last executing test programs: 20.734217605s ago: executing program 3 (id=6745): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000002000010000000000000000000af9130000000002000000001400010000000000000000000000000000000001140002"], 0x44}}, 0x84) 20.276434108s ago: executing program 3 (id=6747): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 20.085811705s ago: executing program 3 (id=6748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xfffff076}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2404c080) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 19.546624554s ago: executing program 2 (id=6755): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000002c0)={0x10, 0x3, {0x401, @usage=0x2, 0x0, 0x5, 0xfffffffffffffffd, 0x6, 0x4, 0x1ff, 0x41a, @struct={0x1, 0x3}, 0x54830f40, 0xffffffe8, [0x7, 0x8000, 0x1f8, 0x2, 0x2, 0xffffffffffffffff]}, {0x80, @struct={0xd3e5, 0x101}, 0x0, 0x3, 0x8, 0x9, 0x4, 0x4, 0x449, @usage=0x10000, 0x6, 0x7, [0x8, 0x1, 0x7, 0x3, 0x4, 0xb3]}, {0x3e0b, @struct={0x16, 0xffff}, 0x0, 0x80000000, 0x3, 0x8, 0x5, 0x5, 0x20, @struct={0x9, 0x2}, 0x1, 0x5, [0x2, 0xf, 0x4, 0xfc, 0x8, 0xc8f5]}, {0x100000000, 0x7, 0x4c52}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000002100)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x501001, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x7fff]}, {0x5, 0x0, 0x9, 0x40000000000000}}, 0x3, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x81}, 0x9, &(0x7f0000001fc0)=[{0x1, 0x1, &(0x7f0000000180)='$\xb8\xb4[,#-!\x9e\x00', &(0x7f00000001c0)="01908efab1594d0354bd0a288f07f8e7a233ca6e853d47a6bc5991234f1cf4765213ad1f8b6cb3a9e84c478f70f9e9d6001214b4ba9661db679f8e8a0586c68f68b4500b4bf7552d7197d3e9dd1581f708555fcddf65fc1290b5bb6c6b7f6d1d51882e003636811a1f4f7fecaac964b71c1fde83c321f818fcad65b7cdb82388", 0x80, 0x38}, {0x3, 0xf1, &(0x7f0000000240)='\x00', &(0x7f00000006c0)="7941dd4aa958066f39ab6aaea221469c391ac9c6a963e8b9d5775934905d57103d303cad6761c8c305973e44cf4871185d036919189fb750627c5c4e4492c5873a16e07db2b644e7e8442aca19d7882148f28ac6b0e8474b23336d68d720b7616dc9ce382aa02b8d1d5452eb71f407300191e1de4c6398f601330c054ad84c7b53037f9705f15d3abb653d47bdaffeedf799bab7acc834b19ff7b67446a99147326c34d45a3fec8eefe722b1f982c6aa97704bb4c699df4e1ec3ce68e5ac248ec609fe933d2c6b4067ad94e9d08009a10adf99e72564", 0xd6, 0x38}, {0x1, 0x4, &(0x7f00000007c0)='\'\x00', &(0x7f0000000800)="c0467041c8c4296d0d8ff3de1af1293939ab27376fe9aa136b5806afa75a022c7824ea249b52e313d8dacaa81493d94d69534eab1a9405dc793b15d79ac89756b4c8aebecd91dc3df078784131c8614fd10c1ae3827fd91737168c255b5a54d47b08f2262f3ce7b77e62600edb0ee7f2fbe81f1b5a99b956fbc76e22dc8208600a09659c06b17a6d5210", 0x8a, 0x1a}, {0x2, 0x81, &(0x7f00000008c0)='\x00', &(0x7f00000019c0)="abfa3b1d45006e4a7d8e9a2dd5a8e219aef69f658de8ebcbb65627daff7711d1bda3b64d1dcd02e63570f7dac5a5f43ba52a122cf026d3103939121a842115a31f8a0b5ef1ac718f6e74643f413edd48eb15294ceeef216e74af3c81d5b79b9db26097124b2310ebe66f50f6199fa739c724a4167febc5240030890262aea60544ead2cfbea23f81c534725d118b4c66a7c8fabdaa315f9dc3cb89cea538e37f90eae8d279f97dc09633a23bd7033b3e", 0xb0, 0x10}, {0x2, 0x6, &(0x7f0000001a80)='[}\x00', &(0x7f0000001ac0)="c4c8bc69541daf79b1a9f6863874d583a5450ef8494e35e478cad770bc2aa6c47c80e313f82a9586a34ea35d6b86ad43356d269d2c2089d8e71d8f085ae73f605af3310dbb8d88d0635ba8e7143898eba81cb8812894530eb626a0f66ec6372f4f4c280d0b7d5baa0a1e09509d6407d893ab", 0x72, 0x22}, {0x1, 0x1ff, &(0x7f0000001b40)='\x00', &(0x7f0000001b80)="cf5a03542664f0d7cbb1bfc1bc39a4e70754fd5a44a320814ad6ee5d1c4ab74e1752b0b8a4ae8877bad0c6aef519d2eb89fb283e645ce5e4c9126b8556770fa1d14fbb19d97e0ec20169b06317883e5a89395549141579ac44b958f6616dd897b1bf6ddce6fe3aab2737cdc1ab5fc40991818d41b26a0a52e72b8ab2fc9cf03e9c4c123110b7ff38447f8e22329c0f0e9e1bfbfad7a6071bc7c1b5bb50e8fe5b6f25cc51f02edcad145fba86b9ea91e107970ae92f8f524fc6bf9f9cf26868c24e484cee1a2dd7e72189ba", 0xcb, 0x12}, {0x3, 0x88, &(0x7f0000001c80)='{\x00', &(0x7f0000001cc0)="27e74839d6c2ea405587ce183e3970fe5a6988d8fd087d9ece6b164ca9a8055a3e2e2efcd25675dd2400230c2b1e30edbf0e2c765e99ea2ea2ccfdb7d5c92a0c249b15ad6079ff046ed5705d31c7067d16358efc58b7c7fad82bb59e5338f7b209c5ba2a01b0b32c0cdbcba3197258bf0702b6867b8d3802d0cc4d4cac7184c5391b84eff0586f4e3cb9fa48543b1db5720ea923bd5c1ea7003e3c38549139d2d927eaa032bb269706af932fb4cda9958e1260a3542b6c686669b2139b1b201043d1258acee6239ac6a0e171e31b72db871704b64338dc5099ca80418fe32bbaba6002016f101da812cf5f9436db2b5708", 0xf1, 0x22}, {0x3, 0x5, &(0x7f0000001dc0)='-\x00', &(0x7f0000001e00)="f5634abaa4b130b62c77d15ba777210a00915c8b54f40c0dbb6fdf35a98b573b0850b11fe7430a74a9902609806bc16b7a4b4bd5d3b9d6c362b449037b0f4d27e7f5d54cb541133b82b293d5d81989b561488f92ab98", 0x56}, {0x0, 0x7, &(0x7f0000001e80)='\\\x00', &(0x7f0000001ec0)="d0c06f11b8ba5b350405f2d3967b43657e5c0dc0625ae84bd53d3860a83e51bf64dcee042d2882a2cc1f2010b1a254c192ebc20c2e71ffb6ac676b515fa5f49d8d655a55fcee47a28fd6949f332b5d735f24b291d112d8f4d8390ac55052dd0dd45a0f279949156e437020d027edb2dd9ef2c9d6b65ad9a8772ce56ac88baf7c34379b7dd4388428bcdc07e4b9f76f98a77a000596e46d182c78009bd369b32caad5e4cc97083483cc4a6b445e08a00c638deb4fb09de4f2c42c6214776ebd924efb46e58f735b9906acd43138ed1dc0d4e6b3206c18c91b7d98fb078ea0011986a570ebc34923e9d2362ad484", 0xed, 0x20}]}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002240)={'syztnl1\x00', &(0x7f00000021c0)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x5, 0x2, 0x6f, @mcast2, @loopback, 0x1456c556fe3b185c, 0x10, 0x400, 0x368f}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002280)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000002380)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000002500)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000024c0)={&(0x7f00000023c0)=@polexpire={0x100, 0x1b, 0x1, 0x70bd28, 0x25dfdbfb, {{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@mcast2, 0x4e22, 0x6, 0x4e22, 0x3ff, 0xa, 0x80, 0x0, 0x32, r3, r4}, {0x80000001, 0x0, 0x1, 0x6, 0x4, 0xfffffffffffffe00, 0x4bf, 0x100}, {0x2, 0x101, 0x5, 0x7}, 0xfffffff9, 0x6e6bb0, 0x1, 0x1, 0x2, 0x2}, 0xf}, [@srcaddr={0x14, 0xd, @in6=@empty}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in=@broadcast, 0x0, 0xa}}]}, 0x100}, 0x1, 0x0, 0x0, 0x810}, 0x8000) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000009c0)={r1, "9aec60368df0c3178088c194ccd71b75"}) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000280), 0x4) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x52) 19.517147776s ago: executing program 2 (id=6756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xffffffff, 0xff, 0xff000000]}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000297ff20ac0000000000000005001b0001000000"], 0x24}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c010000160001000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000000000000000000000000000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000006c000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e00000000000000000400000000000000000000000000000000000000000000000000000000000000ff0f000000000000000000800000000000000000000000000000000000000000000000000000000100000000000000000000000032100000080022"], 0x12c}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="2d0200000000000000b534afcfa306ca25f36823051fa9a05f7d783866948ce3b295eeacf78b85af0cb4b2a22f090000008f791a0560564472434a154e9a39d6365901d407b988c74f52bd5627e07dc928d8956e3a1fc7e9c0f4b75b4d752a9b79aff10b1e2f02afc32c7c"], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r8) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x30, r9, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x40}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000700)={0x5fc, r9, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x550, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6d8d6ab248c2a11995d257f7b456d1261c58ac7468a34f3be35decde4ea90776"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x354, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0xe8, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x260, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xffffff80}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xf, @mcast2, 0x1}}]}, {0x1a4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_ALLOWEDIPS={0x178, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000804) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x10008000}, 0x2) 17.536279638s ago: executing program 3 (id=6757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r2 = socket(0xa, 0x3, 0x4) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x14, 0x7a3cc0df0763377f, 0x0, 0x0, {0x10, 0x24}}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'macsec0\x00', &(0x7f0000000040)=@ethtool_modinfo={0x42, 0x10001, 0x13}}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) 17.532198391s ago: executing program 2 (id=6759): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), 0xffffffffffffffff) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x38, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x10}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x20040000) sendmsg$nl_route_sched(r0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x7f81, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b32, &(0x7f0000000040)) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe0b7}}, 0x1ea, 0x8}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000380)={r10, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x1, 0x5}, 0x90) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}}, 0x0) 17.518239666s ago: executing program 1 (id=6761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x40, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x4c, r4, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}]}, 0x4c}}, 0x804) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4, 0x27}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x260580e9}, 0x810) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r11, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7, 0x8, 0x6, 0x9, {{0xf, 0x4, 0x0, 0x1f, 0x3c, 0x67, 0x0, 0x8, 0x29, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x25, 0x0, [{0x2, 0x11, "3e222901585be8e3deefc516b61dc3"}, {0x7, 0x8, "df174e7dcfb7"}, {0x5, 0x3, "d2"}, {0x2, 0x3, "c3"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x3f, 0x0, 0x0, 0x4ae3, 0x20, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x8, 0x10001, 0x7}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x5c, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x5c}}, 0x40) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) 17.316539943s ago: executing program 0 (id=6763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0xc38, 0x4, 0x9, 0x0, r0, 0x2000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x3, r1}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711243000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711243000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = socket$nl_crypto(0x10, 0x3, 0x15) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@empty, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4040, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, {0xbe00, 0x88be, 0x8}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@empty, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4040, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, {0xbe00, 0x88be, 0x8}}}}}, 0x0) socket(0x28, 0x1, 0x0) (async) r4 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000080)={0x7, 'wlan0\x00', {0xfffffffd}, 0x3}) 17.28809644s ago: executing program 2 (id=6764): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r2, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x20040018) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r2, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x20040018) (async) 17.217113136s ago: executing program 1 (id=6765): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00010000000000000000000a00", @ANYRES32=0x0, @ANYBLOB="654d98"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x54}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xfc}}, 0x0) 17.211684754s ago: executing program 3 (id=6766): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060301000000000000000000000000140007800800114000000000050015000c00000005000100060000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574000000090002"], 0x64}}, 0x20004800) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRESHEX=0x0, @ANYRES32=r0, @ANYRES32=r1, @ANYRESDEC=0x0], 0x3c}}, 0x4) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffffff, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x6f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x308, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0xfffffffe, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x1}}, @common=@eui64={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 17.164306448s ago: executing program 0 (id=6767): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xf7, &(0x7f0000001fc0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4a3ff2", 0xc1, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}, {"d77010bccc638e41d335ff361ce886173572c1c6089e36cd551c13256174146b9ec3297ed6f7e4e855a2a473476a1f8f7842a7b9d5baa28f23d342e9d4c3ca479f46646411f3ae97c5c20a618be50ed5efa2acc9ffa20881cdb562d8d2afc05cc12d32916de708b279c53a377fb7e598643430e476a62642336ec479540ecc7239330f6ca802f72bd956c845bff0ad0116e6c290ba25c4833c826f5d1b2f16151638e676e08ef63a200e503f04"}}}}}}}, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000180)) (async) ioctl$int_out(r0, 0x5462, &(0x7f0000000180)) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x0, 0x10044811) sendmsg$tipc(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="d902804967e15be8b3038e0eac706b7f3f9a86c755cf1754ac5af3998bdd55a574342ae724b86dc87b1a34400742508503a459edaa60e66081edc09ae321e06394a5c3d43e0ae0723fe107fbed52a2810f5748e4bb045bfa2e568078870f24971bdcb8a176537728d8e885b955cc8f7353021aa7ed28057db794c111aeea1003a75f6ded54b6f8844155a081d1e4788e5d30901adf66fe379047609ae1c1fa4a4665b0a216f79937b55c4f206c117cbdb433f9188a1350e32b77def9541ff60dea24d61652d80b2e720a4d49876bfe05e7e45a95b3f2852d8f571c0b3048150d7209885e0cdf1e02843aa88b03063ff187", 0xf1}, {&(0x7f0000001440)="25d72ad8208b29181a1d6b60f2202ff39c93bc3d2ba1bb433226a77c8ab35165bc60ec5660c53dace781ac09fc01a3d97f08a42305a65a15deb6a95d547e9599be0d46c352ac3f249936872aa59581f3b21d6743dd39485b2748463e82cb06f095c07dac1b14e851e6f02461c15d2882a5347ea15df6940410be4185f87413ce15348fb0be4405397c73976c7cf890832cd5fec9d5fd05be6c3bcf0f0c73f435dd5b0c1b78108f97ce71e150e0f3e23d496888f9248c9df314283495bbfb9cee5eccdbbd71b53753238c96309efa32833901d77202afb5764028d905a6d3b918a55baef4b710b50c7bf1cdefa280f1792cef2fbeba4f29890e61482bfaa63d", 0xff}, {&(0x7f0000001540)="ee74514aec21e9fcc8a85add63f11eefd03aff0101051e9a72c208bae02ce976eb37a347b71601e05610a7e876fb88f03595c154cf6cf61f490c6c3bbe9ac98a57a3fa31ccf1f0b225b61c3857e6f5d230b50b29e4a178b92f5fdd0a1a3ff4de40968edaa75b8b0e391f4103146dd1f1a930b0aa2395c1517064fc48257e52bc882afb509020e16664b5ba225b388782fc0acaf3840d7cccf89a10d5e63ae412367fb79598e9df4d9e63b5d048333fbece4bfc800b7cea70f3f0a729d89d41a562b74fa504240238c05071739c1342d6f5b4a5f76f8c20b200ea32b8a220ac3f7e8f06c3", 0xe4}, {&(0x7f0000001640)="512c816414c00ecf9de0ef4a579187f1f47f2a20329bd0df2a26bf061ae90b4b09ab8f90aa485366751ca4d1a16a583266ba7cdc53f5ee056fd3fcb2defa552415a75ce6dfd13204f4a45d42f0903e81ffe63df4017e2aee0d1dc5edde6000b5", 0x60}, {&(0x7f00000016c0)="15f599cb7ae78cdcdea3bdd0f830a3ad5822387dbd20aa51413542febee419227f0cfdb7d2b01c6c37491dda81338ac3d39269d0cebe4809f6ed570a166e5a6d669f22a486f6df8ed155666fd68bc3b83350bc1a46ce464fb70a171e4304f69e2f92c898584b5513b900f1bf31258b212fbcc0def3bc6bea60e5d2f16d0fd2b54ed0ac7ed1c046c0ade4a915e344beb9c58541b247d186b4f8ab31ebffb71f7ce2c23ccef6aa09548c0b812d9f2f6138f559499e69dbb95900d9ef60", 0xbc}, {&(0x7f0000001780)="601e0270e53968244b4ca30dfd347f9e678a2c99a72042328d5a08f48ee5c99658770fd72fefdde1d5ab67543b7efe1b4d30a0f7778eb2e95b6df8fd0c304fee88bee57a", 0x44}, {&(0x7f0000001800)="cbd71416676e61fe372662536476b0685cde26cac4a6cdc0d9fd8abc13", 0x1d}], 0x8, &(0x7f00000018c0)="aa52423a609830a622dd6039e62dbde8bfb3ee601ebad84331ac498df1c104540a5ec65a4e2a607ac6a8243aeb2fde9adac09d475621fc41e0f08b36b2ed768351799bab90d77363d4a84ad2bd7698e1e4ed605b7cce6a45cc24", 0x5a, 0x8880}, 0x8004) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x4, 0x0, &(0x7f0000000180)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)=ANY=[@ANYBLOB="4400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c000580050001000000000062f1aec6156ea233b2ff7fee00b0790fbb59b65ad540ddd2f2fe21b3770c8dc7d1aba7cbebcc0d2d7f9123f70d873db55180ab18c63f8a0c884d985f76408d8d01af923ddad21b2bb0442de21da11637332a737cfedfc941e8bec6"], 0x44}}, 0x0) 17.162727479s ago: executing program 1 (id=6768): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x3c, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x10, 0x47, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0xb5}, @nested={0x4, 0x7e}]}]}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtclass={0x24, 0x28, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) socket$inet(0x2, 0xfb8b2b8b54197c8c, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0xff, @local, @local, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "54e90dade0f83f43817a33a14e885678a5f38ab436a174d6f2369fc532f6c82b", "fc7dfb6e5293418dd950af36edd6dc1c", {"9cf20b4958f15cd0a3eddaf23b2e0eaf", "6272f64f06756f4bee7a8933b1524843"}}}}}}}}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r4) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000dc0)=ANY=[], 0x3c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x91) 17.064702572s ago: executing program 2 (id=6769): r0 = socket$alg(0x26, 0x5, 0x0) close(r0) 17.055344649s ago: executing program 0 (id=6770): r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x1e4, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x19, 0x2034}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00120002800800070000000000"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 17.042456994s ago: executing program 2 (id=6771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000002c0)="f97ba62fdadfd93768b341b7e90c275b6cdc78d81cc0318da16d1605811064312124cfd13344711e469da10b9caa17366bfd41a1a15e1284be8a448d569339", 0x3f, 0x40, &(0x7f00000001c0)={0x11, 0xf6, r7, 0x1, 0xd8, 0x6, @random="98c8ca5122e2"}, 0x14) sendto$packet(r8, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0x2, r7, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x28, r10, 0x1, 0x70bd22, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c9}, 0x20040000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x4d4f, 0x7f3, 0xb3d, 0xb, 0x3ff, 0x2, 0x60, 0x401, 0x3, 0x7, 0xab, 0x7, 0x3, 0x10, 0x39, 0x400, 0x9, 0x8, 0x100, 0xfffffffd, 0x81, 0x10001, 0x6, 0x6, 0x8, 0x8, 0x2, 0x5, 0x1, 0xef1, 0x4, 0x9, 0x2, 0x2, 0x5, 0x3, 0x7f0e3d02, 0x3, 0x5, 0x0, 0x4, 0x53a5, 0x3, 0x0, 0x7, 0x4, 0x7, 0x6, 0x2, 0x9, 0x5, 0x10, 0xa404091, 0x80, 0x7f, 0x9, 0xfffffff8, 0xe, 0x2e1, 0x2, 0xb8e, 0xc0, 0x6, 0xfe00, 0x1, 0x7, 0x400000, 0x6, 0x0, 0x7e5, 0x6, 0x0, 0x6, 0x5, 0x4a0, 0xaec, 0x5c96aa8d, 0x9, 0x505ffcd6, 0x1, 0x8, 0x1, 0xbe4, 0x5, 0x3, 0x0, 0x7, 0x5, 0xd2cf, 0x1, 0x43, 0x9, 0x0, 0x7, 0x2, 0x10000007, 0x8000, 0x1000, 0x7, 0x0, 0x1, 0x1d, 0x5040, 0x80000001, 0x7, 0xfffffffc, 0xfffff9fc, 0x7, 0x1c00000, 0x8, 0x5, 0x0, 0x8, 0x283, 0xfffff000, 0x5, 0x6, 0x6, 0x8, 0x4, 0x6, 0xa0, 0x2, 0x1, 0x80000, 0x5, 0x3, 0x81, 0x76f, 0x7, 0x56, 0x6a848285, 0x4, 0xc4, 0x7fff, 0x81, 0x7f, 0xf, 0x8, 0x3, 0x7b81, 0x4, 0x7ff, 0x4, 0x2, 0x2, 0x8, 0x0, 0x2, 0x5, 0x7f, 0xb7, 0xc24, 0xf, 0x3, 0x8, 0x7, 0x7, 0x47, 0x9, 0xfc9, 0x1, 0x2307, 0x3, 0x0, 0x2, 0x2, 0x9, 0x5, 0x3, 0xd, 0x9, 0x3, 0xffffff80, 0x6, 0x80, 0x81, 0x136, 0xfff, 0x724e, 0x7, 0x1, 0x66b4, 0x7fffffff, 0xf99, 0x9, 0x3a3, 0xffffffff, 0x4, 0x1, 0x4, 0x9784, 0x878, 0x5, 0x100, 0x6, 0x7, 0x3, 0x9, 0x1, 0x5, 0x7, 0x5, 0x3, 0x3, 0x8001, 0x40, 0x6, 0x3, 0x6, 0x6, 0x3, 0xa0, 0x330, 0x3, 0x61f0, 0x7, 0x396adf91, 0x2c, 0xffffffff, 0x771a, 0xc0, 0x4, 0xc, 0x4, 0x0, 0x6, 0xd, 0xb169, 0x308, 0x200, 0x6, 0x0, 0x8, 0x6, 0x8, 0x71, 0x3, 0x6, 0x80000000, 0x9, 0xff, 0x6, 0x95, 0x40, 0x0, 0x6, 0xfd7, 0x5, 0xebd, 0x0, 0xd, 0x7, 0x0, 0xffffffff]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40811) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x6, {[@generic={0x13, 0x2}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.976947384s ago: executing program 3 (id=6772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1b4, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x80, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '.\\\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x11, 0x1a, '/dev/net/tun\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x10}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'nr0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffd}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="3d99dd8d3e03"}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x11, 0x1a, '/dev/net/tun\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xe}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_COMMENT={0xc, 0x1a, ']!