last executing test programs: 27.163769635s ago: executing program 2 (id=1766): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000880000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r5}, &(0x7f0000000ac0), &(0x7f0000000fc0)}, 0x20) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x3}}, 0x18) (async) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) (async) r9 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x20080000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000290000003e"], 0x18}, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) sendmmsg$inet6(r8, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) (async) recvfrom$inet6(r8, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r7, @ANYBLOB="93390700000000001800128008000100677470269f6884cf538c05de1147f64f1666e003653ac541214e3e3572261cbed9b058986c7b3596b77348d2e26b0e0cbb792c1f9ee42e30eea67400000000004954619e19e4182569ae0ffd3563c9fb45a0480a868549755f85e169db67abd003cdf8c7679b5df33292db6a45db67a4644c23bfaa1aa864c644f2298e21de6775a5f3a7d2f1a06411b712b6dbda15446282618b6e92d644e3ed08c6176a3bda6858c0608d73c674667ab22515fd49eaf2362e1df3bb2520a2525407864ce676febaff9e98f6e48b54b3bc824d16fbd1", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="03002cbd70000e00"/18, @ANYRES32=r7, @ANYBLOB="080002000000000008000500ac14141105000d002b000000"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 24.376850374s ago: executing program 2 (id=1771): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x6a040000) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000200)={'veth0_to_team\x00', 0x101}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x6, "f37862b02687"}, &(0x7f0000000100)=0x2a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xd3f48f35ba0dbb55) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000740)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x5, 0x6, 0x7, 0x7fff, 0x6ca], 0x2, 0x0, 0x0, [{}, {}]}, 0x98) 23.148932847s ago: executing program 0 (id=1777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000008000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000000000) writev(r3, &(0x7f0000001340)=[{&(0x7f00000000c0)="e6af8112e3a6d7d1ae31549e895ae93f17482bd652d7dbbc0cb622799998d3209c7bec5e79862447307cf10ccb8dbc0713cfa6fc8527680ec187f620f5cca4a292298da008e37250ddb231e4e7e95d7a86eac3cd03b37abdbc4b3bcfa03eca9959bee5a1c5555364ad6e1a31f8a4c5cce4ad1f860b8f54dd1537089d35755f095633b8d9db2987d40ad3912364e2078519336d0cfe69cd01e0f40a85846e639bc18a5b9396fa3796bfdeba06de6ad19ac25654603aed15cba7a3", 0xba}, {&(0x7f0000000180)="25d5e85e2407982c584d9c93cd592b1a7f1a68eb2ce1951cbfce6fdcd85fff1c75c7163fb897d636552ab2ffdf0ebbdf7da5f806cd70abcefba4841afed3abf87c16e911faaeefc65b4e510f341d5fa2667261a6c6304c2792e929eebcfaf3e890850a781739f2e6ec72590f5bf27091633603f3c6e040c977dc8aede2eaecfba6d26df2129de6a5e536137c359eee150ac1de8474a7e120b48b2ccf331c9709a4f38145569d73664a1ccddec6189a289e78f66226c64f3162650b743661c3b2924496074349eb187e96b853b7377c189697b29640dea1c2a1c1da09", 0xdc}, {&(0x7f0000000280)="8d63dc97a425bfe7ab5e431059c191ec1e6c61ec6f8cfc669d8016a426d58e8d19ec5c07a3aa69a833fb997c1e29b1d296cda9cc95", 0x35}, {&(0x7f00000002c0)="4957e7ae1ba804e41f07ca1fdbdad882b45f6f3fb9e0a2e3b64dbbeee6af66253317187d995b95bfdb2fb528a8b5e44ffe0cb35c26bb434726071cadb9872c4ba67461e30e8fd26d08b01d92b5", 0x4d}, {&(0x7f0000000340)="a7f573ecad7c1510135d3bed119bbc511175c224f271931f4d320df2b16674cd45d6f52870286e160df3b03fe31bde918cc6204ac257f0c5a78e06868b87f886395d23d1a5f1f2e30bc9712cf04a420729840040b133fbbf15724f8440d556aa968765422d516e9a5865ad40cf12818d57404ad72c49bc382adb24e0e78434f19f8d3ba5bc1eebde628168f2c29a261cff5b9590312ae905bbaa542ec1bcf1e4c41241068732deb941b4c330743788d8aeb427c6e748f6d700ff4e9a5b7ad12cf281accc68c7268de35249e7d7ec81615033c466265119e87d784242fd206aadd85b5362732aadc9787ffc161e3c13d75affc8061f6cfbf07ad1c01f59a4f311f5b167bbecec231909bf9739d99c15dc357f54720923432b50ccf4112367c56f51f1847e046f168c261ba3b9c0ac0af9e744aaa021ec3f572707a19f053f6930a1c0e480ec28ca526b6dbe52ae1d702174f65816b93677fd5b22036313dcbd9b17857671d1146afeb3db538f4eb7b1e0977971513ed323db8c6b0294e5b549950a8ddf39ed370a9bbd9e8305019b0f60c0d2a9d2ae61126c23b91fdb590db7f3fbc67430b8d0a3e068e171a45f2421fc58fa7405b91a7674c084feaf48f3cd412c65eba3de7de0a86e40deef5dfc3bac35b357e25acca3be3208123093362f91bb11c5b08592b206570a74a8e07d360fd4adeae17b6086b46d23e8a54a19d590f684b19b9ded16c7853c521169b18ca22c9db54bdaf4b742f4e3971aed380c54951522382956df3112ff321a443b7f4208ad86445a33253f35dcfff2b7cc5f661fa287f1c72908ed11af34ed467aa14d3e319251899d465c070f2a9b991a761716e8e20692cf478a5a961014fecf2ece11daa968e26434b731c0cd04f6c384f7b78ca2e27aade930cf3daae6afc447d55b2bd7a190ddfdb229c3250e8dfa2148bee3a44ec4a1441d3695e510269b15e177fb062563b48fb852b765b179b5ceb884bd3da15627b4ceda6ec4cec2ca812581763d18ec9bb60a849221c57491edda397158140145aa06409afbd5cbb9532eed50a2f6db6f986eb0ac383664d162fa2215b471135a19c86930535dddd2f283441d4a98e393c416c7d4d7ad8b3add7e24d8691e1200819a953ecb6f066f995c885a7c4989433f5caa5442303aaee8589e5b10fa6e08fd9ebe32f21d2fcba4ba66e8a9a75ec21983bed1cf8e923a8c96fea5ec7f3eacb64f1c9f490338aff7ab976b5beb29d6fa97574fa8347bc43f80c09658add7f9f15bd3d47a8db000bc6b3b612dc3ceb905113871ddb02519f4e89640abc4ca5a2f6820e716d32cfd1c963e17f95d853b9ea04039f9f9ede3372c66ed6cd73acdb34293a547b4682b966631f60f7c757a024139dc02aa830b5f8cb360b02a50f73674a90797236183f2aeade244077513b1cebf5f7554e282ad4ef461805bc77e4f004f2250975a86cebaf5961b6d8b8acfda4c68df9c51ab131fe930c02916c43b3256a6c434aac7e713317bbbc3eab6beb3a3a76f5ea53501546e4d0b01dc3c4997661efd22ae71bebd05883d8c5af5bd6ac1a7d73d37045b9a3e17834694748a9fc011e3383f1edcb833b4f1c673f5efab33b4b9373c44038cc1baa3844209080c978a69ec6ffb06472e46dab3e1fd382638d2c732591067dc0ec353f4ecd7a616c16c5e232ac66632192991346210b737784b83b0eea215327e211d8c2cccc6f937514ef7c91cb2480610554f3c6f85e40360a93e77ed234df2d3d889295fabd27ee4c2b16ecbe1bbb78a0140084daa5f38ce16241d82ccb091513108a9ba30e763a5709cf0f8642449fb87e40f5637a1b8b5d3ca4d293e5378333771944059a9491137a266d2d095962748adc5cccebfc4786b38c698a120848a8fbc0895bcfe4d9e7c3a18f864eea51044e67175aaf9449e5461f4106be0d3bafa50e674bd279a1404b40f29889fb789b067d9588b517397be6f731c9d00919dd204c7f48f84e9ff23c0a6d6a08ce63d042dc78165b261dabaa39b5854a5a33e4148bcde9bf7582bf0f6fdfdcacec4b86ab1b7065a65e890faf15db75c65d806a8d0e1185fd3d6c24fbb5fe54ead9ed90c476327641d", 0x5d8}], 0x5) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000680)=@buf={0x5, &(0x7f0000000600)="0c2280261a"}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/93, 0x5d}], 0x1, 0x0, 0x6c8) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) r8 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d03d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1bf4c727f30db4778beff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d571366", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde66", 0x3d}], 0x2, 0x0, 0x0, 0x806}], 0x1, 0x4004001) recvmmsg(r8, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000440)=""/234, 0xea}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000d00)}, 0x8}], 0x2, 0x2101, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) shutdown(r10, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r9) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000b40)={0xbc, r11, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a81d61d564192ce324c6925e4b3647ca04661450a1ae5f56"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4749ba232d0c6b3fefabac271c0f74af222e009937104c5c"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) 20.233253245s ago: executing program 3 (id=1778): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r1, 0x7}, 0x14}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0xc, 0xb9, 0x9, 0x5, 0x0, 0xffff, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x2b, 0xa0, 0x0, @in={0x2, 0x4e20, @multicast2}}]}, 0x28}}, 0x4000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@acquire={0x128, 0x17, 0x1, 0x70bd28, 0x25dfdbfd, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, {@in=@multicast1, @in6=@mcast2, 0x4e21, 0x0, 0x4e21, 0x7, 0xe, 0x30, 0x20, 0x2c}, {{@in=@private=0xa010101, @in=@multicast2, 0x4e22, 0x3, 0x4e24, 0x0, 0xa, 0xa0, 0x0, 0xc}, {0x3, 0x3, 0x5, 0xc606, 0xbf3, 0x3d60000000000000, 0x5, 0x4}, {0x8000000000000000, 0x9, 0x10000, 0xffffffffffff602c}, 0xc, 0x6e6bb9, 0x2, 0x1, 0x1}, 0x6, 0x6, 0xad6, 0x70bd2d}}, 0x128}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x39) 20.148109437s ago: executing program 0 (id=1779): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24}, 0x94) (async) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000600), &(0x7f0000001380)=@udp=r1}, 0x20) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) (async, rerun: 32) recvmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) (async) sendmmsg$unix(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x11, 0xc, 0x0, 0x6, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_sa2={0x2, 0x13, 0x27, 0x0, 0x0, 0x70bd29, 0x3507}, @sadb_x_nat_t_type={0x1, 0x14, 0x5}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}]}, 0x30}}, 0x24e7efd8661a70dd) 20.082006456s ago: executing program 1 (id=1780): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r1 = socket$kcm(0x2, 0x922000000001, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x43, &(0x7f0000000000), 0xff7b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) unshare(0x68040200) 19.605765774s ago: executing program 0 (id=1781): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x32cc0000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000000c0)) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000006, 0x13, r2, 0x607d8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x8, 0xba1a, 0x1, {{0x1a, 0x4, 0x3, 0x8, 0x68, 0x66, 0x0, 0xe2, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x11}, {[@noop, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x2, 0xc, "c4749a27bdef7bfee3ea"}]}, @timestamp_addr={0x44, 0x1c, 0xdf, 0x1, 0x6, [{@loopback}, {@empty, 0xfffff915}, {@remote, 0x7}]}, @timestamp_addr={0x44, 0x1c, 0x7c, 0x1, 0x0, [{@loopback, 0x80}, {@multicast2, 0x4}, {@loopback, 0x9}]}, @timestamp={0x44, 0x8, 0xd6, 0x0, 0xb, [0x4]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4010008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="b40000000000000000f9715ae25653597744000300e80000000000000051841cc44afa2a6f7ee22f14435992d0a9cad20e3fbd4819003d8d380f3cb09f81b115c27d88cd258701009d9201016f0e1daf5f51c0782f875aa83452621652a139841cfdfc7b4709ce231bca88bedeb694dee8bc2f00000005000000a8b97646fdd256", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) 19.430447377s ago: executing program 3 (id=1782): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x41, 0x700, 0x2, 0x817, {{0x31, 0x4, 0x2, 0x6, 0xc4, 0x66, 0x0, 0x7, 0x4, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x4c, 0x29, 0x1, 0xf, [{@loopback, 0xffffffff}, {@rand_addr=0x64010102, 0x2}, {@broadcast, 0x31}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@empty, 0xfbf}, {@remote, 0x1000}, {@local, 0x6}, {@rand_addr=0x64010100, 0x7}, {@remote, 0x8}]}, @ssrr={0x89, 0xb, 0xa3, [@empty, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x7c, 0x3, 0x5, [{@local, 0x3}]}, @generic={0x7, 0xf, "f31fb167d4874798b014627a21"}, @timestamp={0x44, 0xc, 0x49, 0x0, 0x0, [0xe, 0x1]}, @ssrr={0x89, 0x7, 0x98, [@empty]}, @generic={0x94, 0x12, "63ff260a224a977c37710afbc13e0050"}, @lsrr={0x83, 0x17, 0x33, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @broadcast]}]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x71}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000810}, 0x40008c1) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x118, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8, 0x7, 0xe}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x8004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x2, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x20004000) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f0000000600)={0xffffffff, 0x949, 0x8, 0xb6b}) pwritev(r3, &(0x7f0000000800)=[{&(0x7f0000000680)="69491a3aac1328cb3954941a0ab582be953cd540d0490c0409245039496b6e28a455b56fc8af523335437deba3f8ff6700c241c10598c8720f26a707c8544bbf8bf4eaad26d7a27160dffe5951e4a750586391defc23c4a64103d5c0a87cebe3c906855e319515076a8851eef831d70fc144b9f026e5fef5afc8d82f58d01d9f5b460fcfafa267983ecf5fede7caa532654a6c7597c251adf82e0935948ff55781", 0xa1}, {&(0x7f0000000740)="0ac85ef461ef50b60fb6ea29e9c3149d1d2cf59af8", 0x15}, {&(0x7f0000000780)="c3caed5d5a4635b6a0f3469eb0dcbce7f83fdd33c296168020376cbfa54dc1588d1546852c1b6088a575f7026484f8c1d9c441995e8dbe1819a928ac557a5227dd13bfc2f615d7bd59c259aee86709e2168de972d606f2b9056d0a6a2303282b74452d70469b33b169dd43d715b71f141a8b7ec8413952b8a1", 0x79}], 0x3, 0x3, 0x2) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000940)={r3, &(0x7f0000000840)='\'\x00', 0x40000, &(0x7f0000000880)={@align=0x8, {0x8, 0x3261, 0x7, 0x45}}, 0x8, &(0x7f00000008c0), &(0x7f0000000900)=0xe}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x190, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4004}, 0x41) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r4, 0x0, 0x16, 0x9, &(0x7f0000000c40)="7432474342c86bb41b081a5aa2fdb3817e1cc3e5be58", &(0x7f0000000c80)=""/9, 0x4, 0x0, 0xd9, 0xd6, &(0x7f0000000cc0)="72b5eb9d9da3ed34aded92a8cbf80aa7c05f51659e639e0c241089456371cdc9721d94d1efc5bd788f48594ea3b15cd36a9c5d15f3fb3dd1e2e83d80384bebf3d227e57dbff5992224236e014765851cdb2a6eab621059999b1f52457076633b70e10af4a8fc850371be2ae3cbda87d98b2751e8b70896a62d1c7ab99a9c9b05e0fca1ff14ce3497b0387593ca85657cb208028c424b08c7d46f38ca239684628cf943a11d9e5142b506e7e13cc05abfbb3d293c98832e4e4368d5b4895947058b9d3bbfc7b33f7397d26a7f7340b2d84d25703c64e7186198", &(0x7f0000000dc0)="5fedecb4a0efc0699dca8dc14f868853dfb4d6bf9443d0d3f3d5b8d02dd12148429babb1c48640b47563254232f60a1b087f0035d271492e15007ca2629dc86c78d05a48c6d007d4f5e1da3632aac8b7dfb174f0ea0e5994e758213a9eff3c302982be18b8510164396eb359840d1d35e24d1760da9b05e0ee08bfbdad46903576d91d7ae5f0dad9189725a8dd27929e2d3bf3d10769a077e104ec7215b0932c9d37ace468412d655be2b81a9841df2ee33cc1cabb5487030a419ad636216ad050876d2efc0db4032ff0bd3e5604419102696b6c9fb4", 0x0, 0x0, 0xa}, 0x50) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000f80)={0x0, @vsock={0x28, 0x0, 0x2711, @host}, @tipc=@nameseq={0x1e, 0x1, 0xc12f002201fb9fe0, {0x40, 0x4, 0x3}}, @isdn={0x22, 0x9, 0x1, 0xa, 0x1}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)='batadv0\x00', 0x700000000, 0x0, 0x6c1}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000001280)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1e8, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0xfffffff8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xbe7}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x800}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x10000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x3}, {0x6, 0x11, 0xd}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xd68f}, {0x8, 0xb, 0x359f03ee}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) socket$kcm(0x29, 0xf, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000012c0), 0x204002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001340), r4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r7, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=@ipmr_newroute={0x24, 0x18, 0x400, 0x70bd2b, 0x25dfdbfc, {0x80, 0x20, 0x10, 0x1, 0xfc, 0x2, 0x136, 0x8, 0x2000}, [@RTA_TABLE={0x8, 0xf, 0x9b75}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048840}, 0x4000000) accept$phonet_pipe(r4, &(0x7f0000001540), &(0x7f0000001580)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000015c0)=[@in={0x2, 0x4e22, @broadcast}], 0x10) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)=@get={0xf8, 0x13, 0x4, 0x70bd28, 0x25dfdbfc, {{'drbg_nopr_sha1\x00'}, '\x00', '\x00', 0x2400}, [{0x8, 0x1, 0x6}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x1ff}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008054) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r6) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20010080}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x28, r10, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7a}, @void, @val={0xc, 0x99, {0x8, 0x75}}}}}, 0x28}}, 0x80010) r11 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r11, 0x4010942a, &(0x7f0000001900)={0x0, 0x401}) 19.122343925s ago: executing program 2 (id=1783): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000000)={'veth1_to_hsr\x00', @ifru_mtu=0xdc}) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000040)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/234, 0xea}, {&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/144, 0x90}, {&(0x7f00000012c0)}, {&(0x7f0000001300)=""/25, 0x19}, {&(0x7f0000001340)=""/64, 0x40}, {&(0x7f0000001380)=""/155, 0x9b}, {&(0x7f0000001440)=""/137, 0x89}, {&(0x7f0000001500)=""/174, 0xae}], 0xa) syz_emit_ethernet(0x2ec, &(0x7f0000001680)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, "546db5", 0x2b6, 0x2f, 0xff, @local, @remote, {[@fragment={0x16, 0x0, 0x7, 0x1, 0x0, 0x8, 0x65}, @dstopts={0x2f, 0x6, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}, @generic={0xd, 0x18, "a442feb01adb71199c84303f705e94b81d80b3df7159630b"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, @dstopts={0x2b, 0x7, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0xf, 0xfff8, [0x7, 0x100000000, 0x3, 0x5, 0xfffffffffffffffe, 0x7]}}, @pad1]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x21, 0x0, [0xfffa, 0xc], "7e146ff4e500534926671236e813de85044041be8fb700ed83baf193ee10bf7d12"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x8001, 0x1, 0x9370], "2b7101ed705838c2bce97d60318218e1062428f457dd80e19baea9ee41a3c5cdfc31633498c83cdb2f3850e77f194e018ad982500590c65db386e157e42bf32e65bc10b31502695e1b28b49cf7e10ac4e9d183daa205a5eb7ec1c30a1c8741d5fba40bd348d4d2199d29d18a1863cd3b8f53b503e740edaecc1fca73ec3c5d020db27d63fc8a7980c4585e3506d1feaf3dc5b79cba746bdc09e720c5ea4b2e1f3f89a114d4942b0f670fdfb0b8ec2063e5af9b8da553a59fa9113837814ea0edcb7ec4a6e27e"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x5, 0x6], "29f47fc8cab949004cf5606d65125d2d0ef913da2ca406d36dcd0afcf9f409e537e61a51c0cb98a3f5a69c7b1a58908d991e34cf8b7af47b4632af71d79d662c1a356fa3730bdf9ec72a63a798fc73be3da4fe6614f3446e833f90488c0328a9e3eabe"}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x40, 0x1, 0x1, 0x3, 0x0, 0x8}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x2, {{0x4, 0x2, 0x3, 0x0, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x67, 0x2, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "16f8ecbfe2576d0496bd2dc5f9b03917df558926f5e09931b9e0fb33a1bd7470a6950573274e49171b761ac54c710558e688d735eb0582b0b728b068de08b8eecf0b09d3d77a3bdeff68a5dae39fd556aa9d986d00827f1e8819b2e206b22e468ef6dcdea7eaa9ed7091f7c5d131b63b2324ab08e79506f70f7c57f9a1493a8045b053bae03bbf359ac2"}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001980)={0x0, 0x4}, &(0x7f00000019c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001a00)={r2, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x629, 0x1}, 0x90) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000001bc0)={r1, &(0x7f0000001ac0)='(+:!:#\x00', 0x145001, &(0x7f0000001b00)={@_ha_fsid={[0xc, 0x2]}, {0x9, 0x1, 0x3ff, 0x4}}, 0x1b23, &(0x7f0000001b40), &(0x7f0000001b80)=0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001c00)={'wlan0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)=@gettaction={0x30, 0x32, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3f7400}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x5f7f36e2ebd7c141, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xbaa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040805}, 0x8002) syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r3) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_netdev_private(r4, 0x89f6, &(0x7f0000001d80)="e928e333d21aac6fe81356ff61d64335b239fe285c43c25b49d3c8df3ebe357b10c5772137a8c9015521") getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f80)={0x88, 0x3, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_STATUS={0x8}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x86d}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xb4}]}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40090}, 0x20000000) bind$vsock_stream(r3, &(0x7f00000020c0)={0x28, 0x0, 0x2711}, 0x10) r5 = accept4$inet(r3, &(0x7f0000002100)={0x2, 0x0, @dev}, &(0x7f0000002140)=0x10, 0x800) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000002180)=0x80, 0x4) sendmsg$nl_netfilter(r3, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x5c, 0xb, 0x6, 0x301, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x5}, [@generic="4582acb9fe6b852d343b8f38210a857381036f51a05d52a83de45413014cd83189aabd49f2e184e88cbc638d792e2090fbb4761bdef8359119769e1b246cb53381e082412c57"]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x4881) sendmsg(r5, &(0x7f00000034c0)={&(0x7f0000002300)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)="2515b993c1fe97645d1b163f14c8ac1e1a4ab166ca4f961a2ed0f9b1c7fae140d0e25acbcd555d603fa23791b88822a4defbe52e3372c6f8a1095108dfe993443e49b3a282c35430c75079d2d7a8b219588a346a4a3377230ab7ba06f18b87b3778bf3ae445f44dd1dedf794a88641431cfb1a4e3d43c756bd220baa8629f86f819269025b98df204c2350b712deb6817c12271f39dad59f1ad314cc2facde11e2477a65da4b7116b93a5335c587341a8eea5122ed558acf4c3ad2", 0xbb}], 0x1, &(0x7f0000002480)=[{0x30, 0x29, 0x8001, "2f2f80dac7e7b095b95f4b8c8125a267437d2c41dc923671d4907faa25d39f1f"}, {0x1010, 0x111, 0x4, "1a670895c8ff2f38fb61dd792815fa96b3d0308bf6054a62670d13b3666d19a9d0868bc63336b7c040188df9e342c6d325b37c62f157d4097defd18310002246f29f9f6f1558e90c02ae60fc887d0513122da1fde030e36bcea1616798f9100c295d7f7341a14973eae5ea1673604ce137e1ad67483aae78237747ec4851a54a0f494a01f09d9892c930aefc699e90933a29107b6dec0f562a9bca251bbe130ee4f6adcb83633f420d5c821442ae2774d13659bfee5c1e2fe96bdb3449174e6e94962e0f25a5faf8deb913a57fcbe8eef1872c24fe0b718762b82271b024cdb07300d1737747e68f925d20433841a5f0d2c6a84e2042e9b16f11cec5a9f69a051da6d70e7013450155d7d6929d646bae90a411c6debbe1b420881e4007a2441b26af85a7a7d4fe7ff48084b1cf8bdacfdc52660e08608ec7ac7bdb4ac2ae216cabffde5b48dbdcffd75870277df7491e0ab307322ec022b2290cbb2f2b29a5bf4b49a1407d31cf1d27f4b71afa5af8a871877995b2556af692052f9b7c3eafe2fc66b2a6190f3590b8f35aa1b816a703aa4feb8292a926ba36a82c932a9d10568cdb3362844cd5a39b69e57dc89e81673eab46279e5a0bf25c65e7b77e8ce19f97dbed13c6e0e8a5e260f6cee38d77934bb28426a3ce2c3b3bfab52df4bd0fb045aea938cf85346af6e44a8c730cbcadd0c024222b8a259c100e6f4862721c7a90ed99bc1b4feec7c25159482a84410b1bd7e12a43369a7a1be4c128b58bb9f67edcdee4562fb13cc668f019d26158afb13cd0b4d728aec667a4163d111a175bf57eb9aa8c34a16a5ae2ecafdb4259463f4a1e5143f68876f115e2d347545664851248cf325ef91d130685e44526bf59907cd59846c794372a3aa71d871304c82ffd4eadcb6a15aa0f1ffe12de4312d59678c8a3feee19b27f8a776ba1da5c99a24abe00db7bb5286896a4b41130b122842dd9139267b8a444fcd07e77d8aaabc5be1f88c8e8cdf5d7477b5a17cb6e19814543354e74580b1c294d3f2089d786dc96b374c43b60f56be9f71ecc845149da56291724dedb5f05c10a664a861aa1a37e8ca7866bcc33f99322b1f68ae6edb0e9ac8819397ed7329d86a25f78f3d6a249e606d03e2e79332f8a40f39e79aa7daa01ddefc8b614f4e9d9a13da012ccaf83b048fcbdb7412388e84f7fb70bea229dcdd9ec76e6107b28a796a6764776ed16588f6588f7de4dc7a88038b303e70897d8268b131219a531478d868941e50916237d6c444788b8aeec76a961e3e01b960c560d5a32c125ea6ac1c1ffafbdd574d4117edaedf10bf0b2f563ebf8664ca97cedc1fd2ede3524c6d0ddb6f0fd6c256e56456284df99fc16cad86f811c323f53d2dd32df60fb06e2f899c7ad6a8033ec5c45830411ff77cb0555c78c82d6c718451eeaf6969e987d21bcdcdbdd250db9ae63fa8176c8eb3fd204cced594deaa52b01925d2999e04ba13ed82a7ec99efd726902de6138296c6930d70c3f88267089d5fc796974e85c7efd024ebf5927e3d0622432adf83f754cadfa4ee38dd4a6dbd2215ac74f92d04ac29b329bd7bb5ae928da3ea861d571d11ae782624dcf419cc6ff0213c20fef5e0bf1a981c4e77b2f563d50d982964b19efdf38f221dacafba51b0aae2dcfecfe91c1bdd85fd440998baec48ca4129a45031a46ef07f3c617070750df07eec4f949b94f7e799479af4bba1a42e5bb080bf69d10807942beb41dd99aae1a40199ededc38b11a80ec1f3df3ddef7ff919c13bac9d44e349d6ea4a5e36849c77e26de0b2602fcd94c8f3c1d3135e2d424c8f516eff5f0aff214c151c9fc6739969b6abae77b3176c726d14cf883470153b626cadf2abc30cd44be7c10dfb8b85688cf3085ee8d53b9b34c535f2e5536b0729034f4c2815833e07af3e84386e02a5c0d3c79cf1611a7c2c469f55535a7244c7d5a888e38584447422a7b17146e877d14a0dbd24ac34d611daf47936424c4fe3fc859c272cc5c46bf80c5144c25c3789ba01ace776d122c7b85c5c2d37151e6bb59dabdf762dae2c0f71bf40b54ba840bc4a91330660832ba0ffe69ea6af6ffcad4da1571652bb04c25dd4c0742c488f9438821a969dbf2bf86462525d06b7c200c1bd534726d7fa796fb503d9eabbdac1eb6972b9b75a55c5384f41744e6c4558d918add949818af1f0b14883f3122a45426b6c85795567af99fc38c2896342262ccbaaf36b3f50a0f32f833b530dd52a1a1872dfb06919ceebd30d72568bbe53808b34b0ee81b91ebbcc907dd18cc305df2c7236ce31a20230b54d23aed4a98dc121e9dc07457dbea3c8ee34a61383a0ff26528182f7ad760109e99ab252a8a8564c454b1cbeab0e545eed1e9fcb4de64a44f64e0f96278f2aba498438a9e48308e439bc1cadf4e81224acc00860e006e738839bd016d7064d192115271dc3273eadde0348fd492ba313a8ad960d7aee56cf663e9282114112375756bf46376fcc2ba4f4619864460313902249044984be9a1d2887bf62a83efc59157330bef507db71667fcf625d161756303848b6fea758924252f8cd450b3397038bff08c756c2e5ae432d734049481679dc28421f5fdde52bdf8b7c447de2af7d54144981c85efbbbb69ab378056f6f8454c36c70b4af58c879e2438d321af9d2ca60de32053e3771581b46bea1f728e68d658058057438564f745a4d46d839036f09803092abea5e55cdde6f84fc946f033f45b0073f2281e75183e0003ab25825c8ce9d337359798c1645661362294c29f97cac20fa46543848f3933d667f1e05cf35898fcabd08df44397fb8be60098df868d0e5625912d95ad83da4d956f5fd7a0a008a7efb2b03fd7a1e9257f9b38e4800381bb4a176162851c1a2314aa641b5b9e62f9d104ad7b4cfd3687eb2a5beb4ec09863be2d2e9ab6f6243b4be069f35f503a0ff6fe4fd57bb2b1acca7c44c1b93414a7059826e6e26d8a39ca51c319f2904dcb2250c02da04ecf980bc9a382ed635eb3a17b2150c5fecc846e4bef1991c45886189a24a03d3333e7a9eede4f4a6209d71c4b0c7bfcadfbad9bab24acf8bac23af67a496a0154e7dc9138c1145339a48048b9ac86f9cca42916eebfac192c53b3bf01003a16f3fac90b783e5e9ceadc9a6a928ab2f19761b6086d721d3863dce09d64d99b607975c2c9a2532886f35b0e14b40ff8dba3a88a259125b35a1be1d2bae76d184682d9c91f7f5c14b61544480cc0ac22b8da4d8dcdb325c73cc091d5570bd230b1164e54ff1520722bca11fb339e060afbb1ded8994d9c281db2ab6653e2ad032d61375ec6254141a234bd3063e01660f99ce627122670b838a606cef65bb1bd3b529eb33beef217a23e79ef9dbadcc658243e8529630cbf623dd115ca09781776a76031e771d06a798c39e1ba3db9b1748df67d67e29ecedbcfde3822007de3aff1327d05397da8ceeea8a09db472f12e493302d4667a15ac6fbf943bf41357ce7a139b216c3af66314775930469f2462ea15aa66381e4c31bd4ec00180143f1edba6e4347133ca12b8bb1066025c2f3034d6f962f0a2eb3b802e19b40a10edefc3e361d115c51a0e5a8fe3fac95c7546468674ee91dbe8fe894c89efa59210791a1070228052bd820ec0363a9a906179f4fca656df7223dab4b6bdcbc1825992e74dc4d9222d22a51c08d10771784a8707aeccbe25fce1e1aadc9ce3241fee12e2c265c24b1b00bbca5150e657be46d95585a36daffa4db605385ae44b3619b38ebc29bf754e4b700aa19f32f8942f1d9ae2ac1251652fbab39c20d00a133564262ab0e9aca45802f076e3d058f760412a3b0cded84360491cb9daf15de2134fedd14edc77e967790b13611f6d54d9568b0e81e70075ccbacbaa9fe354e6cc57a6d1cf89347768be3b846b0b1dfc00ed1a89428f591e3c84e4f3b19abf6c6d84280178322404f624e00066c350811aaa83fd0a5080c1de46621e4ee4faf36369410f91ed2ce068d3db13a71c7a5883b7dac018ed94ad8b115eef6d9b1425f0daefb7c658aa07f92725c2db71dbca5e0d4b6163560ed5774e96feb3b86499bedd50c0ce4c1a3ab2f735e2e96d9f46d8c860609018e81247d15d9fa85cc8986f6d17aa74c89e122607c8007be8fa5621db926745775bad6bfe2b60f571effbc18044f9a8d16393075477e3f010e66b1cc25a4d3ce76a54dcfe19cf6d3f821622b2efed76fbc0eff5aec2fc5795ce143a477e730ab1d9275ba55a10ed7a9784cb80b6cce5f3b77aff58e4bd54ddad066b4a4e1439a2280353388c73b66b88f19c022f979e7bfd01ed2b3d8581661da09aa6b72ad5eeac49b165e4744c6ae6b84f94ce2f1e668b8734f2bdcb5e85742f665d8efb75ca0b79221612ab253730b9776f5ecf048a216eb033dc7f557ff7336635b1e91ab70b853379454f76d592b9aa21f0ad32892b28e3d1de8ae98d14d9d00553c5bf501803393c43bfd28effbfcfe2d8e083107ba594469183da32fd2a026469cdf1444ac1ecdace85dc4d7b43e90919573077947e4288070c6876fa3a82c93f11a7dece4584a23114d72430d48dff94b01f87f27b10a75f6aa5c4edd8ff7838934b16f61ea60ae71de092cbe7d7c8f398228ff014a75646e943d60eb6a2666362ef4768e725a2e5158d5ee0e27a91750f0de656701643bf60441f62e932c63d2c7676cf6d5af9e50886df4830e0888806075dd813b2bc794593b9bfc00eda9350062eec5831f09d4dbeb37c40870d2f5e74ba4174276daa7da64323319681e8a14e6da86df395278e1a04dc54b78e372a1b4ecbf1aa1389bc12d766ad642e1efb0dc35b096f55f01d6fe48088332114e5b2ec4080d7045ffadc4cd78367aab2f1ce27cdf6c6f3260f1eee68ee04f21c2026ab5c33e912ad99f7a807d951347a8cbd3f5d0bcce976cac4cd00b907d399fd5dc209814cca951a72666b09acee6024d8f79a3a4c6e36f7c77e5d5d361722ad6be9291c266e0b5306dae8edb37a20490f7e2d6c12d2c73c6b33d1d046e7500c3442ea703bad96d53673c9fdb4c4eea1e6784b337e20031c9fc63595ac22a3a4284756b50c1de64cae54f382786efb82b7d08523b91ccd56b02b4e7b40c5978953cd99dba126bdf21b6bc9e78ad5216900acbd94bca3d160e93f34bf43b629872d3b6f8589212ab8f437a5770b7eb91d08c7887d578e97d627098fb642224d2d61894a8ffc2d114ea2e403e6d5c21c8abfce5572a6e9bf85220cf64ee2c669c78bef967e3a93727b7f1621df13b6db36d722308fad3e52147f9a51a1fb41e1bd15e85830ed9b646057d996e0be6ba9495d75c542cd808a77a972263afc75cee345449d3e80edf2113ab4985fb19fd523f1a6ab05f6e4e3d790822ed1e6dcd150b0a3fc7fe429df2fa3556e54997608f7eb02987f227cb26df9675847fd4974fe39d8e36bdacd8ab8d18daf251dd4b5eebb1e560cbfe33bc6df6a4cdb4b7c072e02b7f52c89fff6113cced1e0d1a42876c0bca4cf8e864c3b410c4e34790fd42f5f571cd3e86c1425804c18777580e29ffdfca8ba7f7e39a1983c6895ff8374c07ad0db4b29d0d42b9fd6c99e90d582535c5de17c80997acff21f249ae405109134f1427cd0415765c8454e9cd0db67a825245d8a1362118c805b7ad96d5ad0f685a323daa336fa74ebe637c5c00a4cef7060f1c786eda8d444d851da01c3516c35ae069c571d8b66b481058dd5bf679d1b034b5431a6ed110fa3a2ad51ddcffbdf4dda9418948eeb7f985"}], 