invalid length. [ 159.858236][ T9502] netlink: 'syz.2.814': attribute type 2 has an invalid length. [ 159.870616][ T9502] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 160.107303][ T10] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 160.270215][ T9524] fido_id[9524]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 160.656192][ T9563] __nla_validate_parse: 10 callbacks suppressed [ 160.656210][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 160.684132][ T9564] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 161.407966][ T9615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.843'. [ 161.494950][ T9617] bond3: option arp_validate: invalid value (18446744073491447809) [ 161.510238][ T9617] bond3 (unregistering): Released all slaves [ 161.658042][ T9628] Bluetooth: MGMT ver 1.23 [ 161.749823][ T9634] netlink: 32 bytes leftover after parsing attributes in process `syz.3.845'. [ 161.798913][ T9635] netlink: 'syz.1.844': attribute type 10 has an invalid length. [ 161.813488][ T9635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.844'. [ 161.984431][ T9635] team0: Failed to send options change via netlink (err -105) [ 162.045195][ T9635] team0: Port device geneve0 added [ 162.301337][ T9654] netlink: 40 bytes leftover after parsing attributes in process `syz.3.848'. [ 162.549016][ T9662] netlink: 27 bytes leftover after parsing attributes in process `syz.3.849'. [ 162.693616][ T9668] syzkaller0: entered promiscuous mode [ 162.701012][ T9668] syzkaller0: entered allmulticast mode [ 162.894920][ T9677] netlink: 76 bytes leftover after parsing attributes in process `syz.0.852'. [ 163.116491][ T9686] netlink: 48 bytes leftover after parsing attributes in process `syz.3.853'. [ 163.587246][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'. [ 163.596582][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'. [ 163.638910][ T9707] macvlan2: entered promiscuous mode [ 163.654736][ T9707] macvlan2: entered allmulticast mode [ 163.667426][ T9707] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 163.683467][ T9710] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 163.721318][ T9710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.865470][ T9720] netlink: 'syz.0.859': attribute type 16 has an invalid length. [ 163.892355][ T9721] syzkaller0: entered promiscuous mode [ 163.897955][ T9721] syzkaller0: entered allmulticast mode [ 164.122426][ T9731] x_tables: duplicate underflow at hook 2 [ 164.240641][ T9735] netlink: 'syz.0.862': attribute type 1 has an invalid length. [ 165.752114][ T9807] netlink: 'syz.1.870': attribute type 6 has an invalid length. [ 165.766366][ T9807] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.625593][ T25] block nbd0: Possible stuck request ffff888024fde000: control (read@0,1024B). Runtime 60 seconds [ 168.851411][ T5205] udevd[5205]: worker [6188] /devices/virtual/block/nbd0 is taking a long time [ 180.785342][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 194.239096][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.309281][ T5155] Bluetooth: hci3: command 0x0406 tx timeout [ 196.316025][ T5155] Bluetooth: hci1: command 0x0406 tx timeout [ 196.321155][ T9856] Bluetooth: hci2: command 0x0406 tx timeout [ 196.322032][ T5155] Bluetooth: hci0: command 0x080f tx timeout [ 198.715290][ T25] block nbd0: Possible stuck request ffff888024fde000: control (read@0,1024B). Runtime 90 seconds [ 215.523554][ T51] Bluetooth: hci4: link tx timeout [ 215.528778][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 217.585237][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 228.785676][ T25] block nbd0: Possible stuck request ffff888024fde000: control (read@0,1024B). Runtime 120 seconds [ 255.665359][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 255.673627][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.865521][ T25] block nbd0: Possible stuck request ffff888024fde000: control (read@0,1024B). Runtime 150 seconds [ 288.946130][ T25] block nbd0: Possible stuck request ffff888024fde000: control (read@0,1024B). Runtime 180 seconds [ 289.739082][ T5205] udevd[5205]: worker [6188] /devices/virtual/block/nbd0 timeout; kill it [ 289.747964][ T5205] udevd[5205]: seq 12518 '/devices/virtual/block/nbd0' killed [ 