{\x01/%\\\x00'}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}, @IPSET_ATTR_ADT={0x94, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x22}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000054000000008500000069a09e935179499339b4564054b20000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect(r1, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xb2, @remote, 0x9249, 0x3}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000200)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r5) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000003300)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_SETFSUUID(r7, 0x4008662c, &(0x7f0000000380)={0x0, 0x0, "5d2ca0e6c1ab9f02e9655b05ef6477db"}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 16.933171464s ago: executing program 0 (id=6773): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x3c}, @in=@local, {0x200000, 0x0, 0xffffffffffff7fff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f0000000000)=0x10000, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x20040054) (async) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) (async) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 16.893031137s ago: executing program 0 (id=6774): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000640)=@raw=[@map_fd={0x18, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0xc, 0x8, 0x6, 0x8, 0x40}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2b, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) (async) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x4, &(0x7f00000003c0)=@framed={{}, [@alu={0x3, 0x1, 0xd, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000400)='syzkaller\x00', 0x2}, 0x90) r4 = socket(0x28, 0x801, 0x0) sendmsg$xdp(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, 0x1, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008050}, 0x20000004) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r3], 0x44}}, 0x40848c0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0xc004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x101}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x24004841) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x101}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x24004841) socket$can_raw(0x1d, 0x3, 0x1) (async) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r10, 0x65, 0x3, 0x0, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r10, 0x65, 0x3, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, &(0x7f00000004c0)={0x6, 0x2, 0xfffffff8, 0x71, 0x51410ccd}) (async) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, &(0x7f00000004c0)={0x6, 0x2, 0xfffffff8, 0x71, 0x51410ccd}) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmmsg$inet(r11, &(0x7f0000002180)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@newchain={0x34, 0x64, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x10, 0xfff3}, {0x5, 0x9}, {0xfff2, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0xde8f}, @TCA_CHAIN={0x8, 0xb, 0x4000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4018840) sendto$inet(r11, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) sendto$inet(r11, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="4c875ca1829a", 0x6}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x807, 0x41}}], 0x20, 0x4048801}, 0x6050) 16.480790442s ago: executing program 4 (id=6775): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 16.480042809s ago: executing program 4 (id=6776): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x3) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) unshare(0x28000400) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14, &(0x7f0000000300)={&(0x7f0000000240)="d97b92a0f034d0d35b939cadbefff78f5c45d706167ac216e1df25b398bb8008f9557de82394550f3787ecb09bbc8c527d02664c2c49fe3f0c0bc4591cde08b45a2f7393f792a0c889a61ff2f9e1fcdd8f0ae915de79452af766d488828fc5861903f3fbabaacac8e8d7edf830aa3aebe4487544007920cefab3ab45dda9b9ed32934ef63391e6e0568cecbb7644240b9e1e56991b40", 0x96}, 0x1, 0x0, 0x0, 0x8000}, 0x4) setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000200)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r5, 0x1, 0x42, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) 16.447863932s ago: executing program 4 (id=6777): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0xd, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x20048804) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0x81, 0x4) getsockopt$sock_linger(r0, 0x1, 0x38, 0x0, &(0x7f0000000240)) 16.407783046s ago: executing program 4 (id=6778): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00\x00', @ANYRES16=r0, @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x94a43c11a87d3198) 16.332606463s ago: executing program 4 (id=6779): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xfc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x9a4, 0xc, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x95c, 0x3, 0x0, 0x1, [{0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffb}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_DATA={0xac, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x69, 0x1, "5743fa623327c0456ec0f42e069209cf8c33b138ef2051b699af6aec47a5c52bc920891e724bb015222a0e6ab6c0cce3ebe2697ddb74e38e10ccc428a7dfc3c6ce7080a92fccc6199510a89cdc4ce892b1def84134e14ab27b8475b080d59974d08cc3b9d4"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_TYPE={0x8}]}}}]}, {0x58c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_DATA={0x540, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "0969ef66877ce12808c240d8cad397ded4377653401514"}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "5fff34b921d18fb91f78dc1c4f01b6e9bd5aaa17577bf9d10493f6f3a48f38cd14e018dc41fc43bfd4eb33c8a415bf94756ed30ded03a9687178073efa39a92bb3f07ada219adbeae6a55cb9cd9c20a5ec0302b316dcf3243352b4f0fdc36a334ffb73dec5cecd2b3763924ef18173dbc52468abf2eca0313e0bb8f0aa9abb87e1fd68678daa98845a8769c19575c7b9f06b89b18de60fe3fc0b964b5e507ddbdd1f096f1fe35ad4a2242bd8de49a9b0f8725e3df709fa736f7b957375e1ffaa82854bd80a883515614b929a9a8ef2ab10ba12e4f2dd094e0f89e6bdddaea9f30fe2bc48241d0459efb7d0d513ef3a"}, @NFTA_DATA_VALUE={0xfb, 0x1, "60377e3bb2eeb41cdcfe61ac029aa6c783cf995974a31ad89fb076307514a56a13bef4b34eab3892712c4ed1d80f27e69c40c965b928cddb017dad441286572cbd67b524d95a5f5079204a43683cc1d4170579563b67ace2e14f39c33d419b730c1607c0aeec61f38871002976b9513d2c5b1bc2db48547b6859ae250bec8136a364caabf722a999f428d5ef6a35e0cf017c3fc16c0c009ddb20b2ea4c480dc3e97c592073c9f8ab4ce28f6057c31f047ac205209ff1e46926833228bd55aae4cbd083619228d75699b3dcb41846bbe85192eac798a252493858aa7bb0c624afae7e28aaf7988896f6f6269514d856cbcae1f97dbdc5c4"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x101, 0x1, "589a0d7666493aa5076880260f61f51f36fa21cf37d376cfc5d3be0dc18eb91af5b0c9c0eccd6e4b9ea604c227fd5195a7a685923ecfe605d0af39f7f7636c03c635809cca3b62a9722e5bd38e10cc37fd60aeb8ceece3b4366d8e3de82e7d7a6338b6dfbfc6be59899d43c27822e4786aeeb7c8ab07394707d3a2652769a79fd363fe7d2d9694ccf2cf92620bdafbf89ff658d490eea7d459d32e9b9c1b78b2f607e6f4e01a59c97479011dc439a88983d0f580894cec05c03aa7e31753ce4832d8af14b92dfd5dafe6921ec6653ddbaddd05130923140343c419bcbc70f80766348f72e3ad26fa02c91b1fa35adbd8ab69bd86fd42264f4678f3eaa5"}]}]}, {0x2ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x290, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x72, 0x1, "977c01254d9c61772af77a832cd55dad8ff843076afb75ad0c006319d786aaed60617b7f149515ebe4308712103f1040dfa3cc057f844d3ae9f2c02a1f748ee88980ca11e4009a76bea69411ebde201f05cd1c464bb44807571461d1a0290c5700827fdf1a1cd2bedd7ca2fe099e"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "ffe1cd7df6f7734997356b826e67a13bc98ac8c7b84a3a46dad6b6e261db8cac6dc272015fd8467b7ffac128b90e55ac52ba5258c8745552b9a99b9dc29abfb6289ec925e9b8baacdede4c639c521cc61065c03081cef59d935ac5cb49a8d0efe83289ba30fec5a5a1da4c179cebc58180058725dc5d3d72e7c6ad111eb7385ecfc505f0ea751003b5f7786a16cbf194e307213251aafc7ab3341f8940a34f2fe095fa47ffdead5cde85a78e2c7dd5e2e190775269ee5b93b938bac108486d9e3df32730db2741ca913428efd45c817f05b7c31aa08c0dc08e6d10bcc748994d"}, @NFTA_DATA_VALUE={0xd4, 0x1, "5cd3981ee3265c58e20ca414800ee809b96e2fe05a11ad5a987a11aea1d0790fa0316db07f72483139c280f539a20ee59f47a26a64071e8ae05332d071bda7d2a303ba53d8d3a79a83162f3eb8f38aacc54b3cb9a2a5400ddd9ddf2b6a6711f671b3029f3cba6328d79a6306a3dc2f0ccdbdefa2f708200d4a232d45f533132ef5ef9f5d75e46fa483a99a51f00fb7732515ec19cd36bd9abf5729e13573e33920c07870b0f10509ffddaa37eaf9242e6df59ccc42b5d94a4aeb0c0ab912d79c6dad7e181af67bf8933fc811f8b2bc09"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xff}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}], {0x14}}, 0x9cc}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50000}, 0x24008015) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/9, 0x9}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 16.331273128s ago: executing program 4 (id=6780): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102000000000000010073797a3000000000140000001000010000000000000000000000000a0000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0xc4) syz_emit_ethernet(0x6e, &(0x7f0000000600)=ANY=[], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x0, 0x0, 0x4, 0x0, 0x0, @empty, @private=0xa010102}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r3, 0x20, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe00000100000000140012000000853cfda4e4b70000000000000000"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close(0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x3, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x200, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r7, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r12, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r12, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r12, 0x1) 16.285122657s ago: executing program 1 (id=6781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000104010000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a2c0012801100010062726964676500000000766500000000140005800500190002000000080025000800ff00140003006272696467655f736c6176655f30"], 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 16.248584261s ago: executing program 1 (id=6782): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000b80)={0x40, 0x1, 0x44f2ade573ff9a8a}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r2, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x9}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x19, 0x4, 0x0, 0x0, {0x2, 0x18, 0x20, 0x20, 0x0, 0x4, 0xc8, 0xb}, [@RTA_IIF={0x8, 0x3, r4}]}, 0x4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'ip6erspan0\x00', {0x4}, 0xfff7}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x1, 0x300) (async) r6 = socket$packet(0x11, 0x1, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f00000000c0)={'netdevsim0\x00', {0x2, 0x4e21, @private=0xa010102}}) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f00000000c0)={'netdevsim0\x00', {0x2, 0x4e21, @private=0xa010102}}) 16.140831549s ago: executing program 1 (id=6783): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x57, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRES16=r3, @ANYRESOCT=0x0, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x8002}, 0x10) vmsplice(r0, &(0x7f0000000640)=[{&(0x7f0000000240)='u', 0x1}], 0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r5, &(0x7f0000000680)="4eded3380304", 0x6) splice(r5, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x80d, &(0x7f0000003600)=ANY=[@ANYBLOB="e727dc071f80aaaaaaaaaabb86dd60dd07a707d72c00cb697a653e336f000000500000000000ff0200000000000000000000000000012e14002e"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) write$tun(r1, &(0x7f00000003c0)={@val={0x0, 0xe8bd}, @val={0x0, 0x80, 0x6, 0x7, 0x4, 0x80}, @mpls={[{0x2, 0x0, 0x1}, {0x39f}, {0x2}, {0x1}], @ipv4=@udp={{0x9, 0x4, 0x3, 0x27, 0x67, 0x66, 0x0, 0x9d, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @remote, {[@timestamp_prespec={0x44, 0xc, 0x75, 0x3, 0x2, [{@rand_addr=0x64010100, 0x2}]}, @end]}}, {0x4e20, 0x4e21, 0x43, 0x0, @opaque="c7dce5008a4d58b3c1f724acabe04a2e26a571cd9f001baf56c8fa977f71f29beb42a9acaeceb61bfbffa9ea9d1d86f96d814b08f30982cdcf1317"}}}}, 0x85) setsockopt$sock_int(r7, 0x1, 0x2d, &(0x7f0000000040)=0xfffff001, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) bind(r8, &(0x7f0000000340)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80) setsockopt$sock_int(r6, 0x1, 0xb, &(0x7f00000001c0)=0xff, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x11, 0x14, 0x121, 0x0, 0x0, {0x23}}, 0x18}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000002000000080005400000000208000100000000000800254000000022d98d0f00"/47], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, r10, 0x5, 0xfffffffc, 0x2, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x8001, 0x1d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8050}, 0x4810) 16.022756882s ago: executing program 0 (id=6784): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f0000000040)=r4, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f0000000040)=r4, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'veth1_to_batadv\x00', {0x2, 0x4e25, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 1.160712771s ago: executing program 32 (id=6771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000002c0)="f97ba62fdadfd93768b341b7e90c275b6cdc78d81cc0318da16d1605811064312124cfd13344711e469da10b9caa17366bfd41a1a15e1284be8a448d569339", 0x3f, 0x40, &(0x7f00000001c0)={0x11, 0xf6, r7, 0x1, 0xd8, 0x6, @random="98c8ca5122e2"}, 0x14) sendto$packet(r8, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0x2, r7, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x28, r10, 0x1, 0x70bd22, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c9}, 0x20040000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x4d4f, 0x7f3, 0xb3d, 0xb, 0x3ff, 0x2, 0x60, 0x401, 0x3, 0x7, 0xab, 0x7, 0x3, 0x10, 0x39, 0x400, 0x9, 0x8, 0x100, 0xfffffffd, 0x81, 0x10001, 0x6, 0x6, 0x8, 0x8, 0x2, 0x5, 0x1, 0xef1, 0x4, 0x9, 0x2, 0x2, 0x5, 0x3, 0x7f0e3d02, 0x3, 0x5, 0x0, 0x4, 0x53a5, 0x3, 0x0, 0x7, 0x4, 0x7, 0x6, 0x2, 0x9, 0x5, 0x10, 0xa404091, 0x80, 0x7f, 0x9, 0xfffffff8, 0xe, 0x2e1, 0x2, 0xb8e, 0xc0, 0x6, 0xfe00, 0x1, 0x7, 0x400000, 0x6, 0x0, 0x7e5, 0x6, 0x0, 0x6, 0x5, 0x4a0, 0xaec, 0x5c96aa8d, 0x9, 0x505ffcd6, 0x1, 0x8, 0x1, 0xbe4, 0x5, 0x3, 0x0, 0x7, 0x5, 0xd2cf, 0x1, 0x43, 0x9, 0x0, 0x7, 0x2, 0x10000007, 0x8000, 0x1000, 0x7, 0x0, 0x1, 0x1d, 0x5040, 0x80000001, 0x7, 0xfffffffc, 0xfffff9fc, 0x7, 0x1c00000, 0x8, 0x5, 0x0, 0x8, 0x283, 0xfffff000, 0x5, 0x6, 0x6, 0x8, 0x4, 0x6, 0xa0, 0x2, 0x1, 0x80000, 0x5, 0x3, 0x81, 0x76f, 0x7, 0x56, 0x6a848285, 0x4, 0xc4, 0x7fff, 0x81, 0x7f, 0xf, 0x8, 0x3, 0x7b81, 0x4, 0x7ff, 0x4, 0x2, 0x2, 0x8, 0x0, 0x2, 0x5, 0x7f, 0xb7, 0xc24, 0xf, 0x3, 0x8, 0x7, 0x7, 0x47, 0x9, 0xfc9, 0x1, 0x2307, 0x3, 0x0, 0x2, 0x2, 0x9, 0x5, 0x3, 0xd, 0x9, 0x3, 0xffffff80, 0x6, 0x80, 0x81, 0x136, 0xfff, 0x724e, 0x7, 0x1, 0x66b4, 0x7fffffff, 0xf99, 0x9, 0x3a3, 0xffffffff, 0x4, 0x1, 0x4, 0x9784, 0x878, 0x5, 0x100, 0x6, 0x7, 0x3, 0x9, 0x1, 0x5, 0x7, 0x5, 0x3, 0x3, 0x8001, 0x40, 0x6, 0x3, 0x6, 0x6, 0x3, 0xa0, 0x330, 0x3, 0x61f0, 0x7, 0x396adf91, 0x2c, 0xffffffff, 0x771a, 0xc0, 0x4, 0xc, 0x4, 0x0, 0x6, 0xd, 0xb169, 0x308, 0x200, 0x6, 0x0, 0x8, 0x6, 0x8, 0x71, 0x3, 0x6, 0x80000000, 0x9, 0xff, 0x6, 0x95, 0x40, 0x0, 0x6, 0xfd7, 0x5, 0xebd, 0x0, 0xd, 0x7, 0x0, 0xffffffff]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40811) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x6, {[@generic={0x13, 0x2}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.129723529s ago: executing program 33 (id=6772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1b4, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x80, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '.\\\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x11, 0x1a, '/dev/net/tun\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x10}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'nr0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffd}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="3d99dd8d3e03"}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x11, 0x1a, '/dev/net/tun\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xe}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_COMMENT={0xc, 0x1a, ']!{\x01/%\\\x00'}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}, @IPSET_ATTR_ADT={0x94, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x22}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000054000000008500000069a09e935179499339b4564054b20000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect(r1, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xb2, @remote, 0x9249, 0x3}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000200)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r5) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000003300)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_SETFSUUID(r7, 0x4008662c, &(0x7f0000000380)={0x0, 0x0, "5d2ca0e6c1ab9f02e9655b05ef6477db"}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 1.092543207s ago: executing program 34 (id=6780): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102000000000000010073797a3000000000140000001000010000000000000000000000000a0000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0xc4) syz_emit_ethernet(0x6e, &(0x7f0000000600)=ANY=[], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x0, 0x0, 0x4, 0x0, 0x0, @empty, @private=0xa010102}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r3, 0x20, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe00000100000000140012000000853cfda4e4b70000000000000000"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close(0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x3, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x200, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r7, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r12, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r12, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r12, 0x1) 52.711776ms ago: executing program 35 (id=6784): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f0000000040)=r4, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f0000000040)=r4, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'veth1_to_batadv\x00', {0x2, 0x4e25, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 0s ago: executing program 36 (id=6783): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x57, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRES16=r3, @ANYRESOCT=0x0, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x8002}, 0x10) vmsplice(r0, &(0x7f0000000640)=[{&(0x7f0000000240)='u', 0x1}], 0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r5, &(0x7f0000000680)="4eded3380304", 0x6) splice(r5, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x80d, &(0x7f0000003600)=ANY=[@ANYBLOB="e727dc071f80aaaaaaaaaabb86dd60dd07a707d72c00cb697a653e336f000000500000000000ff0200000000000000000000000000012e14002e"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) write$tun(r1, &(0x7f00000003c0)={@val={0x0, 0xe8bd}, @val={0x0, 0x80, 0x6, 0x7, 0x4, 0x80}, @mpls={[{0x2, 0x0, 0x1}, {0x39f}, {0x2}, {0x1}], @ipv4=@udp={{0x9, 0x4, 0x3, 0x27, 0x67, 0x66, 0x0, 0x9d, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @remote, {[@timestamp_prespec={0x44, 0xc, 0x75, 0x3, 0x2, [{@rand_addr=0x64010100, 0x2}]}, @end]}}, {0x4e20, 0x4e21, 0x43, 0x0, @opaque="c7dce5008a4d58b3c1f724acabe04a2e26a571cd9f001baf56c8fa977f71f29beb42a9acaeceb61bfbffa9ea9d1d86f96d814b08f30982cdcf1317"}}}}, 0x85) setsockopt$sock_int(r7, 0x1, 0x2d, &(0x7f0000000040)=0xfffff001, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) bind(r8, &(0x7f0000000340)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80) setsockopt$sock_int(r6, 0x1, 0xb, &(0x7f00000001c0)=0xff, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x11, 0x14, 0x121, 0x0, 0x0, {0x23}}, 0x18}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000002000000080005400000000208000100000000000800254000000022d98d0f00"/47], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, r10, 0x5, 0xfffffffc, 0x2, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x8001, 0x1d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8050}, 0x4810) kernel console output (not intermixed with test programs): could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.732111][T27240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.780881][T27240] hsr_slave_0: entered promiscuous mode [ 716.788072][T27240] hsr_slave_1: entered promiscuous mode [ 717.512169][ T151] vlan0: left promiscuous mode [ 717.519834][ T151] veth1_virt_wifi: left promiscuous mode [ 717.528380][ T151] dummy0: left allmulticast mode [ 717.534697][ T151] veth1_macvtap: left promiscuous mode [ 717.540262][ T151] veth0_macvtap: left promiscuous mode [ 717.596778][ T151] pim6reg (unregistering): left allmulticast mode [ 717.967701][T27314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 718.007356][T27240] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 718.079460][T27240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 718.113231][T27240] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 718.171135][T27240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 718.248432][T27363] veth7: entered promiscuous mode [ 718.254425][T27363] veth7: entered allmulticast mode [ 718.263540][T27240] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 718.300995][T27240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 718.318149][T27372] netlink: 'syz.1.5775': attribute type 29 has an invalid length. [ 718.339235][T27372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5775'. [ 718.351739][T27240] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 718.401501][T27240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 718.747016][ T151] IPVS: stop unused estimator thread 0... [ 718.828385][T27240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.906893][T27240] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.919082][T27419] netlink: 'syz.0.5786': attribute