0x1040}, 0x40000) r6 = socket$packet(0x11, 0x3, 0x300) recvmsg(r6, &(0x7f00000046c0)={&(0x7f0000003500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000004600)=[{&(0x7f0000003580)=""/70, 0x46}, {&(0x7f0000003600)=""/4096, 0x1000}], 0x2, &(0x7f0000004640)=""/93, 0x5d}, 0x22) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000004700)={@mcast1, 0x4, 0x2, 0x2, 0x0, 0x2, 0x10}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004800)={r3, 0x58, &(0x7f0000004780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000048c0)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004880)={&(0x7f0000004840)=@getchain={0x34, 0x66, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0xffff}, {0x8, 0xfff3}, {0xb, 0xf}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) getpeername(r7, &(0x7f0000004900)=@ll, &(0x7f0000004980)=0x80) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000004ac0)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a40)={0x14, 0x0, 0x408, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) 19.023863813s ago: executing program 3 (id=1784): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0xffffe000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x81}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x27, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35a}}, @printk={@i, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0xff8, &(0x7f0000000780)=""/4088, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x36}}}, [0xfff, 0x1, 0x5, 0x8, 0x3, 0x6, 0x3, 0x7, 0x9, 0x3, 0xffffffffffffffff, 0x7, 0x4, 0xfffffffffffffe01, 0x5]}, &(0x7f0000000700)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000001780)={r7, @in6={{0xa, 0x4e20, 0x7, @local, 0x80}}, 0xf, 0x7}, &(0x7f0000001840)=0x90) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$alg(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="0177ee2584194d0e4ebc477f02de765f0c0bf53f50cb369878deb5c6b1478d7d1bc3c7c677f8127985e6ee5d72e2170c5ecd44a61223a1ecb5a75b1a8d8c1752173e9aebafd186c266378cdef76f102a87a825da9f843d5a282b4a923b6ad88ff3d011659a36a5a1", 0x68}, {&(0x7f0000000100)="1d824ac0d9f8b6fdb09c65d0e0a4bfeb64f12292d4b568f3ffe4723faacd8f5bb027110ac9b4a56afd90813ab53da38eaf16f2fc0aea1407dd6d45483ca4ca486f6ca40f6115c5e1dfb4703d8e956fff90988e50fe72a592a750c6c884f6f3d6c17f899d5273726957142a56e00a37", 0x6f}, {&(0x7f0000000280)="2977d37a08cb49201a4a3e85e6d7ef8759f356d1f34d383665e8cea6cd956fb645b85aa7d942d570ff6afd9dd51c923ad97677dfc1af66ea7258cff5af5e86c39d0674509187167efb8267d6a296281edc26a324a03b2315278438310439502d57db7660bd525e64483efc479385f9d9df1fbf036e5a694a760fb14e4a86ce1a886133487a619eec785660dc5672585e6790f6b4ef60e182f548ba826091a2b7b9b37273c4fa8b26705d862b74bffb6ef5371eeca6083ec53a09eabd30e76ffc405f1b2b64", 0xc5}], 0x3, &(0x7f0000000500)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x2000c084}, 0x4) 18.587149228s ago: executing program 3 (id=1785): syz_emit_ethernet(0x55, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaab2c7bdce2e39b0d418001f0600fc010000000000000000007caa2e0e157bebe87d8e470000000000fe8000000000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020ea49078000000000000c4dd66feee1bd5"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)={@val={0xa, 0x201}, @void, @eth={@multicast, @broadcast, @void, {@generic={0x6558}}}}, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0cff0900a244984f2595f43dfb1e", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="5ec70735f2e7aeaf2a49d43bec2806dbf7edb6d0af6c641e67a3465f7488371c54af061a175392dd83a03056bef5b4133acebc7133eb53705396e1c6d4db3a5b081a02081502862e0a3378af9b0b2a5e330b8aebd88e3142f01e755deee87f4c14f8569dda7a47d8edfa35dd615752717dbc9ef2b9fdb28b91447f9e8c9d58fe0432f5e9a3015d61059e3a8697495591cf977004fdf9b973d962200b8dce12aa53539d14dc92a76a890468865a8460c62761ceae9087e603aac4679156518c4561eae7eb55db1faddb6d2309d8259f9916e0a4f62baed9", 0xd7) 18.531196106s ago: executing program 0 (id=1786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x8, r4, 0x4000401}, 0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)=@newae={0x230, 0x1e, 0x300, 0x7, 0x25dfdbfb, {{@in=@broadcast, 0x4d2, 0x2, 0x2b}, @in6=@local, 0x3, 0x3505}, [@extra_flags={0x8, 0x18, 0xc}, @algo_auth_trunc={0xe3, 0x14, {{'tgr192-generic\x00'}, 0x4b8, 0x200, "a964e4af63b1a64ed3017910cce6341b570bcba04f75289fc95f16e8f64f38a97af54cace819019bab20e6d0aa0c648c4fe9a89a450cd67a6342c2da55ead13d911d6805b42c8e2c212f7e999bfe676be0532bf45a5bb08e132346960665c58338b9666e7165308f2d469c96b39504ca87a2d962efe0a93bf98fdbbe398f6fdd6210acc773fd1ce29d0a8441260de2983bac02dc8b5b6f"}}, @policy={0xac, 0x7, {{@in6=@empty, @in6=@private2, 0x4e21, 0x7, 0x4e20, 0xb, 0xa, 0x80, 0x20, 0x67, r4, r5}, {0xe, 0xa74, 0x4, 0x9, 0x1, 0x9, 0x8, 0x9}, {0x8000000000000000, 0x29, 0x1, 0x3}, 0x1, 0x6e6bbf, 0x2, 0x0, 0x1, 0x3}}, @tmpl={0x44, 0x5, [{{@in=@multicast2, 0x4d6, 0x2b}, 0x2, @in6=@private2, 0x3500, 0x3, 0x0, 0x2, 0xc, 0x7fff, 0xffffffa6}]}, @srcaddr={0x14, 0xd, @in6=@local}]}, 0x230}, 0x1, 0x0, 0x0, 0x400d0}, 0x8d0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(r1, &(0x7f0000001d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x36}]}, @NFT_MSG_DELRULE={0xd0, 0x8, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x96, 0x7, 0x1, 0x0, "4e52f7a339f28d3a1d7c2acb00f6508e944753f49e3b508fce5267c3021e3abcae274831797d13fc49ab10f05748946363f280fd79fa26c68e1a207e33b7a8504b42595b9d1f1611d8ed20929e64f1f1faaebe00237acb037aeb6bc6dbbdd3020e55a9d338ded7c3f3dfc61f70967319c3943d0804b4ecf8547e58717c253ae6f3390ef0330a9aa5a7bdea0f0d5d11290ecb"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x36}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x128, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xe, 0x6, "ec9406494dcebf28c18c"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "433e516619e4dc636bfc5a88403e4af1fe041f746955d8da2b48cd92601571bf5b035d3a0a2e0dd374b792307124128498a379b2b31b7bbcd508ce4f3e4d31f42a0f41829a06a15d775fe2cc30f44793e3abf104c2ee652609ff1113b2a209ebf88dd5fe596db73af195757e28dc1e70604292550e7b1786e11309b11d7c4bd4f77e92250b8ffdb9a4b2c3998edaf1d2d8065eb6cb362640ce8ce451ae604664ce8d4e9e4315d7f0876bebb455d5b48ac4db79aaa5bfccb5327aa207ccefa91d0607142d5df459e7879576f893"}]}, @NFT_MSG_DELRULE={0x94, 0x8, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xe8, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x82, 0x6, "183022f906e47d9d088a3978ad0077425c4e3fea741c1f887917bf0274d1432d963fdcccb9ee08a098af49fccbdd20ea99910e48669a6a96f77fb27dd48f2c676fd6537de4398c72bf7728100f1b471b59491d7ee8a6513f199a7792d08c10cdd60c87fb67d9a61133f8c3aee2d429190a0e49fb6e56646e867600abef81"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x10, 0x6, "5700840c5b703ce1b7baa550"}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x440}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e20, 0x1000, @local, 0x8}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001e80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x81, @loopback, 0x608}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="7e3d64e5660436", 0x7}], 0x1}}], 0x1, 0x40000) shutdown(r8, 0x1) getsockopt$bt_hci(r8, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="7400028038000100240001"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000300)='[%]-C\x15+@}#{\x00', 0x8000, &(0x7f0000000380)={@_ha_fsid={[0x7d9, 0x42e]}, {0x7fff, 0x9, 0x5, 0x80000001}}, 0x0, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x1b, 0x101, 0x9, 0x400, 0x2900, 0xffffffffffffffff, 0x5, '\x00', r4, r9, 0x3, 0x1}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0x200, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x0, r7, 0x4, 0x4a, 0x5}, [@NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0xc090) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25057c0000080001800400dd808c0003"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) 18.13270658s ago: executing program 2 (id=1787): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b8, 0x998, 0xa88, 0xa88, 0xc0, 0xa88, 0xbc0, 0xbc0, 0xbc0, 0xbc0, 0xbc0, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x600}, {0x1, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@private=0xa010101, @local, 0x0, 0x0, 'sit0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x2}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@u32={{}, {[{[{0x7, 0x2}, {0x40}, {0xc4a}, {0x10000}, {0x6, 0x2}, {0x3}, {0xfffffbff, 0x3}, {0xffffd88f, 0x1}, {0xb}, {0x6, 0x1}, {0x7, 0x1}], [{0x3, 0x8}, {0x8, 0x5}, {0x81, 0x4f0754e7}, {0xfffffffc, 0x743d}, {0x4, 0x8}, {0xfc31, 0x7ff}, {0x3, 0x6}, {0x5c2, 0x91bc}, {0xf91b, 0x7fffffff}, {0x2, 0x958c}, {0x1, 0x1}], 0x9, 0x9}, {[{0xe00000}, {0xfffff937}, {0x4, 0x2}, {0x8001, 0x2}, {0x5, 0x1}, {0x28, 0x1}, {0xa, 0x2}, {0x7, 0x2}, {0x8, 0x2}, {0x7f, 0x1}, {0x372, 0x3}], [{0x7fff, 0x4f}, {0x7fff, 0x1dac}, {0x2, 0x7}, {0x2, 0xfff}, {0x3, 0x9}, {0x6, 0x401}, {0x3, 0x2}, {0xfffffffb, 0x3}, {0xbaf, 0x200}, {0x8, 0x3}, {0xefe3, 0x4}], 0xa, 0xb}, {[{0x7, 0x3}, {0x8, 0x1}, {0x5, 0x1}, {0x3}, {0xffff}, {0x2, 0x1}, {0xffff}, {0x100, 0x2}, {0x7, 0x1}, {0x0, 0x321b5eacbb030411}, {0xe7}], [{0x4, 0x6}, {0x6, 0x6}, {0x4f06, 0x9}, {0x2, 0x3}, {0x1, 0xf}, {0x10001, 0x2}, {0x5}, {0x0, 0x27}, {0x0, 0x7}, {0xfffffff8, 0x2}, {0x77207cb2, 0xffffff2c}], 0xb, 0x9}, {[{0x4b2}, {0x8, 0x2}, {0x8b, 0x2}, {0x5, 0x2}, {0x8, 0x3}, {0x489, 0x2}, {0xc140, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0x8000, 0x2}, {0xfc000000, 0x2}], [{0x5, 0x2}, {0x9, 0xbbc8}, {0x9, 0xd}, {0x1, 0x800}, {0xf, 0x7}, {0xffffff01}, {0xfff, 0x4}, {0x5, 0x5}, {0xff, 0x5}, {0x1, 0x9}, {0x3a}], 0x4, 0x9}, {[{0x800, 0x2}, {0xe5, 0x2}, {0x9, 0x2}, {0x6}, {0xd, 0x2}, {0xc}, {0x915}, {0x9, 0x1}, {0xfffffff9, 0x2}, {0x7095, 0x3}, {0x900c, 0x3}], [{0x2, 0x2}, {0x9, 0x17d}, {0x4a3, 0x2}, {0x6, 0x401}, {0x8001, 0x4}, {0x0, 0x3}, {0xb08, 0x7d0e6b3}, {0x8, 0x5}, {0x279, 0x2}, {0x8, 0x6}, {0x80, 0x2}], 0x8, 0x1}, {[{0xfffffffe}, {0x5, 0x2}, {0x4c}, {0x2a}, {0xfffffff1}, {0xfd27, 0x1}, {0x8001, 0x1}, {0x94, 0x1}, {0x8}, {0x3, 0x3}, {0x8, 0x1}], [{0x8bb0, 0x8}, {0x1ff, 0x7fffffff}, {0x6, 0xa}, {0x7ff}, {0x5, 0x5}, {0x8ad, 0x3}, {0x9, 0xa}, {0x3, 0xe}, {0x10, 0x7}, {0x9}, {0x87, 0x80000000}], 0x9, 0xb}, {[{0xa6d, 0x3}, {0x800, 0x1}, {}, {0x10001, 0x1}, {0x3d, 0x1}, {0x1, 0x3}, {0x80}, {0x10, 0x3}, {0x10001}, {0x3, 0x3}, {0xff}], [{0x0, 0x400}, {0x1, 0x8}, {0x39, 0x5}, {0x55, 0x1}, {0x3, 0x3}, {0xb74e, 0x3}, {0x3, 0x5}, {0xc}, {0xe, 0x2}, {0x0, 0xfd1b}, {0x12000, 0xd6}], 0x1, 0x1}, {[{0x1708, 0x2}, {0x4, 0x3}, {0x240000, 0x1}, {0x2bf8, 0x3}, {0x7}, {0x4, 0x2}, {0x4df4, 0x2}, {0xfffff53a, 0x3}, {0x8001}, {0x5, 0x2}, {0x3}], [{0x1000, 0x4}, {0x5, 0xa}, {0x7, 0x9}, {0x59, 0x5}, {0x3, 0x27}, {0x4, 0x3}, {0x6, 0x5e51}, {0x7, 0x24}, {0x2, 0x7}, {0xffffffa3, 0x4}, {0x8, 0x2ef}], 0x6, 0x6}, {[{0x8, 0x3}, {0x7, 0x1}, {0x9, 0x1}, {0x9, 0x3}, {0x8, 0x3}, {0x5, 0x3}, {0x400, 0x2}, {0x8, 0x2}, {0xffffffff, 0x2}, {0xff, 0x1}, {0xffffff81}], [{0x8000, 0x10001}, {0x80, 0x3}, {0x1000, 0x7}, {0x1ff, 0x4}, {0x89}, {0x2f8e, 0x5}, {0x2, 0x8}, {0x7, 0x8001}, {0x7fffffff, 0x9}, {0x10, 0xb}, {0x8, 0x3}], 0x7, 0x4}, {[{0x7f}, {0x8}, {0x11, 0x1}, {}, {0x2, 0x3}, {0xffff28cb}, {0x3}, {0x3}, {0x0, 0x3}, {0x1000, 0x3}, {0x8, 0x3}], [{0x1, 0x1f}, {0x0, 0x3}, {0x1, 0x2}, {0x9, 0x3}, {0x10001, 0xfffffff8}, {0x0, 0x8000}, {0x3cfd, 0x5}, {0x233f, 0xff}, {0x100, 0x3}, {0x18f, 0x8}, {0x7fff, 0x4ccaa55e}], 0x9, 0x8}, {[{0xc, 0x2}, {0x89, 0x3}, {0xe98f}, {0xbce2, 0x2}, {0x2}, {0x9, 0x3}, {0x3, 0x3}, {0x4}, {0x2, 0x2}, {0x0, 0x3}, {0x80000000, 0x1}], [{0x6, 0x81}, {0x8, 0x49af4eec}, {0x1, 0x7}, {0x208, 0x9}, {0x2, 0x2}, {0x9, 0x1}, {0x516d, 0x8001}, {0xe1d1}, {0x6, 0xad}, {0x800, 0x7fff}, {0xf3a0, 0x1}], 0x0, 0x2}], 0x2, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x10, 0x7, 0x1100], 0x0, 0x2}, {0x0, [0x2, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@socket0]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 0x140, 0xd, [0x11, 0x40, 0x6, 0x31, 0x1b, 0x36, 0x24, 0x2f, 0x31, 0x23, 0x5, 0x2, 0x21, 0xc, 0x21, 0x23], 0x1, 0x10, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x2400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfee1) 18.130744445s ago: executing program 3 (id=1788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xcc}, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x6c, &(0x7f00000002c0)=""/108, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) 18.014600275s ago: executing program 2 (id=1790): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xc5, 0x7ff, 0xfb9}) getsockname$packet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x14) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r1, 0x700, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040006) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=@deltaction={0x1a8, 0x31, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x907c}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9a}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040800) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000004c0)=r0, 0x4) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000500)={0x8, "aa0d78"}, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x318, 0x1c, 0x20, 0x70bd28, 0x25dfdbfe, {0x14}, [@nested={0x15c, 0x10b, 0x0, 0x1, [@nested={0x4, 0xb6}, @generic="d713cc03ca80ef5d59ab5d07b88c4d8cda964ef28a56b4e973def15d3589405912f01686e8b50ad175aa4f3695da0355c9e155ce565d6bd88233ddde42e7b3929c0f1e40950b7a2d2ddf2dedc061e59cd4cd708ebe1dab7ed11af9f00085ea2b3950ad7c98d7a39d15ffaa58049655d75b404878bd7d8905abe981edc4f04b64b256846ae9b63959226ecce9541b6506010fbce396349be7df94a9c46050c4d5dadcb66fa8a9e2732956311dc74ea2397100", @typed={0x11, 0x8f, 0x0, 0x0, @str='}+(&([*]\\}]-\x00'}, @generic="ae1f1ae87dd507d47b69f896f81c005005dc5902a297099a5ff963112c59039290e9b0596638b173b3d69382788d7053c63d12cc2736e5102f14ab4ee76d1375c3ac8a6fe42c151be1f72159232ab82fd5bc22966cc725835780222f7a17f9fdefb84c5e8c6c7e781da74823de4f0dbb6286397e55af44fb765ce7017303572e06edbc9e0f9ac522d2c1d06cb2d8"]}, @generic="bfd144d7706133c08c6690fcc7e16be67e890c5eff71b0133a7f3cadca38457628326cfff358a798417437439572721e25cfab0c852ca8672191d61979a8c3e7687647731fb94bebe178e66fd50ad3ce61e6698e3522369e0f74cd42f5444fd4e87cb72a920d1a709c48d8cdb9f8a7234d7cf864b063f17c9fd7bd7cd27f50554ed60a64450610066325c3b6702d2f4f2e13a3905b0d3c24bb39d115f8dd518f8f7fa21a5b1fef2b8be291be7da7c94aabedee8d3a6891c61df6ce15dab8b848f34d41f380fc6997ce6185d91008", @typed={0xc, 0xfb, 0x0, 0x0, @str='skbedit\x00'}, @nested={0x55, 0x137, 0x0, 0x1, [@typed={0x8, 0xcf, 0x0, 0x0, @ipv4=@broadcast}, @generic="69e63eb65d76351f632245df69adb53858a98577834d207b94c5a5d1159b252d3eb8902b64e8c3d9a524529a11251b7c3f06bc8d67ac1cdab8f8a65bc407396f8117c444c045523c85"]}, @nested={0x4, 0x2e}, @nested={0x8, 0x5e, 0x0, 0x1, [@nested={0x4, 0xda}]}, @generic="de986a39ee7dc7e775a44f0b84276c", @generic="f7e72256d41b200c9a5e130113aeef479ff788480bee871172f83154535eb3637a75411852c35147d39c203918ce9d9660d0c01248a39f66d0bdc1bc4f5ae7607b6c696ee1ecd3561170b6847d35f5a1361dfa21bc5c7992"]}, 0x318}, 0x1, 0x0, 0x0, 0x11}, 0x90) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000940)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000980)={0x2, 0x16, 0x4a, 0x7, 0x1e, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_lifetime={0x4, 0x3, 0x6, 0x8, 0x3}, @sadb_lifetime={0x4, 0x3, 0xf6bb, 0x6, 0x2, 0x9}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x6e6bbe, 0x527e64be, {0x6, 0x0, 0x29, 0xbd, 0x0, 0x6, 0x0, @in=@empty, @in6=@loopback}}, @sadb_key={0x7, 0x9, 0x168, 0x0, "2b352c7abc71d7b0153ffb68c43972f2eadea12a5d3182c460dfd04e74f9ef56486a632f5c1d727edd88eba555"}, @sadb_lifetime={0x4, 0x2, 0x6, 0x6, 0x7, 0x2}, @sadb_x_nat_t_type={0x1, 0x14, 0xd2}]}, 0xf0}}, 0x844) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000b00)={0x4, 0x7, 0x2a}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)=@newtaction={0x1c0, 0x30, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{0x1ac, 0x1, [@m_ipt={0x1a8, 0x2, 0x0, 0x0, {{0x8}, {0x148, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xbf, 0x6, {0x8, 'nat\x00', 0x2d, 0xa, "39e93dd10faf623f03eb3f83ab34660fe6fba6a26799cb337181c6a74581a180846817c9bc8fd5af435e7342a1d7388040ad1931f11a6efab085a4df5df2375253a60996044352e0a5cfd08ee9ddc64492ecd30bf04c6acc14f0e7c7b8003b02e7d90dae92ed2df59c89f89fe3ee80e6c7bfe0a6720ef488ac6d5a4fd21bf90d1c87400205f4a0f9f3d04e3ae93f5178ae08e942e1"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x3b, 0x6, "9cf4773ae34ac2cd2b0078912b8b49f814a394d10fc0756f447f1d7aa44ee0c0bf2d37279de89631d1615b3792f4caad3f6bad8b85afa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x810}, 0x800) r4 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000e00)=r4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'virt_wifi0\x00'}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000f80)={r2, &(0x7f0000000e80)='\x00', 0x200800, &(0x7f0000000ec0)={@_ha_fsid={[0x5, 0x2]}, {0x8, 0x2, 0x3ff, 0x9}}, 0xfffffffc, &(0x7f0000000f00)={@_ha_fsid}, &(0x7f0000000f40)=0x800}) r6 = openat$cgroup(r0, &(0x7f0000000fc0)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001000)={r5, r6, 0x0, 0x0, @void}, 0x10) vmsplice(r0, &(0x7f0000003280)=[{&(0x7f0000001040)="dc32b1ff13011cd40379a5e771b10c5b71d0f79c544fb2ced8549258d4c574", 0x1f}, {&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000002080)="49721e134520ccbc8dcc6a508904eba61a9130eafb67fc3563b5341136df886c56ca5ba124ca8152cb", 0x29}, {&(0x7f00000020c0)="8aeba89cecc7cfa8db3abfd50ffa3ed46b985b2100ad3f9a9837f9f8d3309c20fc6961a1c5f7fbbfb41ac3ec52c730938d0f868e5c48a1cc179c1356eb09a5db9aa52a79514f63ba4a949c4ec9b1b83d2adab6c2512120e17a94d17245a38d54defcca467d08c6ff957adb7d92a1cd63c44eb8d948f8f093ed26b6bc8706ded1fe6567c2eda022", 0x87}, {&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000003180)="6e6ace4e0c50bd70928e898fae8924cdde88311f940eecee0e4e2240a167ab518c62f59e4f63b02fb8289d32716824a3f792df27d7dd1381e59381b6932a64cddeabaa85ebbf03a252bf48cd8c65afb842e286c0d58f476469d88e6a5e66954b71ecb82887d591e12ccd6813640f04c3b98a7e5eb288d7ee1bf97a8ecbb19a09997c955f708422fb758373837f23165349cf89aea03622da88854943ec00447b7b700d60a781fe75dc52287b06b091e989c1e0cf04adf0417d93cd3ca2c402d1e26811", 0xc3}], 0x6, 0x0) write$tun(r5, &(0x7f0000003300)={@val={0x0, 0xdb4f13e23e98c80a}, @void, @ipv6=@icmpv6={0xf, 0x6, "6666a0", 0x13c, 0x3a, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, {[@hopopts={0x33, 0x19, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x40, {0x0, 0xe, 0x2, 0x807, [0x7f, 0x46, 0x2, 0x3f000000000, 0x55d, 0x3bb0, 0x10000]}}, @generic={0x1, 0x66, "ff51c4e090ffff9d5785e200018c8aa1ae92c7ee47f0ea809649e457cb5ff2b9323091f7878a747d5483d36683d41f012938fb020444cab7f943c2e11e2a6802ae6df025d83e7c15cccffd903b4404ee2c8072570a17dbd67fdea00e56a971638378c5523b8b"}, @ra={0x5, 0x2, 0x71}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @empty}, @enc_lim]}, @fragment={0x0, 0x0, 0xe2, 0x1, 0x0, 0x12, 0x64}, @dstopts={0x1, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xbc}, @padn={0x1, 0x2, [0x0, 0x0]}]}], @mlv2_query={0x82, 0x0, 0x0, 0x5cf2, 0x81, @empty, 0x7, 0x1, 0x1, 0x6, 0x3, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1]}}}}, 0x168) ioctl$int_in(r2, 0x5452, &(0x7f0000003480)=0x1ff) accept$unix(r0, &(0x7f00000034c0)=@abs, &(0x7f0000003540)=0x6e) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000003580)="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") recvfrom$packet(r5, &(0x7f0000004580)=""/23, 0x17, 0x0, &(0x7f00000045c0)={0x11, 0x19, r3, 0x1, 0x7, 0x6, @broadcast}, 0x14) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004880)={0x0, 0xd4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004940)={0x11, 0x2e, &(0x7f0000004600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x911a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000004780)='syzkaller\x00', 0x9, 0x36, &(0x7f00000047c0)=""/54, 0x0, 0x5, '\x00', r3, 0x0, r5, 0x8, &(0x7f0000004800)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000004840)={0x5, 0xd, 0x5, 0x32a}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000048c0)=[r5, r0, r7, r5, r5, r0, r5], &(0x7f0000004900)=[{0x1, 0x3, 0x3, 0x9}, {0x5, 0x5, 0xb, 0xc}], 0x10, 0x42}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000004a00), 0x4) setsockopt$sock_int(r5, 0x1, 0x27, &(0x7f0000004a40)=0x1, 0x4) 17.98912046s ago: executing program 3 (id=1791): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r4, r3}, 0xc) bind$unix(r1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r5) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x9, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r7, &(0x7f00000000c0), &(0x7f0000000080)=@udp, 0x3}, 0x20) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x4, 0x8, 0x2, 0x1}}, @common=@mh={{0x28}, {"1505", 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x1000}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [0x0, 0x0, 0x1fe0000ff], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x8, 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) recvmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0xe1c0}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000b80)=""/196, 0xc4}, {&(0x7f0000000c80)=""/74, 0x4a}, {&(0x7f0000000d80)=""/213, 0xd5}, {&(0x7f0000000e80)=""/132, 0x84}, {&(0x7f0000000f40)=""/141, 0x8d}, {&(0x7f0000001040)=""/116, 0x74}, {&(0x7f0000001c80)=""/4083, 0xff3}], 0x7}, 0x1}, {{0x0, 0x0, 0x0}, 0x1c7}], 0x3, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x48040}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x20003}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r10) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r11) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r12, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 17.755796428s ago: executing program 2 (id=1792): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3ea}, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000040) listen(r0, 0x2) 17.743409543s ago: executing program 0 (id=1793): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000100001002abd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="802100000c400000140003006272696467655f736c6176655f30000008000400d40000001c0016801800038014000a0001000000000000000100000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040) 17.560917042s ago: executing program 0 (id=1794): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010010000000ffdbdf2500000000", @ANYRES32=r4, @ANYRES16=r2], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4(r6, 0x0, &(0x7f00000002c0), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf04000c000100dbdf251300000008000300", @ANYRES32=r9, @ANYBLOB="040013000a000600ffffffffffff00000600100080050000060012000700000004008100"], 0x40}}, 0x4040004) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="73fffffc", @ANYRES16=r8, @ANYBLOB="10002abd7000fedbdf25420000000c0099005a040000130000000a00060050505050505000000a00060050505050505000000a0006005ec42eb34f4500000a00060008021100000000000a00060050505050505000000a0006009db625ca01c400000a000600b0fbd78b35e40000"], 0x74}, 0x1, 0x0, 0x0, 0x40040}, 0x814) r10 = accept$alg(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d03d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1bf4c727f30db4778beff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d571366", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde66", 0x3d}], 0x2, 0x0, 0x0, 0x806}], 0x1, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r11, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x11}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc811}, 0x400c000) recvmmsg(r10, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000440)=""/234, 0xea}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000d00)}, 0x8}], 0x2, 0x2101, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r13 = openat$cgroup_devices(r12, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r13, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:* mw'], 0xa) 17.265470783s ago: executing program 1 (id=1795): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080)=0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xb7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 16.860540888s ago: executing program 4 (id=1798): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) 16.651759695s ago: executing program 1 (id=1799): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) 16.544850072s ago: executing program 1 (id=1800): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b8, 0x998, 0xa88, 0xa88, 0xc0, 0xa88, 0xbc0, 0xbc0, 0xbc0, 0xbc0, 0xbc0, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x600}, {0x1, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@private=0xa010101, @local, 0x0, 0x0, 'sit0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x2}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@u32={{}, {[{[{0x7, 0x2}, {0x40}, {0xc4a}, {0x10000}, {0x6, 0x2}, {0x3}, {0xfffffbff, 0x3}, {0xffffd88f, 0x1}, {0xb}, {0x6, 0x1}, {0x7, 0x1}], [{0x3, 0x8}, {0x8, 0x5}, {0x81, 0x4f0754e7}, {0xfffffffc, 0x743d}, {0x4, 0x8}, {0xfc31, 0x7ff}, {0x3, 0x6}, {0x5c2, 0x91bc}, {0xf91b, 0x7fffffff}, {0x2, 0x958c}, {0x1, 0x1}], 0x9, 0x9}, {[{0xe00000}, {0xfffff937}, {0x4, 0x2}, {0x8001, 0x2}, {0x5, 0x1}, {0x28, 0x1}, {0xa, 0x2}, {0x7, 0x2}, {0x8, 0x2}, {0x7f, 0x1}, {0x372, 0x3}], [{0x7fff, 0x4f}, {0x7fff, 0x1dac}, {0x2, 0x7}, {0x2, 0xfff}, {0x3, 0x9}, {0x6, 0x401}, {0x3, 0x2}, {0xfffffffb, 0x3}, {0xbaf, 0x200}, {0x8, 0x3}, {0xefe3, 0x4}], 0xa, 0xb}, {[{0x7, 0x3}, {0x8, 0x1}, {0x5, 