313.265278][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 313.272928][ T31] Not tainted syzkaller #0 [ 313.278176][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.286894][ T31] task:kworker/0:1 state:D stack:23128 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 313.298927][ T31] Workqueue: events rfkill_sync_work [ 313.304229][ T31] Call Trace: [ 313.307598][ T31] [ 313.310531][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 313.315034][ T31] ? __pfx___schedule+0x10/0x10 [ 313.320089][ T31] ? schedule+0x91/0x360 [ 313.324348][ T31] schedule+0x165/0x360 [ 313.329225][ T31] schedule_preempt_disabled+0x13/0x30 [ 313.334722][ T31] __mutex_lock+0x7e6/0x1350 [ 313.339375][ T31] ? __mutex_lock+0x5bb/0x1350 [ 313.365461][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 313.370797][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 313.394824][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 313.401652][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 313.408176][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 313.415369][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 313.421090][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 313.427001][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 313.432738][ T31] rfkill_set_block+0x1d2/0x440 [ 313.437772][ T31] rfkill_sync_work+0x114/0x200 [ 313.442632][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 313.448392][ T31] process_scheduled_works+0xad1/0x1770 [ 313.453956][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.459956][ T31] worker_thread+0x8a0/0xda0 [ 313.464542][ T31] kthread+0x711/0x8a0 [ 313.468740][ T31] ? __pfx_worker_thread+0x10/0x10 [ 313.473860][ T31] ? __pfx_kthread+0x10/0x10 [ 313.478521][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.483725][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 313.488966][ T31] ? __pfx_kthread+0x10/0x10 [ 313.493540][ T31] ret_from_fork+0x599/0xb30 [ 313.498154][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 313.503259][ T31] ? __switch_to_asm+0x39/0x70 [ 313.508120][ T31] ? __switch_to_asm+0x33/0x70 [ 313.512884][ T31] ? __pfx_kthread+0x10/0x10 [ 313.517598][ T31] ret_from_fork_asm+0x1a/0x30 [ 313.522357][ T31] [ 313.525511][ T31] INFO: task kworker/0:11:7219 blocked for more than 143 seconds. [ 313.533295][ T31] Not tainted syzkaller #0 [ 313.538857][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.547602][ T31] task:kworker/0:11 state:D stack:24344 pid:7219 tgid:7219 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 313.559624][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 313.566324][ T31] Call Trace: [ 313.569586][ T31] [ 313.572500][ T31] __schedule+0x14bc/0x5000 [ 313.577070][ T31] ? __pfx___schedule+0x10/0x10 [ 313.581913][ T31] ? schedule+0x91/0x360 [ 313.586751][ T31] schedule+0x165/0x360 [ 313.590905][ T31] schedule_preempt_disabled+0x13/0x30 [ 313.596458][ T31] __mutex_lock+0x7e6/0x1350 [ 313.601034][ T31] ? __mutex_lock+0x5bb/0x1350 [ 313.605824][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 313.612054][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 313.617102][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 313.622833][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 313.628804][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 313.634876][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 313.640616][ T31] process_scheduled_works+0xad1/0x1770 [ 313.646201][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.652178][ T31] worker_thread+0x8a0/0xda0 [ 313.656817][ T31] ? __kthread_parkme+0x7b/0x200 [ 313.661744][ T31] kthread+0x711/0x8a0 [ 313.668651][ T31] ? __pfx_worker_thread+0x10/0x10 [ 313.673756][ T31] ? __pfx_kthread+0x10/0x10 [ 313.678344][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.683529][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 313.688775][ T31] ? __pfx_kthread+0x10/0x10 [ 313.693369][ T31] ret_from_fork+0x599/0xb30 [ 313.698066][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 313.703183][ T31] ? __switch_to_asm+0x39/0x70 [ 313.707969][ T31] ? __switch_to_asm+0x33/0x70 [ 313.712716][ T31] ? __pfx_kthread+0x10/0x10 [ 313.717308][ T31] ret_from_fork_asm+0x1a/0x30 [ 313.722064][ T31] [ 313.725085][ T31] INFO: task syz.4.827:9536 blocked for more than 143 seconds. [ 