type 1 has an invalid length. [ 718.941579][T27419] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 718.960896][T11314] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.976516][T11314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.021641][T11314] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.028864][T11314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.124979][T27429] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.5787'. [ 719.171243][T27430] netlink: 'syz.0.5787': attribute type 1 has an invalid length. [ 719.459776][T27450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5790'. [ 719.589445][T27459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5791'. [ 719.615837][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 720.028110][T27486] netlink: 'syz.0.5798': attribute type 1 has an invalid length. [ 720.066356][T27486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5798'. [ 720.144420][T27497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5800'. [ 720.671918][T27240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.723460][T27521] xt_ecn: cannot match TCP bits for non-tcp packets [ 720.741125][T27527] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5803'. [ 720.751552][T27527] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5803'. [ 720.768978][T27529] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5804'. [ 720.874377][T27240] veth0_vlan: entered promiscuous mode [ 720.922172][T27240] veth1_vlan: entered promiscuous mode [ 721.035901][T27541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5809'. [ 721.036525][T27240] veth0_macvtap: entered promiscuous mode [ 721.063051][T27240] veth1_macvtap: entered promiscuous mode [ 721.121699][T27240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.170352][T27240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.221251][T11312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.250802][T11312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.281156][T11312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.309609][T11312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.332676][T27553] tipc: Enabled bearer , priority 5 [ 721.651165][T11315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.702544][T11315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.790328][T11312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.819556][T11312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.402485][T27624] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 722.721050][T27634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.170193][T27641] openvswitch: netlink: Flow key attribute not present in set flow. [ 723.307091][T27646] netlink: 'syz.3.5834': attribute type 1 has an invalid length. [ 723.356279][T27646] 8021q: adding VLAN 0 to HW filter on device bond13 [ 723.368224][T27646] bond13: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 723.392850][T27646] bond13: (slave ip6gretap1): making interface the new active one [ 723.432167][T27658] __nla_validate_parse: 3 callbacks suppressed [ 723.432186][T27658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5834'. [ 723.454601][T27654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5837'. [ 723.474695][T27646] bond13: (slave ip6gretap1): Enslaving as an active interface with an up link [ 723.501454][T27654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5837'. [ 723.515823][T27660] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 723.525247][T27660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5839'. [ 723.536670][T27660] netem: invalid attributes len -5 [ 723.541903][T27660] netem: change failed [ 723.692342][T27666] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 723.929500][T27676] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 723.947800][T27676] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 723.973607][T27676] netlink: 67 bytes leftover after parsing attributes in process `syz.1.5845'. [ 724.072563][T27676] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 724.306653][T27709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5854'. [ 724.555915][T27725] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:0 [ 725.017484][T27756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5868'. [ 725.106683][T27761] netlink: 'syz.1.5870': attribute type 1 has an invalid length. [ 725.274848][T27764] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 725.327033][T27769] netlink: 'syz.1.5872': attribute type 1 has an invalid length. [ 725.374015][T27778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5872'. [ 726.054874][T27245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 726.072346][T27245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 726.087929][T27245] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 726.101169][T27245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 726.108972][T27245] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 726.326195][ T5633] Bluetooth: hci2: command 0x0405 tx timeout [ 726.533524][T27824] xfrm0 speed is unknown, defaulting to 1000 [ 726.752814][T27824] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.760647][T27824] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.768029][T27824] bridge_slave_0: entered allmulticast mode [ 726.775134][T27824] bridge_slave_0: entered promiscuous mode [ 726.783253][T27824] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.790810][T27824] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.798646][T27824] bridge_slave_1: entered allmulticast mode [ 726.807919][T27824] bridge_slave_1: entered promiscuous mode [ 726.836453][T27824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.848638][T27824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.878339][T27824] team0: Port device team_slave_0 added [ 726.886735][T27824] team0: Port device team_slave_1 added [ 726.915837][T27824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.922822][T27824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.949543][T27824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.961712][T27824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.970104][T27824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.996904][T27824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.039896][T27824] hsr_slave_0: entered promiscuous mode [ 727.046845][T27824] hsr_slave_1: entered promiscuous mode [ 727.053039][T27824] debugfs: 'hsr0' already exists in 'hsr' [ 727.058889][T27824] Cannot create hsr debugfs directory [ 727.193060][T27824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.204047][T27824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.216328][T27824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 727.313149][T27824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.324216][T27824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.334558][T27824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 727.393785][T27824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.404535][T27824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.417135][T27824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 727.508863][T27824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.519646][T27824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.530957][T27824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 728.165469][ T5636] Bluetooth: hci5: command tx timeout [ 728.865051][T27816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.934276][T27824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 728.994263][T27824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 729.009070][T27824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 729.036384][T27824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 729.047377][T27824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 729.067100][T27824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 729.086870][T27824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 729.111311][T27824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 729.115226][T27863] netlink: 'syz.4.5896': attribute type 2 has an invalid length. [ 729.146896][T27862] netlink: 'syz.2.5894': attribute type 3 has an invalid length. [ 729.159052][T27857] netlink: 'syz.2.5894': attribute type 11 has an invalid length. [ 729.170820][T27868] SET target dimension over the limit! [ 729.399207][T11312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.408595][T11312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.522740][T27824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.603337][T27824] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.645228][T11314] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.652442][T11314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.681299][T11314] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.688517][T11314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.731430][T27905] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5906'. [ 729.748210][T27906] xt_TPROXY: Can be used only with -p tcp or -p udp [ 729.764691][T27905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5906'. [ 729.791392][T27905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5906'. [ 730.066521][T27937] dvmrp0: left allmulticast mode [ 730.246314][ T5636] Bluetooth: hci5: command tx timeout [ 730.302016][T27824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.351758][T27824] veth0_vlan: entered promiscuous mode [ 730.363602][T27824] veth1_vlan: entered promiscuous mode [ 730.397697][T27824] veth0_macvtap: entered promiscuous mode [ 730.410338][T27824] veth1_macvtap: entered promiscuous mode [ 730.431378][T27824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.446453][T27824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.460813][T11310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.472321][T11310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.483975][T11310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.497737][T11310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.326133][ T5636] Bluetooth: hci5: command tx timeout [ 732.703878][T27906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 732.839713][T11314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.887195][T11314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.964699][T11314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.993639][T11314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.087271][T27976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5919'. [ 733.122813][T27977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5920'. [ 733.273135][T27982] netlink: 'syz.4.5921': attribute type 7 has an invalid length. [ 733.295475][T27982] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5921'. [ 733.344464][T27982] syzkaller0: entered promiscuous mode [ 733.377751][T27982] syzkaller0: entered allmulticast mode [ 733.471272][T28001] netlink: 396 bytes leftover after parsing attributes in process `syz.0.5926'. [ 733.490116][T28001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5926'. [ 733.499625][T28001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5926'. [ 733.509467][T28001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5926'. [ 733.772554][T28016] IPv6: NLM_F_CREATE should be specified when creating new route [ 734.408059][ T5636] Bluetooth: hci5: command tx timeout [ 734.823949][T28029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 734.994777][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 735.012366][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 735.022497][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 735.038689][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 735.073118][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 735.195031][T28082] __nla_validate_parse: 4 callbacks suppressed [ 735.195050][T28082] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5947'. [ 735.208038][T28083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5949'. [ 735.217694][T28082] netlink: 'syz.4.5947': attribute type 1 has an invalid length. [ 735.229137][T28082] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5947'. [ 735.238350][T28082] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5947'. [ 735.258809][T28082] netlink: 'syz.4.5947': attribute type 1 has an invalid length. [ 735.534291][T28090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5951'. [ 735.553175][T28090] openvswitch: netlink: EtherType 0 is less than min 600 [ 735.597994][T28106] netlink: 'syz.4.5952': attribute type 9 has an invalid length. [ 735.830347][T28074] xfrm0 speed is unknown, defaulting to 1000 [ 735.910400][T28120] Bluetooth: MGMT ver 1.23 [ 736.352011][T28074] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.374993][T28074] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.404652][T28074] bridge_slave_0: entered allmulticast mode [ 736.440881][T28074] bridge_slave_0: entered promiscuous mode [ 736.508331][T28074] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.536607][T28074] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.572399][T28074] bridge_slave_1: entered allmulticast mode [ 736.582165][T28151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5964'. [ 736.601765][T28074] bridge_slave_1: entered promiscuous mode [ 736.683256][T28074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.703829][T28074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.762714][T28074] team0: Port device team_slave_0 added [ 736.779720][T28074] team0: Port device team_slave_1 added [ 736.837121][T28160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5967'. [ 736.849811][T28074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.864515][T28074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.905612][T28074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.930499][T28074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.947818][T28074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.005918][T28074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.146606][T28178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.174403][T28074] hsr_slave_0: entered promiscuous mode [ 737.197960][T28074] hsr_slave_1: entered promiscuous mode [ 737.207935][ T5633] Bluetooth: hci4: command tx timeout [ 737.226347][T28074] debugfs: 'hsr0' already exists in 'hsr' [ 737.250774][T28074] Cannot create hsr debugfs directory [ 737.284490][T28187] xt_hashlimit: size too large, truncated to 1048576 [ 737.525678][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.651968][T28207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5980'. [ 737.677597][T28207] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5980'. [ 737.706447][T28207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5980'. [ 737.807484][T28074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.846083][T28074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.857808][T28074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 737.893760][T28210] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 738.003315][T28074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.027228][T28074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.052241][T28074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 738.116994][ T5710] IPVS: starting estimator thread 0... [ 738.178411][T28227] IPVS: sh: FWM 3 0x00000003 - no destination available [ 738.229007][T28225] IPVS: using max 37 ests per chain, 88800 per kthread [ 738.233490][T28074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.249305][T28074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.261694][T28074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 738.352859][T28235] netlink: 'syz.0.5988': attribute type 10 has an invalid length. [ 738.391466][T28074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.415975][T28074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.427043][T28074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 738.475060][T28235] team0: entered allmulticast mode [ 738.497522][T28235] team_slave_0: entered allmulticast mode [ 738.520903][T28235] team_slave_1: entered allmulticast mode [ 738.528166][T28235] bridge0: port 3(team0) entered blocking state [ 738.559552][T28235] bridge0: port 3(team0) entered disabled state [ 738.576239][T28235] team0: entered promiscuous mode [ 738.587845][T28235] team_slave_0: entered promiscuous mode [ 738.593761][T28235] team_slave_1: entered promiscuous mode [ 738.602431][T28235] bridge0: port 3(team0) entered blocking state [ 738.608947][T28235] bridge0: port 3(team0) entered forwarding state [ 738.810320][T28261] veth9: entered allmulticast mode [ 738.990186][T28270] IPVS: length: 36 != 8 [ 739.040660][T28270] netlink: 'syz.2.5997': attribute type 10 has an invalid length. [ 739.091432][T28282] netlink: 'syz.2.5997': attribute type 11 has an invalid length. [ 739.161391][T28270] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.188578][T28270] bond0: (slave team0): Enslaving as an active interface with an up link [ 739.208777][T28074] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 739.238567][T28074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 739.257887][T28074] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 739.294826][ T5633] Bluetooth: hci4: command tx timeout [ 739.330618][T28074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 739.351466][T28074] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 739.414792][T28074] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 739.458616][T28074] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 739.469403][ T4962] block nbd3: Possible stuck request ffff888027440380: control (read@0,1024B). Runtime 60 seconds [ 739.480956][ T4962] block nbd3: Possible stuck request ffff888027440540: control (read@1024,1024B). Runtime 60 seconds [ 739.491983][ T4962] block nbd3: Possible stuck request ffff888027440700: control (read@2048,1024B). Runtime 60 seconds [ 739.503537][ T4962] block nbd3: Possible stuck request ffff8880274408c0: control (read@3072,1024B). Runtime 60 seconds [ 739.523872][T28074] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 739.793426][T28321] netlink: 'syz.2.6009': attribute type 11 has an invalid length. [ 739.804905][T28074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.808657][T28321] netlink: 'syz.2.6009': attribute type 11 has an invalid length. [ 739.927144][T28074] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.950557][T11312] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.957807][T11312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.026205][T11312] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.033458][T11312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.278035][T28335] netlink: 'syz.4.6014': attribute type 27 has an invalid length. [ 740.300653][T28335] netlink: 'syz.4.6014': attribute type 4 has an invalid length. [ 740.322352][T28335] __nla_validate_parse: 8 callbacks suppressed [ 740.322371][T28335] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6014'. [ 740.394343][T28335] netlink: 212 bytes leftover after parsing attributes in process `syz.4.6014'. [ 740.758104][T28355] syzkaller0: entered promiscuous mode [ 740.768446][T28355] syzkaller0: entered allmulticast mode [ 740.808457][T28355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6017'. [ 741.321136][T28379] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6024'. [ 741.366210][ T5633] Bluetooth: hci4: command tx timeout [ 741.584113][T28389] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6026'. [ 741.818513][T28074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.148360][T28074] veth0_vlan: entered promiscuous mode [ 742.204990][T28074] veth1_vlan: entered promiscuous mode [ 742.331238][T28074] veth0_macvtap: entered promiscuous mode [ 742.360355][T28074] veth1_macvtap: entered promiscuous mode [ 742.443260][T28074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.540903][T28074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.582226][ T151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.624356][ T151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.674756][T28446] netlink: 'syz.4.6038': attribute type 1 has an invalid length. [ 742.756910][ T151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.786833][T28448] netlink: 'syz.2.6039': attribute type 12 has an invalid length. [ 742.828736][T28448] netlink: 'syz.2.6039': attribute type 1 has an invalid length. [ 742.856460][T28448] netlink: 'syz.2.6039': attribute type 2 has an invalid length. [ 742.894208][T28448] netlink: 'syz.2.6039': attribute type 3 has an invalid length. [ 742.916718][T28448] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6039'. [ 743.013587][ T151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.140813][T28465] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 743.231775][T28463] netlink: 'syz.0.6042': attribute type 1 has an invalid length. [ 743.245744][T28463] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6042'. [ 743.296795][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.345102][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.384406][T28470] xt_hashlimit: size too large, truncated to 1048576 [ 743.440499][T11311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.456208][ T5633] Bluetooth: hci4: command tx timeout [ 743.473088][T11311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.787757][T28486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5943'. [ 743.788494][T28484] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6047'. [ 