0x1}, {0x3}, {0xffff}, {0x2, 0x1}, {0xffff}, {0x100, 0x2}, {0x7, 0x1}, {0x0, 0x321b5eacbb030411}, {0xe7}], [{0x4, 0x6}, {0x6, 0x6}, {0x4f06, 0x9}, {0x2, 0x3}, {0x1, 0xf}, {0x10001, 0x2}, {0x5}, {0x0, 0x27}, {0x0, 0x7}, {0xfffffff8, 0x2}, {0x77207cb2, 0xffffff2c}], 0xb, 0x9}, {[{0x4b2}, {0x8, 0x2}, {0x8b, 0x2}, {0x5, 0x2}, {0x8, 0x3}, {0x489, 0x2}, {0xc140, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0x8000, 0x2}, {0xfc000000, 0x2}], [{0x5, 0x2}, {0x9, 0xbbc8}, {0x9, 0xd}, {0x1, 0x800}, {0xf, 0x7}, {0xffffff01}, {0xfff, 0x4}, {0x5, 0x5}, {0xff, 0x5}, {0x1, 0x9}, {0x3a}], 0x4, 0x9}, {[{0x800, 0x2}, {0xe5, 0x2}, {0x9, 0x2}, {0x6}, {0xd, 0x2}, {0xc}, {0x915}, {0x9, 0x1}, {0xfffffff9, 0x2}, {0x7095, 0x3}, {0x900c, 0x3}], [{0x2, 0x2}, {0x9, 0x17d}, {0x4a3, 0x2}, {0x6, 0x401}, {0x8001, 0x4}, {0x0, 0x3}, {0xb08, 0x7d0e6b3}, {0x8, 0x5}, {0x279, 0x2}, {0x8, 0x6}, {0x80, 0x2}], 0x8, 0x1}, {[{0xfffffffe}, {0x5, 0x2}, {0x4c}, {0x2a}, {0xfffffff1}, {0xfd27, 0x1}, {0x8001, 0x1}, {0x94, 0x1}, {0x8}, {0x3, 0x3}, {0x8, 0x1}], [{0x8bb0, 0x8}, {0x1ff, 0x7fffffff}, {0x6, 0xa}, {0x7ff}, {0x5, 0x5}, {0x8ad, 0x3}, {0x9, 0xa}, {0x3, 0xe}, {0x10, 0x7}, {0x9}, {0x87, 0x80000000}], 0x9, 0xb}, {[{0xa6d, 0x3}, {0x800, 0x1}, {}, {0x10001, 0x1}, {0x3d, 0x1}, {0x1, 0x3}, {0x80}, {0x10, 0x3}, {0x10001}, {0x3, 0x3}, {0xff}], [{0x0, 0x400}, {0x1, 0x8}, {0x39, 0x5}, {0x55, 0x1}, {0x3, 0x3}, {0xb74e, 0x3}, {0x3, 0x5}, {0xc}, {0xe, 0x2}, {0x0, 0xfd1b}, {0x12000, 0xd6}], 0x1, 0x1}, {[{0x1708, 0x2}, {0x4, 0x3}, {0x240000, 0x1}, {0x2bf8, 0x3}, {0x7}, {0x4, 0x2}, {0x4df4, 0x2}, {0xfffff53a, 0x3}, {0x8001}, {0x5, 0x2}, {0x3}], [{0x1000, 0x4}, {0x5, 0xa}, {0x7, 0x9}, {0x59, 0x5}, {0x3, 0x27}, {0x4, 0x3}, {0x6, 0x5e51}, {0x7, 0x24}, {0x2, 0x7}, {0xffffffa3, 0x4}, {0x8, 0x2ef}], 0x6, 0x6}, {[{0x8, 0x3}, {0x7, 0x1}, {0x9, 0x1}, {0x9, 0x3}, {0x8, 0x3}, {0x5, 0x3}, {0x400, 0x2}, {0x8, 0x2}, {0xffffffff, 0x2}, {0xff, 0x1}, {0xffffff81}], [{0x8000, 0x10001}, {0x80, 0x3}, {0x1000, 0x7}, {0x1ff, 0x4}, {0x89}, {0x2f8e, 0x5}, {0x2, 0x8}, {0x7, 0x8001}, {0x7fffffff, 0x9}, {0x10, 0xb}, {0x8, 0x3}], 0x7, 0x4}, {[{0x7f}, {0x8}, {0x11, 0x1}, {}, {0x2, 0x3}, {0xffff28cb}, {0x3}, {0x3}, {0x0, 0x3}, {0x1000, 0x3}, {0x8, 0x3}], [{0x1, 0x41}, {0x0, 0x3}, {0x1, 0x2}, {0x9, 0x3}, {0x10001, 0xfffffff8}, {0x0, 0x8000}, {0x3cfd, 0x5}, {0x233f, 0xff}, {0x100, 0x3}, {0x18f, 0x8}, {0x7fff, 0x4ccaa55e}], 0x9, 0x8}, {[{0xc, 0x2}, {0x89, 0x3}, {0xe98f}, {0xbce2, 0x2}, {0x2}, {0x9, 0x3}, {0x3, 0x3}, {0x4}, {0x2, 0x2}, {0x0, 0x3}, {0x80000000, 0x1}], [{0x6, 0x81}, {0x8, 0x49af4eec}, {0x1, 0x7}, {0x208, 0x9}, {0x2, 0x2}, {0x9, 0x1}, {0x516d, 0x8001}, {0xe1d1}, {0x6, 0xad}, {0x800, 0x7fff}, {0xf3a0, 0x1}], 0x0, 0x2}], 0x2, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x10, 0x7, 0x1100], 0x0, 0x2}, {0x0, [0x2, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@socket0]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 0x140, 0xd, [0x11, 0x40, 0x6, 0x31, 0x1b, 0x36, 0x24, 0x2f, 0x31, 0x23, 0x5, 0x2, 0x21, 0xc, 0x21, 0x23], 0x1, 0x10, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x2400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfee1) 16.542417204s ago: executing program 1 (id=1801): r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) (async, rerun: 32) r3 = accept4(r2, 0x0, 0x0, 0x800) (rerun: 32) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfdfb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4040800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000003c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x5}, 0xc, 0x3, 0xa000, 0x3, 0x14, 'syz0\x00', "3f5a4b4b07bb6dc6429ecc6c43cd068b28d2d2e51689a1d99c2d42a59fdc62b8", "fcd24d468918b853e8e0df8098bd105f3f60dfbdad018ac95bd5c7f2c26cb5d7", [{0x2, 0x9, {0x3, 0x4}}, {0x5, 0x0, {0x2, 0x7}}, {0x78, 0x200, {0x1}}, {0x3ff, 0xb76, {0x3, 0x10}}, {0x2000, 0xa, {0x3}}, {0x5, 0x8e7, {0x1, 0x2}}, {0x4, 0x8000, {0x0, 0x5}}, {0xfffa, 0x0, {0x3, 0x80000001}}, {0x3, 0x7, {0x0, 0x722c}}, {0x4, 0x3ff, {0x0, 0x40}}, {0x800, 0x5, {0x2, 0x523490a8}}, {0x7, 0xbd9, {0x3, 0x5}}, {0x7, 0x5, {0x2}}, {0x4, 0x4, {0x1, 0x8b8}}, {0xf74, 0x800, {0x0, 0x1}}, {0x5, 0x1, {0x3, 0x7}}, {0x1, 0xfff, {0x0, 0x1}}, {0x6, 0x2, {0x1}}, {0x7, 0x2, {0x0, 0x1}}, {0x9, 0xe5, {0x0, 0x5}}, {0x4, 0x6b, {0x3}}, {0x2, 0x800, {0x1, 0x45f}}, {0xfff9, 0x4, {0x0, 0xa}}, {0x1, 0x56ee, {0x3, 0xfffff5a5}}, {0x2, 0xfffb, {0x3, 0x3}}, {0x33, 0x6, {0x1, 0xf8f4}}, {0xfff2, 0x1, {0x0, 0xd6b}}, {0x40, 0x7e7e, {0x1, 0xa0}}, {0x9, 0xb, {0x1, 0x800}}, {0x8, 0x7, {0x2}}, {0xfffd, 0x3, {0x3, 0x2}}, {0x2, 0x5, {0x3, 0x6a}}, {0x4, 0x0, {0x3, 0x3}}, {0x8000, 0x2, {0x3, 0x8001}}, {0x101, 0x6, {0x1, 0x10000}}, {0x5, 0x8000, {0x2, 0x36}}, {0x3ff, 0x81, {0x1}}, {0x4, 0x7, {0x1, 0x89}}, {0x1, 0xfff5, {0x0, 0x9}}, {0x1, 0x7, {0x0, 0xa3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20001}, 0x44008) (rerun: 32) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 16.526673589s ago: executing program 4 (id=1802): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffd, @none}, 0xe) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0), 0x4) 16.441071047s ago: executing program 4 (id=1803): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42814}, 0x40084) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fffffff300000000ffffff80e500020000000000e500fcff00000000850000000200000095000000000000005b5e2e900bdddabda4ea282a7fd8ef1515eccd8e7b28a7f068db7bb69a67826fa4641b74ca4cf93d8bc9d059dce77ebee4728b55aa275624a4234b4f63"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x0, 0x1}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'lblcr\x00', 0x0, 0xfffffffd}, 0x2c) epoll_create1(0x80000) unshare(0x6a040000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0x30, r0, 0x2b6e1000) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x9}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 16.396729475s ago: executing program 1 (id=1804): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020442a300000000000000008112a000000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000001300)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001340)='Y', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}, 0x2}}, 0x10) r4 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000600)="4fffe3ab59ae73fbb0d00ec31d80de9be9d8dd980cbcaee82f55347b63a9208372b62ee9b4b41c9a5e65a22dd6fb36b716b8dae8093edd78f440a3b4f000fe67eb7fbd7ea83559114724cf7cb29f2df58d3244991cb8de1d63a1d25e697509edc9ef57c6ba6ed654aa1e66c1bcb123acde911a517cb36b3d4bf43516b2108ed815480c324f5064c59dc9cf", 0x8b}, {&(0x7f0000000800)="5c522807adac5e928247d13837679e7982a322931666054386e7195bb6d7d047c0a3265027c54ae834513726478c5b", 0x2f}], 0x2, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x28044854}], 0x1, 0x804) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/66, 0x96}, {&(0x7f0000000200)=""/61, 0x3d}], 0x2}, 0x151) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018110000", @ANYRES32=r4, @ANYRES8=r2], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x3c}, 0x94) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000003c0)={0x0, @local, @multicast2}, &(0x7f0000000400)=0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r8, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r8) sendfile(r8, r7, 0x0, 0xf03a0005) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), r9) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000c00)=ANY=[@ANYBLOB="3c000000ea2913a99f769c0665741995269391d81719cc1c15da0f9ee53a9cc6f67e822ace9406fdf061f92eda1d14c0bb863b41d0772b78443a1ddf2f170c1608bab56014ce38ad08f30fd73b3b4aadf5563f765cd91bf38be50f5d0b3cf42853a2ff5c9ac653b1c5dde98819b922ba3986889cac3a66253f23c957c245f1d236cca4dcf06b79fe671329106343f3713d7204e52850e6ce1b7ba029649937434bc8033d31b3420bb8ee305d29d890149edcff3e4c22da014b5c5ad6cbd7754bea1562a044a3a5a38176f5558f1bd127815b365213074d9fb95353368672c5051d2471", @ANYRES16=r10, @ANYBLOB="01002dbd7000ffdbdf2507000000140003002001000000000000000000000000000014000200"/53], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x2000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008b300000000000000600000085100000fbffffff9500000000000000c5aa013c6b98266678047060414e54b521a005c958ab2dae3c8ec6903aeae8b3e61f5dbfc2ca18b13cfe6124719e4b828fb5c7cc28037712fc0279d7e9799c7d5108cb892b241194e78620c49a5ed9d772b4470848c27511927b9b99e87cf44a9abb045bf4b2f04dd624ace4e11db5d0d0b944677058c07fb57c62e92c1e471a69f8a22418791b3aabf6904b5b2d22b5df0ffe464e8a943ddb98dd4d0b1dff680691db418bd26a8f394bffa6442501b07c2bc7f5680e21c8a14903b4b143b94e2b99607e68"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, &(0x7f0000000340), 0x0, 0x0, '\x00', r6, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0x5, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000580), &(0x7f00000006c0)=[{0x1, 0x3, 0x0, 0x1}, {0x0, 0x3, 0x4, 0x6}, {0x0, 0x3, 0x10, 0xa}, {0x5, 0x2, 0x4, 0x5}], 0x10, 0x7}, 0x94) 16.075588915s ago: executing program 4 (id=1805): r0 = socket$inet6(0xa, 0x2, 0x3a) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) close(0x3) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r3}, &(0x7f0000000a80), &(0x7f0000000ac0)='%-5lx \x00'}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r5, @ANYBLOB="10100000000000000800002005000000e4031680a40001800c0007"], 0x40c}}, 0x0) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) (async) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0xb, @mcast2, 0x9}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 16.001134152s ago: executing program 4 (id=1806): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000008000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000000000) writev(r3, &(0x7f0000001340)=[{&(0x7f00000000c0)="e6af8112e3a6d7d1ae31549e895ae93f17482bd652d7dbbc0cb622799998d3209c7bec5e79862447307cf10ccb8dbc0713cfa6fc8527680ec187f620f5cca4a292298da008e37250ddb231e4e7e95d7a86eac3cd03b37abdbc4b3bcfa03eca9959bee5a1c5555364ad6e1a31f8a4c5cce4ad1f860b8f54dd1537089d35755f095633b8d9db2987d40ad3912364e2078519336d0cfe69cd01e0f40a85846e639bc18a5b9396fa3796bfdeba06de6ad19ac25654603aed15cba7a3", 0xba}, {&(0x7f0000000180)="25d5e85e2407982c584d9c93cd592b1a7f1a68eb2ce1951cbfce6fdcd85fff1c75c7163fb897d636552ab2ffdf0ebbdf7da5f806cd70abcefba4841afed3abf87c16e911faaeefc65b4e510f341d5fa2667261a6c6304c2792e929eebcfaf3e890850a781739f2e6ec72590f5bf27091633603f3c6e040c977dc8aede2eaecfba6d26df2129de6a5e536137c359eee150ac1de8474a7e120b48b2ccf331c9709a4f38145569d73664a1ccddec6189a289e78f66226c64f3162650b743661c3b2924496074349eb187e96b853b7377c189697b29640dea1c2a1c1da09", 0xdc}, {&(0x7f0000000280)="8d63dc97a425bfe7ab5e431059c191ec1e6c61ec6f8cfc669d8016a426d58e8d19ec5c07a3aa69a833fb997c1e29b1d296cda9cc95", 0x35}, {&(0x7f00000002c0)="4957e7ae1ba804e41f07ca1fdbdad882b45f6f3fb9e0a2e3b64dbbeee6af66253317187d995b95bfdb2fb528a8b5e44ffe0cb35c26bb434726071cadb9872c4ba67461e30e8fd26d08b01d92b5", 0x4d}, {&(0x7f0000000340)="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", 0x5db}], 0x5) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000680)=@buf={0x5, &(0x7f0000000600)="0c2280261a"}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/93, 0x5d}], 0x1, 0x0, 0x6c8) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) r8 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d03d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1bf4c727f30db4778beff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d571366", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde66", 0x3d}], 0x2, 0x0, 0x0, 0x806}], 0x1, 0x4004001) recvmmsg(r8, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000440)=""/234, 0xea}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000d00)}, 0x8}], 0x2, 0x2101, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) shutdown(r10, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r9) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000b40)={0xbc, r11, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a81d61d564192ce324c6925e4b3647ca04661450a1ae5f56"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4749ba232d0c6b3fefabac271c0f74af222e009937104c5c"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) 15.073299059s ago: executing program 4 (id=1807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xff1a, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="97ff2dbd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x40004046) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6(0xa, 0x2, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52) syz_genetlink_get_family_id$gtp(0x0, r0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000240)) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000600)={0x0, 'netdevsim0\x00', {}, 0x3}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010022bd70000000000068ac2c1e72148900000008000300", @ANYRES32=r9, @ANYBLOB="18001d8014000080060005003000000005000c0000000000"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000bc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x14c, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_IE={0xf5, 0x2a, [@random={0x8, 0x47, "c51688df04919224f2855ab786a0ac1ed050cb5d7e61daa606f99c234ee9b0efd22e22fe56b5b466f4d0cf4d35faaf40389cbf484e1e23e01fabe527f270b9104f2604f5d47d50"}, @peer_mgmt={0x75, 0x14, {0x0, 0x5, @void, @void, @val="73c57b868e534aac5fc0b2b5d13816bb"}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x40, 0x0, @device_a, 0x4, 0x1}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x55, {0x8, 0x8a, 0x8, "ab2df6818e07600187ec695f11fe54c1da7e43619d4d4d9b44d5724257e9087a707f8fcfa9b2248ae660bd8af21b0ad9d9b042b79ca0c85131ea65ae0123e083cae5404606aaf349968a2d4f00733eca30fe"}}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x2, 0x0, {0x5, 0xdf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x49d5b8f, 0x4b}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x6f}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x54}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 2.5692479s ago: executing program 32 (id=1792): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3ea}, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000040) listen(r0, 0x2) 2.416984848s ago: executing program 33 (id=1791): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r4, r3}, 0xc) bind$unix(r1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r5) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x9, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r7, &(0x7f00000000c0), &(0x7f0000000080)=@udp, 0x3}, 0x20) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x4, 0x8, 0x2, 0x1}}, @common=@mh={{0x28}, {"1505", 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x1000}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [0x0, 0x0, 0x1fe0000ff], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x8, 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) recvmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0xe1c0}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000b80)=""/196, 0xc4}, {&(0x7f0000000c80)=""/74, 0x4a}, {&(0x7f0000000d80)=""/213, 0xd5}, {&(0x7f0000000e80)=""/132, 0x84}, {&(0x7f0000000f40)=""/141, 0x8d}, {&(0x7f0000001040)=""/116, 0x74}, {&(0x7f0000001c80)=""/4083, 0xff3}], 0x7}, 0x1}, {{0x0, 0x0, 0x0}, 0x1c7}], 0x3, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x48040}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x20003}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r10) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r11) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r12, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 2.036878894s ago: executing program 34 (id=1794): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010010000000ffdbdf2500000000", @ANYRES32=r4, @ANYRES16=r2], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa0000000000000150300000a004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4(r6, 0x0, &(0x7f00000002c0), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf04000c000100dbdf251300000008000300", @ANYRES32=r9, @ANYBLOB="040013000a000600ffffffffffff00000600100080050000060012000700000004008100"], 0x40}}, 0x4040004) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="73fffffc", @ANYRES16=r8, @ANYBLOB="10002abd7000fedbdf25420000000c0099005a040000130000000a00060050505050505000000a00060050505050505000000a0006005ec42eb34f4500000a00060008021100000000000a00060050505050505000000a0006009db625ca01c400000a000600b0fbd78b35e40000"], 0x74}, 0x1, 0x0, 0x0, 0x40040}, 0x814) r10 = accept$alg(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d03d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1bf4c727f30db4778beff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d571366", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde66", 0x3d}], 0x2, 0x0, 0x0, 0x806}], 0x1, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r11, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x11}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc811}, 0x400c000) recvmmsg(r10, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000440)=""/234, 0xea}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000d00)}, 0x8}], 0x2, 0x2101, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r13 = openat$cgroup_devices(r12, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r13, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:* mw'], 0xa) 1.047660116s ago: executing program 35 (id=1804): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020442a300000000000000008112a000000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000001300)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001340)='Y', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}, 0x2}}, 0x10) r4 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000600)="4fffe3ab59ae73fbb0d00ec31d80de9be9d8dd980cbcaee82f55347b63a9208372b62ee9b4b41c9a5e65a22dd6fb36b716b8dae8093edd78f440a3b4f000fe67eb7fbd7ea83559114724cf7cb29f2df58d3244991cb8de1d63a1d25e697509edc9ef57c6ba6ed654aa1e66c1bcb123acde911a517cb36b3d4bf43516b2108ed815480c324f5064c59dc9cf", 0x8b}, {&(0x7f0000000800)="5c522807adac5e928247d13837679e7982a322931666054386e7195bb6d7d047c0a3265027c54ae834513726478c5b", 0x2f}], 0x2, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x28044854}], 0x1, 0x804) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/66, 0x96}, {&(0x7f0000000200)=""/61, 0x3d}], 0x2}, 0x151) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018110000", @ANYRES32=r4, @ANYRES8=r2], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x3c}, 0x94) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000003c0)={0x0, @local, @multicast2}, &(0x7f0000000400)=0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r8, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r8) sendfile(r8, r7, 0x0, 0xf03a0005) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), r9) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000c00)=ANY=[@ANYBLOB="3c000000ea2913a99f769c0665741995269391d81719cc1c15da0f9ee53a9cc6f67e822ace9406fdf061f92eda1d14c0bb863b41d0772b78443a1ddf2f170c1608bab56014ce38ad08f30fd73b3b4aadf5563f765cd91bf38be50f5d0b3cf42853a2ff5c9ac653b1c5dde98819b922ba3986889cac3a66253f23c957c245f1d236cca4dcf06b79fe671329106343f3713d7204e52850e6ce1b7ba029649937434bc8033d31b3420bb8ee305d29d890149edcff3e4c22da014b5c5ad6cbd7754bea1562a044a3a5a38176f5558f1bd127815b365213074d9fb95353368672c5051d2471", @ANYRES16=r10, @ANYBLOB="01002dbd7000ffdbdf2507000000140003002001000000000000000000000000000014000200"/53], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x2000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008b300000000000000600000085100000fbffffff9500000000000000c5aa013c6b98266678047060414e54b521a005c958ab2dae3c8ec6903aeae8b3e61f5dbfc2ca18b13cfe6124719e4b828fb5c7cc28037712fc0279d7e9799c7d5108cb892b241194e78620c49a5ed9d772b4470848c27511927b9b99e87cf44a9abb045bf4b2f04dd624ace4e11db5d0d0b944677058c07fb57c62e92c1e471a69f8a22418791b3aabf6904b5b2d22b5df0ffe464e8a943ddb98dd4d0b1dff680691db418bd26a8f394bffa6442501b07c2bc7f5680e21c8a14903b4b143b94e2b99607e68"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, &(0x7f0000000340), 0x0, 0x0, '\x00', r6, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0x5, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000580), &(0x7f00000006c0)=[{0x1, 0x3, 0x0, 0x1}, {0x0, 0x3, 0x4, 0x6}, {0x0, 0x3, 0x10, 0xa}, {0x5, 0x2, 0x4, 0x5}], 0x10, 0x7}, 0x94) 0s ago: executing program 36 (id=1807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xff1a, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000c2f9ee9e8707c0dd2db6a74946b0fb5e3b2043b879d04958a91b6c66f55f3e8b58eb0914dfe50d59637b70e8b94127a946822e8e218dbb771601835ab15f61dd8750fc566ee07c3036573513e7193b46ed37a3bc0aa92998c6b5e9fb55a7dee49718aca45fa02780e1b6c035aa1d4ec528f94866bd81a3e420d3daee866095ffbe02fdb460f1a35c35dc47f89e56f4e9fb28090e28f1d6af251fbf447da2ac8862d6e4b3c81ff62bc284b8ca22e40c73f51c411b91879247c2b9c4e697f3707580ec435bc5c903febc7238d3874a125fc8d5de5598d94725acae4cfab4acd0c400914588cc885133d5e71ef0a3038b933c5e72eb2a10c893459034e34daba4d773ebac9f7a4827d82f926f0b99036b8e0144e36f52370acfca1d78ea2ce3f5d0c697efb36e065dfc6937325ff86c989a6aa8ff33eb22bb6ad1ce77de11e696dd572d549b110321762a552a82c7961fd0aa451e8a5b0d7b867872af7b9fb2c0d35ddea6e27b8f8e163f780eb9cbf772df4c7891f216ece63e318c037ce693d2b4c02962f955ee4f4772adf8aa25acc38dd441570c23719a6df436b8fa7d0df6173b814ff35a873eacbf8b5a038832471bc599e17d8efebee14ea3b8eb64f2db13e9039a014fbcda3af9020779ce691c4f5f5f8dad12d10456f45b323a5c9bc5ff", @ANYRES16=r1, @ANYBLOB="97ff2dbd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x40004046) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6(0xa, 0x2, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52) syz_genetlink_get_family_id$gtp(0x0, r0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000240)) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000600)={0x0, 'netdevsim0\x00', {}, 0x3}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010022bd70000000000068ac2c1e72148900000008000300", @ANYRES32=r9, @ANYBLOB="18001d8014000080060005003000000005000c0000000000"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000bc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x14c, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_IE={0xf5, 0x2a, [@random={0x8, 0x47, "c51688df04919224f2855ab786a0ac1ed050cb5d7e61daa606f99c234ee9b0efd22e22fe56b5b466f4d0cf4d35faaf40389cbf484e1e23e01fabe527f270b9104f2604f5d47d50"}, @peer_mgmt={0x75, 0x14, {0x0, 0x5, @void, @void, @val="73c57b868e534aac5fc0b2b5d13816bb"}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x40, 0x0, @device_a, 0x4, 0x1}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x55, {0x8, 0x8a, 0x8, "ab2df6818e07600187ec695f11fe54c1da7e43619d4d4d9b44d5724257e9087a707f8fcfa9b2248ae660bd8af21b0ad9d9b042b79ca0c85131ea65ae0123e083cae5404606aaf349968a2d4f00733eca30fe"}}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x2, 0x0, {0x5, 0xdf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x49d5b8f, 0x4b}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x6f}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x54}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) kernel console output (not intermixed with test programs): ail_ex+0x40c/0x560 [ 208.729065][ T8982] should_failslab+0xa8/0x100 [ 208.729088][ T8982] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 208.729116][ T8982] ? local_lock_release+0x9c/0x160 [ 208.729146][ T8982] ? __alloc_skb+0x1d7/0x7a0 [ 208.729161][ T8982] ? __alloc_skb+0x1d7/0x7a0 [ 208.729186][ T8982] __alloc_skb+0x1d7/0x7a0 [ 208.729208][ T8982] netlink_sendmsg+0x5d4/0xb40 [ 208.729241][ T8982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.729268][ T8982] ? aa_sock_msg_perm+0xf1/0x1b0 [ 208.729297][ T8982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.729318][ T8982] sock_sendmsg_nosec+0x13a/0x180 [ 208.729347][ T8982] ____sys_sendmsg+0x54e/0x850 [ 208.729374][ T8982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.729405][ T8982] ? import_iovec+0x73/0xa0 [ 208.729430][ T8982] ___sys_sendmsg+0x2a5/0x360 [ 208.729450][ T8982] ? __lock_acquire+0x683/0x2cf0 [ 208.729476][ T8982] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.729534][ T8982] ? __fget_files+0x2a/0x420 [ 208.729553][ T8982] ? __fget_files+0x3a2/0x420 [ 208.729582][ T8982] __x64_sys_sendmsg+0x1b1/0x290 [ 208.729607][ T8982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.729644][ T8982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.729666][ T8982] do_syscall_64+0x174/0x580 [ 208.729685][ T8982] ? clear_bhb_loop+0x40/0x90 [ 208.729710][ T8982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.729729][ T8982] RIP: 0033:0x7f521939ce59 [ 208.729748][ T8982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.729763][ T8982] RSP: 002b:00007f521a2f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.729784][ T8982] RAX: ffffffffffffffda RBX: 00007f5219615fa0 RCX: 00007f521939ce59 [ 208.729798][ T8982] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 208.729814][ T8982] RBP: 00007f521a2f4090 R08: 0000000000000000 R09: 0000000000000000 [ 208.729826][ T8982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.729837][ T8982] R13: 00007f5219616038 R14: 00007f5219615fa0 R15: 00007ffdaa234f08 [ 208.729870][ T8982] [ 210.817563][ T9037] netlink: 68 bytes leftover after parsing attributes in process `syz.1.730'. [ 212.002734][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'. [ 212.257816][ T9081] syzkaller0: entered promiscuous mode [ 212.286603][ T9081] syzkaller0: entered allmulticast mode [ 212.483364][ T9087] sctp: [Deprecated]: syz.1.743 (pid 9087) Use of int in max_burst socket option. [ 212.483364][ T9087] Use struct sctp_assoc_value instead [ 212.504564][ T9091] dummy0: left promiscuous mode [ 212.571594][ T9095] netlink: 256 bytes leftover after parsing attributes in process `syz.1.743'. [ 212.583424][ T9091] gretap1: left allmulticast mode [ 212.597266][ T9091] gre1: left allmulticast mode [ 212.612737][ T9091] macvlan2: left allmulticast mode [ 212.644233][ T9091] bridge1: left allmulticast mode [ 212.694191][ T9095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.743'. [ 212.724070][ T9091] bond1: left promiscuous mode [ 212.745997][ T9091] veth3: left promiscuous mode [ 212.771608][ T9091] team1: left promiscuous mode [ 212.777155][ T9091] team1: left allmulticast mode [ 212.783594][ T9091] team2: left promiscuous mode [ 212.791686][ T9091] team2: left allmulticast mode [ 212.805132][ T7515] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.835197][ T7515] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.988920][ T9100] veth1: left allmulticast mode [ 213.019983][ T9100] veth1: left promiscuous mode [ 213.054358][ T7515] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.099045][ T7515] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.142023][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 213.270021][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 213.329364][ T7515] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.358425][ T7515] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.380800][ T9115] netlink: 14 bytes leftover after parsing attributes in process `syz.2.752'. [ 213.392876][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 213.419541][ T7515] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.449873][ T7515] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.723245][ T9124] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.768399][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 213.806770][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 214.148906][ T9139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.760'. [ 214.276277][ T9137] netlink: 36 bytes leftover after parsing attributes in process `syz.2.759'. [ 214.308586][ T9145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.359644][ T9145] IPv6: sit1: Disabled Multicast RS [ 214.393015][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.763'. [ 214.661998][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 214.697623][ T9153] netlink: 'syz.4.767': attribute type 16 has an invalid length. [ 214.722203][ T9150] netlink: 'syz.2.764': attribute type 30 has an invalid length. [ 214.728105][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 214.741768][ T9153] netlink: 156 bytes leftover after parsing attributes in process `syz.4.767'. [ 214.801423][ T5638] Bluetooth: hci4: link tx timeout [ 214.807230][ T5638] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 214.836754][ T9151] netlink: 'syz.2.764': attribute type 30 has an invalid length. [ 215.012935][ T7515] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.035374][ T7515] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.062029][ T9174] netlink: 44 bytes leftover after parsing attributes in process `syz.0.771'. [ 215.152428][ T7515] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.174218][ T7515] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.254499][ T9174] macvlan2: entered allmulticast mode [ 215.281826][ T9174] veth1: entered allmulticast mode [ 215.326876][ T9174] team0: Port device macvlan2 added [ 215.871606][ T9191] veth1: left allmulticast mode [ 215.885140][ T3381] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.942948][ T3381] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.976731][ T3381] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.026734][ T3381] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.171778][ T9210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.777'. [ 216.258109][ T9213] openvswitch: netlink: Key type 31 is not supported [ 216.482124][ T9219] netlink: 'syz.0.780': attribute type 6 has an invalid length. [ 216.831457][ T9230] nbd: must specify a size in bytes for the device [ 216.869522][ T5643] Bluetooth: hci4: command 0x0406 tx timeout [ 217.519077][ T5643] Bluetooth: hci2: command 0x0406 tx timeout [ 217.526970][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 217.526981][ T5638] Bluetooth: hci0: command 0x0406 tx timeout [ 217.541641][ T5642] Bluetooth: hci3: command 0x0406 tx timeout [ 218.465611][ T9259] lo speed is unknown, defaulting to 1000 [ 218.634790][ T9284] netlink: 'syz.1.794': attribute type 5 has an invalid length. [ 218.814397][ T9286] netlink: 'syz.4.793': attribute type 13 has an invalid length. [ 218.869854][ T9286] netlink: 'syz.4.793': attribute type 17 has an invalid length. [ 218.920358][ T9287] __nla_validate_parse: 4 callbacks suppressed [ 218.920378][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.793'. [ 218.968729][ T9284] geneve4: entered promiscuous mode [ 219.001079][ T9284] geneve4: entered allmulticast mode [ 219.788981][ T9286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.801868][ T9286] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.820014][ T9286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.928655][ T9286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.953962][ T9286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.059676][ T9286] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 220.121811][ T3381] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 37062 - 0 [ 220.134341][ T3381] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 37062 - 0 [ 220.152574][ T7515] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.162376][ T7515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.201444][ T7515] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.209924][ T7515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.436427][ T3381] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 37062 - 0 [ 220.449290][ T3381] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 37062 - 0 [ 220.842600][ T9319] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.047043][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.082826][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.556234][ T188] lo speed is unknown, defaulting to 1000 [ 221.575607][ T188] syz1: Port: 1 Link DOWN [ 221.662607][ T9342] Bluetooth: MGMT ver 1.23 [ 221.693963][ T7484] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.730665][ T7484] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 40486 - 0 [ 221.776778][ T7484] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 37062 - 0 [ 221.829470][ T7484] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.865943][ T7484] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 40486 - 0 [ 221.923590][ T7484] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 37062 - 0 [ 221.969812][ T7484] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.011960][ T7484] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 40486 - 0 [ 222.053309][ T7484] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 37062 - 0 [ 222.080862][ T5986] lo speed is unknown, defaulting to 1000 [ 222.341976][ T7484] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.364063][ T7484] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 40486 - 0 [ 222.411647][ T7484] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 37062 - 0 [ 223.742071][ T9376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.817'. [ 223.786553][ T9376] netlink: 252 bytes leftover after parsing attributes in process `syz.2.817'. [ 224.030940][ T9382] netlink: 32 bytes leftover after parsing attributes in process `syz.0.819'. [ 224.085206][ T9382] netlink: 'syz.0.819': attribute type 1 has an invalid length. [ 224.149478][ T9382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.314078][ T9391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.822'. [ 224.501216][ T9398] netlink: 332 bytes leftover after parsing attributes in process `syz.1.821'. [ 224.571113][ T9398] netlink: 'syz.1.821': attribute type 9 has an invalid length. [ 224.626660][ T9398] netlink: 108 bytes leftover after parsing attributes in process `syz.1.821'. [ 224.729606][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.824'. [ 224.738973][ T9407] netlink: 36 bytes leftover after parsing attributes in process `syz.0.823'. [ 224.808140][ T9398] netlink: 32 bytes leftover after parsing attributes in process `syz.1.821'. [ 224.839634][ T9407] netlink: 15 bytes leftover after parsing attributes in process `syz.0.823'. [ 225.522826][ T9406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.814181][ T9403] netlink: 'syz.3.824': attribute type 33 has an invalid length. [ 226.366967][ T9453] netlink: 128 bytes leftover after parsing attributes in process `syz.1.828'. [ 226.652212][ T9458] xt_ecn: cannot match TCP bits for non-tcp packets [ 226.701524][ T9458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.522426][ T9476] netlink: 'syz.4.834': attribute type 8 has an invalid length. [ 227.880871][ T9479] lo speed is unknown, defaulting to 1000 [ 227.913148][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 228.742706][ T9500] ip6tnl2: entered allmulticast mode [ 228.961577][ T9485] xfrm0 speed is unknown, defaulting to 1000 [ 229.064037][ T9485] xfrm0 speed is unknown, defaulting to 1000 [ 229.125322][ T9485] xfrm0 speed is unknown, defaulting to 1000 [ 229.970411][ T9517] bond3: option lacp_rate: invalid value (3) [ 229.987270][ T9517] bond3 (unregistering): Released all slaves [ 230.074055][ T9532] __nla_validate_parse: 3 callbacks suppressed [ 230.074077][ T9532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.849'. [ 230.113424][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 230.652224][ T9545] netlink: 9 bytes leftover after parsing attributes in process `syz.4.851'. [ 230.714324][ T9545] gretap0: entered promiscuous mode [ 231.076970][ T5986] xfrm0 speed is unknown, defaulting to 1000 [ 231.084450][ T9485] infiniband syz0: set down [ 231.100958][ T9485] infiniband syz0: added xfrm0 [ 231.132563][ T9562] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 231.139923][ T9485] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 231.140573][ T9559] netlink: 40 bytes leftover after parsing attributes in process `syz.3.854'. [ 231.154899][ T9485] infiniband syz0: Couldn't open port 1 [ 231.167270][ T9564] netlink: 'syz.2.853': attribute type 1 has an invalid length. [ 231.188778][ T9565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.855'. [ 231.198479][ T9485] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 231.198545][ T9485] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 231.241501][ T9564] netlink: 'syz.2.853': attribute type 2 has an invalid length. [ 231.263007][ T9485] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 231.560701][ T9485] RDS/IB: syz0: added [ 231.573179][ T9485] smc: adding ib device syz0 with port count 1 [ 231.588824][ T9485] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 231.671936][ T6005] xfrm0 speed is unknown, defaulting to 1000 [ 231.698308][ T9485] xfrm0 speed is unknown, defaulting to 1000 [ 232.111875][ T9586] sctp: [Deprecated]: syz.2.860 (pid 9586) Use of int in max_burst socket option. [ 232.111875][ T9586] Use struct sctp_assoc_value instead [ 232.193193][ T9578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.858'. [ 232.425937][ T9595] netlink: 36 bytes leftover after parsing attributes in process `syz.0.863'. [ 232.546178][ T9599] netlink: 'syz.0.863': attribute type 1 has an invalid length. [ 232.732242][ T9595] netlink: 44 bytes leftover after parsing attributes in process `syz.0.863'. [ 232.889359][ T9599] 8021q: adding VLAN 0 to HW filter on device bond5 [ 232.902479][ T9608] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 233.074350][ T9603] vlan3: entered promiscuous mode [ 233.096850][ T9603] bond5: entered promiscuous mode [ 233.107388][ T9603] vlan3: entered allmulticast mode [ 233.126770][ T9603] bond5: entered allmulticast mode [ 233.200143][ T9595] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 233.219215][ T9595] bond5: (slave batadv1): making interface the new active one [ 233.262768][ T9595] batadv1: entered promiscuous mode [ 233.286892][ T9595] batadv1: entered allmulticast mode [ 233.313921][ T9595] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 233.340330][ T9485] xfrm0 speed is unknown, defaulting to 1000 [ 234.010784][ T9628] bridge0: port 3(ipvlan2) entered blocking state [ 234.050642][ T9628] bridge0: port 3(ipvlan2) entered disabled state [ 234.080952][ T9628] ipvlan2: entered allmulticast mode [ 234.099750][ T9628] bridge0: entered allmulticast mode [ 234.128927][ T9628] ipvlan2: left allmulticast mode [ 234.148024][ T9628] bridge0: left allmulticast mode [ 234.466901][ T9485] xfrm0 speed is unknown, defaulting to 1000 [ 234.915210][ T9649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.873'. [ 235.731796][ T9485] xfrm0 speed is unknown, defaulting to 1000 [ 235.783022][ T9672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.876'. [ 236.810976][ T9485] xfrm0 speed is unknown, defaulting to 1000 [ 236.850006][ T9694] netlink: 'syz.0.881': attribute type 13 has an invalid length. [ 236.882747][ T9694] gretap0: refused to change device tx_queue_len [ 236.898787][ T9694] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 237.182465][ T9702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.208124][ T9703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.883'. [ 237.241134][ T9702] vlan4: entered promiscuous mode [ 237.249276][ T9702] ip6gretap0: entered promiscuous mode [ 237.692376][ T9709] block nbd2: server does not support multiple connections per device. [ 237.821421][ T9709] block nbd2: shutting down sockets [ 237.943541][ T9709] netlink: 'syz.4.885': attribute type 1 has an invalid length. [ 237.951982][ T1167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.973970][ T1167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.065893][ T1167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.112394][ T1167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.339162][ T9728] netlink: 40 bytes leftover after parsing attributes in process `syz.2.891'. [ 238.484673][ T9731] xt_CONNSECMARK: invalid mode: 254 [ 239.462889][ T9747] tipc: Started in network mode [ 239.476982][ T9747] tipc: Node identity 267233b95777, cluster identity 4711 [ 239.485647][ T9747] tipc: Enabled bearer , priority 0 [ 239.535249][ T9747] syzkaller0: entered promiscuous mode [ 239.541978][ T9747] syzkaller0: entered allmulticast mode [ 239.560564][ T9749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.898'. [ 239.573516][ T9747] tipc: Resetting bearer [ 239.592614][ T9747] netlink: 'syz.1.899': attribute type 2 has an invalid length. [ 239.653457][ T9747] : entered promiscuous mode [ 239.687622][ T9746] tipc: Resetting bearer [ 239.727540][ T9746] tipc: Disabling bearer [ 240.062453][ T9763] batadv_slave_0: entered promiscuous mode [ 240.080467][ T9762] batadv_slave_0: left promiscuous mode [ 242.563248][ T9837] netlink: 'syz.3.921': attribute type 1 has an invalid length. [ 242.781184][ T9837] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.817796][ T9842] bond3: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 242.830017][ T9842] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 242.846335][ T9847] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 242.856216][ T9843] bond3: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 242.876243][ T9847] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 242.885625][ T9843] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 243.113648][ T9853] netlink: 48 bytes leftover after parsing attributes in process `syz.4.926'. [ 243.306848][ T9857] netlink: 'syz.1.923': attribute type 3 has an invalid length. [ 243.464865][ T9861] sctp: [Deprecated]: syz.3.927 (pid 9861) Use of int in maxseg socket option. [ 243.464865][ T9861] Use struct sctp_assoc_value instead [ 243.634926][ T9871] netlink: 'syz.1.931': attribute type 11 has an invalid length. [ 243.896343][ T9880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.935'. [ 244.496012][ T9904] netlink: 80 bytes leftover after parsing attributes in process `syz.4.937'. [ 244.599213][ T9911] TCP: TCP_TX_DELAY enabled [ 244.656147][ T9908] netlink: 'syz.2.940': attribute type 1 has an invalid length. [ 244.688974][ T9908] netlink: 'syz.2.940': attribute type 2 has an invalid length. [ 245.032408][ T9899] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 245.102637][ T9899] bond6 (unregistering): Released all slaves [ 245.455444][ T9921] bond0: (slave bond_slave_1): Releasing backup interface [ 245.671014][ T9928] bond2: entered promiscuous mode [ 245.677007][ T9928] bond2: entered allmulticast mode [ 245.683440][ T9928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.892876][ T9968] netlink: 'syz.1.953': attribute type 1 has an invalid length. [ 246.968249][ T9968] netlink: 'syz.1.953': attribute type 2 has an invalid length. [ 246.975764][ T9969] netlink: 9 bytes leftover after parsing attributes in process `syz.1.953'. [ 247.037834][ T9969] 0·: renamed from hsr0 [ 247.141771][ T9969] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.206061][ T9969] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.226780][ T9969] 0·: entered allmulticast mode [ 247.244029][ T9969] hsr_slave_0: entered allmulticast mode [ 247.260000][ T9969] hsr_slave_1: entered allmulticast mode [ 247.270767][ T9969] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 247.702732][ T9994] netlink: 48 bytes leftover after parsing attributes in process `syz.2.959'. [ 247.734433][ T9994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.959'. [ 247.822345][ T9993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.959'. [ 248.030175][T10003] netlink: 'syz.3.963': attribute type 25 has an invalid length. [ 248.039601][T10003] netlink: 'syz.3.963': attribute type 3 has an invalid length. [ 248.054910][T10003] netlink: 132 bytes leftover after parsing attributes in process `syz.3.963'. [ 248.238647][T10013] netlink: 'syz.3.963': attribute type 23 has an invalid length. [ 248.292133][T10008] team0: Port device syz_tun added [ 248.661838][T10026] netlink: 72 bytes leftover after parsing attributes in process `syz.0.966'. [ 248.791985][T10031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.849260][T10033] netlink: 40 bytes leftover after parsing attributes in process `syz.4.968'. [ 248.876890][T10033] netlink: 40 bytes leftover after parsing attributes in process `syz.4.968'. [ 248.904743][T10035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.969'. [ 248.928627][T10038] netlink: 44 bytes leftover after parsing attributes in process `syz.4.968'. [ 248.954716][T10038] netlink: 44 bytes leftover after parsing attributes in process `syz.4.968'. [ 248.970183][T10033] netlink: 44 bytes leftover after parsing attributes in process `syz.4.968'. [ 248.987386][T10033] netlink: 44 bytes leftover after parsing attributes in process `syz.4.968'. [ 249.125808][T10044] netlink: 88 bytes leftover after parsing attributes in process `syz.1.971'. [ 249.159828][T10044] netlink: 'syz.1.971': attribute type 1 has an invalid length. [ 249.428166][T10052] vlan2: entered promiscuous mode [ 249.447573][T10052] batadv0: entered promiscuous mode [ 249.629622][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.976'. [ 249.975332][T10061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.328010][T10080] syzkaller1: entered promiscuous mode [ 250.358119][T10080] syzkaller1: entered allmulticast mode [ 250.448701][T10082] lo speed is unknown, defaulting to 1000 [ 250.639598][T10084] vlan2: entered allmulticast mode [ 250.673417][T10084] bond0: entered allmulticast mode [ 250.716754][T10084] bond_slave_0: entered allmulticast mode [ 250.788260][T10084] bond_slave_1: entered allmulticast mode [ 251.655543][ T6005] IPVS: starting estimator thread 0... [ 251.778933][T10123] IPVS: using max 30 ests per chain, 72000 per kthread [ 251.835154][T10127] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 252.042859][T10082] xfrm0 speed is unknown, defaulting to 1000 [ 252.254429][T10138] netlink: 'syz.4.994': attribute type 1 has an invalid length. [ 252.293656][T10137] syzkaller1: entered promiscuous mode [ 252.318831][T10137] syzkaller1: entered allmulticast mode [ 252.801572][T10140] syzkaller0: entered promiscuous mode [ 252.808322][T10140] syzkaller0: entered allmulticast mode [ 253.169166][T10156] netlink: 'syz.0.1000': attribute type 1 has an invalid length. [ 253.931075][T10169] netlink: 'syz.4.1002': attribute type 1 has an invalid length. [ 256.390382][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.702407][T10176] __nla_validate_parse: 4 callbacks suppressed [ 256.702428][T10176] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1004'. [ 256.904864][T10168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.913418][T10168] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.998783][T10168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.012094][T10168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.028870][T10168] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 257.048626][T10169] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 257.077760][T10170] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 257.119372][ T7522] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.137749][ T7522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.221047][ T7522] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.229435][ T7522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.499263][T10190] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1009'. [ 257.607366][T10193] syzkaller1: entered promiscuous mode [ 257.614657][T10193] syzkaller1: entered allmulticast mode [ 258.168158][T10202] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.510007][T10211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1016'. [ 258.561571][T10213] pim6reg: entered allmulticast mode [ 258.578922][T10211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1016'. [ 258.648204][T10211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1016'. [ 258.750361][T10234] netlink: 'syz.1.1018': attribute type 8 has an invalid length. [ 259.126015][T10248] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1021'. [ 259.212227][T10248] netlink: 'syz.1.1021': attribute type 2 has an invalid length. [ 259.230574][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1021'. [ 259.723924][T10261] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 260.202835][T10296] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1033'. [ 260.294586][T10286] lo speed is unknown, defaulting to 1000 [ 260.771747][ T7168] IPVS: starting estimator thread 0... [ 260.886596][T10313] IPVS: using max 27 ests per chain, 64800 per kthread [ 261.288357][T10286] xfrm0 speed is unknown, defaulting to 1000 [ 261.386350][T10329] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1048'. [ 261.546186][T10336] tun0: tun_chr_ioctl cmd 1074025675 [ 261.575711][T10336] tun0: persist enabled [ 261.595074][T10337] tun0: tun_chr_ioctl cmd 1074025675 [ 261.613307][T10337] tun0: persist enabled [ 261.725677][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1047'. [ 261.984144][T10349] bridge0: port 4(syz_tun) entered blocking state [ 261.994145][T10349] bridge0: port 4(syz_tun) entered disabled state [ 262.006279][T10349] syz_tun: entered promiscuous mode [ 263.184114][T10384] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1059'. [ 263.262284][T10387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.305762][T10389] syzkaller1: entered promiscuous mode [ 263.312253][T10389] syzkaller1: entered allmulticast mode [ 263.352114][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'. [ 264.176249][T10414] ip6gre2: entered allmulticast mode [ 265.108549][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 265.126342][T10444] openvswitch: netlink: Missing key (keys=40, expected=80) [ 265.352943][T10451] netlink: 'syz.0.1082': attribute type 2 has an invalid length. [ 268.335429][T10451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.670039][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 269.610805][ T7518] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 269.753382][T10525] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1101'. [ 269.793719][T10524] netlink: 'syz.4.1101': attribute type 1 has an invalid length. [ 270.095194][T10533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.182507][T10535] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1104'. [ 270.213231][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 270.273975][T10512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.535734][T10544] veth1_vlan: left promiscuous mode [ 270.639576][T10550] vlan2: entered promiscuous mode [ 271.223137][T10568] syzkaller0: entered promiscuous mode [ 271.240968][T10568] syzkaller0: entered allmulticast mode [ 271.368159][T10571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1114'. [ 271.985452][T10587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1117'. [ 272.188740][T10592] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 272.679471][T10592] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.812060][T10596] bond4: (slave ip6gretap1): making interface the new active one [ 272.822479][T10596] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 272.843789][T10601] tipc: Enabling of bearer rejected, failed to enable media [ 272.915954][T10604] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1120'. [ 273.232491][T10617] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1122'. [ 273.245715][T10614] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 273.257574][T10616] openvswitch: netlink: Message has 8 unknown bytes. [ 273.336117][T10614] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 273.383409][T10614] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 273.497095][T10629] netlink: 'syz.0.1126': attribute type 3 has an invalid length. [ 273.535150][T10629] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 273.598963][T10629] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1126'. [ 273.697428][T10622] lo speed is unknown, defaulting to 1000 [ 274.377727][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1129'. [ 274.934073][T10671] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1136'. [ 275.240355][T10681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1141'. [ 275.292794][T10689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1141'. [ 275.917425][T10709] netlink: 'syz.4.1143': attribute type 1 has an invalid length. [ 275.969945][T10709] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1143'. [ 276.041758][T10709] netlink: 'syz.4.1143': attribute type 1 has an invalid length. [ 276.109028][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 276.369710][T10695] syzkaller0: entered promiscuous mode [ 276.379643][T10695] syzkaller0: entered allmulticast mode [ 276.399321][T10622] xfrm0 speed is unknown, defaulting to 1000 [ 276.420372][T10616] lo speed is unknown, defaulting to 1000 [ 277.000749][T10714] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 277.020900][T10714] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 277.238770][T10714] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 277.255688][T10714] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 277.330868][T10714] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.337768][T10714] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 277.371752][T10714] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 277.378951][T10714] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 277.419722][T10714] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 277.427864][T10714] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 279.987600][T10616] xfrm0 speed is unknown, defaulting to 1000 [ 280.124763][T10731] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1151'. [ 280.186322][T10728] gretap0: left promiscuous mode [ 280.292116][T10738] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1153'. [ 280.560642][T10728] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 280.868464][T10745] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1155'. [ 280.884762][T10735] syzkaller1: entered promiscuous mode [ 280.906586][T10735] syzkaller1: entered allmulticast mode [ 281.332673][T10752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 281.493247][T10750] ip6tnl2: entered allmulticast mode [ 281.636474][ T57] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 281.691795][ T57] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 281.715213][ T188] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 282.151603][ T188] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 282.467294][ T188] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 282.692075][T10783] netlink: 'syz.0.1165': attribute type 1 has an invalid length. [ 282.802134][T10783] netlink: 'syz.0.1165': attribute type 2 has an invalid length. [ 283.000707][T10779] bridge0: port 4(syz_tun) entered blocking state [ 283.007588][T10779] bridge0: port 4(syz_tun) entered forwarding state [ 283.199352][T10793] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1167'. [ 