313.733479][ T31] Not tainted syzkaller #0 [ 313.738607][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.747475][ T31] task:syz.4.827 state:D stack:25784 pid:9536 tgid:9536 ppid:5837 task_flags:0x400040 flags:0x00080002 [ 313.759522][ T31] Call Trace: [ 313.762798][ T31] [ 313.765764][ T31] __schedule+0x14bc/0x5000 [ 313.770286][ T31] ? lockdep_unlock+0x89/0x120 [ 313.775050][ T31] ? stack_trace_save+0x9c/0xe0 [ 313.779916][ T31] ? __pfx___schedule+0x10/0x10 [ 313.784759][ T31] ? schedule+0x91/0x360 [ 313.789030][ T31] schedule+0x165/0x360 [ 313.793174][ T31] schedule_timeout+0x9a/0x270 [ 313.797941][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 313.803302][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.808504][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 313.813689][ T31] ? wait_for_completion+0x267/0x5d0 [ 313.818983][ T31] wait_for_completion+0x2bf/0x5d0 [ 313.824098][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 313.830468][ T31] ? __flush_work+0xd2/0xbc0 [ 313.835070][ T31] ? __flush_work+0xd2/0xbc0 [ 313.839692][ T31] __flush_work+0x9b9/0xbc0 [ 313.844192][ T31] ? __flush_work+0xd2/0xbc0 [ 313.848961][ T31] ? __pfx___flush_work+0x10/0x10 [ 313.853979][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 313.859301][ T31] ? __pfx___cancel_work+0x10/0x10 [ 313.864401][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 313.870097][ T31] ? __cancel_work_sync+0x5c/0x110 [ 313.875241][ T31] __cancel_work_sync+0xbe/0x110 [ 313.880190][ T31] rfkill_unregister+0x92/0x220 [ 313.885084][ T31] nfc_unregister_device+0x96/0x2a0 [ 313.890327][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 313.896060][ T31] virtual_ncidev_close+0x56/0x90 [ 313.901068][ T31] __fput+0x44c/0xa70 [ 313.905034][ T31] task_work_run+0x1d4/0x260 [ 313.909819][ T31] ? __pfx_task_work_run+0x10/0x10 [ 313.914944][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 313.920355][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 313.925876][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 313.931169][ T31] ? rcu_is_watching+0x15/0xb0 [ 313.935965][ T31] do_syscall_64+0x2e3/0xf80 [ 313.940573][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.946655][ T31] ? clear_bhb_loop+0x60/0xb0 [ 313.951320][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.957350][ T31] RIP: 0033:0x7f97a118f749 [ 313.961762][ T31] RSP: 002b:00007ffe7ced4398 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 313.970198][ T31] RAX: 0000000000000000 RBX: 0000000000027211 RCX: 00007f97a118f749 [ 313.978184][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 313.986164][ T31] RBP: 00007f97a13e7da0 R08: 0000000000000001 R09: 0000000d7ced468f [ 313.994118][ T31] R10: 0000001b30320000 R11: 0000000000000246 R12: 00007f97a13e5fac [ 314.002135][ T31] R13: 00007f97a13e5fa0 R14: ffffffffffffffff R15: 00007ffe7ced44b0 [ 314.010140][ T31] [ 314.013164][ T31] INFO: task syz.2.828:9546 blocked for more than 144 seconds. [ 314.023964][ T31] Not tainted syzkaller #0 [ 314.028942][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.037661][ T31] task:syz.2.828 state:D stack:28152 pid:9546 tgid:9545 ppid:5840 task_flags:0x400040 flags:0x00080003 [ 314.049621][ T31] Call Trace: [ 314.052891][ T31] [ 314.055863][ T31] __schedule+0x14bc/0x5000 [ 314.060390][ T31] ? __pfx___schedule+0x10/0x10 [ 314.065514][ T31] ? schedule+0x91/0x360 [ 314.069769][ T31] schedule+0x165/0x360 [ 314.073913][ T31] schedule_preempt_disabled+0x13/0x30 [ 314.079384][ T31] __mutex_lock+0x7e6/0x1350 [ 314.083963][ T31] ? __mutex_lock+0x5bb/0x1350 [ 314.088773][ T31] ? rfkill_fop_release+0x4b/0x220 [ 314.093873][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 314.098912][ T31] ? __pfx_rfkill_fop_release+0x10/0x10 [ 314.104443][ T31] rfkill_fop_release+0x4b/0x220 [ 314.109400][ T31] ? __pfx_rfkill_fop_release+0x10/0x10 [ 314.114929][ T31] __fput+0x44c/0xa70 [ 314.118935][ T31] task_work_run+0x1d4/0x260 [ 314.123509][ T31] ? __pfx_task_work_run+0x10/0x10 [ 314.128669][ T31] ? futex_wait+0x285/0x360 [ 314.133182][ T31] ? __pfx_futex_wait+0x10/0x10 [ 314.138055][ T31] get_signal+0x11ec/0x1340 [ 314.142560][ T31] ? poll_select_finish+0x264/0x5e0 [ 314.147816][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 314.153354][ T31] ? __pfx_set_user_sigmask+0x10/0x10 [ 314.158732][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 314.164876][ T31] ? __se_sys_ppoll+0x213/0x260 [ 314.169784][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 314.175408][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 314.180681][ T31] ? rcu_is_watching+0x15/0xb0 [ 314.185466][ T31] do_syscall_64+0x2e3/0xf80 [ 314.190047][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.196117][ T31] ? clear_bhb_loop+0x60/0xb0 [ 314.200780][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.206714][ T31] RIP: 0033:0x7f7a3258f749 [ 314.211118][ T31] RSP: 002b:00007f7a3347d038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 314.219541][ T31] RAX: 0000000000000001 RBX: 00007f7a327e5fa0 RCX: 00007f7a3258f749 [ 314.227724][ T31] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000001c0 [ 314.235807][ T31] RBP: 00007f7a32613f91 R08: 0000000000000000 R09: 0000000000000000 [ 314.243779][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.251767][ T31] R13: 00007f7a327e6038 R14: 00007f7a327e5fa0 R15: 00007ffe38352f78 [ 314.259772][ T31] [ 314.262792][ T31] INFO: task syz.3.866:9772 blocked for more than 144 seconds. [ 314.270367][ T31] Not tainted syzkaller #0 [ 314.275316][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.283961][ T31] task:syz.3.866 state:D stack:26368 pid:9772 tgid:9769 ppid:5839 task_flags:0x400140 flags:0x00080002 [ 314.296038][ T31] Call Trace: [ 314.299312][ T31] [ 314.302231][ T31] __schedule+0x14bc/0x5000 [ 314.306831][ T31] ? __pfx___schedule+0x10/0x10 [ 314.311689][ T31] ? schedule+0x91/0x360 [ 314.315979][ T31] schedule+0x165/0x360 [ 314.320122][ T31] schedule_preempt_disabled+0x13/0x30 [ 314.325590][ T31] __mutex_lock+0x7e6/0x1350 [ 314.330168][ T31] ? __mutex_lock+0x5bb/0x1350 [ 314.334917][ T31] ? rfkill_register+0x37/0x8e0 [ 314.339831][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 314.344870][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 314.350266][ T31] ? device_initialize+0x24b/0x440 [ 314.355425][ T31] rfkill_register+0x37/0x8e0 [ 314.360105][ T31] nfc_register_device+0x14a/0x320 [ 314.365247][ T31] nci_register_device+0x87f/0x9d0 [ 314.370357][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 314.376019][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 314.381295][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 314.386767][ T31] virtual_ncidev_open+0x129/0x1a0 [ 314.391871][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 314.397537][ T31] misc_open+0x2d5/0x350 [ 314.401797][ T31] chrdev_open+0x4cc/0x5e0 [ 314.406390][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 314.411319][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 314.417663][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 314.422591][ T31] do_dentry_open+0x7ce/0x1420 [ 314.427374][ T31] vfs_open+0x3b/0x340 [ 314.431422][ T31] ? path_openat+0x33f3/0x3dd0 [ 314.436206][ T31] path_openat+0x340e/0x3dd0 [ 314.440795][ T31] ? do_sys_openat2+0xbc/0x200 [ 314.445567][ T31] ? __x64_sys_openat+0x138/0x170 [ 314.450573][ T31] ? __pfx_path_openat+0x10/0x10 [ 314.455527][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 314.460454][ T31] do_filp_open+0x1fa/0x410 [ 314.464945][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 314.470463][ T31] ? _raw_spin_unlock+0x28/0x50 [ 314.475417][ T31] ? alloc_fd+0x64c/0x6c0 [ 314.479753][ T31] do_sys_openat2+0x121/0x200 [ 314.484413][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 314.489697][ T31] ? __fget_files+0x3a0/0x420 [ 314.494368][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 314.499614][ T31] __x64_sys_openat+0x138/0x170 [ 314.504486][ T31] do_syscall_64+0xfa/0xf80 [ 314.509056][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.515110][ T31] ? clear_bhb_loop+0x60/0xb0 [ 314.519964][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.525895][ T31] RIP: 0033:0x7fe5c9f8f749 [ 314.530304][ T31] RSP: 002b:00007fe5cae03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 314.538886][ T31] RAX: ffffffffffffffda RBX: 00007fe5ca1e5fa0 RCX: 00007fe5c9f8f749 [ 314.547054][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 314.555032][ T31] RBP: 00007fe5ca013f91 R08: 0000000000000000 R09: 0000000000000000 [ 314.563066][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.571179][ T31] R13: 00007fe5ca1e6038 R14: 00007fe5ca1e5fa0 R15: 00007ffd32b0edb8 [ 314.579308][ T31] [ 314.582328][ T31] INFO: task syz.0.867:9787 blocked for more than 144 seconds. [ 314.589957][ T31] Not tainted syzkaller #0 [ 314.594877][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.603558][ T31] task:syz.0.867 state:D stack:24488 pid:9787 tgid:9784 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 314.615528][ T31] Call Trace: [ 314.618802][ T31] [ 314.621721][ T31] __schedule+0x14bc/0x5000 [ 314.626311][ T31] ? __pfx___schedule+0x10/0x10 [ 314.631156][ T31] ? schedule+0x91/0x360 [ 314.635422][ T31] schedule+0x165/0x360 [ 314.639581][ T31] schedule_preempt_disabled+0x13/0x30 [ 314.645023][ T31] __mutex_lock+0x7e6/0x1350 [ 314.649687][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 314.654626][ T31] ? __mutex_lock+0x5bb/0x1350 [ 314.659432][ T31] ? misc_open+0x51/0x350 [ 314.663751][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 314.668799][ T31] misc_open+0x51/0x350 [ 314.672944][ T31] chrdev_open+0x4cc/0x5e0 [ 314.677371][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 314.682296][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 314.688730][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 314.693669][ T31] do_dentry_open+0x7ce/0x1420 [ 314.698459][ T31] vfs_open+0x3b/0x340 [ 314.702516][ T31] ? path_openat+0x33f3/0x3dd0 [ 314.707338][ T31] path_openat+0x340e/0x3dd0 [ 314.711945][ T31] ? do_sys_openat2+0xbc/0x200 [ 314.716743][ T31] ? __x64_sys_openat+0x138/0x170 [ 314.721767][ T31] ? __pfx_path_openat+0x10/0x10 [ 314.726785][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 314.731740][ T31] do_filp_open+0x1fa/0x410 [ 314.736282][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 314.741314][ T31] ? _raw_spin_unlock+0x28/0x50 [ 314.746179][ T31] ? alloc_fd+0x64c/0x6c0 [ 314.750503][ T31] do_sys_openat2+0x121/0x200 [ 314.755191][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 314.760407][ T31] ? rcu_is_watching+0x15/0xb0 [ 314.765214][ T31] __x64_sys_openat+0x138/0x170 [ 314.770049][ T31] do_syscall_64+0xfa/0xf80 [ 314.774535][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.780715][ T31] ? clear_bhb_loop+0x60/0xb0 [ 314.785437][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.791335][ T31] RIP: 0033:0x7fa2dd58f749 [ 314.795805][ T31] RSP: 002b:00007fa2db7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 314.804217][ T31] RAX: ffffffffffffffda RBX: 00007fa2dd7e6180 RCX: 00007fa2dd58f749 [ 314.812213][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 314.820184][ T31] RBP: 00007fa2dd613f91 R08: 0000000000000000 R09: 0000000000000000 [ 314.828170][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.836176][ T31] R13: 00007fa2dd7e6218 R14: 00007fa2dd7e6180 R15: 00007ffcad7c9ba8 [ 314.844142][ T31] [ 314.847198][ T31] INFO: task syz.1.871:9809 blocked for more than 144 seconds. [ 314.854729][ T31] Not tainted syzkaller #0 [ 314.859704][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.868579][ T31] task:syz.1.871 state:D stack:28152 pid:9809 tgid:9808 ppid:5832 task_flags:0x400040 flags:0x00080002 [ 314.880922][ T31] Call Trace: [ 314.884194][ T31] [ 314.887153][ T31] __schedule+0x14bc/0x5000 [ 314.891660][ T31] ? __pfx___schedule+0x10/0x10 [ 314.896564][ T31] ? schedule+0x91/0x360 [ 314.900802][ T31] schedule+0x165/0x360 [ 314.904941][ T31] schedule_preempt_disabled+0x13/0x30 [ 314.910603][ T31] __mutex_lock+0x7e6/0x1350 [ 314.915259][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 314.920202][ T31] ? __mutex_lock+0x5bb/0x1350 [ 314.924963][ T31] ? misc_open+0x51/0x350 [ 314.929297][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 314.934315][ T31] misc_open+0x51/0x350 [ 314.938485][ T31] chrdev_open+0x4cc/0x5e0 [ 314.942888][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 314.947943][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 314.954275][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 314.959233][ T31] do_dentry_open+0x7ce/0x1420 [ 314.963995][ T31] vfs_open+0x3b/0x340 [ 314.968056][ T31] ? path_openat+0x33f3/0x3dd0 [ 314.972808][ T31] path_openat+0x340e/0x3dd0 [ 314.977427][ T31] ? do_sys_openat2+0xbc/0x200 [ 314.982169][ T31] ? __x64_sys_openat+0x138/0x170 [ 314.987324][ T31] ? __pfx_path_openat+0x10/0x10 [ 314.992249][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 314.997204][ T31] do_filp_open+0x1fa/0x410 [ 315.001691][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 315.006749][ T31] ? _raw_spin_unlock+0x28/0x50 [ 315.011581][ T31] ? alloc_fd+0x64c/0x6c0 [ 315.016033][ T31] do_sys_openat2+0x121/0x200 [ 315.020726][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 315.025944][ T31] ? exc_page_fault+0x82/0x100 [ 315.030706][ T31] __x64_sys_openat+0x138/0x170 [ 315.035584][ T31] do_syscall_64+0xfa/0xf80 [ 315.040076][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.046137][ T31] ? clear_bhb_loop+0x60/0xb0 [ 315.050804][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.056747][ T31] RIP: 0033:0x7f6704f8f749 [ 315.061158][ T31] RSP: 002b:00007f6705e6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 315.069594][ T31] RAX: ffffffffffffffda RBX: 00007f67051e5fa0 RCX: 00007f6704f8f749 [ 315.077646][ T31] RDX: 00000000000c0a41 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 315.085656][ T31] RBP: 00007f6705013f91 R08: 0000000000000000 R09: 0000000000000000 [ 315.093630][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.101803][ T31] R13: 00007f67051e6038 R14: 00007f67051e5fa0 R15: 00007ffe6dba5e58 [ 315.109908][ T31] [ 315.112952][ T31] [ 315.112952][ T31] Showing all locks held in the system: [ 315.120710][ T31] 4 locks held by kworker/0:1/10: [ 315.125765][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 315.136777][ T31] #1: ffffc900000f7b80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 315.149130][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 315.159190][ T31] #3: ffff888032603100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 315.168898][ T31] 1 lock held by khungtaskd/31: [ 315.173727][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 315.183635][ T31] 2 locks held by getty/5594: [ 315.188333][ T31] #0: ffff8880339bd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 315.198093][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 315.208382][ T31] 1 lock held by udevd/6188: [ 315.212958][ T31] #0: ffff8881437c6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 315.222201][ T31] 3 locks held by kworker/0:11/7219: [ 315.227499][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 315.238488][ T31] #1: ffffc90003747b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 315.251997][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 315.263313][ T31] 2 locks held by kworker/u8:18/8168: [ 315.268780][ T31] #0: ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 315.278750][ T31] #1: ffff8880b8824448 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 315.287667][ T31] 1 lock held by syz.4.827/9536: [ 315.292591][ T31] #0: ffff888032603100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 315.302419][ T31] 1 lock held by syz.2.828/9546: [ 315.307396][ T31] #0: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_release+0x4b/0x220 [ 315.317687][ T31] 3 locks held by syz.3.866/9772: [ 315.322687][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.331146][ T31] #1: ffff888026a3d100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 315.340734][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 315.350661][ T31] 1 lock held by syz.0.867/9787: [ 315.355599][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.364023][ T31] 1 lock held by syz.1.871/9809: [ 315.368973][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.377459][ T31] 1 lock held by syz-executor/9846: [ 315.382646][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.391106][ T31] 1 lock held by syz-executor/9847: [ 315.396322][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.404745][ T31] 1 lock held by syz-executor/9850: [ 315.409943][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.418393][ T31] 1 lock held by syz-executor/9851: [ 315.423563][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.432200][ T31] 1 lock held by syz-executor/9853: [ 315.437418][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.445928][ T31] 1 lock held by syz-executor/9967: [ 315.451105][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.459560][ T31] 1 lock held by syz-executor/9968: [ 315.464735][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.473182][ T31] 1 lock held by syz-executor/9973: [ 315.478378][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.486838][ T31] 1 lock held by syz-executor/9974: [ 315.492012][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.500479][ T31] 1 lock held by syz-executor/9976: [ 315.506360][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.514833][ T31] 1 lock held by syz-executor/9979: [ 315.520053][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.528494][ T31] 1 lock held by syz-executor/9980: [ 315.533683][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.542336][ T31] 1 lock held by syz-executor/9986: [ 315.547553][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.556032][ T31] 1 lock held by syz-executor/9987: [ 315.561205][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.569649][ T31] 1 lock held by syz-executor/9990: [ 315.574824][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 315.583298][ T31] [ 315.585761][ T31] ============================================= [ 315.585761][ T31] [ 315.594188][ T31] NMI backtrace for cpu 1 [ 315.594208][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 315.594222][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 315.594230][ T31] Call Trace: [ 315.594236][ T31] [ 315.594243][ T31] dump_stack_lvl+0x189/0x250 [ 315.594263][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.594276][ T31] ? __pfx__printk+0x10/0x10 [ 315.594301][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 315.594317][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 315.594332][ T31] ? __pfx__printk+0x10/0x10 [ 315.594350][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 315.594369][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 315.594384][ T31] watchdog+0xf3c/0xf80 [ 315.594403][ T31] ? watchdog+0x1e2/0xf80 [ 315.594422][ T31] kthread+0x711/0x8a0 [ 315.594439][ T31] ? __pfx_watchdog+0x10/0x10 [ 315.594453][ T31] ? __pfx_kthread+0x10/0x10 [ 315.594469][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.594483][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 315.594503][ T31] ? __pfx_kthread+0x10/0x10 [ 315.594518][ T31] ret_from_fork+0x599/0xb30 [ 315.594538][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 315.594563][ T31] ? __switch_to_asm+0x39/0x70 [ 315.594576][ T31] ? __switch_to_asm+0x33/0x70 [ 315.594588][ T31] ? __pfx_kthread+0x10/0x10 [ 315.594603][ T31] ret_from_fork_asm+0x1a/0x30 [ 315.594629][ T31] [ 315.594637][ T31] Sending NMI from CPU 1 to CPUs 0: [ 315.739163][ C0] NMI backtrace for cpu 0 [ 315.739180][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 315.739198][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 315.739208][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 315.739231][ C0] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 315.739244][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 315.739259][ C0] RAX: e76cccd22b7d5500 RBX: ffffffff8197438a RCX: e76cccd22b7d5500 [ 315.739271][ C0] RDX: 0000000000000001 RSI: ffffffff8d76bd39 RDI: ffffffff8bbfc660 [ 315.739282][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b883359b R09: 1ffff110171066b3 [ 315.739293][ C0] R10: dffffc0000000000 R11: ffffed10171066b4 R12: ffffffff8f805a70 [ 315.739305][ C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000 [ 315.739315][ C0] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 315.739328][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.739339][ C0] CR2: 000055c16d85d000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 315.739353][ C0] Call Trace: [ 315.739361][ C0] [ 315.739367][ C0] default_idle+0x13/0x20 [ 315.739389][ C0] default_idle_call+0x73/0xb0 [ 315.739413][ C0] do_idle+0x1ea/0x520 [ 315.739429][ C0] ? irqentry_exit+0x5ba/0x660 [ 315.739450][ C0] ? __pfx_do_idle+0x10/0x10 [ 315.739474][ C0] cpu_startup_entry+0x44/0x60 [ 315.739490][ C0] rest_init+0x2de/0x300 [ 315.739504][ C0] start_kernel+0x3ae/0x410 [ 315.739522][ C0] x86_64_start_reservations+0x24/0x30 [ 315.739542][ C0] x86_64_start_kernel+0x143/0x1c0 [ 315.739561][ C0] common_startup_64+0x13e/0x147 [ 315.739588][ C0] [ 317.108872][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.028990][ T25] block nbd0: Possible stuck request ffff888024fde000: control (read@0,1024B). Runtime 210 seconds