743.836872][T28484] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 744.392087][T28503] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.399839][T28503] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.460466][T28508] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.467761][T28508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.477048][T28508] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.484228][T28508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.508192][T28508] bridge0: entered promiscuous mode [ 744.514470][T28508] bridge0: entered allmulticast mode [ 744.530060][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 744.551008][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 744.560434][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 744.575834][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 744.593257][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 744.738755][T28518] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 744.890098][T28527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6057'. [ 745.059517][T17270] bond0: (slave syz_tun): Releasing backup interface [ 745.322516][T28545] netlink: 'syz.3.6060': attribute type 11 has an invalid length. [ 745.348257][T28545] __nla_validate_parse: 2 callbacks suppressed [ 745.348284][T28545] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6060'. [ 745.489335][ T48] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.501352][ T48] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.507336][T28552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6062'. [ 745.533440][T28545] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.752045][ T48] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.762203][ T48] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.792448][T28568] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 745.892799][ T48] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.921139][ T48] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.964520][T28513] xfrm0 speed is unknown, defaulting to 1000 [ 746.068117][T28589] netlink: 'syz.3.6071': attribute type 11 has an invalid length. [ 746.113175][ T48] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.137600][ T48] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.227104][T28592] netlink: 'syz.2.6073': attribute type 8 has an invalid length. [ 746.268911][T28595] lo speed is unknown, defaulting to 1000 [ 746.412075][T28595] lo speed is unknown, defaulting to 1000 [ 746.429436][T28595] lo speed is unknown, defaulting to 1000 [ 746.646332][ T5633] Bluetooth: hci3: command tx timeout [ 747.025156][T28627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6082'. [ 747.174476][ T48] dvmrp1: left allmulticast mode [ 747.342792][T28595] infiniband sz1: set active [ 747.354457][T28595] infiniband sz1: added lo [ 747.399245][T28595] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 747.417105][T28595] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 747.438340][T28595] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 747.582636][T28595] RDS/IB: sz1: added [ 747.594536][T28595] smc: adding ib device sz1 with port count 1 [ 747.612512][T28595] smc: ib device sz1 port 1 has no pnetid [ 747.754283][ T48] bond8 (unregistering): (slave gretap2): Releasing active interface [ 747.869764][ T48] bond4 (unregistering): (slave bridge0): Removing an active aggregator [ 747.881200][ T48] bond4 (unregistering): (slave bridge0): Releasing backup interface [ 747.915121][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.928730][ T48] bond0 (unregistering): Released all slaves [ 747.940950][ T48] bond1 (unregistering): Released all slaves [ 747.956708][ T48] bond2 (unregistering): Released all slaves [ 747.971320][ T48] bond3 (unregistering): Released all slaves [ 747.985148][ T48] bond4 (unregistering): Released all slaves [ 748.003108][ T48] bond5 (unregistering): (slave veth3): Releasing active interface [ 748.017145][ T48] bond5 (unregistering): (slave veth5): Releasing active interface [ 748.030632][ T48] bond5 (unregistering): Released all slaves [ 748.044452][ T48] bond6 (unregistering): Released all slaves [ 748.060536][ T48] bond7 (unregistering): Released all slaves [ 748.074755][ T48] bond8 (unregistering): Released all slaves [ 748.094229][ T48] bond9 (unregistering): Released all slaves [ 748.136235][T28634] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 748.161112][T11315] tipc: Resetting bearer [ 748.191760][T10465] xfrm0 speed is unknown, defaulting to 1000 [ 748.196729][ T5710] lo speed is unknown, defaulting to 1000 [ 748.215273][T10465] syz2: Port: 1 Link DOWN [ 748.303516][ T5756] lo speed is unknown, defaulting to 1000 [ 748.478902][T28647] veth3: entered promiscuous mode [ 748.492159][T28647] veth3: entered allmulticast mode [ 748.500654][T28662] netlink: 'syz.0.6089': attribute type 1 has an invalid length. [ 748.530436][T28662] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6089'. [ 748.542204][T28595] lo speed is unknown, defaulting to 1000 [ 748.727006][ T5633] Bluetooth: hci3: command tx timeout [ 748.800145][T28513] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.820764][T28513] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.836549][T28513] bridge_slave_0: entered allmulticast mode [ 748.869289][T28513] bridge_slave_0: entered promiscuous mode [ 748.893838][T28513] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.898183][T28682] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6091'. [ 748.922504][T28513] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.950710][T28513] bridge_slave_1: entered allmulticast mode [ 748.982518][T28513] bridge_slave_1: entered promiscuous mode [ 749.010951][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 749.120128][T28513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.148771][T28513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.191716][T28695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6094'. [ 749.202011][T28695] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6094'. [ 749.227058][T28513] team0: Port device team_slave_0 added [ 749.240024][T28695] netlink: 'syz.0.6094': attribute type 11 has an invalid length. [ 749.248747][T28695] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6094'. [ 749.259699][T28595] lo speed is unknown, defaulting to 1000 [ 749.269739][T28513] team0: Port device team_slave_1 added [ 749.326904][T28513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.334000][T28513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.362762][T28513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.378811][T28513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.388838][T28513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.443120][T28513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.554218][T28513] hsr_slave_0: entered promiscuous mode [ 749.563396][T28513] hsr_slave_1: entered promiscuous mode [ 749.576157][T28513] debugfs: 'hsr0' already exists in 'hsr' [ 749.582087][T28513] Cannot create hsr debugfs directory [ 749.693711][T28595] lo speed is unknown, defaulting to 1000 [ 750.221896][T28595] lo speed is unknown, defaulting to 1000 [ 750.308908][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 750.356001][T28722] syzkaller1: entered promiscuous mode [ 750.366733][T28722] syzkaller1: entered allmulticast mode [ 750.740059][T28595] lo speed is unknown, defaulting to 1000 [ 750.806539][ T5633] Bluetooth: hci3: command tx timeout [ 751.062630][T28751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6102'. [ 751.101034][T28751] netem: invalid attributes len -5 [ 751.117148][T28751] netem: change failed [ 751.394691][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 751.402222][T28595] lo speed is unknown, defaulting to 1000 [ 751.756957][T28595] lo speed is unknown, defaulting to 1000 [ 752.212044][T28595] lo speed is unknown, defaulting to 1000 [ 752.245705][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 752.581892][T28595] lo speed is unknown, defaulting to 1000 [ 752.889422][ T5633] Bluetooth: hci3: command tx timeout [ 752.968838][ T151] smbdirect: ib_dev[syz2] removed [ 753.706294][T28790] syzkaller0: entered promiscuous mode [ 753.722130][T28790] syzkaller0: entered allmulticast mode [ 753.734475][ T48] : left promiscuous mode [ 756.381542][ T4999] udevd[4999]: worker [25580] /devices/virtual/block/nbd3 is taking a long time [ 756.949625][ T48] tipc: Disabling bearer [ 756.961038][ T48] tipc: Disabling bearer [ 756.978441][ T48] tipc: Left network mode [ 757.048267][ T48] IPVS: stopping backup sync thread 24384 ... [ 757.302017][T28840] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 757.314919][T28840] bond1 (unregistering): Released all slaves [ 757.744970][T28862] netlink: 'syz.1.6119': attribute type 1 has an invalid length. [ 757.774870][T28862] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.6119'. [ 758.132113][T28884] netlink: 'syz.2.6124': attribute type 1 has an invalid length. [ 758.388595][T28513] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 758.441015][T28513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 758.604859][T28904] veth1_to_bond: entered allmulticast mode [ 758.622541][T28513] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 758.652284][T28513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 758.722821][T28513] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 758.795764][T28513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 758.831276][T28513] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 758.874910][T28513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 758.952011][T28904] veth1_to_bond: left allmulticast mode [ 759.239868][T28941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6133'. [ 759.255982][ T48] hsr_slave_0: left promiscuous mode [ 759.274452][ T48] hsr_slave_1: left promiscuous mode [ 759.284632][ T48] batman_adv: ve: Interface deactivated: batadv_slave_0 [ 759.303676][ T48] batman_adv: ve: Removing interface: batadv_slave_0 [ 759.324945][ T48] veth1_macvtap: left promiscuous mode [ 759.333636][ T48] veth0_macvtap: left promiscuous mode [ 759.342042][ T48] veth1_vlan: left promiscuous mode [ 759.357316][ T48] veth0_vlan: left promiscuous mode [ 759.993682][ T48] team0 (unregistering): Port device team_slave_1 removed [ 760.022332][ T48] team0 (unregistering): Port device team_slave_0 removed [ 760.191849][T28961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6130'. [ 760.487958][T28513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.557774][T28996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6140'. [ 760.638544][T28513] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.671746][T29001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6141'. [ 760.732992][T29001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6141'. [ 760.766630][T29001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6141'. [ 760.830698][T11311] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.837934][T11311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.909148][T11310] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.916389][T11310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.012502][ T48] IPVS: stop unused estimator thread 0... [ 761.164788][T29015] ve: renamed from veth0_vlan (while UP) [ 761.588483][T29046] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6151'. [ 761.608399][T29049] xt_cgroup: path and classid specified [ 761.628703][T29046] netlink: zone id is out of range [ 761.640775][T29046] netlink: zone id is out of range [ 761.661547][T29046] netlink: zone id is out of range [ 761.673153][T29046] netlink: zone id is out of range [ 761.700922][T29046] netlink: zone id is out of range [ 761.714597][T29055] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6151'. [ 761.756455][T29046] netlink: zone id is out of range [ 761.784835][T29046] netlink: zone id is out of range [ 761.804176][T29046] netlink: zone id is out of range [ 761.820608][T29046] netlink: zone id is out of range [ 761.828166][T29062] netlink: 'syz.0.6155': attribute type 1 has an invalid length. [ 761.833887][T29046] netlink: zone id is out of range [ 761.921316][T29062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 762.052172][T29075] netlink: 'syz.0.6155': attribute type 10 has an invalid length. [ 762.111825][T29075] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6155'. [ 762.138622][T29066] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 762.167715][T29075] dummy0: entered promiscuous mode [ 762.659846][T28513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.036285][T29114] lo speed is unknown, defaulting to 1000 [ 763.644804][T29153] : renamed from bond0 (while UP) [ 763.684249][T29157] __nla_validate_parse: 53 callbacks suppressed [ 763.684268][T29157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6172'. [ 763.827000][T28513] veth0_vlan: entered promiscuous mode [ 763.867530][T28513] veth1_vlan: entered promiscuous mode [ 764.092342][T29181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6175'. [ 764.289786][T28513] veth0_macvtap: entered promiscuous mode [ 764.313815][T28513] veth1_macvtap: entered promiscuous mode [ 764.395829][T28513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.428363][T28513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.502666][T29192] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 764.557770][T29196] tipc: Started in network mode [ 764.572774][T29196] tipc: Node identity ac14140f, cluster identity 4711 [ 764.618002][T29196] tipc: Enabled bearer , priority 10 [ 764.633621][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.661941][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.708635][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.744112][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.003035][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.033917][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.117660][T29221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6185'. [ 765.130443][ T3268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.154483][ T3268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.401739][T29237] netem: change failed [ 765.420680][T29242] netem: change failed [ 765.478779][T29247] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6053'. [ 765.514328][T29245] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6053'. [ 765.631601][T29247] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6053'. [ 765.631601][T29253] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6053'. [ 765.634313][T29255] tipc: Started in network mode [ 765.663927][T29255] tipc: Node identity 4274d3ba5c89, cluster identity 4711 [ 765.673770][T29255] tipc: Enabled bearer , priority 0 [ 765.694836][T29256] syzkaller0: entered promiscuous mode [ 765.703660][T29256] syzkaller0: entered allmulticast mode [ 765.712513][T29260] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6193'. [ 765.757085][T29268] netlink: 'syz.3.6195': attribute type 10 has an invalid length. [ 765.770609][T10455] tipc: Node number set to 2886997007 [ 765.793161][T29255] tipc: Resetting bearer [ 765.822198][T29254] tipc: Resetting bearer [ 765.863169][T29254] tipc: Disabling bearer [ 765.934992][T29283] ip6t_srh: unknown srh match flags 4000 [ 766.410927][T29300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6206'. [ 766.716383][T29320] net_ratelimit: 46 callbacks suppressed [ 766.716404][T29320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 766.971095][T29329] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6214'. [ 767.040743][T29337] netlink: 'syz.4.6218': attribute type 3 has an invalid length. [ 767.171993][T29345] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 767.192432][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 767.218471][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 767.227742][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 767.244312][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 767.259028][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 767.326433][T29345] netlink: 'syz.2.6219': attribute type 1 has an invalid length. [ 767.357490][T29345] netlink: 'syz.2.6219': attribute type 1 has an invalid length. [ 768.082044][T29378] syzkaller0: entered promiscuous mode [ 768.124277][T29378] syzkaller0: entered allmulticast mode [ 768.147980][T29378] netlink: 'syz.1.6228': attribute type 1 has an invalid length. [ 768.532802][T29409] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 768.677882][T29343] lo speed is unknown, defaulting to 1000 [ 768.929293][T29428] netlink: 'syz.0.6236': attribute type 2 has an invalid length. [ 769.286860][ T5636] Bluetooth: hci1: command tx timeout [ 769.530031][ T4962] block nbd3: Possible stuck request ffff888027440380: control (read@0,1024B). Runtime 90 seconds [ 769.541734][ T4962] block nbd3: Possible stuck request ffff888027440540: control (read@1024,1024B). Runtime 90 seconds [ 769.552880][ T4962] block nbd3: Possible stuck request ffff888027440700: control (read@2048,1024B). Runtime 90 seconds [ 769.564852][ T4962] block nbd3: Possible stuck request ffff8880274408c0: control (read@3072,1024B). Runtime 90 seconds [ 769.774608][T29479] __nla_validate_parse: 7 callbacks suppressed [ 769.774627][T29479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6248'. [ 769.852463][T29487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6248'. [ 769.937133][T29479] netlink: 512 bytes leftover after parsing attributes in process `syz.4.6248'. [ 770.000882][T29493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6252'. [ 770.215654][T29509] netlink: 'syz.0.6256': attribute type 24 has an invalid length. [ 770.360030][T29519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6257'. [ 770.374782][T29343] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.417944][T29343] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.442340][T29343] bridge_slave_0: entered allmulticast mode [ 770.456385][T29343] bridge_slave_0: entered promiscuous mode [ 770.490105][T29343] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.509640][T29343] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.528080][T29343] bridge_slave_1: entered allmulticast mode [ 770.539343][T29343] bridge_slave_1: entered promiscuous mode [ 770.569348][T29534] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6260'. [ 770.583500][T29531] netlink: 'syz.0.6261': attribute type 5 has an invalid length. [ 770.689238][T29343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.743188][T29343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.833721][T29343] team0: Port device team_slave_0 added [ 770.852552][T29343] team0: Port device team_slave_1 added [ 770.944649][T29343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.964845][T29343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.014742][T29343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.046638][T29343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.061585][T29343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.118454][T29343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.148255][T29556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6264'. [ 771.181512][T29556] netlink: 'syz.2.6264': attribute type 30 has an invalid length. [ 771.199687][T29558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6264'. [ 771.230891][T29558] netlink: 'syz.2.6264': attribute type 30 has an invalid length. [ 771.274044][T29343] hsr_slave_0: entered promiscuous mode [ 771.299201][T29343] hsr_slave_1: entered promiscuous mode [ 771.314964][T29343] debugfs: 'hsr0' already exists in 'hsr' [ 771.327674][T29343] Cannot create hsr debugfs directory [ 771.349593][T11310] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.366288][ T5636] Bluetooth: hci1: command tx timeout [ 771.384909][T11310] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.422099][T29562] Bluetooth: MGMT ver 1.23 [ 771.428484][T29562] netlink: 'syz.1.6265': attribute type 83 has an invalid length. [ 771.446118][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 771.534369][T11310] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.570616][T11310] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.668133][T29573] team_slave_1: entered promiscuous mode [ 771.700133][T29573] team0: Port device team_slave_1 removed [ 771.834663][T29585] tunl0: entered promiscuous mode [ 771.851343][T29585] netlink: 'syz.1.6270': attribute type 3 has an invalid length. [ 771.869892][T29585] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6270'. [ 771.989054][T29592] h: entered promiscuous mode [ 771.995194][T29596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.010638][T29596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.019430][T29596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.028907][T29596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.038033][T29598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6274'. [ 772.373133][T29343] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.392463][T29343] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.754528][T29343] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.801129][T29343] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.030010][T29343] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 773.040594][T29343] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.256897][T29343] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 773.274369][T29343] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.445607][ T5636] Bluetooth: hci1: command tx timeout [ 773.742160][T29672] x_tables: duplicate entry at hook 2 [ 773.863500][T29343] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 773.902377][T29343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 773.930444][T29343] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 773.974283][T29343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 773.986559][T29343] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 774.051904][T29343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 774.081148][T29343] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 774.117708][T29343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 774.454492][T10462] lo speed is unknown, defaulting to 1000 [ 774.612902][T29343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.777880][T29734] syzkaller0: entered promiscuous mode [ 774.799716][T29734] syzkaller0: entered allmulticast mode [ 774.807939][T29745] netlink: 'syz.0.6302': attribute type 3 has an invalid length. [ 774.823158][T29745] netlink: 'syz.0.6302': attribute type 1 has an invalid length. [ 774.882595][T29753] netlink: 'syz.4.6305': attribute type 1 has an invalid length. [ 774.884859][T29754] netlink: 'syz.1.6304': attribute type 5 has an invalid length. [ 774.923029][T29754] __nla_validate_parse: 10 callbacks suppressed [ 774.923048][T29754] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6304'. [ 775.043879][T29753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 775.092051][T29757] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 775.135836][T29343] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.237771][T11310] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.245009][T11310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.331820][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.339060][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.529009][ T5636] Bluetooth: hci1: command tx timeout [ 775.655906][T29793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6308'. [ 778.604511][T29788] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 778.625247][T29804] --map-set only usable from mangle table [ 778.639353][T29788] syzkaller0: entered promiscuous mode [ 778.653387][T29788] syzkaller0: entered allmulticast mode [ 778.691696][T29805] netlink: 'syz.2.6311': attribute type 4 has an invalid length. [ 779.620013][T29858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6321'. [ 779.656962][T29864] netlink: 'syz.1.6323': attribute type 10 has an invalid length. [ 779.693719][T29864] team0: Port device dummy0 added [ 780.268845][T29888] bond1: (slave gretap0): Device is not bonding slave [ 780.303085][T29888] bond1: option active_slave: invalid value (gretap0) [ 780.324611][T29888] bond1 (unregistering): Released all slaves [ 780.373957][T29343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.431028][T29908] netlink: 'syz.2.6328': attribute type 33 has an invalid length. [ 780.471880][T29343] veth0_vlan: entered promiscuous mode [ 780.638758][T29917] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6329'. [ 780.703743][T29908] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 780.732104][T29908] bond0 (unregistering): Released all slaves [ 780.748368][T29924] netlink: 'syz.0.6331': attribute type 8 has an invalid length. [ 780.824816][T29918] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.869979][T29343] veth1_vlan: entered promiscuous mode [ 780.929015][T29343] veth0_macvtap: entered promiscuous mode [ 780.945227][T29343] veth1_macvtap: entered promiscuous mode [ 781.001207][T29933] xt_l2tp: invalid flags combination: 0 [ 781.024789][T29343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.060527][T29343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.094406][T11313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.096230][T29938] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6336'. [ 781.114532][T11312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.132104][T11312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.159868][T29940] netlink: 'syz.2.6337': attribute type 1 has an invalid length. [ 781.168066][T11312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.227504][T29940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.376243][T29940] vlan1: entered promiscuous mode [ 781.381970][T29940] bond0: entered promiscuous mode [ 781.392753][T29940] vlan1: entered allmulticast mode [ 781.404012][T29940] bond0: entered allmulticast mode [ 781.470042][T11313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.479033][T11313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.660244][T29964] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6341'. [ 781.905212][T29974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6345'. [ 782.494865][T30002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6353'. [ 784.366701][T29950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 784.463914][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.491898][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.618194][T30021] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6357'. [ 784.635838][T30024] xt_l2tp: v2 doesn't support IP mode [ 784.658806][T30021] syzkaller1: entered promiscuous mode [ 784.687298][T30021] syzkaller1: entered allmulticast mode [ 785.077486][T30055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6367'. [ 785.106441][T30054] netlink: 'syz.2.6365': attribute type 10 has an invalid length. [ 785.138869][T30061] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:20000 [ 785.173064][T30054] syz_tun: entered promiscuous mode [ 785.237679][T30054] : (slave syz_tun): Enslaving as an active interface with an up link [ 785.294427][T30057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6368'. [ 785.312834][T30057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6368'. [ 785.327692][T30072] netlink: 'syz.1.6371': attribute type 1 has an invalid length. [ 785.401737][T30072] 8021q: adding VLAN 0 to HW filter on device bond2 [ 785.446172][T30078] bond2: (slave veth0_to_bond): making interface the new active one [ 785.456379][T30078] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 785.498579][T30078] netlink: 'syz.1.6371': attribute type 1 has an invalid length. [ 785.500127][T30072] bond2: entered promiscuous mode [ 785.508516][T30078] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6371'. [ 785.522810][T30072] veth0_to_bond: entered promiscuous mode [ 785.533308][T30072] bond2: entered allmulticast mode [ 785.538736][T30072] veth0_to_bond: entered allmulticast mode [ 785.729688][T30092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6378'. [ 785.857251][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 785.865286][T30099] netlink: 'syz.3.6381': attribute type 2 has an invalid length. [ 785.874893][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 785.886511][T10455] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 786.033718][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.056698][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.078537][T11314] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.099066][T11314] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.250107][T30111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6384'. [ 786.275975][T30111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6384'. [ 786.464491][T30127] netlink: 'syz.2.6390': attribute type 12 has an invalid length. [ 786.481692][T30127] netlink: 'syz.2.6390': attribute type 29 has an invalid length. [ 786.505732][T30127] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6390'. [ 786.529733][T30127] netlink: 'syz.2.6390': attribute type 1 has an invalid length. [ 786.552370][T30127] netlink: 'syz.2.6390': attribute type 2 has an invalid length. [ 786.727160][T10455] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 786.807721][T27570] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 786.896509][T30158] netlink: 'syz.0.6398': attribute type 29 has an invalid length. [ 786.923125][T30160] netlink: 'syz.0.6398': attribute type 29 has an invalid length. [ 786.973509][T30165] vlan0: entered promiscuous mode [ 787.012251][T30165] team0: Port device vlan0 added [ 787.161941][T30181] netlink: 1440 bytes leftover after parsing attributes in process `syz.4.6406'. [ 787.199689][T30185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6407'. [ 787.306060][T30192] sctp: [Deprecated]: syz.3.6410 (pid 30192) Use of struct sctp_assoc_value in delayed_ack socket option. [ 787.306060][T30192] Use struct sctp_sack_info instead [ 787.394845][T30196] bridge2: entered promiscuous mode [ 787.401283][T30196] bridge2: entered allmulticast mode [ 787.544351][T30209] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 787.560038][T30209] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 787.656667][T30213] tipc: Started in network mode [ 787.673583][T30213] tipc: Node identity 0ae80ac88588, cluster identity 4711 [ 787.689419][T30213] tipc: Enabled bearer , priority 0 [ 787.708997][T30213] syzkaller0: entered promiscuous mode [ 787.726944][T30213] syzkaller0: entered allmulticast mode [ 787.740165][T30212] tipc: Resetting bearer [ 787.797610][T30212] tipc: Disabling bearer [ 787.846038][T30231] x_tables: duplicate underflow at hook 1 [ 788.066695][T30235] syzkaller0: entered promiscuous mode [ 788.085102][T30235] syzkaller0: entered allmulticast mode [ 788.127525][T30235] tipc: Enabled bearer , priority 0 [ 788.154763][T30235] tipc: Resetting bearer [ 788.193559][T30222] pimreg: entered allmulticast mode [ 788.372622][T30261] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 788.449879][T30266] syzkaller1: entered promiscuous mode [ 788.457686][T30266] syzkaller1: entered allmulticast mode [ 788.799258][T30234] tipc: Resetting bearer [ 788.821012][T30234] tipc: Disabling bearer [ 790.245757][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 791.083055][T30242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 791.305935][T30292] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 791.322164][T30292] bond0: (slave lo): Error: Device can not be enslaved while up [ 791.330377][T30290] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 791.347610][T30290] bond0: (slave lo): Error: Device can not be enslaved while up [ 791.464598][T30304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6443'. [ 791.467965][T30306] nbd: must specify an index to disconnect [ 791.500489][T30304] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6443'. [ 791.653812][T30314] validate_nla: 3 callbacks suppressed [ 791.653829][T30314] netlink: 'syz.1.6447': attribute type 10 has an invalid length. [ 791.752164][T30314] netlink: 'syz.1.6447': attribute type 10 has an invalid length. [ 791.763548][T30328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6450'. [ 791.899836][T30314] netlink: 'syz.1.6447': attribute type 10 has an invalid length. [ 791.965003][T30332] netlink: 'syz.2.6450': attribute type 1 has an invalid length. [ 791.990255][T30328] 8021q: adding VLAN 0 to HW filter on device bond2 [ 792.031787][T30328] bond2 (unregistering): Released all slaves [ 792.068995][T30347] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6454'. [ 792.101017][T30314] netlink: 'syz.1.6447': attribute type 10 has an invalid length. [ 792.101930][T30339] tipc: Failed to obtain node identity [ 792.118491][T30339] tipc: Enabling of bearer rejected, failed to enable media [ 792.201606][T30314] netlink: 'syz.1.6447': attribute type 10 has an invalid length. [ 792.216586][T30314] netlink: 'syz.1.6447': attribute type 10 has an invalid length. [ 792.234098][T30314] netlink: 'syz.1.6447': attribute type 10 has an invalid length. [ 792.276695][T30314] netlink: 'syz.1.6447': attribute type 10 has an invalid length. [ 792.333928][T30314] netlink: 'syz.1.6447': attribute type 10 has an invalid length. [ 792.364661][T30356] mac80211_hwsim hwsim87 syzkaller0: entered promiscuous mode [ 792.371907][T30354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6458'. [ 792.372767][T30356] mac80211_hwsim hwsim87 syzkaller0: entered allmulticast mode [ 792.390455][T30357] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 792.484173][T30359] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6459'. [ 792.547985][T30363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6459'. [ 792.589419][T30359]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.611397][T30359]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.633061][T30359]  (unregistering): (slave team0): Releasing backup interface [ 792.650446][T30359]  (unregistering): (slave syz_tun): Releasing backup interface [ 792.663388][T30359]  (unregistering): Released all slaves [ 792.679343][T30361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.687243][T30361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.696107][T30361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.703637][T30361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.755366][T30367] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.782587][T30367] bridge_slave_0 (unregistering): left allmulticast mode [ 792.790985][T30367] bridge_slave_0 (unregistering): left promiscuous mode [ 792.800472][T30367] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.038302][T30391] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6471'. [ 793.210364][T30401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6473'. [ 793.252450][T30400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6475'. [ 793.790386][T30437] bond0: (slave bond_slave_1): Releasing backup interface [ 796.337997][T30411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 796.537986][T30451] __nla_validate_parse: 2 callbacks suppressed [ 796.538005][T30451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6489'. [ 796.583721][T30451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6489'. [ 796.604948][T30454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6488'. [ 796.627507][T30459] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6488'. [ 796.647503][T30454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6488'. [ 796.667913][T30459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6488'. [ 797.115728][T10464] IPVS: starting estimator thread 0... [ 797.237013][T30490] IPVS: using max 28 ests per chain, 67200 per kthread [ 797.274052][T30499] validate_nla: 27 callbacks suppressed [ 797.274072][T30499] netlink: 'syz.3.6504': attribute type 1 has an invalid length. [ 797.318561][T30501] netlink: 'syz.0.6505': attribute type 3 has an invalid length. [ 797.349013][T30501] netlink: 'syz.0.6505': attribute type 1 has an invalid length. [ 797.367950][T30501] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6505'. [ 797.477572][T30511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 797.985969][T30544] netlink: 'syz.3.6515': attribute type 2 has an invalid length. [ 797.999022][T30544] netlink: 'syz.3.6515': attribute type 1 has an invalid length. [ 798.089501][T30551] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 798.326219][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 798.416363][T30566] netlink: 'syz.0.6520': attribute type 1 has an invalid length. [ 798.523394][T30566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 798.577597][T30580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6520'. [ 798.663918][T30572] bond2: (slave veth0_to_bond): making interface the new active one [ 798.749232][T30572] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 798.792501][T30575] netlink: zone id is out of range [ 798.805038][T30575] netlink: zone id is out of range [ 798.828114][T30575] netlink: zone id is out of range [ 798.862123][T30572] macvlan2: entered promiscuous mode [ 798.863060][T30575] netlink: zone id is out of range [ 798.877623][T30572] macvlan2: entered allmulticast mode [ 798.893756][T30572] bond2: entered promiscuous mode [ 798.901179][T30575] netlink: zone id is out of range [ 798.903654][T30572] veth0_to_bond: entered promiscuous mode [ 798.914297][T30572] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 798.929166][T30572] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 798.948927][T30572] bond2: left promiscuous mode [ 798.950440][T30575] netlink: zone id is out of range [ 798.953818][T30572] veth0_to_bond: left promiscuous mode [ 798.965558][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 798.981374][T30575] netlink: zone id is out of range [ 798.992202][T30575] netlink: zone id is out of range [ 798.999322][T30575] netlink: zone id is out of range [ 799.056712][T30606] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6527'. [ 799.140946][T30586] syzkaller0: entered promiscuous mode [ 799.167883][T30586] syzkaller0: entered allmulticast mode [ 799.371877][T30626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6534'. [ 799.615078][ T4962] block nbd3: Possible stuck request ffff888027440380: control (read@0,1024B). Runtime 120 seconds [ 799.626452][ T4962] block nbd3: Possible stuck request ffff888027440540: control (read@1024,1024B). Runtime 120 seconds [ 799.639582][ T4962] block nbd3: Possible stuck request ffff888027440700: control (read@2048,1024B). Runtime 120 seconds [ 799.650962][ T4962] block nbd3: Possible stuck request ffff8880274408c0: control (read@3072,1024B). Runtime 120 seconds [ 799.680707][T30637] netlink: 'syz.1.6537': attribute type 1 has an invalid length. [ 802.500232][T30639] ip_vti0: entered promiscuous mode [ 802.753794][T30661] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.6543'. [ 802.761023][T30657] Bluetooth: MGMT ver 1.23 [ 802.771250][T30658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6542'. [ 802.806691][T30657] Bluetooth: hci1: too big key_count value 32778 [ 802.829833][T30661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.869895][T30661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.358028][T30693] netlink: 'syz.0.6552': attribute type 8 has an invalid length. [ 803.628279][T30710] netlink: 'syz.2.6557': attribute type 21 has an invalid length. [ 803.664520][T30710] IPv6: NLM_F_CREATE should be specified when creating new route [ 803.670780][T30715] netlink: 'syz.0.6556': attribute type 18 has an invalid length. [ 803.776569][T11313] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.814052][T11313] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.827590][T30724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6558'. [ 803.946208][T11313] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.997195][T11313] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.099844][T30737] tap0: tun_chr_ioctl cmd 1074025676 [ 804.164153][T30737] tap0: owner set to 0 [ 804.271311][T30748] net_ratelimit: 51 callbacks suppressed [ 804.271327][T30748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.354608][T30750] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 804.527082][T30760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6566'. [ 804.634981][T30768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.809731][T30777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6571'. [ 804.843302][T30777] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6571'. [ 804.876977][T30778] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.886245][T30778] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.345598][T30800] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6575'. [ 805.481535][T30812] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 805.491670][T30812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6578'. [ 805.762268][T30823] netlink: 'syz.2.6580': attribute type 21 has an invalid length. [ 805.847345][T30823] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6580'. [ 806.082777][T30836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6584'. [ 806.404742][T30856] netlink: 'syz.1.6588': attribute type 1 has an invalid length. [ 806.443001][T30856] xt_CONNSECMARK: invalid mode: 0 [ 806.677090][T30874] netlink: 'syz.1.6592': attribute type 1 has an invalid length. [ 806.882883][T30888] veth0_macvtap: left promiscuous mode [ 807.340085][T30923] Bluetooth: MGMT ver 1.23 [ 807.534318][T30934] syzkaller0: entered promiscuous mode [ 807.569785][T30934] syzkaller0: entered allmulticast mode [ 807.763156][T30952] __nla_validate_parse: 9 callbacks suppressed [ 807.763175][T30952] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6612'. [ 807.839291][T30957] netlink: 'syz.4.6614': attribute type 58 has an invalid length. [ 807.851039][T30957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6614'. [ 808.058878][T30963] netlink: 'syz.3.6615': attribute type 2 has an invalid length. [ 808.260516][T30969] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20000 [ 808.420002][T30978] bond_slave_1: entered promiscuous mode [ 808.430466][T30978] bond_slave_1: entered allmulticast mode [ 808.488310][T30980] geneve3: entered promiscuous mode [ 808.679975][T30995] netlink: 'syz.2.6625': attribute type 17 has an invalid length. [ 808.683095][T31000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6623'. [ 808.729151][T31003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6626'. [ 808.734026][T30995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6625'. [ 808.788119][T30995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6625'. [ 808.854930][T30995] gretap0: entered promiscuous mode [ 808.901476][T30995] gretap0: left promiscuous mode [ 809.138979][T31022] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6633'. [ 809.176578][T31022] 0·: renamed from hsr0 (while UP) [ 809.196586][T31022] 