283.219657][T10779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.324131][T10779] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.491001][T10779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.861392][T10779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.879037][T10779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.899010][T10779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.918150][T10779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.938138][T10779] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 284.066189][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.074843][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.116391][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.123835][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.316900][T10790] syzkaller1: entered promiscuous mode [ 284.324426][T10790] syzkaller1: entered allmulticast mode [ 284.535207][T10806] netlink: 'syz.0.1171': attribute type 15 has an invalid length. [ 285.329466][T10840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1179'. [ 285.429430][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 285.589928][T10833] geneve3: entered promiscuous mode [ 285.656371][ T7522] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.685918][ T7522] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.718246][ T7522] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.749432][ T7522] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.788315][T10850] tipc: Started in network mode [ 285.818943][T10850] tipc: Node identity 0200000000000000ff0f, cluster identity 4711 [ 285.915608][T10846] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 286.258079][T10857] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1184'. [ 286.324235][T10864] x_tables: duplicate entry at hook 1 [ 286.465742][T10860] syzkaller1: entered promiscuous mode [ 286.482528][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1186'. [ 286.489688][T10860] syzkaller1: entered allmulticast mode [ 286.598150][T10875] netlink: 'syz.1.1186': attribute type 1 has an invalid length. [ 286.796590][T10885] tipc: Enabled bearer , priority 0 [ 287.092730][T10885] bond4 (unregistering): Released all slaves [ 287.615820][T10869] tipc: Disabling bearer [ 288.135801][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1203'. [ 288.202008][T10937] syzkaller1: entered promiscuous mode [ 288.208525][T10937] syzkaller1: entered allmulticast mode [ 288.210954][T10942] netlink: 'syz.0.1204': attribute type 1 has an invalid length. [ 288.226883][T10942] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1204'. [ 288.240329][T10937] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1202'. [ 288.253809][T10942] netlink: 'syz.0.1204': attribute type 1 has an invalid length. [ 288.949413][T10969] syzkaller1: entered promiscuous mode [ 288.967070][T10969] syzkaller1: entered allmulticast mode [ 289.005427][T10972] netlink: 'syz.2.1213': attribute type 2 has an invalid length. [ 289.335005][T10980] lo speed is unknown, defaulting to 1000 [ 289.486071][T10958] netlink: 'syz.0.1206': attribute type 2 has an invalid length. [ 289.717092][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1217'. [ 289.754050][T10999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1217'. [ 290.475598][T11007] bond5: option min_links: invalid value (18446744073709551612) [ 290.542333][T11007] bond5: option min_links: allowed values 0 - 2147483647 [ 290.594952][T11007] bond5 (unregistering): Released all slaves [ 290.711719][T11028] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1222'. [ 290.761835][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1221'. [ 290.857697][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1221'. [ 290.891626][T10980] xfrm0 speed is unknown, defaulting to 1000 [ 291.961272][T11052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.044852][T11080] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1233'. [ 292.390645][T11096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1236'. [ 292.489744][T11099] netlink: 'syz.4.1237': attribute type 13 has an invalid length. [ 292.869405][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 293.175855][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 293.231531][T11132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1243'. [ 293.370007][T11141] xt_hashlimit: size too large, truncated to 1048576 [ 293.720346][T11154] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1247'. [ 294.042080][T11158] syzkaller0: entered promiscuous mode [ 294.067461][T11158] syzkaller0: entered allmulticast mode [ 294.731853][T11189] netlink: 'syz.2.1256': attribute type 4 has an invalid length. [ 294.942607][T11196] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1259'. [ 295.062014][T11194] tc action pedit offset must be on 32 bit boundaries [ 295.070940][T11194] tc action pedit offset must be on 32 bit boundaries [ 295.077923][T11194] tc action pedit offset must be on 32 bit boundaries [ 295.084812][T11194] tc action pedit offset must be on 32 bit boundaries [ 295.091603][T11194] tc action pedit offset must be on 32 bit boundaries [ 295.098414][T11194] tc action pedit offset must be on 32 bit boundaries [ 295.105262][T11194] tc action pedit offset must be on 32 bit boundaries [ 295.112363][T11194] tc action pedit offset must be on 32 bit boundaries [ 295.119248][T11194] tc action pedit offset must be on 32 bit boundaries [ 295.126129][T11194] tc action pedit offset must be on 32 bit boundaries [ 295.133000][T11194] TC_ACT_REPEAT abuse ? [ 295.266089][T11201] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.1260'. [ 295.393229][T11207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.465695][T11207] vlan4: entered promiscuous mode [ 295.478307][T11207] bridge0: entered promiscuous mode [ 295.999149][T11228] __nla_validate_parse: 4 callbacks suppressed [ 295.999168][T11228] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1270'. [ 296.059663][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 296.074301][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'. [ 296.092772][T11233] netlink: 'syz.0.1271': attribute type 29 has an invalid length. [ 296.102201][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'. [ 296.256860][T11238] veth3: entered allmulticast mode [ 296.603600][T11254] lo speed is unknown, defaulting to 1000 [ 296.631261][T11257] syzkaller0: entered promiscuous mode [ 296.654628][T11257] syzkaller0: entered allmulticast mode [ 296.856122][T11265] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1281'. [ 296.982794][T11270] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1283'. [ 297.177252][T11268] syzkaller0: entered promiscuous mode [ 297.213965][T11268] syzkaller0: entered allmulticast mode [ 297.258571][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1285'. [ 297.481688][T11254] xfrm0 speed is unknown, defaulting to 1000 [ 297.585327][T11286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1289'. [ 297.639478][T11286] syzkaller0: entered promiscuous mode [ 297.676789][T11286] syzkaller0: entered allmulticast mode [ 298.017095][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1294'. [ 298.133216][T11303] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1291'. [ 298.305950][T11320] ieee802154 phy1 wpan1: encryption failed: -22 [ 298.348775][T11315] lo speed is unknown, defaulting to 1000 [ 298.930049][T11328] syzkaller0: entered promiscuous mode [ 298.956948][T11328] syzkaller0: entered allmulticast mode [ 299.281823][T11315] xfrm0 speed is unknown, defaulting to 1000 [ 302.568586][T11348] __nla_validate_parse: 3 callbacks suppressed [ 302.568609][T11348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1302'. [ 302.709989][T11353] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1304'. [ 302.728332][T11353] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.737912][T11353] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.747555][T11353] bridge0: left allmulticast mode [ 303.138829][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 303.194029][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 303.893800][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1312'. [ 303.941562][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1316'. [ 304.003392][T11401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1316'. [ 304.231066][T11388] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1312'. [ 304.387999][T11396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.413850][T11396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.462708][T11416] netlink: 'syz.4.1317': attribute type 1 has an invalid length. [ 304.755556][T11409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.789406][T11409] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.869461][T11409] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 304.881018][T11409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.895812][T11409] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 304.943519][ T7484] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.950795][ T7484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.961723][ T7484] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.970038][ T7484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.369009][T11436] Bluetooth: MGMT ver 1.23 [ 305.573944][T11446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1326'. [ 305.686536][T11449] lo speed is unknown, defaulting to 1000 [ 305.818048][T11457] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1326'. [ 306.520744][T11449] xfrm0 speed is unknown, defaulting to 1000 [ 306.522591][T11458] lo speed is unknown, defaulting to 1000 [ 307.428761][T11458] xfrm0 speed is unknown, defaulting to 1000 [ 307.591267][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 307.843269][T11504] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 307.874030][T11504] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 307.905543][T11504] netlink: 'syz.0.1339': attribute type 2 has an invalid length. [ 307.957869][T11504] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 307.991180][T11505] __nla_validate_parse: 3 callbacks suppressed [ 307.991204][T11505] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1340'. [ 308.045556][T11505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.722706][T11525] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1342'. [ 308.836821][T11514] syzkaller0: entered promiscuous mode [ 308.844617][T11528] netlink: 'syz.1.1343': attribute type 1 has an invalid length. [ 308.854766][T11514] syzkaller0: entered allmulticast mode [ 308.912713][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 312.282215][T11532] sit0: entered promiscuous mode [ 312.293834][T11532] netlink: 'syz.0.1345': attribute type 1 has an invalid length. [ 312.318266][T11532] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1345'. [ 312.596822][T11549] bridge_slave_1: left allmulticast mode [ 312.606394][T11549] bridge_slave_1: left promiscuous mode [ 312.619184][T11549] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.820346][T11549] bridge_slave_0: left allmulticast mode [ 312.835213][T11549] bridge_slave_0: left promiscuous mode [ 312.845614][T11549] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.941636][T11558] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1350'. [ 313.259118][T11554] macsec1: entered promiscuous mode [ 313.271130][T11555] syzkaller1: entered promiscuous mode [ 313.276685][T11555] syzkaller1: entered allmulticast mode [ 316.127601][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1359'. [ 316.871505][T11616] netlink: 'syz.0.1366': attribute type 21 has an invalid length. [ 317.065007][T11618] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1367'. [ 317.077651][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1369'. [ 317.077911][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1369'. [ 317.078116][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1369'. [ 317.080768][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1369'. [ 317.170636][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1369'. [ 317.182037][T11632] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 317.182073][T11632] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1371'. [ 317.182092][T11632] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 317.245873][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1369'. [ 317.324145][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1369'. [ 317.718943][T11654] hsr_slave_0: left promiscuous mode [ 317.773791][T11654] hsr_slave_1: left promiscuous mode [ 317.845343][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.427380][T11682] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 318.449133][T11683] syzkaller1: entered promiscuous mode [ 318.455873][T11683] syzkaller1: entered allmulticast mode [ 320.342756][T11741] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 321.371130][T11786] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 321.401224][T11779] tipc: Started in network mode [ 321.426620][T11779] tipc: Node identity 8a757aeb0231, cluster identity 4711 [ 321.463477][T11779] tipc: Enabled bearer , priority 0 [ 321.527518][T11784] syzkaller0: entered promiscuous mode [ 321.555778][T11784] syzkaller0: entered allmulticast mode [ 321.598693][T11779] tipc: Resetting bearer [ 321.648700][T11772] tipc: Resetting bearer [ 321.725163][T11772] tipc: Disabling bearer [ 321.821852][T11794] __nla_validate_parse: 63 callbacks suppressed [ 321.821877][T11794] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1412'. [ 321.906496][T11795] syzkaller1: entered promiscuous mode [ 321.916694][T11795] syzkaller1: entered allmulticast mode [ 322.200271][T11808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1416'. [ 322.858146][T11831] syzkaller0: entered promiscuous mode [ 322.863885][T11831] syzkaller0: entered allmulticast mode [ 323.997564][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1424'. [ 324.027434][T11841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.095344][T11841] vlan4: entered promiscuous mode [ 324.437408][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'. [ 325.078656][T11867] sock: sock_set_timeout: `syz.2.1432' (pid 11867) tries to set negative timeout [ 325.372047][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'. [ 325.420625][T11876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.889046][T11881] xt_hashlimit: size too large, truncated to 1048576 [ 325.923401][T11881] xt_hashlimit: max too large, truncated to 1048576 [ 326.473123][T11899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1439'. [ 326.532767][T11896] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 327.390202][T11744] Set syz1 is full, maxelem 65536 reached [ 327.407673][T11909] syz_tun: left promiscuous mode [ 327.446850][T11909] bridge0: port 4(syz_tun) entered disabled state [ 327.529698][T11909] bond3: left allmulticast mode [ 327.540456][T11909] bond3: left promiscuous mode [ 327.561039][T11909] bridge0: port 3(bond3) entered disabled state [ 327.623097][T11917] netlink: 'syz.2.1444': attribute type 1 has an invalid length. [ 327.634842][T11909] bridge_slave_1: left allmulticast mode [ 327.667493][T11909] bridge_slave_1: left promiscuous mode [ 327.679245][T11909] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.705276][T11909] bridge_slave_0: left allmulticast mode [ 327.722032][T11909] bridge_slave_0: left promiscuous mode [ 327.732792][T11909] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.935083][T11917] bond5: entered promiscuous mode [ 327.947462][T11917] 8021q: adding VLAN 0 to HW filter on device bond5 [ 328.023436][T11918] 8021q: adding VLAN 0 to HW filter on device bond5 [ 328.040645][T11918] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 328.056250][T11918] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 328.077001][T11918] bond5: (slave xfrm1): making interface the new active one [ 328.092455][T11918] xfrm1: entered promiscuous mode [ 328.102533][T11918] bond5: (slave xfrm1): Enslaving as an active interface with an up link [ 328.273641][T11926] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 328.389261][T11933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1448'. [ 328.603729][T11941] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1449'. [ 328.686988][T11942] netlink: 'syz.0.1449': attribute type 1 has an invalid length. [ 328.862288][T11946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1451'. [ 329.012095][T11956] lo: Caught tx_queue_len zero misconfig [ 329.114662][T11963] netdevsim netdevsim0: Direct firmware load for á failed with error -2 [ 329.124138][T11963] netdevsim netdevsim0: Falling back to sysfs fallback for: á [ 329.419850][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 329.563599][T11976] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1458'. [ 329.820772][T11988] netdevsim netdevsim3 €Â: renamed from netdevsim0 [ 330.113899][T12003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1466'. [ 330.419860][T12012] lo speed is unknown, defaulting to 1000 [ 330.471448][T12014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1468'. [ 330.612808][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 330.830118][T12023] syzkaller0: entered promiscuous mode [ 330.835742][T12023] syzkaller0: entered allmulticast mode [ 330.863554][T12023] tc action pedit 'at' offset 2047 out of bounds [ 330.874496][T12023] tc action pedit 'at' offset 2047 out of bounds [ 330.880909][T12023] tc action pedit 'at' offset 2047 out of bounds [ 330.891579][T12023] tc action pedit 'at' offset 2047 out of bounds [ 330.898051][T12023] tc action pedit 'at' offset 2047 out of bounds [ 330.908601][T12023] tc action pedit 'at' offset 2047 out of bounds [ 330.915073][T12023] tc action pedit 'at' offset 2047 out of bounds [ 330.925644][T12023] tc action pedit 'at' offset 2047 out of bounds [ 330.932366][T12023] tc action pedit 'at' offset 2047 out of bounds [ 330.942846][T12023] tc action pedit 'at' offset 2047 out of bounds [ 330.949263][T12023] TC_ACT_REPEAT abuse ? [ 331.336438][T12012] xfrm0 speed is unknown, defaulting to 1000 [ 331.403903][T12037] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 331.417767][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 332.466382][T12048] lo speed is unknown, defaulting to 1000 [ 333.454583][T12048] xfrm0 speed is unknown, defaulting to 1000 [ 333.728507][T12058] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1480'. [ 334.858019][T12081] syz_tun: entered allmulticast mode [ 335.128131][T12077] syzkaller1: entered promiscuous mode [ 335.148170][T12077] syzkaller1: entered allmulticast mode [ 335.193867][T12087] macsec0: entered promiscuous mode [ 335.251921][T12082] macsec0: left promiscuous mode [ 335.642691][T12099] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1490'. [ 335.758241][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 335.774990][T12108] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1491'. [ 336.037810][T12101] syzkaller1: entered promiscuous mode [ 336.060151][T12101] syzkaller1: entered allmulticast mode [ 336.745215][T12122] syzkaller0: entered promiscuous mode [ 336.767980][T12122] syzkaller0: entered allmulticast mode [ 337.265741][T12149] team0: No ports can be present during mode change [ 337.401800][T12156] syzkaller1: entered promiscuous mode [ 337.415416][T12156] syzkaller1: entered allmulticast mode [ 337.448025][T12156] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1500'. [ 337.489742][T12159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1501'. [ 337.918018][T12168] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1504'. [ 338.618632][T12176] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1505'. [ 338.630576][T12177] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.1507'. [ 338.700017][T12180] ieee802154 phy1 wpan1: encryption failed: -22 [ 338.707142][T12180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1507'. [ 339.010413][T12186] netlink: 'syz.1.1510': attribute type 49 has an invalid length. [ 339.020462][T12187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.060819][T12187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.068691][T12188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1510'. [ 339.132134][T12193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.415351][T12197] team0: entered promiscuous mode [ 339.420464][T12197] team_slave_0: entered promiscuous mode [ 339.432408][T12197] team_slave_1: entered promiscuous mode [ 339.438419][T12197] syz_tun: entered promiscuous mode [ 339.632819][T12206] netlink: 'syz.3.1517': attribute type 1 has an invalid length. [ 339.645783][T12207] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1516'. [ 339.707376][T12206] bond4: entered promiscuous mode [ 339.718969][T12206] bond4: entered allmulticast mode [ 339.728737][T12206] 8021q: adding VLAN 0 to HW filter on device bond4 [ 339.925956][T12214] lo speed is unknown, defaulting to 1000 [ 340.250149][T12227] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.261485][T12227] bridge0: port 2(bridge_slave_1) entered listening state [ 340.268967][T12227] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.281112][T12227] bridge0: port 1(bridge_slave_0) entered listening state [ 340.342340][T12227] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 340.410326][T12214] xfrm0 speed is unknown, defaulting to 1000 [ 340.469271][T12230] xt_CT: You must specify a L4 protocol and not use inversions on it [ 340.501988][T12221] nbd2: detected capacity change from 0 to 63 [ 340.517002][T12226] block nbd2: NBD_DISCONNECT [ 340.550251][T12226] block nbd2: Disconnected due to user request. [ 340.600019][T12226] block nbd2: shutting down sockets [ 340.623869][T12232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1522'. [ 340.651470][ C0] blk_print_req_error: 94 callbacks suppressed [ 340.651493][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 340.673040][ C0] buffer_io_error: 138 callbacks suppressed [ 340.673060][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 340.691142][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 340.698961][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 340.711787][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 340.747116][ T1620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 340.756637][ T1620] Buffer I/O error on dev nbd2, logical block 0, async page read [ 340.764748][ T1620] Buffer I/O error on dev nbd2, logical block 1, async page read [ 340.775538][ T1620] Buffer I/O error on dev nbd2, logical block 2, async page read [ 340.783998][ T1620] Buffer I/O error on dev nbd2, logical block 3, async page read [ 340.793190][ T1620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 340.805768][ T1620] Buffer I/O error on dev nbd2, logical block 0, async page read [ 340.814142][ T1620] Buffer I/O error on dev nbd2, logical block 1, async page read [ 340.824464][ T1620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 340.834747][ T1620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 340.844987][ T1620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 340.855142][ T1620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 340.865204][ T1620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 340.875849][T11544] ldm_validate_partition_table(): Disk read failed. [ 340.883103][ T1620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.892709][ T1620] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.904790][T11544] Dev nbd2: unable to read RDB block 0 [ 340.915135][T11544] nbd2: unable to read partition table [ 340.950789][T11544] ldm_validate_partition_table(): Disk read failed. [ 340.965529][T11544] Dev nbd2: unable to read RDB block 0 [ 340.983852][T11544] nbd2: unable to read partition table [ 343.214392][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1532'. [ 343.677484][T12287] syzkaller1: entered promiscuous mode [ 343.700658][T12287] syzkaller1: entered allmulticast mode [ 343.766603][T12287] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1535'. [ 343.946125][T12297] netlink: 'syz.2.1539': attribute type 1 has an invalid length. [ 344.037189][T12297] bond6: entered promiscuous mode [ 344.042958][T12297] 8021q: adding VLAN 0 to HW filter on device bond6 [ 344.269269][T12297] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 344.720055][T12297] bond7 (unregistering): Released all slaves [ 344.966708][T12300] vlan4: entered allmulticast mode [ 344.985156][T12300] bond6: entered allmulticast mode [ 345.089235][T12322] bond6: (slave bridge3): making interface the new active one [ 345.096772][T12322] bridge3: entered promiscuous mode [ 345.138508][T12322] bridge3: entered allmulticast mode [ 345.147696][T12322] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 345.312381][T12337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1547'. [ 345.357573][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'. [ 345.617761][T12330] syzkaller0: entered promiscuous mode [ 345.635220][T12330] syzkaller0: entered allmulticast mode [ 345.657569][T12334] syzkaller1: entered promiscuous mode [ 345.674483][T12334] syzkaller1: entered allmulticast mode [ 345.777923][T12357] nbd2: detected capacity change from 0 to 63 [ 346.137522][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1550'. [ 346.164431][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1550'. [ 346.485875][ T4945] block nbd2: Receive control failed (result -104) [ 348.811339][T12368] syzkaller1: entered promiscuous mode [ 348.820491][T12368] syzkaller1: entered allmulticast mode [ 348.838570][T12368] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1551'. [ 348.891551][T12369] syzkaller0: entered promiscuous mode [ 348.906604][T12369] syzkaller0: entered allmulticast mode [ 348.920010][T12366] syzkaller0: entered promiscuous mode [ 348.932704][T12366] syzkaller0: entered allmulticast mode [ 349.036358][T12366] tipc: Enabled bearer , priority 0 [ 349.282941][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1556'. [ 349.297525][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1556'. [ 353.199454][T12366] tipc: Resetting bearer [ 353.212952][T12374] tipc: Resetting bearer [ 353.242339][T12374] tipc: Disabling bearer [ 353.284094][T12389] syzkaller0: entered promiscuous mode [ 353.292354][T12389] syzkaller0: entered allmulticast mode [ 353.303241][ T5998] tipc: Node number set to 1838379661 [ 353.570355][T12416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1561'. [ 353.587114][T12416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1561'. [ 353.618360][T12421] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1562'. [ 353.622714][T12416] openvswitch: netlink: Missing key (keys=40, expected=100) [ 353.627721][T12421] netlink: 'syz.1.1562': attribute type 1 has an invalid length. [ 353.713321][T12426] syzkaller0: entered promiscuous mode [ 353.719040][T12426] syzkaller0: entered allmulticast mode [ 353.760575][T12429] netlink: 'syz.4.1564': attribute type 1 has an invalid length. [ 353.816943][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 353.840251][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 353.931306][T12441] Unsupported ieee802154 address type: 0 [ 353.931710][T12436] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1566'. [ 354.044974][T12429] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.108332][T12432] bond3: (slave veth5): Enslaving as an active interface with a down link [ 354.139237][T12434] syzkaller1: entered promiscuous mode [ 354.156373][T12434] syzkaller1: entered allmulticast mode [ 354.188681][T12424] vlan3: entered allmulticast mode [ 354.193877][T12424] veth0_to_bond: entered allmulticast mode [ 354.233791][T12424] veth0_to_bond: entered promiscuous mode [ 354.243693][T12424] veth0_to_bond: left promiscuous mode [ 354.252658][T12424] bond3: (slave vlan3): making interface the new active one [ 354.262504][T12424] veth0_to_bond: entered promiscuous mode [ 354.269891][T12424] vlan3: entered promiscuous mode [ 354.276182][T12424] bond3: (slave vlan3): Enslaving as an active interface with an up link [ 354.313853][T12456] netlink: 'syz.2.1570': attribute type 12 has an invalid length. [ 354.344406][T12456] netlink: 'syz.2.1570': attribute type 1 has an invalid length. [ 354.523685][T12460] Cannot find set identified by id 0 to match [ 354.567351][T12460] netlink: 'syz.0.1572': attribute type 21 has an invalid length. [ 354.576992][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1572'. [ 354.701551][T12467] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1574'. [ 354.737180][T12467] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1574'. [ 355.168121][T12491] lo speed is unknown, defaulting to 1000 [ 355.389391][T12503] syzkaller1: entered promiscuous mode [ 355.406999][T12503] syzkaller1: entered allmulticast mode [ 355.433929][T12503] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1584'. [ 355.543407][T12509] ip6_tunnel: non-ECT from fe80:e800:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 355.592438][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 355.601015][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 355.621911][T12491] xfrm0 speed is unknown, defaulting to 1000 [ 355.803736][T12515] vlan4: entered allmulticast mode [ 355.809323][T12515] bond0: entered allmulticast mode [ 355.814780][T12515] bond_slave_0: entered allmulticast mode [ 355.822547][T12515] bond_slave_1: entered allmulticast mode [ 356.418881][T12522] bond9: entered promiscuous mode [ 356.466150][T12525] netlink: 'syz.2.1592': attribute type 5 has an invalid length. [ 356.501762][T12525] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 357.081295][T12540] syzkaller1: entered promiscuous mode [ 357.089474][T12540] syzkaller1: entered allmulticast mode [ 357.236011][T12543] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 358.594955][T12569] __nla_validate_parse: 8 callbacks suppressed [ 358.595013][T12569] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1604'. [ 358.641990][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'. [ 358.949632][T12586] syzkaller1: entered promiscuous mode [ 358.960260][T12586] syzkaller1: entered allmulticast mode [ 358.969921][T12586] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1608'. [ 360.452656][T12648] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1621'. [ 360.549520][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 360.787512][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1625'. [ 360.853219][T12660] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 361.609474][T12686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1634'. [ 362.345859][T12703] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1639'. [ 362.557471][ T5747] IPVS: starting estimator thread 0... [ 362.679723][T12708] IPVS: using max 29 ests per chain, 69600 per kthread [ 363.061487][T12721] smc: removing ib device syz1 [ 363.223332][T12726] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 363.307641][T12734] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1644'. [ 363.361489][T12734] FAULT_INJECTION: forcing a failure. [ 363.361489][T12734] name failslab, interval 1, probability 0, space 0, times 0 [ 363.395598][T12721] smbdirect: ib_dev[syz1] removed [ 363.417261][T12734] CPU: 1 UID: 0 PID: 12734 Comm: syz.0.1644 Not tainted syzkaller #0 PREEMPT(full) [ 363.417289][T12734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 363.417302][T12734] Call Trace: [ 363.417393][T12734] [ 363.417449][T12734] dump_stack_lvl+0xe8/0x150 [ 363.417582][T12734] should_fail_ex+0x40c/0x560 [ 363.417702][T12734] should_failslab+0xa8/0x100 [ 363.417756][T12734] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 363.417797][T12734] ? local_lock_release+0x9c/0x160 [ 363.417958][T12734] ? __alloc_skb+0x1d7/0x7a0 [ 363.417975][T12734] ? __alloc_skb+0x1d7/0x7a0 [ 363.418001][T12734] __alloc_skb+0x1d7/0x7a0 [ 363.418024][T12734] netlink_ack+0x136/0xb30 [ 363.418078][T12734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 363.418129][T12734] ? __pfx_ref_tracker_free+0x10/0x10 [ 363.418210][T12734] netlink_rcv_skb+0x2a4/0x4a0 [ 363.418234][T12734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 363.418263][T12734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 363.418304][T12734] ? down_read+0x2be/0x330 [ 363.418396][T12734] genl_rcv+0x28/0x40 [ 363.418422][T12734] netlink_unicast+0x7bb/0x940 [ 363.418455][T12734] netlink_sendmsg+0x813/0xb40 [ 363.418490][T12734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.418515][T12734] ? aa_sock_msg_perm+0xf1/0x1b0 [ 363.418602][T12734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.418623][T12734] sock_sendmsg_nosec+0x13a/0x180 [ 363.418669][T12734] ____sys_sendmsg+0x54e/0x850 [ 363.418691][T12734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.418717][T12734] ? import_iovec+0x73/0xa0 [ 363.418761][T12734] ___sys_sendmsg+0x2a5/0x360 [ 363.418777][T12734] ? __lock_acquire+0x683/0x2cf0 [ 363.418838][T12734] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.418887][T12734] ? __fget_files+0x2a/0x420 [ 363.418913][T12734] ? __fget_files+0x3a2/0x420 [ 363.418937][T12734] __x64_sys_sendmsg+0x1b1/0x290 [ 363.418957][T12734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.418991][T12734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.419028][T12734] do_syscall_64+0x174/0x580 [ 363.419060][T12734] ? trace_irq_disable+0x3b/0x140 [ 363.419090][T12734] ? clear_bhb_loop+0x40/0x90 [ 363.419110][T12734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.419125][T12734] RIP: 0033:0x7f521939ce59 [ 363.419154][T12734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.419185][T12734] RSP: 002b:00007f521a2f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.419220][T12734] RAX: ffffffffffffffda RBX: 00007f5219615fa0 RCX: 00007f521939ce59 [ 363.419231][T12734] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 363.419242][T12734] RBP: 00007f521a2f4090 R08: 0000000000000000 R09: 0000000000000000 [ 363.419251][T12734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.419260][T12734] R13: 00007f5219616038 R14: 00007f5219615fa0 R15: 00007ffdaa234f08 [ 363.419288][T12734] [ 363.741776][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.841187][T12744] tipc: New replicast peer: 255.255.255.255 [ 363.923760][T12744] tipc: Enabled bearer , priority 10 [ 364.130533][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1649'. [ 364.715585][T12771] xfrm0 speed is unknown, defaulting to 1000 [ 364.781654][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1654'. [ 364.828259][T12774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.878739][T12774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.006867][ T5747] tipc: Node number set to 4278255617 [ 365.504283][T12778] syzkaller0: entered promiscuous mode [ 365.528731][T12778] syzkaller0: entered allmulticast mode [ 365.586391][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'. [ 365.652829][T12772] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1653'. [ 365.728358][ T7496] vlan3: left promiscuous mode [ 365.999316][T12784] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1656'. [ 367.729085][ T57] tipc: Subscription rejected, illegal request [ 367.754594][T12827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1667'. [ 367.776866][T12827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1667'. [ 368.311521][T12837] xfrm0 speed is unknown, defaulting to 1000 [ 368.891108][ T5747] hsr0: entered promiscuous mode [ 368.980715][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1678'. [ 369.010456][T12864] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1678'. [ 369.108248][T12838] dvmrp0: entered allmulticast mode [ 369.226253][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'. [ 369.299630][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1680'. [ 369.338165][T12872] netlink: 'syz.4.1680': attribute type 12 has an invalid length. [ 369.363711][T12872] netlink: 'syz.4.1680': attribute type 11 has an invalid length. [ 370.133961][T12905] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1688'. [ 370.190865][T12905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.493793][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1693'. [ 370.973805][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.981107][ C0] bridge0: topology change detected, propagating [ 370.992858][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.000108][ C0] bridge0: topology change detected, propagating [ 371.781056][T12975] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1701'. [ 371.828317][T12982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.967427][T12986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1704'. [ 371.977908][T12986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1704'. [ 371.997909][T12989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1705'. [ 372.452394][T13005] hsr0: left promiscuous mode [ 372.707777][T13020] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 373.254884][T13040] xfrm0 speed is unknown, defaulting to 1000 [ 373.272843][T13042] netlink: 'syz.1.1721': attribute type 84 has an invalid length. [ 373.299302][T13043] dvmrp0: entered allmulticast mode [ 373.313603][T13042] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1721'. [ 373.457346][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1725'. [ 373.550602][T13055] netlink: 'syz.2.1723': attribute type 2 has an invalid length. [ 373.823446][ T30] audit: type=1804 audit(1782857708.386:4): pid=13063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1728" name="/newroot/319/memory.events" dev="tmpfs" ino=1661 res=1 errno=0 [ 373.883032][ T30] audit: type=1800 audit(1782857708.386:5): pid=13063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1728" name="memory.events" dev="tmpfs" ino=1661 res=0 errno=0 [ 373.905851][ T30] audit: type=1804 audit(1782857708.436:6): pid=13063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1728" name="/newroot/319/memory.events" dev="tmpfs" ino=1661 res=1 errno=0 [ 373.928710][ T30] audit: type=1800 audit(1782857708.436:7): pid=13063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1728" name="memory.events" dev="tmpfs" ino=1661 res=0 errno=0 [ 373.957429][ T30] audit: type=1804 audit(1782857708.436:8): pid=13066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1728" name="/newroot/319/memory.events" dev="tmpfs" ino=1661 res=1 errno=0 [ 374.266109][T13076] netlink: 'syz.0.1731': attribute type 13 has an invalid length. [ 374.299601][T13076] __nla_validate_parse: 4 callbacks suppressed [ 374.299622][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1731'. [ 374.853106][T13098] netlink: 'syz.3.1736': attribute type 4 has an invalid length. [ 375.731666][T13143] syzkaller0: entered promiscuous mode [ 375.752831][T13143] syzkaller0: entered allmulticast mode [ 376.070774][ T1632] block nbd2: Possible stuck request ffff888076384280: control (read@0,1024B). Runtime 30 seconds [ 376.088537][T13166] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1757'. [ 376.101178][T13161] syzkaller0: entered promiscuous mode [ 376.105176][ T1632] block nbd2: Possible stuck request ffff888076384440: control (read@1024,1024B). Runtime 30 seconds [ 376.107067][T13161] syzkaller0: entered allmulticast mode [ 376.121618][ T1632] block nbd2: Possible stuck request ffff888076384600: control (read@2048,1024B). Runtime 30 seconds [ 376.139326][ T1632] block nbd2: Possible stuck request ffff8880763847c0: control (read@3072,1024B). Runtime 30 seconds [ 376.254453][T13167] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 377.621169][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 377.627820][T13194] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1766'. [ 379.286014][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.221150][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1768'. [ 380.274962][T13209] netlink: 4704 bytes leftover after parsing attributes in process `syz.1.1767'. [ 380.305083][T13209] netlink: 4704 bytes leftover after parsing attributes in process `syz.1.1767'. [ 380.372836][T13208] xfrm0 speed is unknown, defaulting to 1000 [ 380.573913][T13219] tipc: Invalid UDP bearer configuration [ 380.573976][T13219] tipc: Enabling of bearer rejected, failed to enable media [ 380.658561][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1768'. [ 384.369234][T13216] xfrm0 speed is unknown, defaulting to 1000 [ 385.197061][T13271] xfrm0 speed is unknown, defaulting to 1000 [ 385.811878][T13286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1784'. [ 386.485243][T13292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1786'. [ 386.536825][T13292] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1786'. [ 386.783619][T13292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1786'. [ 386.802463][T13293] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1786'. [ 386.858908][T13305] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 387.057133][T13312] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 387.174864][T13316] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1794'. [ 387.860731][T13335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1798'. [ 387.871114][T13335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1798'. [ 387.913307][T13336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1798'. [ 387.922953][T13336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1798'. [ 388.052448][T13338] netlink: 'syz.1.1799': attribute type 11 has an invalid length. [ 388.301172][T13350] xfrm0 speed is unknown, defaulting to 1000 [ 389.507162][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 402.239179][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 402.254562][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 402.273763][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 402.290222][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 402.306154][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 402.342681][ T4945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 402.365398][ T4945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 402.378790][ T4945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 402.394883][ T4945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 402.405221][ T4945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 402.474922][ T4945] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 402.493537][ T4945] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 402.508121][ T4945] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 402.520853][ T4945] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 402.556884][ T4945] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 402.839502][ T4945] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 402.868218][ T4945] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 402.876921][ T4945] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 402.890119][ T4945] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 402.904943][ T4945] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 403.150664][T13370] xfrm0 speed is unknown, defaulting to 1000 [ 403.473843][T13375] xfrm0 speed is unknown, defaulting to 1000 [ 403.826878][ T4945] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 403.842968][ T4945] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 403.854898][ T4945] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 403.870279][ T4945] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 403.878915][ T4945] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 404.018409][T13389] xfrm0 speed is unknown, defaulting to 1000 [ 404.060830][T13370] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.068845][T13370] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.076743][T13370] bridge_slave_0: entered allmulticast mode [ 404.084697][T13370] bridge_slave_0: entered promiscuous mode [ 404.094916][T13370] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.102467][T13370] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.110127][T13370] bridge_slave_1: entered allmulticast mode [ 404.118618][T13370] bridge_slave_1: entered promiscuous mode [ 404.221522][T13370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.263590][T13370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.379630][T13370] team0: Port device team_slave_0 added [ 404.418072][T13370] team0: Port device team_slave_1 added [ 404.473701][ T5633] Bluetooth: hci5: command tx timeout [ 404.535609][T13370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.548539][T13370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.584550][T13370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.603600][T13370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.614363][T13370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.626566][ T5633] Bluetooth: hci6: command tx timeout [ 404.653774][T13370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.905381][ T4945] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 404.916095][T13370] hsr_slave_0: entered promiscuous mode [ 404.921765][ T4945] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 404.930017][ T4945] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 404.942497][T13370] hsr_slave_1: entered promiscuous mode [ 404.948408][ T4945] Bluetooth: hci7: command tx timeout [ 404.958529][ T4945] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 404.966722][ T4945] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 405.029695][T13410] xfrm0 speed is unknown, defaulting to 1000 [ 405.581855][T13375] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.596766][T13375] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.604167][T13375] bridge_slave_0: entered allmulticast mode [ 405.619440][T13375] bridge_slave_0: entered promiscuous mode [ 405.660117][T13375] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.688057][T13375] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.695475][T13375] bridge_slave_1: entered allmulticast mode [ 405.710730][T13375] bridge_slave_1: entered promiscuous mode [ 405.831155][T13375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.845570][T13375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.887411][T13428] xfrm0 speed is unknown, defaulting to 1000 [ 405.987497][ T5633] Bluetooth: hci8: command tx timeout [ 406.010076][T13375] team0: Port device team_slave_0 added [ 406.093558][T13375] team0: Port device team_slave_1 added [ 406.161383][ T1632] block nbd2: Possible stuck request ffff888076384280: control (read@0,1024B). Runtime 60 seconds [ 406.176557][ T1632] block nbd2: Possible stuck request ffff888076384440: control (read@1024,1024B). Runtime 60 seconds [ 406.187464][ T1632] block nbd2: Possible stuck request ffff888076384600: control (read@2048,1024B). Runtime 60 seconds [ 406.205679][ T1632] block nbd2: Possible stuck request ffff8880763847c0: control (read@3072,1024B). Runtime 60 seconds [ 406.297640][T13375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.307237][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.339788][T13375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.406249][T13375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.413573][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.440231][T13375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.480290][T13389] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.487806][T13389] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.496242][T13389] bridge_slave_0: entered allmulticast mode [ 406.505788][T13389] bridge_slave_0: entered promiscuous mode [ 406.539646][T13389] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.548643][T13389] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.551055][ T5633] Bluetooth: hci5: command tx timeout [ 406.557053][T13389] bridge_slave_1: entered allmulticast mode [ 406.568925][T13389] bridge_slave_1: entered promiscuous mode [ 406.706641][ T5633] Bluetooth: hci6: command tx timeout [ 406.720910][T13389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.738168][T13389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.753762][T13375] hsr_slave_0: entered promiscuous mode [ 406.761734][T13375] hsr_slave_1: entered promiscuous mode [ 406.768379][T13375] debugfs: 'hsr0' already exists in 'hsr' [ 406.776236][T13375] Cannot create hsr debugfs directory [ 406.841459][T13389] team0: Port device team_slave_0 added [ 406.901195][T13389] team0: Port device team_slave_1 added [ 407.026835][ T5633] Bluetooth: hci9: command tx timeout [ 407.027062][ T4945] Bluetooth: hci7: command tx timeout [ 407.063511][T13389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.070822][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.102991][T13389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.116158][T13389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.123365][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.156643][T13389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.373371][T13410] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.380925][T13410] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.388323][T13410] bridge_slave_0: entered allmulticast mode [ 407.395933][T13410] bridge_slave_0: entered promiscuous mode [ 407.433936][T13410] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.445270][T13410] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.452672][T13410] bridge_slave_1: entered allmulticast mode [ 407.462538][T13410] bridge_slave_1: entered promiscuous mode [ 407.515313][T13389] hsr_slave_0: entered promiscuous mode [ 407.522955][T13389] hsr_slave_1: entered promiscuous mode [ 407.529438][T13389] debugfs: 'hsr0' already exists in 'hsr' [ 407.535197][T13389] Cannot create hsr debugfs directory [ 407.631011][T13410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.695708][T13410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.809615][T13410] team0: Port device team_slave_0 added [ 407.824571][T13428] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.835408][T13428] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.843238][T13428] bridge_slave_0: entered allmulticast mode [ 407.851367][T13428] bridge_slave_0: entered promiscuous mode [ 407.860732][T13428] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.871259][T13428] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.878694][T13428] bridge_slave_1: entered allmulticast mode [ 407.887378][T13428] bridge_slave_1: entered promiscuous mode [ 407.896903][T13410] team0: Port device team_slave_1 added [ 408.045893][T13428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.059247][T13410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.068737][ T4945] Bluetooth: hci8: command tx timeout [ 408.075656][T13410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.102228][T13410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.135529][T13428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.175084][T13410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.183324][T13410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.210337][T13410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.301746][T13428] team0: Port device team_slave_0 added [ 408.312523][T13428] team0: Port device team_slave_1 added [ 408.379706][T13410] hsr_slave_0: entered promiscuous mode [ 408.386191][T13410] hsr_slave_1: entered promiscuous mode [ 408.393100][T13410] debugfs: 'hsr0' already exists in 'hsr' [ 408.399149][T13410] Cannot create hsr debugfs directory [ 408.431152][T13428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.442114][T13428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.473233][T13428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.489052][T13428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.496163][T13428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.523740][T13428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.637580][ T4945] Bluetooth: hci5: command tx timeout [ 408.639632][T13428] hsr_slave_0: entered promiscuous mode [ 408.651414][T13428] hsr_slave_1: entered promiscuous mode [ 408.659461][T13428] debugfs: 'hsr0' already exists in 'hsr' [ 408.665387][T13428] Cannot create hsr debugfs directory [ 408.786634][ T4945] Bluetooth: hci6: command tx timeout [ 409.106610][ T4945] Bluetooth: hci9: command tx timeout [ 409.113848][ T5633] Bluetooth: hci7: command tx timeout [ 410.146803][ T4945] Bluetooth: hci8: command tx timeout [ 410.706960][ T4945] Bluetooth: hci5: command tx timeout [ 410.866794][ T4945] Bluetooth: hci6: command tx timeout [ 411.186558][ T4945] Bluetooth: hci7: command tx timeout [ 411.186735][ T5633] Bluetooth: hci9: command tx timeout [ 412.095943][ T4995] udevd[4995]: worker [11544] /devices/virtual/block/nbd2 is taking a long time [ 412.226872][ T5633] Bluetooth: hci8: command tx timeout [ 413.266677][ T5633] Bluetooth: hci9: command tx timeout [ 436.227375][ T1632] block nbd2: Possible stuck request ffff888076384280: control (read@0,1024B). Runtime 90 seconds [ 436.241129][ T1632] block nbd2: Possible stuck request ffff888076384440: control (read@1024,1024B). Runtime 90 seconds [ 436.252124][ T1632] block nbd2: Possible stuck request ffff888076384600: control (read@2048,1024B). Runtime 90 seconds [ 436.266867][ T1632] block nbd2: Possible stuck request ffff8880763847c0: control (read@3072,1024B). Runtime 90 seconds [ 440.711900][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.880960][ T4945] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 462.898919][ T4945] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 462.910011][ T4945] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 462.919749][ T4945] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 462.928161][ T4945] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 463.004606][ T5633] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 463.018943][ T5633] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 463.030163][ T5633] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 463.042177][ T5633] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 463.050822][ T5633] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 463.125247][ T5633] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 463.140162][ T5633] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 463.157306][ T5633] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 463.172057][ T5633] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 463.188214][ T5633] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 463.638693][T13470] xfrm0 speed is unknown, defaulting to 1000 [ 463.965077][ T4945] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 463.979648][ T4945] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 463.991525][ T4945] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 464.003732][ T4945] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 464.014237][ T4945] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 464.104889][T13473] xfrm0 speed is unknown, defaulting to 1000 [ 464.489035][T13476] xfrm0 speed is unknown, defaulting to 1000 [ 