0·: entered allmulticast mode [ 809.210167][T31022] hsr_slave_0: entered allmulticast mode [ 809.223112][T31022] hsr_slave_1: entered allmulticast mode [ 809.240899][T31022] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 809.267001][T31024] xt_CT: No such helper "snmp_trap" [ 809.510441][T31049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6640'. [ 809.592578][T31053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6641'. [ 809.602206][T31053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6641'. [ 809.654413][T11312] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.663945][T11312] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.704028][T11312] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.733336][T11312] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.776265][T31064] x_tables: duplicate underflow at hook 2 [ 810.040172][T31084] netlink: 'syz.4.6649': attribute type 1 has an invalid length. [ 810.070669][T31083] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 810.290277][T31096] netlink: 'syz.4.6652': attribute type 2 has an invalid length. [ 810.299409][T31100] netlink: 'syz.1.6654': attribute type 1 has an invalid length. [ 810.392377][T31099] netlink: 'syz.2.6653': attribute type 2 has an invalid length. [ 810.427554][T31108] netlink: 'syz.0.6657': attribute type 14 has an invalid length. [ 810.438357][T31099] netlink: 'syz.2.6653': attribute type 1 has an invalid length. [ 810.440034][T31108] netlink: 'syz.0.6657': attribute type 14 has an invalid length. [ 810.460910][T31108] netlink: 'syz.0.6657': attribute type 2 has an invalid length. [ 810.674424][T31122] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.682182][T31122] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.930951][T31140] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 811.153799][T31155] netem: incorrect ge model size [ 811.163148][T31155] netem: change failed [ 811.244677][ T808] IPVS: starting estimator thread 0... [ 811.345943][T31160] IPVS: using max 31 ests per chain, 74400 per kthread [ 811.479051][T31166] syzkaller0: entered promiscuous mode [ 811.495440][T31166] syzkaller0: entered allmulticast mode [ 811.708037][T31183] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 811.864946][T31194] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 812.676931][T31245] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 812.948926][T31258] syzkaller0: entered promiscuous mode [ 812.971566][T31258] syzkaller0: entered allmulticast mode [ 813.429916][T31283] netlink: 'syz.4.6713': attribute type 1 has an invalid length. [ 813.863628][T31312] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip_vti0, syncid = 2, id = 0 [ 813.874359][T31311] __nla_validate_parse: 22 callbacks suppressed [ 813.874379][T31311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6722'. [ 814.028911][T31325] syz_tun: refused to change device tx_queue_len [ 814.184004][T31333] validate_nla: 1 callbacks suppressed [ 814.184024][T31333] netlink: 'syz.4.6729': attribute type 15 has an invalid length. [ 814.260451][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803388b800: rx timeout, send abort [ 814.397677][T31348] netlink: 'syz.4.6734': attribute type 3 has an invalid length. [ 814.419457][T31344] bond3: Removing last ns target with arp_interval on [ 814.653442][T31359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6739'. [ 814.760587][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033888000: rx timeout, send abort [ 814.769049][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803388b800: abort rx timeout. Force session deactivation [ 814.830193][T31366] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 814.995605][T31373] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6742'. [ 814.995986][T31374] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6742'. [ 815.019240][T31375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 815.042106][T31370] netlink: 'syz.4.6743': attribute type 15 has an invalid length. [ 815.088332][T31373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6742'. [ 815.268881][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033888000: abort rx timeout. Force session deactivation [ 816.282512][T31436] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 816.451288][T31447] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6756'. [ 816.885590][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 818.223785][T31388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 818.398383][T31468] macvlan0: entered promiscuous mode [ 818.527779][T31472] bridge3: entered promiscuous mode [ 818.541419][T31472] bridge3: entered allmulticast mode [ 818.663684][T31486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6764'. [ 818.769756][T31498] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 818.779048][T31494] xt_ecn: cannot match TCP bits for non-tcp packets [ 818.900132][T31506] syzkaller0: entered promiscuous mode [ 818.905972][T31506] syzkaller0: entered allmulticast mode [ 818.924018][T31509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6770'. [ 818.939435][T31509] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6770'. [ 819.024171][T31519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6774'. [ 819.575865][T31534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6780'. [ 829.686849][ T4962] block nbd3: Possible stuck request ffff888027440380: control (read@0,1024B). Runtime 150 seconds [ 829.697889][ T4962] block nbd3: Possible stuck request ffff888027440540: control (read@1024,1024B). Runtime 150 seconds [ 829.709623][ T4962] block nbd3: Possible stuck request ffff888027440700: control (read@2048,1024B). Runtime 150 seconds [ 829.720986][ T4962] block nbd3: Possible stuck request ffff8880274408c0: control (read@3072,1024B). Runtime 150 seconds [ 834.960295][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 834.978371][T27826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 834.989068][T27826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 835.015713][T27826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 835.025059][T27826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 835.025140][T31559] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 835.050116][T27826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 835.050856][T31559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 835.060908][T27826] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 835.067983][T31559] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 835.080420][T31561] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 835.081439][T27826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 835.089696][T31561] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 835.096570][T27826] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 835.116324][T27826] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 835.665989][T31554] lo speed is unknown, defaulting to 1000 [ 835.827180][T31553] lo speed is unknown, defaulting to 1000 [ 836.076987][ T5636] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 836.102504][ T5636] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 836.111192][ T5636] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 836.124973][ T5636] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 836.137371][ T5636] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 836.200963][ T5633] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 836.231257][ T5633] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 836.243437][ T5633] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 836.260045][ T5633] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 836.267942][ T5633] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 836.422820][T31556] lo speed is unknown, defaulting to 1000 [ 836.649907][T31554] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.670479][T31554] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.695660][T31554] bridge_slave_0: entered allmulticast mode [ 836.739108][T31554] bridge_slave_0: entered promiscuous mode [ 836.770738][T31554] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.780950][T31554] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.788824][T31554] bridge_slave_1: entered allmulticast mode [ 836.799124][T31554] bridge_slave_1: entered promiscuous mode [ 836.889021][T31554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.909856][T31554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.008014][T31554] team0: Port device team_slave_0 added [ 837.043917][T31554] team0: Port device team_slave_1 added [ 837.098574][T31590] lo speed is unknown, defaulting to 1000 [ 837.150171][T31554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.157539][T31554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.186114][T31554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.201523][T31554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.209312][ T5633] Bluetooth: hci2: command tx timeout [ 837.217638][ T5636] Bluetooth: hci6: command tx timeout [ 837.218859][T27826] Bluetooth: hci7: command tx timeout [ 837.232780][T31554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.232810][T31554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.399201][T31593] lo speed is unknown, defaulting to 1000 [ 837.480099][T31554] hsr_slave_0: entered promiscuous mode [ 837.487121][T31554] hsr_slave_1: entered promiscuous mode [ 837.493678][T31554] debugfs: 'hsr0' already exists in 'hsr' [ 837.505365][T31554] Cannot create hsr debugfs directory [ 837.818947][T31553] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.826399][T31553] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.834589][T31553] bridge_slave_0: entered allmulticast mode [ 837.842460][T31553] bridge_slave_0: entered promiscuous mode [ 837.869369][T31553] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.876941][T31553] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.884221][T31553] bridge_slave_1: entered allmulticast mode [ 837.893131][T31553] bridge_slave_1: entered promiscuous mode [ 837.955034][T31553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.967948][T31556] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.975183][T31556] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.982781][T31556] bridge_slave_0: entered allmulticast mode [ 837.989876][T31556] bridge_slave_0: entered promiscuous mode [ 838.004885][T31556] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.013288][T31556] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.021046][T31556] bridge_slave_1: entered allmulticast mode [ 838.029580][T31556] bridge_slave_1: entered promiscuous mode [ 838.050582][T31553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.122259][T31553] team0: Port device team_slave_0 added [ 838.130740][T31553] team0: Port device team_slave_1 added [ 838.173500][T31556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.214885][T31556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.246164][T27826] Bluetooth: hci8: command tx timeout [ 838.252897][T31553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.260580][T31553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.286891][T31553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.320858][T31556] team0: Port device team_slave_0 added [ 838.333043][T27826] Bluetooth: hci9: command tx timeout [ 838.335078][T31556] team0: Port device team_slave_1 added [ 838.357039][T31553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.364051][T31553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.390965][T31553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.467835][T31556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.474937][T31556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.501938][T31556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.514529][T31556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.521883][T31556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.549103][T31556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.698081][T31553] hsr_slave_0: entered promiscuous mode [ 838.704487][T31553] hsr_slave_1: entered promiscuous mode [ 838.710990][T31553] debugfs: 'hsr0' already exists in 'hsr' [ 838.717021][T31553] Cannot create hsr debugfs directory [ 838.787320][T31556] hsr_slave_0: entered promiscuous mode [ 838.794213][T31556] hsr_slave_1: entered promiscuous mode [ 838.801434][T31556] debugfs: 'hsr0' already exists in 'hsr' [ 838.807820][T31556] Cannot create hsr debugfs directory [ 838.877469][T31590] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.884688][T31590] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.892419][T31590] bridge_slave_0: entered allmulticast mode [ 838.901027][T31590] bridge_slave_0: entered promiscuous mode [ 838.952927][T31590] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.961599][T31590] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.969811][T31590] bridge_slave_1: entered allmulticast mode [ 838.978009][T31590] bridge_slave_1: entered promiscuous mode [ 839.067850][T31590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.099981][T31590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.158476][T31593] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.167547][T31593] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.174901][T31593] bridge_slave_0: entered allmulticast mode [ 839.183368][T31593] bridge_slave_0: entered promiscuous mode [ 839.219067][T31593] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.227320][T31593] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.234756][T31593] bridge_slave_1: entered allmulticast mode [ 839.243578][T31593] bridge_slave_1: entered promiscuous mode [ 839.252518][T31590] team0: Port device team_slave_0 added [ 839.282882][T31590] team0: Port device team_slave_1 added [ 839.287901][T27826] Bluetooth: hci6: command tx timeout [ 839.289896][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 839.293872][ T5636] Bluetooth: hci2: command tx timeout [ 839.307497][ T5633] Bluetooth: hci7: command tx timeout [ 839.381713][T31593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.394400][T31593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.406171][T31590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.413140][T31590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.439887][T31590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.486200][T31590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.493223][T31590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.519746][T31590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.590117][T31593] team0: Port device team_slave_0 added [ 839.620578][T31593] team0: Port device team_slave_1 added [ 839.641678][T31590] hsr_slave_0: entered promiscuous mode [ 839.648302][T31590] hsr_slave_1: entered promiscuous mode [ 839.654432][T31590] debugfs: 'hsr0' already exists in 'hsr' [ 839.660439][T31590] Cannot create hsr debugfs directory [ 839.690989][T31593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.698850][T31593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.725840][T31593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.738498][T31593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.745806][T31593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.773245][T31593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.868111][T31593] hsr_slave_0: entered promiscuous mode [ 839.874872][T31593] hsr_slave_1: entered promiscuous mode [ 839.884117][T31593] debugfs: 'hsr0' already exists in 'hsr' [ 839.890047][T31593] Cannot create hsr debugfs directory [ 840.325550][ T5636] Bluetooth: hci8: command tx timeout [ 840.405904][ T5636] Bluetooth: hci9: command tx timeout [ 841.366147][ T5636] Bluetooth: hci2: command tx timeout [ 841.366669][T27826] Bluetooth: hci6: command tx timeout [ 841.374815][ T5633] Bluetooth: hci7: command tx timeout [ 842.405656][ T5633] Bluetooth: hci8: command tx timeout [ 842.486614][T27826] Bluetooth: hci9: command tx timeout [ 843.445563][T27826] Bluetooth: hci7: command tx timeout [ 843.447614][ T5633] Bluetooth: hci2: command tx timeout [ 843.451015][ T5636] Bluetooth: hci6: command tx timeout [ 844.486442][ T5636] Bluetooth: hci8: command tx timeout [ 844.565821][ T5636] Bluetooth: hci9: command tx timeout [ 851.446648][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 851.606001][T27826] Bluetooth: hci5: command 0x0406 tx timeout [ 859.773681][ T4962] block nbd3: Possible stuck request ffff888027440380: control (read@0,1024B). Runtime 180 seconds [ 859.784764][ T4962] block nbd3: Possible stuck request ffff888027440540: control (read@1024,1024B). Runtime 180 seconds [ 859.796149][ T4962] block nbd3: Possible stuck request ffff888027440700: control (read@2048,1024B). Runtime 180 seconds [ 859.807731][ T4962] block nbd3: Possible stuck request ffff8880274408c0: control (read@3072,1024B). Runtime 180 seconds [ 860.625617][ T4999] udevd[4999]: worker [25580] /devices/virtual/block/nbd3 timeout; kill it [ 860.634389][ T4999] udevd[4999]: seq 28189 '/devices/virtual/block/nbd3' killed [ 861.846038][T27826] Bluetooth: hci4: command 0x0406 tx timeout [ 864.887961][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 866.966026][T27826] Bluetooth: hci3: command 0x0406 tx timeout [ 889.848827][ T4962] block nbd3: Possible stuck request ffff888027440380: control (read@0,1024B). Runtime 210 seconds [ 889.860137][ T4962] block nbd3: Possible stuck request ffff888027440540: control (read@1024,1024B). Runtime 210 seconds [ 889.871215][ T4962] block nbd3: Possible stuck request ffff888027440700: control (read@2048,1024B). Runtime 210 seconds [ 889.882296][ T4962] block nbd3: Possible stuck request ffff8880274408c0: control (read@3072,1024B). Runtime 210 seconds [ 894.919966][T27826] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 894.932599][T27826] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 894.951462][T27826] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 894.952618][T31561] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 894.960419][T27826] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 894.986227][T31561] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 894.987917][T27245] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 894.996600][T31561] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 895.010303][T31561] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 895.025178][T27245] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 895.387270][T31650] lo speed is unknown, defaulting to 1000 [ 895.522446][T31652] lo speed is unknown, defaulting to 1000 [ 895.859805][T31650] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.875675][T31650] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.888019][T31650] bridge_slave_0: entered allmulticast mode [ 895.898525][T31650] bridge_slave_0: entered promiscuous mode [ 895.912858][T31650] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.923262][T31650] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.930845][T31650] bridge_slave_1: entered allmulticast mode [ 895.940439][T31650] bridge_slave_1: entered promiscuous mode [ 895.962520][T27245] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 895.979578][T27245] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 895.992664][T27245] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 896.001597][T27245] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 896.009664][T27245] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 896.034947][T31650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.071240][T31650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.143234][T31650] team0: Port device team_slave_0 added [ 896.161305][T31650] team0: Port device team_slave_1 added [ 896.199512][T31650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.207069][T31650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.233456][T31650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.276092][T31650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.283332][T31650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.311976][T31650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.447900][T31650] hsr_slave_0: entered promiscuous mode [ 896.454768][T31650] hsr_slave_1: entered promiscuous mode [ 896.462906][T31650] debugfs: 'hsr0' already exists in 'hsr' [ 896.469015][T31650] Cannot create hsr debugfs directory [ 896.474768][T31652] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.482600][T31652] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.491801][T31652] bridge_slave_0: entered allmulticast mode [ 896.500225][T31652] bridge_slave_0: entered promiscuous mode [ 896.509298][T31652] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.517429][T31652] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.524738][T31652] bridge_slave_1: entered allmulticast mode [ 896.532348][T31652] bridge_slave_1: entered promiscuous mode [ 896.594794][T31652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.619892][T31652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.629292][T31679] lo speed is unknown, defaulting to 1000 [ 896.685544][T31652] team0: Port device team_slave_0 added [ 896.704226][T31652] team0: Port device team_slave_1 added [ 896.786852][T31652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.794438][T31652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.823728][T31652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.848242][T31652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.860868][T31652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.916015][T31652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.046061][T27245] Bluetooth: hci11: command tx timeout [ 897.046520][ T5633] Bluetooth: hci10: command tx timeout [ 897.124660][T31652] hsr_slave_0: entered promiscuous mode [ 897.124933][T27245] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 897.131691][T31652] hsr_slave_1: entered promiscuous mode [ 897.148414][T31652] debugfs: 'hsr0' already exists in 'hsr' [ 897.149524][T27245] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 897.154199][T31652] Cannot create hsr debugfs directory [ 897.167597][T27245] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 897.178606][T27245] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 897.187856][T27245] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 897.242086][ T5633] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 897.253493][ T5633] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 897.269128][ T5633] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 897.281967][ T5633] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 897.300497][ T5633] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 897.887011][T31697] lo speed is unknown, defaulting to 1000 [ 898.087452][T27245] Bluetooth: hci12: command tx timeout [ 898.188404][T31699] lo speed is unknown, defaulting to 1000 [ 898.210368][T31679] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.228384][T31679] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.241211][T31679] bridge_slave_0: entered allmulticast mode [ 898.251098][T31679] bridge_slave_0: entered promiscuous mode [ 898.272440][T31679] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.281089][T31679] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.288690][T31679] bridge_slave_1: entered allmulticast mode [ 898.296898][T31679] bridge_slave_1: entered promiscuous mode [ 898.431424][T31679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.446100][T31679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.540915][T31679] team0: Port device team_slave_0 added [ 898.585291][T31679] team0: Port device team_slave_1 added [ 898.670052][T31679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.678217][T31679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.704311][T31679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.751163][T31679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.761777][T31679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.788673][T31679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.904984][T31679] hsr_slave_0: entered promiscuous mode [ 898.913057][T31679] hsr_slave_1: entered promiscuous mode [ 898.919759][T31679] debugfs: 'hsr0' already exists in 'hsr' [ 898.925616][T31679] Cannot create hsr debugfs directory [ 899.125699][T27245] Bluetooth: hci11: command tx timeout [ 899.135700][T27245] Bluetooth: hci10: command tx timeout [ 899.189034][T31697] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.197843][T31697] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.205143][T31697] bridge_slave_0: entered allmulticast mode [ 899.214873][T31697] bridge_slave_0: entered promiscuous mode [ 899.254684][T31697] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.262087][T31697] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.271550][T31697] bridge_slave_1: entered allmulticast mode [ 899.279374][T31697] bridge_slave_1: entered promiscuous mode [ 899.295629][T27245] Bluetooth: hci13: command tx timeout [ 899.365972][T27245] Bluetooth: hci14: command tx timeout [ 899.393886][T31697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.419890][T31697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.483423][T31699] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.490981][T31699] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.499397][T31699] bridge_slave_0: entered allmulticast mode [ 899.507907][T31699] bridge_slave_0: entered promiscuous mode [ 899.515840][T31699] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.523377][T31699] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.532340][T31699] bridge_slave_1: entered allmulticast mode [ 899.540104][T31699] bridge_slave_1: entered promiscuous mode [ 899.548983][T31697] team0: Port device team_slave_0 added [ 899.594165][T31697] team0: Port device team_slave_1 added [ 899.602682][T31699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.618617][T31699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.675070][T31697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.683253][T31697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.710494][T31697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.737712][T31697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.744759][T31697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.771882][T31697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.793618][T31699] team0: Port device team_slave_0 added [ 899.813016][T31699] team0: Port device team_slave_1 added [ 899.870639][T31699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.877822][T31699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.904788][T31699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.929068][T31697] hsr_slave_0: entered promiscuous mode [ 899.936252][T31697] hsr_slave_1: entered promiscuous mode [ 899.942425][T31697] debugfs: 'hsr0' already exists in 'hsr' [ 899.948951][T31697] Cannot create hsr debugfs directory [ 899.955880][T31699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.962857][T31699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.991142][T31699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.110358][T31699] hsr_slave_0: entered promiscuous mode [ 900.117042][T31699] hsr_slave_1: entered promiscuous mode [ 900.123161][T31699] debugfs: 'hsr0' already exists in 'hsr' [ 900.129019][T31699] Cannot create hsr debugfs directory [ 900.166150][T27245] Bluetooth: hci12: command tx timeout [ 901.205863][ T5633] Bluetooth: hci11: command tx timeout [ 901.207992][T27245] Bluetooth: hci10: command tx timeout [ 901.365947][T27245] Bluetooth: hci13: command tx timeout [ 901.446063][T27245] Bluetooth: hci14: command tx timeout [ 902.246213][T27245] Bluetooth: hci12: command tx timeout [ 903.286432][ T5633] Bluetooth: hci11: command tx timeout [ 903.293136][T27245] Bluetooth: hci10: command tx timeout [ 903.445596][T27245] Bluetooth: hci13: command tx timeout [ 903.526301][T27245] Bluetooth: hci14: command tx timeout [ 904.325804][T27245] Bluetooth: hci12: command tx timeout [ 905.525597][T27245] Bluetooth: hci13: command tx timeout [ 905.605681][T27245] Bluetooth: hci14: command tx timeout [ 919.925990][ T4962] block nbd3: Possible stuck request ffff888027440380: control (read@0,1024B). Runtime 240 seconds [ 919.937310][ T4962] block nbd3: Possible stuck request ffff888027440540: control (read@1024,1024B). Runtime 240 seconds [ 919.948630][ T4962] block nbd3: Possible stuck request ffff888027440700: control (read@2048,1024B). Runtime 240 seconds [ 919.960638][ T4962] block nbd3: Possible stuck request ffff8880274408c0: control (read@3072,1024B). Runtime 240 seconds [ 921.205570][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 943.765652][T27245] Bluetooth: hci1: command 0x0406 tx timeout [ 950.007636][ T4962] block nbd3: Possible stuck request ffff888027440380: control (read@0,1024B). Runtime 270 seconds [ 950.018631][ T4962] block nbd3: Possible stuck request ffff888027440540: control (read@1024,1024B). Runtime 270 seconds [ 950.030338][ T4962] block nbd3: Possible stuck request ffff888027440700: control (read@2048,1024B). Runtime 270 seconds [ 950.041443][ T4962] block nbd3: Possible stuck request ffff8880274408c0: control (read@3072,1024B). Runtime 270 seconds [ 955.137442][T27245] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 955.157650][T27245] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 955.169220][T27245] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 955.187812][T27245] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 955.198408][T31561] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 955.210981][T27245] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 955.217396][T31561] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 955.237300][T31561] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 955.253219][T31561] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 955.262591][T31561] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 955.622649][T31745] lo speed is unknown, defaulting to 1000 [ 955.747182][T31747] lo speed is unknown, defaulting to 1000 [ 956.127269][T31745] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.135090][T31745] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.143962][T31745] bridge_slave_0: entered allmulticast mode [ 956.153616][T31745] bridge_slave_0: entered promiscuous mode [ 956.180377][T31745] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.181507][T31561] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 956.188166][T31745] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.204448][T31745] bridge_slave_1: entered allmulticast mode [ 956.207810][T31561] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 956.213529][T31745] bridge_slave_1: entered promiscuous mode [ 956.226846][T31561] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 956.236736][T31561] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 956.246845][T31561] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 956.320286][T31745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.339182][T31745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.398073][T31745] team0: Port device team_slave_0 added [ 956.413404][T31745] team0: Port device team_slave_1 added [ 956.487497][T31745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.494901][T31745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.527732][T31745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.551442][T31745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.560115][T31745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.593297][T31745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.720485][T31745] hsr_slave_0: entered promiscuous mode [ 956.727782][T31745] hsr_slave_1: entered promiscuous mode [ 956.734052][T31745] debugfs: 'hsr0' already exists in 'hsr' [ 956.741103][T31745] Cannot create hsr debugfs directory [ 956.768091][T31747] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.775782][T31747] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.783288][T31747] bridge_slave_0: entered allmulticast mode [ 956.790740][T31747] bridge_slave_0: entered promiscuous mode [ 956.812162][T31747] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.820979][T31747] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.828590][T31747] bridge_slave_1: entered allmulticast mode [ 956.836238][T31747] bridge_slave_1: entered promiscuous mode [ 956.858017][T31774] lo speed is unknown, defaulting to 1000 [ 956.886393][T31747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.924035][T31747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.000255][T31747] team0: Port device team_slave_0 added [ 957.023442][T31747] team0: Port device team_slave_1 added [ 957.130676][T31747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.156099][T31747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.182672][T31747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.253951][T31747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.275812][T31747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.301953][T31560] Bluetooth: hci15: command tx timeout [ 957.306295][T31560] Bluetooth: hci16: command tx timeout [ 957.317161][T31747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.321849][T31560] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 957.353283][T31560] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 957.361941][T31560] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 957.376509][T31560] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 957.385955][T31560] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 957.443115][T31790] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 957.463457][T31790] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 957.474749][T31790] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 957.483769][T31790] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 957.492327][T31790] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 957.500472][T31747] hsr_slave_0: entered promiscuous mode [ 957.511781][T31747] hsr_slave_1: entered promiscuous mode [ 957.518704][T31747] debugfs: 'hsr0' already exists in 'hsr' [ 957.533412][T31747] Cannot create hsr debugfs directory [ 958.230036][T31793] lo speed is unknown, defaulting to 1000 [ 958.335639][T31790] Bluetooth: hci17: command tx timeout [ 958.373864][T31774] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.382685][T31774] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.390840][T31774] bridge_slave_0: entered allmulticast mode [ 958.399337][T31774] bridge_slave_0: entered promiscuous mode [ 958.414261][T31774] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.431514][T31774] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.441666][T31774] bridge_slave_1: entered allmulticast mode [ 958.450608][T31774] bridge_slave_1: entered promiscuous mode [ 958.496931][T31796] lo speed is unknown, defaulting to 1000 [ 958.551388][T31774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.595668][T31774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.662767][T31774] team0: Port device team_slave_0 added [ 958.684544][T31774] team0: Port device team_slave_1 added [ 958.779198][T31774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.786559][T31774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.814569][T31774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.828073][T31774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.836155][T31774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.862239][T31774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.030686][T31774] hsr_slave_0: entered promiscuous mode [ 959.037556][T31774] hsr_slave_1: entered promiscuous mode [ 959.044198][T31774] debugfs: 'hsr0' already exists in 'hsr' [ 959.051282][T31774] Cannot create hsr debugfs directory [ 959.125960][T31790] Bluetooth: hci7: command 0x0406 tx timeout [ 959.129000][T31560] Bluetooth: hci9: command 0x0406 tx timeout [ 959.132040][T31795] Bluetooth: hci6: command 0x0406 tx timeout [ 959.132726][T31795] Bluetooth: hci8: command 0x0406 tx timeout [ 959.149369][T31560] Bluetooth: hci2: command 0x0406 tx timeout [ 959.366207][T31559] Bluetooth: hci16: command tx timeout [ 959.376346][T31559] Bluetooth: hci15: command tx timeout [ 959.446569][T31559] Bluetooth: hci18: command tx timeout [ 959.536440][T31559] Bluetooth: hci19: command tx timeout [ 959.641332][T31793] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.649595][T31793] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.658066][T31793] bridge_slave_0: entered allmulticast mode [ 959.665374][T31793] bridge_slave_0: entered promiscuous mode [ 959.692207][T31793] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.699442][T31793] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.707888][T31793] bridge_slave_1: entered allmulticast mode [ 959.715085][T31793] bridge_slave_1: entered promiscuous mode [ 959.769842][T31793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.797332][T31793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.858948][T31793] team0: Port device team_slave_0 added [ 959.877380][T31793] team0: Port device team_slave_1 added [ 959.919361][T31796] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.927419][T31796] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.934703][T31796] bridge_slave_0: entered allmulticast mode [ 959.942199][T31796] bridge_slave_0: entered promiscuous mode [ 959.965041][T31793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.973061][T31793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.000489][T31793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.011810][T31796] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.019229][T31796] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.026788][T31796] bridge_slave_1: entered allmulticast mode [ 960.034620][T31796] bridge_slave_1: entered promiscuous mode [ 960.043446][T31793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.050503][T31793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.077331][T31793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.133169][T31796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.154124][T31796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.197470][T31793] hsr_slave_0: entered promiscuous mode [ 960.204200][T31793] hsr_slave_1: entered promiscuous mode [ 960.212191][T31793] debugfs: 'hsr0' already exists in 'hsr' [ 960.218162][T31793] Cannot create hsr debugfs directory [ 960.267322][T31796] team0: Port device team_slave_0 added [ 960.281299][T31796] team0: Port device team_slave_1 added [ 960.332342][T31796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.339453][T31796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.367415][T31796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.394750][T31796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.405707][T31559] Bluetooth: hci17: command tx timeout [ 960.424276][T31796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.451240][T31796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.568885][T31796] hsr_slave_0: entered promiscuous mode [ 960.575697][T31796] hsr_slave_1: entered promiscuous mode [ 960.581898][T31796] debugfs: 'hsr0' already exists in 'hsr' [ 960.588050][T31796] Cannot create hsr debugfs directory [ 961.445935][T27245] Bluetooth: hci16: command tx timeout [ 961.451489][T31559] Bluetooth: hci15: command tx timeout [ 961.526131][T31559] Bluetooth: hci18: command tx timeout [ 961.606126][T31559] Bluetooth: hci19: command tx timeout [ 962.485670][T31559] Bluetooth: hci17: command tx timeout [ 963.525496][T31559] Bluetooth: hci15: command tx timeout [ 963.525814][T27245] Bluetooth: hci16: command tx timeout [ 963.606258][T27245] Bluetooth: hci18: command tx timeout [ 963.685876][T27245] Bluetooth: hci19: command tx timeout [ 964.566380][T27245] Bluetooth: hci17: command tx timeout [ 965.685746][T27245] Bluetooth: hci18: command tx timeout [ 965.766176][T27245] Bluetooth: hci19: command tx timeout [ 972.420388][ T30] INFO: task syz.2.6771:31506 blocked for more than 143 seconds. [ 972.428486][ T30] Not tainted syzkaller #0 [ 972.433457][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 972.442755][ T30] task:syz.2.6771 state:D stack:25320 pid:31506 tgid:31505 ppid:27240 task_flags:0x400140 flags:0x00080002 [ 972.455408][ T30] Call Trace: [ 972.458733][ T30] [ 972.461659][ T30] __schedule+0x1821/0x5740 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 972.466473][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 972.471567][ T30] ? __pfx___schedule+0x10/0x10 [ 972.477585][ T30] ? schedule+0x90/0x360 [ 972.482731][ T30] schedule+0x164/0x360 [ 972.490212][ T30] schedule_preempt_disabled+0x13/0x30 [ 972.495985][ T30] __mutex_lock+0x7f7/0x1550 [ 972.500630][ T30] ? __mutex_lock+0x608/0x1550 [ 972.521624][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 972.539696][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 972.544865][ T30] ? radix_tree_lookup+0x240/0x290 [ 972.550725][ T30] genl_rcv_msg+0x10b/0x7a0 [ 972.555761][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 972.560852][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 972.570469][ T30] netlink_rcv_skb+0x232/0x4b0 [ 972.576175][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 972.581260][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 972.594008][ T30] ? down_read+0x270/0x2e0 [ 972.599321][ T30] ? genl_rcv+0xd/0x40 [ 972.603464][ T30] genl_rcv+0x28/0x40 [ 972.607525][ T30] netlink_unicast+0x75c/0x8e0 [ 972.612337][ T30] netlink_sendmsg+0x813/0xb40 [ 972.617224][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.622575][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 972.628112][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 972.633430][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.638945][ T30] __sys_sendto+0x672/0x710 [ 972.643725][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 972.649224][ T30] ? exc_page_fault+0x6a/0xc0 [ 972.653954][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 972.659699][ T30] __x64_sys_sendto+0xde/0x100 [ 972.664501][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.670647][ T30] do_syscall_64+0x174/0x580 [ 972.675250][ T30] ? trace_irq_disable+0x3b/0x140 [ 972.680589][ T30] ? clear_bhb_loop+0x40/0x90 [ 972.686278][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.692878][ T30] RIP: 0033:0x7f4edc95d68e [ 972.697424][ T30] RSP: 002b:00007f4edabf4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 972.706014][ T30] RAX: ffffffffffffffda RBX: 00007f4edabf66c0 RCX: 00007f4edc95d68e [ 972.714026][ T30] RDX: 0000000000000024 RSI: 00007f4edabf5000 RDI: 000000000000000a [ 972.722651][ T30] RBP: 0000000000000000 R08: 00007f4edabf4f04 R09: 000000000000000c [ 972.731809][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 972.740250][ T30] R13: 00007f4edabf4f58 R14: 00007f4edabf5000 R15: 0000000000000000 [ 972.748595][ T30] [ 972.751679][ T30] INFO: task syz.3.6772:31510 blocked for more than 143 seconds. [ 972.761101][ T30] Not tainted syzkaller #0 [ 972.766215][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 972.774914][ T30] task:syz.3.6772 state:D stack:25320 pid:31510 tgid:31508 ppid:29343 task_flags:0x480140 flags:0x00080002 [ 972.787484][ T30] Call Trace: [ 972.790785][ T30] [ 972.794405][ T30] __schedule+0x1821/0x5740 [ 972.799211][ T30] ? __pfx___schedule+0x10/0x10 [ 972.804106][ T30] ? schedule+0x90/0x360 [ 972.809409][ T30] schedule+0x164/0x360 [ 972.813623][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 972.819339][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 972.825642][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 972.832030][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 972.839079][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 972.845289][ T30] nbd_set_size+0x454/0x680 [ 972.850301][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 972.855561][ T30] ? nla_memcpy+0x5b/0xc0 [ 972.859908][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 972.865256][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 972.871798][ T30] ? rcu_is_watching+0x15/0xb0 [ 972.876774][ T30] ? trace_kmalloc+0x2a/0xf0 [ 972.881411][ T30] ? __nla_parse+0x40/0x60 [ 972.886189][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 972.892586][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 972.900791][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 972.906592][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 972.912702][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 972.917839][ T30] genl_rcv_msg+0x61c/0x7a0 [ 972.922381][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 972.927841][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 972.933568][ T30] netlink_rcv_skb+0x232/0x4b0 [ 972.938423][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 972.943467][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 972.949043][ T30] ? down_read+0x270/0x2e0 [ 972.953487][ T30] ? genl_rcv+0xd/0x40 [ 972.958192][ T30] genl_rcv+0x28/0x40 [ 972.962217][ T30] netlink_unicast+0x75c/0x8e0 [ 972.967194][ T30] netlink_sendmsg+0x813/0xb40 [ 972.972005][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.977587][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 972.982580][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 972.988342][ T30] ____sys_sendmsg+0x972/0x9f0 [ 972.993110][ T30] ? __might_fault+0xaf/0x130 [ 972.998706][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 973.004050][ T30] ? import_iovec+0x73/0xa0 [ 973.008973][ T30] ___sys_sendmsg+0x2a5/0x360 [ 973.013699][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 973.019372][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 973.024618][ T30] ? futex_wake+0x4ac/0x580 [ 973.029382][ T30] ? __fget_files+0x2a/0x420 [ 973.034189][ T30] ? __fget_files+0x3a0/0x420 [ 973.038966][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 973.043935][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 973.050621][ T30] ? rcu_is_watching+0x15/0xb0 [ 973.055518][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.061805][ T30] do_syscall_64+0x174/0x580 [ 973.066633][ T30] ? trace_irq_disable+0x3b/0x140 [ 973.071690][ T30] ? clear_bhb_loop+0x40/0x90 [ 973.076936][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.082846][ T30] RIP: 0033:0x7f99bd99ce59 [ 973.087346][ T30] RSP: 002b:00007f99bbbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 973.095869][ T30] RAX: ffffffffffffffda RBX: 00007f99bdc15fa0 RCX: 00007f99bd99ce59 [ 973.104591][ T30] RDX: 0000000000008010 RSI: 0000200000003440 RDI: 0000000000000011 [ 973.113162][ T30] RBP: 00007f99bda32d6f R08: 0000000000000000 R09: 0000000000000000 [ 973.121410][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 973.129965][ T30] R13: 00007f99bdc16038 R14: 00007f99bdc15fa0 R15: 00007ffd752e0f98 [ 973.138620][ T30] [ 973.141681][ T30] INFO: task syz.4.6780:31534 blocked for more than 144 seconds. [ 973.149495][ T30] Not tainted syzkaller #0 [ 973.154438][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 973.168900][ T30] task:syz.4.6780 state:D stack:26280 pid:31534 tgid:31533 ppid:28513 task_flags:0x400140 flags:0x00080002 [ 973.180961][ T30] Call Trace: [ 973.184248][ T30] [ 973.188083][ T30] __schedule+0x1821/0x5740 [ 973.192640][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 973.198182][ T30] ? __pfx___schedule+0x10/0x10 [ 973.203659][ T30] ? schedule+0x90/0x360 [ 973.208711][ T30] schedule+0x164/0x360 [ 973.212927][ T30] schedule_preempt_disabled+0x13/0x30 [ 973.218534][ T30] __mutex_lock+0x7f7/0x1550 [ 973.223158][ T30] ? __mutex_lock+0x608/0x1550 [ 973.228358][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 973.233045][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 973.238265][ T30] ? radix_tree_lookup+0x240/0x290 [ 973.243402][ T30] genl_rcv_msg+0x10b/0x7a0 [ 973.248123][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 973.253296][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 973.259249][ T30] netlink_rcv_skb+0x232/0x4b0 [ 973.264046][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 973.269180][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 973.274499][ T30] ? down_read+0x270/0x2e0 [ 973.280458][ T30] ? genl_rcv+0xd/0x40 [ 973.284579][ T30] genl_rcv+0x28/0x40 [ 973.293521][ T30] netlink_unicast+0x75c/0x8e0 [ 973.298696][ T30] netlink_sendmsg+0x813/0xb40 [ 973.303526][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 973.310287][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 973.315276][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 973.320633][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 973.326491][ T30] __sys_sendto+0x672/0x710 [ 973.331105][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 973.336335][ T30] ? exc_page_fault+0x6a/0xc0 [ 973.341025][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 973.346376][ T30] __x64_sys_sendto+0xde/0x100 [ 973.351164][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.357712][ T30] do_syscall_64+0x174/0x580 [ 973.362318][ T30] ? trace_irq_disable+0x3b/0x140 [ 973.367705][ T30] ? clear_bhb_loop+0x40/0x90 [ 973.372423][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.378375][ T30] RIP: 0033:0x7fa5b9f5d68e [ 973.382823][ T30] RSP: 002b:00007fa5b81ece88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 973.392198][ T30] RAX: ffffffffffffffda RBX: 00007fa5b81ee6c0 RCX: 00007fa5b9f5d68e [ 973.400283][ T30] RDX: 0000000000000020 RSI: 00007fa5b81ed000 RDI: 0000000000000005 [ 973.409199][ T30] RBP: 0000000000000000 R08: 00007fa5b81ecf04 R09: 000000000000000c [ 973.417755][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 973.425832][ T30] R13: 00007fa5b81ecf58 R14: 00007fa5b81ed000 R15: 0000000000000000 [ 973.433897][ T30] [ 973.437123][ T30] INFO: task syz.1.6783:31542 blocked for more than 144 seconds. [ 973.444900][ T30] Not tainted syzkaller #0 [ 973.454146][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 973.462952][ T30] task:syz.1.6783 state:D stack:26264 pid:31542 tgid:31541 ppid:28074 task_flags:0x400140 flags:0x00080002 [ 973.474952][ T30] Call Trace: [ 973.478739][ T30] [ 973.481736][ T30] __schedule+0x1821/0x5740 [ 973.486390][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 973.491383][ T30] ? __pfx___schedule+0x10/0x10 [ 973.496375][ T30] ? schedule+0x90/0x360 [ 973.500646][ T30] schedule+0x164/0x360 [ 973.504807][ T30] schedule_preempt_disabled+0x13/0x30 [ 973.511406][ T30] __mutex_lock+0x7f7/0x1550 [ 973.516157][ T30] ? __mutex_lock+0x608/0x1550 [ 973.520949][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 973.527716][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 973.532975][ T30] ? radix_tree_lookup+0x240/0x290 [ 973.538517][ T30] genl_rcv_msg+0x10b/0x7a0 [ 973.543039][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 973.548708][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 973.554115][ T30] netlink_rcv_skb+0x232/0x4b0 [ 973.559002][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 973.564065][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 973.569516][ T30] ? down_read+0x270/0x2e0 [ 973.573968][ T30] ? genl_rcv+0xd/0x40 [ 973.578475][ T30] genl_rcv+0x28/0x40 [ 973.582481][ T30] netlink_unicast+0x75c/0x8e0 [ 973.587438][ T30] netlink_sendmsg+0x813/0xb40 [ 973.592266][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 973.597632][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 973.602591][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 973.608981][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 973.614951][ T30] __sys_sendto+0x672/0x710 [ 973.620042][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 973.625110][ T30] ? exc_page_fault+0x6a/0xc0 [ 973.630018][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 973.636017][ T30] __x64_sys_sendto+0xde/0x100 [ 973.640847][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.647581][ T30] do_syscall_64+0x174/0x580 [ 973.652193][ T30] ? trace_irq_disable+0x3b/0x140 [ 973.657291][ T30] ? clear_bhb_loop+0x40/0x90 [ 973.661972][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.668130][ T30] RIP: 0033:0x7f1ef315d68e [ 973.672583][ T30] RSP: 002b:00007f1ef4122e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 973.681588][ T30] RAX: ffffffffffffffda RBX: 00007f1ef41246c0 RCX: 00007f1ef315d68e [ 973.690380][ T30] RDX: 0000000000000020 RSI: 00007f1ef4123000 RDI: 000000000000000d [ 973.699032][ T30] RBP: 0000000000000000 R08: 00007f1ef4122f04 R09: 000000000000000c [ 973.707340][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 973.716162][ T30] R13: 00007f1ef4122f58 R14: 00007f1ef4123000 R15: 0000000000000000 [ 973.724170][ T30] [ 973.727388][ T30] INFO: task syz.0.6784:31545 blocked for more than 144 seconds. [ 973.735136][ T30] Not tainted syzkaller #0 [ 973.740571][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 973.749695][ T30] task:syz.0.6784 state:D stack:27904 pid:31545 tgid:31544 ppid:27824 task_flags:0x400040 flags:0x00080002 [ 973.761961][ T30] Call Trace: [ 973.765258][ T30] [ 973.769258][ T30] __schedule+0x1821/0x5740 [ 973.773829][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 973.778904][ T30] ? __pfx___schedule+0x10/0x10 [ 973.783801][ T30] ? schedule+0x90/0x360 [ 973.788147][ T30] schedule+0x164/0x360 [ 973.792326][ T30] schedule_preempt_disabled+0x13/0x30 [ 973.798275][ T30] __mutex_lock+0x7f7/0x1550 [ 973.802902][ T30] ? __mutex_lock+0x608/0x1550 [ 973.807871][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 973.812765][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 973.818608][ T30] ? radix_tree_lookup+0x240/0x290 [ 973.823816][ T30] genl_rcv_msg+0x10b/0x7a0 [ 973.828952][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 973.834004][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 973.839443][ T30] netlink_rcv_skb+0x232/0x4b0 [ 973.844226][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 973.849977][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 973.855376][ T30] ? down_read+0x270/0x2e0 [ 973.859846][ T30] ? genl_rcv+0xd/0x40 [ 973.863911][ T30] genl_rcv+0x28/0x40 [ 973.868396][ T30] netlink_unicast+0x75c/0x8e0 [ 973.873174][ T30] netlink_sendmsg+0x813/0xb40 [ 973.878154][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 973.883506][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 973.888577][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 973.893950][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 973.899909][ T30] __sys_sendto+0x672/0x710 [ 973.904456][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 973.909567][ T30] ? exc_page_fault+0x6a/0xc0 [ 973.914298][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 973.920549][ T30] __x64_sys_sendto+0xde/0x100 [ 973.927275][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.933431][ T30] do_syscall_64+0x174/0x580 [ 973.938140][ T30] ? trace_irq_disable+0x3b/0x140 [ 973.943195][ T30] ? clear_bhb_loop+0x40/0x90 [ 973.947932][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.953839][ T30] RIP: 0033:0x7f667555d68e [ 973.958691][ T30] RSP: 002b:00007f6676472e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 973.967222][ T30] RAX: ffffffffffffffda RBX: 00007f66764746c0 RCX: 00007f667555d68e [ 973.975237][ T30] RDX: 0000000000000020 RSI: 00007f6676473000 RDI: 0000000000000005 [ 973.983410][ T30] RBP: 0000000000000000 R08: 00007f6676472f04 R09: 000000000000000c [ 973.991797][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 973.999837][ T30] R13: 00007f6676472f58 R14: 00007f6676473000 R15: 0000000000000000 [ 974.009137][ T30] [ 974.012276][ T30] [ 974.012276][ T30] Showing all locks held in the system: [ 974.021492][ T30] 1 lock held by khungtaskd/30: [ 974.026457][ T30] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 974.036395][ T30] 2 locks held by getty/5386: [ 974.041076][ T30] #0: ffff8880365570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 974.051401][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 974.061642][ T30] 1 lock held by udevd/25580: [ 974.066434][ T30] #0: ffff8880273c9350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 974.076465][ T30] 2 locks held by syz.2.6771/31506: [ 974.081701][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.092108][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.101332][ T30] 6 locks held by syz.3.6772/31510: [ 974.106973][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.115354][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.125198][ T30] #2: ffff88802734a260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 974.136233][ T30] #3: ffff8880273e3e78 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 974.145770][ T30] #4: ffff8880273e3840 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 974.157865][ T30] #5: ffff8880273e3878 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 974.171176][ T30] 2 locks held by syz.4.6780/31534: [ 974.176430][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.184719][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.193789][ T30] 2 locks held by syz.1.6783/31542: [ 974.199301][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.207864][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.216935][ T30] 2 locks held by syz.0.6784/31545: [ 974.222208][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.231511][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.240604][ T30] 2 locks held by syz-executor/31553: [ 974.246302][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.254545][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.264116][ T30] 2 locks held by syz-executor/31554: [ 974.269542][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.277794][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.287088][ T30] 2 locks held by syz-executor/31556: [ 974.292484][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.300755][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.309804][ T30] 2 locks held by syz-executor/31590: [ 974.315163][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.323986][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.334366][ T30] 2 locks held by syz-executor/31593: [ 974.340430][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.348983][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.358223][ T30] 2 locks held by syz-executor/31650: [ 974.363618][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.372399][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.381972][ T30] 2 locks held by syz-executor/31652: [ 974.387551][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.396402][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.406213][ T30] 2 locks held by syz-executor/31679: [ 974.411617][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.420173][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.429616][ T30] 2 locks held by syz-executor/31697: [ 974.435994][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.444337][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.453467][ T30] 2 locks held by syz-executor/31699: [ 974.459162][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.467500][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.476547][ T30] 2 locks held by syz-executor/31745: [ 974.481993][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.490959][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.500032][ T30] 2 locks held by syz-executor/31747: [ 974.505553][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.513795][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.523239][ T30] 2 locks held by syz-executor/31774: [ 974.528722][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.537684][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.547531][ T30] 2 locks held by syz-executor/31793: [ 974.552951][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.561342][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.570698][ T30] 2 locks held by syz-executor/31796: [ 974.576691][ T30] #0: ffffffff8fe386a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 974.584925][ T30] #1: ffffffff8fe384e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 974.594028][ T30] [ 974.596689][ T30] ============================================= [ 974.596689][ T30] [ 974.605129][ T30] NMI backtrace for cpu 0 [ 974.605144][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 974.605156][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 974.605163][ T30] Call Trace: [ 974.605169][ T30] [ 974.605177][ T30] dump_stack_lvl+0xe8/0x150 [ 974.605193][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 974.605209][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 974.605221][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 974.605236][ T30] sys_info+0x135/0x170 [ 974.605248][ T30] watchdog+0xfd3/0x1030 [ 974.605266][ T30] ? watchdog+0x1c9/0x1030 [ 974.605283][ T30] kthread+0x389/0x470 [ 974.605304][ T30] ? __pfx_watchdog+0x10/0x10 [ 974.605326][ T30] ? __pfx_kthread+0x10/0x10 [ 974.605346][ T30] ret_from_fork+0x514/0xb70 [ 974.605365][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 974.605382][ T30] ? __switch_to+0xc79/0x1410 [ 974.605409][ T30] ? __pfx_kthread+0x10/0x10 [ 974.605433][ T30] ret_from_fork_asm+0x1a/0x30 [ 974.605470][ T30] [ 974.710992][ T30] Sending NMI from CPU 0 to CPUs 1: [ 974.716721][ C1] NMI backtrace for cpu 1 [ 974.716740][ C1] CPU: 1 UID: 0 PID: 48 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 974.716758][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 974.716770][ C1] Workqueue: bat_events batadv_tt_purge [ 974.716893][ C1] RIP: 0010:__local_bh_disable_ip+0x1e/0xd0 [ 974.716913][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 89 f3 65 8b 05 30 35 b0 11 a9 00 00 0f 00 0f 85 97 00 00 00 9c 41 5e 65 01 1d 1a 35 b0 11 65 8b 05 13 35 b0 11 31 d8 a9 00 ff 00 00 [ 974.716927][ C1] RSP: 0018:ffffc90000b87a28 EFLAGS: 00000246 [ 974.716940][ C1] RAX: 0000000080000000 RBX: 0000000000000201 RCX: ffff88801b3d5d00 [ 974.716952][ C1] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff8b761e0b [ 974.716963][ C1] RBP: fffffffffffffff8 R08: ffffffff903033f7 R09: 1ffffffff206067e [ 974.716975][ C1] R10: dffffc0000000000 R11: fffffbfff206067f R12: ffff888054161008 [ 974.716987][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: ffff888054161010 [ 974.716998][ C1] FS: 0000000000000000(0000) GS:ffff8881253a0000(0000) knlGS:0000000000000000 [ 974.717011][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 974.717022][ C1] CR2: 00007f1f0a347e20 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 974.717037][ C1] Call Trace: [ 974.717049][ C1] [ 974.717058][ C1] ? batadv_tt_purge+0x11b/0x9e0 [ 974.717077][ C1] _raw_spin_lock_bh+0x1c/0x50 [ 974.717099][ C1] batadv_tt_purge+0x11b/0x9e0 [ 974.717122][ C1] ? process_scheduled_works+0xa70/0x1860 [ 974.717139][ C1] process_scheduled_works+0xb5d/0x1860 [ 974.717171][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 974.717190][ C1] ? assign_work+0x3d5/0x5e0 [ 974.717208][ C1] worker_thread+0xa53/0xfc0 [ 974.717238][ C1] kthread+0x389/0x470 [ 974.717257][ C1] ? __pfx_worker_thread+0x10/0x10 [ 974.717271][ C1] ? __pfx_kthread+0x10/0x10 [ 974.717290][ C1] ret_from_fork+0x514/0xb70 [ 974.717308][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 974.717323][ C1] ? __switch_to+0xc79/0x1410 [ 974.717345][ C1] ? __pfx_kthread+0x10/0x10 [ 974.717364][ C1] ret_from_fork_asm+0x1a/0x30 [ 974.717391][ C1] [ 974.935761][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 974.942634][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 974.951750][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 974.961792][ T30] Call Trace: [ 974.965056][ T30] [ 974.967968][ T30] vpanic+0x56c/0xa60 [ 974.971935][ T30] ? __pfx___schedule+0x10/0x10 [ 974.976773][ T30] ? __pfx_vpanic+0x10/0x10 [ 974.981258][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 974.987396][ T30] panic+0xc5/0xd0 [ 974.991106][ T30] ? __pfx_panic+0x10/0x10 [ 974.995520][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 975.000912][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 975.007085][ T30] watchdog+0x102c/0x1030 [ 975.011418][ T30] ? watchdog+0x1c9/0x1030 [ 975.015832][ T30] kthread+0x389/0x470 [ 975.019893][ T30] ? __pfx_watchdog+0x10/0x10 [ 975.024561][ T30] ? __pfx_kthread+0x10/0x10 [ 975.029141][ T30] ret_from_fork+0x514/0xb70 [ 975.033720][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 975.038903][ T30] ? __switch_to+0xc79/0x1410 [ 975.043601][ T30] ? __pfx_kthread+0x10/0x10 [ 975.048192][ T30] ret_from_fork_asm+0x1a/0x30 [ 975.052966][ T30] [ 975.056256][ T30] Kernel Offset: disabled [ 975.060571][ T30] Rebooting in 86400 seconds..