464.792927][T13470] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.808355][T13470] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.816094][T13470] bridge_slave_0: entered allmulticast mode [ 464.830238][T13470] bridge_slave_0: entered promiscuous mode [ 464.873236][T13470] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.880611][T13470] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.890090][T13470] bridge_slave_1: entered allmulticast mode [ 464.898216][T13470] bridge_slave_1: entered promiscuous mode [ 464.924010][T13501] xfrm0 speed is unknown, defaulting to 1000 [ 465.000460][T13470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.014414][T13470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.028101][ T4945] Bluetooth: hci10: command tx timeout [ 465.106719][ T4945] Bluetooth: hci11: command tx timeout [ 465.157042][T13470] team0: Port device team_slave_0 added [ 465.239260][T13470] team0: Port device team_slave_1 added [ 465.270124][ T4945] Bluetooth: hci12: command tx timeout [ 465.405764][T13470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.413256][T13470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.439940][T13470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.467805][ T5633] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 465.478051][ T5633] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 465.505279][T13470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.512873][T13470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.539685][ T5633] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 465.541572][ T5633] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 465.548158][T13470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.562583][ T5633] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 465.782731][T13470] hsr_slave_0: entered promiscuous mode [ 465.794078][T13470] hsr_slave_1: entered promiscuous mode [ 465.800862][T13470] debugfs: 'hsr0' already exists in 'hsr' [ 465.811337][T13470] Cannot create hsr debugfs directory [ 465.952859][T13473] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.960110][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.983526][T13473] bridge_slave_0: entered allmulticast mode [ 465.994802][T13473] bridge_slave_0: entered promiscuous mode [ 466.005765][T13473] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.013219][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.022779][T13473] bridge_slave_1: entered allmulticast mode [ 466.030193][T13473] bridge_slave_1: entered promiscuous mode [ 466.066696][ T4945] Bluetooth: hci13: command tx timeout [ 466.194879][T13473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.211159][T13473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.342083][ T1632] block nbd2: Possible stuck request ffff888076384280: control (read@0,1024B). Runtime 120 seconds [ 466.353276][ T1632] block nbd2: Possible stuck request ffff888076384440: control (read@1024,1024B). Runtime 120 seconds [ 466.367924][ T1632] block nbd2: Possible stuck request ffff888076384600: control (read@2048,1024B). Runtime 120 seconds [ 466.379284][ T1632] block nbd2: Possible stuck request ffff8880763847c0: control (read@3072,1024B). Runtime 120 seconds [ 466.449236][T13473] team0: Port device team_slave_0 added [ 466.469949][T13524] xfrm0 speed is unknown, defaulting to 1000 [ 466.531938][T13473] team0: Port device team_slave_1 added [ 466.713375][T13473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.721755][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.748677][T13473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.786113][T13476] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.793754][T13476] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.801110][T13476] bridge_slave_0: entered allmulticast mode [ 466.808725][T13476] bridge_slave_0: entered promiscuous mode [ 466.835979][T13473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.843253][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.871409][T13473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.901603][T13476] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.910725][T13476] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.918937][T13476] bridge_slave_1: entered allmulticast mode [ 466.928212][T13476] bridge_slave_1: entered promiscuous mode [ 467.065811][T13476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.107181][ T4945] Bluetooth: hci10: command tx timeout [ 467.129375][T13476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.151588][T13501] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.159199][T13501] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.166999][T13501] bridge_slave_0: entered allmulticast mode [ 467.177197][T13501] bridge_slave_0: entered promiscuous mode [ 467.186761][ T4945] Bluetooth: hci11: command tx timeout [ 467.242928][T13501] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.250593][T13501] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.263228][T13501] bridge_slave_1: entered allmulticast mode [ 467.271860][T13501] bridge_slave_1: entered promiscuous mode [ 467.315943][T13473] hsr_slave_0: entered promiscuous mode [ 467.324714][T13473] hsr_slave_1: entered promiscuous mode [ 467.331231][T13473] debugfs: 'hsr0' already exists in 'hsr' [ 467.337110][T13473] Cannot create hsr debugfs directory [ 467.347020][ T4945] Bluetooth: hci12: command tx timeout [ 467.362040][T13476] team0: Port device team_slave_0 added [ 467.396886][T13501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.408406][T13476] team0: Port device team_slave_1 added [ 467.439566][T13501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.547742][T13476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.554937][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.586754][T13476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.602854][T13476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.609846][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.641014][T13476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.667239][ T4945] Bluetooth: hci14: command tx timeout [ 467.739760][T13501] team0: Port device team_slave_0 added [ 467.781098][T13501] team0: Port device team_slave_1 added [ 467.868575][T13501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.886046][T13501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.914893][T13501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.933393][T13501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.943259][T13501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.976076][T13501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.067208][T13476] hsr_slave_0: entered promiscuous mode [ 468.074761][T13476] hsr_slave_1: entered promiscuous mode [ 468.083056][T13476] debugfs: 'hsr0' already exists in 'hsr' [ 468.089508][T13476] Cannot create hsr debugfs directory [ 468.146918][ T4945] Bluetooth: hci13: command tx timeout [ 468.278888][T13501] hsr_slave_0: entered promiscuous mode [ 468.286053][T13501] hsr_slave_1: entered promiscuous mode [ 468.293498][T13501] debugfs: 'hsr0' already exists in 'hsr' [ 468.299565][T13501] Cannot create hsr debugfs directory [ 468.472333][T13524] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.479537][T13524] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.489836][T13524] bridge_slave_0: entered allmulticast mode [ 468.497745][T13524] bridge_slave_0: entered promiscuous mode [ 468.553743][T13524] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.561806][T13524] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.572168][T13524] bridge_slave_1: entered allmulticast mode [ 468.583006][T13524] bridge_slave_1: entered promiscuous mode [ 468.685444][T13524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.715250][T13524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.825596][T13524] team0: Port device team_slave_0 added [ 468.838140][T13524] team0: Port device team_slave_1 added [ 468.928417][T13524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.938082][T13524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.966025][T13524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.989593][T13524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.997577][T13524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.025965][T13524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.140897][T13524] hsr_slave_0: entered promiscuous mode [ 469.152172][T13524] hsr_slave_1: entered promiscuous mode [ 469.158661][T13524] debugfs: 'hsr0' already exists in 'hsr' [ 469.164443][T13524] Cannot create hsr debugfs directory [ 469.187680][ T4945] Bluetooth: hci10: command tx timeout [ 469.266683][ T4945] Bluetooth: hci11: command tx timeout [ 469.427193][ T4945] Bluetooth: hci12: command tx timeout [ 469.748527][ T4945] Bluetooth: hci14: command tx timeout [ 470.227521][ T4945] Bluetooth: hci13: command tx timeout [ 471.266827][ T4945] Bluetooth: hci10: command tx timeout [ 471.346886][ T4945] Bluetooth: hci11: command tx timeout [ 471.506700][ T4945] Bluetooth: hci12: command tx timeout [ 471.826819][ T4945] Bluetooth: hci14: command tx timeout [ 472.306658][ T4945] Bluetooth: hci13: command tx timeout [ 473.907154][ T4945] Bluetooth: hci14: command tx timeout [ 496.397004][ T1632] block nbd2: Possible stuck request ffff888076384280: control (read@0,1024B). Runtime 150 seconds [ 496.409275][ T1632] block nbd2: Possible stuck request ffff888076384440: control (read@1024,1024B). Runtime 150 seconds [ 496.420542][ T1632] block nbd2: Possible stuck request ffff888076384600: control (read@2048,1024B). Runtime 150 seconds [ 496.434945][ T1632] block nbd2: Possible stuck request ffff8880763847c0: control (read@3072,1024B). Runtime 150 seconds [ 502.154922][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.157028][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 523.528515][ T5644] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 523.547867][ T5644] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 523.576920][T13568] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 523.584921][T13568] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 523.599443][ T5642] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 523.614150][T13568] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 523.631962][T13568] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 523.631982][T13569] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 523.645014][T13568] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 523.648177][T13572] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 523.658561][T13568] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 523.671241][T13569] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 523.672366][T13569] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 523.677633][T13569] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 523.702399][ T5644] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 524.064745][ T5644] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 524.087680][ T5644] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 524.104494][ T5644] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 524.114483][ T5644] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 524.122600][ T5644] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 524.542549][T13564] xfrm0 speed is unknown, defaulting to 1000 [ 524.711483][ T5644] Bluetooth: hci6: command 0x0406 tx timeout [ 524.711919][ T5642] Bluetooth: hci5: command 0x0406 tx timeout [ 524.983095][T13566] xfrm0 speed is unknown, defaulting to 1000 [ 525.232382][T13570] xfrm0 speed is unknown, defaulting to 1000 [ 525.593684][T13584] xfrm0 speed is unknown, defaulting to 1000 [ 525.716918][T13564] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.724828][ T5633] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 525.742776][ T5633] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 525.750996][ T5642] Bluetooth: hci15: command tx timeout [ 525.751709][ T5642] Bluetooth: hci16: command tx timeout [ 525.767470][ T5633] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 525.779971][T13564] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.787757][ T5633] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 525.799153][ T5633] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 525.806577][T13564] bridge_slave_0: entered allmulticast mode [ 525.816106][T13564] bridge_slave_0: entered promiscuous mode [ 525.842321][ T5633] Bluetooth: hci17: command tx timeout [ 525.867188][T13564] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.880978][T13564] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.889720][T13564] bridge_slave_1: entered allmulticast mode [ 525.908416][T13564] bridge_slave_1: entered promiscuous mode [ 526.039584][T13564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.099295][T13564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.171180][T13564] team0: Port device team_slave_0 added [ 526.196883][T13564] team0: Port device team_slave_1 added [ 526.228693][ T4945] Bluetooth: hci18: command tx timeout [ 526.385665][T13564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.399761][T13564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.435136][T13564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.483399][ T1632] block nbd2: Possible stuck request ffff888076384280: control (read@0,1024B). Runtime 180 seconds [ 526.504764][ T1632] block nbd2: Possible stuck request ffff888076384440: control (read@1024,1024B). Runtime 180 seconds [ 526.521257][ T1632] block nbd2: Possible stuck request ffff888076384600: control (read@2048,1024B). Runtime 180 seconds [ 526.532374][ T1632] block nbd2: Possible stuck request ffff8880763847c0: control (read@3072,1024B). Runtime 180 seconds [ 526.570730][T13564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.577763][T13564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.611522][T13564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.759625][T13566] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.769647][T13566] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.777589][T13566] bridge_slave_0: entered allmulticast mode [ 526.789301][T13566] bridge_slave_0: entered promiscuous mode [ 526.799411][T13618] xfrm0 speed is unknown, defaulting to 1000 [ 526.880712][T13566] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.888285][T13566] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.895759][T13566] bridge_slave_1: entered allmulticast mode [ 526.905095][T13566] bridge_slave_1: entered promiscuous mode [ 527.013179][T13564] hsr_slave_0: entered promiscuous mode [ 527.020981][T13564] hsr_slave_1: entered promiscuous mode [ 527.030934][T13564] debugfs: 'hsr0' already exists in 'hsr' [ 527.037212][T13564] Cannot create hsr debugfs directory [ 527.120741][T13566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.132600][T13570] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.139783][T13570] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.149225][T13570] bridge_slave_0: entered allmulticast mode [ 527.156600][T13570] bridge_slave_0: entered promiscuous mode [ 527.201161][T13566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.213193][T13570] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.220480][T13570] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.230165][T13570] bridge_slave_1: entered allmulticast mode [ 527.238068][T13570] bridge_slave_1: entered promiscuous mode [ 527.406174][T13566] team0: Port device team_slave_0 added [ 527.422119][T13566] team0: Port device team_slave_1 added [ 527.456599][T13570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.476247][T13570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.518150][T13566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.525146][T13566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.557052][T13566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.604864][T13566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.612172][T13566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.639824][T13566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.711419][T13570] team0: Port device team_slave_0 added [ 527.777366][T13570] team0: Port device team_slave_1 added [ 527.829124][ T5644] Bluetooth: hci19: command tx timeout [ 527.829247][T13568] Bluetooth: hci16: command tx timeout [ 527.839740][T13569] Bluetooth: hci15: command tx timeout [ 527.906707][T13568] Bluetooth: hci17: command tx timeout [ 527.945201][T13570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.952485][T13570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.979004][T13570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.022698][T13566] hsr_slave_0: entered promiscuous mode [ 528.029559][T13566] hsr_slave_1: entered promiscuous mode [ 528.035938][T13566] debugfs: 'hsr0' already exists in 'hsr' [ 528.042326][T13566] Cannot create hsr debugfs directory [ 528.059253][T13570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.066805][T13570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.093373][T13570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.133399][T13584] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.140815][T13584] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.151012][T13584] bridge_slave_0: entered allmulticast mode [ 528.159955][T13584] bridge_slave_0: entered promiscuous mode [ 528.213244][T13584] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.229238][T13584] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.236687][T13584] bridge_slave_1: entered allmulticast mode [ 528.252767][T13584] bridge_slave_1: entered promiscuous mode [ 528.307245][T13568] Bluetooth: hci18: command tx timeout [ 528.381975][T13584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.462966][T13584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.555801][T13570] hsr_slave_0: entered promiscuous mode [ 528.564702][T13570] hsr_slave_1: entered promiscuous mode [ 528.571773][T13570] debugfs: 'hsr0' already exists in 'hsr' [ 528.577882][T13570] Cannot create hsr debugfs directory [ 528.640665][T13584] team0: Port device team_slave_0 added [ 528.700148][T13584] team0: Port device team_slave_1 added [ 528.793274][T13618] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.803317][T13618] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.811164][T13618] bridge_slave_0: entered allmulticast mode [ 528.819705][T13618] bridge_slave_0: entered promiscuous mode [ 528.841874][T13584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.852961][T13584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.882325][T13584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.897578][T13584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.904789][T13584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.931255][T13584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.951050][T13618] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.958446][T13618] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.965738][T13618] bridge_slave_1: entered allmulticast mode [ 528.973873][T13618] bridge_slave_1: entered promiscuous mode [ 529.054337][T13618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.078489][T13618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.193067][T13584] hsr_slave_0: entered promiscuous mode [ 529.199895][T13584] hsr_slave_1: entered promiscuous mode [ 529.207088][T13584] debugfs: 'hsr0' already exists in 'hsr' [ 529.212973][T13584] Cannot create hsr debugfs directory [ 529.245825][T13618] team0: Port device team_slave_0 added [ 529.256225][T13618] team0: Port device team_slave_1 added [ 529.369143][T13618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.376171][T13618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.402682][T13618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.445059][T13618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.452454][T13618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.478750][T13618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.656028][T13618] hsr_slave_0: entered promiscuous mode [ 529.664809][T13618] hsr_slave_1: entered promiscuous mode [ 529.672264][T13618] debugfs: 'hsr0' already exists in 'hsr' [ 529.682809][T13618] Cannot create hsr debugfs directory [ 529.835808][T13568] Bluetooth: hci7: command 0x0406 tx timeout [ 529.835845][T13569] Bluetooth: hci9: command 0x0406 tx timeout [ 529.846505][ T5644] Bluetooth: hci8: command 0x0406 tx timeout [ 529.907976][ T5633] Bluetooth: hci15: command tx timeout [ 529.911082][ T5642] Bluetooth: hci19: command tx timeout [ 529.915369][ T4945] Bluetooth: hci16: command tx timeout [ 529.988735][ T4945] Bluetooth: hci17: command tx timeout [ 530.401725][ T4945] Bluetooth: hci18: command tx timeout [ 531.986833][ T5633] Bluetooth: hci15: command tx timeout [ 531.987103][ T4945] Bluetooth: hci16: command tx timeout [ 532.001251][ T5633] Bluetooth: hci19: command tx timeout [ 532.066707][ T4945] Bluetooth: hci17: command tx timeout [ 532.466872][ T4945] Bluetooth: hci18: command tx timeout [ 534.066787][ T4945] Bluetooth: hci19: command tx timeout [ 534.166569][ T4995] udevd[4995]: worker [11544] /devices/virtual/block/nbd2 timeout; kill it [ 534.175318][ T4995] udevd[4995]: seq 17054 '/devices/virtual/block/nbd2' killed [ 537.347617][ T31] INFO: task syz.3.1791:13309 blocked for more than 143 seconds. [ 537.359127][ T31] Not tainted syzkaller #0 [ 537.365272][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 537.376339][ T31] task:syz.3.1791 state:D stack:23672 pid:13309 tgid:13304 ppid:5628 task_flags:0x400140 flags:0x00080002 [ 537.391412][ T31] Call Trace: [ 537.394991][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 537.398015][ T31] __schedule+0x17d9/0x56c0 [ 537.402627][ T31] ? __lock_acquire+0x683/0x2cf0 [ 537.407969][ T31] ? __lock_acquire+0x683/0x2cf0 [ 537.413055][ T31] ? __pfx___schedule+0x10/0x10 [ 537.418413][ T31] ? schedule+0x90/0x2b0 [ 537.422740][ T31] schedule+0x164/0x2b0 [ 537.428817][ T31] schedule_preempt_disabled+0x13/0x30 [ 537.444469][ T31] __mutex_lock+0x7bf/0x1550 [ 537.458992][ T31] ? __mutex_lock+0x5d4/0x1550 [ 537.482792][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 537.492533][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 537.499702][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 537.505117][ T31] ? radix_tree_lookup+0x240/0x290 [ 537.515073][ T31] genl_rcv_msg+0x10b/0x7a0 [ 537.520208][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.525436][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 537.532441][ T31] netlink_rcv_skb+0x226/0x4a0 [ 537.538210][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.543633][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.549971][ T31] ? down_read+0x2be/0x330 [ 537.554486][ T31] genl_rcv+0x28/0x40 [ 537.558759][ T31] netlink_unicast+0x7bb/0x940 [ 537.563675][ T31] netlink_sendmsg+0x813/0xb40 [ 537.569715][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.578054][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 537.583515][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.590932][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 537.596657][ T31] __sys_sendto+0x408/0x5a0 [ 537.601630][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 537.606916][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 537.612600][ T31] __x64_sys_sendto+0xde/0x100 [ 537.617579][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.624020][ T31] do_syscall_64+0x174/0x580 [ 537.628891][ T31] ? trace_irq_disable+0x3b/0x140 [ 537.633963][ T31] ? clear_bhb_loop+0x40/0x90 [ 537.638886][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.644821][ T31] RIP: 0033:0x7f4fa555d68e [ 537.649822][ T31] RSP: 002b:00007f4fa651ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 537.658497][ T31] RAX: ffffffffffffffda RBX: 00007f4fa651c6c0 RCX: 00007f4fa555d68e [ 537.667049][ T31] RDX: 000000000000001c RSI: 00007f4fa651b000 RDI: 0000000000000005 [ 537.675079][ T31] RBP: 0000000000000000 R08: 00007f4fa651af04 R09: 000000000000000c [ 537.683544][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 537.692054][ T31] R13: 00007f4fa651af58 R14: 00007f4fa651b000 R15: 0000000000000000 [ 537.700284][ T31] [ 537.703436][ T31] INFO: task syz.2.1792:13310 blocked for more than 143 seconds. [ 537.711654][ T31] Not tainted syzkaller #0 [ 537.716688][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 537.725374][ T31] task:syz.2.1792 state:D stack:25384 pid:13310 tgid:13308 ppid:5635 task_flags:0x480140 flags:0x00080002 [ 537.737917][ T31] Call Trace: [ 537.741283][ T31] [ 537.744263][ T31] __schedule+0x17d9/0x56c0 [ 537.749260][ T31] ? __lock_acquire+0x683/0x2cf0 [ 537.754348][ T31] ? __pfx___schedule+0x10/0x10 [ 537.759600][ T31] ? schedule+0x90/0x2b0 [ 537.764191][ T31] schedule+0x164/0x2b0 [ 537.768662][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 537.774980][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 537.781387][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 537.788580][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 537.794889][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 537.801193][ T31] nbd_set_size+0x454/0x680 [ 537.805831][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 537.811052][ T31] ? nla_memcpy+0x5b/0xc0 [ 537.815450][ T31] nbd_genl_reconfigure+0x7e9/0x1e80 [ 537.821194][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 537.827507][ T31] ? rcu_is_watching+0x15/0xb0 [ 537.832431][ T31] ? trace_kmalloc+0x2a/0xf0 [ 537.837347][ T31] ? __kmalloc_noprof+0x396/0x720 [ 537.842450][ T31] ? __nla_parse+0x40/0x60 [ 537.847240][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 537.853985][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 537.860913][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 537.866808][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 537.873017][ T31] ? __lock_acquire+0x683/0x2cf0 [ 537.878086][ T31] genl_rcv_msg+0x614/0x7a0 [ 537.882736][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.888022][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 537.893918][ T31] netlink_rcv_skb+0x226/0x4a0 [ 537.899146][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.904257][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.909925][ T31] ? down_read+0x2be/0x330 [ 537.914406][ T31] genl_rcv+0x28/0x40 [ 537.918494][ T31] netlink_unicast+0x7bb/0x940 [ 537.923330][ T31] netlink_sendmsg+0x813/0xb40 [ 537.928342][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.933717][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 537.938963][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.944338][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 537.949771][ T31] ____sys_sendmsg+0x54e/0x850 [ 537.954686][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.960204][ T31] ? import_iovec+0x73/0xa0 [ 537.964936][ T31] ___sys_sendmsg+0x2a5/0x360 [ 537.969823][ T31] ? __lock_acquire+0x683/0x2cf0 [ 537.974819][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.980315][ T31] ? futex_wake+0x51b/0x5f0 [ 537.984951][ T31] ? __fget_files+0x2a/0x420 [ 537.992479][ T31] ? __fget_files+0x3a2/0x420 [ 537.997385][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 538.002402][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 538.008228][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.017486][ T31] do_syscall_64+0x174/0x580 [ 538.022176][ T31] ? trace_irq_disable+0x3b/0x140 [ 538.027562][ T31] ? clear_bhb_loop+0x40/0x90 [ 538.032843][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.039047][ T31] RIP: 0033:0x7f1d0e79ce59 [ 538.043634][ T31] RSP: 002b:00007f1d0f5b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.052230][ T31] RAX: ffffffffffffffda RBX: 00007f1d0ea15fa0 RCX: 00007f1d0e79ce59 [ 538.060608][ T31] RDX: 0000000004000040 RSI: 00002000000006c0 RDI: 0000000000000005 [ 538.069077][ T31] RBP: 00007f1d0e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 538.077463][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.085621][ T31] R13: 00007f1d0ea16038 R14: 00007f1d0ea15fa0 R15: 00007ffed82abc78 [ 538.094067][ T31] [ 538.097368][ T31] INFO: task syz.0.1794:13316 blocked for more than 144 seconds. [ 538.105376][ T31] Not tainted syzkaller #0 [ 538.110745][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 538.120081][ T31] task:syz.0.1794 state:D stack:23144 pid:13316 tgid:13315 ppid:5630 task_flags:0x400140 flags:0x00080002 [ 538.132311][ T31] Call Trace: [ 538.135642][ T31] [ 538.138932][ T31] __schedule+0x17d9/0x56c0 [ 538.143569][ T31] ? __lock_acquire+0x683/0x2cf0 [ 538.148836][ T31] ? __lock_acquire+0x683/0x2cf0 [ 538.157409][ T31] ? __pfx___schedule+0x10/0x10 [ 538.162486][ T31] ? schedule+0x90/0x2b0 [ 538.167226][ T31] schedule+0x164/0x2b0 [ 538.171472][ T31] schedule_preempt_disabled+0x13/0x30 [ 538.177233][ T31] __mutex_lock+0x7bf/0x1550 [ 538.181867][ T31] ? __mutex_lock+0x5d4/0x1550 [ 538.186944][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 538.192091][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 538.197496][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 538.202680][ T31] ? radix_tree_lookup+0x240/0x290 [ 538.207983][ T31] genl_rcv_msg+0x10b/0x7a0 [ 538.212519][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.217767][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 538.223247][ T31] netlink_rcv_skb+0x226/0x4a0 [ 538.228471][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.233562][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 538.239073][ T31] ? down_read+0x2be/0x330 [ 538.243598][ T31] genl_rcv+0x28/0x40 [ 538.247849][ T31] netlink_unicast+0x7bb/0x940 [ 538.252997][ T31] netlink_sendmsg+0x813/0xb40 [ 538.258172][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.263530][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 538.269003][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.274968][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 538.280383][ T31] __sys_sendto+0x408/0x5a0 [ 538.285067][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 538.290553][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 538.296036][ T31] __x64_sys_sendto+0xde/0x100 [ 538.301474][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.308125][ T31] do_syscall_64+0x174/0x580 [ 538.313016][ T31] ? trace_irq_disable+0x3b/0x140 [ 538.318729][ T31] ? clear_bhb_loop+0x40/0x90 [ 538.323475][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.329589][ T31] RIP: 0033:0x7f521935d68e [ 538.334138][ T31] RSP: 002b:00007f521a2f2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 538.343402][ T31] RAX: ffffffffffffffda RBX: 00007f521a2f46c0 RCX: 00007f521935d68e [ 538.351695][ T31] RDX: 0000000000000020 RSI: 00007f521a2f3000 RDI: 000000000000000a [ 538.360428][ T31] RBP: 0000000000000000 R08: 00007f521a2f2f04 R09: 000000000000000c [ 538.368574][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 538.377144][ T31] R13: 00007f521a2f2f58 R14: 00007f521a2f3000 R15: 0000000000000000 [ 538.385425][ T31] [ 538.389766][ T31] INFO: task syz.0.1794:13317 blocked for more than 144 seconds. [ 538.399438][ T31] Not tainted syzkaller #0 [ 538.404624][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 538.413861][ T31] task:syz.0.1794 state:D stack:27872 pid:13317 tgid:13315 ppid:5630 task_flags:0x400140 flags:0x00080002 [ 538.426743][ T31] Call Trace: [ 538.430120][ T31] [ 538.433079][ T31] __schedule+0x17d9/0x56c0 [ 538.437754][ T31] ? __lock_acquire+0x683/0x2cf0 [ 538.442735][ T31] ? __lock_acquire+0x683/0x2cf0 [ 538.448190][ T31] ? __pfx___schedule+0x10/0x10 [ 538.453144][ T31] ? schedule+0x90/0x2b0 [ 538.457579][ T31] schedule+0x164/0x2b0 [ 538.461988][ T31] schedule_preempt_disabled+0x13/0x30 [ 538.467912][ T31] __mutex_lock+0x7bf/0x1550 [ 538.472789][ T31] ? __mutex_lock+0x5d4/0x1550 [ 538.477762][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 538.482530][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 538.487772][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 538.493420][ T31] ? radix_tree_lookup+0x240/0x290 [ 538.499556][ T31] genl_rcv_msg+0x10b/0x7a0 [ 538.504167][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.509620][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 538.515188][ T31] netlink_rcv_skb+0x226/0x4a0 [ 538.520352][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.525450][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 538.530970][ T31] ? down_read+0x2be/0x330 [ 538.535648][ T31] genl_rcv+0x28/0x40 [ 538.540312][ T31] netlink_unicast+0x7bb/0x940 [ 538.545561][ T31] netlink_sendmsg+0x813/0xb40 [ 538.552135][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.558104][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 538.563186][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.569821][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 538.575394][ T31] __sys_sendto+0x408/0x5a0 [ 538.580499][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 538.585853][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 538.591540][ T31] __x64_sys_sendto+0xde/0x100 [ 538.596668][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.603932][ T31] do_syscall_64+0x174/0x580 [ 538.608748][ T31] ? trace_irq_disable+0x3b/0x140 [ 538.614031][ T31] ? clear_bhb_loop+0x40/0x90 [ 538.619036][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.625159][ T31] RIP: 0033:0x7f521935d68e [ 538.630796][ T31] RSP: 002b:00007f521a2d1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 538.639420][ T31] RAX: ffffffffffffffda RBX: 00007f521a2d36c0 RCX: 00007f521935d68e [ 538.647988][ T31] RDX: 0000000000000020 RSI: 00007f521a2d2000 RDI: 000000000000000b [ 538.656078][ T31] RBP: 0000000000000000 R08: 00007f521a2d1f04 R09: 000000000000000c [ 538.664357][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 538.672873][ T31] R13: 00007f521a2d1f58 R14: 00007f521a2d2000 R15: 0000000000000000 [ 538.681030][ T31] [ 538.684119][ T31] INFO: task syz.1.1804:13351 blocked for more than 144 seconds. [ 538.692183][ T31] Not tainted syzkaller #0 [ 538.697594][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 538.706740][ T31] task:syz.1.1804 state:D stack:26672 pid:13351 tgid:13349 ppid:5629 task_flags:0x400140 flags:0x00080002 [ 538.718765][ T31] Call Trace: [ 538.722074][ T31] [ 538.725046][ T31] __schedule+0x17d9/0x56c0 [ 538.729854][ T31] ? __lock_acquire+0x683/0x2cf0 [ 538.734840][ T31] ? __lock_acquire+0x683/0x2cf0 [ 538.740650][ T31] ? unwind_next_frame+0x8f/0x2550 [ 538.746517][ T31] ? __pfx___schedule+0x10/0x10 [ 538.751898][ T31] ? schedule+0x90/0x2b0 [ 538.756296][ T31] schedule+0x164/0x2b0 [ 538.761150][ T31] schedule_preempt_disabled+0x13/0x30 [ 538.767013][ T31] __mutex_lock+0x7bf/0x1550 [ 538.772077][ T31] ? __mutex_lock+0x5d4/0x1550 [ 538.777547][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 538.783049][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 538.788327][ T31] ? stack_trace_save+0xa9/0x100 [ 538.793364][ T31] ? __lock_acquire+0x683/0x2cf0 [ 538.798558][ T31] ? radix_tree_lookup+0x240/0x290 [ 538.803820][ T31] genl_rcv_msg+0x10b/0x7a0 [ 538.808622][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.813778][ T31] ? __lock_acquire+0x683/0x2cf0 [ 538.818925][ T31] netlink_rcv_skb+0x226/0x4a0 [ 538.823727][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.829120][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 538.834745][ T31] ? down_read+0x2be/0x330 [ 538.839416][ T31] genl_rcv+0x28/0x40 [ 538.843448][ T31] netlink_unicast+0x7bb/0x940 [ 538.848399][ T31] netlink_sendmsg+0x813/0xb40 [ 538.853302][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.858775][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 538.864737][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.870285][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 538.875414][ T31] __sys_sendto+0x408/0x5a0 [ 538.880091][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 538.885243][ T31] ? kvm_sched_clock_read+0x11/0x20 [ 538.890843][ T31] __x64_sys_sendto+0xde/0x100 [ 538.895691][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.901914][ T31] do_syscall_64+0x174/0x580 [ 538.906660][ T31] ? clear_bhb_loop+0x40/0x90 [ 538.911404][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.917980][ T31] RIP: 0033:0x7fa8ee95d68e [ 538.922475][ T31] RSP: 002b:00007fa8ecbf4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 538.931176][ T31] RAX: ffffffffffffffda RBX: 00007fa8ecbf66c0 RCX: 00007fa8ee95d68e [ 538.939346][ T31] RDX: 0000000000000024 RSI: 00007fa8ecbf5000 RDI: 000000000000000c [ 538.947674][ T31] RBP: 0000000000000000 R08: 00007fa8ecbf4f04 R09: 000000000000000c [ 538.955814][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 538.964319][ T31] R13: 00007fa8ecbf4f58 R14: 00007fa8ecbf5000 R15: 0000000000000000 [ 538.972501][ T31] [ 538.975642][ T31] INFO: task syz.4.1807:13365 blocked for more than 144 seconds. [ 538.983601][ T31] Not tainted syzkaller #0 [ 538.989834][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.001007][ T31] task:syz.4.1807 state:D stack:27832 pid:13365 tgid:13364 ppid:5627 task_flags:0x400040 flags:0x00080002 [ 539.014766][ T31] Call Trace: [ 539.018192][ T31] [ 539.021253][ T31] __schedule+0x17d9/0x56c0 [ 539.026076][ T31] ? __lock_acquire+0x683/0x2cf0 [ 539.031728][ T31] ? __lock_acquire+0x683/0x2cf0 [ 539.037367][ T31] ? __pfx___schedule+0x10/0x10 [ 539.042460][ T31] ? schedule+0x90/0x2b0 [ 539.046899][ T31] schedule+0x164/0x2b0 [ 539.051108][ T31] schedule_preempt_disabled+0x13/0x30 [ 539.057046][ T31] __mutex_lock+0x7bf/0x1550 [ 539.061803][ T31] ? __mutex_lock+0x5d4/0x1550 [ 539.067079][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 539.071845][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 539.077010][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 539.082190][ T31] ? radix_tree_lookup+0x240/0x290 [ 539.087550][ T31] genl_rcv_msg+0x10b/0x7a0 [ 539.092145][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.097351][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 539.102797][ T31] netlink_rcv_skb+0x226/0x4a0 [ 539.107934][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.115837][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 539.121456][ T31] ? down_read+0x2be/0x330 [ 539.126066][ T31] genl_rcv+0x28/0x40 [ 539.130308][ T31] netlink_unicast+0x7bb/0x940 [ 539.135229][ T31] netlink_sendmsg+0x813/0xb40 [ 539.140256][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.145659][ T31] ? __sanitizer_cov_trace_const_cmp1+0x8/0x90 [ 539.152116][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 539.157572][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.163005][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 539.168342][ T31] __sys_sendto+0x408/0x5a0 [ 539.173044][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 539.178447][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 539.183886][ T31] __x64_sys_sendto+0xde/0x100 [ 539.189237][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.195369][ T31] do_syscall_64+0x174/0x580 [ 539.200338][ T31] ? trace_irq_disable+0x3b/0x140 [ 539.205444][ T31] ? clear_bhb_loop+0x40/0x90 [ 539.210352][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.216762][ T31] RIP: 0033:0x7fe71595d68e [ 539.221240][ T31] RSP: 002b:00007fe716844e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 539.229822][ T31] RAX: ffffffffffffffda RBX: 00007fe7168466c0 RCX: 00007fe71595d68e [ 539.237898][ T31] RDX: 0000000000000020 RSI: 00007fe716845000 RDI: 0000000000000004 [ 539.245984][ T31] RBP: 0000000000000000 R08: 00007fe716844f04 R09: 000000000000000c [ 539.254278][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 539.262678][ T31] R13: 00007fe716844f58 R14: 00007fe716845000 R15: 0000000000000000 [ 539.271023][ T31] [ 539.274323][ T31] INFO: task syz.4.1807:13366 blocked for more than 145 seconds. [ 539.282640][ T31] Not tainted syzkaller #0 [ 539.288170][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.297436][ T31] task:syz.4.1807 state:D stack:25576 pid:13366 tgid:13364 ppid:5627 task_flags:0x400140 flags:0x00080002 [ 539.310797][ T31] Call Trace: [ 539.314371][ T31] [ 539.317407][ T31] __schedule+0x17d9/0x56c0 [ 539.321956][ T31] ? __lock_acquire+0x683/0x2cf0 [ 539.327204][ T31] ? __lock_acquire+0x683/0x2cf0 [ 539.332275][ T31] ? __pfx___schedule+0x10/0x10 [ 539.337382][ T31] ? schedule+0x90/0x2b0 [ 539.341733][ T31] schedule+0x164/0x2b0 [ 539.345956][ T31] schedule_preempt_disabled+0x13/0x30 [ 539.351953][ T31] __mutex_lock+0x7bf/0x1550 [ 539.357038][ T31] ? __mutex_lock+0x5d4/0x1550 [ 539.362412][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 539.367249][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 539.372741][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 539.378283][ T31] ? radix_tree_lookup+0x240/0x290 [ 539.383541][ T31] genl_rcv_msg+0x10b/0x7a0 [ 539.388284][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.393636][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 539.399339][ T31] netlink_rcv_skb+0x226/0x4a0 [ 539.404242][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.409400][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 539.414917][ T31] ? down_read+0x2be/0x330 [ 539.419623][ T31] genl_rcv+0x28/0x40 [ 539.423712][ T31] netlink_unicast+0x7bb/0x940 [ 539.429009][ T31] netlink_sendmsg+0x813/0xb40 [ 539.433885][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.439467][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 539.444505][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.450136][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 539.455214][ T31] __sys_sendto+0x408/0x5a0 [ 539.459845][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 539.464903][ T31] ? errseq_sample+0x40/0x70 [ 539.469806][ T31] ? fd_install+0x94/0x3d0 [ 539.474354][ T31] ? fd_install+0x306/0x3d0 [ 539.479167][ T31] __x64_sys_sendto+0xde/0x100 [ 539.483982][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.490915][ T31] do_syscall_64+0x174/0x580 [ 539.495621][ T31] ? trace_irq_disable+0x3b/0x140 [ 539.500902][ T31] ? clear_bhb_loop+0x40/0x90 [ 539.505649][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.511863][ T31] RIP: 0033:0x7fe71595d68e [ 539.516476][ T31] RSP: 002b:00007fe716823e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 539.525339][ T31] RAX: ffffffffffffffda RBX: 00007fe7168256c0 RCX: 00007fe71595d68e [ 539.533661][ T31] RDX: 0000000000000020 RSI: 00007fe716824000 RDI: 000000000000000c [ 539.542127][ T31] RBP: 0000000000000000 R08: 00007fe716823f04 R09: 000000000000000c [ 539.550613][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 539.558797][ T31] R13: 00007fe716823f58 R14: 00007fe716824000 R15: 0000000000000000 [ 539.566943][ T31] [ 539.570112][ T31] INFO: task syz.4.1807:13367 blocked for more than 145 seconds. [ 539.578500][ T31] Not tainted syzkaller #0 [ 539.583738][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.592543][ T31] task:syz.4.1807 state:D stack:27240 pid:13367 tgid:13364 ppid:5627 task_flags:0x400040 flags:0x00080002 [ 539.604926][ T31] Call Trace: [ 539.608561][ T31] [ 539.611568][ T31] __schedule+0x17d9/0x56c0 [ 539.616119][ T31] ? __lock_acquire+0x683/0x2cf0 [ 539.621277][ T31] ? __lock_acquire+0x683/0x2cf0 [ 539.626276][ T31] ? __pfx___schedule+0x10/0x10 [ 539.632515][ T31] ? schedule+0x90/0x2b0 [ 539.637025][ T31] schedule+0x164/0x2b0 [ 539.641356][ T31] schedule_preempt_disabled+0x13/0x30 [ 539.647044][ T31] __mutex_lock+0x7bf/0x1550 [ 539.651657][ T31] ? __mutex_lock+0x5d4/0x1550 [ 539.656662][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 539.661370][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 539.666979][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 539.675734][ T31] ? radix_tree_lookup+0x240/0x290 [ 539.680968][ T31] genl_rcv_msg+0x10b/0x7a0 [ 539.685496][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.690968][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 539.696694][ T31] netlink_rcv_skb+0x226/0x4a0 [ 539.701558][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.706797][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 539.712120][ T31] ? down_read+0x2be/0x330 [ 539.716961][ T31] genl_rcv+0x28/0x40 [ 539.721000][ T31] netlink_unicast+0x7bb/0x940 [ 539.725785][ T31] netlink_sendmsg+0x813/0xb40 [ 539.730794][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.736483][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 539.741497][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.747011][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 539.752109][ T31] __sys_sendto+0x408/0x5a0 [ 539.756796][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 539.761876][ T31] ? errseq_sample+0x40/0x70 [ 539.766857][ T31] ? fd_install+0x94/0x3d0 [ 539.771375][ T31] ? fd_install+0x306/0x3d0 [ 539.776017][ T31] __x64_sys_sendto+0xde/0x100 [ 539.781399][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.787800][ T31] do_syscall_64+0x174/0x580 [ 539.792425][ T31] ? trace_irq_disable+0x3b/0x140 [ 539.797774][ T31] ? clear_bhb_loop+0x40/0x90 [ 539.802633][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.808770][ T31] RIP: 0033:0x7fe71595d68e [ 539.813312][ T31] RSP: 002b:00007fe716802e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 539.822023][ T31] RAX: ffffffffffffffda RBX: 00007fe7168046c0 RCX: 00007fe71595d68e [ 539.830231][ T31] RDX: 0000000000000020 RSI: 00007fe716803000 RDI: 000000000000000d [ 539.838542][ T31] RBP: 0000000000000000 R08: 00007fe716802f04 R09: 000000000000000c [ 539.846797][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 539.854862][ T31] R13: 00007fe716802f58 R14: 00007fe716803000 R15: 0000000000000000 [ 539.863355][ T31] [ 539.866543][ T31] [ 539.866543][ T31] Showing all locks held in the system: [ 539.874614][ T31] 1 lock held by khungtaskd/31: [ 539.879801][ T31] #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 539.890245][ T31] 2 locks held by getty/5383: [ 539.894986][ T31] #0: ffff8880362b70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 539.905047][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 539.915893][ T31] 2 locks held by kworker/u8:42/7518: [ 539.921407][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 539.931474][ T31] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 539.940732][ T31] 1 lock held by udevd/11544: [ 539.945503][ T31] #0: ffff8880679a8350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 539.955429][ T31] 2 locks held by syz.3.1791/13309: [ 539.960902][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 539.969255][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 539.978527][ T31] 6 locks held by syz.2.1792/13310: [ 539.983733][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 539.992527][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.001826][ T31] #2: ffff888054227260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 540.012529][ T31] #3: ffff88802a88a288 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 540.022168][ T31] #4: ffff88802a889c50 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 540.034627][ T31] #5: ffff88802a889c88 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 540.047215][ T31] 2 locks held by syz.0.1794/13316: [ 540.052478][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.061061][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.070391][ T31] 2 locks held by syz.0.1794/13317: [ 540.075629][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.084035][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.093378][ T31] 2 locks held by syz.1.1804/13351: [ 540.099958][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.108447][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.117588][ T31] 2 locks held by syz.4.1807/13365: [ 540.122821][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.131342][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.140593][ T31] 2 locks held by syz.4.1807/13366: [ 540.145827][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.154400][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.163629][ T31] 2 locks held by syz.4.1807/13367: [ 540.168987][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.177873][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.187143][ T31] 2 locks held by syz-executor/13370: [ 540.192582][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.201068][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.210457][ T31] 2 locks held by syz-executor/13375: [ 540.215975][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.224316][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.233567][ T31] 2 locks held by syz-executor/13389: [ 540.239243][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.247588][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.256657][ T31] 2 locks held by syz-executor/13410: [ 540.262200][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.270776][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.279989][ T31] 2 locks held by syz-executor/13428: [ 540.285394][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.294492][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.304042][ T31] 2 locks held by syz-executor/13470: [ 540.309576][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.318683][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.328108][ T31] 2 locks held by syz-executor/13473: [ 540.333599][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.342063][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.352227][ T31] 2 locks held by syz-executor/13476: [ 540.357859][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.366117][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.375232][ T31] 2 locks held by syz-executor/13501: [ 540.380848][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.389345][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.398800][ T31] 2 locks held by syz-executor/13524: [ 540.404224][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.412913][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.422327][ T31] 2 locks held by syz-executor/13564: [ 540.428258][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.436884][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.445916][ T31] 2 locks held by syz-executor/13566: [ 540.451417][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.459910][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.469700][ T31] 2 locks held by syz-executor/13570: [ 540.475165][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.483462][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.492815][ T31] 2 locks held by syz-executor/13584: [ 540.498410][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.507650][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.517034][ T31] 2 locks held by syz-executor/13618: [ 540.522581][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.530893][ T31] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 540.540198][ T31] [ 540.542574][ T31] ============================================= [ 540.542574][ T31] [ 540.552029][ T31] NMI backtrace for cpu 1 [ 540.552048][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 540.552070][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 540.552082][ T31] Call Trace: [ 540.552090][ T31] [ 540.552101][ T31] dump_stack_lvl+0xe8/0x150 [ 540.552143][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 540.552172][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 540.552221][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 540.552251][ T31] sys_info+0x135/0x170 [ 540.552273][ T31] watchdog+0xfd7/0x1030 [ 540.552310][ T31] ? watchdog+0x1c7/0x1030 [ 540.552346][ T31] kthread+0x388/0x470 [ 540.552368][ T31] ? __pfx_watchdog+0x10/0x10 [ 540.552391][ T31] ? __pfx_kthread+0x10/0x10 [ 540.552412][ T31] ret_from_fork+0x514/0xb70 [ 540.552459][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 540.552481][ T31] ? __switch_to+0xc89/0x1420 [ 540.552515][ T31] ? __pfx_kthread+0x10/0x10 [ 540.552538][ T31] ret_from_fork_asm+0x1a/0x30 [ 540.552581][ T31] [ 540.552589][ T31] Sending NMI from CPU 1 to CPUs 0: [ 540.665363][ C0] NMI backtrace for cpu 0 [ 540.665383][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 540.665402][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 540.665412][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 540.665442][ C0] Code: 8c 76 02 e9 53 04 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 c9 15 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 540.665474][ C0] RSP: 0018:ffffffff8e607de0 EFLAGS: 00000246 [ 540.665491][ C0] RAX: 0000000002d4fc33 RBX: ffffffff819ab370 RCX: 0000000080000001 [ 540.665503][ C0] RDX: 0000000000000001 RSI: ffffffff8dfe0307 RDI: ffffffff8c2a9f80 [ 540.665514][ C0] RBP: ffffffff8e607eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 540.665526][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 540.665538][ C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000 [ 540.665550][ C0] FS: 0000000000000000(0000) GS:ffff888125226000(0000) knlGS:0000000000000000 [ 540.665564][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 540.665575][ C0] CR2: 000055d417cfdee8 CR3: 000000000e746000 CR4: 00000000003526f0 [ 540.665592][ C0] Call Trace: [ 540.665601][ C0] [ 540.665608][ C0] default_idle+0x9/0x20 [ 540.665625][ C0] default_idle_call+0x72/0xb0 [ 540.665644][ C0] do_idle+0x2e0/0x540 [ 540.665663][ C0] ? __pfx_do_idle+0x10/0x10 [ 540.665683][ C0] cpu_startup_entry+0x43/0x60 [ 540.665700][ C0] rest_init+0x2de/0x300 [ 540.665739][ C0] start_kernel+0x392/0x3e0 [ 540.665874][ C0] x86_64_start_reservations+0x24/0x30 [ 540.665922][ C0] x86_64_start_kernel+0x137/0x1b0 [ 540.665944][ C0] common_startup_64+0x13e/0x157 [ 540.665975][ C0] [ 540.845403][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 540.852446][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 540.861833][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 540.871929][ T31] Call Trace: [ 540.875231][ T31] [ 540.878214][ T31] vpanic+0x56c/0xa60 [ 540.882351][ T31] ? __pfx___schedule+0x10/0x10 [ 540.887312][ T31] ? __pfx_vpanic+0x10/0x10 [ 540.891863][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 540.898292][ T31] panic+0xc5/0xd0 [ 540.902080][ T31] ? __pfx_panic+0x10/0x10 [ 540.906548][ T31] ? preempt_schedule_common+0x82/0xd0 [ 540.912220][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 540.917794][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 540.923999][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 540.930721][ T31] watchdog+0x1030/0x1030 [ 540.935113][ T31] ? watchdog+0x1c7/0x1030 [ 540.939672][ T31] kthread+0x388/0x470 [ 540.943785][ T31] ? __pfx_watchdog+0x10/0x10 [ 540.948695][ T31] ? __pfx_kthread+0x10/0x10 [ 540.953341][ T31] ret_from_fork+0x514/0xb70 [ 540.958062][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 540.963303][ T31] ? __switch_to+0xc89/0x1420 [ 540.968109][ T31] ? __pfx_kthread+0x10/0x10 [ 540.972794][ T31] ret_from_fork_asm+0x1a/0x30 [ 540.977592][ T31] [ 540.980998][ T31] Kernel Offset: disabled [ 540.985339][ T31] Rebooting in 86400 seconds..